last executing test programs: 4m54.879397911s ago: executing program 4 (id=37147): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1\xfeN\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xa4\x05\x00\x00\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cn[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16z\xa1\x85m\x1b\x19a\x10\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') recvmsg(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000500)=""/164, 0xa4}], 0x1}, 0x0) sendmsg$unix(r3, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)="f085", 0x2}], 0x1}, 0x200c8061) 4m54.631474736s ago: executing program 4 (id=37152): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$kcm(0x21, 0x7, 0xa) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0/file0\x00', 0x116) r0 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000005c0)=r0, 0x12) 4m52.773707584s ago: executing program 4 (id=37157): r0 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x16, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r4, &(0x7f0000000000), 0x2a979d) 4m52.255952474s ago: executing program 4 (id=37160): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2420, 0x0, 0x0, 0x3, 0x3, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYBLOB="3eca", @ANYRES8=r2], 0x9a) 4m51.354263647s ago: executing program 4 (id=37163): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r1 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r1, 0x1, 0xf, &(0x7f00000002c0), 0x4) 4m51.071287423s ago: executing program 4 (id=37165): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="3c475034440300006a68000800003cc5", @ANYRES16, @ANYBLOB='\x00'/14, @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="057d1795987146df000000000000007111"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0xe1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xf101}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="0004f678ec630000000066"], 0xd) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x8202) 4m35.901132257s ago: executing program 32 (id=37165): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="3c475034440300006a68000800003cc5", @ANYRES16, @ANYBLOB='\x00'/14, @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="057d1795987146df000000000000007111"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0xe1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xf101}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="0004f678ec630000000066"], 0xd) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x8202) 2m21.853432791s ago: executing program 2 (id=37297): perf_event_open(&(0x7f0000000000)={0x1, 0x3f, 0xc5, 0x4, 0x3, 0x7, 0x0, 0x80000001, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x201, 0x1, @perf_bp={0x0, 0x13}, 0x10424, 0x6, 0x9, 0x9, 0x3, 0x5, 0x9, 0x0, 0x7e, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0xf, 0x3, 0x2) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169b740ac03d7c64cee49ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d54f45a24effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f949c479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c7724e9e7e7babf61fe358ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261ed1d4515f46290d5c6579b63358fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f13dff7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe8799fe266e2ccac80fefe750151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa796ea7b156d19612297c63e774e940bfeb0de83f42fd565a299f741f9b00be4e8fcaf4ec85daceb16d9e8a438e3eb2556570e381b03d9e3c245728648ed9ff22dc963ed105c851c3481125b4c0c8a08a0c9930190902af109fc56b64cc952f298ebe73d7b18052e0147356228ca171b06274a871e2cf9609e0b4cdad36c3250bc8f56f95a6ed"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) socket$kcm(0x11, 0x2, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/uts\x00') r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b03d25a806f8c6394f90524fc60040f03", 0x17}], 0x1}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="934300005a0033d4"], 0xfe33) 2m21.512006761s ago: executing program 2 (id=37301): socket$kcm(0x2, 0x200000000000001, 0x106) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000d00)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x6d2, 0x0, 0x0, 0x100}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socket$kcm(0x28, 0x5, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0x20, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x900}, 0x60) 2m21.258979906s ago: executing program 2 (id=37303): r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0xfdef) recvmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000001500)=""/4098, 0x1002}], 0x1}, 0x101a0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x8000, 0x4, 0x2, 0x8, 0x0, 0x10001, 0xa, 0x0, 0xf}, 0x0, 0x5, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000300)=ANY=[], 0xfdef) 2m21.075830517s ago: executing program 2 (id=37305): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, r0, 0x0, 0x0, 0x0}, 0x30) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r1) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001e80)={&(0x7f0000000180)=@abs={0x1, 0x5c, 0x1}, 0x6e, 0x0}, 0x20000) close(r3) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r5, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0xffffffffffffffff, 0x1, 0x2000}}, 0x10, 0x0}, 0x0) 2m20.874682058s ago: executing program 2 (id=37306): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xd, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r3 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2m20.726953126s ago: executing program 2 (id=37307): socket$kcm(0x2, 0x200000000000001, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000001580)=ANY=[@ANYBLOB='\n\x00\x00\x00\t\x00\x00\x00\b\x00\x00\x00@'], 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetlb.1GB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) syz_clone(0x630c0700, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0x2ee0}], 0x13, 0x0, 0x0, 0x10000000}, 0x12cd) 2m5.461049227s ago: executing program 33 (id=37307): socket$kcm(0x2, 0x200000000000001, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000001580)=ANY=[@ANYBLOB='\n\x00\x00\x00\t\x00\x00\x00\b\x00\x00\x00@'], 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetlb.1GB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) syz_clone(0x630c0700, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0x2ee0}], 0x13, 0x0, 0x0, 0x10000000}, 0x12cd) 2m3.919003566s ago: executing program 3 (id=37362): socket$kcm(0x2, 0x200000000000001, 0x106) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000d00)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x6d2, 0x0, 0x0, 0x100}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socket$kcm(0x28, 0x5, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00\x00', 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) 2m3.534132949s ago: executing program 3 (id=37364): bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x2}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={0xffffffffffffffff, 0x27, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000540)='(pu&00\t||') close(0xffffffffffffffff) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x46, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x9c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 2m3.164451571s ago: executing program 3 (id=37367): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0xb701, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000540)=ANY=[], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000000000073113100000000008510000002000000b70000000000"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x4004743d, 0x5333578052521f3b) perf_event_open(&(0x7f0000000480)={0x1, 0xff6f, 0x0, 0x0, 0xfe, 0xfe, 0x0, 0x5c31, 0xc022e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x4, 0x18000, 0x0, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x8) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="b4000000000000006910690000000000040000000000000095000000000000003fa6a2b10e590818f3eed5207ca1"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) 2m2.83478197s ago: executing program 3 (id=37370): r0 = socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10c00, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)={r0}) sendmsg$inet(r3, &(0x7f0000000700)={&(0x7f0000000080)={0x2, 0x4e22, @broadcast}, 0x10, &(0x7f0000000680)=[{&(0x7f00000001c0)="8521adb28608e5e43af71e79045ff55bc2868427025ae09a0828de9b315a69518b870f01bfc177e1ad19cd9d881504e70dc3ddf926b22d4ad35b08fd512cc3e913009f7b974b35df78802c25d5af596d1cb4b9dbccbd0a1be3622f4b749a08062a73b11006f7fbc804d6e4d7d8c15d0df5e5762a29e5dde612e6d3da0049c78b18074d7f47519a9fcb988ec417b536694c841d8c0efd359b4c911b91fda580aedb21a24b3cf4b6615f0b845d1c86ca6cc32f6329db4b7be224cdf57288a7eb98c93003f75413cf1c8893e7d6c987d725226bde77a17fd4e1c3cf4cd34c2e9e220e5fe2c042e66b0083dd58131d586e37937783452f6b", 0xf6}, {&(0x7f0000000340)="82c3d65d63df29028660a3be2b89c021ed6bc02a8cab7fbd2bdf56e5171d7b21f819a05a0462ba0d6952a542e08f42e00caee0103ad68bc4fd06f8321e7434840ffc64407b6022db9f563f55665b25a8898b434b925180d9d44495d9ce7c3829a64659571a671f084230f9566155b370cae4b6d3c9f57ba0552ecb6462388143ecea39dd50a639087413a71504ec69884d68ad7e96454328b0226029d0595ff80552952197888f480b35901607ab34bbf36aec0de9fa7364edfb22b76c2d5aa611248a26", 0xc4}, {&(0x7f00000000c0)="22bc8f469d4cd234aac396e12e24e4645605ab52f3da74aab924e3342d7e1f7d2e894c1cde334a6df86aef12401ce6c3875e35d5e099137e02eeae67e8c337db5586bdb279f21967b4a90c90fd016da4f7cc3ff10b", 0x55}, {&(0x7f0000000440)="7153fb9bdc76f2319cd41c43971a05878869f5c74191953c64728262ce86c2389e9a75b05a50a5295a180fb5bc71b02229f6", 0x32}, {&(0x7f0000000540)="b13d61505dd22857f2198d4889b184c86c3f0307e1ba28d0d1ec", 0x1a}, {0x0}], 0x6}, 0x20000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xfe80, &(0x7f00000005c0)=[{&(0x7f0000000940)="2e00000010008188e6b62aa73772cc9f1ba1f8482e0000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0x0) 2m2.423709923s ago: executing program 3 (id=37374): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x81, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x5452, 0x110e22fff6) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000004000000000000000000000085000000bc000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=ANY=[@ANYBLOB="120000000200"], 0x48) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={0x0, 0x0}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x6000002c, &(0x7f0000000100)="b9ff03316844268cb89e14f088644ce0050000000000003c77fbac141416e000000144079ffeb18000440f050f00845002f2075f0039010586038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffe}, 0x2c) 2m2.264830872s ago: executing program 3 (id=37376): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b70000008100003bbfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071104200000000001d400500000000004704000001ed00000f030000000000002c440000000000006b0a00fe000000007303000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646c0200000000000000020000e35208b0bb0d2cd829e654400e2438ec649dc76128610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda82fc9c4d7ecc7a803bf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714f62ba7a54f0c33d39000d0bfed3a6a59ff616236fd8f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a107464ffffff7f00000000617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce963b0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06fa2e04cfe0649226c697d9e8eaade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00023ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88f15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40fc5d2f55ff07c53147de202ce517b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661061173f359e9052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff26b61aac8aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e26534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c3f000000315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336dfaa6d5d164301190bc2d4c04087729033342045804a28082abc3b47623028271722fb515f31e0dd115a292f1e68481a62cd15ea5460a29c60b1058fb7aa9bf4ee3cbe11b03711a15d730646b72d074dab1e8c429339f3460d324c17a4a8bfc7d7eab45bef00664d6dc82300000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000200)=r1) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 1m47.114170976s ago: executing program 34 (id=37376): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b70000008100003bbfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071104200000000001d400500000000004704000001ed00000f030000000000002c440000000000006b0a00fe000000007303000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646c0200000000000000020000e35208b0bb0d2cd829e654400e2438ec649dc76128610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda82fc9c4d7ecc7a803bf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714f62ba7a54f0c33d39000d0bfed3a6a59ff616236fd8f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a107464ffffff7f00000000617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce963b0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06fa2e04cfe0649226c697d9e8eaade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00023ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88f15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40fc5d2f55ff07c53147de202ce517b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661061173f359e9052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff26b61aac8aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e26534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c3f000000315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336dfaa6d5d164301190bc2d4c04087729033342045804a28082abc3b47623028271722fb515f31e0dd115a292f1e68481a62cd15ea5460a29c60b1058fb7aa9bf4ee3cbe11b03711a15d730646b72d074dab1e8c429339f3460d324c17a4a8bfc7d7eab45bef00664d6dc82300000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000200)=r1) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 14.326716335s ago: executing program 6 (id=37794): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x104007, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2c, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) r1 = socket$kcm(0x28, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000001140)={&(0x7f0000000c40)=@ll={0x11, 0x3, 0x0, 0x1, 0x1c, 0x6, @multicast}, 0x80, 0x0, 0x0, &(0x7f0000000e80)=ANY=[], 0x298}, 0x2404c8c0) 14.082324239s ago: executing program 6 (id=37795): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)) r0 = socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0, 0xa}, 0x69, 0x0, 0x0, 0x4, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000680)={@fallback=r1, 0x11, 0x0, 0x4, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$inet(r0, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}], 0x20}, 0x4c804) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000000000)={'batadv_slave_1\x00', @random="440000001000"}) 10.528921266s ago: executing program 6 (id=37796): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x11, 0x1, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0x19}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2a}, 0x94) r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000080), 0x24) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x21, 0x2, 0x2) close(r0) 10.241615503s ago: executing program 5 (id=37799): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x2020200, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffd}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) socket$kcm(0xa, 0x7, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xe, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3}, 0x48) socket$kcm(0x1e, 0x4, 0x0) 10.237980423s ago: executing program 6 (id=37812): r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x10}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r0}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000007"], &(0x7f00000001c0)=""/214, 0x2b, 0xd6, 0x1, 0x0, 0x10000, @value=r1}, 0x28) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) write$cgroup_int(r2, &(0x7f00000008c0), 0x12) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x2, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xbdf55c5ca5705acd}, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000380)={0x6, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000080), 0x8}, 0x0, 0x3ff, 0xfffffffe, 0x8, 0x1, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 9.817669407s ago: executing program 0 (id=37801): socket$kcm(0x2, 0x1000000000000002, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000080)=r2, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) socket$kcm(0x11, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 9.7623178s ago: executing program 6 (id=37803): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, r0, 0xc, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000000006c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)) 9.619915329s ago: executing program 7 (id=37806): socket$kcm(0x11, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x7, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0xe, 0x40, 0x40, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000140), &(0x7f00000002c0), 0x1003, r3}, 0x38) 9.015868184s ago: executing program 0 (id=37807): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee688892f", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 9.015506524s ago: executing program 5 (id=37808): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b28, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x10000002}]}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x6e, &(0x7f0000000000)=r3, 0x10) r4 = socket$kcm(0x2, 0x5, 0x84) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r4, 0x84, 0x7c, &(0x7f0000000000)=r5, 0x62) 8.75341879s ago: executing program 1 (id=37809): socket$kcm(0x2, 0x5, 0x84) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888847", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 8.75095081s ago: executing program 7 (id=37810): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') ioctl$TUNGETFEATURES(r2, 0x5452, &(0x7f00000013c0)) 8.613253858s ago: executing program 6 (id=37813): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x2, 0x20000}, 0x0, 0x0, 0x0, 0x6, 0x7, 0x1, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xf101}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="0004f678ec630000000066"], 0xd) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x8202) 8.425660528s ago: executing program 7 (id=37814): socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4000041) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c040, 0xac5d, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x2000000000, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) r0 = socket$kcm(0x2, 0x2, 0x73) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000300)={0x2, 0x0, @multicast2}, 0xf, &(0x7f0000000400)=[{&(0x7f0000000340)='+', 0x1}], 0x1}, 0x900000000000000) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000a40)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x9, 0x0, 0x4000000, 0x3108, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x2148, 0x0, 0xc2ba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x32ef20}, 0x0, 0x3, 0xffffffffffffffff, 0x0) 5.510184819s ago: executing program 0 (id=37815): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x11, 0x1, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0x19}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2a}, 0x94) r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000080), 0x24) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x21, 0x2, 0x2) close(r0) 5.509880668s ago: executing program 5 (id=37816): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x922000000001, 0x106) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x20, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888100", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.495398349s ago: executing program 7 (id=37817): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x4, 0x0, 0x0, 0x1000}, 0x94) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='cpu<=0||!') bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) 5.462323801s ago: executing program 1 (id=37818): r0 = socket$kcm(0xa, 0x2, 0x3a) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair(0x18, 0x0, 0x1, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @mcast2, 0x1a}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0) 5.096455393s ago: executing program 0 (id=37819): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x2020200, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffd}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) socket$kcm(0xa, 0x7, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xe, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3}, 0x48) socket$kcm(0x1e, 0x4, 0x0) 5.040301786s ago: executing program 1 (id=37820): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x104007, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2c, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) r1 = socket$kcm(0x28, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000001140)={&(0x7f0000000c40)=@ll={0x11, 0x3, 0x0, 0x1, 0x1c, 0x6, @multicast}, 0x80, 0x0, 0x0, &(0x7f0000000e80)=ANY=[], 0x298}, 0x2404c8c0) 2.257418138s ago: executing program 5 (id=37821): socket$kcm(0x2, 0x1000000000000002, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000080)=r2, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946e06bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112b0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01ac69398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23870140cde10e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ef6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b27663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b6214912a517810200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3800000000000000009c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fba6f421145c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488a0200000000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e4a59414329a7c7f2fad6bc871f5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561fe589e0d12969bc982ff3f0000006c0c6c747d9a1cc500bb89283a16ff10feea20bdac0000000000000000ca06f256a55591019465f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ee40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734837ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a6d072034cecc457776c5fa1f33b0203c07052c6bc314b0ac5c63bc2083c9cda0b7480e0b17854ffcc76176ce266bc698f7921b8afe798a7a5ed33ab0374455ee368fda99a0e681bf9426831b193395cb01a7332a50aac841cb7d48a1768a7640a9820631ba775a3dc4e97f7fda840bcdd3afaa0d7c3c229de4f0f4ac4d04f1a4e52e38325ca2e5f1f9caaa7234053eca09ec3c8c16940bc3edfb2e016f355391c0e7"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) socket$kcm(0x11, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 2.243073239s ago: executing program 7 (id=37822): socket$kcm(0x2, 0x5, 0x84) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0xf, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee688884746", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.174040803s ago: executing program 0 (id=37823): socket$kcm(0x11, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x7, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0xe, 0x40, 0x40, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000140), &(0x7f00000002c0), 0x1003, r3}, 0x38) 2.173648733s ago: executing program 1 (id=37824): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, r0, 0xc, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000000006c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)) 933.966835ms ago: executing program 7 (id=37825): r0 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r0, &(0x7f00000024c0)={&(0x7f00000000c0)={0x2, 0x0, @private=0xa014101}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000100)="a7", 0x1}], 0x1}, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x20025, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000faffffff000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/13], 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000080)='U', 0x1}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x7c, &(0x7f0000000000), 0xc) 854.55821ms ago: executing program 5 (id=37826): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0x400c78, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, @perf_config_ext={0x1f4, 0x100000000000000}, 0x800, 0xc8, 0x8, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x4}, 0x0, 0x4, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9f0201001800000000000000180000c890713df3849acc"], &(0x7f0000000340)=""/136, 0x32, 0x88, 0x1}, 0x28) close(r1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e488ca"], 0xfdef) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xe, 0x4, 0x4, 0x20002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) r2 = perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x9, 0x1, 0x1, 0x9, 0x0, 0x200, 0x82042, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000000), 0xc}, 0x49b0, 0x5, 0x3ff, 0x2, 0x0, 0x8, 0x1, 0x0, 0x5, 0x0, 0xfffffffffffffff9}, 0xffffffffffffffff, 0xf, r0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) 853.24195ms ago: executing program 1 (id=37836): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, r0, 0xc, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000000006c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)) 1.22469ms ago: executing program 1 (id=37827): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee688892f", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 922.08µs ago: executing program 5 (id=37828): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r0 = socket$kcm(0xa, 0x922000000003, 0x11) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000120000"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmsg$kcm(r0, &(0x7f00000016c0)={&(0x7f0000001000)=@l2tp6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f0000001640)=[{&(0x7f0000001100)=""/178, 0xb2}, {&(0x7f00000011c0)=""/112, 0x70}], 0x2}, 0x20022) 0s ago: executing program 0 (id=37838): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x11, 0x1, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0x19}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2a}, 0x94) r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000080), 0x24) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x21, 0x2, 0x2) close(r0) kernel console output (not intermixed with test programs): red forwarding state [ 2427.725147][T11583] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2427.742889][T11583] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2427.770762][T11583] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2427.799177][T11583] bridge0: port 2(bridge_slave_1) entered blocking state [ 2427.806469][T11583] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2427.834494][T11583] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2427.861480][T11583] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2427.888397][T11583] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2427.923259][T11583] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2427.962037][T11583] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2427.970249][T11583] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2428.014658][T11583] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2428.043208][T11583] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2428.058870][T11583] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2428.100355][T11583] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2428.131091][T11583] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2428.167529][T12194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2428.921919][T22472] Bluetooth: hci4: command 0x040f tx timeout [ 2429.216233][ T1453] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2429.226550][ T1453] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2429.235204][ T1453] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2429.244539][ T1453] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2429.262661][ T4370] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 2429.271351][ T4370] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2429.320190][T11583] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2429.342193][T11583] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2429.382360][T12194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2429.610873][T22481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2429.648469][T22481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2429.822825][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2429.833948][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2429.845983][T12194] device veth0_vlan entered promiscuous mode [ 2429.854214][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2429.893051][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2429.957704][T12194] device veth1_vlan entered promiscuous mode [ 2430.032507][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2430.071219][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2430.103255][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2430.131021][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2430.167670][T12304] chnl_net:caif_netlink_parms(): no params data found [ 2430.241539][T12194] device veth0_macvtap entered promiscuous mode [ 2430.299269][T12194] device veth1_macvtap entered promiscuous mode [ 2430.429709][T12194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2430.440552][T12194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2430.450922][T12194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2430.462042][T12194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2430.475617][T12194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2430.492158][T12304] bridge0: port 1(bridge_slave_0) entered blocking state [ 2430.499351][T12304] bridge0: port 1(bridge_slave_0) entered disabled state [ 2430.519935][T12304] device bridge_slave_0 entered promiscuous mode [ 2430.543497][ T5931] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2430.553129][ T5931] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2430.572789][ T5931] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2430.593062][ T5931] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2430.614738][T12194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2430.633545][T12194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2430.655188][T12194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2430.677972][T12194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2430.704048][T12194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2430.714955][T12194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2430.725447][T12194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2430.737648][T12194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2430.766609][T12194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2430.786697][T12304] bridge0: port 2(bridge_slave_1) entered blocking state [ 2430.806049][T12304] bridge0: port 2(bridge_slave_1) entered disabled state [ 2430.830778][T12304] device bridge_slave_1 entered promiscuous mode [ 2430.868799][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2430.896136][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2430.954008][T12194] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2430.967366][T12194] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2430.984652][T12194] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2431.001958][ T4370] Bluetooth: hci4: command 0x0419 tx timeout [ 2431.043215][T12194] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2431.151500][T12304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2431.263652][T12304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2431.324318][ T4370] Bluetooth: hci0: command 0x0409 tx timeout [ 2431.400478][T12304] team0: Port device team_slave_0 added [ 2431.420682][T12325] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.33687'. [ 2431.424708][T12304] team0: Port device team_slave_1 added [ 2431.451135][T12327] netlink: 'syz.4.33689': attribute type 1 has an invalid length. [ 2431.459385][T12327] netlink: 'syz.4.33689': attribute type 4 has an invalid length. [ 2431.467681][T12327] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.33689'. [ 2431.490062][T12304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2431.497271][T12304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2431.544580][T12304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2431.589870][T12304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2431.599598][T11583] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2431.607175][T12304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2431.634096][T11583] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2431.692413][T12304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2431.733647][T11583] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2431.794763][T11583] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2431.808538][T11583] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2431.968520][T11583] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2432.457365][T12340] netlink: 'syz.3.33704': attribute type 29 has an invalid length. [ 2432.768768][T12351] netlink: 'syz.4.33697': attribute type 1 has an invalid length. [ 2432.800021][T12351] netlink: 83992 bytes leftover after parsing attributes in process `syz.4.33697'. [ 2433.406935][ T4370] Bluetooth: hci0: command 0x041b tx timeout [ 2435.488832][ T4370] Bluetooth: hci0: command 0x040f tx timeout [ 2436.897959][T12304] device hsr_slave_0 entered promiscuous mode [ 2436.911618][T12304] device hsr_slave_1 entered promiscuous mode [ 2436.926198][T12304] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2436.944565][T12304] Cannot create hsr debugfs directory [ 2436.962254][T12340] netlink: 'syz.3.33704': attribute type 29 has an invalid length. [ 2437.571890][ T4370] Bluetooth: hci0: command 0x0419 tx timeout [ 2437.699354][T12376] netlink: 126632 bytes leftover after parsing attributes in process `syz.3.33709'. [ 2437.751574][T12376] netlink: 8192 bytes leftover after parsing attributes in process `syz.3.33709'. [ 2438.489642][T12304] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2438.615102][T12382] netlink: 'syz.2.33710': attribute type 17 has an invalid length. [ 2438.656280][T12384] netlink: 'syz.4.33711': attribute type 2 has an invalid length. [ 2438.671458][T12382] netlink: 152 bytes leftover after parsing attributes in process `syz.2.33710'. [ 2438.718878][T12382] net_ratelimit: 13 callbacks suppressed [ 2438.718897][T12382] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2438.877252][T12386] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 2438.946221][T12304] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2438.987247][T12384] device .d entered promiscuous mode [ 2439.089301][T12304] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2439.221662][T12304] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2439.307977][T12390] netlink: 14 bytes leftover after parsing attributes in process `syz.3.33714'. [ 2439.323205][T12390] device hsr_slave_0 left promiscuous mode [ 2439.348473][T12390] device hsr_slave_1 left promiscuous mode [ 2439.980946][T12304] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2440.027780][T12406] netlink: 64859 bytes leftover after parsing attributes in process `syz.4.33718'. [ 2440.046392][T12304] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2440.088416][T12304] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2440.137761][T12304] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2440.552326][T12304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2440.590426][ T2316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2440.613106][ T2316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2440.666759][T12304] 8021q: adding VLAN 0 to HW filter on device team0 [ 2440.715319][T22481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2440.763389][T22481] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2440.802184][T22481] bridge0: port 1(bridge_slave_0) entered blocking state [ 2440.809346][T22481] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2440.842231][T22481] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2440.924109][T22481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2440.961323][T22481] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2440.992434][T22481] bridge0: port 2(bridge_slave_1) entered blocking state [ 2440.999669][T22481] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2441.052778][T22481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2441.083659][T22481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2441.227427][T12304] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2441.315475][T12304] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2441.426747][T22481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2441.476734][T22481] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2441.528509][T22481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2441.585785][T22481] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2441.637938][T22481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2441.696118][T22481] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2441.739100][T22481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2441.778491][T22481] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2441.843963][T22481] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2441.894276][T22481] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2442.916943][T22481] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2442.926549][T22481] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2442.961573][T12304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2443.044790][T22481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2443.072663][T22481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2443.175505][T11583] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2443.192839][T11583] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2443.223996][T12304] device veth0_vlan entered promiscuous mode [ 2443.241183][T11583] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2443.263451][T11583] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2443.306972][T12304] device veth1_vlan entered promiscuous mode [ 2443.410871][T22481] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2443.430968][T22481] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2443.457760][T22481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2443.490279][T22481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2443.522851][T12304] device veth0_macvtap entered promiscuous mode [ 2443.552649][T12304] device veth1_macvtap entered promiscuous mode [ 2443.621013][T12304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2443.656210][T12304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2443.686400][T12304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2443.724420][T12304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2443.751817][T12304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2443.772131][T12304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2443.816312][T12304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2443.892674][T12304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2443.921828][T12304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2443.955624][T12304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2443.979334][T12448] netlink: 126288 bytes leftover after parsing attributes in process `syz.3.33733'. [ 2443.993244][T12304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2444.040082][T12304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2444.054305][T12450] netlink: 'syz.2.33734': attribute type 3 has an invalid length. [ 2444.065390][T12304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2444.081894][T12450] netlink: 'syz.2.33734': attribute type 1 has an invalid length. [ 2444.098767][T12304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2444.110500][T12450] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.33734'. [ 2444.120481][T12304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2444.132270][T12304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2444.155976][T12304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2444.193575][T12304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2444.230404][T11583] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2444.243087][T11583] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2444.298595][T11583] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2444.328170][T11583] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2444.347707][T11583] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2444.375715][T11583] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2444.413695][T12304] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2444.456976][T12304] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2444.491541][T12304] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2444.515463][T12304] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2444.549543][T12461] netlink: 'syz.3.33737': attribute type 1 has an invalid length. [ 2444.566558][T12461] netlink: 'syz.3.33737': attribute type 4 has an invalid length. [ 2444.584884][T12461] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.33737'. [ 2444.802025][ T4384] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2444.809974][ T4384] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2444.883502][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2445.139388][ T5931] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2445.165637][ T5931] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2448.951497][T22481] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2449.172126][T12490] netlink: 'syz.2.33749': attribute type 21 has an invalid length. [ 2449.198361][T12490] netlink: 'syz.2.33749': attribute type 6 has an invalid length. [ 2449.229522][T12490] netlink: 132 bytes leftover after parsing attributes in process `syz.2.33749'. [ 2450.179636][T12521] netlink: 60 bytes leftover after parsing attributes in process `syz.2.33764'. [ 2450.197177][T12521] netlink: 60 bytes leftover after parsing attributes in process `syz.2.33764'. [ 2450.208201][T12519] netlink: 60 bytes leftover after parsing attributes in process `syz.2.33764'. [ 2450.526159][T12531] device syzkaller0 entered promiscuous mode [ 2451.392138][T12543] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.33771'. [ 2451.898000][T12557] netlink: 16083 bytes leftover after parsing attributes in process `syz.0.33778'. [ 2454.529965][T12607] netlink: 60 bytes leftover after parsing attributes in process `syz.2.33800'. [ 2455.381177][T12629] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.33818'. [ 2455.428896][T12629] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 2456.073764][T12645] sctp: [Deprecated]: syz.1.33816 (pid 12645) Use of int in maxseg socket option. [ 2456.073764][T12645] Use struct sctp_assoc_value instead [ 2459.546219][T12686] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.33833'. [ 2460.325672][T12702] netlink: 194236 bytes leftover after parsing attributes in process `syz.1.33842'. [ 2460.404488][T12702] netlink: zone id is out of range [ 2460.423720][T12702] netlink: zone id is out of range [ 2460.445659][T12702] netlink: get zone limit has 8 unknown bytes [ 2461.625963][T12720] netlink: 'syz.1.33850': attribute type 29 has an invalid length. [ 2462.213589][T12725] netlink: 'syz.4.33853': attribute type 3 has an invalid length. [ 2462.236868][T12725] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.33853'. [ 2466.154711][T12693] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.33837'. [ 2466.164567][T12720] netlink: 'syz.1.33850': attribute type 29 has an invalid length. [ 2467.408503][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 2467.414929][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 2468.317132][T12757] netlink: 'syz.1.33876': attribute type 1 has an invalid length. [ 2468.337409][T12757] netlink: 'syz.1.33876': attribute type 4 has an invalid length. [ 2468.367983][T12757] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.33876'. [ 2470.393774][T12788] netlink: 'syz.1.33878': attribute type 4 has an invalid length. [ 2470.429871][T12788] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.33878'. [ 2471.400429][T12794] netlink: 'syz.2.33880': attribute type 4 has an invalid length. [ 2472.661236][ T4370] Bluetooth: hci1: unexpected subevent 0x06 length: 150 > 10 [ 2472.962779][T12829] __sock_release: fasync list not empty! [ 2473.202430][ T4370] Bluetooth: hci4: unexpected event 0x31 length: 15 > 6 [ 2474.455273][ T4370] Bluetooth: hci3: unexpected event 0x06 length: 15 > 3 [ 2474.682414][ T4370] Bluetooth: hci1: command 0x2021 tx timeout [ 2480.540730][T12890] netlink: 144 bytes leftover after parsing attributes in process `syz.1.33933'. [ 2481.062591][T12890] team0: Port device team_slave_0 removed [ 2481.112822][T12890] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 2481.749898][T12910] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.33932'. [ 2482.472699][T12922] device syzkaller0 entered promiscuous mode [ 2488.703342][T12997] syz.0.33970[12997] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2488.703560][T12997] syz.0.33970[12997] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2490.108980][T13028] syz.3.33983[13028] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2490.163075][T13028] syz.3.33983[13028] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2494.307191][T13085] sock: sock_set_timeout: `syz.1.34007' (pid 13085) tries to set negative timeout [ 2495.991668][T13074] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.34002'. [ 2500.202066][ T4370] Bluetooth: hci3: command 0x0406 tx timeout [ 2512.544316][T13217] netlink: 'syz.2.34062': attribute type 10 has an invalid length. [ 2512.559519][T13217] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2512.597601][T13217] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2512.625796][T13217] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 2512.635904][T13227] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.34077'. [ 2512.799484][T13259] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.34079'. [ 2514.636017][T13295] device syzkaller0 entered promiscuous mode [ 2519.999700][T13370] netlink: 'syz.4.34131': attribute type 1 has an invalid length. [ 2520.010359][T13370] netlink: 83992 bytes leftover after parsing attributes in process `syz.4.34131'. [ 2527.029960][T13337] netlink: 'syz.2.34113': attribute type 9 has an invalid length. [ 2527.455401][T13414] netlink: 'syz.2.34152': attribute type 21 has an invalid length. [ 2527.472024][T13414] netlink: 'syz.2.34152': attribute type 3 has an invalid length. [ 2527.532467][T13414] netlink: 144 bytes leftover after parsing attributes in process `syz.2.34152'. [ 2527.621026][T13418] netlink: 'syz.3.34165': attribute type 9 has an invalid length. [ 2528.329440][T13433] netlink: 1 bytes leftover after parsing attributes in process `syz.2.34162'. [ 2528.860085][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 2528.866659][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 2530.087522][T13459] netlink: 'syz.2.34176': attribute type 9 has an invalid length. [ 2533.830596][T13502] netlink: 'syz.0.34191': attribute type 9 has an invalid length. [ 2538.224818][ T4370] Bluetooth: hci4: unexpected subevent 0x04 length: 150 > 11 [ 2540.370519][T13522] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.34202'. [ 2540.380195][T13534] netlink: 60583 bytes leftover after parsing attributes in process `syz.2.34206'. [ 2540.411737][T13534] netlink: 4 bytes leftover after parsing attributes in process `syz.2.34206'. [ 2542.541556][T13567] netlink: 152 bytes leftover after parsing attributes in process `syz.4.34217'. [ 2542.779802][T13572] netlink: 164 bytes leftover after parsing attributes in process `syz.3.34218'. [ 2542.838309][T13572] netlink: 164 bytes leftover after parsing attributes in process `syz.3.34218'. [ 2542.888730][T13575] netlink: 'syz.2.34222': attribute type 1 has an invalid length. [ 2542.908198][T13575] netlink: 'syz.2.34222': attribute type 4 has an invalid length. [ 2542.968612][T13575] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.34222'. [ 2543.000315][T13577] netlink: 'syz.1.34224': attribute type 9 has an invalid length. [ 2545.177967][T13606] netlink: 'syz.4.34237': attribute type 9 has an invalid length. [ 2545.227106][T13606] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.34237'. [ 2546.222442][T13619] -1: renamed from syzkaller0 [ 2546.282310][T22472] Bluetooth: hci4: command 0x0406 tx timeout [ 2546.901333][T13642] netlink: 'syz.2.34249': attribute type 9 has an invalid length. [ 2547.590667][T13658] netlink: 192436 bytes leftover after parsing attributes in process `syz.0.34256'. [ 2548.562057][T13680] netlink: 'syz.0.34266': attribute type 10 has an invalid length. [ 2548.927079][T13680] team0: Port device geneve1 added [ 2549.009980][T13679] netlink: 'syz.1.34267': attribute type 9 has an invalid length. [ 2549.725760][T13695] netlink: 192436 bytes leftover after parsing attributes in process `syz.2.34271'. [ 2549.761141][T13694] netlink: 'syz.0.34280': attribute type 9 has an invalid length. [ 2550.297701][T13709] netlink: 'syz.0.34289': attribute type 9 has an invalid length. [ 2551.410351][ T4370] Bluetooth: hci0: command 0x0406 tx timeout [ 2552.407416][T13719] netlink: 'syz.0.34291': attribute type 9 has an invalid length. [ 2552.691433][T13729] netlink: 'syz.3.34284': attribute type 10 has an invalid length. [ 2552.986247][T13729] team0: Port device geneve1 added [ 2553.039851][T13731] netlink: 'syz.0.34299': attribute type 9 has an invalid length. [ 2554.102568][T13755] netlink: 'syz.2.34307': attribute type 10 has an invalid length. [ 2554.588689][T13755] team0: Port device geneve1 added [ 2556.979322][T13774] netlink: 'syz.0.34304': attribute type 9 has an invalid length. [ 2558.747450][T13806] netlink: 'syz.0.34321': attribute type 9 has an invalid length. [ 2564.780211][T13882] netlink: 'syz.2.34358': attribute type 4 has an invalid length. [ 2564.813260][T13882] netlink: 'syz.2.34358': attribute type 8 has an invalid length. [ 2564.862602][T13882] netlink: 193092 bytes leftover after parsing attributes in process `syz.2.34358'. [ 2566.818865][T13925] netlink: 'syz.1.34375': attribute type 4 has an invalid length. [ 2566.876874][T13925] netlink: 'syz.1.34375': attribute type 8 has an invalid length. [ 2566.930331][T13925] netlink: 193092 bytes leftover after parsing attributes in process `syz.1.34375'. [ 2567.926131][T13954] netlink: 'syz.1.34394': attribute type 1 has an invalid length. [ 2567.951319][T13954] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.34394'. [ 2568.220272][T13966] netlink: 'syz.2.34411': attribute type 1 has an invalid length. [ 2568.250485][T13966] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.34411'. [ 2569.736580][T14004] netlink: 'syz.4.34417': attribute type 1 has an invalid length. [ 2569.752232][T14004] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.34417'. [ 2570.236524][T14011] netlink: 'syz.1.34432': attribute type 1 has an invalid length. [ 2570.255929][T14011] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.34432'. [ 2571.385437][T14036] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.34428'. [ 2572.151033][T14051] netlink: 'syz.1.34440': attribute type 1 has an invalid length. [ 2572.179467][T14051] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.34440'. [ 2572.415650][T14054] netlink: 'syz.2.34452': attribute type 1 has an invalid length. [ 2572.428685][ T4370] Bluetooth: hci1: Malformed HCI Event [ 2572.438498][T14054] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.34452'. [ 2573.638572][T14089] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.34454'. [ 2574.519414][T14100] netlink: 'syz.1.34457': attribute type 1 has an invalid length. [ 2574.538527][T14100] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.34457'. [ 2574.677234][ T4370] Bluetooth: hci3: Malformed HCI Event [ 2575.162338][T14117] netlink: 'syz.4.34480': attribute type 1 has an invalid length. [ 2575.194852][T14117] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.34480'. [ 2575.764570][T14134] device lo entered promiscuous mode [ 2575.817352][T14138] netlink: 'syz.0.34478': attribute type 3 has an invalid length. [ 2575.840426][T14138] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.34478'. [ 2575.851333][T14136] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.34476'. [ 2575.981235][T14142] netlink: 132 bytes leftover after parsing attributes in process `syz.1.34479'. [ 2576.050011][T14142] netlink: 132 bytes leftover after parsing attributes in process `syz.1.34479'. [ 2576.386329][T14149] netlink: 'syz.4.34485': attribute type 1 has an invalid length. [ 2576.412057][T14149] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.34485'. [ 2577.108307][T14170] device lo entered promiscuous mode [ 2577.188161][T14173] netlink: 'syz.2.34496': attribute type 3 has an invalid length. [ 2577.269907][T14173] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.34496'. [ 2577.366266][T14180] netlink: 132 bytes leftover after parsing attributes in process `syz.4.34500'. [ 2577.390966][T14176] netlink: 'syz.3.34498': attribute type 1 has an invalid length. [ 2577.421945][T14176] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.34498'. [ 2577.438102][T14181] netlink: 132 bytes leftover after parsing attributes in process `syz.4.34500'. [ 2577.459889][T14178] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.34499'. [ 2580.186423][T14208] device lo entered promiscuous mode [ 2582.610920][T14250] device lo left promiscuous mode [ 2582.719487][T14250] device lo entered promiscuous mode [ 2583.523212][T14273] netlink: 'syz.3.34539': attribute type 33 has an invalid length. [ 2583.562698][T14273] netlink: 164 bytes leftover after parsing attributes in process `syz.3.34539'. [ 2588.578784][T14327] netlink: 'syz.4.34559': attribute type 33 has an invalid length. [ 2588.613200][T14327] netlink: 164 bytes leftover after parsing attributes in process `syz.4.34559'. [ 2590.284488][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 2590.290866][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 2635.865480][T14820] netlink: 'syz.4.34769': attribute type 2 has an invalid length. [ 2635.939952][T14824] netlink: 'syz.0.34772': attribute type 1 has an invalid length. [ 2635.951802][T14824] netlink: 'syz.0.34772': attribute type 4 has an invalid length. [ 2635.969948][T14824] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.34772'. [ 2636.220375][T14830] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.34775'. [ 2637.618375][T14865] sctp: [Deprecated]: syz.4.34786 (pid 14865) Use of int in maxseg socket option. [ 2637.618375][T14865] Use struct sctp_assoc_value instead [ 2637.823828][T14877] __sock_release: fasync list not empty! [ 2640.423397][T14923] sctp: [Deprecated]: syz.0.34816 (pid 14923) Use of int in maxseg socket option. [ 2640.423397][T14923] Use struct sctp_assoc_value instead [ 2643.208651][T14976] sctp: [Deprecated]: syz.1.34832 (pid 14976) Use of int in maxseg socket option. [ 2643.208651][T14976] Use struct sctp_assoc_value instead [ 2645.227667][T14999] netlink: 'syz.3.34848': attribute type 1 has an invalid length. [ 2645.249518][T14999] netlink: 'syz.3.34848': attribute type 4 has an invalid length. [ 2645.266827][T14999] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.34848'. [ 2645.589892][T15010] netlink: 'syz.1.34852': attribute type 2 has an invalid length. [ 2651.724704][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 2651.731130][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 2654.356072][T15110] netlink: 152 bytes leftover after parsing attributes in process `syz.2.34889'. [ 2654.504382][T15109] netlink: 164 bytes leftover after parsing attributes in process `syz.4.34891'. [ 2654.540587][T15112] netlink: 164 bytes leftover after parsing attributes in process `syz.4.34891'. [ 2654.988210][T15116] netlink: 'syz.3.34895': attribute type 1 has an invalid length. [ 2655.016623][T15116] netlink: 'syz.3.34895': attribute type 4 has an invalid length. [ 2655.055271][T15116] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.34895'. [ 2655.550483][ T4370] Bluetooth: hci2: unexpected subevent 0x04 length: 150 > 11 [ 2655.786493][T15138] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.34904'. [ 2656.039552][T15144] netlink: 60583 bytes leftover after parsing attributes in process `syz.1.34906'. [ 2656.073395][T15144] netlink: 4 bytes leftover after parsing attributes in process `syz.1.34906'. [ 2658.231899][T15173] netlink: 152 bytes leftover after parsing attributes in process `syz.1.34916'. [ 2658.244122][T22472] Bluetooth: hci0: unexpected subevent 0x04 length: 150 > 11 [ 2658.575088][T15178] netlink: 164 bytes leftover after parsing attributes in process `syz.2.34917'. [ 2658.621173][T15179] netlink: 164 bytes leftover after parsing attributes in process `syz.2.34917'. [ 2659.642805][T22472] Bluetooth: hci2: command 0x0406 tx timeout [ 2665.767035][T15282] netlink: 'syz.3.34965': attribute type 21 has an invalid length. [ 2666.205880][T15282] netlink: 'syz.3.34965': attribute type 3 has an invalid length. [ 2666.241943][T15282] netlink: 144 bytes leftover after parsing attributes in process `syz.3.34965'. [ 2666.875485][T15291] netlink: 'syz.0.34969': attribute type 1 has an invalid length. [ 2666.917964][T15291] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.34969'. [ 2672.337449][T15406] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.35021'. [ 2672.964312][T15408] device syzkaller0 entered promiscuous mode [ 2677.704332][T15423] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.35027'. [ 2677.718642][T15435] bridge0: port 3(team0) entered blocking state [ 2677.726266][T15435] bridge0: port 3(team0) entered disabled state [ 2677.759527][T15435] device team0 entered promiscuous mode [ 2677.791823][T15435] device team_slave_1 entered promiscuous mode [ 2677.798313][T15435] device geneve1 entered promiscuous mode [ 2677.829913][T15435] bridge0: port 3(team0) entered blocking state [ 2677.836366][T15435] bridge0: port 3(team0) entered forwarding state [ 2677.854470][T15453] netlink: 'syz.0.35040': attribute type 10 has an invalid length. [ 2677.878024][T15453] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2678.333065][T15453] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2678.352926][T15453] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 2685.070905][T15587] sock: sock_set_timeout: `syz.3.35098' (pid 15587) tries to set negative timeout [ 2686.861005][T15607] syz.2.35119[15607] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2686.861176][T15607] syz.2.35119[15607] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2688.633242][T15643] syz.3.35124[15643] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2688.697806][T15643] syz.3.35124[15643] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2689.157900][T15656] syz.2.35128[15656] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2689.176911][T15656] syz.2.35128[15656] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2693.736177][T15743] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.35181'. [ 2695.906474][T15786] netlink: 144 bytes leftover after parsing attributes in process `syz.4.35201'. [ 2696.230153][T15786] team0: Port device team_slave_0 removed [ 2696.249002][T15786] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 2699.685582][T15820] netlink: 'syz.2.35216': attribute type 4 has an invalid length. [ 2699.742980][T15820] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.35216'. [ 2699.923498][T15826] device syzkaller0 entered promiscuous mode [ 2700.438429][T15842] __sock_release: fasync list not empty! [ 2700.862753][ T4370] Bluetooth: hci0: unexpected event 0x06 length: 15 > 3 [ 2700.883413][T15844] netlink: 'syz.3.35217': attribute type 4 has an invalid length. [ 2701.976344][T15860] netlink: 'syz.4.35221': attribute type 4 has an invalid length. [ 2702.052198][T15860] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.35221'. [ 2702.545802][ T4370] Bluetooth: hci3: unexpected subevent 0x06 length: 150 > 10 [ 2704.037319][ T4370] Bluetooth: hci0: unexpected event 0x31 length: 15 > 6 [ 2704.602011][ T4370] Bluetooth: hci3: command 0x2021 tx timeout [ 2704.989945][T15905] netlink: 'syz.2.35254': attribute type 1 has an invalid length. [ 2705.118041][T15905] netlink: 'syz.2.35254': attribute type 4 has an invalid length. [ 2705.161753][T15905] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.35254'. [ 2705.175624][T15908] netlink: 'syz.3.35240': attribute type 4 has an invalid length. [ 2705.216876][T15908] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.35240'. [ 2709.149410][T15966] netlink: 'syz.3.35267': attribute type 3 has an invalid length. [ 2709.166012][T15966] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.35267'. [ 2712.302567][T15976] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.35272'. [ 2712.696879][T15989] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.35280'. [ 2713.173771][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 2713.180215][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 2713.653020][T16011] netlink: 60 bytes leftover after parsing attributes in process `syz.3.35289'. [ 2714.003080][T16021] netlink: 16083 bytes leftover after parsing attributes in process `syz.3.35294'. [ 2714.616338][T16039] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.35300'. [ 2714.855180][T16045] netlink: 60 bytes leftover after parsing attributes in process `syz.1.35303'. [ 2714.891948][T16045] netlink: 60 bytes leftover after parsing attributes in process `syz.1.35303'. [ 2714.922903][T16043] netlink: 60 bytes leftover after parsing attributes in process `syz.1.35303'. [ 2715.657350][T16071] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 2715.994961][T16080] netlink: 126288 bytes leftover after parsing attributes in process `syz.0.35320'. [ 2716.819164][T16087] netlink: 126632 bytes leftover after parsing attributes in process `syz.4.35335'. [ 2718.035619][T16112] netlink: 'syz.0.35334': attribute type 2 has an invalid length. [ 2719.799576][T16087] netlink: 8192 bytes leftover after parsing attributes in process `syz.4.35335'. [ 2719.811735][T16110] netlink: 14 bytes leftover after parsing attributes in process `syz.1.35333'. [ 2719.841640][T16110] device hsr_slave_0 left promiscuous mode [ 2719.852779][T16110] device hsr_slave_1 left promiscuous mode [ 2719.993926][T16112] device .d entered promiscuous mode [ 2720.398429][T16130] netlink: 'syz.0.35341': attribute type 1 has an invalid length. [ 2720.441118][T16130] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.35341'. [ 2722.292536][T16155] netlink: 'syz.3.35351': attribute type 1 has an invalid length. [ 2722.328081][T16155] netlink: 'syz.3.35351': attribute type 4 has an invalid length. [ 2722.351523][T16155] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.35351'. [ 2723.644904][ T4370] Bluetooth: hci2: unexpected subevent 0x05 length: 150 > 12 [ 2725.740986][ T4370] Bluetooth: hci2: command 0x201b tx timeout [ 2727.451898][T16208] netlink: 15743 bytes leftover after parsing attributes in process `syz.1.35376'. [ 2729.723483][T16232] netlink: 16083 bytes leftover after parsing attributes in process `syz.2.35399'. [ 2731.350989][T16249] netlink: 'syz.3.35393': attribute type 1 has an invalid length. [ 2731.855044][T16250] netlink: 'syz.3.35393': attribute type 1 has an invalid length. [ 2732.952122][T16280] netlink: 194236 bytes leftover after parsing attributes in process `syz.3.35408'. [ 2732.985646][T16280] netlink: zone id is out of range [ 2733.004315][T16280] netlink: zone id is out of range [ 2733.021954][T16280] netlink: zone id is out of range [ 2733.034586][T16280] netlink: zone id is out of range [ 2733.065482][T16280] netlink: zone id is out of range [ 2733.091822][T16280] netlink: zone id is out of range [ 2733.107837][T16280] netlink: zone id is out of range [ 2733.126813][T16280] netlink: zone id is out of range [ 2733.144466][T16280] netlink: zone id is out of range [ 2733.161509][T16280] netlink: zone id is out of range [ 2733.453660][T16292] netlink: 'syz.3.35414': attribute type 11 has an invalid length. [ 2733.528877][T16292] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.35414'. [ 2733.612453][T16292] netlink: 'syz.3.35414': attribute type 11 has an invalid length. [ 2733.620443][T16292] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.35414'. [ 2733.704346][T16289] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2733.828884][T16304] netlink: 'syz.4.35419': attribute type 25 has an invalid length. [ 2733.857347][T16304] netlink: 'syz.4.35419': attribute type 29 has an invalid length. [ 2734.001816][T16307] netlink: 'syz.2.35420': attribute type 2 has an invalid length. [ 2734.044980][T16307] netlink: 17267 bytes leftover after parsing attributes in process `syz.2.35420'. [ 2734.814650][T16322] netlink: 194236 bytes leftover after parsing attributes in process `syz.2.35425'. [ 2736.801029][T16349] netlink: 'syz.1.35437': attribute type 10 has an invalid length. [ 2736.852420][T16349] netlink: 55 bytes leftover after parsing attributes in process `syz.1.35437'. [ 2737.829151][T16363] netlink: 194236 bytes leftover after parsing attributes in process `syz.0.35441'. [ 2740.225761][T16392] delete_channel: no stack [ 2740.416575][T16411] netlink: 144 bytes leftover after parsing attributes in process `syz.4.35459'. [ 2740.457983][T16411] net_ratelimit: 56 callbacks suppressed [ 2740.458024][T16411] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 2744.396008][T16437] delete_channel: no stack [ 2765.963705][T16571] netlink: 'syz.0.35523': attribute type 17 has an invalid length. [ 2766.013333][T16571] netlink: 152 bytes leftover after parsing attributes in process `syz.0.35523'. [ 2766.107760][T16571] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2766.625515][T16575] netlink: 'syz.4.35537': attribute type 29 has an invalid length. [ 2766.993024][T16581] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 2767.306588][T16589] netlink: 'syz.0.35533': attribute type 3 has an invalid length. [ 2767.360165][T16589] netlink: 'syz.0.35533': attribute type 1 has an invalid length. [ 2767.391785][T16589] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.35533'. [ 2769.579874][T16619] netlink: 'syz.1.35543': attribute type 29 has an invalid length. [ 2769.830525][T16625] netlink: 126632 bytes leftover after parsing attributes in process `syz.0.35545'. [ 2769.933109][T16625] netlink: 8192 bytes leftover after parsing attributes in process `syz.0.35545'. [ 2771.191885][T16632] netlink: 'syz.4.35548': attribute type 21 has an invalid length. [ 2771.211209][T16632] netlink: 'syz.4.35548': attribute type 6 has an invalid length. [ 2771.242464][T16632] netlink: 132 bytes leftover after parsing attributes in process `syz.4.35548'. [ 2774.652396][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 2774.658880][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 2776.662678][T16673] netlink: 'syz.3.35566': attribute type 17 has an invalid length. [ 2776.670700][T16673] netlink: 152 bytes leftover after parsing attributes in process `syz.3.35566'. [ 2776.770173][T16673] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2776.829098][T16678] device syzkaller0 entered promiscuous mode [ 2782.843954][T16752] sctp: [Deprecated]: syz.0.35597 (pid 16752) Use of int in maxseg socket option. [ 2782.843954][T16752] Use struct sctp_assoc_value instead [ 2782.935362][T16757] netlink: 60 bytes leftover after parsing attributes in process `syz.3.35609'. [ 2782.983119][T16757] netlink: 60 bytes leftover after parsing attributes in process `syz.3.35609'. [ 2783.022657][T16756] netlink: 60 bytes leftover after parsing attributes in process `syz.3.35609'. [ 2783.211960][T16763] netlink: 161700 bytes leftover after parsing attributes in process `syz.0.35599'. [ 2783.263820][T16763] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 2787.946693][T16798] netlink: 'syz.0.35630': attribute type 3 has an invalid length. [ 2787.968854][T16798] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.35630'. [ 2790.886830][T16786] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.35612'. [ 2791.291294][T16815] netlink: 'syz.4.35637': attribute type 29 has an invalid length. [ 2791.313093][T16815] netlink: 'syz.4.35637': attribute type 29 has an invalid length. [ 2791.456529][T16809] netlink: 'syz.4.35637': attribute type 29 has an invalid length. [ 2796.132857][T16845] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.35634'. [ 2796.583384][T16853] netlink: 'syz.2.35638': attribute type 3 has an invalid length. [ 2796.612695][T16853] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.35638'. [ 2797.319407][T16865] netlink: 'syz.3.35643': attribute type 1 has an invalid length. [ 2797.400126][T16865] netlink: 'syz.3.35643': attribute type 4 has an invalid length. [ 2797.472895][T16865] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.35643'. [ 2804.519049][T16912] netlink: 144 bytes leftover after parsing attributes in process `syz.3.35660'. [ 2804.528543][T16912] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 2804.705682][T16918] netlink: 'syz.0.35665': attribute type 1 has an invalid length. [ 2804.740652][T16918] netlink: 'syz.0.35665': attribute type 4 has an invalid length. [ 2804.778725][T16918] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.35665'. [ 2807.598919][T16952] netlink: 144 bytes leftover after parsing attributes in process `syz.2.35681'. [ 2808.655277][T16952] team0: Port device team_slave_0 removed [ 2808.684826][T16952] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 2823.346228][T17005] netlink: 144 bytes leftover after parsing attributes in process `syz.4.35701'. [ 2823.355773][T17005] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 2827.573904][T17045] netlink: 144 bytes leftover after parsing attributes in process `syz.3.35719'. [ 2827.637863][T17045] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 2828.082301][T17052] netlink: 144 bytes leftover after parsing attributes in process `syz.4.35733'. [ 2828.103961][T17052] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 2831.454706][T17064] netlink: 144 bytes leftover after parsing attributes in process `syz.1.35736'. [ 2831.464402][T17064] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 2831.783399][T17070] netlink: 144 bytes leftover after parsing attributes in process `syz.3.35740'. [ 2831.833131][T17070] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 2832.261032][T17079] netlink: 144 bytes leftover after parsing attributes in process `syz.3.35742'. [ 2832.388522][T17079] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 2836.045223][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 2836.051733][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 2838.744355][T17130] netlink: 144 bytes leftover after parsing attributes in process `syz.3.35751'. [ 2838.782434][T17130] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 2839.416200][T17146] netlink: 144 bytes leftover after parsing attributes in process `syz.4.35771'. [ 2839.569558][T17146] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 2851.032868][ T4370] Bluetooth: hci1: unexpected subevent 0x04 length: 150 > 11 [ 2860.784548][T17332] netlink: 132 bytes leftover after parsing attributes in process `syz.1.35839'. [ 2861.266601][T17343] -1: renamed from syzkaller0 [ 2861.418253][T17344] tap0: tun_chr_ioctl cmd 1074025675 [ 2861.424023][T17344] tap0: persist disabled [ 2862.182823][T17356] tap0: tun_chr_ioctl cmd 1074025675 [ 2862.188691][T17356] tap0: persist disabled [ 2864.092077][T17375] tap0: tun_chr_ioctl cmd 1074025675 [ 2864.097477][T17375] tap0: persist disabled [ 2864.952440][T17396] netlink: 132 bytes leftover after parsing attributes in process `syz.3.35858'. [ 2868.329107][T17425] netlink: 'syz.2.35869': attribute type 1 has an invalid length. [ 2868.401113][T17425] netlink: 'syz.2.35869': attribute type 4 has an invalid length. [ 2868.419218][T17425] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.35869'. [ 2868.895847][T17432] netlink: 'syz.2.35874': attribute type 2 has an invalid length. [ 2874.250212][T17474] netlink: 'syz.0.35888': attribute type 2 has an invalid length. [ 2875.757085][T17502] netlink: 'syz.0.35901': attribute type 3 has an invalid length. [ 2875.813496][T17502] netlink: 'syz.0.35901': attribute type 4 has an invalid length. [ 2875.862293][T17502] netlink: 9067 bytes leftover after parsing attributes in process `syz.0.35901'. [ 2878.704713][T17547] netlink: 2639 bytes leftover after parsing attributes in process `syz.1.35919'. [ 2882.626477][T17603] netlink: 'syz.3.35944': attribute type 2 has an invalid length. [ 2883.369009][T17628] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.35955'. [ 2884.050182][T17640] netlink: 'syz.3.35960': attribute type 2 has an invalid length. [ 2884.448807][T17642] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.35961'. [ 2886.006638][T17674] netlink: 'syz.2.35975': attribute type 2 has an invalid length. [ 2887.011110][T17688] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.35982'. [ 2889.719913][T17724] netlink: 'syz.2.36006': attribute type 2 has an invalid length. [ 2890.371724][T17737] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.36000'. [ 2892.417335][T17766] netlink: 'syz.2.36012': attribute type 2 has an invalid length. [ 2894.839851][T17804] netlink: 'syz.1.36031': attribute type 2 has an invalid length. [ 2897.484372][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 2897.490798][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 2901.575762][T17875] netlink: 'syz.2.36062': attribute type 7 has an invalid length. [ 2901.609149][T17875] netlink: 191184 bytes leftover after parsing attributes in process `syz.2.36062'. [ 2901.848521][ T4370] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 2901.867463][T17881] syz.2.36064[17881] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2901.867555][T17881] syz.2.36064[17881] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2902.424119][T17830] : port 1(batadv0) entered blocking state [ 2902.462458][T17830] : port 1(batadv0) entered disabled state [ 2902.470620][T17830] device batadv0 entered promiscuous mode [ 2902.870999][ T4384] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 2902.880567][ T4384] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 2903.881813][T17883] Bluetooth: hci1: command 0x2016 tx timeout [ 2903.950299][T17913] syz.0.36078[17913] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2903.950411][T17913] syz.0.36078[17913] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2904.334659][T17883] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 2905.204183][T17924] netlink: 44 bytes leftover after parsing attributes in process `syz.1.36083'. [ 2906.340954][T17930] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.36086'. [ 2906.361789][T17883] Bluetooth: hci0: command 0x2016 tx timeout [ 2911.921972][T17925] : port 1(batadv0) entered blocking state [ 2911.928021][T17925] : port 1(batadv0) entered disabled state [ 2911.960092][T17925] device batadv0 entered promiscuous mode [ 2912.416777][T22481] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 2912.426172][T22481] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 2912.609378][T17952] syz.1.36091[17952] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2912.609493][T17952] syz.1.36091[17952] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2913.397940][T17963] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.36109'. [ 2913.810976][T17969] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.36098'. [ 2914.636868][T17981] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.36106'. [ 2914.773668][T17981] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 2915.116310][T17993] netlink: 2759 bytes leftover after parsing attributes in process `syz.3.36111'. [ 2915.603487][T17997] netlink: 'syz.3.36113': attribute type 10 has an invalid length. [ 2915.652214][T17997] bridge0: port 3(team0) entered disabled state [ 2915.717422][T17883] Bluetooth: hci3: unexpected event 0x06 length: 15 > 3 [ 2915.755785][T17997] device team0 left promiscuous mode [ 2915.911937][T17997] device team_slave_1 left promiscuous mode [ 2915.922159][T17997] device geneve1 left promiscuous mode [ 2915.962177][T17997] bridge0: port 3(team0) entered disabled state [ 2917.167666][T17997] team0 (unregistering): Port device team_slave_1 removed [ 2917.223865][T17997] team0 (unregistering): Port device geneve1 removed [ 2917.308866][T18022] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.36124'. [ 2917.621258][T18032] netlink: 2639 bytes leftover after parsing attributes in process `syz.1.36128'. [ 2917.685317][T18031] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.36127'. [ 2917.811023][T18031] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 2917.901768][T17883] Bluetooth: hci0: unexpected event 0x06 length: 15 > 3 [ 2919.203942][T18056] netlink: 'syz.0.36139': attribute type 10 has an invalid length. [ 2920.200043][T18056] team0 (unregistering): Port device team_slave_0 removed [ 2920.293440][T18056] team0 (unregistering): Port device team_slave_1 removed [ 2920.314432][T18060] netlink: 44 bytes leftover after parsing attributes in process `syz.4.36141'. [ 2920.357872][T18062] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.36140'. [ 2920.386283][T18056] team0 (unregistering): Port device geneve1 removed [ 2921.088765][T22472] Bluetooth: hci1: unexpected event 0x06 length: 15 > 3 [ 2921.802166][T22472] Bluetooth: hci3: command 0x0406 tx timeout [ 2922.764116][T18105] netlink: 44 bytes leftover after parsing attributes in process `syz.3.36160'. [ 2922.817026][T18106] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.36157'. [ 2924.051653][T22472] Bluetooth: hci0: command 0x0406 tx timeout [ 2926.131700][T17883] Bluetooth: hci0: command 0x206e tx timeout [ 2926.481709][T18107] netlink: 'syz.1.36158': attribute type 10 has an invalid length. [ 2926.571160][T18107] bond0: (slave team0): Releasing backup interface [ 2926.594522][T18107] team0 (unregistering): Port device team_slave_1 removed [ 2926.633662][T18107] team0 (unregistering): Port device macvlan1 removed [ 2926.647677][T18107] team0 (unregistering): Port device geneve1 removed [ 2927.251745][T17883] Bluetooth: hci1: command 0x0406 tx timeout [ 2928.081871][T18148] netlink: 'syz.4.36181': attribute type 10 has an invalid length. [ 2928.222734][T17883] Bluetooth: hci0: command 0x206e tx timeout [ 2928.244166][T18151] netlink: 44 bytes leftover after parsing attributes in process `syz.0.36180'. [ 2929.388818][T18148] team0 (unregistering): Port device team_slave_1 removed [ 2932.168332][T18197] netlink: 44 bytes leftover after parsing attributes in process `syz.2.36198'. [ 2932.209681][T17883] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 2932.954244][T18214] netlink: 'syz.2.36199': attribute type 10 has an invalid length. [ 2933.179504][T18214] team0 (unregistering): Port device team_slave_1 removed [ 2933.232468][T18214] team0 (unregistering): Port device geneve1 removed [ 2933.975093][T17883] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 2935.498659][T18259] netlink: 'syz.0.36225': attribute type 10 has an invalid length. [ 2936.941775][T17883] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 2937.844309][T18257] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 2938.374993][T18289] netlink: 'syz.3.36239': attribute type 21 has an invalid length. [ 2938.406213][T18289] netlink: 'syz.3.36239': attribute type 10 has an invalid length. [ 2938.430795][T18289] netlink: 'syz.3.36239': attribute type 12 has an invalid length. [ 2938.449481][T18289] netlink: 'syz.3.36239': attribute type 13 has an invalid length. [ 2938.460951][T18289] netlink: 'syz.3.36239': attribute type 14 has an invalid length. [ 2938.490387][T18289] netlink: 'syz.3.36239': attribute type 15 has an invalid length. [ 2938.505402][T18289] netlink: 'syz.3.36239': attribute type 16 has an invalid length. [ 2938.535693][T18289] netlink: 'syz.3.36239': attribute type 19 has an invalid length. [ 2938.552638][T18289] netlink: 'syz.3.36239': attribute type 21 has an invalid length. [ 2938.563308][T18289] netlink: 'syz.3.36239': attribute type 22 has an invalid length. [ 2938.571441][T18289] netlink: 12226 bytes leftover after parsing attributes in process `syz.3.36239'. [ 2938.770364][T18298] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.36245'. [ 2938.827633][T18299] netlink: 8 bytes leftover after parsing attributes in process `syz.0.36244'. [ 2938.862061][T18299] netlink: 4 bytes leftover after parsing attributes in process `syz.0.36244'. [ 2938.922279][T18299] netlink: 33 bytes leftover after parsing attributes in process `syz.0.36244'. [ 2938.956497][T18299] netlink: 4 bytes leftover after parsing attributes in process `syz.0.36244'. [ 2938.992069][T18299] netlink: 33 bytes leftover after parsing attributes in process `syz.0.36244'. [ 2939.066196][T18299] netlink: 4 bytes leftover after parsing attributes in process `syz.0.36244'. [ 2939.159210][T18299] netlink: 33 bytes leftover after parsing attributes in process `syz.0.36244'. [ 2942.534334][T18359] netlink: 8 bytes leftover after parsing attributes in process `syz.1.36266'. [ 2943.271301][T18374] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 2943.665913][T18389] netlink: 'syz.0.36285': attribute type 21 has an invalid length. [ 2943.731786][T18389] netlink: 'syz.0.36285': attribute type 10 has an invalid length. [ 2943.772001][T18389] netlink: 'syz.0.36285': attribute type 12 has an invalid length. [ 2943.780049][T18389] netlink: 'syz.0.36285': attribute type 13 has an invalid length. [ 2943.824955][T18389] netlink: 'syz.0.36285': attribute type 14 has an invalid length. [ 2943.880922][T18389] netlink: 'syz.0.36285': attribute type 15 has an invalid length. [ 2943.934574][T18389] netlink: 'syz.0.36285': attribute type 16 has an invalid length. [ 2943.983381][T18389] netlink: 'syz.0.36285': attribute type 19 has an invalid length. [ 2944.029795][T18389] netlink: 'syz.0.36285': attribute type 21 has an invalid length. [ 2944.068111][T18389] netlink: 'syz.0.36285': attribute type 22 has an invalid length. [ 2944.114537][T18389] __nla_validate_parse: 7 callbacks suppressed [ 2944.114558][T18389] netlink: 12226 bytes leftover after parsing attributes in process `syz.0.36285'. [ 2944.192170][T18393] netlink: 8 bytes leftover after parsing attributes in process `syz.4.36286'. [ 2944.234261][T18393] netlink: 4 bytes leftover after parsing attributes in process `syz.4.36286'. [ 2944.261931][T18393] netlink: 33 bytes leftover after parsing attributes in process `syz.4.36286'. [ 2944.297000][T18393] netlink: 4 bytes leftover after parsing attributes in process `syz.4.36286'. [ 2944.338660][T18393] netlink: 33 bytes leftover after parsing attributes in process `syz.4.36286'. [ 2944.410866][T18393] netlink: 4 bytes leftover after parsing attributes in process `syz.4.36286'. [ 2944.494332][T18393] netlink: 33 bytes leftover after parsing attributes in process `syz.4.36286'. [ 2944.880262][T18401] device syzkaller0 entered promiscuous mode [ 2947.095128][T18438] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.36299'. [ 2951.066587][T18438] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 2951.100104][T18449] netlink: 'syz.2.36303': attribute type 21 has an invalid length. [ 2951.119479][T18449] netlink: 'syz.2.36303': attribute type 10 has an invalid length. [ 2951.138717][T18449] netlink: 13070 bytes leftover after parsing attributes in process `syz.2.36303'. [ 2952.024224][T18488] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.36320'. [ 2953.630646][T18506] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.36326'. [ 2953.718106][T18506] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 2954.154252][T18524] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.36336'. [ 2955.689781][T18536] netlink: 15999 bytes leftover after parsing attributes in process `syz.3.36342'. [ 2955.714177][T18541] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.36344'. [ 2956.260534][T18557] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.36350'. [ 2958.962019][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 2958.968413][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 2962.343544][T18557] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 2962.351900][T18557] CPU: 1 PID: 18557 Comm: syz.0.36350 Not tainted syzkaller #0 [ 2962.359535][T18557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2962.369634][T18557] Call Trace: [ 2962.372953][T18557] [ 2962.375920][T18557] dump_stack_lvl+0x188/0x24e [ 2962.380662][T18557] ? show_regs_print_info+0x12/0x12 [ 2962.385925][T18557] ? load_image+0x400/0x400 [ 2962.390534][T18557] sysfs_warn_dup+0x8a/0xa0 [ 2962.395095][T18557] sysfs_do_create_link_sd+0xc0/0x110 [ 2962.400516][T18557] device_add+0x7ed/0xfb0 [ 2962.404911][T18557] wiphy_register+0x1d9f/0x2ac0 [ 2962.409831][T18557] ? cfg80211_event_work+0x40/0x40 [ 2962.414993][T18557] ? minstrel_ht_alloc+0x894/0xa20 [ 2962.420179][T18557] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2962.426307][T18557] ieee80211_register_hw+0x2d00/0x39f0 [ 2962.431852][T18557] ? ieee80211_register_hw+0xeb1/0x39f0 [ 2962.437464][T18557] ? ieee80211_register_hw+0xeb1/0x39f0 [ 2962.443075][T18557] ? ieee80211_tasklet_handler+0x20/0x20 [ 2962.448782][T18557] ? memset+0x1e/0x40 [ 2962.452810][T18557] ? __hrtimer_init+0x186/0x270 [ 2962.457700][T18557] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 2962.463477][T18557] hwsim_new_radio_nl+0xafa/0xce0 [ 2962.468545][T18557] genl_family_rcv_msg_doit+0x22a/0x330 [ 2962.474119][T18557] ? end_current_label_crit_section+0x170/0x170 [ 2962.480390][T18557] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2962.486367][T18557] ? bpf_lsm_capable+0x5/0x10 [ 2962.491072][T18557] ? security_capable+0x85/0xb0 [ 2962.495960][T18557] genl_rcv_msg+0x604/0x790 [ 2962.500499][T18557] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2962.506709][T18557] ? genl_bind+0x360/0x360 [ 2962.511164][T18557] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 2962.517533][T18557] ? lock_acquire+0x225/0x4a0 [ 2962.522256][T18557] netlink_rcv_skb+0x1fb/0x450 [ 2962.527071][T18557] ? genl_bind+0x360/0x360 [ 2962.531535][T18557] ? netlink_ack+0x1170/0x1170 [ 2962.536340][T18557] ? down_read+0x1a8/0x2d0 [ 2962.540783][T18557] genl_rcv+0x24/0x40 [ 2962.544800][T18557] netlink_unicast+0x74d/0x8d0 [ 2962.549605][T18557] netlink_sendmsg+0x8ad/0xbd0 [ 2962.554415][T18557] ? netlink_getsockopt+0x550/0x550 [ 2962.559646][T18557] ? tomoyo_socket_sendmsg+0x12/0x30 [ 2962.564973][T18557] ? aa_sock_msg_perm+0x94/0x150 [ 2962.569932][T18557] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2962.575239][T18557] ? security_socket_sendmsg+0x7c/0xa0 [ 2962.580737][T18557] ? netlink_getsockopt+0x550/0x550 [ 2962.585973][T18557] ____sys_sendmsg+0x5be/0x970 [ 2962.590778][T18557] ? __sys_sendmsg_sock+0x30/0x30 [ 2962.595838][T18557] ? __import_iovec+0x315/0x500 [ 2962.600732][T18557] ? import_iovec+0x6f/0xa0 [ 2962.605262][T18557] ___sys_sendmsg+0x2a2/0x360 [ 2962.609973][T18557] ? try_to_wake_up+0x6ae/0x1080 [ 2962.614953][T18557] ? __sys_sendmsg+0x290/0x290 [ 2962.619799][T18557] __se_sys_sendmsg+0x1bb/0x2a0 [ 2962.624694][T18557] ? __x64_sys_sendmsg+0x80/0x80 [ 2962.629686][T18557] ? lockdep_hardirqs_on+0x94/0x140 [ 2962.634919][T18557] do_syscall_64+0x4c/0xa0 [ 2962.639420][T18557] ? clear_bhb_loop+0x60/0xb0 [ 2962.644142][T18557] ? clear_bhb_loop+0x60/0xb0 [ 2962.648863][T18557] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2962.654805][T18557] RIP: 0033:0x7faa6679bf79 [ 2962.659282][T18557] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2962.678949][T18557] RSP: 002b:00007faa67708028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2962.687410][T18557] RAX: ffffffffffffffda RBX: 00007faa66a15fa0 RCX: 00007faa6679bf79 [ 2962.695693][T18557] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 2962.703701][T18557] RBP: 00007faa668327e0 R08: 0000000000000000 R09: 0000000000000000 [ 2962.711703][T18557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2962.719701][T18557] R13: 00007faa66a16038 R14: 00007faa66a15fa0 R15: 00007ffee62e4568 [ 2962.727720][T18557] [ 2963.430243][T18618] netlink: 8 bytes leftover after parsing attributes in process `syz.3.36372'. [ 2963.489295][T18618] netlink: 4 bytes leftover after parsing attributes in process `syz.3.36372'. [ 2963.552379][T18618] netlink: 33 bytes leftover after parsing attributes in process `syz.3.36372'. [ 2963.611201][T18618] netlink: 4 bytes leftover after parsing attributes in process `syz.3.36372'. [ 2963.631872][T18618] netlink: 33 bytes leftover after parsing attributes in process `syz.3.36372'. [ 2963.698963][T18618] netlink: 4 bytes leftover after parsing attributes in process `syz.3.36372'. [ 2963.762153][T18618] netlink: 33 bytes leftover after parsing attributes in process `syz.3.36372'. [ 2963.799679][T18624] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.36374'. [ 2964.374683][T18634] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.36391'. [ 2968.359089][T18656] netlink: 8 bytes leftover after parsing attributes in process `syz.2.36390'. [ 2968.383617][T18634] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 2968.401612][T18634] CPU: 1 PID: 18634 Comm: syz.0.36391 Not tainted syzkaller #0 [ 2968.409423][T18634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2968.419532][T18634] Call Trace: [ 2968.422864][T18634] [ 2968.425834][T18634] dump_stack_lvl+0x188/0x24e [ 2968.430570][T18634] ? show_regs_print_info+0x12/0x12 [ 2968.435826][T18634] ? load_image+0x400/0x400 [ 2968.440477][T18634] sysfs_warn_dup+0x8a/0xa0 [ 2968.445084][T18634] sysfs_do_create_link_sd+0xc0/0x110 [ 2968.450518][T18634] device_add+0x7ed/0xfb0 [ 2968.454924][T18634] wiphy_register+0x1d9f/0x2ac0 [ 2968.459851][T18634] ? cfg80211_event_work+0x40/0x40 [ 2968.465114][T18634] ? minstrel_ht_alloc+0x894/0xa20 [ 2968.470288][T18634] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2968.476422][T18634] ieee80211_register_hw+0x2d00/0x39f0 [ 2968.481955][T18634] ? ieee80211_register_hw+0xeb1/0x39f0 [ 2968.487558][T18634] ? ieee80211_register_hw+0xeb1/0x39f0 [ 2968.493174][T18634] ? ieee80211_tasklet_handler+0x20/0x20 [ 2968.498877][T18634] ? memset+0x1e/0x40 [ 2968.502905][T18634] ? __hrtimer_init+0x186/0x270 [ 2968.507811][T18634] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 2968.513609][T18634] hwsim_new_radio_nl+0xafa/0xce0 [ 2968.518709][T18634] genl_family_rcv_msg_doit+0x22a/0x330 [ 2968.524313][T18634] ? end_current_label_crit_section+0x170/0x170 [ 2968.530605][T18634] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2968.536567][T18634] ? bpf_lsm_capable+0x5/0x10 [ 2968.541296][T18634] ? security_capable+0x85/0xb0 [ 2968.546202][T18634] genl_rcv_msg+0x604/0x790 [ 2968.550780][T18634] ? genl_bind+0x360/0x360 [ 2968.555252][T18634] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 2968.561665][T18634] netlink_rcv_skb+0x1fb/0x450 [ 2968.566500][T18634] ? genl_bind+0x360/0x360 [ 2968.570984][T18634] ? netlink_ack+0x1170/0x1170 [ 2968.575802][T18634] ? lockdep_hardirqs_on+0x94/0x140 [ 2968.581058][T18634] ? down_read+0x1a8/0x2d0 [ 2968.585537][T18634] genl_rcv+0x24/0x40 [ 2968.589583][T18634] netlink_unicast+0x74d/0x8d0 [ 2968.594426][T18634] netlink_sendmsg+0x8ad/0xbd0 [ 2968.599251][T18634] ? lockdep_hardirqs_on+0x94/0x140 [ 2968.604517][T18634] ? netlink_getsockopt+0x550/0x550 [ 2968.609956][T18634] ? __sanitizer_cov_trace_pc+0xc/0x60 [ 2968.615469][T18634] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2968.620807][T18634] ? security_socket_sendmsg+0x7c/0xa0 [ 2968.626334][T18634] ? netlink_getsockopt+0x550/0x550 [ 2968.631636][T18634] ____sys_sendmsg+0x5be/0x970 [ 2968.636468][T18634] ? __sys_sendmsg_sock+0x30/0x30 [ 2968.641552][T18634] ? __import_iovec+0x315/0x500 [ 2968.646461][T18634] ? import_iovec+0x6f/0xa0 [ 2968.651017][T18634] ___sys_sendmsg+0x2a2/0x360 [ 2968.655804][T18634] ? __sys_sendmsg+0x290/0x290 [ 2968.660720][T18634] ? irqentry_enter+0x33/0x50 [ 2968.665496][T18634] __se_sys_sendmsg+0x1bb/0x2a0 [ 2968.670427][T18634] ? __x64_sys_sendmsg+0x80/0x80 [ 2968.675579][T18634] ? lockdep_hardirqs_on+0x94/0x140 [ 2968.682399][T18634] do_syscall_64+0x4c/0xa0 [ 2968.686880][T18634] ? clear_bhb_loop+0x60/0xb0 [ 2968.691610][T18634] ? clear_bhb_loop+0x60/0xb0 [ 2968.696364][T18634] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2968.702335][T18634] RIP: 0033:0x7faa6679bf79 [ 2968.706798][T18634] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2968.726523][T18634] RSP: 002b:00007faa67708028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2968.734998][T18634] RAX: ffffffffffffffda RBX: 00007faa66a15fa0 RCX: 00007faa6679bf79 [ 2968.743025][T18634] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 2968.751214][T18634] RBP: 00007faa668327e0 R08: 0000000000000000 R09: 0000000000000000 [ 2968.759240][T18634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2968.767356][T18634] R13: 00007faa66a16038 R14: 00007faa66a15fa0 R15: 00007ffee62e4568 [ 2968.775400][T18634] [ 2980.810730][T18869] delete_channel: no stack [ 2985.360458][T18905] delete_channel: no stack [ 2987.194011][T18943] delete_channel: no stack [ 2992.146465][T18957] device sit0 entered promiscuous mode [ 2993.062642][T17883] Bluetooth: hci4: ACL packet for unknown connection handle 0 [ 2996.557401][T19013] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2997.623716][T19035] : port 1(ip6gretap0) entered blocking state [ 2997.682075][T19035] : port 1(ip6gretap0) entered disabled state [ 2997.721314][T19035] device ip6gretap0 entered promiscuous mode [ 3003.691667][T17883] Bluetooth: hci2: hcon ffff8880627ec000 sent 0 < count 8 [ 3004.016971][T19080] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3005.232689][T19110] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3006.647563][T19133] device sit0 entered promiscuous mode [ 3008.600285][T17883] Bluetooth: hci0: hcon ffff88804f248000 sent 0 < count 8 [ 3011.969804][T19240] device sit0 entered promiscuous mode [ 3020.023891][T19380] device sit0 entered promiscuous mode [ 3020.365813][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 3020.372307][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 3027.502072][T19447] __nla_validate_parse: 6 callbacks suppressed [ 3027.502125][T19447] netlink: 16054 bytes leftover after parsing attributes in process `syz.4.36733'. [ 3029.027828][T22472] Bluetooth: hci3: unexpected event 0x03 length: 15 > 11 [ 3030.063384][T19478] netlink: 16054 bytes leftover after parsing attributes in process `syz.3.36752'. [ 3033.271112][T22472] Bluetooth: hci2: unexpected event 0x03 length: 15 > 11 [ 3033.857002][T19521] device wlan1 entered promiscuous mode [ 3033.858330][T19518] netlink: 16054 bytes leftover after parsing attributes in process `syz.2.36760'. [ 3034.401561][T22472] Bluetooth: hci0: unexpected event 0x03 length: 15 > 11 [ 3036.242600][T22472] Bluetooth: hci4: unexpected event 0x05 length: 15 > 4 [ 3036.726476][T22472] Bluetooth: hci4: unexpected event 0x03 length: 15 > 11 [ 3040.756344][T22472] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4 [ 3040.922069][T19611] netlink: 16054 bytes leftover after parsing attributes in process `syz.0.36798'. [ 3041.739965][T19626] device sit0 entered promiscuous mode [ 3042.251271][T19633] netlink: 194236 bytes leftover after parsing attributes in process `syz.3.36812'. [ 3042.330957][T19633] netlink: zone id is out of range [ 3042.354260][T19633] netlink: zone id is out of range [ 3042.371705][T19633] netlink: zone id is out of range [ 3042.378171][T19633] netlink: get zone limit has 8 unknown bytes [ 3042.735244][T22472] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4 [ 3044.013240][T19669] device sit0 left promiscuous mode [ 3058.410043][T19776] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 3058.431893][T19776] device syzkaller0 entered promiscuous mode [ 3058.631312][T19786] netlink: 'syz.0.36881': attribute type 29 has an invalid length. [ 3058.719515][T19786] netlink: 'syz.0.36881': attribute type 29 has an invalid length. [ 3058.748368][T19788] netlink: 'syz.0.36881': attribute type 29 has an invalid length. [ 3059.780733][T19810] netlink: 4 bytes leftover after parsing attributes in process `syz.4.36879'. [ 3060.407983][T22472] Bluetooth: hci4: unexpected event 0x09 length: 151 > 3 [ 3060.670681][T19837] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.36892'. [ 3061.555045][T19851] netlink: 'syz.4.36898': attribute type 29 has an invalid length. [ 3061.591016][T19851] netlink: 'syz.4.36898': attribute type 29 has an invalid length. [ 3061.634952][T19851] netlink: 'syz.4.36898': attribute type 29 has an invalid length. [ 3062.819103][T19898] netlink: 'syz.3.36916': attribute type 29 has an invalid length. [ 3066.881381][T19898] netlink: 'syz.3.36916': attribute type 29 has an invalid length. [ 3073.900790][T20003] netlink: 'syz.2.36961': attribute type 1 has an invalid length. [ 3073.916434][T20003] netlink: 'syz.2.36961': attribute type 1 has an invalid length. [ 3073.934214][T20003] netlink: 116376 bytes leftover after parsing attributes in process `syz.2.36961'. [ 3075.443650][T22472] Bluetooth: hci4: unexpected event 0x07 length: 15 < 255 [ 3080.579472][T22472] Bluetooth: hci3: unexpected event 0x07 length: 15 < 255 [ 3081.804195][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 3081.810709][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 3085.082264][T22472] Bluetooth: hci0: unexpected event 0x07 length: 15 < 255 [ 3087.316652][T20129] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 3087.469116][T20129] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3089.310071][T20156] -1: renamed from syzkaller0 [ 3089.588926][T20174] netlink: 'syz.2.37035': attribute type 10 has an invalid length. [ 3090.867852][T20195] -1: renamed from syzkaller0 [ 3092.316951][T20230] -1: renamed from syzkaller0 [ 3092.682634][T20237] netlink: 161700 bytes leftover after parsing attributes in process `syz.0.37071'. [ 3092.698724][T20237] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 3095.124536][T20288] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.37085'. [ 3098.220105][T20329] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.37102'. [ 3098.241642][T20329] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 3099.016752][T20337] delete_channel: no stack [ 3099.032527][T20337] delete_channel: no stack [ 3101.085163][T20339] netlink: 'syz.0.37105': attribute type 10 has an invalid length. [ 3101.643331][T20363] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.37115'. [ 3101.664921][T20363] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 3101.807310][T20356] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 3101.906878][T20356] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3103.056613][T20400] netlink: 161700 bytes leftover after parsing attributes in process `syz.3.37132'. [ 3103.078025][T20400] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 3103.192799][T20403] delete_channel: no stack [ 3103.212039][T20403] delete_channel: no stack [ 3114.225085][T20447] delete_channel: no stack [ 3114.281358][T20447] delete_channel: no stack [ 3115.885649][T22472] Bluetooth: hci2: unexpected event 0x04 length: 151 > 10 [ 3115.885689][T22472] Bluetooth: unknown link type 129 [ 3116.574976][T22472] Bluetooth: hci3: unexpected subevent 0x0a length: 150 > 30 [ 3117.972174][T22472] Bluetooth: hci2: command 0x0409 tx timeout [ 3118.611848][T22472] Bluetooth: hci3: command 0x2016 tx timeout [ 3120.895443][T20477] device syzkaller0 entered promiscuous mode [ 3126.655329][T22472] Bluetooth: hci4: unexpected subevent 0x0a length: 150 > 30 [ 3128.771917][T22472] Bluetooth: hci4: command 0x2016 tx timeout [ 3132.517809][T20488] netlink: 'syz.0.37168': attribute type 10 has an invalid length. [ 3132.529671][T20488] netlink: 40 bytes leftover after parsing attributes in process `syz.0.37168'. [ 3132.549194][T20488] batman_adv: batadv0: Adding interface: geneve0 [ 3132.564034][T20488] batman_adv: batadv0: The MTU of interface geneve0 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3132.631507][T20488] batman_adv: batadv0: Interface activated: geneve0 [ 3134.062374][T22472] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30 [ 3134.339295][T17883] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 3134.349569][T17883] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 3134.358510][T17883] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 3134.367355][ T4370] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 3134.377189][ T4370] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 3134.385303][ T4370] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 3136.122860][ T4370] Bluetooth: hci0: command 0x2016 tx timeout [ 3136.443454][ T4370] Bluetooth: hci3: command 0x0409 tx timeout [ 3136.843807][ T4370] Bluetooth: hci2: unexpected event 0x0b length: 151 > 11 [ 3138.532771][ T4370] Bluetooth: hci3: command 0x041b tx timeout [ 3139.461887][ T4370] Bluetooth: hci0: unexpected event 0x0b length: 151 > 11 [ 3140.610167][T22472] Bluetooth: hci3: command 0x040f tx timeout [ 3141.481706][T22472] Bluetooth: hci0: command 0x0419 tx timeout [ 3142.140796][T20553] chnl_net:caif_netlink_parms(): no params data found [ 3142.376696][T20553] bridge0: port 1(bridge_slave_0) entered blocking state [ 3142.416790][T20553] bridge0: port 1(bridge_slave_0) entered disabled state [ 3142.450378][T20553] device bridge_slave_0 entered promiscuous mode [ 3142.486116][T20553] bridge0: port 2(bridge_slave_1) entered blocking state [ 3142.531768][T20553] bridge0: port 2(bridge_slave_1) entered disabled state [ 3142.540341][T20553] device bridge_slave_1 entered promiscuous mode [ 3142.635810][T20553] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3142.671092][T20553] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3142.681886][T22472] Bluetooth: hci3: command 0x0419 tx timeout [ 3142.784165][T20553] team0: Port device team_slave_0 added [ 3142.811864][T20553] team0: Port device team_slave_1 added [ 3142.913667][T20553] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3142.920682][T20553] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3143.019548][T20553] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3143.053773][T20553] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3143.060796][T20553] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3143.169205][T20553] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3143.264513][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 3143.270888][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 3143.281338][T20553] device hsr_slave_0 entered promiscuous mode [ 3143.571530][T22472] Bluetooth: hci0: command 0x0406 tx timeout [ 3144.025158][T20553] device hsr_slave_1 entered promiscuous mode [ 3144.418324][T20553] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 3144.445246][T20553] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 3144.465264][T20553] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 3144.488995][T20553] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 3144.659829][T20553] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3144.685855][T11583] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 3144.694526][T11583] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3144.706442][T20553] 8021q: adding VLAN 0 to HW filter on device team0 [ 3144.719020][T11583] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 3144.728684][T11583] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3144.738525][T11583] bridge0: port 1(bridge_slave_0) entered blocking state [ 3144.745703][T11583] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3144.772699][T11583] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 3144.781856][T11583] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 3144.790754][T11583] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3144.800050][T11583] bridge0: port 2(bridge_slave_1) entered blocking state [ 3144.807251][T11583] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3144.818129][T11583] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 3144.828311][T11583] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 3144.849445][T11583] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 3144.861257][T11583] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 3144.872395][T11583] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 3144.883454][T11583] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 3144.900964][T11583] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3144.910743][T11583] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 3144.920384][T11583] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3144.931922][T11583] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 3144.940744][T11583] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3144.951323][T20553] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3145.233453][T22481] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3145.241053][T22481] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3145.255971][T20553] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3145.682333][T11583] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 3145.694932][T11583] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3145.738185][T22481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 3145.747892][T22481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3145.760421][T20553] device veth0_vlan entered promiscuous mode [ 3145.767943][T22481] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3145.777276][T22481] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3145.793706][T20553] device veth1_vlan entered promiscuous mode [ 3145.820220][T11583] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 3145.832473][T11583] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 3145.849302][T11583] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 3145.869775][T11583] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3145.886039][T20553] device veth0_macvtap entered promiscuous mode [ 3145.908496][T20553] device veth1_macvtap entered promiscuous mode [ 3145.942522][T20553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3145.953625][T20553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3145.965004][T20553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3145.975947][T20553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3145.987587][T20553] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3145.997182][T22481] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 3146.015513][T22481] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 3146.038031][T22481] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3146.054910][T22481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3146.071946][T20553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3146.090458][T20553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3146.101427][T20553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3146.120933][T20553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3146.132673][T20553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3146.144300][T20553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3146.154712][T20553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3146.165635][T20553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3146.175895][T20553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3146.187381][T20553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3146.197883][T20553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3146.217769][T20553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3146.230943][T20553] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3146.241148][T11583] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3146.252061][T11583] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3146.264515][T20553] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3146.274444][T20553] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3146.284036][T20553] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3146.293320][T20553] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3146.424099][T22481] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3146.441056][T22481] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3146.472731][T22481] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3146.495965][T22481] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3146.507284][T22481] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3146.525279][ T5950] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3204.688650][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 3204.695400][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 3256.473734][T20698] netlink: 14 bytes leftover after parsing attributes in process `syz.0.37230'. [ 3256.525127][T20698] openvswitch: netlink: Message has 6 unknown bytes. [ 3257.962172][ T4370] Bluetooth: hci3: command 0x0406 tx timeout [ 3257.969683][ T4370] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30 [ 3257.977814][ T4370] Bluetooth: hci0: Invalid handle: 0x85b0 > 0x0eff [ 3258.122989][ T4370] Bluetooth: hci2: unexpected event 0x09 length: 15 > 3 [ 3258.158411][T20721] : port 1(syz_tun) entered blocking state [ 3258.219661][T20721] : port 1(syz_tun) entered disabled state [ 3258.249027][T20721] device syz_tun entered promiscuous mode [ 3259.620731][T20763] device syzkaller0 entered promiscuous mode [ 3260.069911][T20773] netlink: 'syz.2.37263': attribute type 22 has an invalid length. [ 3260.108521][T20773] netlink: 4 bytes leftover after parsing attributes in process `syz.2.37263'. [ 3260.122080][ T4370] Bluetooth: hci3: unexpected event 0x03 length: 15 > 11 [ 3260.198282][ T4370] Bluetooth: hci2: unexpected event 0x3b length: 15 > 10 [ 3260.323779][ T4370] Bluetooth: hci2: unexpected subevent 0x0c length: 150 > 5 [ 3263.076044][T20797] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.37274'. [ 3263.299221][T20800] netlink: 'syz.5.37275': attribute type 3 has an invalid length. [ 3263.332478][T20800] netlink: 132 bytes leftover after parsing attributes in process `syz.5.37275'. [ 3263.838457][T20812] device syzkaller0 entered promiscuous mode [ 3264.938815][ T4370] Bluetooth: hci0: unexpected subevent 0x0c length: 150 > 5 [ 3266.126699][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 3266.133159][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 3266.840900][T20857] netlink: 'syz.2.37297': attribute type 3 has an invalid length. [ 3266.881693][T20857] netlink: 13435 bytes leftover after parsing attributes in process `syz.2.37297'. [ 3269.913227][T20860] netlink: 'syz.3.37298': attribute type 10 has an invalid length. [ 3269.921282][T20860] netlink: 40 bytes leftover after parsing attributes in process `syz.3.37298'. [ 3269.930900][T20860] device batadv0 entered promiscuous mode [ 3269.937836][T20860] bridge0: port 3(batadv0) entered blocking state [ 3269.962933][T20860] bridge0: port 3(batadv0) entered disabled state [ 3269.982448][T20860] bridge0: port 3(batadv0) entered blocking state [ 3269.989012][T20860] bridge0: port 3(batadv0) entered forwarding state [ 3270.170245][ T5950] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 3270.179964][ T5950] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 3270.462060][T20889] device syzkaller0 entered promiscuous mode [ 3274.460411][ T4370] Bluetooth: hci1: unexpected event 0x04 length: 151 > 10 [ 3276.522698][ T4370] Bluetooth: hci1: command 0x0409 tx timeout [ 3277.949292][T20929] device syzkaller0 entered promiscuous mode [ 3277.978561][T20961] netlink: 'syz.1.37339': attribute type 5 has an invalid length. [ 3278.047621][T22472] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30 [ 3278.055932][T22472] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0' [ 3278.065709][T22472] CPU: 0 PID: 22472 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 3278.073397][T22472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 3278.083472][T22472] Workqueue: hci0 hci_rx_work [ 3278.088244][T22472] Call Trace: [ 3278.091546][T22472] [ 3278.094495][T22472] dump_stack_lvl+0x188/0x24e [ 3278.099217][T22472] ? show_regs_print_info+0x12/0x12 [ 3278.104437][T22472] ? load_image+0x400/0x400 [ 3278.108979][T22472] sysfs_create_dir_ns+0x26a/0x290 [ 3278.114127][T22472] ? sysfs_warn_dup+0xa0/0xa0 [ 3278.118833][T22472] ? do_raw_spin_unlock+0x11d/0x230 [ 3278.124073][T22472] kobject_add_internal+0x61c/0xcc0 [ 3278.129308][T22472] kobject_add+0x160/0x230 [ 3278.133752][T22472] ? kobject_init+0x1d0/0x1d0 [ 3278.138471][T22472] ? klist_children_get+0x50/0x50 [ 3278.143520][T22472] ? get_device_parent+0x121/0x3f0 [ 3278.148700][T22472] device_add+0x483/0xfb0 [ 3278.153112][T22472] ? kmem_cache_free+0xf7/0x290 [ 3278.158000][T22472] hci_conn_add_sysfs+0xd1/0x1e0 [ 3278.162966][T22472] le_conn_complete_evt+0x105f/0x1670 [ 3278.168365][T22472] ? le_conn_complete_evt+0xe6/0x1670 [ 3278.173765][T22472] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 3278.180032][T22472] ? bt_info+0x180/0x180 [ 3278.184303][T22472] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 3278.189965][T22472] ? skb_pull_data+0xf7/0x200 [ 3278.194715][T22472] hci_le_enh_conn_complete_evt+0x185/0x460 [ 3278.200639][T22472] ? hci_le_remote_conn_param_req_evt+0xd10/0xd10 [ 3278.207082][T22472] ? hci_remote_host_features_evt+0x270/0x270 [ 3278.213187][T22472] hci_event_packet+0x7b6/0x1280 [ 3278.218264][T22472] ? bis_list+0x280/0x280 [ 3278.222619][T22472] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 3278.228548][T22472] ? kcov_remote_start+0x4c7/0x7e0 [ 3278.233691][T22472] ? bt_warn+0x30/0x180 [ 3278.237878][T22472] ? hci_send_to_monitor+0x9c/0x4a0 [ 3278.243105][T22472] hci_rx_work+0x3eb/0xd40 [ 3278.247545][T22472] ? _raw_spin_unlock+0x40/0x40 [ 3278.252421][T22472] ? process_one_work+0x7b0/0x1160 [ 3278.257556][T22472] process_one_work+0x8a2/0x1160 [ 3278.262566][T22472] ? worker_detach_from_pool+0x240/0x240 [ 3278.268225][T22472] ? _raw_spin_lock_irq+0xb7/0xf0 [ 3278.273263][T22472] ? _raw_spin_lock_irqsave+0x100/0x100 [ 3278.278829][T22472] ? kthread_data+0x4b/0xc0 [ 3278.283373][T22472] worker_thread+0xaa2/0x1270 [ 3278.288098][T22472] kthread+0x29d/0x330 [ 3278.292191][T22472] ? worker_clr_flags+0x1a0/0x1a0 [ 3278.297232][T22472] ? kthread_blkcg+0xd0/0xd0 [ 3278.301857][T22472] ret_from_fork+0x1f/0x30 [ 3278.306322][T22472] [ 3278.315487][T22472] kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 3278.328717][T22472] Bluetooth: hci0: failed to register connection device [ 3280.365195][T22472] Bluetooth: hci0: command 0x2016 tx timeout [ 3284.315163][T22472] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 3284.324232][T22472] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 3284.333200][T22472] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 3284.340949][T22472] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 3284.349052][T22472] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 3284.380797][T22472] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 3284.946614][T21010] chnl_net:caif_netlink_parms(): no params data found [ 3285.123842][T21031] netlink: 132 bytes leftover after parsing attributes in process `syz.0.37358'. [ 3285.204650][T21033] netlink: 132 bytes leftover after parsing attributes in process `syz.0.37358'. [ 3285.484322][T21010] bridge0: port 1(bridge_slave_0) entered blocking state [ 3285.583410][T21010] bridge0: port 1(bridge_slave_0) entered disabled state [ 3285.652400][T21010] device bridge_slave_0 entered promiscuous mode [ 3285.708350][T21010] bridge0: port 2(bridge_slave_1) entered blocking state [ 3285.751481][T21010] bridge0: port 2(bridge_slave_1) entered disabled state [ 3285.759868][T21010] device bridge_slave_1 entered promiscuous mode [ 3285.872059][T21049] netlink: 'syz.3.37370': attribute type 10 has an invalid length. [ 3285.962046][T21010] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3286.006859][T21010] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3286.153693][T21051] device syzkaller0 entered promiscuous mode [ 3286.207345][T21055] netlink: 'syz.5.37373': attribute type 10 has an invalid length. [ 3286.441737][ T4370] Bluetooth: hci5: command 0x0409 tx timeout [ 3286.549744][T21055] team0 (unregistering): Port device team_slave_0 removed [ 3287.524567][T21055] team0 (unregistering): Port device team_slave_1 removed [ 3288.522721][ T4370] Bluetooth: hci5: command 0x041b tx timeout [ 3289.130297][T21082] delete_channel: no stack [ 3290.611788][ T4370] Bluetooth: hci5: command 0x040f tx timeout [ 3292.682111][ T4370] Bluetooth: hci5: command 0x0419 tx timeout [ 3293.673275][T21064] device syzkaller0 entered promiscuous mode [ 3293.684769][T21010] team0: Port device team_slave_0 added [ 3293.713524][T21010] team0: Port device team_slave_1 added [ 3293.719570][T21105] netlink: 'syz.5.37391': attribute type 21 has an invalid length. [ 3293.739998][T21105] netlink: 'syz.5.37391': attribute type 10 has an invalid length. [ 3293.765207][T21105] netlink: 'syz.5.37391': attribute type 12 has an invalid length. [ 3293.791445][T21105] netlink: 'syz.5.37391': attribute type 13 has an invalid length. [ 3293.799428][T21105] netlink: 'syz.5.37391': attribute type 14 has an invalid length. [ 3293.850175][T21105] netlink: 'syz.5.37391': attribute type 15 has an invalid length. [ 3293.887822][T21105] netlink: 'syz.5.37391': attribute type 16 has an invalid length. [ 3293.911863][T21105] netlink: 'syz.5.37391': attribute type 19 has an invalid length. [ 3293.937477][T21105] netlink: 'syz.5.37391': attribute type 21 has an invalid length. [ 3293.970065][T21105] netlink: 'syz.5.37391': attribute type 22 has an invalid length. [ 3293.991375][T21105] netlink: 12226 bytes leftover after parsing attributes in process `syz.5.37391'. [ 3301.288716][T21116] device syzkaller0 entered promiscuous mode [ 3302.400274][ T4370] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 3302.420776][ T4370] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 3302.429011][ T4370] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 3302.441713][ T4370] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 3302.449387][ T4370] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 3302.457800][ T4370] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 3304.524397][T22472] Bluetooth: hci4: command 0x0409 tx timeout [ 3306.601447][T22472] Bluetooth: hci4: command 0x041b tx timeout [ 3307.956839][T21010] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3307.964536][T21010] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3307.990744][T21010] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3308.003757][T21010] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3308.010761][T21010] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3308.047498][T21010] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3308.380878][T21010] device hsr_slave_0 entered promiscuous mode [ 3308.412696][T21010] device hsr_slave_1 entered promiscuous mode [ 3308.441882][T21010] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3308.449515][T21010] Cannot create hsr debugfs directory [ 3308.681866][T22472] Bluetooth: hci4: command 0x040f tx timeout [ 3308.715477][T22472] Bluetooth: hci0: unknown advertising packet type: 0x80 [ 3308.715513][T22472] Bluetooth: hci0: Malformed LE Event: 0x02 [ 3308.888267][T21155] chnl_net:caif_netlink_parms(): no params data found [ 3309.058416][T21010] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 3310.554802][T21010] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 3310.575832][T21010] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 3310.594654][T21010] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 3310.762780][T22472] Bluetooth: hci4: command 0x0419 tx timeout [ 3311.026998][T21155] bridge0: port 1(bridge_slave_0) entered blocking state [ 3311.058165][T21155] bridge0: port 1(bridge_slave_0) entered disabled state [ 3311.083643][T21155] device bridge_slave_0 entered promiscuous mode [ 3311.126764][T21155] bridge0: port 2(bridge_slave_1) entered blocking state [ 3311.137627][T21155] bridge0: port 2(bridge_slave_1) entered disabled state [ 3311.156357][T21155] device bridge_slave_1 entered promiscuous mode [ 3311.240152][T21155] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3311.265075][T21155] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3311.349359][T21155] team0: Port device team_slave_0 added [ 3311.387544][T21155] team0: Port device team_slave_1 added [ 3311.407407][T21211] netlink: 'syz.5.37426': attribute type 7 has an invalid length. [ 3311.454772][T21010] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3311.492516][T21155] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3311.528180][T21155] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3311.644640][T21155] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3311.688748][T21010] 8021q: adding VLAN 0 to HW filter on device team0 [ 3311.717237][ T5950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 3311.756839][ T5950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3311.778587][T21155] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3311.792201][T21155] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3311.848201][T21155] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3311.887151][T20959] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 3311.899646][T20959] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3311.919326][T20959] bridge0: port 1(bridge_slave_0) entered blocking state [ 3311.926574][T20959] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3311.946921][T20959] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 3311.969900][T20959] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3311.989047][T20959] bridge0: port 2(bridge_slave_1) entered blocking state [ 3311.996259][T20959] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3312.015983][T20959] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 3314.666083][T20959] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 3314.685930][T20959] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 3314.749597][T20959] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 3314.798882][T20959] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 3314.885985][T20959] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3314.918881][T20959] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 3314.940417][T20959] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 3314.957138][T20959] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 3314.984773][T20959] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3315.019428][T21155] device hsr_slave_0 entered promiscuous mode [ 3315.046067][T21155] device hsr_slave_1 entered promiscuous mode [ 3315.074225][T21155] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3315.102766][T21155] Cannot create hsr debugfs directory [ 3315.119360][T21010] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 3315.145344][T21010] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3315.170836][T20959] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 3315.185250][T20959] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3315.279969][T21235] netlink: 'syz.0.37433': attribute type 10 has an invalid length. [ 3315.719453][T21155] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 3315.757720][T21155] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 3315.800078][T21155] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 3315.825325][T21155] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 3316.173456][ T5950] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3316.186869][ T5950] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3316.242121][T21010] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3316.332201][T21155] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3316.395309][T20959] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 3316.412983][T20959] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3316.465656][T21155] 8021q: adding VLAN 0 to HW filter on device team0 [ 3316.502852][T22481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 3316.523475][T22481] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3316.562901][T22481] bridge0: port 1(bridge_slave_0) entered blocking state [ 3316.570109][T22481] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3316.656497][T22481] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 3316.698374][T11583] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 3316.728115][T11583] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3316.777970][T11583] bridge0: port 2(bridge_slave_1) entered blocking state [ 3316.785223][T11583] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3316.882613][ T5950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 3316.916106][ T5950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 3316.953760][ T5950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 3316.971607][ T5950] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 3316.993126][ T5950] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3317.029011][ T5931] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 3317.053875][ T5931] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 3317.108046][T21219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 3317.127846][T21219] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3317.155333][T21155] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 3317.178598][T21155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3317.194131][T21219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 3317.222645][T21219] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3317.853909][ T5950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 3317.864650][ T5950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3317.910081][ T5950] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3317.933424][ T5950] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3317.949480][T21155] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3317.983332][T21219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 3317.993160][T21219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3318.022663][T21010] device veth0_vlan entered promiscuous mode [ 3318.030509][T21219] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3318.062432][T21219] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3318.097291][T21010] device veth1_vlan entered promiscuous mode [ 3318.161605][T22481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 3318.184864][T22481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3318.216697][T21010] device veth0_macvtap entered promiscuous mode [ 3318.243995][T21010] device veth1_macvtap entered promiscuous mode [ 3318.295574][T21010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3318.321376][T21010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3318.331783][T21010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3318.351413][T21010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3318.361289][T21010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3318.401709][T21010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3318.425057][T21010] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3318.445805][ T2316] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 3318.455392][ T2316] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 3318.484973][ T2316] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3318.522554][ T2316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3318.546932][T21010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3318.581490][T21010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3318.611516][T21010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3318.644711][T21010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3318.661420][T21010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3318.691401][T21010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3318.731433][T21010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3318.762018][T21010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3318.772473][T21010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3318.816373][T21010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3318.844784][T21010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3318.867066][T21010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3318.887709][T21010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3318.908857][T21010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3318.933867][T21010] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3318.967563][T21219] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3318.992574][T21219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3319.033077][T21010] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3319.064191][T21010] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3319.093279][T21010] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3319.111529][T21010] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3319.355764][ T5931] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3319.371458][ T5931] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3319.398936][T20959] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3319.521680][ T2316] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3319.529618][ T2316] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3319.559203][T22481] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3319.595479][T22481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 3319.611822][T22481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3319.726594][ T5950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 3319.762960][ T5950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3319.807226][T21155] device veth0_vlan entered promiscuous mode [ 3319.826518][ T5950] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3319.852960][ T5950] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3319.890152][T21155] device veth1_vlan entered promiscuous mode [ 3320.023214][ T5950] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 3320.046415][ T5950] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 3320.090357][ T5950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 3320.113170][ T5950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3320.153623][T21155] device veth0_macvtap entered promiscuous mode [ 3320.194409][T21155] device veth1_macvtap entered promiscuous mode [ 3320.262481][T21155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3320.321157][T21155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3320.341538][T21155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3320.372560][T21155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3320.403043][T21155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3320.433524][T21155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3320.469470][T21155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3320.491120][T21155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3320.516209][T21306] sock: sock_set_timeout: `syz.5.37450' (pid 21306) tries to set negative timeout [ 3320.541091][T21155] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3320.582494][ T2316] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 3320.592072][ T2316] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 3320.631577][ T2316] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3320.673710][ T2316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3320.732450][T21155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3320.771541][T21155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3320.813401][T21155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3320.871420][T21155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3320.968579][T21155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3321.007785][T21155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3321.043301][T21155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3321.113900][T21155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3321.155854][T21155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3321.203572][T21155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3321.236605][T21155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3321.276188][T21155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3321.311609][T21155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3321.346050][T21155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3321.381563][T21155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3321.420138][T21155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3321.451859][T21155] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3321.479958][T22481] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3321.500228][T22481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3321.528116][T21155] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3321.559213][T21155] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3321.593976][T21155] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3321.663103][T21155] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3321.977968][T22481] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3322.011411][T22481] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3322.055423][T11583] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3322.151669][ T5931] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3322.159554][ T5931] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3322.233456][ T5931] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3322.526423][T21341] delete_channel: no stack [ 3327.565282][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 3327.571740][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 3329.202991][ T4370] Bluetooth: hci1: unexpected event 0x08 length: 151 > 4 [ 3329.976309][T21428] delete_channel: no stack [ 3332.591881][ T4370] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 3332.599801][ T4370] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0' [ 3332.609609][ T4370] CPU: 0 PID: 4370 Comm: kworker/u5:5 Not tainted syzkaller #0 [ 3332.617221][ T4370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 3332.627341][ T4370] Workqueue: hci0 hci_rx_work [ 3332.632100][ T4370] Call Trace: [ 3332.635427][ T4370] [ 3332.638415][ T4370] dump_stack_lvl+0x188/0x24e [ 3332.643171][ T4370] ? show_regs_print_info+0x12/0x12 [ 3332.648428][ T4370] ? load_image+0x400/0x400 [ 3332.652987][ T4370] sysfs_create_dir_ns+0x26a/0x290 [ 3332.658145][ T4370] ? sysfs_warn_dup+0xa0/0xa0 [ 3332.662862][ T4370] ? do_raw_spin_unlock+0x11d/0x230 [ 3332.668090][ T4370] kobject_add_internal+0x61c/0xcc0 [ 3332.673318][ T4370] kobject_add+0x160/0x230 [ 3332.677778][ T4370] ? kobject_init+0x1d0/0x1d0 [ 3332.682496][ T4370] ? klist_children_get+0x50/0x50 [ 3332.687545][ T4370] ? get_device_parent+0x121/0x3f0 [ 3332.692694][ T4370] device_add+0x483/0xfb0 [ 3332.697067][ T4370] ? kmem_cache_free+0xf7/0x290 [ 3332.701953][ T4370] hci_conn_add_sysfs+0xd1/0x1e0 [ 3332.706929][ T4370] le_conn_complete_evt+0x105f/0x1670 [ 3332.712353][ T4370] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 3332.718648][ T4370] ? bt_info+0x180/0x180 [ 3332.722953][ T4370] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 3332.728687][ T4370] ? skb_pull_data+0xf7/0x200 [ 3332.733445][ T4370] hci_le_conn_complete_evt+0x183/0x440 [ 3332.739037][ T4370] ? hci_remote_host_features_evt+0x270/0x270 [ 3332.745158][ T4370] hci_event_packet+0x7b6/0x1280 [ 3332.750160][ T4370] ? bis_list+0x280/0x280 [ 3332.754515][ T4370] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 3332.760445][ T4370] ? kcov_remote_start+0x4c7/0x7e0 [ 3332.765598][ T4370] ? bt_warn+0x30/0x180 [ 3332.769809][ T4370] ? hci_send_to_monitor+0x9c/0x4a0 [ 3332.775146][ T4370] hci_rx_work+0x3eb/0xd40 [ 3332.779595][ T4370] ? _raw_spin_unlock+0x40/0x40 [ 3332.784526][ T4370] ? process_one_work+0x7b0/0x1160 [ 3332.789675][ T4370] process_one_work+0x8a2/0x1160 [ 3332.794666][ T4370] ? worker_detach_from_pool+0x240/0x240 [ 3332.800342][ T4370] ? _raw_spin_lock_irq+0xb7/0xf0 [ 3332.805390][ T4370] ? _raw_spin_lock_irqsave+0x100/0x100 [ 3332.811051][ T4370] ? kthread_data+0x4b/0xc0 [ 3332.815601][ T4370] worker_thread+0xaa2/0x1270 [ 3332.820329][ T4370] kthread+0x29d/0x330 [ 3332.824419][ T4370] ? worker_clr_flags+0x1a0/0x1a0 [ 3332.829471][ T4370] ? kthread_blkcg+0xd0/0xd0 [ 3332.834092][ T4370] ret_from_fork+0x1f/0x30 [ 3332.838554][ T4370] [ 3332.847500][ T4370] kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 3332.860816][ T4370] Bluetooth: hci0: failed to register connection device [ 3332.958116][T21463] netlink: 180900 bytes leftover after parsing attributes in process `syz.5.37511'. [ 3332.967880][T21463] openvswitch: netlink: Flow actions attr not present in new flow. [ 3333.859255][T21489] netlink: 'syz.7.37521': attribute type 12 has an invalid length. [ 3333.909540][T21489] netlink: 132 bytes leftover after parsing attributes in process `syz.7.37521'. [ 3334.021214][T21494] netlink: 134056 bytes leftover after parsing attributes in process `syz.0.37523'. [ 3334.519419][T21502] device hsr0 entered promiscuous mode [ 3337.310044][T21553] netlink: 'syz.7.37545': attribute type 11 has an invalid length. [ 3337.348667][T21553] netlink: 199836 bytes leftover after parsing attributes in process `syz.7.37545'. [ 3338.282842][T21551] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3338.637163][T21570] Q6\bY4: renamed from lo [ 3339.373235][T21584] device hsr0 entered promiscuous mode [ 3339.445635][T21586] netlink: 'syz.6.37561': attribute type 12 has an invalid length. [ 3339.472761][T21586] netlink: 132 bytes leftover after parsing attributes in process `syz.6.37561'. [ 3339.783800][T21590] netlink: 36 bytes leftover after parsing attributes in process `syz.1.37558'. [ 3339.904096][T21590] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 3340.295320][T21605] Q6\bY4: renamed from lo [ 3340.889309][T21617] device hsr0 entered promiscuous mode [ 3341.713416][T21639] netlink: 36 bytes leftover after parsing attributes in process `syz.7.37582'. [ 3341.831051][T21639] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 3341.945527][T21637] netlink: 'syz.1.37577': attribute type 12 has an invalid length. [ 3341.960818][T21637] netlink: 132 bytes leftover after parsing attributes in process `syz.1.37577'. [ 3342.210380][T21647] device lo left promiscuous mode [ 3342.263235][T21647] Q6\bY4: renamed from lo [ 3342.491528][T21652] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 3342.506902][T21652] device syzkaller0 entered promiscuous mode [ 3342.839630][T21661] device hsr0 entered promiscuous mode [ 3343.923275][ T4370] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 3344.371252][T21683] netlink: 134056 bytes leftover after parsing attributes in process `syz.7.37599'. [ 3353.913328][T21815] delete_channel: no stack [ 3358.067812][ T4370] Bluetooth: hci5: unexpected event 0x08 length: 15 > 4 [ 3359.956707][T21871] netlink: 9275 bytes leftover after parsing attributes in process `syz.7.37670'. [ 3360.133227][T22472] Bluetooth: hci5: command 0x0406 tx timeout [ 3361.991208][ T4370] Bluetooth: hci1: unexpected event 0x08 length: 15 > 4 [ 3362.592301][ T4370] Bluetooth: hci4: unexpected event 0x08 length: 151 > 4 [ 3365.341610][T21919] netlink: 9275 bytes leftover after parsing attributes in process `syz.6.37688'. [ 3367.285259][ T4370] Bluetooth: hci0: unexpected event 0x08 length: 151 > 4 [ 3368.242304][ T4370] Bluetooth: hci3: unexpected event 0x30 length: 15 > 3 [ 3371.569372][ T4370] Bluetooth: hci3: unexpected event 0x08 length: 151 > 4 [ 3375.441898][T21986] delete_channel: no stack [ 3383.565641][T22080] device veth0_to_team entered promiscuous mode [ 3385.754531][T22133] device veth0_to_team entered promiscuous mode [ 3389.014798][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 3389.021244][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 3393.783395][T22204] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 3393.801665][T22204] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 3393.849351][T22204] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 3400.400491][T22266] device syzkaller0 entered promiscuous mode [ 3409.482985][ T4370] ------------[ cut here ]------------ [ 3409.489267][ T4370] WARNING: CPU: 0 PID: 4370 at net/bluetooth/hci_conn.c:668 hci_conn_timeout+0x24f/0x450 [ 3409.499302][ T4370] Modules linked in: [ 3409.503297][ T4370] CPU: 0 PID: 4370 Comm: kworker/u5:5 Not tainted syzkaller #0 [ 3409.510892][ T4370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 3409.521042][ T4370] Workqueue: hci5 hci_conn_timeout [ 3409.526276][ T4370] RIP: 0010:hci_conn_timeout+0x24f/0x450 [ 3409.532024][ T4370] Code: 1f 8e e8 04 5a 9f f8 48 8b 35 d5 c6 eb 04 bf 08 00 00 00 48 89 da 5b 41 5c 41 5d 41 5e 41 5f 5d e9 96 46 20 f8 e8 11 6e 4e f8 <0f> 0b e9 35 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c dd fd [ 3409.551847][ T4370] RSP: 0018:ffffc90003307c08 EFLAGS: 00010293 [ 3409.557979][ T4370] RAX: ffffffff8934059f RBX: ffff88803c23e330 RCX: ffff88802e3d9dc0 [ 3409.566038][ T4370] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 3409.574102][ T4370] RBP: 00000000ffffffff R08: ffff88803c23e013 R09: 1ffff11007847c02 [ 3409.582187][ T4370] R10: dffffc0000000000 R11: ffffed1007847c03 R12: dffffc0000000000 [ 3409.590500][ T4370] R13: dffffc0000000000 R14: ffff88803c23e000 R15: ffff88803c23e010 [ 3409.598664][ T4370] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 3409.607708][ T4370] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3409.614410][ T4370] CR2: 0000555580591a28 CR3: 000000005e0ab000 CR4: 00000000003506f0 [ 3409.622491][ T4370] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 3409.630679][ T4370] DR3: 0000000000008d24 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 3409.638774][ T4370] Call Trace: [ 3409.642137][ T4370] [ 3409.645114][ T4370] ? process_one_work+0x7b0/0x1160 [ 3409.650287][ T4370] process_one_work+0x8a2/0x1160 [ 3409.655362][ T4370] ? worker_detach_from_pool+0x240/0x240 [ 3409.661189][ T4370] ? _raw_spin_lock_irq+0x86/0xf0 [ 3409.666331][ T4370] ? _raw_spin_lock_irq+0xb7/0xf0 [ 3409.671531][ T4370] ? _raw_spin_lock_irqsave+0x100/0x100 [ 3409.677131][ T4370] ? kthread_data+0x4b/0xc0 [ 3409.681754][ T4370] worker_thread+0xaa2/0x1270 [ 3409.686699][ T4370] kthread+0x29d/0x330 [ 3409.690816][ T4370] ? worker_clr_flags+0x1a0/0x1a0 [ 3409.695946][ T4370] ? kthread_blkcg+0xd0/0xd0 [ 3409.700582][ T4370] ret_from_fork+0x1f/0x30 [ 3409.705154][ T4370] [ 3409.708225][ T4370] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 3409.715578][ T4370] CPU: 0 PID: 4370 Comm: kworker/u5:5 Not tainted syzkaller #0 [ 3409.723166][ T4370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 3409.733262][ T4370] Workqueue: hci5 hci_conn_timeout [ 3409.738428][ T4370] Call Trace: [ 3409.741744][ T4370] [ 3409.744723][ T4370] dump_stack_lvl+0x188/0x24e [ 3409.749456][ T4370] ? memcpy+0x3c/0x60 [ 3409.753484][ T4370] ? show_regs_print_info+0x12/0x12 [ 3409.758748][ T4370] ? load_image+0x400/0x400 [ 3409.763311][ T4370] panic+0x2e5/0x730 [ 3409.767280][ T4370] ? bpf_jit_dump+0xd0/0xd0 [ 3409.771847][ T4370] ? ret_from_fork+0x1f/0x30 [ 3409.776501][ T4370] __warn+0x2f8/0x4f0 [ 3409.780521][ T4370] ? hci_conn_timeout+0x24f/0x450 [ 3409.785602][ T4370] ? hci_conn_timeout+0x24f/0x450 [ 3409.790659][ T4370] report_bug+0x2ba/0x4f0 [ 3409.795021][ T4370] ? hci_conn_timeout+0x24f/0x450 [ 3409.800085][ T4370] handle_bug+0x3a/0x70 [ 3409.804273][ T4370] exc_invalid_op+0x16/0x40 [ 3409.808804][ T4370] asm_exc_invalid_op+0x16/0x20 [ 3409.813678][ T4370] RIP: 0010:hci_conn_timeout+0x24f/0x450 [ 3409.819336][ T4370] Code: 1f 8e e8 04 5a 9f f8 48 8b 35 d5 c6 eb 04 bf 08 00 00 00 48 89 da 5b 41 5c 41 5d 41 5e 41 5f 5d e9 96 46 20 f8 e8 11 6e 4e f8 <0f> 0b e9 35 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c dd fd [ 3409.838964][ T4370] RSP: 0018:ffffc90003307c08 EFLAGS: 00010293 [ 3409.845059][ T4370] RAX: ffffffff8934059f RBX: ffff88803c23e330 RCX: ffff88802e3d9dc0 [ 3409.853059][ T4370] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 3409.861052][ T4370] RBP: 00000000ffffffff R08: ffff88803c23e013 R09: 1ffff11007847c02 [ 3409.869046][ T4370] R10: dffffc0000000000 R11: ffffed1007847c03 R12: dffffc0000000000 [ 3409.877039][ T4370] R13: dffffc0000000000 R14: ffff88803c23e000 R15: ffff88803c23e010 [ 3409.885039][ T4370] ? hci_conn_timeout+0x24f/0x450 [ 3409.890102][ T4370] ? hci_conn_timeout+0x24f/0x450 [ 3409.895157][ T4370] ? process_one_work+0x7b0/0x1160 [ 3409.900291][ T4370] process_one_work+0x8a2/0x1160 [ 3409.905265][ T4370] ? worker_detach_from_pool+0x240/0x240 [ 3409.910916][ T4370] ? _raw_spin_lock_irq+0x86/0xf0 [ 3409.915965][ T4370] ? _raw_spin_lock_irq+0xb7/0xf0 [ 3409.921006][ T4370] ? _raw_spin_lock_irqsave+0x100/0x100 [ 3409.926570][ T4370] ? kthread_data+0x4b/0xc0 [ 3409.931109][ T4370] worker_thread+0xaa2/0x1270 [ 3409.935829][ T4370] kthread+0x29d/0x330 [ 3409.939919][ T4370] ? worker_clr_flags+0x1a0/0x1a0 [ 3409.944969][ T4370] ? kthread_blkcg+0xd0/0xd0 [ 3409.949581][ T4370] ret_from_fork+0x1f/0x30 [ 3409.954041][ T4370] [ 3409.957660][ T4370] Kernel Offset: disabled [ 3409.962056][ T4370] Rebooting in 86400 seconds..