last executing test programs: 53.99851904s ago: executing program 1 (id=10341): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80010, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_config_ext={0xffffffffffffffff, 0x5d}, 0x0, 0xca, 0x0, 0x0, 0x3, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x6c6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs$namespace(0x0, &(0x7f0000000000)) close(r1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}], 0xa8}, 0x0) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x100e68, 0x0, 0x4000, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100003a00702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(r4, &(0x7f00000002c0)=ANY=[@ANYRES8=r1, @ANYRES8=r5], 0x12) 53.697559768s ago: executing program 2 (id=10343): close(0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r1 = socket$kcm(0x1e, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB='\x00@\x00'/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="000000000100"], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0xc, [@int={0xc, 0x0, 0x0, 0x1, 0x0, 0x56, 0x0, 0x52, 0x3}, @typedef={0x10, 0x0, 0x0, 0x8, 0x3}]}, {0x0, [0x30, 0x5f, 0x3e, 0x5f, 0x2e, 0x2e, 0x61, 0x30, 0x2e, 0x5f]}}, &(0x7f00000001c0)=""/178, 0x40, 0xb2, 0x1, 0xd}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\a\x00\x00\x00'], 0x50) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="03b4e100040000000400f7ff0900000020000000e62f2ccdc94d015bf7c5a1d45ba757ac82e1fc8ba2a99c646b83009462d096eeaca001845314c9f208671bfccfa3a335831618c3fe97050642cac61d4c9f9c337e75356a7dd7bbecd8da76618c733c1a5f98ab4cb1dbd8fad98503fbbc300c1cc31bef23d3592d48eb7dabee81c072ff02f27e55944a408b2ff150d54fe319eb615a147d59996a922b4f5e", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x0, 0x40000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1b, 0x0, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="020000000400000005000000aa"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r4}, 0x38) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22041000f3fe80000000000000110880febb0007aafe8000000000000027bfa7b09303960e2b80"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x14, 0x0, &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9c}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89a0, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r8, 0x3, 0x16, 0xfffffffffffffd61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0xe8, 0x5, 0xd, 0x7, 0x0, 0x7fffffff, 0x7a5d4, 0x4, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xdfffffff, 0x0, @perf_config_ext={0x0, 0x7}, 0x2, 0x1, 0x7, 0x4, 0x81, 0x8, 0x5, 0x0, 0x20002, 0x0, 0x4}, 0x0, 0xa, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x18}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 52.835960949s ago: executing program 1 (id=10345): bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000440)={@fallback, 0x8, 0x0, 0x5, &(0x7f0000000200)=[0x0], 0x1, 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000640)={0x1, 0x58, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r2 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000680), 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)=ANY=[@ANYRES32=r1, @ANYRES32, @ANYBLOB="060005000420000000000000b7ea6d1700734226ab4a0925aad77d36920bd72660cc3d270fdf85fa26c4f8b33579bc1a140889210818ba0618777efe", @ANYRES32=r2, @ANYBLOB, @ANYRES64=r0], 0x20) r3 = syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x10140) syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x3, 0x9}, 0x8000, 0x7, 0x101, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0xc004) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x29, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb904021d08007b490d4f1e81f8d815000100ff05142603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b35, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000600000000190000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) r6 = socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$kcm(r6, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x800) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8003fffe, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) 52.393266714s ago: executing program 2 (id=10348): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0x31, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffffff}, [@tail_call, @ringbuf_query, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xffffffffffffffff}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x5}, @map_idx={0x18, 0x6, 0x5, 0x0, 0xb}, @map_idx={0x18, 0x8, 0x5, 0x0, 0xe}, @ringbuf_query, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000}}, @map_val={0x18, 0x7, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}]}, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xf475, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) r0 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x0) 52.209212875s ago: executing program 2 (id=10349): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, 0x0, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000c40)="02", 0x1}], 0x1}, 0x408c4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000400)="a5", 0x1}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 51.932197701s ago: executing program 0 (id=10350): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x2, 0x2, 0x0, 0x1}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000012c0)={0x0, 0x0, 0xffffffffffffffff, 0x0, 0x7, r0, 0x0, 0x20}, 0x38) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x400000}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000180)='%ps \x00'}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r3, r4}, 0xc) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r5) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000c00)="1400000037000b0f925a2a22feab3c3d06a2c2e4", 0x14}], 0x1, 0x0, 0x0, 0x20000000}, 0x0) 51.804449808s ago: executing program 0 (id=10351): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0x38, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffffff}, [@tail_call, @ringbuf_query, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xffffffffffffffff}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x5}, @map_idx={0x18, 0x6, 0x5, 0x0, 0xb}, @map_idx={0x18, 0x8, 0x5, 0x0, 0xe}, @ringbuf_query, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xf475, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) r0 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x0) 51.736163502s ago: executing program 1 (id=10352): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000007140)={&(0x7f0000002ac0)=@in6={0xa, 0x4e24, 0x40000, @local, 0x4}, 0x80, 0x0}, 0x4000845) 51.630799398s ago: executing program 0 (id=10353): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80010, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_config_ext={0xffffffffffffffff, 0x5d}, 0x0, 0xca, 0x0, 0x0, 0x3, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x6c6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs$namespace(0x0, &(0x7f0000000000)) close(r1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="280100000000000001000000"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}], 0xa8}, 0x0) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x100e68, 0x0, 0x4000, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100003a00702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(r4, &(0x7f00000002c0)=ANY=[@ANYRES8=r1, @ANYRES8=r5], 0x12) 51.60269076s ago: executing program 1 (id=10354): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8210, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) socket$kcm(0x15, 0x5, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x2, 0xfffffffe, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c00000002000000000000000000000300000000020000000200000000000000000000000000000105000000080000020000000002000005000000000000000001000000000000000000000001"], 0x0, 0x66}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000c40)="02", 0x1}], 0x1}, 0x408c4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000400)="a5d0", 0x1b8a}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 51.480848197s ago: executing program 3 (id=10355): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x3, 0x2, &(0x7f0000000100)) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004000000", @ANYRES32=0x0, @ANYBLOB="bf57040000000000000000000000000000000000cc5ae15ea0c6bf3e2ea7f9b8764d557176174289ef", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xe, 0x8, &(0x7f0000000a00)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c9f4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75055df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83766b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b556381768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225c380fac12f8205d182f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42ddd5f393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05bea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b2"], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000009c0)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYRES32, @ANYBLOB], 0x20) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000300)=ANY=[@ANYRES32=r4, @ANYRES32=r6, @ANYBLOB="299e976118396bd05dd04a188b707ba7e9ad158ae582a67fc7e800e87de8c02455e2694082a3ceabd4f17db470cdbafd0ae9", @ANYRES32=r5, @ANYBLOB, @ANYRES64=0x0], 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000240)=ANY=[@ANYRES8], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r7) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x18}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0xffffffffffffffff) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x40107447, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_int(r8, &(0x7f0000000100)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) write$cgroup_int(r9, &(0x7f0000000080), 0x12) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000002c0)=r1, 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000002c80)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x2004c000) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xa0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x226, 0xb, 0x1, 0x3, 0x3, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) 51.25471474s ago: executing program 2 (id=10356): close(0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604008000002e046cdda37ed0c1126c12b9c82c52c1682d523c9828163094b9"], 0x0, 0x37}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB='\x00@\x00'/20, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="000000000100"], 0x48) r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xf, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0xc9}}}, &(0x7f0000000200)='syzkaller\x00', 0xb, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\a\x00\x00\x00'], 0x50) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x1) socket$kcm(0x10, 0x2, 0x0) close(r2) recvmsg(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)}, 0x10021) 51.248735661s ago: executing program 3 (id=10357): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x11, 0x5, 0x101, 0x0) syz_clone(0x21000000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r0, &(0x7f0000000340)={&(0x7f00000002c0)=@in6={0xa, 0x4e22, 0x0, @dev}, 0x80, 0x0}, 0x200ce0c0) sendmsg$inet(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)='n', 0xffb8}], 0x1}, 0x20000081) 50.995513615s ago: executing program 3 (id=10358): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0x31, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffffff}, [@tail_call, @ringbuf_query, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xffffffffffffffff}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x5}, @map_idx={0x18, 0x6, 0x5, 0x0, 0xb}, @map_idx={0x18, 0x8, 0x5, 0x0, 0xe}, @ringbuf_query, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000}}, @map_val={0x18, 0x7, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}]}, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xf475, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) r0 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x0) 50.983107076s ago: executing program 2 (id=10359): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x11, 0x5, 0x101, 0x0) syz_clone(0x21000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r0, &(0x7f0000000340)={&(0x7f00000002c0)=@in6={0xa, 0x4e22, 0x0, @dev}, 0x80, 0x0}, 0x200ce0c0) sendmsg$inet(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)='n', 0xffb8}], 0x1}, 0x20000081) 50.645446956s ago: executing program 3 (id=10360): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf15, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x81, 0x0, 0x1, 0x1}, {0x6, 0x0, 0x0, 0xffffffff}]}) (async) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001640)='blkio.bfq.dequeue\x00', 0x0, 0x0) (async) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x3, &(0x7f0000000440)=ANY=[@ANYRES64=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x55, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200000}, 0x94) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, 0x0, 0x0) (async) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000640)=ANY=[@ANYRESHEX=r3], 0x0, 0xb7a784f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001600)={r2, 0xe0, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000001300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, &(0x7f0000001340)=[0x0, 0x0, 0x0], &(0x7f0000001380)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xba, &(0x7f00000013c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000001440), &(0x7f0000001480), 0x8, 0x59, 0x8, 0x8, &(0x7f00000014c0)}}, 0x10) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x5, &(0x7f00000006c0)=ANY=[@ANYRES16=r3, @ANYRES32, @ANYBLOB="df26b78fd68a360b2a9d8845935fad4af739aa4bab6d9273bc7e9c9a1d3db5aa74", @ANYRES32=r6, @ANYRES32=r7, @ANYRES32, @ANYRES8, @ANYRES16, @ANYRESDEC=r1, @ANYRES64=0x0, @ANYRES8=r3], 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, '\x00', r7, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300b70004010000040000809a0631da729f95", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x8, &(0x7f0000001740)=ANY=[@ANYRES64=r7, @ANYBLOB="0000000000000000b703000001000000850000000d0000ff010000000000000095"], &(0x7f0000001780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0xbc160d167f3ad783, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4867, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x6, 0x0, 0x2008}, 0x50) (async, rerun: 32) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000005000000850000002e00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, 0x0, 0x0) sendmsg$unix(r9, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000980)="c5a286211d4b4a1d54c229d1884e", 0xe}], 0x1}, 0x40000) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x1f, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) sendmsg$inet(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x34004000) (async, rerun: 64) r11 = socket$kcm(0xa, 0x5, 0x0) (rerun: 64) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000002280)=ANY=[@ANYBLOB], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) setsockopt$sock_attach_bpf(r11, 0x29, 0x22, &(0x7f0000000100)=r12, 0x120) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 50.56694178s ago: executing program 0 (id=10361): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0x38, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffffff}, [@tail_call, @ringbuf_query, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xffffffffffffffff}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x5}, @map_idx={0x18, 0x6, 0x5, 0x0, 0xb}, @map_idx={0x18, 0x8, 0x5, 0x0, 0xe}, @ringbuf_query, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xf475, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) r0 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x0) 50.426731658s ago: executing program 2 (id=10362): bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000440)={@fallback, 0x8, 0x0, 0x5, &(0x7f0000000200)=[0x0], 0x1, 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000640)={0x1, 0x58, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r2 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000680), 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)=ANY=[@ANYRES32=r1, @ANYRES32, @ANYBLOB="060005000420000000000000b7ea6d1700734226ab4a0925aad77d36920bd72660cc3d270fdf85fa26c4f8b33579bc1a140889210818ba0618777efe", @ANYRES32=r2, @ANYBLOB, @ANYRES64=r0], 0x20) r3 = syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x10140) syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x3, 0x9}, 0x8000, 0x7, 0x101, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0xc004) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x29, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb904021d08007b490d4f1e81f8d815000100ff05142603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b35, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000600000000190000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) r6 = socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$kcm(r6, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x800) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8003fffe, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) 50.425589838s ago: executing program 0 (id=10370): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8210, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001b80)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) socket$kcm(0x15, 0x5, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x2, 0xfffffffe, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c00000002000000000000000000000300000000020000000200000000000000000000000000000105000000080000020000000002000005000000000000000001000000000000000000000001"], 0x0, 0x66}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000c40)="02", 0x1}], 0x1}, 0x408c4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000400)="a5d0", 0x1b8a}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 50.424208628s ago: executing program 1 (id=10371): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0x38, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffffff}, [@tail_call, @ringbuf_query, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xffffffffffffffff}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x5}, @map_idx={0x18, 0x6, 0x5, 0x0, 0xb}, @map_idx={0x18, 0x8, 0x5, 0x0, 0xe}, @ringbuf_query, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xf475, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) r0 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x0) 50.419784498s ago: executing program 3 (id=10363): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000007140)={&(0x7f0000002ac0)=@in6={0xa, 0x4e24, 0x40000, @local, 0x4}, 0x80, 0x0}, 0x4000845) 50.302834175s ago: executing program 1 (id=10364): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, 0x0, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000c40)="02", 0x1}], 0x1}, 0x408c4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000400)="a5", 0x1}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 50.23669002s ago: executing program 0 (id=10365): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x11, 0x5, 0x101, 0x0) syz_clone(0x21000000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x10) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f0000000080)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000100)='{\x00') r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x8, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r5, @ANYRES32=r5, @ANYBLOB="0000000000000000b703000001000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r6, 0x60000000, 0xcc0, 0x0, &(0x7f0000000340)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$tipc(r4, &(0x7f00000009c0)={&(0x7f0000000500)=@name, 0x10, 0x0}, 0x40045) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r7, &(0x7f0000000340)={&(0x7f00000002c0)=@in6={0xa, 0x4e22, 0x0, @dev}, 0x80, 0x0}, 0x200ce0c0) sendmsg$inet(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)='n', 0xffb8}], 0x1}, 0x20000081) 50.155037834s ago: executing program 3 (id=10366): close(0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r1 = socket$kcm(0x1e, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB='\x00@\x00'/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="000000000100"], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0xc, [@int={0xc, 0x0, 0x0, 0x1, 0x0, 0x56, 0x0, 0x52, 0x3}, @typedef={0x10, 0x0, 0x0, 0x8, 0x3}]}, {0x0, [0x30, 0x5f, 0x3e, 0x5f, 0x2e, 0x2e, 0x61, 0x30, 0x2e, 0x5f]}}, &(0x7f00000001c0)=""/178, 0x40, 0xb2, 0x1, 0xd}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\a\x00\x00\x00'], 0x50) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="03b4e100040000000400f7ff0900000020000000e62f2ccdc94d015bf7c5a1d45ba757ac82e1fc8ba2a99c646b83009462d096eeaca001845314c9f208671bfccfa3a335831618c3fe97050642cac61d4c9f9c337e75356a7dd7bbecd8da76618c733c1a5f98ab4cb1dbd8fad98503fbbc300c1cc31bef23d3592d48eb7dabee81c072ff02f27e55944a408b2ff150d54fe319eb615a147d59996a922b4f5e", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x0, 0x40000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1b, 0x0, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="020000000400000005000000aa"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r4}, 0x38) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22041000f3fe80000000000000110880febb0007aafe8000000000000027bfa7b09303960e2b80"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x14, 0x0, &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9c}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89a0, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r8, 0x3, 0x16, 0xfffffffffffffd61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0xe8, 0x5, 0xd, 0x7, 0x0, 0x7fffffff, 0x7a5d4, 0x4, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xdfffffff, 0x0, @perf_config_ext={0x0, 0x7}, 0x2, 0x1, 0x7, 0x4, 0x81, 0x8, 0x5, 0x0, 0x20002, 0x0, 0x4}, 0x0, 0xa, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x18}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 11.063615436s ago: executing program 32 (id=10365): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x11, 0x5, 0x101, 0x0) syz_clone(0x21000000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x10) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f0000000080)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000100)='{\x00') r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x8, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r5, @ANYRES32=r5, @ANYBLOB="0000000000000000b703000001000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r6, 0x60000000, 0xcc0, 0x0, &(0x7f0000000340)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$tipc(r4, &(0x7f00000009c0)={&(0x7f0000000500)=@name, 0x10, 0x0}, 0x40045) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r7, &(0x7f0000000340)={&(0x7f00000002c0)=@in6={0xa, 0x4e22, 0x0, @dev}, 0x80, 0x0}, 0x200ce0c0) sendmsg$inet(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)='n', 0xffb8}], 0x1}, 0x20000081) 10.913982606s ago: executing program 33 (id=10364): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, 0x0, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000c40)="02", 0x1}], 0x1}, 0x408c4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000400)="a5", 0x1}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 10.731062776s ago: executing program 34 (id=10362): bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000440)={@fallback, 0x8, 0x0, 0x5, &(0x7f0000000200)=[0x0], 0x1, 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000640)={0x1, 0x58, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r2 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000680), 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)=ANY=[@ANYRES32=r1, @ANYRES32, @ANYBLOB="060005000420000000000000b7ea6d1700734226ab4a0925aad77d36920bd72660cc3d270fdf85fa26c4f8b33579bc1a140889210818ba0618777efe", @ANYRES32=r2, @ANYBLOB, @ANYRES64=r0], 0x20) r3 = syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x10140) syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x3, 0x9}, 0x8000, 0x7, 0x101, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0xc004) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x29, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb904021d08007b490d4f1e81f8d815000100ff05142603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b35, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000600000000190000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) r6 = socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$kcm(r6, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x800) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8003fffe, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) 10.504054799s ago: executing program 35 (id=10366): close(0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r1 = socket$kcm(0x1e, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB='\x00@\x00'/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="000000000100"], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0xc, [@int={0xc, 0x0, 0x0, 0x1, 0x0, 0x56, 0x0, 0x52, 0x3}, @typedef={0x10, 0x0, 0x0, 0x8, 0x3}]}, {0x0, [0x30, 0x5f, 0x3e, 0x5f, 0x2e, 0x2e, 0x61, 0x30, 0x2e, 0x5f]}}, &(0x7f00000001c0)=""/178, 0x40, 0xb2, 0x1, 0xd}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\a\x00\x00\x00'], 0x50) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="03b4e100040000000400f7ff0900000020000000e62f2ccdc94d015bf7c5a1d45ba757ac82e1fc8ba2a99c646b83009462d096eeaca001845314c9f208671bfccfa3a335831618c3fe97050642cac61d4c9f9c337e75356a7dd7bbecd8da76618c733c1a5f98ab4cb1dbd8fad98503fbbc300c1cc31bef23d3592d48eb7dabee81c072ff02f27e55944a408b2ff150d54fe319eb615a147d59996a922b4f5e", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x0, 0x40000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1b, 0x0, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="020000000400000005000000aa"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r4}, 0x38) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22041000f3fe80000000000000110880febb0007aafe8000000000000027bfa7b09303960e2b80"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x14, 0x0, &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9c}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89a0, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r8, 0x3, 0x16, 0xfffffffffffffd61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0xe8, 0x5, 0xd, 0x7, 0x0, 0x7fffffff, 0x7a5d4, 0x4, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xdfffffff, 0x0, @perf_config_ext={0x0, 0x7}, 0x2, 0x1, 0x7, 0x4, 0x81, 0x8, 0x5, 0x0, 0x20002, 0x0, 0x4}, 0x0, 0xa, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x18}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.484366575s ago: executing program 4 (id=10367): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x11, 0x5, 0x101, 0x0) syz_clone(0x21000000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r1 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x17, &(0x7f0000000800)=r0, 0x4) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x10) write$cgroup_pressure(r0, &(0x7f0000000040)={'some', 0x20, 0x322, 0x20, 0x5}, 0x2f) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000780)={r2, &(0x7f0000000340), 0x0}, 0x20) r3 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r3, &(0x7f0000000340)={&(0x7f00000002c0)=@in6={0xa, 0x4e22, 0x0, @dev}, 0x80, 0x0}, 0x200ce0c0) sendmsg$inet(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)='n', 0xffb8}], 0x1}, 0x20000081) 2.198317602s ago: executing program 4 (id=10373): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_pid(r0, &(0x7f0000000c40), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, 0x0, 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000001c0), 0x12) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000440)=""/183}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_config_ext, 0x800, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2ff}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) r4 = socket$kcm(0x10, 0x400000002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000300000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="1303000055009155090893b31b71a54a07"], 0xfe33) socketpair(0x11, 0x5, 0x101, 0x0) r5 = syz_clone(0x21000000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f00000001c0)={&(0x7f0000000040)=@l2tp={0x2, 0x0, @private=0xa010102}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000380)="8daf6fe28e61844f08c2c57a638711e615f51a058dbe9f16b142d40a4fbb11cd2f9a95b2220330c09b4a366462ebbce74a42cb2aa2324de3e17e2922c6c0afff49ea2e957ef063fc7b0f28753f33cdd4de6bc3bb8ea8ce3ab485bb28f1926e91909c14b7cdf202c70d15d428c6d08d8a025637e8a3e5cb04873577ecd7370105488744b8b35eb15d896612c2918e447b01bec37a6f4657ed8b1a2c86d557ca1ce77b1ef93c240a99020b73d201b491b4414cccbcedb31359841bedc9", 0xbc}, {&(0x7f0000000500)="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", 0xfd}, {&(0x7f0000000600)="f655f5f37aa3bb8942766c4aa07f6fdd37775306a5a0492f86219dc0f80d6e30048eabb354da6c0f8a8dd46247a481fa6005fe3828bd8544963b980078b6c6e18ca051b18f68dde552addc580b578dce67d223e415e91490b45c7fb5981d462a623a3c766def953e8e550361f06996aa238bc67cf753898f1d45302256b77adeba1ae34ac1598eb89ec3ddde0432d09aa610c167ad76eb105c20f25490e916bc7d47efb08bdd20bc9303fa1ec3e0e80f11552175430ccaac9131e1fe", 0xbc}, {&(0x7f00000006c0)="8e232f4108e7521e7ad6533a5968fb9b1f01f39abd8308e0fa91e07d20db9423a6f64ef79e9a86a7bed46aa0a2cb0c3a15136d41382a10ae4720f0bddf76472879599e67720ce78f15f05aea0651230728be4c8cdd96606fc01077ee5921d7807526bfbb0cba0351a7b8ed3460528752e932c25125239a325a9aa4b95a389f6f9de2db23f8754dc81f47a2ae6b012d477a23d86c0d9e437b376a6e9ba6f1ae55315f2c8f27a67067a6396042171a9bc598ed842021021e77a24f33a88960ff", 0xbf}], 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000008a934beadd0e06000045edd8cdf45b0000"], 0x18}, 0x4000) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = socket$kcm(0xa, 0x2, 0x88) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={0x1, 0x58, &(0x7f0000000780)}, 0x10) sendmsg$kcm(r7, &(0x7f0000000340)={&(0x7f00000002c0)=@in={0x2, 0x4e24, @broadcast}, 0x80, 0x0}, 0x200ce0c1) sendmsg$inet(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)='n', 0xffb8}], 0x1}, 0x20000081) 2.045567591s ago: executing program 6 (id=10369): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80010, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_config_ext={0xffffffffffffffff, 0x5d}, 0x0, 0xca, 0x0, 0x0, 0x3, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x6c6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs$namespace(0x0, &(0x7f0000000000)) close(r1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="280100000000000001000000"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}], 0xa8}, 0x0) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x100e68, 0x0, 0x4000, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100003a00702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(r4, &(0x7f00000002c0)=ANY=[@ANYRES8=r1, @ANYRES8=r5], 0x12) 1.807792975s ago: executing program 5 (id=10368): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa9, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="b4002b7d5ecc56ffff"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) close(r2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x6, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x2d, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x3, 0x0, 0x80000000, 0xc}, {0x1000000a, 0x84}], 0x10, 0x4}, 0x94) close(0x3) socket$kcm(0xa, 0x5, 0x0) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r4, 0x1c) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x5, 0x2, 0x1, 0xa}, {0x3, 0x0, 0x0, 0x1}, {0x0, 0x4, 0x10}]}, 0x94) r6 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = gettid() perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0xa, 0xe, 0x1, 0x8, 0x0, 0xc1, 0x20, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000000), 0xa}, 0x14000, 0x1, 0x9, 0x0, 0x4, 0x8, 0x7a09, 0x0, 0x9, 0x0, 0x2}, r7, 0xb, r6, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r3) r8 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x502b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x4, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"/2356], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r10, 0x18000000000002a0, 0x1d, 0x60000000, &(0x7f0000000100)="b9ff03076044238cb89e14f0080047e0ffff00004000632f77fb8035140cac14140c07029f89052f87e577ca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000}, 0x2c) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="7c00000000000000000000000700000044140001ac1414aa00000000ac1414000000000000441c0003e0000001000000007f000001000000000000000000000000442c00000000000000000f883816814100000000000000000000000000000000000000000000000000000000000000000000440c0001000000000000000000000000000000a400000000000000000000000700000044280000000000000000000000000000000000000000000000000000000000000000000000000000071700e0000002ac1414bb00000000e0000002ac1414bb018616000000000010c986d78e6c4b9394b247217b87cb00830b00000000007f000001861f0000000000020010421487f84baabcbcfb42a4d90bab000748c68c4c31001089ca45d9612e5b5c11f12bc78a41000000000000006c000000000000000000000007000000441c0003ffffffff000000000000000000000000e00000010000000044340001ac1414bb0000000000000000000000000000000000000000ac1414aa00000000ac1414aa00000000ac1e000100000000830b0000000000e000000200000000001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) r11 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030029000b12d25a80648c2594f90124fc60100c020000000400053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x25, &(0x7f0000000600)=ANY=[@ANYBLOB="b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7050000080000008500000100c835d47a18120000000000000000000000000000000000239c8b9d20c0895930990672f452d574fc78c7f1a3aada30b3a6cce694f1c9be5e3a781b65fdc0c2880bfe00367e8614d657d40a3bfb84d023a6c8c84d01d56e4b17585f7da85ad0bc2ac5ca40e36b807c0054f692014e91e0fadebb62d018d7c7f4c9eef7de76c2241e9f1700f3f856a6b9cf452723e3cb126cfa0104a1b3024816082747aa0a1a992b074c48df0a938c4f8bb3559a84", @ANYRES32, @ANYBLOB="0000000000000000186200000b0000000000000044000000852000000400000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000003000000850000000600000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001832000003000000000000000000000018000000090000000000000009000000"], &(0x7f00000002c0)='syzkaller\x00', 0x8, 0x60, &(0x7f0000000300)=""/96, 0x41000, 0x2d, '\x00', 0x0, 0x25, r5, 0x8, &(0x7f0000000380)={0xa, 0x3}, 0x8, 0x10, &(0x7f00000003c0)={0x1, 0x1, 0x5, 0x7ae}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000400)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, r11], &(0x7f0000000440)=[{0x3, 0x5, 0x3, 0xa}, {0x1, 0x4, 0xa, 0x3}, {0x1, 0x5, 0x4, 0x6cbebb6d2e37cf12}]}, 0x94) r13 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000580)=@generic={&(0x7f0000000540)='./file0\x00', 0x0, 0x10}, 0x18) bpf$PROG_BIND_MAP(0x23, &(0x7f00000005c0)={r12, r13}, 0xc) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r4) 1.738753979s ago: executing program 4 (id=10374): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0x2d, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffffff}, [@tail_call, @ringbuf_query, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xffffffffffffffff}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x5}, @map_idx={0x18, 0x6, 0x5, 0x0, 0xb}, @map_idx={0x18, 0x8, 0x5, 0x0, 0xe}, @ringbuf_query, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @map_val={0x18, 0x7, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xf475, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) r0 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x0) 1.627737366s ago: executing program 4 (id=10375): socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0300000004000000040000001200000020000000", @ANYRES32, @ANYBLOB="fcff65b076c097b4e9f1b5e85adecf27347d0000000006000000d4e42c3140", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x2100, 0xc78, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000005, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0xfffffe8000000000, 0x200}, 0x200, 0x6, 0x3, 0x0, 0x0, 0x2, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x891c, &(0x7f0000000040)={'ip6_vti0\x00', @random="02000400"}) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000800000000000061"], 0x0, 0x28}, 0x28) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x26e1, 0x0) r5 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="1c8c00005f00071b189da80400008000000000af"], 0xfe33) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'\x00', 0x7101}) write$cgroup_devices(r4, &(0x7f0000000340)=ANY=[], 0xa) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000004000000000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, r3, 0x8, 0x0, 0x0, 0x14, 0x0, 0xff3d}, 0x80) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x1, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x7, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r6, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000440)="f4001100032b2c25fe8007000000007a2c080000000900"/40, 0x28}], 0x1}, 0x0) r7 = socket$kcm(0x22, 0x2, 0x21) ioctl$sock_kcm_SIOCKCMUNATTACH(r7, 0x89e1, 0x0) r8 = socket$kcm(0x29, 0x5, 0x0) setsockopt$sock_attach_bpf(r8, 0x1, 0x4b, &(0x7f0000000480), 0x63) (fail_nth: 1) 1.530280801s ago: executing program 7 (id=10372): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0x31, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffffff}, [@tail_call, @ringbuf_query, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xffffffffffffffff}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x5}, @map_idx={0x18, 0x6, 0x5, 0x0, 0xb}, @map_idx={0x18, 0x8, 0x5, 0x0, 0xe}, @ringbuf_query, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000}}, @map_val={0x18, 0x7, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}]}, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xf475, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) r0 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x0) 1.179482751s ago: executing program 7 (id=10376): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="12000000080000000400000002"], 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9041c1d0800fe007c05e8fe55a109000100ff02142603600e12080005007a010401a80016002000034004020000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x740b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x4, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000100)={r2, r5}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@jmp={0x5, 0x1, 0x1, 0xa, 0xa, 0xfffffffffffffff5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x7, 0x1000, &(0x7f0000001cc0)=""/4096, 0x41100, 0xd}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r0}, 0x20) perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x8, 0xf7, 0x2d, 0x0, 0x400000, 0x8, 0xb, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x2, 0xc0ef}, 0x430, 0x3, 0x4, 0x2, 0x81, 0xffff, 0x4c, 0x0, 0xfff, 0x0, 0x2e}, 0x0, 0x1, 0xffffffffffffffff, 0x7b6f972a7e8687f2) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, &(0x7f0000000040)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0xbf}, @exit], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x11}, 0x94) 1.126050225s ago: executing program 4 (id=10377): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0x0, 0x0, &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1a}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={&(0x7f0000000140), 0x1}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x1, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424", 0x12}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)}, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000300)={r1, 0x2000000, 0x8, 0x0, &(0x7f0000000080)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x0, 0xfffffbff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, r2, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000001c0)=@sco={0x1f, @none}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000240)=""/53, 0x35}, {&(0x7f00000002c0)=""/117, 0x75}, {&(0x7f0000000340)=""/164, 0xa4}, {&(0x7f0000000400)=""/79, 0x4f}], 0x4}, 0x40000003) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x480283, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x7606}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x7, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r6, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r8 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r7, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r8, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r9, 0x4008240b, &(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10000010000000, 0x8}}) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000880)="d80000001e0081054e81f78206000000000000000a0014260360cf9808000f00245bde1625fcb8b20800094014000000035c0461c1d67f6f94007134cf6efb8000d74748420a963aa007a290457f01898102e807ad522a4807f13af8030ab316277ce07bbace8017cbec4c2ee5a7cef4090000001fb791433a5ee4ce1b14d6d930dfe1d9d322fe7c9f8716a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad909d5e1ca9781ed0bffece0b42a9eca0200e6d5d40dd6e4edef3d93452a92954b43370e9703", 0xd8}], 0x1}, 0x40800) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'batadv0\x00', 0x1000}) socket$kcm(0x10, 0x2, 0x0) 1.086860487s ago: executing program 5 (id=10378): r0 = perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xfffffffffffffff8, 0x3}, 0x0, 0x0, 0x2, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0x3}, 0x11efa, 0x4, 0x98, 0x3, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = socket$kcm(0x22, 0x2, 0x21) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x80044944, &(0x7f0000000200)) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r6, 0x1, 0x8, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r7) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0x400, 0x0, r0, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x1}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4edcd804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f73794529a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9e1b4c8161b02", 0x0, 0x0, 0x0, 0x0, r8}, 0x38) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0xc) r9 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r10 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r10, 0x107, 0xd, &(0x7f00000000c0), 0x10) r11 = syz_clone(0x200400, &(0x7f0000000380)="91d8", 0x2, &(0x7f00000003c0), &(0x7f0000000400), &(0x7f00000006c0)="9f1e6bd33df2048ed078a77945093296ca4113eb42cc0fa9081a62e9d965ec5e5645fe09fa58ea2a2d5542895a74a1760d71d5b5cbb731b4d5dfdab247e9731926b7ab5698701226fe07b5f405224fd2568de176572a3be268") perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x1, 0x8, 0x5, 0x9, 0x0, 0x4, 0x8020d, 0x4, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f00000002c0), 0x4}, 0x0, 0x4, 0x5, 0x4, 0x9, 0x2, 0x1, 0x0, 0x240000, 0x0, 0x10001}, r11, 0x9, r3, 0x11) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a"], 0xfe33) write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[@ANYBLOB='6@\x00\x00I'], 0xfe33) 1.020834721s ago: executing program 6 (id=10379): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x20) socketpair$unix(0x1, 0x5, 0x0, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r3, 0x1, 0x31, 0x0, 0x0) close(0xffffffffffffffff) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x9a) r4 = socket$kcm(0x10, 0x2, 0x4) close(r4) sendmsg$inet(r4, 0x0, 0x0) gettid() sendmsg$unix(0xffffffffffffffff, 0x0, 0x10090) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x10, 0xb, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf100, 0x0, 0x0, 0x0, 0x2000}, [@printk={@p, {0x3, 0x3, 0x6}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xca}}]}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x44}, 0x94) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) r5 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r5, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x11}, @multicast1}}}, @ip_retopts={{0x28, 0x0, 0x7, {[@noop, @timestamp_addr={0x44, 0x14, 0x7, 0x1, 0x7, [{@rand_addr=0x64010101}, {@dev={0xac, 0x14, 0x14, 0x1d}, 0x5}]}]}}}], 0x48}, 0x200040c4) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000b00)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000180)="6203a105d755af176510122f1eafbcf72be12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e24732faf215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7dfd652684d6a710292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9a4de33", 0xda}, {&(0x7f00000014c0)="294f28dfe56d898ba23606bc7ecd1f634665cb5bed07bac5684da6eb21da1d6926910c5a0c653b0105869a804dd2a44cb2e32e2bf367e9d01a5e7380cc4fc8e7c9044cc4750b978ca7427d749beaefdf2e48b369cb169ad7b1ced26bb161297c7e56a36a8b449955e83e91b379c179017f8f4657d1b22eca6bca33036d33e1a684059c53cea91c8f637ac780ab2bcf85f774b0d4e5876fe9aee4724b7cb59731c97e70ebd706003994eb07de2f3c6a9448c3206cff6d290b433f331c2399", 0xbe}, {&(0x7f0000000040)="0a985d7879f1bbff16c7d66e33657e452299fd0ef8c2afda588eb05891b7da030e01452a7986bea19b59c98dc2996c0ea09604d00ea48336d0c813d83025aca8623a5915ddddce2c11c5e374f2e0f387d2398fe0b899ff60dc7a73addcf253cf32aafbe2b9f90799e7fc583bdd9b564697ba988080270bdceb48bbd3b52d4c229fffb0d86fb286e3553a8b3ac02badc66ada5fceabe5f63c79da96e641a45901128063d6e1e31b11bcfbc3e70bd3c8c6c0be9f653f977f16", 0xb8}, {&(0x7f0000000440)="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", 0x358}, {&(0x7f0000000280)="b8d35a42b724f5117efd3ff06558a16b478b", 0x12}, {&(0x7f000001f4c0)="550c6d32758c9c16ffa4f109b112c63389068bee461d1744b4bf458233d3294ababe6c28c97e2640f849c401a026827bfb3d48b3b006ca", 0x37}, {&(0x7f0000000340)="87", 0x1}, {&(0x7f0000001580)="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", 0x978}], 0x8}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000031d0851000000600000018040000", @ANYRES32, @ANYBLOB="00000000000000006600000000000000180000004f978de70000000000000000950000000000000018010000202070250000000000202020db1af8ff00000000a6a100000000000007010000f8ffffffb7020000060000009500"/105], &(0x7f0000000000)='GPL\x00', 0x2, 0xce, &(0x7f0000000340)=""/206, 0x0, 0xd}, 0x94) 682.58307ms ago: executing program 7 (id=10380): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$unix(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="14000000000000"], 0x18}, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0xf}, 0x90208, 0x0, 0x310c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0xa, 0x2, 0x73) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x3a}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r4 = socket$kcm(0x10, 0x3, 0x0) write$cgroup_subtree(r4, &(0x7f0000001ec0)=ANY=[@ANYBLOB="13120000120091ef04"], 0xfe33) recvmsg$kcm(r4, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000039c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/233, 0xe9}, {0x0}, {&(0x7f00000006c0)=""/87, 0x57}, {&(0x7f0000000400)=""/211, 0xd3}, {&(0x7f0000000b00)=""/157, 0x9d}, {&(0x7f00000008c0)=""/210, 0xd2}, {&(0x7f0000000280)=""/209, 0xd1}], 0x8}, 0x0) recvmsg$kcm(r4, 0x0, 0x42) recvmsg$kcm(r4, &(0x7f0000000cc0)={0x0, 0x0, 0x0}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r5) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r6) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000240)=@o_path={&(0x7f0000000040)='./file0\x00', r6, 0x4000, r0}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, 0x0) recvmsg$unix(r5, 0x0, 0x40000040) r7 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000840000000000000001"], 0x18}, 0x41) recvmsg(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x42) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r8, 0x6, 0x6, &(0x7f0000000740)=r8, 0x4) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000300)="d8000000180081034e81f783db4cb9040a1d020006007c09e8fc55a10a0015000300142603600e120800060000000441a800080004001040040000000c5c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/215, 0xd7}, {&(0x7f00000001c0)=']', 0x1}], 0x2}, 0x0) 502.872161ms ago: executing program 4 (id=10381): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x8}, 0x7602, 0x5, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700760409"], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x49, 0xff, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffbf, 0x0, 0x0, 0x0, 0x0, 0x8000000040000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x1f, 0x0, 0x1, 0x2000, 0x10000}, 0x28) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd63"], 0xfdef) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000140)=@ieee802154, 0x80, &(0x7f00000008c0)=[{0x0}, {0x0}, {&(0x7f0000000580)=""/169, 0xa9}, {0x0}, {&(0x7f0000000700)=""/219, 0xdb}, {&(0x7f0000000800)=""/189, 0xbd}], 0x6}, 0x2040) r2 = socket$kcm(0x22, 0x2, 0x21) r3 = perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x88, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x200000000000006, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000002c0)=@generic={&(0x7f0000000280)='./file0\x00', 0x0, 0x8}, 0x18) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000042c0)=ANY=[@ANYBLOB="227bb22b145978f2cf2ccdda396be855", @ANYRESOCT=r3, @ANYRESDEC=r2, @ANYBLOB="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", @ANYRES16=r3], 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r4, 0x58, &(0x7f0000000380)}, 0x10) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r5, 0x29, 0x23, 0x0, 0x0) sendmsg$kcm(r5, &(0x7f0000001240)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0x10, 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000100)=0x8, 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000000094957de3999ce7b2d4057a219d5a7d6e3f6d6d6f6bc511ae6c1a5f09c62ab256fb3b85f0cbd8b7bfe545a10eda4744bb3b19548195da8eb81e1a2ab24ec5f1839486e9205b58b603ae9938b878ac83e2e70469d983b102302cf01839304766c34de97a8983d05d96add73e98aad15479515b0a196821768d71c44b33da8ecd99877654ce73c4a40bcebe294469d42cd93f26fef2d2a60b05d8f657c513cf16a7c35a0013f1fc0f28d1e5ed4b2856fbc0ea5c84afff32c17acd9fd9775667eca58f98dac1332656ebc6e3878ab31b7f2604054d456d3f51", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8946, &(0x7f0000000080)) 0s ago: executing program 6 (id=10382): perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x7, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0xbafa, 0xff, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x2d}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) recvmsg$kcm(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000780)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001de21831a0e69ee517d34460bc06002d98ef750dfe9e8fd44d17a9a2e3a1fd0000a705251e6182949a36fa886ca9b032a4178017253b", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4048000) recvmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000240)=""/216, 0xd8}, {&(0x7f0000000400)=""/253, 0xfd}, {&(0x7f00000010c0)=""/4069, 0xfe5}, {&(0x7f0000000640)=""/207, 0xcf}, {&(0x7f0000000540)=""/225, 0xe1}, {&(0x7f00000000c0)=""/208, 0xd0}, {&(0x7f0000000340)=""/168, 0xa8}], 0x7}, 0x40002002) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x49) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f00000001c0)=@phonet={0x23, 0x0, 0x0, 0x6}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000180)="670000001600140006004c78081d", 0xe}, {&(0x7f0000000bc0)="cb4e88a8e5104b098d05b717b6338173cc10268987551878", 0x18}], 0x2}, 0x0) recvmsg$kcm(r1, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x0) sendmsg$inet(r0, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r3, 0x20e, 0xe40, 0xfd000004, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) kernel console output (not intermixed with test programs): eless Event (cmd=0x8B1A) too big (33) [ 1447.687695][T30429] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9079'. [ 1447.769103][T30432] IPv6: Can't replace route, no match found [ 1447.783196][T30432] mac80211_hwsim hwsim67 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1447.824491][T30432] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9078'. [ 1447.987976][T30438] netlink: 14 bytes leftover after parsing attributes in process `syz.1.9082'. [ 1448.237125][T30447] IPv6: Can't replace route, no match found [ 1448.256506][T30447] mac80211_hwsim hwsim61 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1448.413618][T30452] IPv6: Can't replace route, no match found [ 1448.611661][T30455] IPv6: Can't replace route, no match found [ 1448.659251][T30456] IPv6: Can't replace route, no match found [ 1448.679301][T30456] mac80211_hwsim hwsim61 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1448.886944][T30465] mac80211_hwsim hwsim63 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1449.848199][T30485] IPv6: Can't replace route, no match found [ 1449.858570][T30488] IPv6: Can't replace route, no match found [ 1449.865695][T30485] mac80211_hwsim hwsim65 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1450.198635][T30498] mac80211_hwsim hwsim67 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1451.020915][T30509] IPv6: Can't replace route, no match found [ 1451.344228][T30509] __nla_validate_parse: 9 callbacks suppressed [ 1451.344243][T30509] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9107'. [ 1452.801741][T30524] IPv6: Can't replace route, no match found [ 1452.823447][T30524] mac80211_hwsim hwsim63 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1453.509327][T30540] netlink: 14 bytes leftover after parsing attributes in process `syz.0.9119'. [ 1453.549885][T30540] netlink: 156 bytes leftover after parsing attributes in process `syz.0.9119'. [ 1453.673962][T30549] mac80211_hwsim hwsim61 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1453.737761][T30544] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9120'. [ 1455.520685][T30574] IPv6: Can't replace route, no match found [ 1455.596631][T30576] mac80211_hwsim hwsim67 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1455.937286][T30582] mac80211_hwsim hwsim67 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1456.099093][T30581] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9133'. [ 1456.177722][T30587] netlink: 14 bytes leftover after parsing attributes in process `syz.3.9135'. [ 1456.277244][T30587] netlink: 156 bytes leftover after parsing attributes in process `syz.3.9135'. [ 1456.797695][T30599] mac80211_hwsim hwsim63 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1456.844380][T30599] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9141'. [ 1456.875266][T30600] IPv6: Can't replace route, no match found [ 1456.897848][T30600] mac80211_hwsim hwsim67 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1456.970274][T30604] IPv6: Can't replace route, no match found [ 1457.094395][T30604] mac80211_hwsim hwsim65 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1457.144574][T30604] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9143'. [ 1457.328190][T30612] IPv6: Can't replace route, no match found [ 1457.364439][T30612] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9146'. [ 1457.391352][T30619] netlink: 14 bytes leftover after parsing attributes in process `syz.2.9148'. [ 1457.459800][T30619] netlink: 156 bytes leftover after parsing attributes in process `syz.2.9148'. [ 1457.575916][T30623] IPv6: Can't replace route, no match found [ 1457.585837][T30623] mac80211_hwsim hwsim65 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1457.608883][T30623] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9150'. [ 1457.656423][T30627] IPv6: Can't replace route, no match found [ 1457.666738][T30627] mac80211_hwsim hwsim61 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1457.867978][T30634] mac80211_hwsim hwsim63 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1457.882576][T30634] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9154'. [ 1458.218785][T30641] IPv6: Can't replace route, no match found [ 1458.240437][T30641] mac80211_hwsim hwsim67 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1458.292986][T30641] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9157'. [ 1458.466346][T30652] IPv6: Can't replace route, no match found [ 1458.479525][T30654] netlink: 14 bytes leftover after parsing attributes in process `syz.1.9163'. [ 1458.496048][T30652] mac80211_hwsim hwsim61 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1458.510107][T30655] mac80211_hwsim hwsim65 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1458.540666][T30649] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9161'. [ 1460.164736][T30670] IPv6: Can't replace route, no match found [ 1460.181420][T30670] mac80211_hwsim hwsim61 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1460.693482][T30682] IPv6: Can't replace route, no match found [ 1460.711405][T30682] mac80211_hwsim hwsim61 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1462.693576][T30698] __nla_validate_parse: 4 callbacks suppressed [ 1462.693594][T30698] netlink: 14 bytes leftover after parsing attributes in process `syz.1.9180'. [ 1463.217984][T30698] netlink: 156 bytes leftover after parsing attributes in process `syz.1.9180'. [ 1463.264399][T30702] IPv6: Can't replace route, no match found [ 1463.279291][T30702] mac80211_hwsim hwsim65 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1463.688682][T30715] IPv6: Can't replace route, no match found [ 1463.708806][T30715] mac80211_hwsim hwsim63 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1463.922984][T30723] netlink: 14 bytes leftover after parsing attributes in process `syz.2.9188'. [ 1463.977097][T30725] IPv6: Can't replace route, no match found [ 1463.990047][T30725] mac80211_hwsim hwsim63 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1464.004342][T30723] netlink: 156 bytes leftover after parsing attributes in process `syz.2.9188'. [ 1469.147337][T30797] netlink: 14 bytes leftover after parsing attributes in process `syz.2.9206'. [ 1469.286778][T30800] netlink: 14 bytes leftover after parsing attributes in process `syz.0.9207'. [ 1469.983072][T30810] netlink: 14 bytes leftover after parsing attributes in process `syz.0.9210'. [ 1471.352670][T30822] netlink: 14 bytes leftover after parsing attributes in process `syz.1.9214'. [ 1475.805035][T30858] IPv6: Can't replace route, no match found [ 1475.824340][T30858] mac80211_hwsim hwsim67 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1476.330496][T30874] netlink: 14 bytes leftover after parsing attributes in process `syz.1.9229'. [ 1478.018128][T30887] netlink: 14 bytes leftover after parsing attributes in process `syz.0.9231'. [ 1484.073877][T30944] IPv6: Can't replace route, no match found [ 1484.410131][T30944] mac80211_hwsim hwsim63 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1484.822350][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.828680][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 1488.104736][T30979] netlink: 'syz.0.9261': attribute type 21 has an invalid length. [ 1488.198451][T30979] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9261'. [ 1488.943995][T30995] netlink: 'syz.1.9258': attribute type 21 has an invalid length. [ 1489.127950][T30995] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9258'. [ 1493.871130][T31026] netlink: 'syz.3.9267': attribute type 21 has an invalid length. [ 1493.904615][T31026] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9267'. [ 1493.942107][T31028] netlink: 'syz.1.9268': attribute type 21 has an invalid length. [ 1493.972859][T31028] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9268'. [ 1504.667433][T31185] netlink: 'syz.2.9304': attribute type 21 has an invalid length. [ 1504.686963][T31185] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9304'. [ 1506.729530][T31204] IPv6: Can't replace route, no match found [ 1506.739518][T31204] mac80211_hwsim hwsim63 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1507.118747][T31220] netlink: 'syz.0.9322': attribute type 21 has an invalid length. [ 1507.128231][T31220] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9322'. [ 1509.445529][T31249] netlink: 'syz.0.9329': attribute type 21 has an invalid length. [ 1509.460852][T31249] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9329'. [ 1509.718774][T31257] netlink: 'syz.3.9323': attribute type 21 has an invalid length. [ 1509.731038][T31257] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9323'. [ 1510.455763][T31265] mac80211_hwsim hwsim65 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1512.497386][T31308] mac80211_hwsim hwsim63 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1514.847774][T31376] netlink: 'syz.1.9364': attribute type 21 has an invalid length. [ 1514.867943][T31376] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9364'. [ 1515.424305][T25302] Bluetooth: hci2: unexpected event 0x30 length: 15 > 3 [ 1515.845621][T31405] IPv6: Can't replace route, no match found [ 1515.865944][T31405] mac80211_hwsim hwsim61 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1515.894081][T31409] netlink: 'syz.1.9379': attribute type 21 has an invalid length. [ 1515.907211][T31409] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9379'. [ 1516.515208][T25302] Bluetooth: hci2: unexpected event 0x12 length: 15 > 8 [ 1516.814725][T31444] IPv6: Can't replace route, no match found [ 1516.831091][T31444] mac80211_hwsim hwsim65 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1516.910896][T25302] Bluetooth: hci2: unexpected event 0x30 length: 15 > 3 [ 1517.079251][T31453] IPv6: Can't replace route, no match found [ 1517.099901][T31453] mac80211_hwsim hwsim63 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1517.360710][T31464] netlink: 'syz.2.9402': attribute type 3 has an invalid length. [ 1517.374569][T31464] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.9402'. [ 1517.614140][T31475] netlink: 'syz.2.9408': attribute type 21 has an invalid length. [ 1517.642831][T31475] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9408'. [ 1518.060576][T31485] netlink: 'syz.2.9410': attribute type 3 has an invalid length. [ 1518.076325][T31485] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.9410'. [ 1518.102249][T31489] IPv6: Can't replace route, no match found [ 1518.125784][T31489] mac80211_hwsim hwsim63 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1518.304978][T31500] netlink: 'syz.0.9420': attribute type 21 has an invalid length. [ 1518.493992][T31500] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9420'. [ 1518.815456][T31518] netlink: 'syz.3.9427': attribute type 21 has an invalid length. [ 1518.828038][T31518] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9427'. [ 1518.850174][T31514] IPv6: Can't replace route, no match found [ 1518.859819][T31514] mac80211_hwsim hwsim67 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1519.129404][T31530] netlink: 'syz.3.9432': attribute type 3 has an invalid length. [ 1519.151383][T31530] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.9432'. [ 1519.435178][T31536] netlink: 'syz.1.9434': attribute type 3 has an invalid length. [ 1519.449350][T31536] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.9434'. [ 1519.490361][T31541] netlink: 'syz.3.9436': attribute type 3 has an invalid length. [ 1519.499518][T31541] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.9436'. [ 1519.765287][T31550] IPv6: Can't replace route, no match found [ 1519.786930][T31550] mac80211_hwsim hwsim65 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1520.012410][T31556] validate_nla: 1 callbacks suppressed [ 1520.012444][T31556] netlink: 'syz.1.9444': attribute type 3 has an invalid length. [ 1520.042877][T31556] __nla_validate_parse: 1 callbacks suppressed [ 1520.042911][T31556] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.9444'. [ 1520.501381][T31575] IPv6: Can't replace route, no match found [ 1520.513568][T31575] mac80211_hwsim hwsim63 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1520.843214][T31591] netlink: 'syz.1.9459': attribute type 3 has an invalid length. [ 1520.855301][T31591] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.9459'. [ 1521.174884][T31601] IPv6: Can't replace route, no match found [ 1521.199291][T31601] mac80211_hwsim hwsim63 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1521.569502][T25489] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1521.748786][T25489] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1521.891219][T31623] netlink: 'syz.0.9473': attribute type 3 has an invalid length. [ 1521.901972][T31623] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.9473'. [ 1521.914539][T25489] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1522.012861][T31628] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1522.026619][T31628] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1522.035520][T31628] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1522.060700][T31628] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1522.071474][T31628] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1522.079213][T31628] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1522.118185][T25489] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1522.137924][T31630] IPv6: Can't replace route, no match found [ 1522.144175][T31626] mac80211_hwsim hwsim65 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1522.293789][T31638] netlink: 'syz.0.9478': attribute type 3 has an invalid length. [ 1522.301702][T31638] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.9478'. [ 1522.533832][T31627] chnl_net:caif_netlink_parms(): no params data found [ 1522.961722][T31627] bridge0: port 1(bridge_slave_0) entered blocking state [ 1523.061364][T31627] bridge0: port 1(bridge_slave_0) entered disabled state [ 1523.084761][T31627] bridge_slave_0: entered allmulticast mode [ 1523.110007][T31627] bridge_slave_0: entered promiscuous mode [ 1523.114353][T31670] netlink: 'syz.1.9487': attribute type 3 has an invalid length. [ 1523.123154][T31627] bridge0: port 2(bridge_slave_1) entered blocking state [ 1523.133840][T31670] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.9487'. [ 1523.161914][T31627] bridge0: port 2(bridge_slave_1) entered disabled state [ 1523.181365][T31627] bridge_slave_1: entered allmulticast mode [ 1523.193433][T31627] bridge_slave_1: entered promiscuous mode [ 1523.223881][T31675] IPv6: Can't replace route, no match found [ 1523.303134][T31669] mac80211_hwsim hwsim65 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1523.426271][T31627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1523.531224][T31627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1523.693517][T31627] team0: Port device team_slave_0 added [ 1523.708444][T31627] team0: Port device team_slave_1 added [ 1523.766714][T31628] Bluetooth: hci2: unexpected event 0x03 length: 15 > 11 [ 1523.859882][T31698] netlink: 'syz.3.9496': attribute type 3 has an invalid length. [ 1523.877313][T31698] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.9496'. [ 1524.079202][T31627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1524.089230][T31627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1524.118711][T31627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1524.161993][T31628] Bluetooth: hci0: command tx timeout [ 1524.196514][T31627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1524.203948][T31627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1524.230355][T31627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1524.477019][T31628] Bluetooth: hci2: unexpected event 0x0b length: 15 > 11 [ 1524.542714][T31627] hsr_slave_0: entered promiscuous mode [ 1524.574942][T31627] hsr_slave_1: entered promiscuous mode [ 1524.588052][T31627] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1524.623031][T31627] Cannot create hsr debugfs directory [ 1524.706069][T31628] Bluetooth: hci2: unexpected event 0x31 length: 15 > 6 [ 1524.849398][T31628] Bluetooth: hci2: unexpected event 0x31 length: 15 > 6 [ 1525.045910][T25489] hsr_slave_0: left promiscuous mode [ 1525.064419][T31738] netlink: 'syz.0.9509': attribute type 3 has an invalid length. [ 1525.079325][T31738] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.9509'. [ 1525.093006][T25489] hsr_slave_1: left promiscuous mode [ 1525.119617][T25489] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1525.127226][T25489] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1525.138124][T25489] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1525.148999][T25489] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1525.161462][T25489] bridge_slave_1: left allmulticast mode [ 1525.167455][T25489] bridge_slave_1: left promiscuous mode [ 1525.173616][T25489] bridge0: port 2(bridge_slave_1) entered disabled state [ 1525.183198][T25489] bridge_slave_0: left promiscuous mode [ 1525.189042][T25489] bridge0: port 1(bridge_slave_0) entered disabled state [ 1525.225455][T25489] veth1_macvtap: left promiscuous mode [ 1525.231206][T25489] veth0_macvtap: left promiscuous mode [ 1525.239251][T25489] veth1_vlan: left promiscuous mode [ 1525.244788][T25489] veth0_vlan: left promiscuous mode [ 1525.858822][T25489] team0 (unregistering): Port device team_slave_1 removed [ 1525.897548][T25489] team0 (unregistering): Port device team_slave_0 removed [ 1525.938166][T25489] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1525.983306][T25489] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1526.239150][T25489] bond0 (unregistering): Released all slaves [ 1526.251987][T31628] Bluetooth: hci0: command tx timeout [ 1527.099708][T31773] IPv6: Can't replace route, no match found [ 1527.107643][T31773] mac80211_hwsim hwsim65 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1528.048868][T31811] IPv6: Can't replace route, no match found [ 1528.075987][T31811] mac80211_hwsim hwsim67 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1528.112226][T31627] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1528.180394][T31627] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1528.199934][T31627] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1528.226815][T31627] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1528.275834][T31628] Bluetooth: hci2: unexpected event 0x30 length: 15 > 3 [ 1528.331898][T31628] Bluetooth: hci0: command tx timeout [ 1528.675496][T31627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1528.781443][T31627] 8021q: adding VLAN 0 to HW filter on device team0 [ 1528.789780][T31842] IPv6: Can't replace route, no match found [ 1528.813990][T25489] bridge0: port 1(bridge_slave_0) entered blocking state [ 1528.821151][T25489] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1528.831197][T31842] mac80211_hwsim hwsim67 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1528.865500][T18622] bridge0: port 2(bridge_slave_1) entered blocking state [ 1528.872662][T18622] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1528.938276][T31848] netlink: 'syz.3.9547': attribute type 21 has an invalid length. [ 1528.948633][T31848] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9547'. [ 1529.165041][T31858] netlink: 'syz.1.9549': attribute type 3 has an invalid length. [ 1529.173786][T31627] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1529.173809][T31627] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1529.203279][T31858] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.9549'. [ 1529.609565][T31874] netlink: 'syz.1.9553': attribute type 3 has an invalid length. [ 1529.622255][T31874] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.9553'. [ 1529.661395][T31877] IPv6: Can't replace route, no match found [ 1529.669128][T31877] mac80211_hwsim hwsim63 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1529.827798][T31628] Bluetooth: hci2: unexpected event 0x0b length: 15 > 11 [ 1529.949496][T31890] netlink: 'syz.0.9559': attribute type 3 has an invalid length. [ 1529.971555][T31890] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.9559'. [ 1529.985085][T31627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1530.023345][T31892] netlink: 'syz.1.9560': attribute type 3 has an invalid length. [ 1530.063774][T31892] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.9560'. [ 1530.214980][T31627] veth0_vlan: entered promiscuous mode [ 1530.257445][T31627] veth1_vlan: entered promiscuous mode [ 1530.335759][T31627] veth0_macvtap: entered promiscuous mode [ 1530.438514][T31628] Bluetooth: hci0: command tx timeout [ 1530.536291][T31628] Bluetooth: hci2: unexpected event 0x12 length: 15 > 8 [ 1530.582921][T31627] veth1_macvtap: entered promiscuous mode [ 1530.689919][T31627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1530.691758][T31913] netlink: 'syz.3.9565': attribute type 3 has an invalid length. [ 1530.712169][T31913] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.9565'. [ 1530.738313][T31627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1530.750677][T31627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1530.762001][T31627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1530.776332][T31627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1530.787175][T31627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1530.805225][T31627] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1530.866279][T31627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1530.881559][T31627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1530.893149][T31627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1530.903967][T31627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1530.914143][T31627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1530.925015][T31627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1530.937410][T31627] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1530.946214][T31923] IPv6: Can't replace route, no match found [ 1531.008821][T31917] mac80211_hwsim hwsim67 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1531.039650][T31627] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1531.054953][T31627] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1531.068778][T31627] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1531.078993][T31627] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1531.283922][T18622] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1531.331554][T18622] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1531.424795][T31941] IPv6: Can't replace route, no match found [ 1531.443776][T31938] netlink: 'syz.3.9571': attribute type 3 has an invalid length. [ 1531.452349][T31938] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.9571'. [ 1531.460177][T31941] mac80211_hwsim hwsim63 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1531.513754][T18622] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1531.582266][T18622] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1531.630826][T31949] netlink: 'syz.0.9572': attribute type 3 has an invalid length. [ 1531.640203][T31949] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.9572'. [ 1532.039463][T31968] netlink: 'syz.1.9580': attribute type 3 has an invalid length. [ 1532.047906][T31968] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.9580'. [ 1532.249862][T31974] netlink: 'syz.3.9583': attribute type 3 has an invalid length. [ 1532.263160][T31974] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.9583'. [ 1532.564081][T31981] netlink: 'syz.3.9586': attribute type 3 has an invalid length. [ 1532.576758][T31981] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.9586'. [ 1532.808026][T31990] netlink: 'syz.2.9588': attribute type 3 has an invalid length. [ 1532.832014][T31990] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.9588'. [ 1532.862018][ T5876] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1532.978592][ T5876] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1533.101081][T31996] netlink: 'syz.3.9591': attribute type 3 has an invalid length. [ 1533.122384][T31996] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.9591'. [ 1533.141698][T31628] Bluetooth: hci0: unexpected event 0x0b length: 15 > 11 [ 1533.220481][ T5876] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1533.302703][T25302] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1533.316612][T32005] netlink: 'syz.2.9594': attribute type 21 has an invalid length. [ 1533.322322][T25302] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1533.333268][T25302] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1533.334642][T32005] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9594'. [ 1533.351111][T25302] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1533.359018][T25302] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1533.368821][T25302] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1533.439399][ T5876] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1534.046038][T32021] netlink: 'syz.1.9595': attribute type 3 has an invalid length. [ 1534.090510][T31628] Bluetooth: hci0: unexpected event 0x12 length: 15 > 8 [ 1534.096101][T32021] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.9595'. [ 1534.400323][T32003] chnl_net:caif_netlink_parms(): no params data found [ 1535.125822][T31628] Bluetooth: hci0: unexpected event 0x12 length: 15 > 8 [ 1535.442188][T31628] Bluetooth: hci1: command tx timeout [ 1535.553284][T32003] bridge0: port 1(bridge_slave_0) entered blocking state [ 1535.560514][T32003] bridge0: port 1(bridge_slave_0) entered disabled state [ 1535.568122][T32003] bridge_slave_0: entered allmulticast mode [ 1535.582525][T32003] bridge_slave_0: entered promiscuous mode [ 1535.622960][T32003] bridge0: port 2(bridge_slave_1) entered blocking state [ 1535.630089][T32003] bridge0: port 2(bridge_slave_1) entered disabled state [ 1535.651485][T32003] bridge_slave_1: entered allmulticast mode [ 1535.665317][T32003] bridge_slave_1: entered promiscuous mode [ 1535.981571][T31628] Bluetooth: hci0: unexpected event 0x12 length: 15 > 8 [ 1536.004964][T32003] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1536.061018][T32003] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1536.260423][T32106] validate_nla: 3 callbacks suppressed [ 1536.260458][T32106] netlink: 'syz.1.9622': attribute type 3 has an invalid length. [ 1536.283158][T32106] __nla_validate_parse: 3 callbacks suppressed [ 1536.283196][T32106] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.9622'. [ 1536.331237][T32003] team0: Port device team_slave_0 added [ 1536.347717][T32003] team0: Port device team_slave_1 added [ 1536.492478][T32114] netlink: 'syz.1.9624': attribute type 3 has an invalid length. [ 1536.500396][T32114] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.9624'. [ 1536.594192][T32003] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1536.601165][T32003] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1536.651737][T32003] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1536.703775][T32003] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1536.724986][T32003] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1537.053759][T32003] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1537.397808][ T5876] hsr_slave_0: left promiscuous mode [ 1537.418163][ T5876] hsr_slave_1: left promiscuous mode [ 1537.430338][ T5876] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1537.451860][ T5876] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1537.522672][T31628] Bluetooth: hci1: command tx timeout [ 1537.542708][ T5876] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1537.550132][ T5876] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1537.717392][ T5876] veth1_macvtap: left promiscuous mode [ 1537.741812][ T5876] veth0_macvtap: left promiscuous mode [ 1537.752624][ T5876] veth1_vlan: left promiscuous mode [ 1537.762374][T31628] Bluetooth: hci2: unexpected event 0x0b length: 15 > 11 [ 1537.775172][ T5876] veth0_vlan: left promiscuous mode [ 1538.185772][T31628] Bluetooth: hci2: unexpected event 0x12 length: 15 > 8 [ 1538.696452][T31628] Bluetooth: hci0: unexpected event 0x0b length: 15 > 11 [ 1538.852366][T31628] Bluetooth: hci2: unexpected event 0x0b length: 15 > 11 [ 1539.058708][ T5876] team_slave_1 (unregistering): left allmulticast mode [ 1539.078802][ T5876] team0 (unregistering): Port device team_slave_1 removed [ 1539.137027][ T5876] team0 (unregistering): Port device team_slave_0 removed [ 1539.166410][T31628] Bluetooth: hci2: unexpected event 0x12 length: 15 > 8 [ 1539.187895][ T5876] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1539.257984][ T5876] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1539.603188][T31628] Bluetooth: hci1: command tx timeout [ 1539.644343][ T5876] bond0 (unregistering): Released all slaves [ 1539.699493][T32003] hsr_slave_0: entered promiscuous mode [ 1539.728487][T32003] hsr_slave_1: entered promiscuous mode [ 1539.868714][T31628] Bluetooth: hci2: unexpected event 0x0b length: 15 > 11 [ 1540.113541][T31628] Bluetooth: hci2: unexpected event 0x12 length: 15 > 8 [ 1541.255331][T32003] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1541.280102][T32003] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1541.309363][T32003] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1541.323690][T32003] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1541.528081][T32003] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1541.575444][T32003] 8021q: adding VLAN 0 to HW filter on device team0 [ 1541.597601][T25489] bridge0: port 1(bridge_slave_0) entered blocking state [ 1541.604759][T25489] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1541.637406][ T5876] bridge0: port 2(bridge_slave_1) entered blocking state [ 1541.644557][ T5876] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1541.682229][T31628] Bluetooth: hci1: command tx timeout [ 1541.977921][T32003] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1542.043605][T32003] veth0_vlan: entered promiscuous mode [ 1542.061328][T32003] veth1_vlan: entered promiscuous mode [ 1542.104075][T32003] veth0_macvtap: entered promiscuous mode [ 1542.124319][T32003] veth1_macvtap: entered promiscuous mode [ 1542.148802][T32003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1542.162624][T32003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1542.176680][T32003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1542.187734][T32003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1542.201842][T32003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1542.216197][T32003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1542.229552][T32003] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1542.249446][T32003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1542.262335][T32003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1542.273441][T32003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1542.284126][T32003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1542.294244][T32003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1542.305175][T32003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1542.316750][T32003] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1542.336437][T32003] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1542.348740][T32003] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1542.360782][T32003] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1542.371345][T32003] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1542.436676][ T5876] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1542.449958][ T5876] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1542.474654][T25489] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1542.483753][T25489] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1542.667521][T32281] IPv6: Can't replace route, no match found [ 1542.674820][T32281] mac80211_hwsim hwsim71 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1543.102139][T31628] Bluetooth: hci0: unexpected event 0x12 length: 15 > 8 [ 1543.258113][T32306] IPv6: Can't replace route, no match found [ 1543.300634][T32306] mac80211_hwsim hwsim65 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1543.636805][T31628] Bluetooth: hci2: unexpected event 0x0b length: 15 > 11 [ 1543.937678][T32331] IPv6: Can't replace route, no match found [ 1543.954147][T32331] mac80211_hwsim hwsim71 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1543.967006][T32335] netlink: 'syz.3.9699': attribute type 3 has an invalid length. [ 1543.983915][T32335] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.9699'. [ 1544.704000][T32363] netlink: 'syz.1.9712': attribute type 3 has an invalid length. [ 1544.721925][T32363] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.9712'. [ 1544.737805][T32361] IPv6: Can't replace route, no match found [ 1544.757653][T32361] mac80211_hwsim hwsim69 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1545.427576][T32390] IPv6: Can't replace route, no match found [ 1545.436517][T32390] mac80211_hwsim hwsim71 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1545.596559][T32396] netlink: 'syz.1.9729': attribute type 3 has an invalid length. [ 1545.606109][T32396] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.9729'. [ 1545.804953][T32400] netlink: 'syz.3.9731': attribute type 3 has an invalid length. [ 1545.813717][T32400] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.9731'. [ 1546.006448][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.015940][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.681289][T32431] netlink: 'syz.0.9745': attribute type 3 has an invalid length. [ 1546.694598][T32431] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.9745'. [ 1547.074728][T18622] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1547.186716][T31628] Bluetooth: hci1: unexpected event 0x0b length: 15 > 11 [ 1547.210126][T18622] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1547.344348][T25302] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1547.353411][T25302] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1547.361341][T25302] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1547.393197][T25302] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1547.412196][T25302] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1547.429505][T25302] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1547.478863][T18622] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1547.565611][T18622] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1547.804996][T32449] chnl_net:caif_netlink_parms(): no params data found [ 1548.011080][T32449] bridge0: port 1(bridge_slave_0) entered blocking state [ 1548.024812][T32449] bridge0: port 1(bridge_slave_0) entered disabled state [ 1548.034319][T32449] bridge_slave_0: entered allmulticast mode [ 1548.040989][T32449] bridge_slave_0: entered promiscuous mode [ 1548.073796][T32449] bridge0: port 2(bridge_slave_1) entered blocking state [ 1548.081006][T32449] bridge0: port 2(bridge_slave_1) entered disabled state [ 1548.094261][T32449] bridge_slave_1: entered allmulticast mode [ 1548.101506][T32449] bridge_slave_1: entered promiscuous mode [ 1548.189694][T32449] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1548.209511][T32449] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1548.290895][T32449] team0: Port device team_slave_0 added [ 1548.312470][T32449] team0: Port device team_slave_1 added [ 1548.349866][T32449] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1548.356890][T32449] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1548.383160][T32449] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1548.397150][T32449] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1548.404348][T32449] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1548.436715][T32449] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1548.492964][T32449] hsr_slave_0: entered promiscuous mode [ 1548.499100][T32449] hsr_slave_1: entered promiscuous mode [ 1548.505890][T32449] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1548.513723][T32449] Cannot create hsr debugfs directory [ 1548.781090][T18622] hsr_slave_0: left promiscuous mode [ 1548.791032][T18622] hsr_slave_1: left promiscuous mode [ 1548.809467][T18622] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1548.817119][T18622] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1548.830575][T18622] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1548.840023][T18622] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1548.853672][T18622] bridge_slave_1: left allmulticast mode [ 1548.859332][T18622] bridge_slave_1: left promiscuous mode [ 1548.871750][T18622] bridge0: port 2(bridge_slave_1) entered disabled state [ 1548.883119][T18622] bridge_slave_0: left promiscuous mode [ 1548.889007][T18622] bridge0: port 1(bridge_slave_0) entered disabled state [ 1548.914587][T18622] veth1_macvtap: left promiscuous mode [ 1548.920142][T18622] veth0_macvtap: left promiscuous mode [ 1548.927317][T18622] veth1_vlan: left promiscuous mode [ 1548.934480][T18622] veth0_vlan: left promiscuous mode [ 1549.450779][T18622] team_slave_1 (unregistering): left allmulticast mode [ 1549.460518][T18622] team0 (unregistering): Port device team_slave_1 removed [ 1549.498816][T18622] team0 (unregistering): Port device team_slave_0 removed [ 1549.536016][T31628] Bluetooth: hci3: command tx timeout [ 1549.542783][T18622] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1549.578986][T18622] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1549.836510][T18622] bond0 (unregistering): Released all slaves [ 1550.411107][T32449] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1550.421447][T32449] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1550.432475][T32449] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1550.442997][T32449] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1550.557089][T32449] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1550.581578][T32449] 8021q: adding VLAN 0 to HW filter on device team0 [ 1550.600810][ T5879] bridge0: port 1(bridge_slave_0) entered blocking state [ 1550.607988][ T5879] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1550.633096][ T5879] bridge0: port 2(bridge_slave_1) entered blocking state [ 1550.640184][ T5879] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1550.897675][T32449] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1550.971253][T32449] veth0_vlan: entered promiscuous mode [ 1550.992706][T32449] veth1_vlan: entered promiscuous mode [ 1551.031647][T32449] veth0_macvtap: entered promiscuous mode [ 1551.051125][T32449] veth1_macvtap: entered promiscuous mode [ 1551.077514][T32449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1551.088136][T32449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1551.098463][T32449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1551.109188][T32449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1551.119283][T32449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1551.132644][T32449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1551.148354][T32449] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1551.161660][T32449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1551.174904][T32449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1551.185802][T32449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1551.197014][T32449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1551.207225][T32449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1551.218046][T32449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1551.229449][T32449] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1551.242700][T32449] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1551.251669][T32449] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1551.260757][T32449] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1551.269795][T32449] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1551.351411][ T3455] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1551.359384][ T3455] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1551.398387][ T5879] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1551.411146][ T5879] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1551.568880][T31628] Bluetooth: hci0: unexpected event 0x0b length: 15 > 11 [ 1551.602167][T31628] Bluetooth: hci3: command tx timeout [ 1552.781123][T31628] Bluetooth: hci1: unexpected event 0x12 length: 15 > 8 [ 1552.911677][T32596] IPv6: Can't replace route, no match found [ 1552.969636][T32596] mac80211_hwsim hwsim69 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1553.692541][T31628] Bluetooth: hci3: command tx timeout [ 1554.025389][ T5879] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1554.200854][ T5879] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1554.608469][ T5879] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1554.674388][T25302] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1554.702062][T25302] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1554.710408][T25302] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1554.724372][T25302] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1554.735056][T25302] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1554.742581][T25302] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1554.765930][T31628] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 1555.010031][ T5879] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1555.676519][T31628] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 1555.762107][T31628] Bluetooth: hci3: command tx timeout [ 1556.349390][T31628] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 1556.473088][T32652] chnl_net:caif_netlink_parms(): no params data found [ 1556.813307][T31628] Bluetooth: hci2: command tx timeout [ 1557.406110][T32652] bridge0: port 1(bridge_slave_0) entered blocking state [ 1557.423140][T32652] bridge0: port 1(bridge_slave_0) entered disabled state [ 1557.430413][T32652] bridge_slave_0: entered allmulticast mode [ 1557.438282][T32652] bridge_slave_0: entered promiscuous mode [ 1557.447841][T32652] bridge0: port 2(bridge_slave_1) entered blocking state [ 1557.455964][T32652] bridge0: port 2(bridge_slave_1) entered disabled state [ 1557.464134][T32652] bridge_slave_1: entered allmulticast mode [ 1557.471535][T32652] bridge_slave_1: entered promiscuous mode [ 1558.151127][T32652] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1558.204397][T32652] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1558.282026][ T5879] hsr_slave_0: left promiscuous mode [ 1558.302307][ T5879] hsr_slave_1: left promiscuous mode [ 1558.309515][ T5879] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1558.317945][ T5879] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1558.327033][ T5879] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1558.334779][ T5879] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1558.480332][ T5879] veth1_macvtap: left promiscuous mode [ 1558.502093][ T5879] veth0_macvtap: left promiscuous mode [ 1558.507811][ T5879] veth1_vlan: left promiscuous mode [ 1558.528071][ T5879] veth0_vlan: left promiscuous mode [ 1558.891887][T31628] Bluetooth: hci2: command tx timeout [ 1559.438977][ T5879] team_slave_1 (unregistering): left allmulticast mode [ 1559.454115][ T5879] team0 (unregistering): Port device team_slave_1 removed [ 1559.496157][ T5879] team0 (unregistering): Port device team_slave_0 removed [ 1559.539473][ T5879] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1559.581086][ T5879] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1559.864895][ T5879] bond0 (unregistering): Released all slaves [ 1560.014988][T32652] team0: Port device team_slave_0 added [ 1560.048671][T32652] team0: Port device team_slave_1 added [ 1560.141523][T32652] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1560.170120][T32652] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1560.243282][T32652] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1560.304595][T32652] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1560.328188][T32652] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1560.425106][T32652] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1560.761623][T32652] hsr_slave_0: entered promiscuous mode [ 1560.783129][T32652] hsr_slave_1: entered promiscuous mode [ 1560.794046][T32652] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1560.817976][T32652] Cannot create hsr debugfs directory [ 1560.962025][T31628] Bluetooth: hci2: command tx timeout [ 1561.658072][ T394] IPv6: Can't replace route, no match found [ 1561.668335][ T394] mac80211_hwsim hwsim69 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1562.468395][T32652] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1562.530069][ T420] IPv6: Can't replace route, no match found [ 1562.536496][ T426] mac80211_hwsim hwsim69 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1562.549449][T32652] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1562.568106][T32652] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1562.624885][T32652] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1562.946264][T32652] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1563.042634][T31628] Bluetooth: hci2: command tx timeout [ 1563.075056][T32652] 8021q: adding VLAN 0 to HW filter on device team0 [ 1563.178611][ T7364] bridge0: port 1(bridge_slave_0) entered blocking state [ 1563.185785][ T7364] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1563.260341][ T5876] bridge0: port 2(bridge_slave_1) entered blocking state [ 1563.267519][ T5876] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1563.464791][ T463] IPv6: Can't replace route, no match found [ 1564.007892][T32652] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1564.220713][T32652] veth0_vlan: entered promiscuous mode [ 1564.254893][T32652] veth1_vlan: entered promiscuous mode [ 1564.411127][T32652] veth0_macvtap: entered promiscuous mode [ 1564.487754][T32652] veth1_macvtap: entered promiscuous mode [ 1564.519197][T32652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1564.576203][T32652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1564.597189][T32652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1564.607741][T32652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1564.622960][T32652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1564.636720][T32652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1564.649674][T32652] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1564.660414][T32652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1564.678278][T32652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1564.688155][T32652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1564.732761][T32652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1564.755743][T32652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1564.772322][T32652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1564.793775][T32652] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1564.817117][ T512] IPv6: Can't replace route, no match found [ 1564.860287][T32652] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1564.875683][T32652] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1564.885236][T32652] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1564.901116][T32652] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1565.145377][T18622] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1565.162095][T18622] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1565.254510][ T3455] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1565.269635][ T3455] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1565.643209][ T538] IPv6: Can't replace route, no match found [ 1566.368244][ T568] IPv6: Can't replace route, no match found [ 1567.085137][ T592] IPv6: Can't replace route, no match found [ 1567.276154][T31628] Bluetooth: hci3: unexpected event 0x08 length: 15 > 4 [ 1567.415113][T31628] Bluetooth: hci1: unexpected event 0x08 length: 15 > 4 [ 1568.058563][ T626] IPv6: Can't replace route, no match found [ 1568.473771][T31628] Bluetooth: hci0: unexpected event 0x08 length: 15 > 4 [ 1568.748422][ T648] netlink: 'syz.2.9972': attribute type 1 has an invalid length. [ 1568.804422][ T648] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.9972'. [ 1568.943730][ T654] IPv6: Can't replace route, no match found [ 1568.950700][ T654] mac80211_hwsim hwsim71 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1569.620977][ T679] netlink: 'syz.0.9985': attribute type 1 has an invalid length. [ 1569.629031][ T679] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.9985'. [ 1569.883771][ T689] IPv6: Can't replace route, no match found [ 1569.892369][ T689] mac80211_hwsim hwsim73 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1570.669959][ T718] IPv6: Can't replace route, no match found [ 1570.682275][ T718] mac80211_hwsim hwsim75 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1571.253424][ T739] netlink: 199816 bytes leftover after parsing attributes in process `syz.1.10014'. [ 1572.288921][ T785] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.10035'. [ 1573.346284][ T828] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.10054'. [ 1574.036781][T31628] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 1574.183711][ T858] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.10068'. [ 1574.233249][ T859] mac80211_hwsim hwsim73 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1574.709254][T31628] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 1575.316281][T31628] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 1575.526085][ T917] netlink: 176 bytes leftover after parsing attributes in process `syz.2.10095'. [ 1576.413594][ T948] netlink: 176 bytes leftover after parsing attributes in process `syz.1.10105'. [ 1577.165071][T31628] Bluetooth: hci0: unexpected event 0x0b length: 15 > 11 [ 1577.848578][ T994] IPv6: Can't replace route, no match found [ 1577.871451][ T994] mac80211_hwsim hwsim71 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1577.894579][T31628] Bluetooth: hci3: unexpected event 0x0b length: 15 > 11 [ 1579.324529][ T1067] IPv6: Can't replace route, no match found [ 1579.358794][ T1067] mac80211_hwsim hwsim69 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1579.772378][T31628] Bluetooth: hci0: unexpected event 0x12 length: 15 > 8 [ 1579.928350][ T1088] IPv6: Can't replace route, no match found [ 1580.001488][T31628] Bluetooth: hci0: unexpected event 0x12 length: 15 > 8 [ 1580.145761][T31628] Bluetooth: hci2: unexpected subevent 0x19 length: 150 > 28 [ 1580.160323][T31628] Bluetooth: hci2: Unable to find connection with handle 0x0000 [ 1580.170524][ T1096] IPv6: Can't replace route, no match found [ 1580.196172][ T1096] mac80211_hwsim hwsim73 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1580.254718][T31628] Bluetooth: hci0: unexpected event 0x12 length: 15 > 8 [ 1580.609028][T31628] Bluetooth: hci2: unexpected event 0x12 length: 15 > 8 [ 1580.646612][ T1118] IPv6: Can't replace route, no match found [ 1580.795993][T31628] Bluetooth: hci3: unexpected event 0x12 length: 15 > 8 [ 1580.858984][T31628] Bluetooth: hci1: unexpected event 0x12 length: 15 > 8 [ 1582.145178][ T1150] IPv6: Can't replace route, no match found [ 1582.163324][ T1150] mac80211_hwsim hwsim73 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1582.176448][ T1156] IPv6: Can't replace route, no match found [ 1582.760020][ T1180] IPv6: Can't replace route, no match found [ 1582.768105][ T1180] mac80211_hwsim hwsim75 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1582.987948][ T1190] FAULT_INJECTION: forcing a failure. [ 1582.987948][ T1190] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 1583.007802][ T1190] CPU: 0 PID: 1190 Comm: syz.1.10209 Not tainted syzkaller #0 [ 1583.015295][ T1190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1583.025365][ T1190] Call Trace: [ 1583.028636][ T1190] [ 1583.031552][ T1190] dump_stack_lvl+0x18c/0x250 [ 1583.036339][ T1190] ? show_regs_print_info+0x20/0x20 [ 1583.041532][ T1190] ? load_image+0x400/0x400 [ 1583.046043][ T1190] ? __might_fault+0xaa/0x120 [ 1583.050747][ T1190] ? __lock_acquire+0x7d40/0x7d40 [ 1583.055774][ T1190] should_fail_ex+0x39d/0x4d0 [ 1583.060464][ T1190] _copy_from_user+0x2f/0xe0 [ 1583.065051][ T1190] __sys_bpf+0x23e/0x890 [ 1583.069300][ T1190] ? bpf_link_show_fdinfo+0x390/0x390 [ 1583.074700][ T1190] ? lock_chain_count+0x20/0x20 [ 1583.079578][ T1190] __x64_sys_bpf+0x7c/0x90 [ 1583.084005][ T1190] do_syscall_64+0x55/0xa0 [ 1583.088412][ T1190] ? clear_bhb_loop+0x40/0x90 [ 1583.093132][ T1190] ? clear_bhb_loop+0x40/0x90 [ 1583.097796][ T1190] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1583.103672][ T1190] RIP: 0033:0x7f30ec79aeb9 [ 1583.108077][ T1190] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1583.127669][ T1190] RSP: 002b:00007f30ed718028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1583.136084][ T1190] RAX: ffffffffffffffda RBX: 00007f30eca15fa0 RCX: 00007f30ec79aeb9 [ 1583.144045][ T1190] RDX: 0000000000000048 RSI: 000020000000e000 RDI: 0000000000000005 [ 1583.152011][ T1190] RBP: 00007f30ed718090 R08: 0000000000000000 R09: 0000000000000000 [ 1583.159980][ T1190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1583.167937][ T1190] R13: 00007f30eca16038 R14: 00007f30eca15fa0 R15: 00007ffe731e1ed8 [ 1583.175903][ T1190] [ 1584.189098][ T1232] FAULT_INJECTION: forcing a failure. [ 1584.189098][ T1232] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1584.203793][ T1232] CPU: 1 PID: 1232 Comm: syz.1.10226 Not tainted syzkaller #0 [ 1584.211272][ T1232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1584.221326][ T1232] Call Trace: [ 1584.224602][ T1232] [ 1584.227525][ T1232] dump_stack_lvl+0x18c/0x250 [ 1584.232209][ T1232] ? show_regs_print_info+0x20/0x20 [ 1584.237410][ T1232] ? load_image+0x400/0x400 [ 1584.241912][ T1232] ? __might_fault+0xaa/0x120 [ 1584.246584][ T1232] ? __lock_acquire+0x7d40/0x7d40 [ 1584.251603][ T1232] should_fail_ex+0x39d/0x4d0 [ 1584.256283][ T1232] _copy_from_user+0x2f/0xe0 [ 1584.260869][ T1232] __sys_bpf+0x23e/0x890 [ 1584.265113][ T1232] ? bpf_link_show_fdinfo+0x390/0x390 [ 1584.270494][ T1232] ? lock_chain_count+0x20/0x20 [ 1584.275352][ T1232] __x64_sys_bpf+0x7c/0x90 [ 1584.279767][ T1232] do_syscall_64+0x55/0xa0 [ 1584.284181][ T1232] ? clear_bhb_loop+0x40/0x90 [ 1584.288851][ T1232] ? clear_bhb_loop+0x40/0x90 [ 1584.293520][ T1232] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1584.299405][ T1232] RIP: 0033:0x7f30ec79aeb9 [ 1584.303812][ T1232] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1584.323411][ T1232] RSP: 002b:00007f30ed718028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1584.331819][ T1232] RAX: ffffffffffffffda RBX: 00007f30eca15fa0 RCX: 00007f30ec79aeb9 [ 1584.339783][ T1232] RDX: 0000000000000020 RSI: 0000200000001680 RDI: 0000000000000008 [ 1584.347749][ T1232] RBP: 00007f30ed718090 R08: 0000000000000000 R09: 0000000000000000 [ 1584.355710][ T1232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1584.363676][ T1232] R13: 00007f30eca16038 R14: 00007f30eca15fa0 R15: 00007ffe731e1ed8 [ 1584.371654][ T1232] [ 1585.085737][T31628] Bluetooth: hci1: unexpected event 0x0b length: 15 > 11 [ 1585.516027][T31628] Bluetooth: hci2: unexpected event 0x0b length: 15 > 11 [ 1586.139238][ T1291] FAULT_INJECTION: forcing a failure. [ 1586.139238][ T1291] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1586.159515][ T1291] CPU: 1 PID: 1291 Comm: syz.2.10250 Not tainted syzkaller #0 [ 1586.166993][ T1291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1586.177063][ T1291] Call Trace: [ 1586.180355][ T1291] [ 1586.183302][ T1291] dump_stack_lvl+0x18c/0x250 [ 1586.187999][ T1291] ? show_regs_print_info+0x20/0x20 [ 1586.193203][ T1291] ? load_image+0x400/0x400 [ 1586.197701][ T1291] ? __might_fault+0xaa/0x120 [ 1586.202371][ T1291] ? __lock_acquire+0x7d40/0x7d40 [ 1586.207392][ T1291] should_fail_ex+0x39d/0x4d0 [ 1586.212068][ T1291] _copy_from_user+0x2f/0xe0 [ 1586.216652][ T1291] ___sys_sendmsg+0x1c7/0x360 [ 1586.221411][ T1291] ? __sys_sendmsg+0x2a0/0x2a0 [ 1586.226184][ T1291] ? __lock_acquire+0x7d40/0x7d40 [ 1586.231229][ T1291] __se_sys_sendmsg+0x1c2/0x2b0 [ 1586.236073][ T1291] ? __x64_sys_sendmsg+0x80/0x80 [ 1586.241013][ T1291] ? lockdep_hardirqs_on+0x98/0x150 [ 1586.246213][ T1291] do_syscall_64+0x55/0xa0 [ 1586.250625][ T1291] ? clear_bhb_loop+0x40/0x90 [ 1586.255293][ T1291] ? clear_bhb_loop+0x40/0x90 [ 1586.259964][ T1291] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1586.265849][ T1291] RIP: 0033:0x7f634b39aeb9 [ 1586.270255][ T1291] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1586.289853][ T1291] RSP: 002b:00007f634c21f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1586.298262][ T1291] RAX: ffffffffffffffda RBX: 00007f634b615fa0 RCX: 00007f634b39aeb9 [ 1586.306227][ T1291] RDX: 0000000004000884 RSI: 0000200000000080 RDI: 0000000000000003 [ 1586.314196][ T1291] RBP: 00007f634c21f090 R08: 0000000000000000 R09: 0000000000000000 [ 1586.322168][ T1291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1586.330155][ T1291] R13: 00007f634b616038 R14: 00007f634b615fa0 R15: 00007ffd18e39198 [ 1586.338150][ T1291] [ 1586.475877][ T1293] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10251'. [ 1586.615474][T31628] Bluetooth: hci1: unexpected event 0x0b length: 15 > 11 [ 1586.710430][ T1308] netlink: 'syz.2.10256': attribute type 1 has an invalid length. [ 1586.746768][ T1308] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.10256'. [ 1586.787179][ T1310] FAULT_INJECTION: forcing a failure. [ 1586.787179][ T1310] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1586.848459][ T1310] CPU: 1 PID: 1310 Comm: syz.1.10258 Not tainted syzkaller #0 [ 1586.855949][ T1310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1586.866010][ T1310] Call Trace: [ 1586.869300][ T1310] [ 1586.872241][ T1310] dump_stack_lvl+0x18c/0x250 [ 1586.876945][ T1310] ? show_regs_print_info+0x20/0x20 [ 1586.882164][ T1310] ? load_image+0x400/0x400 [ 1586.886685][ T1310] ? __might_fault+0xaa/0x120 [ 1586.891377][ T1310] ? __lock_acquire+0x7d40/0x7d40 [ 1586.896419][ T1310] should_fail_ex+0x39d/0x4d0 [ 1586.901097][ T1310] _copy_from_user+0x2f/0xe0 [ 1586.905682][ T1310] ___sys_sendmsg+0x1c7/0x360 [ 1586.910347][ T1310] ? get_pid_task+0x20/0x1e0 [ 1586.914972][ T1310] ? __sys_sendmsg+0x2a0/0x2a0 [ 1586.919737][ T1310] ? __lock_acquire+0x7d40/0x7d40 [ 1586.924773][ T1310] __se_sys_sendmsg+0x1c2/0x2b0 [ 1586.929614][ T1310] ? __x64_sys_sendmsg+0x80/0x80 [ 1586.934552][ T1310] ? lockdep_hardirqs_on+0x98/0x150 [ 1586.939743][ T1310] do_syscall_64+0x55/0xa0 [ 1586.944155][ T1310] ? clear_bhb_loop+0x40/0x90 [ 1586.948824][ T1310] ? clear_bhb_loop+0x40/0x90 [ 1586.953493][ T1310] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1586.959374][ T1310] RIP: 0033:0x7f30ec79aeb9 [ 1586.963783][ T1310] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1586.983381][ T1310] RSP: 002b:00007f30ed718028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1586.991791][ T1310] RAX: ffffffffffffffda RBX: 00007f30eca15fa0 RCX: 00007f30ec79aeb9 [ 1586.999758][ T1310] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1587.007720][ T1310] RBP: 00007f30ed718090 R08: 0000000000000000 R09: 0000000000000000 [ 1587.015678][ T1310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1587.023641][ T1310] R13: 00007f30eca16038 R14: 00007f30eca15fa0 R15: 00007ffe731e1ed8 [ 1587.031613][ T1310] [ 1587.142521][ T1322] FAULT_INJECTION: forcing a failure. [ 1587.142521][ T1322] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1587.201888][ T1322] CPU: 1 PID: 1322 Comm: syz.1.10262 Not tainted syzkaller #0 [ 1587.209398][ T1322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1587.219472][ T1322] Call Trace: [ 1587.222772][ T1322] [ 1587.225726][ T1322] dump_stack_lvl+0x18c/0x250 [ 1587.230442][ T1322] ? show_regs_print_info+0x20/0x20 [ 1587.235677][ T1322] ? load_image+0x400/0x400 [ 1587.240212][ T1322] ? __might_fault+0xaa/0x120 [ 1587.244915][ T1322] ? __lock_acquire+0x7d40/0x7d40 [ 1587.249976][ T1322] should_fail_ex+0x39d/0x4d0 [ 1587.254694][ T1322] _copy_from_user+0x2f/0xe0 [ 1587.259315][ T1322] ___sys_sendmsg+0x1c7/0x360 [ 1587.264018][ T1322] ? get_pid_task+0x20/0x1e0 [ 1587.268649][ T1322] ? __sys_sendmsg+0x2a0/0x2a0 [ 1587.273480][ T1322] ? __lock_acquire+0x7d40/0x7d40 [ 1587.278584][ T1322] __se_sys_sendmsg+0x1c2/0x2b0 [ 1587.283466][ T1322] ? __x64_sys_sendmsg+0x80/0x80 [ 1587.288455][ T1322] ? lockdep_hardirqs_on+0x98/0x150 [ 1587.293676][ T1322] do_syscall_64+0x55/0xa0 [ 1587.298098][ T1322] ? clear_bhb_loop+0x40/0x90 [ 1587.302773][ T1322] ? clear_bhb_loop+0x40/0x90 [ 1587.307452][ T1322] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1587.313343][ T1322] RIP: 0033:0x7f30ec79aeb9 [ 1587.317755][ T1322] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1587.337356][ T1322] RSP: 002b:00007f30ed718028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1587.345770][ T1322] RAX: ffffffffffffffda RBX: 00007f30eca15fa0 RCX: 00007f30ec79aeb9 [ 1587.353738][ T1322] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 1587.361706][ T1322] RBP: 00007f30ed718090 R08: 0000000000000000 R09: 0000000000000000 [ 1587.369677][ T1322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1587.377650][ T1322] R13: 00007f30eca16038 R14: 00007f30eca15fa0 R15: 00007ffe731e1ed8 [ 1587.385645][ T1322] [ 1588.086119][ T1337] FAULT_INJECTION: forcing a failure. [ 1588.086119][ T1337] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1588.111599][ T1337] CPU: 0 PID: 1337 Comm: syz.3.10268 Not tainted syzkaller #0 [ 1588.119089][ T1337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1588.129154][ T1337] Call Trace: [ 1588.132446][ T1337] [ 1588.135390][ T1337] dump_stack_lvl+0x18c/0x250 [ 1588.140080][ T1337] ? show_regs_print_info+0x20/0x20 [ 1588.145280][ T1337] ? load_image+0x400/0x400 [ 1588.149790][ T1337] ? __might_fault+0xaa/0x120 [ 1588.154467][ T1337] ? __lock_acquire+0x7d40/0x7d40 [ 1588.159493][ T1337] should_fail_ex+0x39d/0x4d0 [ 1588.164177][ T1337] _copy_from_user+0x2f/0xe0 [ 1588.168768][ T1337] ___sys_recvmsg+0x176/0x590 [ 1588.173442][ T1337] ? __sys_recvmsg+0x2a0/0x2a0 [ 1588.178198][ T1337] ? ksys_write+0x1c4/0x260 [ 1588.182741][ T1337] ? __fget_files+0x43d/0x4b0 [ 1588.187431][ T1337] __x64_sys_recvmsg+0x20c/0x2e0 [ 1588.192365][ T1337] ? ___sys_recvmsg+0x590/0x590 [ 1588.197217][ T1337] ? lockdep_hardirqs_on+0x98/0x150 [ 1588.202410][ T1337] do_syscall_64+0x55/0xa0 [ 1588.206826][ T1337] ? clear_bhb_loop+0x40/0x90 [ 1588.211496][ T1337] ? clear_bhb_loop+0x40/0x90 [ 1588.216165][ T1337] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1588.222050][ T1337] RIP: 0033:0x7f87bf59aeb9 [ 1588.226454][ T1337] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1588.246054][ T1337] RSP: 002b:00007f87c03f1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1588.254460][ T1337] RAX: ffffffffffffffda RBX: 00007f87bf815fa0 RCX: 00007f87bf59aeb9 [ 1588.262430][ T1337] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 1588.270407][ T1337] RBP: 00007f87c03f1090 R08: 0000000000000000 R09: 0000000000000000 [ 1588.278375][ T1337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1588.286338][ T1337] R13: 00007f87bf816038 R14: 00007f87bf815fa0 R15: 00007ffcb3ed5dc8 [ 1588.294315][ T1337] [ 1588.490284][ T1341] netlink: 'syz.1.10270': attribute type 1 has an invalid length. [ 1588.500869][ T1341] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.10270'. [ 1588.512054][ T1341] netlink: 9 bytes leftover after parsing attributes in process `syz.1.10270'. [ 1588.684024][ T1348] netlink: 'syz.0.10273': attribute type 21 has an invalid length. [ 1588.699601][ T1348] IPv6: NLM_F_CREATE should be specified when creating new route [ 1588.710546][ T1348] IPv6: Can't replace route, no match found [ 1588.984210][ T1369] netlink: 'syz.0.10273': attribute type 10 has an invalid length. [ 1589.020725][ T1369] netlink: 55 bytes leftover after parsing attributes in process `syz.0.10273'. [ 1589.723488][ T1381] FAULT_INJECTION: forcing a failure. [ 1589.723488][ T1381] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1589.751914][ T1381] CPU: 1 PID: 1381 Comm: syz.3.10283 Not tainted syzkaller #0 [ 1589.759402][ T1381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1589.769445][ T1381] Call Trace: [ 1589.772712][ T1381] [ 1589.775626][ T1381] dump_stack_lvl+0x18c/0x250 [ 1589.780298][ T1381] ? show_regs_print_info+0x20/0x20 [ 1589.785488][ T1381] ? load_image+0x400/0x400 [ 1589.789978][ T1381] ? __might_fault+0xaa/0x120 [ 1589.794640][ T1381] ? __lock_acquire+0x7d40/0x7d40 [ 1589.799655][ T1381] should_fail_ex+0x39d/0x4d0 [ 1589.804321][ T1381] _copy_from_user+0x2f/0xe0 [ 1589.808894][ T1381] __sys_bpf+0x23e/0x890 [ 1589.813137][ T1381] ? bpf_link_show_fdinfo+0x390/0x390 [ 1589.818528][ T1381] ? lock_chain_count+0x20/0x20 [ 1589.823375][ T1381] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1589.829351][ T1381] __x64_sys_bpf+0x7c/0x90 [ 1589.833760][ T1381] do_syscall_64+0x55/0xa0 [ 1589.838169][ T1381] ? clear_bhb_loop+0x40/0x90 [ 1589.842835][ T1381] ? clear_bhb_loop+0x40/0x90 [ 1589.847500][ T1381] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1589.853382][ T1381] RIP: 0033:0x7f87bf59aeb9 [ 1589.857792][ T1381] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1589.877396][ T1381] RSP: 002b:00007f87c03f1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1589.885807][ T1381] RAX: ffffffffffffffda RBX: 00007f87bf815fa0 RCX: 00007f87bf59aeb9 [ 1589.893770][ T1381] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 1589.901733][ T1381] RBP: 00007f87c03f1090 R08: 0000000000000000 R09: 0000000000000000 [ 1589.909693][ T1381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1589.917654][ T1381] R13: 00007f87bf816038 R14: 00007f87bf815fa0 R15: 00007ffcb3ed5dc8 [ 1589.925644][ T1381] [ 1590.161202][T31628] Bluetooth: hci3: unexpected event 0x03 length: 15 > 11 [ 1590.559884][ T1399] FAULT_INJECTION: forcing a failure. [ 1590.559884][ T1399] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1590.616165][ T1399] CPU: 1 PID: 1399 Comm: syz.2.10289 Not tainted syzkaller #0 [ 1590.623667][ T1399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1590.633734][ T1399] Call Trace: [ 1590.637021][ T1399] [ 1590.639960][ T1399] dump_stack_lvl+0x18c/0x250 [ 1590.644660][ T1399] ? show_regs_print_info+0x20/0x20 [ 1590.649883][ T1399] ? load_image+0x400/0x400 [ 1590.654409][ T1399] ? __lock_acquire+0x7d40/0x7d40 [ 1590.659449][ T1399] ? snprintf+0xe9/0x140 [ 1590.663738][ T1399] should_fail_ex+0x39d/0x4d0 [ 1590.668444][ T1399] _copy_to_user+0x2f/0xa0 [ 1590.672882][ T1399] simple_read_from_buffer+0xe7/0x150 [ 1590.678259][ T1399] proc_fail_nth_read+0x1e8/0x260 [ 1590.683291][ T1399] ? proc_fault_inject_write+0x360/0x360 [ 1590.688910][ T1399] ? fsnotify_perm+0x271/0x5e0 [ 1590.693701][ T1399] ? proc_fault_inject_write+0x360/0x360 [ 1590.699321][ T1399] vfs_read+0x28b/0x970 [ 1590.703468][ T1399] ? kernel_read+0x1e0/0x1e0 [ 1590.708044][ T1399] ? __fget_files+0x28/0x4b0 [ 1590.712619][ T1399] ? __fget_files+0x28/0x4b0 [ 1590.717202][ T1399] ? __fget_files+0x43d/0x4b0 [ 1590.721882][ T1399] ? __fdget_pos+0x2a3/0x330 [ 1590.726483][ T1399] ? ksys_read+0x75/0x260 [ 1590.730837][ T1399] ksys_read+0x150/0x260 [ 1590.735099][ T1399] ? vfs_write+0x990/0x990 [ 1590.739539][ T1399] ? lockdep_hardirqs_on+0x98/0x150 [ 1590.744754][ T1399] do_syscall_64+0x55/0xa0 [ 1590.749199][ T1399] ? clear_bhb_loop+0x40/0x90 [ 1590.753889][ T1399] ? clear_bhb_loop+0x40/0x90 [ 1590.758584][ T1399] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1590.764493][ T1399] RIP: 0033:0x7f634b35b78e [ 1590.768922][ T1399] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1590.788536][ T1399] RSP: 002b:00007f634c1fdfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1590.796943][ T1399] RAX: ffffffffffffffda RBX: 00007f634c1fe6c0 RCX: 00007f634b35b78e [ 1590.804921][ T1399] RDX: 000000000000000f RSI: 00007f634c1fe0a0 RDI: 0000000000000006 [ 1590.812889][ T1399] RBP: 00007f634c1fe090 R08: 0000000000000000 R09: 0000000000000000 [ 1590.820849][ T1399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1590.828818][ T1399] R13: 00007f634b616128 R14: 00007f634b616090 R15: 00007ffd18e39198 [ 1590.836803][ T1399] [ 1591.094712][ T1413] FAULT_INJECTION: forcing a failure. [ 1591.094712][ T1413] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1591.138464][ T1413] CPU: 1 PID: 1413 Comm: syz.1.10292 Not tainted syzkaller #0 [ 1591.145980][ T1413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1591.156053][ T1413] Call Trace: [ 1591.159337][ T1413] [ 1591.162264][ T1413] dump_stack_lvl+0x18c/0x250 [ 1591.166968][ T1413] ? show_regs_print_info+0x20/0x20 [ 1591.172185][ T1413] ? load_image+0x400/0x400 [ 1591.176701][ T1413] ? __might_fault+0xaa/0x120 [ 1591.181382][ T1413] ? __lock_acquire+0x7d40/0x7d40 [ 1591.186400][ T1413] should_fail_ex+0x39d/0x4d0 [ 1591.191073][ T1413] _copy_from_user+0x2f/0xe0 [ 1591.195649][ T1413] __sys_bpf+0x23e/0x890 [ 1591.199878][ T1413] ? bpf_link_show_fdinfo+0x390/0x390 [ 1591.205237][ T1413] ? lock_chain_count+0x20/0x20 [ 1591.210073][ T1413] __x64_sys_bpf+0x7c/0x90 [ 1591.214471][ T1413] do_syscall_64+0x55/0xa0 [ 1591.218872][ T1413] ? clear_bhb_loop+0x40/0x90 [ 1591.223531][ T1413] ? clear_bhb_loop+0x40/0x90 [ 1591.228187][ T1413] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1591.234061][ T1413] RIP: 0033:0x7f30ec79aeb9 [ 1591.238458][ T1413] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1591.258048][ T1413] RSP: 002b:00007f30ed6f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1591.266444][ T1413] RAX: ffffffffffffffda RBX: 00007f30eca16090 RCX: 00007f30ec79aeb9 [ 1591.274398][ T1413] RDX: 0000000000000094 RSI: 0000200000000040 RDI: 0000000000000005 [ 1591.282364][ T1413] RBP: 00007f30ed6f7090 R08: 0000000000000000 R09: 0000000000000000 [ 1591.290343][ T1413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1591.298323][ T1413] R13: 00007f30eca16128 R14: 00007f30eca16090 R15: 00007ffe731e1ed8 [ 1591.306325][ T1413] [ 1591.832171][ T1422] FAULT_INJECTION: forcing a failure. [ 1591.832171][ T1422] name failslab, interval 1, probability 0, space 0, times 0 [ 1591.852006][ T1422] CPU: 1 PID: 1422 Comm: syz.1.10294 Not tainted syzkaller #0 [ 1591.859497][ T1422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1591.869569][ T1422] Call Trace: [ 1591.872859][ T1422] [ 1591.875801][ T1422] dump_stack_lvl+0x18c/0x250 [ 1591.880500][ T1422] ? show_regs_print_info+0x20/0x20 [ 1591.885720][ T1422] ? load_image+0x400/0x400 [ 1591.890243][ T1422] ? __might_sleep+0xe0/0xe0 [ 1591.894849][ T1422] ? __lock_acquire+0x7d40/0x7d40 [ 1591.899904][ T1422] should_fail_ex+0x39d/0x4d0 [ 1591.904608][ T1422] should_failslab+0x9/0x20 [ 1591.909131][ T1422] slab_pre_alloc_hook+0x59/0x310 [ 1591.914180][ T1422] kmem_cache_alloc_node+0x60/0x320 [ 1591.919396][ T1422] ? lock_chain_count+0x20/0x20 [ 1591.924264][ T1422] ? dup_task_struct+0x57/0x7c0 [ 1591.929130][ T1422] dup_task_struct+0x57/0x7c0 [ 1591.933821][ T1422] ? lockdep_hardirqs_on+0x98/0x150 [ 1591.939036][ T1422] copy_process+0x586/0x3d80 [ 1591.943637][ T1422] ? debug_object_activate+0x304/0x4f0 [ 1591.949115][ T1422] ? __rwlock_init+0x150/0x150 [ 1591.953897][ T1422] ? do_raw_spin_unlock+0x121/0x230 [ 1591.959110][ T1422] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1591.965114][ T1422] ? __pidfd_prepare+0x140/0x140 [ 1591.970064][ T1422] ? ktime_get+0x7f/0x280 [ 1591.974413][ T1422] kernel_clone+0x24b/0x8a0 [ 1591.978932][ T1422] ? hrtimer_interrupt+0x597/0x9c0 [ 1591.984056][ T1422] ? ktime_get+0x7f/0x280 [ 1591.988393][ T1422] ? create_io_thread+0x190/0x190 [ 1591.993437][ T1422] ? seqcount_lockdep_reader_access+0x17b/0x1d0 [ 1591.999713][ T1422] __x64_sys_clone+0x1b7/0x230 [ 1592.004489][ T1422] ? lapic_next_event+0x11/0x20 [ 1592.009372][ T1422] ? clockevents_program_event+0x230/0x310 [ 1592.015193][ T1422] ? __ia32_sys_vfork+0x140/0x140 [ 1592.020239][ T1422] ? lock_chain_count+0x20/0x20 [ 1592.025097][ T1422] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1592.031096][ T1422] ? lockdep_hardirqs_on+0x98/0x150 [ 1592.036310][ T1422] do_syscall_64+0x55/0xa0 [ 1592.040739][ T1422] ? clear_bhb_loop+0x40/0x90 [ 1592.045423][ T1422] ? clear_bhb_loop+0x40/0x90 [ 1592.050133][ T1422] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1592.056036][ T1422] RIP: 0033:0x7f30ec79aeb9 [ 1592.060460][ T1422] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1592.080104][ T1422] RSP: 002b:00007f30ed717fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1592.088536][ T1422] RAX: ffffffffffffffda RBX: 00007f30eca15fa0 RCX: 00007f30ec79aeb9 [ 1592.096517][ T1422] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000e50c1600 [ 1592.104495][ T1422] RBP: 00007f30ed718090 R08: 0000000000000000 R09: 0000000000000000 [ 1592.112476][ T1422] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 1592.120467][ T1422] R13: 00007f30eca16038 R14: 00007f30eca15fa0 R15: 00007ffe731e1ed8 [ 1592.128467][ T1422] [ 1593.260748][ T1443] FAULT_INJECTION: forcing a failure. [ 1593.260748][ T1443] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1593.324375][ T1443] CPU: 0 PID: 1443 Comm: syz.1.10301 Not tainted syzkaller #0 [ 1593.331881][ T1443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1593.341947][ T1443] Call Trace: [ 1593.345241][ T1443] [ 1593.348185][ T1443] dump_stack_lvl+0x18c/0x250 [ 1593.352891][ T1443] ? show_regs_print_info+0x20/0x20 [ 1593.358110][ T1443] ? load_image+0x400/0x400 [ 1593.362631][ T1443] ? __might_fault+0xaa/0x120 [ 1593.367326][ T1443] ? __lock_acquire+0x7d40/0x7d40 [ 1593.372365][ T1443] should_fail_ex+0x39d/0x4d0 [ 1593.377056][ T1443] _copy_from_user+0x2f/0xe0 [ 1593.381653][ T1443] __sys_bpf+0x23e/0x890 [ 1593.385901][ T1443] ? bpf_link_show_fdinfo+0x390/0x390 [ 1593.391302][ T1443] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1593.397476][ T1443] __x64_sys_bpf+0x7c/0x90 [ 1593.401899][ T1443] do_syscall_64+0x55/0xa0 [ 1593.406324][ T1443] ? clear_bhb_loop+0x40/0x90 [ 1593.411006][ T1443] ? clear_bhb_loop+0x40/0x90 [ 1593.415689][ T1443] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1593.421587][ T1443] RIP: 0033:0x7f30ec79aeb9 [ 1593.426007][ T1443] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1593.445619][ T1443] RSP: 002b:00007f30ed718028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1593.454047][ T1443] RAX: ffffffffffffffda RBX: 00007f30eca15fa0 RCX: 00007f30ec79aeb9 [ 1593.462027][ T1443] RDX: 0000000000000050 RSI: 0000200000000280 RDI: 0000000000000000 [ 1593.469999][ T1443] RBP: 00007f30ed718090 R08: 0000000000000000 R09: 0000000000000000 [ 1593.477973][ T1443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1593.485956][ T1443] R13: 00007f30eca16038 R14: 00007f30eca15fa0 R15: 00007ffe731e1ed8 [ 1593.493955][ T1443] [ 1594.221530][ T1455] FAULT_INJECTION: forcing a failure. [ 1594.221530][ T1455] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1594.244833][ T1455] CPU: 0 PID: 1455 Comm: syz.0.10307 Not tainted syzkaller #0 [ 1594.252329][ T1455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1594.262394][ T1455] Call Trace: [ 1594.265685][ T1455] [ 1594.268629][ T1455] dump_stack_lvl+0x18c/0x250 [ 1594.273333][ T1455] ? show_regs_print_info+0x20/0x20 [ 1594.278538][ T1455] ? load_image+0x400/0x400 [ 1594.283038][ T1455] ? __might_fault+0xaa/0x120 [ 1594.287707][ T1455] ? __lock_acquire+0x7d40/0x7d40 [ 1594.292729][ T1455] should_fail_ex+0x39d/0x4d0 [ 1594.297407][ T1455] _copy_from_user+0x2f/0xe0 [ 1594.301989][ T1455] ___sys_recvmsg+0x176/0x590 [ 1594.306677][ T1455] ? __sys_recvmsg+0x2a0/0x2a0 [ 1594.311453][ T1455] ? __fget_files+0x43d/0x4b0 [ 1594.316139][ T1455] __x64_sys_recvmsg+0x20c/0x2e0 [ 1594.321067][ T1455] ? perf_trace_preemptirq_template+0x269/0x330 [ 1594.327337][ T1455] ? ___sys_recvmsg+0x590/0x590 [ 1594.332208][ T1455] ? lockdep_hardirqs_on+0x98/0x150 [ 1594.337409][ T1455] do_syscall_64+0x55/0xa0 [ 1594.341822][ T1455] ? clear_bhb_loop+0x40/0x90 [ 1594.346495][ T1455] ? clear_bhb_loop+0x40/0x90 [ 1594.351164][ T1455] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1594.357048][ T1455] RIP: 0033:0x7f42e459aeb9 [ 1594.361455][ T1455] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1594.381060][ T1455] RSP: 002b:00007f42e5424028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1594.389469][ T1455] RAX: ffffffffffffffda RBX: 00007f42e4815fa0 RCX: 00007f42e459aeb9 [ 1594.397433][ T1455] RDX: 0000000000010021 RSI: 0000200000000300 RDI: 0000000000000005 [ 1594.405413][ T1455] RBP: 00007f42e5424090 R08: 0000000000000000 R09: 0000000000000000 [ 1594.413383][ T1455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1594.421342][ T1455] R13: 00007f42e4816038 R14: 00007f42e4815fa0 R15: 00007ffc9a492708 [ 1594.429316][ T1455] [ 1594.713120][ T1467] netlink: 'syz.3.10309': attribute type 1 has an invalid length. [ 1594.721233][ T1467] netlink: 'syz.3.10309': attribute type 3 has an invalid length. [ 1594.740499][ T1467] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10309'. [ 1595.294699][ T1483] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1595.302170][ T1483] IPv6: NLM_F_CREATE should be set when creating new route [ 1595.309707][ T1483] IPv6: NLM_F_CREATE should be set when creating new route [ 1595.317130][ T1483] IPv6: NLM_F_CREATE should be set when creating new route [ 1595.357609][ T1484] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1595.364414][ T1484] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1596.068473][ T1497] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1596.075832][ T1497] IPv6: NLM_F_CREATE should be set when creating new route [ 1596.083272][ T1497] IPv6: NLM_F_CREATE should be set when creating new route [ 1596.090690][ T1497] IPv6: NLM_F_CREATE should be set when creating new route [ 1596.365944][ T1514] FAULT_INJECTION: forcing a failure. [ 1596.365944][ T1514] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1596.400511][ T1514] CPU: 1 PID: 1514 Comm: syz.2.10328 Not tainted syzkaller #0 [ 1596.408012][ T1514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1596.418076][ T1514] Call Trace: [ 1596.421375][ T1514] [ 1596.424315][ T1514] dump_stack_lvl+0x18c/0x250 [ 1596.429013][ T1514] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1596.435190][ T1514] ? show_regs_print_info+0x20/0x20 [ 1596.440412][ T1514] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1596.446597][ T1514] should_fail_ex+0x39d/0x4d0 [ 1596.451304][ T1514] _copy_from_user+0x2f/0xe0 [ 1596.455916][ T1514] tipc_setsockopt+0x49d/0x990 [ 1596.460794][ T1514] ? tipc_shutdown+0x4d0/0x4d0 [ 1596.465578][ T1514] ? aa_sock_opt_perm+0x74/0x100 [ 1596.470535][ T1514] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 1596.476099][ T1514] ? security_socket_setsockopt+0x7e/0xa0 [ 1596.481834][ T1514] ? tipc_shutdown+0x4d0/0x4d0 [ 1596.486617][ T1514] do_sock_setsockopt+0x175/0x1a0 [ 1596.491727][ T1514] ? __fdget+0x180/0x210 [ 1596.495988][ T1514] __x64_sys_setsockopt+0x182/0x200 [ 1596.501273][ T1514] do_syscall_64+0x55/0xa0 [ 1596.505709][ T1514] ? clear_bhb_loop+0x40/0x90 [ 1596.510402][ T1514] ? clear_bhb_loop+0x40/0x90 [ 1596.515095][ T1514] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1596.521009][ T1514] RIP: 0033:0x7f634b39aeb9 [ 1596.525448][ T1514] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1596.545065][ T1514] RSP: 002b:00007f634c21f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1596.553481][ T1514] RAX: ffffffffffffffda RBX: 00007f634b615fa0 RCX: 00007f634b39aeb9 [ 1596.561453][ T1514] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000005 [ 1596.569419][ T1514] RBP: 00007f634c21f090 R08: 0000000000000043 R09: 0000000000000000 [ 1596.577385][ T1514] R10: 00002000000008c0 R11: 0000000000000246 R12: 0000000000000001 [ 1596.585346][ T1514] R13: 00007f634b616038 R14: 00007f634b615fa0 R15: 00007ffd18e39198 [ 1596.593323][ T1514] [ 1596.731658][ T1515] netlink: 'syz.0.10325': attribute type 1 has an invalid length. [ 1596.744536][ T1515] netlink: 'syz.0.10325': attribute type 3 has an invalid length. [ 1596.754220][ T1515] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10325'. [ 1597.017471][T31628] Bluetooth: hci0: unexpected event 0x0b length: 15 > 11 [ 1597.315032][ T1531] FAULT_INJECTION: forcing a failure. [ 1597.315032][ T1531] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1597.340964][ T1531] CPU: 0 PID: 1531 Comm: syz.1.10333 Not tainted syzkaller #0 [ 1597.348447][ T1531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1597.358497][ T1531] Call Trace: [ 1597.361772][ T1531] [ 1597.364704][ T1531] dump_stack_lvl+0x18c/0x250 [ 1597.369382][ T1531] ? show_regs_print_info+0x20/0x20 [ 1597.374576][ T1531] ? load_image+0x400/0x400 [ 1597.379072][ T1531] ? __might_fault+0xaa/0x120 [ 1597.383739][ T1531] ? __lock_acquire+0x7d40/0x7d40 [ 1597.388760][ T1531] should_fail_ex+0x39d/0x4d0 [ 1597.393440][ T1531] _copy_from_user+0x2f/0xe0 [ 1597.398024][ T1531] __sys_bpf+0x23e/0x890 [ 1597.402268][ T1531] ? bpf_link_show_fdinfo+0x390/0x390 [ 1597.407640][ T1531] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1597.413795][ T1531] __x64_sys_bpf+0x7c/0x90 [ 1597.418204][ T1531] do_syscall_64+0x55/0xa0 [ 1597.422615][ T1531] ? clear_bhb_loop+0x40/0x90 [ 1597.427280][ T1531] ? clear_bhb_loop+0x40/0x90 [ 1597.431949][ T1531] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1597.437834][ T1531] RIP: 0033:0x7f30ec79aeb9 [ 1597.442240][ T1531] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1597.461858][ T1531] RSP: 002b:00007f30ed718028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1597.470266][ T1531] RAX: ffffffffffffffda RBX: 00007f30eca15fa0 RCX: 00007f30ec79aeb9 [ 1597.478234][ T1531] RDX: 0000000000000048 RSI: 0000200000000280 RDI: 0000000000000000 [ 1597.486203][ T1531] RBP: 00007f30ed718090 R08: 0000000000000000 R09: 0000000000000000 [ 1597.494167][ T1531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1597.502135][ T1531] R13: 00007f30eca16038 R14: 00007f30eca15fa0 R15: 00007ffe731e1ed8 [ 1597.510109][ T1531] [ 1600.009878][ T1582] netlink: 'syz.1.10345': attribute type 1 has an invalid length. [ 1600.049238][ T1582] netlink: 'syz.1.10345': attribute type 3 has an invalid length. [ 1600.087792][ T1582] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10345'. [ 1600.320250][ T1589] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1600.326862][ T1589] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1601.200192][ T1611] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1601.207679][ T1611] IPv6: NLM_F_CREATE should be set when creating new route [ 1601.215239][ T1611] IPv6: NLM_F_CREATE should be set when creating new route [ 1601.222684][ T1611] IPv6: NLM_F_CREATE should be set when creating new route [ 1601.661427][ T1619] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1601.667934][ T1619] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1601.679307][ T1621] FAULT_INJECTION: forcing a failure. [ 1601.679307][ T1621] name failslab, interval 1, probability 0, space 0, times 0 [ 1601.702114][ T1621] CPU: 0 PID: 1621 Comm: syz.2.10359 Not tainted syzkaller #0 [ 1601.709598][ T1621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1601.719666][ T1621] Call Trace: [ 1601.722957][ T1621] [ 1601.725897][ T1621] dump_stack_lvl+0x18c/0x250 [ 1601.730598][ T1621] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1601.736771][ T1621] ? show_regs_print_info+0x20/0x20 [ 1601.741993][ T1621] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1601.748176][ T1621] should_fail_ex+0x39d/0x4d0 [ 1601.752874][ T1621] should_failslab+0x9/0x20 [ 1601.757389][ T1621] slab_pre_alloc_hook+0x59/0x310 [ 1601.762428][ T1621] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1601.768603][ T1621] kmem_cache_alloc_node+0x60/0x320 [ 1601.773825][ T1621] ? dup_task_struct+0x57/0x7c0 [ 1601.778695][ T1621] dup_task_struct+0x57/0x7c0 [ 1601.783387][ T1621] copy_process+0x586/0x3d80 [ 1601.787987][ T1621] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1601.794172][ T1621] ? get_pid_task+0x20/0x1e0 [ 1601.798781][ T1621] ? __pidfd_prepare+0x140/0x140 [ 1601.803748][ T1621] kernel_clone+0x24b/0x8a0 [ 1601.808272][ T1621] ? create_io_thread+0x190/0x190 [ 1601.813329][ T1621] __x64_sys_clone+0x1b7/0x230 [ 1601.818100][ T1621] ? __fget_files+0x43d/0x4b0 [ 1601.822789][ T1621] ? __ia32_sys_vfork+0x140/0x140 [ 1601.827829][ T1621] ? lock_chain_count+0x20/0x20 [ 1601.832678][ T1621] ? lockdep_hardirqs_on+0x98/0x150 [ 1601.837871][ T1621] do_syscall_64+0x55/0xa0 [ 1601.842283][ T1621] ? clear_bhb_loop+0x40/0x90 [ 1601.846949][ T1621] ? clear_bhb_loop+0x40/0x90 [ 1601.851617][ T1621] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1601.857501][ T1621] RIP: 0033:0x7f634b39aeb9 [ 1601.861908][ T1621] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1601.881502][ T1621] RSP: 002b:00007f634c21efd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1601.889908][ T1621] RAX: ffffffffffffffda RBX: 00007f634b615fa0 RCX: 00007f634b39aeb9 [ 1601.897871][ T1621] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000021000000 [ 1601.905830][ T1621] RBP: 00007f634c21f090 R08: 0000000000000000 R09: 0000000000000000 [ 1601.913792][ T1621] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 1601.921753][ T1621] R13: 00007f634b616038 R14: 00007f634b615fa0 R15: 00007ffd18e39198 [ 1601.929736][ T1621] [ 1641.233301][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 1641.239684][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 1641.273787][ T1640] netlink: 'syz.2.10362': attribute type 1 has an invalid length. [ 1641.445833][ T1640] netlink: 'syz.2.10362': attribute type 3 has an invalid length. [ 1641.542971][ T1640] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10362'. [ 1643.108045][T25302] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1643.136950][T25302] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1643.157025][T25302] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1643.169451][T25302] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1643.196490][T25302] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1643.204480][T25302] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1643.299578][T31628] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1643.330054][T31628] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1643.338700][T31628] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1643.354216][T31628] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1643.374795][T31628] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1643.392034][T31628] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1643.484820][T31628] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1643.498177][T31628] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1643.506849][T31628] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1643.523677][T17441] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1643.534815][T17441] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1643.542298][T17441] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1643.553019][T17441] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1643.563213][T17441] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1643.574137][T17441] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1643.596832][T17441] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1643.604770][T17441] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1643.612350][T17441] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1643.999172][ T1669] chnl_net:caif_netlink_parms(): no params data found [ 1644.037226][ T1665] chnl_net:caif_netlink_parms(): no params data found [ 1644.168937][ T1667] chnl_net:caif_netlink_parms(): no params data found [ 1644.182767][ T1669] bridge0: port 1(bridge_slave_0) entered blocking state [ 1644.190113][ T1669] bridge0: port 1(bridge_slave_0) entered disabled state [ 1644.197735][ T1669] bridge_slave_0: entered allmulticast mode [ 1644.205345][ T1669] bridge_slave_0: entered promiscuous mode [ 1644.214869][ T1669] bridge0: port 2(bridge_slave_1) entered blocking state [ 1644.222051][ T1669] bridge0: port 2(bridge_slave_1) entered disabled state [ 1644.229183][ T1669] bridge_slave_1: entered allmulticast mode [ 1644.237665][ T1669] bridge_slave_1: entered promiscuous mode [ 1644.300090][ T1669] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1644.354113][ T1669] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1644.405524][ T1669] team0: Port device team_slave_0 added [ 1644.424653][ T1665] bridge0: port 1(bridge_slave_0) entered blocking state [ 1644.434686][ T1665] bridge0: port 1(bridge_slave_0) entered disabled state [ 1644.442067][ T1665] bridge_slave_0: entered allmulticast mode [ 1644.448691][ T1665] bridge_slave_0: entered promiscuous mode [ 1644.458101][ T1665] bridge0: port 2(bridge_slave_1) entered blocking state [ 1644.465416][ T1665] bridge0: port 2(bridge_slave_1) entered disabled state [ 1644.472713][ T1665] bridge_slave_1: entered allmulticast mode [ 1644.479960][ T1665] bridge_slave_1: entered promiscuous mode [ 1644.498359][ T1669] team0: Port device team_slave_1 added [ 1644.504404][ T1671] chnl_net:caif_netlink_parms(): no params data found [ 1644.551312][ T1667] bridge0: port 1(bridge_slave_0) entered blocking state [ 1644.558622][ T1667] bridge0: port 1(bridge_slave_0) entered disabled state [ 1644.566313][ T1667] bridge_slave_0: entered allmulticast mode [ 1644.573647][ T1667] bridge_slave_0: entered promiscuous mode [ 1644.632749][ T1667] bridge0: port 2(bridge_slave_1) entered blocking state [ 1644.639865][ T1667] bridge0: port 2(bridge_slave_1) entered disabled state [ 1644.652004][ T1667] bridge_slave_1: entered allmulticast mode [ 1644.658659][ T1667] bridge_slave_1: entered promiscuous mode [ 1644.665905][ T1669] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1644.677821][ T1669] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1644.704283][ T1669] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1644.721518][ T1665] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1644.741227][ T1669] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1644.750439][ T1669] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1644.776743][ T1669] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1644.794932][ T1665] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1644.846964][ T1667] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1644.858765][ T1667] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1644.875167][ T1665] team0: Port device team_slave_0 added [ 1644.918549][ T1665] team0: Port device team_slave_1 added [ 1644.945534][ T1667] team0: Port device team_slave_0 added [ 1644.966372][ T1667] team0: Port device team_slave_1 added [ 1644.989614][ T1665] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1644.998287][ T1665] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1645.025168][ T1665] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1645.040630][ T1671] bridge0: port 1(bridge_slave_0) entered blocking state [ 1645.047964][ T1671] bridge0: port 1(bridge_slave_0) entered disabled state [ 1645.056014][ T1671] bridge_slave_0: entered allmulticast mode [ 1645.063496][ T1671] bridge_slave_0: entered promiscuous mode [ 1645.087038][ T1669] hsr_slave_0: entered promiscuous mode [ 1645.093962][ T1669] hsr_slave_1: entered promiscuous mode [ 1645.100017][ T1669] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1645.107654][ T1669] Cannot create hsr debugfs directory [ 1645.113693][ T1665] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1645.120636][ T1665] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1645.148310][ T1665] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1645.159656][ T1671] bridge0: port 2(bridge_slave_1) entered blocking state [ 1645.169299][ T1671] bridge0: port 2(bridge_slave_1) entered disabled state [ 1645.176754][ T1671] bridge_slave_1: entered allmulticast mode [ 1645.184248][ T1671] bridge_slave_1: entered promiscuous mode [ 1645.198449][ T1667] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1645.210412][ T1667] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1645.240957][ T1667] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1645.253347][ T1667] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1645.260270][ T1667] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1645.281948][T31628] Bluetooth: hci1: command tx timeout [ 1645.298233][ T1667] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1645.386750][ T1665] hsr_slave_0: entered promiscuous mode [ 1645.393577][ T1665] hsr_slave_1: entered promiscuous mode [ 1645.399582][ T1665] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1645.407405][ T1665] Cannot create hsr debugfs directory [ 1645.426450][ T1671] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1645.439933][ T1671] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1645.458191][T31628] Bluetooth: hci0: command tx timeout [ 1645.478495][ T1667] hsr_slave_0: entered promiscuous mode [ 1645.485418][ T1667] hsr_slave_1: entered promiscuous mode [ 1645.491450][ T1667] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1645.499117][ T1667] Cannot create hsr debugfs directory [ 1645.540189][ T1671] team0: Port device team_slave_0 added [ 1645.597975][ T1671] team0: Port device team_slave_1 added [ 1645.603722][T31628] Bluetooth: hci2: command tx timeout [ 1645.682248][T31628] Bluetooth: hci3: command tx timeout [ 1645.706129][ T1671] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1645.715623][ T1671] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1645.746549][ T1671] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1645.759231][ T1671] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1645.766678][ T1671] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1645.792989][ T1671] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1645.887620][ T1671] hsr_slave_0: entered promiscuous mode [ 1645.894889][ T1671] hsr_slave_1: entered promiscuous mode [ 1645.900851][ T1671] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1645.908683][ T1671] Cannot create hsr debugfs directory [ 1646.119516][ T1665] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1646.133959][ T1665] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1646.163368][ T1665] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1646.185589][ T1665] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1646.239180][ T1669] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1646.263763][ T1669] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1646.274417][ T1669] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1646.283911][ T1669] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1646.377086][ T1667] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1646.390290][ T1667] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1646.401667][ T1667] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1646.431617][ T1667] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1646.528955][ T1671] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1646.542676][ T1671] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1646.582533][ T1671] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1646.591705][ T1671] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1646.639270][ T1669] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1646.660047][ T1665] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1646.703996][ T1665] 8021q: adding VLAN 0 to HW filter on device team0 [ 1646.715488][ T1669] 8021q: adding VLAN 0 to HW filter on device team0 [ 1646.753621][ T7364] bridge0: port 1(bridge_slave_0) entered blocking state [ 1646.760688][ T7364] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1646.774771][ T7364] bridge0: port 2(bridge_slave_1) entered blocking state [ 1646.781863][ T7364] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1646.829316][T18622] bridge0: port 1(bridge_slave_0) entered blocking state [ 1646.836416][T18622] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1646.858242][T18622] bridge0: port 2(bridge_slave_1) entered blocking state [ 1646.865382][T18622] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1646.898966][ T1665] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1647.049449][ T1667] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1647.074198][ T1671] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1647.145294][ T1667] 8021q: adding VLAN 0 to HW filter on device team0 [ 1647.176587][ T3455] bridge0: port 1(bridge_slave_0) entered blocking state [ 1647.183714][ T3455] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1647.215143][ T1671] 8021q: adding VLAN 0 to HW filter on device team0 [ 1647.230757][ T3455] bridge0: port 2(bridge_slave_1) entered blocking state [ 1647.237925][ T3455] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1647.277963][ T5879] bridge0: port 1(bridge_slave_0) entered blocking state [ 1647.285121][ T5879] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1647.298464][ T5879] bridge0: port 2(bridge_slave_1) entered blocking state [ 1647.305619][ T5879] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1647.363503][T31628] Bluetooth: hci1: command tx timeout [ 1647.386741][ T1667] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1647.415648][ T1665] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1647.460573][ T1671] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1647.483415][ T1671] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1647.522221][T31628] Bluetooth: hci0: command tx timeout [ 1647.559431][ T1669] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1647.682191][T31628] Bluetooth: hci2: command tx timeout [ 1647.765334][T31628] Bluetooth: hci3: command tx timeout [ 1647.808436][ T1667] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1647.960788][ T1671] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1648.154709][ T1665] veth0_vlan: entered promiscuous mode [ 1648.232375][ T1665] veth1_vlan: entered promiscuous mode [ 1648.318697][ T1669] veth0_vlan: entered promiscuous mode [ 1648.350639][ T1669] veth1_vlan: entered promiscuous mode [ 1648.398857][ T1665] veth0_macvtap: entered promiscuous mode [ 1648.436069][ T1665] veth1_macvtap: entered promiscuous mode [ 1648.500053][ T1669] veth0_macvtap: entered promiscuous mode [ 1648.527826][ T1665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1648.539924][ T1665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1648.550177][ T1665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1648.560993][ T1665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1648.573619][ T1665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1648.584092][ T1665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1648.594047][ T1665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1648.604717][ T1665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1648.616478][ T1665] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1648.630587][ T1667] veth0_vlan: entered promiscuous mode [ 1648.638463][ T1669] veth1_macvtap: entered promiscuous mode [ 1648.684239][ T1665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1648.695617][ T1665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1648.706244][ T1665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1648.716784][ T1665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1648.727059][ T1665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1648.740913][ T1665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1648.750898][ T1665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1648.762144][ T1665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1648.773553][ T1665] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1648.788749][ T1667] veth1_vlan: entered promiscuous mode [ 1648.797032][ T1669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1648.809496][ T1669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1648.819430][ T1669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1648.830868][ T1669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1648.840750][ T1669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1648.851353][ T1669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1648.863017][ T1669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1648.873643][ T1669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1648.884524][ T1669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1648.896012][ T1669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1648.908138][ T1669] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1648.934489][ T1665] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1648.943336][ T1665] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1648.952386][ T1665] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1648.961110][ T1665] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1648.982897][ T1669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1648.993726][ T1669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1649.005651][ T1669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1649.016742][ T1669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1649.026632][ T1669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1649.037136][ T1669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1649.047726][ T1669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1649.058226][ T1669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1649.068151][ T1669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1649.078738][ T1669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1649.089807][ T1669] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1649.139903][ T1669] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1649.149549][ T1669] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1649.159519][ T1669] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1649.168422][ T1669] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1649.183148][ T1671] veth0_vlan: entered promiscuous mode [ 1649.197921][ T1667] veth0_macvtap: entered promiscuous mode [ 1649.231195][ T1671] veth1_vlan: entered promiscuous mode [ 1649.249166][ T1667] veth1_macvtap: entered promiscuous mode [ 1649.335968][ T1671] veth0_macvtap: entered promiscuous mode [ 1649.365443][T25489] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1649.380995][ T1667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1649.394660][T25489] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1649.402978][ T1667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1649.413824][ T1667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1649.424662][ T1667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1649.434588][ T1667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1649.448616][ T1667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1649.452305][T31628] Bluetooth: hci1: command tx timeout [ 1649.468185][ T1667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1649.478651][ T1667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1649.488778][ T1667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1649.499403][ T1667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1649.509355][ T1667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1649.520102][ T1667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1649.531292][ T1667] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1649.539843][ T1671] veth1_macvtap: entered promiscuous mode [ 1649.602825][T31628] Bluetooth: hci0: command tx timeout [ 1649.618118][ T1667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1649.629290][ T1667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1649.639157][ T1667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1649.650160][ T1667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1649.660231][ T1667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1649.670741][ T1667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1649.681643][ T1667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1649.695342][ T1667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1649.712652][ T1667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1649.727390][ T1667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1649.738288][ T1667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1649.749397][ T1667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1649.760422][ T1667] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1649.772369][T31628] Bluetooth: hci2: command tx timeout [ 1649.782816][T28535] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1649.790661][T28535] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1649.797054][ T1671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1649.808737][ T1671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1649.820619][ T1671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1649.831194][ T1671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1649.841215][ T1671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1649.852702][T31628] Bluetooth: hci3: command tx timeout [ 1649.861667][ T1671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1649.876190][ T1671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1649.886667][ T1671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1649.897702][ T1671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1649.908260][ T1671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1649.918160][ T1671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1649.929979][ T1671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1649.947703][ T1671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1649.958332][ T1671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1649.971302][ T1671] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1649.997817][ T1667] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1650.007935][ T1667] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1650.017889][ T1667] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1650.027895][ T1667] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1650.039445][ T7364] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1650.061713][ T7364] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1650.095958][ T1671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1650.121807][ T1671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1650.150091][ T1671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1650.165205][ T1671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1650.175151][ T1671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1650.185931][ T1671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1650.196529][ T1671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1650.207002][ T1671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1650.216837][ T1671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1650.227771][ T1671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1650.237609][ T1671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1650.249012][ T1671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1650.259184][ T1671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1650.269643][ T1671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1650.282692][ T1671] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1650.322301][T18622] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1650.324041][ T1671] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1650.339872][ T1671] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1650.348814][ T1671] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1650.352934][T18622] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1650.358453][ T1671] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1650.583702][T18622] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1650.591549][T18622] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1650.638862][ T1768] netlink: 763 bytes leftover after parsing attributes in process `syz.4.10373'. [ 1650.682811][T28535] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1650.690647][T28535] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1650.753668][T25489] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1650.771971][T25489] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1650.877022][ T3455] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1650.924433][ T3455] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1651.099460][ T1779] FAULT_INJECTION: forcing a failure. [ 1651.099460][ T1779] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1651.118273][ T1780] netlink: 193500 bytes leftover after parsing attributes in process `syz.5.10368'. [ 1651.137353][ T1779] CPU: 1 PID: 1779 Comm: syz.4.10375 Not tainted syzkaller #0 [ 1651.144839][ T1779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1651.154908][ T1779] Call Trace: [ 1651.158198][ T1779] [ 1651.161135][ T1779] dump_stack_lvl+0x18c/0x250 [ 1651.165837][ T1779] ? show_regs_print_info+0x20/0x20 [ 1651.171060][ T1779] ? load_image+0x400/0x400 [ 1651.175583][ T1779] ? __might_fault+0xaa/0x120 [ 1651.180277][ T1779] ? __lock_acquire+0x7d40/0x7d40 [ 1651.185010][ T1782] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1651.185315][ T1779] should_fail_ex+0x39d/0x4d0 [ 1651.191707][ T1782] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1651.196281][ T1779] _copy_from_user+0x2f/0xe0 [ 1651.196313][ T1779] sk_setsockopt+0x2b2/0x2bc0 [ 1651.196358][ T1779] ? sockopt_capable+0x60/0x60 [ 1651.216697][ T1779] ? aa_sk_perm+0x83c/0x970 [ 1651.221243][ T1779] ? __fget_files+0x28/0x4b0 [ 1651.225863][ T1779] ? aa_af_perm+0x330/0x330 [ 1651.230386][ T1779] ? __fget_files+0x28/0x4b0 [ 1651.234994][ T1779] ? __fget_files+0x28/0x4b0 [ 1651.239592][ T1779] ? aa_sock_opt_perm+0x74/0x100 [ 1651.244521][ T1779] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 1651.250053][ T1779] ? security_socket_setsockopt+0x7e/0xa0 [ 1651.255776][ T1779] do_sock_setsockopt+0x11b/0x1a0 [ 1651.260828][ T1779] __x64_sys_setsockopt+0x182/0x200 [ 1651.266068][ T1779] do_syscall_64+0x55/0xa0 [ 1651.270508][ T1779] ? clear_bhb_loop+0x40/0x90 [ 1651.275201][ T1779] ? clear_bhb_loop+0x40/0x90 [ 1651.279883][ T1779] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1651.285774][ T1779] RIP: 0033:0x7f3e2e99aeb9 [ 1651.290196][ T1779] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1651.309787][ T1779] RSP: 002b:00007f3e2f86d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1651.318189][ T1779] RAX: ffffffffffffffda RBX: 00007f3e2ec15fa0 RCX: 00007f3e2e99aeb9 [ 1651.326160][ T1779] RDX: 000000000000004b RSI: 0000000000000001 RDI: 000000000000000b [ 1651.334142][ T1779] RBP: 00007f3e2f86d090 R08: 0000000000000063 R09: 0000000000000000 [ 1651.342126][ T1779] R10: 0000200000000480 R11: 0000000000000246 R12: 0000000000000001 [ 1651.350104][ T1779] R13: 00007f3e2ec16038 R14: 00007f3e2ec15fa0 R15: 00007ffe7d25d348 [ 1651.358091][ T1779] [ 1651.387640][ T1778] delete_channel: no stack [ 1651.530452][T31628] Bluetooth: hci1: command tx timeout [ 1651.568937][ T1788] netlink: 'syz.7.10376': attribute type 1 has an invalid length. [ 1651.684619][T31628] Bluetooth: hci0: command tx timeout [ 1651.847855][T31628] Bluetooth: hci2: command tx timeout [ 1651.923868][T31628] Bluetooth: hci3: command tx timeout [ 1652.496973][ T1796] netlink: 4595 bytes leftover after parsing attributes in process `syz.7.10380'. [ 1652.599135][ T1796] netlink: 4595 bytes leftover after parsing attributes in process `syz.7.10380'. [ 1652.877067][ T1797] netlink: 4595 bytes leftover after parsing attributes in process `syz.7.10380'. [ 1757.431720][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 1757.438493][ C0] rcu: 0-...!: (10482 ticks this GP) idle=b88c/1/0x4000000000000000 softirq=139581/139582 fqs=24 [ 1757.451302][ C0] rcu: (t=10500 jiffies g=194705 q=785 ncpus=2) [ 1757.457658][ C0] rcu: rcu_preempt kthread starved for 10445 jiffies! g194705 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 1757.468952][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1757.478938][ C0] rcu: RCU grace-period kthread stack dump: [ 1757.484837][ C0] task:rcu_preempt state:R running task stack:27536 pid:17 ppid:2 flags:0x00004000 [ 1757.495646][ C0] Call Trace: [ 1757.498936][ C0] [ 1757.501886][ C0] __schedule+0x1553/0x45a0 [ 1757.506453][ C0] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 1757.512373][ C0] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1757.518299][ C0] ? asan.module_dtor+0x20/0x20 [ 1757.523174][ C0] ? enqueue_timer+0x23d/0x550 [ 1757.527967][ C0] ? __mod_timer+0x984/0xdb0 [ 1757.532599][ C0] schedule+0xbd/0x170 [ 1757.536699][ C0] schedule_timeout+0x188/0x2d0 [ 1757.541568][ C0] ? console_conditional_schedule+0x40/0x40 [ 1757.547476][ C0] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 1757.553399][ C0] ? update_process_times+0x1b0/0x1b0 [ 1757.558800][ C0] ? prepare_to_swait_event+0x339/0x360 [ 1757.564375][ C0] rcu_gp_fqs_loop+0x313/0x1590 [ 1757.569275][ C0] ? dyntick_save_progress_counter+0x2b0/0x2b0 [ 1757.575459][ C0] ? rcu_gp_init+0x1560/0x1560 [ 1757.580241][ C0] ? rcu_gp_cleanup+0xb41/0xc90 [ 1757.585124][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1757.590343][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 1757.595573][ C0] rcu_gp_kthread+0x9d/0x3b0 [ 1757.600189][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 1757.605322][ C0] ? __kthread_parkme+0x7a/0x1c0 [ 1757.610277][ C0] ? __kthread_parkme+0x162/0x1c0 [ 1757.615332][ C0] kthread+0x2fa/0x390 [ 1757.619419][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 1757.624555][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1757.629162][ C0] ret_from_fork+0x48/0x80 [ 1757.633602][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1757.638214][ C0] ret_from_fork_asm+0x11/0x20 [ 1757.643063][ C0] [ 1757.646093][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1757.652431][ C0] Sending NMI from CPU 0 to CPUs 1: [ 1757.657653][ C1] NMI backtrace for cpu 1 [ 1757.657663][ C1] CPU: 1 PID: 1796 Comm: syz.7.10380 Not tainted syzkaller #0 [ 1757.657676][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1757.657684][ C1] RIP: 0010:kasan_check_range+0x82/0x290 [ 1757.657707][ C1] Code: 03 48 bb 01 00 00 00 00 fc ff df 4d 8d 34 19 4d 89 f4 4d 29 dc 49 83 fc 10 7f 29 4d 85 e4 0f 84 3d 01 00 00 4c 89 cb 48 f7 d3 <4c> 01 fb 41 80 3b 00 0f 85 8d 01 00 00 49 ff c3 48 ff c3 75 ee e9 [ 1757.657718][ C1] RSP: 0018:ffffc900001efa20 EFLAGS: 00000002 [ 1757.657731][ C1] RAX: ffffffff81aeab01 RBX: e0000eeffa29b70d RCX: ffffffff81aeabd1 [ 1757.657742][ C1] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff88802eb24790 [ 1757.657752][ C1] RBP: ffff88802eb24790 R08: ffff88802eb24793 R09: 1ffff11005d648f2 [ 1757.657762][ C1] R10: dffffc0000000000 R11: ffffed1005d648f2 R12: 0000000000000001 [ 1757.657772][ C1] R13: 0000000000000001 R14: ffffed1005d648f3 R15: 1ffff11005d648f2 [ 1757.657782][ C1] FS: 00007f59feeb56c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1757.657794][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1757.657804][ C1] CR2: 0000001b35013ff8 CR3: 000000007a34a000 CR4: 00000000003506e0 [ 1757.657817][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1757.657825][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1757.657834][ C1] Call Trace: [ 1757.657839][ C1] [ 1757.657849][ C1] __perf_event_overflow+0x41/0x630 [ 1757.657876][ C1] perf_swevent_hrtimer+0x4aa/0x570 [ 1757.657898][ C1] ? cpu_clock_event_read+0x40/0x40 [ 1757.657945][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1757.657963][ C1] ? _raw_spin_unlock+0x40/0x40 [ 1757.657976][ C1] ? debug_object_deactivate+0x67/0x390 [ 1757.658009][ C1] __hrtimer_run_queues+0x4eb/0xc40 [ 1757.658037][ C1] ? cpu_clock_event_read+0x40/0x40 [ 1757.658062][ C1] ? hrtimer_interrupt+0x9c0/0x9c0 [ 1757.658078][ C1] ? read_tsc+0x9/0x20 [ 1757.658093][ C1] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 1757.658122][ C1] hrtimer_interrupt+0x3c9/0x9c0 [ 1757.658168][ C1] __sysvec_apic_timer_interrupt+0xfb/0x3b0 [ 1757.658190][ C1] sysvec_apic_timer_interrupt+0x51/0xc0 [ 1757.658207][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1757.658225][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x8/0x60 [ 1757.658243][ C1] Code: 00 00 f3 0f 1e fa 53 48 89 fb e8 13 00 00 00 48 8b 3d 2c cd 03 0d 48 89 de 5b e9 93 57 57 00 cc cc cc f3 0f 1e fa 48 8b 04 24 <65> 48 8b 0d 00 a1 7c 7e 65 8b 15 01 a1 7c 7e 81 e2 00 01 ff 00 74 [ 1757.658255][ C1] RSP: 0018:ffffc900001f0080 EFLAGS: 00000202 [ 1757.658267][ C1] RAX: ffffffff8132a2e2 RBX: ffffc900001f0140 RCX: ffff88801eaabc00 [ 1757.658278][ C1] RDX: 0000000000000100 RSI: 0000000000000302 RDI: 0000000000000000 [ 1757.658287][ C1] RBP: ffffc900001f0110 R08: ffff88801eaabc00 R09: 0000000000000003 [ 1757.658297][ C1] R10: 0000000000000004 R11: 0000000000000100 R12: ffffffff818714e0 [ 1757.658307][ C1] R13: 1ffff9200003e094 R14: ffffffff8175b850 R15: ffffc900001f0088 [ 1757.658319][ C1] ? stack_trace_save+0x100/0x100 [ 1757.658337][ C1] ? __sanitizer_cov_trace_pc+0x30/0x60 [ 1757.658358][ C1] ? arch_stack_walk+0x152/0x190 [ 1757.658380][ C1] arch_stack_walk+0x152/0x190 [ 1757.658402][ C1] ? perf_trace_buf_alloc+0x1c/0x290 [ 1757.658425][ C1] stack_trace_save+0xaa/0x100 [ 1757.658443][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 1757.658459][ C1] ? sched_clock_cpu+0x75/0x430 [ 1757.658475][ C1] ? clockevents_program_event+0x230/0x310 [ 1757.658497][ C1] ? local_clock+0x20/0x20 [ 1757.658513][ C1] kasan_save_stack+0x3e/0x60 [ 1757.658528][ C1] ? kasan_save_stack+0x3e/0x60 [ 1757.658542][ C1] ? __kasan_record_aux_stack+0xaf/0xc0 [ 1757.658559][ C1] ? call_rcu+0x153/0x950 [ 1757.658576][ C1] ? __dev_queue_xmit+0x983/0x36b0 [ 1757.658663][ C1] ? ip6_finish_output2+0xe06/0x1630 [ 1757.658727][ C1] ? ndisc_send_skb+0xc26/0x14f0 [ 1757.658834][ C1] ? addrconf_rs_timer+0x2d5/0x630 [ 1757.658852][ C1] ? call_timer_fn+0x189/0x540 [ 1757.658866][ C1] ? __run_timers+0x542/0x800 [ 1757.658879][ C1] ? run_timer_softirq+0x67/0xf0 [ 1757.658893][ C1] ? handle_softirqs+0x280/0x820 [ 1757.658907][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 1757.658920][ C1] ? irq_exit_rcu+0x9/0x20 [ 1757.658933][ C1] ? sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1757.658947][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1757.658962][ C1] ? __sanitizer_cov_trace_pc+0x30/0x60 [ 1757.659021][ C1] ? __phys_addr+0xba/0x170 [ 1757.659042][ C1] __kasan_record_aux_stack+0xaf/0xc0 [ 1757.659061][ C1] ? rcuref_put+0x220/0x220 [ 1757.659098][ C1] call_rcu+0x153/0x950 [ 1757.659123][ C1] ? percpu_counter_set+0x1a0/0x1a0 [ 1757.659141][ C1] ? rcuref_put+0x1cc/0x220 [ 1757.659158][ C1] ? dst_release+0x1a0/0x1a0 [ 1757.659172][ C1] ? rcu_lockdep_current_cpu_online+0x37/0x120 [ 1757.659193][ C1] ? rcu_force_quiescent_state+0x230/0x230 [ 1757.659212][ C1] ? rcu_read_lock_bh_held+0x7a/0x100 [ 1757.659228][ C1] ? rcu_read_lock_held+0x40/0x40 [ 1757.659250][ C1] ? dst_release+0x121/0x1a0 [ 1757.659270][ C1] __dev_queue_xmit+0x983/0x36b0 [ 1757.659287][ C1] ? lapic_next_event+0x11/0x20 [ 1757.659302][ C1] ? clockevents_program_event+0x230/0x310 [ 1757.659321][ C1] ? __dev_queue_xmit+0x26b/0x36b0 [ 1757.659348][ C1] ? mark_lock+0x94/0x320 [ 1757.659369][ C1] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1757.659390][ C1] ? netdev_core_pick_tx+0x340/0x340 [ 1757.659416][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1757.659434][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 1757.659451][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1757.659476][ C1] ? ip6_finish_output2+0xc1c/0x1630 [ 1757.659500][ C1] ip6_finish_output2+0xe06/0x1630 [ 1757.659523][ C1] ? ip6_finish_output2+0x645/0x1630 [ 1757.659546][ C1] ? nf_hook+0x390/0x390 [ 1757.659560][ C1] ? ip6_finish_output+0x4fe/0x820 [ 1757.659591][ C1] ndisc_send_skb+0xc26/0x14f0 [ 1757.659607][ C1] ? ndisc_send_skb+0x1f5/0x14f0 [ 1757.659632][ C1] ? ndisc_mc_map+0x680/0x680 [ 1757.659654][ C1] ? skb_dst+0xd0/0xd0 [ 1757.659667][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1757.659698][ C1] ? ndisc_send_rs+0x482/0x610 [ 1757.659721][ C1] addrconf_rs_timer+0x2d5/0x630 [ 1757.659748][ C1] ? addrconf_disable_policy_idev+0x480/0x480 [ 1757.659768][ C1] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1757.659796][ C1] call_timer_fn+0x189/0x540 [ 1757.659811][ C1] ? addrconf_disable_policy_idev+0x480/0x480 [ 1757.659832][ C1] ? call_timer_fn+0xd2/0x540 [ 1757.659847][ C1] ? __run_timers+0x800/0x800 [ 1757.659875][ C1] ? addrconf_disable_policy_idev+0x480/0x480 [ 1757.659899][ C1] __run_timers+0x542/0x800 [ 1757.659928][ C1] ? detach_timer+0x2b0/0x2b0 [ 1757.659951][ C1] ? lock_chain_count+0x20/0x20 [ 1757.659976][ C1] run_timer_softirq+0x67/0xf0 [ 1757.659992][ C1] handle_softirqs+0x280/0x820 [ 1757.660012][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 1757.660034][ C1] ? do_softirq+0x1a0/0x1a0 [ 1757.660055][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 1757.660077][ C1] __irq_exit_rcu+0xd3/0x190 [ 1757.660093][ C1] ? irq_exit_rcu+0x20/0x20 [ 1757.660118][ C1] irq_exit_rcu+0x9/0x20 [ 1757.660131][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1757.660147][ C1] [ 1757.660152][ C1] [ 1757.660158][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1757.660175][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x30/0x60 [ 1757.660192][ C1] Code: 04 24 65 48 8b 0d 00 a1 7c 7e 65 8b 15 01 a1 7c 7e 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 35 83 b9 1c 16 00 00 00 74 2c <8b> 91 f8 15 00 00 83 fa 02 75 21 48 8b 91 00 16 00 00 48 8b 32 48 [ 1757.660204][ C1] RSP: 0018:ffffc900044af178 EFLAGS: 00000246 [ 1757.660216][ C1] RAX: ffffffff818f466c RBX: 000000000000002c RCX: ffff88801eaabc00 [ 1757.660226][ C1] RDX: 0000000000000000 RSI: ffffc900044af220 RDI: 000000000000002c [ 1757.660236][ C1] RBP: ffffc900044af2c0 R08: 0000000000000002 R09: 0000000000000000 [ 1757.660245][ C1] R10: dffffc0000000000 R11: fffffbfff1d15bf6 R12: 1ffff92000895e40 [ 1757.660256][ C1] R13: 000000000000002c R14: ffffc900044af220 R15: ffffc900044af240 [ 1757.660275][ C1] ? perf_trace_buf_alloc+0x1c/0x290 [ 1757.660301][ C1] perf_trace_buf_alloc+0x1c/0x290 [ 1757.660324][ C1] perf_trace_lock_acquire+0x1a0/0x410 [ 1757.660352][ C1] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 1757.660383][ C1] ? perf_trace_buf_alloc+0x131/0x290 [ 1757.660401][ C1] ? verify_lock_unused+0x140/0x140 [ 1757.660421][ C1] lock_acquire+0x3ef/0x420 [ 1757.660436][ C1] ? trace_call_bpf+0xc3/0x6c0 [ 1757.660466][ C1] ? read_lock_is_recursive+0x20/0x20 [ 1757.660485][ C1] ? __lock_acquire+0x1273/0x7d40 [ 1757.660512][ C1] trace_call_bpf+0xe4/0x6c0 [ 1757.660531][ C1] ? trace_call_bpf+0xc3/0x6c0 [ 1757.660550][ C1] ? trace_call_bpf+0xc3/0x6c0 [ 1757.660570][ C1] ? trace_call_bpf+0xc3/0x6c0 [ 1757.660591][ C1] ? __lock_acquire+0x7d40/0x7d40 [ 1757.660609][ C1] ? __bpf_trace_bpf_trace_printk+0x100/0x100 [ 1757.660647][ C1] perf_trace_run_bpf_submit+0x7a/0x1c0 [ 1757.660670][ C1] perf_trace_lock_acquire+0x34f/0x410 [ 1757.660699][ C1] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 1757.660738][ C1] lock_acquire+0x3ef/0x420 [ 1757.660754][ C1] ? is_bpf_text_address+0x26/0x2a0 [ 1757.660776][ C1] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1757.660797][ C1] ? read_lock_is_recursive+0x20/0x20 [ 1757.660813][ C1] ? __read_once_word_nocheck+0x9/0x10 [ 1757.660828][ C1] ? deref_stack_reg+0x1bd/0x240 [ 1757.660850][ C1] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1757.660868][ C1] is_bpf_text_address+0x47/0x2a0 [ 1757.660884][ C1] ? is_bpf_text_address+0x26/0x2a0 [ 1757.660900][ C1] ? is_bpf_text_address+0x26/0x2a0 [ 1757.660917][ C1] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1757.660934][ C1] kernel_text_address+0xa0/0xd0 [ 1757.660956][ C1] __kernel_text_address+0xd/0x30 [ 1757.660974][ C1] unwind_get_return_address+0x5d/0xc0 [ 1757.660989][ C1] ? stack_trace_save+0x100/0x100 [ 1757.661007][ C1] arch_stack_walk+0x11d/0x190 [ 1757.661036][ C1] stack_trace_save+0xaa/0x100 [ 1757.661054][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 1757.661084][ C1] kasan_set_track+0x4e/0x70 [ 1757.661098][ C1] ? kasan_set_track+0x4e/0x70 [ 1757.661112][ C1] ? kasan_save_free_info+0x2e/0x50 [ 1757.661128][ C1] ? ____kasan_slab_free+0x126/0x1e0 [ 1757.661144][ C1] ? slab_free_freelist_hook+0x130/0x1a0 [ 1757.661158][ C1] ? kmem_cache_free+0xf8/0x270 [ 1757.661176][ C1] ? user_path_create+0x42/0x50 [ 1757.661189][ C1] ? bpf_obj_pin_user+0x149/0x330 [ 1757.661204][ C1] ? __sys_bpf+0x7be/0x890 [ 1757.661218][ C1] ? __x64_sys_bpf+0x7c/0x90 [ 1757.661231][ C1] ? do_syscall_64+0x55/0xa0 [ 1757.661248][ C1] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1757.661312][ C1] ? kmem_cache_free+0xf8/0x270 [ 1757.661330][ C1] kasan_save_free_info+0x2e/0x50 [ 1757.661348][ C1] ____kasan_slab_free+0x126/0x1e0 [ 1757.661368][ C1] slab_free_freelist_hook+0x130/0x1a0 [ 1757.661389][ C1] ? user_path_create+0x42/0x50 [ 1757.661402][ C1] kmem_cache_free+0xf8/0x270 [ 1757.661428][ C1] user_path_create+0x42/0x50 [ 1757.661444][ C1] bpf_obj_pin_user+0x149/0x330 [ 1757.661460][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1757.661480][ C1] ? verifier_remove_insns+0x1370/0x1370 [ 1757.661509][ C1] __sys_bpf+0x7be/0x890 [ 1757.661528][ C1] ? bpf_link_show_fdinfo+0x390/0x390 [ 1757.661563][ C1] ? lock_chain_count+0x20/0x20 [ 1757.661577][ C1] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1757.661605][ C1] __x64_sys_bpf+0x7c/0x90 [ 1757.661622][ C1] do_syscall_64+0x55/0xa0 [ 1757.661639][ C1] ? clear_bhb_loop+0x40/0x90 [ 1757.661658][ C1] ? clear_bhb_loop+0x40/0x90 [ 1757.661676][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1757.661691][ C1] RIP: 0033:0x7f59fdf9aeb9 [ 1757.661705][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1757.661716][ C1] RSP: 002b:00007f59feeb5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1757.661730][ C1] RAX: ffffffffffffffda RBX: 00007f59fe215fa0 RCX: 00007f59fdf9aeb9 [ 1757.661741][ C1] RDX: 0000000000000018 RSI: 0000200000000240 RDI: 0000000000000006 [ 1757.661750][ C1] RBP: 00007f59fe008c1f R08: 0000000000000000 R09: 0000000000000000 [ 1757.661760][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1757.661769][ C1] R13: 00007f59fe216038 R14: 00007f59fe215fa0 R15: 00007ffdd4e9fef8 [ 1757.661798][ C1] [ 1757.662652][ C0] CPU: 0 PID: 1789 Comm: syz.5.10378 Not tainted syzkaller #0 [ 1758.870606][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1758.880676][ C0] RIP: 0010:ip6table_mangle_hook+0x0/0x720 [ 1758.886617][ C0] Code: 68 d1 8b 4c 89 f2 e8 ef 64 ff ff 89 c3 4c 89 f7 e8 e5 62 73 f8 89 d8 eb 0a e8 ec aa 35 f8 b8 f4 ff ff ff 5b 41 5e c3 0f 1f 00 0f 1e fa 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 e4 e0 48 [ 1758.906242][ C0] RSP: 0018:ffffc90000007728 EFLAGS: 00000246 [ 1758.912331][ C0] RAX: 1ffff11005c4c984 RBX: ffff88802e264c20 RCX: ffff8880282a9e00 [ 1758.920319][ C0] RDX: ffffc900000077e0 RSI: ffff88806748fb40 RDI: ffff888067b23880 [ 1758.928309][ C0] RBP: dffffc0000000000 R08: ffff8880282a9e00 R09: 0000000000000003 [ 1758.936306][ C0] R10: 0000000000000003 R11: 0000000000000100 R12: 0000000000000001 [ 1758.944292][ C0] R13: ffff88802e264c18 R14: ffffffff895169d0 R15: ffffc900000077e0 [ 1758.952288][ C0] FS: 00007fa9414a86c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1758.961235][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1758.967834][ C0] CR2: 0000001b34d12ff8 CR3: 00000000460aa000 CR4: 00000000003506f0 [ 1758.975824][ C0] DR0: 0010000010000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1758.983814][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1758.991804][ C0] Call Trace: [ 1758.995097][ C0] [ 1758.997953][ C0] nf_hook_slow+0xbd/0x200 [ 1759.002514][ C0] ? ip6_output+0x3b0/0x3b0 [ 1759.007039][ C0] nf_hook+0x228/0x390 [ 1759.011142][ C0] ? nf_hook+0xa2/0x390 [ 1759.015329][ C0] ? ip6_make_skb+0x520/0x520 [ 1759.020031][ C0] ? ip6_output+0x3b0/0x3b0 [ 1759.024572][ C0] ip6_output+0x272/0x3b0 [ 1759.028920][ C0] ? ip6_output+0x3b0/0x3b0 [ 1759.033454][ C0] ndisc_send_skb+0xc26/0x14f0 [ 1759.038240][ C0] ? ndisc_send_skb+0x1f5/0x14f0 [ 1759.043238][ C0] ? ndisc_mc_map+0x680/0x680 [ 1759.047951][ C0] ? skb_dst+0xd0/0xd0 [ 1759.052075][ C0] addrconf_rs_timer+0x2d5/0x630 [ 1759.057045][ C0] ? addrconf_disable_policy_idev+0x480/0x480 [ 1759.063133][ C0] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1759.069152][ C0] call_timer_fn+0x189/0x540 [ 1759.073760][ C0] ? addrconf_disable_policy_idev+0x480/0x480 [ 1759.079850][ C0] ? call_timer_fn+0xd2/0x540 [ 1759.084549][ C0] ? __run_timers+0x800/0x800 [ 1759.089267][ C0] ? addrconf_disable_policy_idev+0x480/0x480 [ 1759.095359][ C0] __run_timers+0x542/0x800 [ 1759.099900][ C0] ? detach_timer+0x2b0/0x2b0 [ 1759.104605][ C0] ? run_timer_softirq+0xd/0xf0 [ 1759.109499][ C0] run_timer_softirq+0x67/0xf0 [ 1759.114294][ C0] handle_softirqs+0x280/0x820 [ 1759.119094][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 1759.123888][ C0] ? do_softirq+0x1a0/0x1a0 [ 1759.128415][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 1759.133641][ C0] __irq_exit_rcu+0xd3/0x190 [ 1759.138266][ C0] ? irq_exit_rcu+0x20/0x20 [ 1759.142806][ C0] irq_exit_rcu+0x9/0x20 [ 1759.147099][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1759.152750][ C0] [ 1759.155692][ C0] [ 1759.158642][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1759.164638][ C0] RIP: 0010:lock_acquire+0x208/0x420 [ 1759.169939][ C0] Code: f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 3c 04 f8 0f 85 f0 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 04 3c 00 00 00 00 43 c7 44 3c 08 00 00 00 00 65 48 8b 04 25 [ 1759.189562][ C0] RSP: 0018:ffffc9000434efe0 EFLAGS: 00000206 [ 1759.195652][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 1a21d49b9decdd00 [ 1759.203635][ C0] RDX: 0000000000000000 RSI: ffffffff8acada80 RDI: ffffffff8b1c81e0 [ 1759.211620][ C0] RBP: ffffc9000434f0e8 R08: dffffc0000000000 R09: 1ffffffff2237ea0 [ 1759.219605][ C0] R10: dffffc0000000000 R11: fffffbfff2237ea1 R12: 1ffff92000869e08 [ 1759.227597][ C0] R13: ffffffff8d131fe0 R14: 0000000000000246 R15: dffffc0000000000 [ 1759.235626][ C0] ? trace_call_bpf+0xc3/0x6c0 [ 1759.240421][ C0] ? read_lock_is_recursive+0x20/0x20 [ 1759.245816][ C0] ? trace_call_bpf+0x5e9/0x6c0 [ 1759.250718][ C0] ? mark_lock+0x94/0x320 [ 1759.255077][ C0] trace_call_bpf+0xe4/0x6c0 [ 1759.259691][ C0] ? trace_call_bpf+0xc3/0x6c0 [ 1759.264476][ C0] ? trace_call_bpf+0xc3/0x6c0 [ 1759.269276][ C0] ? __bpf_trace_bpf_trace_printk+0x100/0x100 [ 1759.275388][ C0] perf_trace_run_bpf_submit+0x7a/0x1c0 [ 1759.280960][ C0] perf_trace_lock_acquire+0x34f/0x410 [ 1759.286456][ C0] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 1759.293083][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1759.299279][ C0] lock_acquire+0x3ef/0x420 [ 1759.303802][ C0] ? pfn_valid+0xcd/0x420 [ 1759.308173][ C0] ? read_lock_is_recursive+0x20/0x20 [ 1759.313579][ C0] ? page_ext_put+0x9c/0xb0 [ 1759.318108][ C0] ? pfn_valid+0xcd/0x420 [ 1759.322463][ C0] pfn_valid+0xe9/0x420 [ 1759.326644][ C0] ? pfn_valid+0xcd/0x420 [ 1759.330998][ C0] page_table_check_set+0x25/0x6e0 [ 1759.336142][ C0] copy_page_range+0x24e5/0x3670 [ 1759.341170][ C0] ? pfn_valid+0x450/0x450 [ 1759.345607][ C0] ? mas_wr_store_entry+0x151/0x340 [ 1759.350908][ C0] ? mas_store+0x37e/0x550 [ 1759.355350][ C0] ? mas_empty_area_rev+0x1960/0x1960 [ 1759.360761][ C0] ? up_write+0x1c3/0x410 [ 1759.365113][ C0] ? anon_vma_interval_tree_verify+0x150/0x150 [ 1759.371310][ C0] copy_mm+0x11cb/0x1d50 [ 1759.375603][ C0] ? copy_signal+0x680/0x680 [ 1759.380208][ C0] ? lockdep_init_map_type+0x9c/0x8e0 [ 1759.385640][ C0] ? __init_rwsem+0x122/0x160 [ 1759.390336][ C0] ? copy_signal+0x556/0x680 [ 1759.394949][ C0] copy_process+0x16f7/0x3d80 [ 1759.399673][ C0] ? copy_process+0x96e/0x3d80 [ 1759.404480][ C0] ? __pidfd_prepare+0x140/0x140 [ 1759.409456][ C0] ? __lock_acquire+0x7d40/0x7d40 [ 1759.414533][ C0] kernel_clone+0x24b/0x8a0 [ 1759.419058][ C0] ? trace_call_bpf+0xc3/0x6c0 [ 1759.423856][ C0] ? create_io_thread+0x190/0x190 [ 1759.428897][ C0] ? seqcount_lockdep_reader_access+0x17b/0x1d0 [ 1759.435193][ C0] __x64_sys_clone+0x1b7/0x230 [ 1759.439976][ C0] ? perf_trace_run_bpf_submit+0x125/0x1c0 [ 1759.445809][ C0] ? __ia32_sys_vfork+0x140/0x140 [ 1759.450873][ C0] ? lock_chain_count+0x20/0x20 [ 1759.455739][ C0] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1759.461752][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 1759.466974][ C0] do_syscall_64+0x55/0xa0 [ 1759.471410][ C0] ? clear_bhb_loop+0x40/0x90 [ 1759.476103][ C0] ? clear_bhb_loop+0x40/0x90 [ 1759.480804][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1759.486717][ C0] RIP: 0033:0x7fa94059aeb9 [ 1759.491158][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1759.510782][ C0] RSP: 002b:00007fa9414a7fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1759.519193][ C0] RAX: ffffffffffffffda RBX: 00007fa940815fa0 RCX: 00007fa94059aeb9 [ 1759.527146][ C0] RDX: 00002000000003c0 RSI: 0000200000000380 RDI: 0000000000200400 [ 1759.535103][ C0] RBP: 00007fa940608c1f R08: 00002000000006c0 R09: 00002000000006c0 [ 1759.543057][ C0] R10: 0000200000000400 R11: 0000000000000206 R12: 0000000000000000 [ 1759.551009][ C0] R13: 00007fa940816038 R14: 00007fa940815fa0 R15: 00007ffdf05aa7a8 [ 1759.558980][ C0] [ 1759.572875][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 1759.579308][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 1759.896073][ T1798] netlink: 4595 bytes leftover after parsing attributes in process `syz.7.10380'. SYZFAIL: failed to send rpc fd=3 want=73144 sent=0 n=-1 (errno 32: Broken pipe) [ 1761.494196][T17441] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1761.509855][T17441] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1761.564652][T17441] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1761.574791][T17441] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1761.583444][T17441] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1761.591206][T17441] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1763.317419][T25489] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1763.682655][T17441] Bluetooth: hci4: command tx timeout [ 1764.042393][ T1789] delete_channel: no stack [ 1764.154850][T25489] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1764.335504][T25489] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1764.415803][T25489] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1764.616027][ T1815] chnl_net:caif_netlink_parms(): no params data found [ 1764.673946][T25489] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1764.787908][T25489] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1764.900672][T25489] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1764.931455][ T1815] bridge0: port 1(bridge_slave_0) entered blocking state [ 1764.944026][ T1815] bridge0: port 1(bridge_slave_0) entered disabled state [ 1764.951200][ T1815] bridge_slave_0: entered allmulticast mode [ 1764.959091][ T1815] bridge_slave_0: entered promiscuous mode [ 1764.973162][ T1815] bridge0: port 2(bridge_slave_1) entered blocking state [ 1764.990157][ T1815] bridge0: port 2(bridge_slave_1) entered disabled state [ 1764.997774][ T1815] bridge_slave_1: entered allmulticast mode [ 1765.019466][ T1815] bridge_slave_1: entered promiscuous mode [ 1765.057921][T25489] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1765.139282][ T1815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1765.200101][ T1815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1765.244957][ T1815] team0: Port device team_slave_0 added [ 1765.253598][ T1815] team0: Port device team_slave_1 added [ 1765.323929][ T1815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1765.333422][ T1815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1765.359734][ T1815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1765.372905][ T1815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1765.379861][ T1815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1765.405964][ T1815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1765.479012][T25489] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1765.516736][ T1815] hsr_slave_0: entered promiscuous mode [ 1765.526540][ T1815] hsr_slave_1: entered promiscuous mode [ 1765.534708][ T1815] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1765.547520][ T1815] Cannot create hsr debugfs directory [ 1765.585568][T25489] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1765.694873][T25489] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1765.769978][T17441] Bluetooth: hci4: command tx timeout [ 1765.831983][T25489] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1765.948384][ T1815] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1765.997136][ T1815] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1766.044730][ T1815] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1766.066518][ T1815] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1766.210397][ T1815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1766.462998][ T1815] 8021q: adding VLAN 0 to HW filter on device team0 [ 1766.476539][ T5876] bridge0: port 1(bridge_slave_0) entered blocking state [ 1766.483691][ T5876] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1766.559803][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 1766.566922][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1767.141028][ T1815] 8021q: adding VLAN 0 to HW filter on device batadv0