last executing test programs: 2m34.253349225s ago: executing program 0 (id=3703): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8efff00100081044e81f782db44b904021d080006000000e8fe55a1180015000600142603600e120800110000000401a8001600a400014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 2m33.987992278s ago: executing program 0 (id=3706): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_bp={0x0, 0x8}, 0x390, 0x0, 0x0, 0x7, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x2, 0x73) sendmsg$kcm(r0, &(0x7f0000000400)={&(0x7f0000000580)=@caif, 0x80, 0x0}, 0x12) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8982, &(0x7f0000000080)) 2m33.628701707s ago: executing program 0 (id=3712): r0 = perf_event_open(&(0x7f0000000280)={0x5, 0x4c, 0x2, 0x2, 0x8, 0x9, 0x0, 0x6, 0x0, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x2000, 0xff, 0x9, 0x0, 0x4, 0x145d, 0x1, 0x0, 0x3f8, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x9) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000feffffff0000004003000000850000002c000000a5000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m33.436685307s ago: executing program 0 (id=3715): socket$kcm(0x21, 0x2, 0x2) socket$kcm(0x2, 0x200000000000001, 0x106) socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x800000000c, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x18144, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x10c002, 0x89, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb5}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[], 0xffdd) r1 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r1, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)}, 0x0) 2m33.216714519s ago: executing program 0 (id=3718): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x2, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000fc0200000000000000000000850000002c00000085000000a000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x2107, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000011c0)=ANY=[@ANYBLOB="1800000000000000000000000000200018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000007100000085000000a000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r4 = socket$kcm(0x29, 0x6, 0x0) sendmsg$kcm(r4, &(0x7f0000000680)={&(0x7f0000000000)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000100)="4d346734d6ca3034ea35e70618aaa8779cdcc8a27eb81bc5bb1a9c72080f2f4f18e7e2622cc014aa18f4da027a8948910bcd85e4ddcbdcf03759c011c47f64bf443b622d56b6544104d5ba029e00c57a90c73d90250c9df20e464db3ad63a503864d77509f54502bb84223a4072d50", 0x6f}, {&(0x7f0000000180)}, {&(0x7f0000000200)="fbedfe1e5c7d0fe2a8c1891a588a50dae5b26a03a15a93de9b8fc183a0d94956aedadd0da3e891a48454c49428a0c050306ae3edee3363b190779a02f08108b9d1e450c93105bffa5a8070a1bf91e1148aef85255047af8abc3b93cb72415844939a38f0337a35b54b712aa585eb97094bae48d7a4779cb7b91c2689ec84d0dd4e7100fdfac849269ca5992ed1d32c46fe93afc844dd0c5f252ad70593094a2f5092967da841b85688929a95ca74778d323e881156701dd846fdc8e24966a82c7ebb5944102fee280d4368", 0xcb}], 0x3, &(0x7f0000000440)=[{0x98, 0x109, 0x80, "8a82775fb70c688c4baead8d7676b5952657ef3c0d2b9f576cf16befe8ce9165a4550863a3cc5f0c01b242ea5fccffbbfc8426d94c323ca0f606b747cfd0c2f84f237dcd83f845ea2ba555c205513283a4d77076a78e683fb1650a12a502720d44c02249971a2683c8d4fe4715612f67e06814149c4aefac7d2d9f52d1b7ce5d1694"}, {0x98, 0x10f, 0xfffffff8, "2b3629e52fd01312fcc95e66d4347ca405559e2cf447c42dfecb7fa7a9c60a73073e234763b41f3645665bb6ce4363c265bb842ea7883bbdbcd1dfb4eaa05487f9d10a3b3909cf6e45daffa22e7784b22234a1652103d246780ea4986c0bd1eb7fd705a95fba3e67cdbeeb35703ad90fde89ef53790703ff1d0af6b56a488c2d06"}, {0x90, 0x10d, 0x6, "95b3a6201f2c32032091bbc5466513878dddf8f7fde17d8b376b9063e10a25f58c4565e81591c6ca0a0ab6170e2dd84fc7c90b4e35813d8b86ab24394c86ef005f57610617ac146c15019bb42b5b4df8b2bebf08a87594923873e8ec6b523b0bf8a34f43b10fc566e5bae09737eecadaabae357a7858776e1f709eea6ed0d3bd"}, {0x40, 0x10d, 0x7, "857fedef0a6c47f778b9d168997e3fed44772e10ecb9b20b5a56810e0a2ea44f1c8603860e986176c89ee432067b16"}], 0x200}, 0x1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000640)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce8102032908000000000000000000000000ac14140a000000000000000000000000ac1414aa"], 0xfdef) 2m32.748323483s ago: executing program 0 (id=3722): perf_event_open$cgroup(&(0x7f0000000040)={0x4, 0x80, 0xb2, 0x7, 0x3, 0xa, 0x0, 0x9, 0x1c440, 0x9, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x405, 0x2, @perf_config_ext={0xffffffff7fffffff, 0x2}, 0x100608, 0x0, 0x2, 0x8, 0x10001, 0x6, 0xdb7d, 0x0, 0x7, 0x0, 0x1}, 0xffffffffffffffff, 0x400000000004, 0xffffffffffffffff, 0xd) r0 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890c, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0500000004000000080000000b00000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) socket$kcm(0x29, 0x0, 0x0) (async) socket$kcm(0x29, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x7e02, 0x0, 0x0, 0x0, 0x0, 0x8d3c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x7e02, 0x0, 0x0, 0x0, 0x0, 0x8d3c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$kcm(0xa, 0x5, 0x0) (async) socket$kcm(0xa, 0x5, 0x0) close(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$kcm(0x2, 0x1, 0x84) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x89e1, &(0x7f0000000040)={r3}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r3}, 0x8) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000100), 0x4}, 0x10261, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000100), 0x4}, 0x10261, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) (async) socket$kcm(0x11, 0x200000000000002, 0x300) socket$kcm(0x21, 0x2, 0x2) (async) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r5, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0}, 0x0) setsockopt$sock_attach_bpf(r4, 0x84, 0x75, &(0x7f0000000000), 0x8) (async) setsockopt$sock_attach_bpf(r4, 0x84, 0x75, &(0x7f0000000000), 0x8) sendmsg$inet(r4, &(0x7f0000000900)={&(0x7f00000001c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2b}}, 0x10, &(0x7f0000000800)=[{&(0x7f0000000580)="81", 0x1}], 0x1}, 0x8c0) (async) sendmsg$inet(r4, &(0x7f0000000900)={&(0x7f00000001c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2b}}, 0x10, &(0x7f0000000800)=[{&(0x7f0000000580)="81", 0x1}], 0x1}, 0x8c0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r6, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2m17.356387509s ago: executing program 32 (id=3722): perf_event_open$cgroup(&(0x7f0000000040)={0x4, 0x80, 0xb2, 0x7, 0x3, 0xa, 0x0, 0x9, 0x1c440, 0x9, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x405, 0x2, @perf_config_ext={0xffffffff7fffffff, 0x2}, 0x100608, 0x0, 0x2, 0x8, 0x10001, 0x6, 0xdb7d, 0x0, 0x7, 0x0, 0x1}, 0xffffffffffffffff, 0x400000000004, 0xffffffffffffffff, 0xd) r0 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890c, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0500000004000000080000000b00000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) socket$kcm(0x29, 0x0, 0x0) (async) socket$kcm(0x29, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x7e02, 0x0, 0x0, 0x0, 0x0, 0x8d3c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x7e02, 0x0, 0x0, 0x0, 0x0, 0x8d3c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$kcm(0xa, 0x5, 0x0) (async) socket$kcm(0xa, 0x5, 0x0) close(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$kcm(0x2, 0x1, 0x84) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x89e1, &(0x7f0000000040)={r3}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r3}, 0x8) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000100), 0x4}, 0x10261, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000100), 0x4}, 0x10261, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) (async) socket$kcm(0x11, 0x200000000000002, 0x300) socket$kcm(0x21, 0x2, 0x2) (async) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r5, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0}, 0x0) setsockopt$sock_attach_bpf(r4, 0x84, 0x75, &(0x7f0000000000), 0x8) (async) setsockopt$sock_attach_bpf(r4, 0x84, 0x75, &(0x7f0000000000), 0x8) sendmsg$inet(r4, &(0x7f0000000900)={&(0x7f00000001c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2b}}, 0x10, &(0x7f0000000800)=[{&(0x7f0000000580)="81", 0x1}], 0x1}, 0x8c0) (async) sendmsg$inet(r4, &(0x7f0000000900)={&(0x7f00000001c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2b}}, 0x10, &(0x7f0000000800)=[{&(0x7f0000000580)="81", 0x1}], 0x1}, 0x8c0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r6, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 10.522665366s ago: executing program 3 (id=4753): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x6, @perf_config_ext, 0x1080d2, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000480)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = getpid() perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x1c842, 0x0, 0x7fffffff, 0x2, 0x3cd, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, r0, 0x0, 0xffffffffffffffff, 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2200, 0x0) ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f0000000080)={'wlan0\x00'}) syz_open_procfs$namespace(r0, &(0x7f00000000c0)='ns/mnt\x00') bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ceb71c0010ec90db133c22a690ae7080000000000040875b0089"], 0xfe1b) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f375ffff86dd6317ce62070000000000000000431ccaf57b000000000000000001"], 0xfe1b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=@raw=[@func, @map_fd, @exit, @jmp={0x5, 0x0, 0x4}], 0x0}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f3, &(0x7f0000000080)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = socket$kcm(0x2, 0x1, 0x84) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x1) r4 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x29, 0x23, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003780), 0x0) setsockopt$sock_attach_bpf(r3, 0x84, 0x84, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) syz_clone(0x2000, 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000400)) 7.934708229s ago: executing program 3 (id=4754): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xd, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x4, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x6, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x70}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x60, 0x200000}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000a40)={0x0, 0x0, 0x0}, 0x100) recvmsg(r3, &(0x7f0000001b80)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) close(r2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200}) 6.915068692s ago: executing program 5 (id=4757): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x8000000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e00000004000000040000000200000000000000", @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="de00"/14], 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000500)={r1, 0x0, 0x0}, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) close(r2) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x64, &(0x7f0000000000)=r4, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000f00)={0xffffffffffffffff, 0xe0, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f0000000600)=[0x0], &(0x7f0000000640)=[0x0, 0x0], 0x0, 0xc6, 0x0, 0x0, 0x10, &(0x7f00000006c0), &(0x7f0000000700), 0x8, 0xdb, 0x8, 0x0, 0x0}}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0x13, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="85000000b6000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007", @ANYRES32=r1, @ANYBLOB="000000000000000018400000020000000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x9, 0x4e, &(0x7f0000000380)=""/78, 0x6866e244b187c959, 0x4, '\x00', 0x0, @fallback=0x37, r4, 0x8, &(0x7f0000000540)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000580)={0x1, 0x1, 0x9, 0x2}, 0x10, r5, r0, 0x3, &(0x7f0000000f40)=[0xffffffffffffffff], &(0x7f0000000f80)=[{0x2, 0x5, 0xf, 0x7}, {0x1, 0x1, 0x1, 0x4}, {0x1, 0x2, 0xe, 0xc}], 0x10, 0x9}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000100000000000000000000850000000500000018110000", @ANYBLOB="0000000000000000b7080000000000ed7b8af83200000000bca2000000928dd1a000010000020000f8ffffffb70340004caf0039b7040b00000000000000000033d58dd2810d8ad89289ca9547cb168d904ac21c981c6888be"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r8, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x5452, &(0x7f00000006c0)) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000040), 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) 6.914844712s ago: executing program 2 (id=4758): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000070000000200000007"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000b98cad95850000000300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x2000000) 6.792731449s ago: executing program 3 (id=4760): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x4}, 0x106082, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x30000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000540)) perf_event_open$cgroup(&(0x7f0000002c40)={0x8, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r1, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x8, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r2, 0x0, 0x40080c0) r3 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, 0x0, 0x0) sendmsg$tipc(r0, 0x0, 0x0) 6.692965074s ago: executing program 1 (id=4762): socket$kcm(0x10, 0x2, 0x0) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000180), 0x4) r2 = perf_event_open$cgroup(&(0x7f0000000340)={0x2, 0x80, 0x6, 0xe, 0x2, 0x9, 0x0, 0xffffffff, 0x1000, 0x5, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x5, 0x3}, 0x1040, 0x6, 0x30f2166d, 0x1, 0x8, 0x9, 0xfff9, 0x0, 0x1, 0x0, 0x401}, 0xffffffffffffffff, 0x8, r0, 0x5) perf_event_open$cgroup(&(0x7f0000000240)={0x2, 0x80, 0x2, 0x0, 0x10, 0x3, 0x0, 0x9, 0x4, 0x7, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000200), 0x1}, 0x10, 0x0, 0x9, 0x4, 0x6, 0xc1, 0x8, 0x0, 0x6, 0x0, 0x200}, 0xffffffffffffffff, 0x7, r2, 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x73) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, 0x0) r3 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r3, 0x0, 0x33, 0x0, 0x28) socketpair(0x2b, 0x20000000000001, 0x0, &(0x7f0000000100)) socket$kcm(0x10, 0x2, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000140), 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r4 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r4, 0x107, 0xd, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="563f00001a00599c6d0e000091d028ef80"], 0xfe33) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x806, 0x0, 0x8dc, 0x4, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000104"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x48) 6.592538809s ago: executing program 2 (id=4763): socket$kcm(0x10, 0x2, 0x0) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000180), 0x4) r2 = perf_event_open$cgroup(&(0x7f0000000340)={0x2, 0x80, 0x6, 0xe, 0x2, 0x9, 0x0, 0xffffffff, 0x1000, 0x5, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x5, 0x3}, 0x1040, 0x6, 0x30f2166d, 0x1, 0x8, 0x9, 0xfff9, 0x0, 0x1, 0x0, 0x401}, 0xffffffffffffffff, 0x8, r0, 0x5) perf_event_open$cgroup(&(0x7f0000000240)={0x2, 0x80, 0x2, 0x0, 0x10, 0x3, 0x0, 0x9, 0x4, 0x7, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000200), 0x1}, 0x10, 0x0, 0x9, 0x4, 0x6, 0xc1, 0x8, 0x0, 0x6, 0x0, 0x200}, 0xffffffffffffffff, 0x7, r2, 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x73) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, 0x0) r3 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r3, 0x0, 0x33, 0x0, 0x28) socketpair(0x2b, 0x20000000000001, 0x0, &(0x7f0000000100)) socket$kcm(0x10, 0x2, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000140), 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r4 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r4, 0x107, 0xd, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="563f00001a00599c6d0e000091d028ef80"], 0xfe33) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x806, 0x0, 0x8dc, 0x4, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000104"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x48) 6.456841086s ago: executing program 1 (id=4766): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffff00, 0x3}, 0x0, 0x7, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000000), 0xfdef) recvmsg$unix(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/79, 0xce80}], 0x300}, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x40082bd, 0x5, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)='.\x00', 0x2}], 0x1}, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup/syz1\x00', 0x200002, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0x4, 0x0, 0x3}]}}, 0x0, 0x26}, 0x28) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x1c, &(0x7f0000000b80)=ANY=[@ANYBLOB="180000000000000000000000000000001834000003000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000180000000400000000000000050000008510000000000000850000007100000018320000010000000000000000000000bc56f0ff000000007c75040004000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fcffffff8500000006000000180000000600000000000000010000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x1000005, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x0, 0x0, 0x9}, 0x10}, 0x94) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f33ef60916e6e893f1eeb0be2566cd0723043c47c896ce0bce66a245ad98a6f77ef26dcca5582054d54d53cd2b6db714e4b94bdae214fa68a0557343c5ca683a4b6fc89398f2b0000f224ab1bf906536e11d3f38e5c27891060017cfa6fa26fa7a34700de60beac671e8e8fdecb03588aa623fa71f871ab5c2ff88afc715f9fa75b52710aeee835cf0d78e45f70983826fb8579c1fb47d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0d18a93ee"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0xfffffffffffffd16}, 0x48) socket$kcm(0x11, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x4090) socket$kcm(0x10, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0xffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) perf_event_open(&(0x7f0000000a80)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}, 0x10c002, 0xac61, 0xfffffffc, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xd000000000000000}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) 6.20457744s ago: executing program 2 (id=4767): socket$kcm(0xa, 0x5, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x5) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x2}, 0x0, 0x0, 0xfffffffd, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x2, [@func_proto, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x3}}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x200}]}]}}, &(0x7f0000000140)=""/237, 0x52, 0xed, 0x1}, 0x28) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0x0, r1, 0x0) perf_event_open(0x0, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2106, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x29, 0x2, 0x0) socket$kcm(0xa, 0x2, 0x3a) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, @perf_config_ext, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x21, 0x2, 0x2) socket$kcm(0x2, 0x5, 0x84) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac59}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x81000000, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.00994473s ago: executing program 4 (id=4770): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r1}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x1, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000900430000000000000300a4d4850000001300000095000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r3, 0x0, 0x16, 0x0, &(0x7f00000008c0)="c1dfb080cd21d308098e000081007e2288a8849088a8", 0x0, 0x8006, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r2, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6, &(0x7f0000000400)=[0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x32, &(0x7f0000000500)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0xae, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000880), 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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", @ANYRES32=0x1, @ANYBLOB="0300"/20, @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="03000000020000000300"/28], 0x50) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc, 0x4}, 0x0, 0x1000, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r7, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r7, r4}) setsockopt$sock_attach_bpf(r7, 0x1, 0x7, &(0x7f0000000000), 0x4) 5.975722461s ago: executing program 1 (id=4771): r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_config_ext={0x4f3, 0x3}, 0x21, 0x0, 0x0, 0x4, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x3) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{0x1, 0xffffffffffffffff}, 0x0, 0x0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240)={r1}, 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000020000000000000000000c3a0f8ffe100000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x84, &(0x7f00000005c0)=""/132}, 0x94) setsockopt$sock_attach_bpf(r2, 0x84, 0xb, 0x0, 0x0) close(r2) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e0000006a00810400afef3a0b04a2377caf604bf96b1324dc851b5ef40502e0dfffff0e00f8000e0000000224ec", 0x2e}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, 0x0, 0x98010) 5.862279867s ago: executing program 5 (id=4772): socket$kcm(0x10, 0x2, 0x4) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000ac0)=""/246, 0xf6}, {&(0x7f0000000600)=""/245, 0xf5}, {&(0x7f0000000dc0)=""/4075, 0xfeb}, {&(0x7f00000009c0)=""/214, 0xd6}, {&(0x7f0000000cc0)=""/245, 0xf5}, {&(0x7f0000000bc0)=""/215, 0xd7}, {&(0x7f0000001dc0)=""/164, 0xa4}, {&(0x7f0000000300)=""/198, 0xc6}, {&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000040)=""/12, 0xc}, {&(0x7f0000000700)=""/135, 0x87}], 0xb}, 0x40002100) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040), 0x0, 0x0, 0x0, 0x808e}, 0x40000100) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x14, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000240), 0x8}, 0x18000, 0x6, 0x0, 0x0, 0xffffffffffffffff, 0x1fc0000, 0x0, 0x0, 0x2, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) recvmsg$unix(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000840)=""/216, 0xd8}, {&(0x7f0000000940)=""/191, 0xbf}, {&(0x7f0000000a00)=""/240, 0xf0}, {&(0x7f0000000b00)=""/110, 0x6e}, {&(0x7f0000000b80)=""/94, 0x5e}, {&(0x7f0000000c40)=""/81, 0x51}], 0x6, &(0x7f0000000d40)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd8}, 0x12100) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r4, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000006c0)="02f5060102000000e4a17c4505", 0xd}, {&(0x7f0000000540)="96cc", 0x2}], 0x2}, 0x54) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0xfd, 0xf9, 0x5, 0x40, 0x0, 0x5, 0xe23af0a7ebd00a63, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000340), 0x5}, 0x100, 0x80, 0x5, 0x4, 0xc, 0x4, 0x4, 0x0, 0x539, 0x0, 0x7ff}, r3, 0xe, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0xa, 0x6, 0x0) sendmsg$inet(r5, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x480c4) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x5452, &(0x7f0000000000)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdf\x85\xaac{\x8c\x8ffp`-\xcd\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\t\xed\x13q2\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\xcb\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca\x04\x00\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x03\x00\x00\x00\x00\x00\x00\x00\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\xf3\xcf\x17\xf5\x86\xae\xa5\xea?\xc5E\x00\xb2e\xa8\xf1<\xb2\xc82\xbf=o\x00\x00\x00\x00E\x00\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x922A\x95\x8e\xbc\xc80x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1e00000002000000080000000200000020200000", @ANYRES32=r7, @ANYBLOB="96ff0000000000000000000000000000000000008dfcd091e854faa2f3ac4f1b8454902794cb00feca0e59e3a7a8c3769f84c64d0500669d376eb02ac93bd019fc81948618ded26c0afe6e4bd6fd545b3111b4abc129c4e0cb4cff8de5812be7165d39c68b4d291535f0816da3bda0a979ea2b150031c100"/129, @ANYRES32=r9, @ANYRES32=r7, @ANYBLOB="0200000000000000020000000300"/28], 0x50) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000580)=@generic={&(0x7f0000000440)='./file0\x00', r7}, 0x18) write$cgroup_devices(r0, &(0x7f00000005c0)=ANY=[], 0xfffffeff) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000001c0)={r0, 0x0, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xfffffffffffffd53) 3.496548919s ago: executing program 3 (id=4773): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="1f000000190081054e81f782db4cb904021d082000000000000000070a000a", 0x1f}], 0x1}, 0x14) socket$kcm(0x21, 0x2, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890b, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') sendmsg$tipc(r3, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006580)=[{&(0x7f0000000400)="8a3451a5", 0x4}, {&(0x7f0000003140)}, {0x0}, {0x0}, {&(0x7f0000005580)="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", 0xea0}], 0x5, &(0x7f0000006600)="8f0b47d6cd3e126e4283b16b0f49048e0c31ccde61965194110a4d87b9c57d09269eca4fb110d8eeac3eb3a656269c0c488a397d7ede2d894c8009ce69ebc34b162d", 0x42, 0x40801}, 0x4) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, r1, 0x5, 0x5, 0x4}, 0x50) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0xef, 0x5, 0xd, 0x7, 0x0, 0xfffffffffffffff7, 0x7a5d4, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xaaa3, 0x2, @perf_bp={0x0}, 0x2, 0x20576b, 0x2, 0x8, 0xc6, 0xaed, 0x3, 0x0, 0xfffffff9, 0x0, 0x6}, 0x0, 0x100000000000000f, 0xffffffffffffffff, 0x0) socket$kcm(0x2b, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x1f, 0x0, 0x1, 0x2000, 0x10000}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, r5, 0x8, &(0x7f0000000000), 0x8}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd63"], 0xfdef) syz_clone(0x62384000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r6, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, &(0x7f0000000280)=[0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xa2, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f00000003c0), &(0x7f0000000440), 0x8, 0xde, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x14, 0x8, 0xffff, 0x100, 0x200, r4, 0x8, '\x00', r7, r1}, 0x50) 3.48174391s ago: executing program 4 (id=4774): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x3, 0x4, 0x3fe, 0x7ffffffc, 0x400, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x10, 0x2, 0x0, 0xff, 0x0, 0xcbf0, 0x241a2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x3, @perf_config_ext={0xffff8880b8709000, 0x1}, 0x0, 0x2, 0xffffffff, 0x0, 0x4, 0xfffffffc, 0x8000, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth0_to_hsr\x00'}) r0 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socketpair(0x23, 0x4, 0x3, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b"], 0x50) r3 = socket$kcm(0x25, 0x1, 0x0) recvmsg(r3, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0xa0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="d4010000100000001800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x27}, 0x90) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="5c00000012006bcc9a3fe3d86e17aa0a046b876c1d0048007ea608641608f3650400360038001d001931a0e69ee517d34460bc06000000a705251e6182949a0300000084c9f4d4938037e70e4509c5bbac0b6a8ee9f4c2d6b9052493064633", 0x5f}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 3.454097661s ago: executing program 1 (id=4775): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21bef5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f94306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc"], 0x0, 0x5}, 0x94) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="1c0000004800530c8e5eb88edc5a9c0e0a"], 0xfe33) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000fcffffff0000000000000000850000004100000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000004000002850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x122}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r12, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r11, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4088, 0xff8}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1c00000012006bab9e3fe3d86e17aa31076b876c1d0000037ea60864", 0x1c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8084) 3.384566455s ago: executing program 5 (id=4776): socket$kcm(0x10, 0x2, 0x0) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000180), 0x4) r2 = perf_event_open$cgroup(&(0x7f0000000340)={0x2, 0x80, 0x6, 0xe, 0x2, 0x9, 0x0, 0xffffffff, 0x1000, 0x5, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x5, 0x3}, 0x1040, 0x6, 0x30f2166d, 0x1, 0x8, 0x9, 0xfff9, 0x0, 0x1, 0x0, 0x401}, 0xffffffffffffffff, 0x8, r0, 0x5) perf_event_open$cgroup(&(0x7f0000000240)={0x2, 0x80, 0x2, 0x0, 0x10, 0x3, 0x0, 0x9, 0x4, 0x7, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000200), 0x1}, 0x10, 0x0, 0x9, 0x4, 0x6, 0xc1, 0x8, 0x0, 0x6, 0x0, 0x200}, 0xffffffffffffffff, 0x7, r2, 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x73) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, 0x0) r3 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r3, 0x0, 0x33, 0x0, 0x28) socketpair(0x2b, 0x20000000000001, 0x0, &(0x7f0000000100)) socket$kcm(0x10, 0x2, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000140), 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r4 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r4, 0x107, 0xd, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="563f00001a00599c6d0e000091d028ef80"], 0xfe33) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x806, 0x0, 0x8dc, 0x4, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000104"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x48) 3.383512855s ago: executing program 2 (id=4786): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x50) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0), 0xe}, 0xc002, 0xac5b, 0x0, 0x5, 0x0, 0x8, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfeffffff}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0x8, 0xfff8, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.204608938s ago: executing program 1 (id=4777): socket$kcm(0x10, 0x2, 0x0) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000180), 0x4) r2 = perf_event_open$cgroup(&(0x7f0000000340)={0x2, 0x80, 0x6, 0xe, 0x2, 0x9, 0x0, 0xffffffff, 0x1000, 0x5, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x5, 0x3}, 0x1040, 0x6, 0x30f2166d, 0x1, 0x8, 0x9, 0xfff9, 0x0, 0x1, 0x0, 0x401}, 0xffffffffffffffff, 0x8, r0, 0x5) perf_event_open$cgroup(&(0x7f0000000240)={0x2, 0x80, 0x2, 0x0, 0x10, 0x3, 0x0, 0x9, 0x4, 0x7, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000200), 0x1}, 0x10, 0x0, 0x9, 0x4, 0x6, 0xc1, 0x8, 0x0, 0x6, 0x0, 0x200}, 0xffffffffffffffff, 0x7, r2, 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x73) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, 0x0) r3 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r3, 0x0, 0x33, 0x0, 0x28) socketpair(0x2b, 0x20000000000001, 0x0, &(0x7f0000000100)) socket$kcm(0x10, 0x2, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000140), 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r4 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r4, 0x107, 0xd, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="563f00001a00599c6d0e000091d028ef80"], 0xfe33) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x806, 0x0, 0x8dc, 0x4, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000104"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x48) 1.17192796s ago: executing program 5 (id=4778): socket$kcm(0x10, 0x2, 0x0) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000180), 0x4) r2 = perf_event_open$cgroup(&(0x7f0000000340)={0x2, 0x80, 0x6, 0xe, 0x2, 0x9, 0x0, 0xffffffff, 0x1000, 0x5, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x5, 0x3}, 0x1040, 0x6, 0x30f2166d, 0x1, 0x8, 0x9, 0xfff9, 0x0, 0x1, 0x0, 0x401}, 0xffffffffffffffff, 0x8, r0, 0x5) perf_event_open$cgroup(&(0x7f0000000240)={0x2, 0x80, 0x2, 0x0, 0x10, 0x3, 0x0, 0x9, 0x4, 0x7, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000200), 0x1}, 0x10, 0x0, 0x9, 0x4, 0x6, 0xc1, 0x8, 0x0, 0x6, 0x0, 0x200}, 0xffffffffffffffff, 0x7, r2, 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x73) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, 0x0) r3 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r3, 0x0, 0x33, 0x0, 0x28) socketpair(0x2b, 0x20000000000001, 0x0, &(0x7f0000000100)) socket$kcm(0x10, 0x2, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000140), 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r4 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r4, 0x107, 0xd, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="563f00001a00599c6d0e000091d028ef80"], 0xfe33) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x806, 0x0, 0x8dc, 0x4, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000104"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x48) 1.143442771s ago: executing program 4 (id=4779): socket$kcm(0x28, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x1ff}, 0x100c, 0x7, 0x0, 0x2, 0x0, 0x7, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r1, 0xffffffffffffffff, 0x26}, 0x10) close(r0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="1c0000001e006bcd9e3fe3dc6e080000070000000000ffa67ea60864", 0x1c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x4d}, 0x28) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x3, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x11, 0xa, 0x300) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, &(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xeb, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x2c, &(0x7f0000000140), 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x1) 1.133358201s ago: executing program 3 (id=4780): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001200)=@base={0x11, 0x4, 0x4, 0xc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101001, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x210, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x8, 0x0, 0x58c4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x5, 0x42, 0x7, 0x0, 0x0, 0x9d6d1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x10137f, 0x7ff, 0x7, 0x0, 0x81, 0xfffffffe, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0x88}, 0x0) ioctl$TUNGETVNETLE(r1, 0xc008744c, &(0x7f0000000180)) 784.34044ms ago: executing program 4 (id=4781): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xb, 0xff, 0x2, 0x9, 0x1, 0xffffffffffffffff, 0x9}, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1fffffff}, {0x5, 0x0, 0xb, 0xa, 0x0, 0x0, 0x10000000}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff99, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000001540)=""/161}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r0, &(0x7f0000000300), &(0x7f0000000340)=""/55}, 0x20) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x806, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x31}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x5}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x5, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffd67}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000009c0)={{r2}, &(0x7f0000000940), &(0x7f0000000980)=r1}, 0x20) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r3 = socket$kcm(0x2b, 0x1, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x7, 0xfff}, 0x10800, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) (async) socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x18}, 0x8014) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x8) (async) r4 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, 0x0) (async) r5 = socket$kcm(0x10, 0x2, 0x4) close(r5) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000780)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea6f464160af36514001ac00800000004000200060900000000000000b556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x890b, &(0x7f0000000100)) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000003c0)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001000000b7050000f4ff00006a0a00fe000000008500000027000000b70000000000000095000000000000009cc6b3fcd62c7d37623802000000505f80fc88943c4f0cf0dd467b597811638883f6f698caf503a22f868ee30a0e8c1bf176db2a6b2feb4b6fd3d5707bfd2d84aaa3b1d4e984c46ea7e2a447a36f5662403e1b2be4cc7c2683908a0d411a9872971c7c56f0979bd10b6d0e196bf02f46c7953ab1abda45cbe8d0d24b5069f8a98f3dc8f76b74635fc9f9de9ca3c00cb9bf4e418d07fa22f0610a70f2bdf4000000000000b0c2940dd8e263aa743f7555193105000000b100400600e1ffff88208a2f7d25c32aac1c5d5b5be399f6609876b5887437a172fbc02a74067529194e533583412dff048f0000000000000000b2728a0481e9d6da43bb6cfb851cd364ff19ffcafe3e64be033c9d2f002cc93c1c13caec04a347903420336bec88c24a9fb6a6991ddb737d527d6acb15426415b6e8b14fdfa2c6e94bd0339454c13ad3e328a100000000b515a1000000000000000eb2e9c15b6c8f6198282df27badac8507bc7d202e0990e0000000008919b3efce02a602b4ad38098774d1feaf5f277a4462a2fff2d6ff4780f9a30a2a5f5f284c00ad35e0a6f6a0f9dae214546d24ef6a9b8ced90b508dc3b55a8259614b731af86503e5849dc87ab86ec0f6a48f0d32f0d4a5f6a03c33612320bb44f2d80363dee9163424ac31469266877942abdbbb3729fd59c0ff048ed5ab58c81b74ef4e159d4594396864a65422fe5f8c8181309becc88091dd6641c2d7e5a68ecbe778f2aae1742b92dc6854de98da66f8e38d1eca95809b738c8ddcf4cf1693c7b1c2ae0a9c27bd1a6f1738f8ba2908139fd653908ca0105e72550fbb1f1543a9bcd48de441c364f1cdb53a1ed4169434fc8f705e262fb793cf25bcd60310991f0b0634fa08308c7100000834cba801f76f820ed6def799116ce2336cd308544fbd3b74e0093968fce3c425729a77ecb090000654680e715f4ce5c1ad2b75aab390700000000000000ed7ebe34db25cbe169138c15a6013220bba55923f62849392cf4fb0327877e22a4dc617a5541a7fb89223888c76d65850dd99997e727557a477a1131d06f6f7360cfcf137ccd2e0d516bb31be413b0c7bd1bd24d3dc2d8e3f4cdfa872b66d89332e313934e9e9a3471f7170832a775bb2a8e4aa6321b1a6546a56e4121231380b04eb55337c7edc66d6e3400b06fcb31b659be19cff61cfac6f1b771967aa7bfcf7dba26e279ab9bef181cc917fca8941819445dd6fd171c4065a526c7000000000000ef570531e36dd9cf4da9a269b71e05463dfadff8401bc3202a9c393e9658d15dc20655abad7f9c54fc89176071bf7645d221696fa24e1310598f1f0bbd6ea058fdec63fab905ac925b16bd5cedf4ea2775d897897473dce8a339e340519df5dc3c8ab91b6b96b10cb05637dc6f4f24b2b0ba824028fa0fa29c9cf80443de08b3fc140082c8aa79d6324e9c609b0d9c2eeba3accb49fe851b6f56a425f70b3157443d2b05a883700b554738fd8453ed2ba5af37121ff47dc759000000000000000000000000000000000d78287bf7833841f7d49160b8bf2bd448e49c9ce544f0fafba633b694965606fa98f10c1c9f55eee1aaf03d30e61c9a468758c151ebf809efcda19b880c534bce505e14b65bb4185bf0614f23c38d106f77e407cac3cdff686370d091d453f7b8f8731eb70c3053fbb1a7d1ec764f9436489e84941336e56ccdba860901290a3d27b6330b85d52095c3b28718"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0xffff0000, 0xf0, 0x0, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48) 767.832491ms ago: executing program 1 (id=4782): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x8000000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e00000004000000040000000200000000000000", @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="de00"/14], 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000500)={r1, 0x0, 0x0}, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) close(r2) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x64, &(0x7f0000000000)=r4, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000f00)={0xffffffffffffffff, 0xe0, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f0000000600)=[0x0], &(0x7f0000000640)=[0x0, 0x0], 0x0, 0xc6, 0x0, 0x0, 0x10, &(0x7f00000006c0), &(0x7f0000000700), 0x8, 0xdb, 0x8, 0x0, 0x0}}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0x13, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="85000000b6000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007", @ANYRES32=r1, @ANYBLOB="000000000000000018400000020000000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x9, 0x4e, &(0x7f0000000380)=""/78, 0x6866e244b187c959, 0x4, '\x00', 0x0, @fallback=0x37, r4, 0x8, &(0x7f0000000540)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000580)={0x1, 0x1, 0x9, 0x2}, 0x10, r5, r0, 0x3, &(0x7f0000000f40)=[0xffffffffffffffff], &(0x7f0000000f80)=[{0x2, 0x5, 0xf, 0x7}, {0x1, 0x1, 0x1, 0x4}, {0x1, 0x2, 0xe, 0xc}], 0x10, 0x9}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000100000000000000000000850000000500000018110000", @ANYBLOB="0000000000000000b7080000000000ed7b8af83200000000bca2000000928dd1a000010000020000f8ffffffb70340004caf0039b7040b00000000000000000033d58dd2810d8ad89289ca9547cb168d904ac21c981c6888be"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r8, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x5452, &(0x7f00000006c0)) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000040), 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) 525.639853ms ago: executing program 2 (id=4783): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="5c00000013006bcd9e3fe3dc6e48aa31086b87003020000000000000160af365040014000d0002008bc3a0e640e51753cd60bc24eab556a705251e6182940800000000001282bb2352d1f006baa45e3bbd225a8941b1436e000a84c9", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2004c050) 481.364615ms ago: executing program 5 (id=4784): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x80000, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe123, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xd, 0x1000000000000000}, 0x0, 0x0, 0x8, 0x0, 0x7, 0x3, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000fc0)={0x0, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0x1e, 0xfffffffffffffff6}, 0x838b7ed36abc4627, 0x0, 0x4, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0x3, 0x7}, 0x0, 0x62, 0x0, 0x6, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1200000006000000040000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000004000000000009c6b4ccec409a18e2b5f75f69d000500000000"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4}, &(0x7f0000000340), &(0x7f0000000140)=r3}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r4}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r3}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r4, &(0x7f0000000040)}, 0x20) ioctl$SIOCSIFHWADDR(r2, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"}) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x70}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x60, 0x200000}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200}) 396.509559ms ago: executing program 3 (id=4785): bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x37) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=ANY=[@ANYBLOB="12000000020000000800000002"], 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10b8a, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x1, 0x84) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="180200000900000000000000fdffffff850000003600000018010000756c6c2700000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000a000000850000000600000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="178d048604bf0bfb1945d7430008", 0x0, 0x501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00260000000000008000"/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000010000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$tipc(r3, &(0x7f0000001e00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)="6e297750f8e896f4a9", 0x9}, 0x40811) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB='\a'], 0x10) close(r0) r5 = syz_clone(0x1800, &(0x7f0000000c40)="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"/293, 0x125, &(0x7f0000000280), &(0x7f0000000440), &(0x7f00000009c0)="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"/389) perf_event_open(&(0x7f0000000600)={0x5, 0x80, 0x1c, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x1, @perf_config_ext={0x200000}, 0x86, 0xac5d, 0x0, 0x0, 0x8, 0x80000003}, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, 0x0, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r7, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x8, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r8 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r8, 0x6, 0x6, &(0x7f0000000740), 0x4) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r9 = socket$kcm(0x11, 0x200000000000002, 0x300) recvmsg$kcm(r9, &(0x7f0000001280)={0x0, 0x0, 0x0}, 0x20) socket$kcm(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) 396.17459ms ago: executing program 4 (id=4787): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000000000000850000007500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1b, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e00000038000511d25a80698c63940d0300fc602f0000000b000200001ec0003715de60cfd9a1af05d81d00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) 246.604878ms ago: executing program 2 (id=4788): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e6026, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x8000000000000000, 0x8001}, 0x1422, 0x1100, 0x0, 0x5, 0x7, 0x400000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0xc26bfe8e8f6baca8}, 0x20) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r2}, 0xc) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000100)=@raw=[@map_idx={0x18, 0x0, 0x5, 0x0, 0xa}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}], &(0x7f00000001c0)='GPL\x00', 0x76, 0x9a, &(0x7f0000000200)=""/154, 0x41100, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000300)={0x1, 0xb, 0x5, 0x6}, 0x10, 0x0, 0x0, 0x3, &(0x7f00000003c0)=[0x1, 0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000400)=[{0x0, 0x5, 0xa, 0x5}, {0x2, 0x2, 0x4, 0x4}, {0x4, 0x5, 0xe, 0x8}], 0x10, 0x4}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000500)={0xffffffffffffffff, r2, 0x0, r3}, 0x10) openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 170.457051ms ago: executing program 5 (id=4789): socket$kcm(0x10, 0x2, 0x0) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000180), 0x4) r2 = perf_event_open$cgroup(&(0x7f0000000340)={0x2, 0x80, 0x6, 0xe, 0x2, 0x9, 0x0, 0xffffffff, 0x1000, 0x5, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x5, 0x3}, 0x1040, 0x6, 0x30f2166d, 0x1, 0x8, 0x9, 0xfff9, 0x0, 0x1, 0x0, 0x401}, 0xffffffffffffffff, 0x8, r0, 0x5) perf_event_open$cgroup(&(0x7f0000000240)={0x2, 0x80, 0x2, 0x0, 0x10, 0x3, 0x0, 0x9, 0x4, 0x7, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000200), 0x1}, 0x10, 0x0, 0x9, 0x4, 0x6, 0xc1, 0x8, 0x0, 0x6, 0x0, 0x200}, 0xffffffffffffffff, 0x7, r2, 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x73) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, 0x0) r3 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r3, 0x0, 0x33, 0x0, 0x28) socketpair(0x2b, 0x20000000000001, 0x0, &(0x7f0000000100)) socket$kcm(0x10, 0x2, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000140), 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r4 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r4, 0x107, 0xd, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="563f00001a00599c6d0e000091d028ef80"], 0xfe33) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x806, 0x0, 0x8dc, 0x4, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000104"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x48) 0s ago: executing program 4 (id=4790): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@func={0x1, 0x0, 0x0, 0xc, 0x2}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x21}]}, {0x0, [0x61]}}, 0x0, 0x33}, 0x28) kernel console output (not intermixed with test programs): er after parsing attributes in process `syz.1.3059'. [ 583.041633][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 583.103634][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 583.181779][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 583.216182][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 583.251925][T12848] device veth0_vlan entered promiscuous mode [ 583.259464][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 583.305973][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 583.368131][T12848] device veth1_vlan entered promiscuous mode [ 583.576905][T12848] device veth0_macvtap entered promiscuous mode [ 583.605635][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 583.615007][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 583.657354][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 583.720051][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 583.763544][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 583.806541][T12848] device veth1_macvtap entered promiscuous mode [ 583.901744][T12848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 583.960822][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 583.985190][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 584.008201][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 584.165234][T12848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 584.213913][T12848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 584.255959][T12848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 584.287901][T12848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 584.316874][T12848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 584.335330][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 584.355693][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 584.555427][T12848] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.573377][T12848] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.597625][T12848] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.608568][T12848] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.639066][T13283] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3072'. [ 584.925314][ T4354] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 584.984764][ T4354] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 584.998356][ T1112] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 585.089858][T13293] netlink: 'syz.1.3076': attribute type 2 has an invalid length. [ 585.097728][T13293] netlink: 10 bytes leftover after parsing attributes in process `syz.1.3076'. [ 585.138983][ T1112] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 585.156535][ T1112] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 585.166551][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 585.469035][T13296] device syzkaller0 entered promiscuous mode [ 585.575116][T13305] netlink: 'syz.0.2962': attribute type 3 has an invalid length. [ 585.649472][T13305] netlink: 'syz.0.2962': attribute type 1 has an invalid length. [ 586.907203][T12849] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 586.925679][T12849] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 586.944360][T12849] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 586.953313][T12849] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 586.970414][ T4284] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 586.978106][ T4284] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 588.625801][T13316] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3081'. [ 588.635591][T13317] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3081'. [ 588.645021][T13317] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 588.791457][ T56] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.007362][ T56] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.059975][ T4284] Bluetooth: hci4: command 0x0409 tx timeout [ 591.129405][ T4284] Bluetooth: hci4: command 0x041b tx timeout [ 592.194279][ T56] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.880862][T13328] chnl_net:caif_netlink_parms(): no params data found [ 593.209423][ T4284] Bluetooth: hci4: command 0x040f tx timeout [ 595.289382][ T4284] Bluetooth: hci4: command 0x0419 tx timeout [ 595.387705][ T56] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.930147][T13328] bridge0: port 1(bridge_slave_0) entered blocking state [ 595.968072][T13328] bridge0: port 1(bridge_slave_0) entered disabled state [ 595.998674][T13328] device bridge_slave_0 entered promiscuous mode [ 596.042072][T13328] bridge0: port 2(bridge_slave_1) entered blocking state [ 596.104210][T13328] bridge0: port 2(bridge_slave_1) entered disabled state [ 596.142567][T13328] device bridge_slave_1 entered promiscuous mode [ 596.335187][T13394] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.3102'. [ 596.381025][T13394] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 596.495609][T13328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 596.576839][T13328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 596.949983][T13328] team0: Port device team_slave_0 added [ 597.071235][T13328] team0: Port device team_slave_1 added [ 597.837223][T13411] bond0: (slave batadv0): Error: Slave device does not support XDP [ 597.926764][T13328] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 597.939294][T13328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 597.976406][T13328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 598.006309][T13328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 598.023909][T13328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 598.132585][T13328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 598.374153][T13328] device hsr_slave_0 entered promiscuous mode [ 598.384599][T13328] device hsr_slave_1 entered promiscuous mode [ 598.400060][T13328] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 598.407711][T13328] Cannot create hsr debugfs directory [ 598.704795][T13429] netlink: 180900 bytes leftover after parsing attributes in process `syz.0.3110'. [ 598.741569][T13429] openvswitch: netlink: Flow actions attr not present in new flow. [ 599.041828][ T56] bond0: (slave wlan1): Releasing backup interface [ 599.302097][T13447] netlink: 'syz.0.3115': attribute type 33 has an invalid length. [ 599.331225][T13447] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3115'. [ 600.577546][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 600.619421][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 600.648468][ T56] device bridge_slave_1 left promiscuous mode [ 600.680568][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 600.749773][ T56] device bridge_slave_0 left promiscuous mode [ 600.756382][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 600.918626][ T56] device veth1_macvtap left promiscuous mode [ 600.962126][ T56] device veth0_macvtap left promiscuous mode [ 601.004486][ T56] device veth1_vlan left promiscuous mode [ 601.665336][ T56] team0 (unregistering): Port device geneve1 removed [ 601.914406][ T56] team0 (unregistering): Port device macvlan0 removed [ 602.364667][ T56] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 602.444799][ T56] team0 (unregistering): Port device team_slave_1 removed [ 602.519862][ T56] team0 (unregistering): Port device team_slave_0 removed [ 602.606703][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 602.682748][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 602.984099][ T56] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 603.093841][ T56] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 603.103950][ T56] bond0 (unregistering): Released all slaves [ 604.173056][T13328] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 604.237504][T13328] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 604.277348][T13328] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 604.384426][T13328] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 605.165053][T13328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 605.221593][T13511] netlink: 'syz.1.3134': attribute type 13 has an invalid length. [ 605.239572][T13511] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3134'. [ 605.272258][T13511] syz_tun: refused to change device tx_queue_len [ 605.295577][T13511] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 605.361273][T13520] netlink: 'syz.1.3134': attribute type 21 has an invalid length. [ 605.388209][T13520] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3134'. [ 605.410702][T13520] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3134'. [ 605.445120][T13328] 8021q: adding VLAN 0 to HW filter on device team0 [ 605.512543][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 605.526296][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 605.565235][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 605.601536][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 605.636552][ T4332] bridge0: port 1(bridge_slave_0) entered blocking state [ 605.643834][ T4332] bridge0: port 1(bridge_slave_0) entered forwarding state [ 605.677540][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 605.723914][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 605.760601][ T4332] bridge0: port 2(bridge_slave_1) entered blocking state [ 605.767875][ T4332] bridge0: port 2(bridge_slave_1) entered forwarding state [ 605.905627][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 605.982595][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 606.007667][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 606.041039][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 606.077243][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 606.123957][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 606.152854][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 606.192897][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 606.222434][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 606.252897][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 606.288509][T13328] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 606.330669][T13328] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 606.370136][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 606.400762][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 606.693565][T13557] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3143'. [ 606.926503][T13562] netlink: 'syz.0.3145': attribute type 2 has an invalid length. [ 606.972660][T13562] netlink: 10 bytes leftover after parsing attributes in process `syz.0.3145'. [ 607.446485][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 607.483604][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 607.559401][T13328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 607.907651][T13587] netlink: 'syz.1.3152': attribute type 3 has an invalid length. [ 607.919280][T13587] netlink: 'syz.1.3152': attribute type 181 has an invalid length. [ 607.952459][T13587] device syzkaller0 entered promiscuous mode [ 608.014427][T13587] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.3152'. [ 608.071355][T13587] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.3152'. [ 608.111542][T13595] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.3152'. [ 608.516374][T13607] device syzkaller0 entered promiscuous mode [ 612.001129][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 612.020138][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 612.141362][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 612.162856][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 612.183917][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 612.213571][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 612.240008][T13328] device veth0_vlan entered promiscuous mode [ 612.270841][T13328] device veth1_vlan entered promiscuous mode [ 612.365577][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 612.387902][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 612.408840][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 612.428666][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 612.460402][T13328] device veth0_macvtap entered promiscuous mode [ 612.481549][T13328] device veth1_macvtap entered promiscuous mode [ 612.608023][T13328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 612.632527][T13328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 612.644802][T13328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 612.687262][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 612.700305][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 612.765897][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 612.802154][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 612.854814][T13328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 612.895823][T13328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 612.922585][T13328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 612.956029][T13328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 612.989003][T13328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 613.023727][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 613.053244][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 613.091521][T13328] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.113103][T13328] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.134525][T13328] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.153641][T13328] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.194821][T13678] netlink: 'syz.1.3177': attribute type 10 has an invalid length. [ 613.230017][T13678] bridge0: port 2(bridge_slave_1) entered disabled state [ 613.237475][T13678] bridge0: port 1(bridge_slave_0) entered disabled state [ 613.269026][T13680] netlink: 'syz.3.3178': attribute type 4 has an invalid length. [ 613.299535][T13680] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3178'. [ 613.560530][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 613.569042][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 613.607592][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 613.688296][ T4354] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 613.704892][ T4354] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 613.725707][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 614.434740][T13701] netlink: 'syz.4.3185': attribute type 7 has an invalid length. [ 614.840509][T13707] netlink: 'syz.3.3190': attribute type 3 has an invalid length. [ 614.873819][T13707] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3190'. [ 614.925639][ T56] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.185256][ T56] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.205655][ T4283] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 615.216691][ T4283] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 615.225223][ T4283] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 615.233513][ T4283] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 615.244465][ T4283] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 615.252283][ T4283] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 615.445141][ T56] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.612751][ T56] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.330701][T13721] chnl_net:caif_netlink_parms(): no params data found [ 616.589658][T13754] netlink: 'syz.3.3200': attribute type 7 has an invalid length. [ 617.005985][T13768] netlink: 'syz.0.3202': attribute type 3 has an invalid length. [ 617.163989][T13768] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3202'. [ 617.289454][ T4283] Bluetooth: hci3: command 0x0409 tx timeout [ 618.027384][T13721] bridge0: port 1(bridge_slave_0) entered blocking state [ 618.037126][T13721] bridge0: port 1(bridge_slave_0) entered disabled state [ 618.044681][T13781] netlink: 'syz.0.3204': attribute type 3 has an invalid length. [ 618.088563][T13781] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3204'. [ 618.103313][T13721] device bridge_slave_0 entered promiscuous mode [ 618.228104][T13721] bridge0: port 2(bridge_slave_1) entered blocking state [ 618.239300][T13721] bridge0: port 2(bridge_slave_1) entered disabled state [ 618.260700][T13721] device bridge_slave_1 entered promiscuous mode [ 618.507621][T13721] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 618.548628][T13721] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 618.774014][T13721] team0: Port device team_slave_0 added [ 618.840653][T13721] team0: Port device team_slave_1 added [ 619.369235][ T4283] Bluetooth: hci3: command 0x041b tx timeout [ 621.294099][T13721] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 621.305063][T13721] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 621.331583][T13721] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 621.344822][T13721] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 621.352312][T13721] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 621.379485][T13721] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 621.438912][T13804] netlink: 'syz.1.3211': attribute type 13 has an invalid length. [ 621.447122][T13804] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3211'. [ 621.459560][ T4283] Bluetooth: hci3: command 0x040f tx timeout [ 621.466840][T13804] syz_tun: refused to change device tx_queue_len [ 621.474006][T13804] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 621.492129][T13808] netlink: 'syz.1.3211': attribute type 13 has an invalid length. [ 621.501020][T13808] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3211'. [ 621.511737][T13808] syz_tun: refused to change device tx_queue_len [ 621.518260][T13808] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 621.534538][T13809] netlink: 'syz.1.3211': attribute type 10 has an invalid length. [ 621.567883][T13809] team0: Port device netdevsim0 added [ 621.996135][ T56] device bridge_slave_1 left promiscuous mode [ 622.044266][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 622.173661][ T56] device bridge_slave_0 left promiscuous mode [ 622.200794][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 622.268768][ T56] device veth1_macvtap left promiscuous mode [ 622.287669][ T56] device veth0_macvtap left promiscuous mode [ 622.294432][ T56] device veth1_vlan left promiscuous mode [ 622.805871][ T56] team0 (unregistering): Port device geneve1 removed [ 622.891289][ T56] team0 (unregistering): Port device geneve0 removed [ 623.156196][T13846] FAULT_INJECTION: forcing a failure. [ 623.156196][T13846] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 623.172936][T13846] CPU: 0 PID: 13846 Comm: syz.3.3222 Not tainted syzkaller #0 [ 623.180475][T13846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 623.190588][T13846] Call Trace: [ 623.193940][T13846] [ 623.196992][T13846] dump_stack_lvl+0x188/0x24e [ 623.201745][T13846] ? show_regs_print_info+0x12/0x12 [ 623.207370][T13846] ? load_image+0x400/0x400 [ 623.211945][T13846] ? __lock_acquire+0x7d10/0x7d10 [ 623.217044][T13846] ? snprintf+0xe5/0x140 [ 623.221377][T13846] should_fail_ex+0x399/0x4d0 [ 623.226167][T13846] _copy_to_user+0x2c/0x130 [ 623.230729][T13846] simple_read_from_buffer+0xe3/0x150 [ 623.236162][T13846] proc_fail_nth_read+0x1a6/0x220 [ 623.241226][T13846] ? proc_fault_inject_write+0x310/0x310 [ 623.246907][T13846] ? fsnotify_perm+0x248/0x550 [ 623.251714][T13846] ? proc_fault_inject_write+0x310/0x310 [ 623.257381][T13846] vfs_read+0x2de/0xa00 [ 623.261613][T13846] ? kernel_read+0x1e0/0x1e0 [ 623.266249][T13846] ? __fget_files+0x28/0x4b0 [ 623.270877][T13846] ? __fget_files+0x28/0x4b0 [ 623.275509][T13846] ? __fget_files+0x43d/0x4b0 [ 623.280239][T13846] ? __fdget_pos+0x2ae/0x360 [ 623.284867][T13846] ? ksys_read+0x71/0x250 [ 623.289243][T13846] ksys_read+0x14c/0x250 [ 623.293534][T13846] ? vfs_write+0xa30/0xa30 [ 623.298004][T13846] ? lockdep_hardirqs_on+0x94/0x140 [ 623.303371][T13846] do_syscall_64+0x4c/0xa0 [ 623.307938][T13846] ? clear_bhb_loop+0x60/0xb0 [ 623.312677][T13846] ? clear_bhb_loop+0x60/0xb0 [ 623.317419][T13846] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 623.323454][T13846] RIP: 0033:0x7fd6a475d04e [ 623.327914][T13846] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 623.347678][T13846] RSP: 002b:00007fd6a56f7fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 623.356178][T13846] RAX: ffffffffffffffda RBX: 00007fd6a56f86c0 RCX: 00007fd6a475d04e [ 623.364186][T13846] RDX: 000000000000000f RSI: 00007fd6a56f80a0 RDI: 0000000000000004 [ 623.372214][T13846] RBP: 00007fd6a56f8090 R08: 0000000000000000 R09: 0000000000000000 [ 623.380261][T13846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 623.388279][T13846] R13: 00007fd6a4a16038 R14: 00007fd6a4a15fa0 R15: 00007ffc09546438 [ 623.396324][T13846] [ 623.540642][ T4283] Bluetooth: hci3: command 0x0419 tx timeout [ 623.781473][T13856] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3225'. [ 624.118819][ T56] team0 (unregistering): Port device team_slave_1 removed [ 624.220613][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 624.417010][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.423974][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.679693][ T56] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 624.688957][ T56] bond0 (unregistering): Released all slaves [ 624.788085][T13721] device hsr_slave_0 entered promiscuous mode [ 624.795268][T13721] device hsr_slave_1 entered promiscuous mode [ 624.802602][T13721] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 624.810470][T13721] Cannot create hsr debugfs directory [ 625.847153][T13891] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.3234'. [ 625.869372][T13891] netlink: zone id is out of range [ 625.874624][T13891] netlink: zone id is out of range [ 625.909646][T13891] netlink: zone id is out of range [ 625.916391][T13891] netlink: zone id is out of range [ 625.986822][T13889] netlink: 'syz.3.3235': attribute type 27 has an invalid length. [ 625.998556][T13893] netlink: 'syz.3.3235': attribute type 10 has an invalid length. [ 626.018563][T13891] netlink: zone id is out of range [ 626.029304][T13891] netlink: zone id is out of range [ 626.035807][T13889] netlink: 'syz.3.3235': attribute type 3 has an invalid length. [ 626.061071][T13891] netlink: zone id is out of range [ 626.074450][T13891] netlink: zone id is out of range [ 626.086625][T13889] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3235'. [ 626.355740][T13901] netlink: 'syz.1.3237': attribute type 3 has an invalid length. [ 626.386174][T13901] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3237'. [ 627.466978][T13922] netlink: 'syz.4.3241': attribute type 29 has an invalid length. [ 627.592525][T13922] netlink: 'syz.4.3241': attribute type 29 has an invalid length. [ 627.629673][T13721] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 627.665393][T13921] netlink: 'syz.4.3241': attribute type 29 has an invalid length. [ 627.958492][T13721] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 627.982953][T13916] netlink: 'syz.4.3241': attribute type 29 has an invalid length. [ 628.037285][T13721] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 628.075380][T13721] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 628.116351][T13935] netlink: 'syz.3.3248': attribute type 4 has an invalid length. [ 628.145051][T13935] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3248'. [ 628.447065][T13721] 8021q: adding VLAN 0 to HW filter on device bond0 [ 628.494884][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 628.561792][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 628.582959][T13721] 8021q: adding VLAN 0 to HW filter on device team0 [ 628.610819][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 628.631718][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 628.676866][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 628.684137][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 628.712952][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 628.798926][ T1112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 628.827667][ T1112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 628.855068][T13951] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3251'. [ 628.871084][ T1112] bridge0: port 2(bridge_slave_1) entered blocking state [ 628.878440][ T1112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 628.937603][ T1112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 628.996375][ T1112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 629.020912][ T1112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 629.056361][ T1112] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 629.131636][ T1112] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 629.160420][ T1112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 629.212550][ T1112] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 629.251821][ T1112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 629.280795][ T1112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 629.318735][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 629.380180][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 629.442384][T13963] netlink: 188 bytes leftover after parsing attributes in process `syz.1.3255'. [ 629.615142][T13721] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 629.626234][T13959] delete_channel: no stack [ 630.492437][ T1112] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 630.535399][ T1112] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 630.573617][T13721] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 630.679586][ T1112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 630.715245][ T1112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 630.800629][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 630.832799][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 630.869814][T13721] device veth0_vlan entered promiscuous mode [ 630.894501][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 630.914549][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 630.955905][T14013] device bond_slave_1 entered promiscuous mode [ 630.993988][T13721] device veth1_vlan entered promiscuous mode [ 631.107697][T14013] device syzkaller0 entered promiscuous mode [ 631.217368][T14011] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3268'. [ 631.227799][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 631.248747][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 631.279902][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 631.320691][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 631.401497][T13721] device veth0_macvtap entered promiscuous mode [ 631.438076][T13721] device veth1_macvtap entered promiscuous mode [ 632.444668][T14026] delete_channel: no stack [ 635.911986][T13721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 635.923118][T13721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 635.934723][T13721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 635.946025][T13721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 635.969896][T13721] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 635.986329][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 635.998605][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 636.016821][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 636.031278][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 636.047862][T14027] netlink: 188 bytes leftover after parsing attributes in process `syz.4.3270'. [ 636.078182][T13721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 636.104456][T13721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 636.140493][T13721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 636.181651][T13721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 636.240047][T13721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 636.269206][T13721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 636.302459][T13721] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 636.313926][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 636.332323][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 636.361774][T13721] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 636.389574][T13721] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 636.410027][T13721] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 636.429013][T13721] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 636.865461][ T4338] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 636.903470][ T4338] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 636.934398][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 637.005446][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 637.016011][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 637.052700][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 637.857032][T14116] device syzkaller0 entered promiscuous mode [ 637.879729][T14097] delete_channel: no stack [ 637.904870][T14118] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.3293'. [ 638.831205][T14137] netlink: 'syz.2.3298': attribute type 29 has an invalid length. [ 639.238686][ T4284] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 639.257756][ T4284] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 639.266602][ T4284] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 639.275385][ T4284] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 639.292038][ T4284] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 639.312304][ T4284] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 639.682568][ T4284] Bluetooth: hci4: ISO packet for unknown connection handle 2622 [ 641.372282][ T4284] Bluetooth: hci0: command 0x0409 tx timeout [ 641.707757][T14137] netlink: 'syz.2.3298': attribute type 29 has an invalid length. [ 641.959251][T14167] netlink: 198388 bytes leftover after parsing attributes in process `syz.3.3306'. [ 642.057737][ T30] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.105931][T14170] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.3305'. [ 642.186868][ T30] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.502832][T14142] chnl_net:caif_netlink_parms(): no params data found [ 642.645378][ T30] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.827704][ T30] team0: Port device netdevsim0 removed [ 642.837413][ T30] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.925778][T14142] bridge0: port 1(bridge_slave_0) entered blocking state [ 642.963590][T14142] bridge0: port 1(bridge_slave_0) entered disabled state [ 642.982189][T14142] device bridge_slave_0 entered promiscuous mode [ 643.003030][T14142] bridge0: port 2(bridge_slave_1) entered blocking state [ 643.024801][T14142] bridge0: port 2(bridge_slave_1) entered disabled state [ 643.042207][T14142] device bridge_slave_1 entered promiscuous mode [ 643.182884][T14142] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 643.240118][T14142] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 643.377788][T14198] device syzkaller0 entered promiscuous mode [ 643.449377][ T4284] Bluetooth: hci0: command 0x041b tx timeout [ 643.568389][T14142] team0: Port device team_slave_0 added [ 643.957874][T14142] team0: Port device team_slave_1 added [ 645.530557][ T4284] Bluetooth: hci0: command 0x040f tx timeout [ 647.609319][ T4284] Bluetooth: hci0: command 0x0419 tx timeout [ 648.146179][T14248] netlink: 14548 bytes leftover after parsing attributes in process `syz.4.3328'. [ 648.173557][T14142] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 648.195485][T14142] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 648.315909][T14142] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 648.384566][T14142] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 648.420072][T14142] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 648.505931][T14142] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 649.518838][T14142] device hsr_slave_0 entered promiscuous mode [ 649.567943][T14142] device hsr_slave_1 entered promiscuous mode [ 649.598389][T14142] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 649.627784][T14142] Cannot create hsr debugfs directory [ 649.677723][T14276] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.3334'. [ 650.090427][T14284] device bond_slave_1 entered promiscuous mode [ 650.408717][T14294] netlink: 'syz.3.3341': attribute type 29 has an invalid length. [ 651.055417][T14290] device syzkaller0 entered promiscuous mode [ 651.195899][T14305] netlink: 'syz.3.3344': attribute type 10 has an invalid length. [ 651.302310][T14305] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3344'. [ 651.345266][T13742] tipc: Subscription rejected, illegal request [ 651.394816][T14305] net_ratelimit: 9 callbacks suppressed [ 651.394839][T14305] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 651.597456][T14306] netlink: 'syz.3.3344': attribute type 19 has an invalid length. [ 651.616142][T14306] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3344'. [ 654.090246][ T30] device hsr_slave_0 left promiscuous mode [ 654.119443][ T30] device hsr_slave_1 left promiscuous mode [ 654.127064][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 654.154702][ T30] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 654.192206][ T30] batman_adv: batadv0: Removing interface: vlan1 [ 654.206566][ T30] device bridge_slave_1 left promiscuous mode [ 654.225575][ T30] bridge0: port 2(bridge_slave_1) entered disabled state [ 654.252073][ T30] device bridge_slave_0 left promiscuous mode [ 654.258444][ T30] bridge0: port 1(bridge_slave_0) entered disabled state [ 654.295951][T14333] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.3352'. [ 654.445497][T14344] netlink: 'syz.0.3354': attribute type 2 has an invalid length. [ 654.454088][T14344] netlink: 'syz.0.3354': attribute type 3 has an invalid length. [ 654.462593][T14344] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3354'. [ 655.141473][ T30] device veth1_macvtap left promiscuous mode [ 655.155707][ T30] device veth1_vlan left promiscuous mode [ 655.473903][ T30] team0 (unregistering): Port device geneve1 removed [ 655.528465][ T30] team0 (unregistering): Port device geneve0 removed [ 656.348123][ T30] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 656.406834][ T30] team0 (unregistering): Port device team_slave_1 removed [ 656.477654][ T30] team0 (unregistering): Port device team_slave_0 removed [ 656.541045][ T30] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 656.601907][ T30] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 656.947611][ T30] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 657.068083][ T30] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 657.077392][ T30] bond0 (unregistering): Released all slaves [ 657.247573][T14333] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.3352'. [ 657.275140][T14351] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3357'. [ 657.298227][T14352] netlink: 'syz.4.3357': attribute type 12 has an invalid length. [ 657.329188][T14352] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3357'. [ 657.491113][T14142] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 657.810279][T14142] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 657.877002][T14142] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 657.994678][T14368] device syzkaller0 entered promiscuous mode [ 658.037098][T14142] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 661.889631][T14401] netlink: 'syz.2.3369': attribute type 10 has an invalid length. [ 661.898946][T14401] bridge0: port 2(bridge_slave_1) entered disabled state [ 661.906545][T14401] bridge0: port 1(bridge_slave_0) entered disabled state [ 661.940862][T14401] bridge0: port 2(bridge_slave_1) entered blocking state [ 661.948229][T14401] bridge0: port 2(bridge_slave_1) entered forwarding state [ 661.955941][T14401] bridge0: port 1(bridge_slave_0) entered blocking state [ 661.963153][T14401] bridge0: port 1(bridge_slave_0) entered forwarding state [ 661.986826][T14401] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 662.114341][T14142] 8021q: adding VLAN 0 to HW filter on device bond0 [ 662.186859][T14142] 8021q: adding VLAN 0 to HW filter on device team0 [ 662.218879][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 662.234273][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 662.290597][T13742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 662.302980][T13742] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 662.325206][T13742] bridge0: port 1(bridge_slave_0) entered blocking state [ 662.333363][T13742] bridge0: port 1(bridge_slave_0) entered forwarding state [ 662.383415][T13742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 662.410151][T13742] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 662.437326][T13742] bridge0: port 2(bridge_slave_1) entered blocking state [ 662.444613][T13742] bridge0: port 2(bridge_slave_1) entered forwarding state [ 662.503285][T13742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 662.531758][T13742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 662.628901][T13742] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 662.651612][T13742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 662.686763][T13742] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 662.725410][T13742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 662.769944][T13742] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 662.796565][T13742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 662.826988][T13742] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 662.850648][T13742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 662.897124][T13742] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 662.940347][T13742] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 663.018690][T14441] netlink: 826 bytes leftover after parsing attributes in process `syz.2.3374'. [ 664.118283][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 664.141856][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 664.275080][T14142] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 664.518869][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 664.542083][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 664.574938][T14480] netlink: 'syz.3.3384': attribute type 39 has an invalid length. [ 664.602720][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 664.622586][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 664.656769][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 664.675209][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 667.503511][T14142] device veth0_vlan entered promiscuous mode [ 667.523548][T14486] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 667.546991][T14486] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 667.637933][T14142] device veth1_vlan entered promiscuous mode [ 667.760890][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 667.774070][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 667.788412][T14142] device veth0_macvtap entered promiscuous mode [ 667.876978][T14142] device veth1_macvtap entered promiscuous mode [ 667.936412][T14142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 667.949898][T14142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 667.960223][T14142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 667.973231][T14142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 667.983899][T14142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 668.021122][T14142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 668.047345][T14142] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 668.095206][ T1112] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 668.112434][ T1112] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 668.124775][ T1112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 668.137845][ T1112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 668.160690][T14142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 668.179760][T14142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 668.194958][T14142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 668.206719][T14142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 668.223769][T14142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 668.236747][T14142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 668.256907][T14142] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 668.307463][ T1112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 668.317191][ T1112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 668.346900][T14142] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.361986][T14142] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.375675][T14142] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.384859][T14142] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.684347][ T30] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 668.718374][ T30] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 668.786262][ T1112] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 668.912806][ T1112] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 668.927729][ T1112] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 668.964521][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 669.041148][T14540] bridge0: port 2(bridge_slave_1) entered disabled state [ 669.048956][T14540] bridge0: port 1(bridge_slave_0) entered disabled state [ 670.223116][ T4284] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 670.242531][ T4284] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 670.253310][ T4284] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 670.261662][ T4284] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 670.270825][ T4284] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 670.290363][T12849] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 670.861348][T14560] chnl_net:caif_netlink_parms(): no params data found [ 672.054684][T14589] netlink: 'syz.0.3411': attribute type 33 has an invalid length. [ 672.063332][T14589] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3411'. [ 672.186818][T14560] bridge0: port 1(bridge_slave_0) entered blocking state [ 672.248689][T14560] bridge0: port 1(bridge_slave_0) entered disabled state [ 672.282755][T14560] device bridge_slave_0 entered promiscuous mode [ 672.313289][T14560] bridge0: port 2(bridge_slave_1) entered blocking state [ 672.357839][T14560] bridge0: port 2(bridge_slave_1) entered disabled state [ 672.405700][T14560] device bridge_slave_1 entered promiscuous mode [ 672.414176][ T4283] Bluetooth: hci5: command 0x0409 tx timeout [ 672.564511][T14597] netlink: 'syz.0.3414': attribute type 4 has an invalid length. [ 672.596226][T14597] netlink: 140 bytes leftover after parsing attributes in process `syz.0.3414'. [ 672.738040][T14560] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 672.842062][T14560] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 672.865395][T14608] netlink: 'syz.4.3417': attribute type 10 has an invalid length. [ 672.875076][T14608] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3417'. [ 673.010128][T14608] team0: Port device geneve0 added [ 673.216848][T14612] device syzkaller0 entered promiscuous mode [ 673.248632][T14560] team0: Port device team_slave_0 added [ 673.275180][T14560] team0: Port device team_slave_1 added [ 673.379371][T14560] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 673.386638][T14560] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 673.444348][T14560] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 673.458457][T14560] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 673.467796][T14560] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 673.497744][T14560] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 674.509513][ T4283] Bluetooth: hci5: command 0x041b tx timeout [ 676.037440][T14560] device hsr_slave_0 entered promiscuous mode [ 676.089691][T14560] device hsr_slave_1 entered promiscuous mode [ 676.119528][T14560] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 676.127389][T14560] Cannot create hsr debugfs directory [ 676.569283][ T4283] Bluetooth: hci5: command 0x040f tx timeout [ 677.153265][T14669] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3433'. [ 677.333237][T14677] netlink: 126632 bytes leftover after parsing attributes in process `syz.2.3433'. [ 677.549603][T14677] netlink: 8192 bytes leftover after parsing attributes in process `syz.2.3433'. [ 677.963395][T14685] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3437'. [ 678.111696][T14687] device syzkaller0 entered promiscuous mode [ 678.649344][ T4283] Bluetooth: hci5: command 0x0419 tx timeout [ 678.699024][T14560] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 681.127083][T14560] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 681.178171][T14560] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 681.252714][T14560] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 681.316976][ T56] device bridge_slave_1 left promiscuous mode [ 681.340828][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 681.397654][ T56] device bridge_slave_0 left promiscuous mode [ 681.414740][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 681.493647][ T56] device veth0_macvtap left promiscuous mode [ 681.509866][ T56] device veth1_vlan left promiscuous mode [ 682.809341][ T4283] Bluetooth: hci2: command 0x0406 tx timeout [ 683.178854][ T56] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 683.334918][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 683.679703][ T56] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 683.689811][ T56] bond0 (unregistering): Released all slaves [ 683.956703][T14560] 8021q: adding VLAN 0 to HW filter on device bond0 [ 684.022950][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 684.045344][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 684.073425][T14560] 8021q: adding VLAN 0 to HW filter on device team0 [ 684.133024][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 684.174590][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 684.195129][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 684.202412][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 684.217471][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 684.307967][T13742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 684.337730][T13742] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 684.425915][T13742] bridge0: port 2(bridge_slave_1) entered blocking state [ 684.433336][T13742] bridge0: port 2(bridge_slave_1) entered forwarding state [ 684.505792][T13742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 684.533841][T13742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 684.616942][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 684.663894][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 684.706624][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 684.790680][T13742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 684.808170][T13742] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 684.850559][T13742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 684.860285][T13742] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 684.890900][T13742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 684.923305][T13742] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 684.980177][T14791] netlink: 'syz.1.3470': attribute type 2 has an invalid length. [ 684.988126][T14791] netlink: 175020 bytes leftover after parsing attributes in process `syz.1.3470'. [ 685.039673][T14788] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.3469'. [ 685.460475][T14804] netlink: 'syz.4.3474': attribute type 10 has an invalid length. [ 685.497823][T14804] bridge0: port 2(bridge_slave_1) entered blocking state [ 685.505182][T14804] bridge0: port 2(bridge_slave_1) entered forwarding state [ 685.513015][T14804] bridge0: port 1(bridge_slave_0) entered blocking state [ 685.520325][T14804] bridge0: port 1(bridge_slave_0) entered forwarding state [ 685.551289][T14804] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 685.869488][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.875895][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.237317][T14820] netlink: 'syz.4.3480': attribute type 11 has an invalid length. [ 686.264963][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 686.280773][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 686.301610][T14820] netlink: 128124 bytes leftover after parsing attributes in process `syz.4.3480'. [ 686.319977][T14560] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 686.376277][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 686.396686][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 686.470880][T14560] device veth0_vlan entered promiscuous mode [ 686.526888][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 686.556132][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 686.588337][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 686.617578][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 686.678671][T14560] device veth1_vlan entered promiscuous mode [ 686.757128][T13742] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 686.803219][T13742] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 686.858085][T13742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 686.878769][T13742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 686.916648][T14560] device veth0_macvtap entered promiscuous mode [ 686.947678][T14839] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.3487'. [ 686.966953][T14560] device veth1_macvtap entered promiscuous mode [ 687.099226][T14560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 687.128428][T14560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 687.225850][T14560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 687.259127][T14560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 687.300097][T14560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 687.369137][T14560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 687.398613][T14560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 687.429133][T14560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 687.466786][T14560] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 687.498267][T13742] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 687.528561][T13742] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 687.568486][T13742] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 687.613522][T13742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 687.657956][T14560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 687.686665][T14560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 687.701133][T14560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 687.717541][T14560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 687.733083][T14560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 687.747156][T14560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 687.759642][T14560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 687.786756][T14560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 687.800009][T14560] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 687.820095][T14852] netlink: 646 bytes leftover after parsing attributes in process `syz.0.3492'. [ 687.840489][T13742] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 687.871305][T13742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 687.893152][T14560] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 687.913470][T14560] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 687.923141][T14560] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 687.933473][T14560] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 690.090839][ T30] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 690.117239][ T30] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 690.148723][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 690.203297][ T30] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 690.252095][ T30] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 690.294314][T14859] netlink: 'syz.1.3494': attribute type 29 has an invalid length. [ 690.310591][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 690.345293][T14859] netlink: 'syz.1.3494': attribute type 29 has an invalid length. [ 690.374138][T14860] netlink: 'syz.1.3494': attribute type 29 has an invalid length. [ 691.177534][T14875] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.3500'. [ 692.528189][T14911] FAULT_INJECTION: forcing a failure. [ 692.528189][T14911] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 692.699687][T14911] CPU: 0 PID: 14911 Comm: syz.3.3514 Not tainted syzkaller #0 [ 692.707281][T14911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 692.717492][T14911] Call Trace: [ 692.720829][T14911] [ 692.721294][T14912] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.3515'. [ 692.723796][T14911] dump_stack_lvl+0x188/0x24e [ 692.723840][T14911] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 692.723876][T14911] ? show_regs_print_info+0x12/0x12 [ 692.723911][T14911] ? load_image+0x400/0x400 [ 692.723944][T14911] ? should_fail_ex+0x346/0x4d0 [ 692.723973][T14911] should_fail_ex+0x399/0x4d0 [ 692.724001][T14911] _copy_from_user+0x2c/0x170 [ 692.724035][T14911] __sys_bpf+0x2ea/0x780 [ 692.724071][T14911] ? bpf_link_show_fdinfo+0x380/0x380 [ 692.724148][T14911] __x64_sys_bpf+0x78/0x90 [ 692.724181][T14911] do_syscall_64+0x4c/0xa0 [ 692.724213][T14911] ? clear_bhb_loop+0x60/0xb0 [ 692.724249][T14911] ? clear_bhb_loop+0x60/0xb0 [ 692.724281][T14911] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 692.724311][T14911] RIP: 0033:0x7f3c8e59c819 [ 692.724334][T14911] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 692.724355][T14911] RSP: 002b:00007f3c8f463028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 692.724381][T14911] RAX: ffffffffffffffda RBX: 00007f3c8e815fa0 RCX: 00007f3c8e59c819 [ 692.724398][T14911] RDX: 0000000000000050 RSI: 0000200000000540 RDI: 000000000000000a [ 692.724413][T14911] RBP: 00007f3c8f463090 R08: 0000000000000000 R09: 0000000000000000 [ 692.724428][T14911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 692.724442][T14911] R13: 00007f3c8e816038 R14: 00007f3c8e815fa0 R15: 00007ffd89a47168 [ 692.724475][T14911] [ 693.385569][T14921] netlink: 646 bytes leftover after parsing attributes in process `syz.4.3516'. [ 694.516472][T14960] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.3528'. [ 695.698771][T14981] netlink: 683 bytes leftover after parsing attributes in process `syz.4.3536'. [ 696.327732][T14996] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.3541'. [ 696.364364][T14996] netlink: zone id is out of range [ 696.369940][T14996] netlink: zone id is out of range [ 696.375357][T14996] netlink: zone id is out of range [ 696.381508][T14996] netlink: zone id is out of range [ 696.386880][T14996] netlink: zone id is out of range [ 696.394182][T14996] netlink: zone id is out of range [ 696.400609][T14996] netlink: zone id is out of range [ 696.406264][T14996] netlink: zone id is out of range [ 696.417335][T14992] netlink: 'syz.0.3539': attribute type 21 has an invalid length. [ 696.425406][T14996] netlink: zone id is out of range [ 696.440370][T14996] netlink: del zone limit has 4 unknown bytes [ 696.449422][T14989] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.3539'. [ 696.471737][T14992] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3539'. [ 696.504080][T14992] netlink: 'syz.0.3539': attribute type 4 has an invalid length. [ 696.559452][T14992] netlink: 'syz.0.3539': attribute type 5 has an invalid length. [ 696.570914][T14992] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3539'. [ 696.609347][T15000] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.3542'. [ 696.971610][T15009] device bond_slave_1 entered promiscuous mode [ 697.105623][T15009] device syzkaller0 entered promiscuous mode [ 697.460169][T15020] netlink: 'syz.3.3550': attribute type 16 has an invalid length. [ 697.485140][T15020] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3550'. [ 699.752777][T15029] netlink: 'syz.2.3554': attribute type 4 has an invalid length. [ 699.761349][T15029] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3554'. [ 700.103255][T15047] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.3558'. [ 701.202269][T15062] netlink: 'syz.3.3566': attribute type 28 has an invalid length. [ 701.244915][T15062] netlink: 'syz.3.3566': attribute type 29 has an invalid length. [ 701.305549][T15062] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3566'. [ 701.357218][T15074] device syzkaller0 entered promiscuous mode [ 702.124551][T15101] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.3576'. [ 705.509279][T15119] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 705.516834][T15119] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 705.531437][T15119] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 705.538982][T15119] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 706.531649][T15168] device bond_slave_1 entered promiscuous mode [ 706.786909][T15168] device syzkaller0 entered promiscuous mode [ 706.831503][T15171] netlink: 'syz.2.3598': attribute type 10 has an invalid length. [ 706.884705][T15171] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3598'. [ 706.922337][T15171] device hsr0 entered promiscuous mode [ 706.928436][T15171] bridge0: port 3(hsr0) entered blocking state [ 706.935539][T15171] bridge0: port 3(hsr0) entered disabled state [ 706.946316][T15171] bridge0: port 3(hsr0) entered blocking state [ 706.952866][T15171] bridge0: port 3(hsr0) entered forwarding state [ 707.257498][T15170] netlink: 'syz.0.3600': attribute type 28 has an invalid length. [ 707.344069][T15170] netlink: 'syz.0.3600': attribute type 29 has an invalid length. [ 707.367885][T15170] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3600'. [ 707.435327][T15187] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3604'. [ 709.948912][T15187] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3604'. [ 709.978567][T15205] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.3611'. [ 711.157094][T15223] netlink: 'syz.2.3620': attribute type 28 has an invalid length. [ 711.171291][T15223] netlink: 'syz.2.3620': attribute type 29 has an invalid length. [ 711.224617][T15223] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3620'. [ 712.053910][T15270] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3629'. [ 713.529159][T12849] Bluetooth: hci4: command 0x0406 tx timeout [ 714.591244][T15302] delete_channel: no stack [ 715.370817][T15334] netlink: 'syz.0.3652': attribute type 10 has an invalid length. [ 716.943218][T15343] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3654'. [ 716.963449][T15353] netlink: 'syz.3.3658': attribute type 10 has an invalid length. [ 716.984966][T15353] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3658'. [ 717.110348][T15353] team0: Port device geneve0 added [ 717.144562][T15356] netlink: 'syz.3.3658': attribute type 19 has an invalid length. [ 717.171496][T15356] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3658'. [ 719.414296][T15413] netlink: 'syz.2.3679': attribute type 27 has an invalid length. [ 719.439476][T15413] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3679'. [ 720.063283][T15429] netlink: 'syz.1.3678': attribute type 39 has an invalid length. [ 720.083124][T15425] netlink: 134056 bytes leftover after parsing attributes in process `syz.0.3681'. [ 720.719056][T15433] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3683'. [ 720.726695][T15425] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 720.777813][T15425] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 720.797614][T15425] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 722.098263][T15465] netlink: 'syz.0.3697': attribute type 2 has an invalid length. [ 722.220849][T15465] device 0 entered promiscuous mode [ 722.297368][T15465] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3697'. [ 722.985408][T15481] sctp: [Deprecated]: syz.2.3702 (pid 15481) Use of struct sctp_assoc_value in delayed_ack socket option. [ 722.985408][T15481] Use struct sctp_sack_info instead [ 723.992179][T15519] device lo entered promiscuous mode [ 724.927903][T15538] netlink: 'syz.1.3725': attribute type 1 has an invalid length. [ 724.948692][T15538] netlink: 112865 bytes leftover after parsing attributes in process `syz.1.3725'. [ 725.984434][T15576] netlink: 'syz.3.3740': attribute type 10 has an invalid length. [ 726.037014][T15576] bridge0: port 2(bridge_slave_1) entered disabled state [ 726.044773][T15576] bridge0: port 1(bridge_slave_0) entered disabled state [ 726.129875][T15576] bridge0: port 2(bridge_slave_1) entered blocking state [ 726.137468][T15576] bridge0: port 2(bridge_slave_1) entered forwarding state [ 726.145127][T15576] bridge0: port 1(bridge_slave_0) entered blocking state [ 726.152407][T15576] bridge0: port 1(bridge_slave_0) entered forwarding state [ 726.292664][T15576] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 726.708579][T15595] netlink: 'syz.2.3747': attribute type 2 has an invalid length. [ 726.739212][T15595] netlink: 'syz.2.3747': attribute type 1 has an invalid length. [ 726.747373][T15595] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3747'. [ 727.143777][T15601] netlink: 'syz.1.3751': attribute type 10 has an invalid length. [ 727.441536][T15601] team0: Device veth1_vlan failed to register rx_handler [ 727.692542][T15610] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.3756'. [ 728.568789][T15631] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.3764'. [ 729.188452][T15635] netlink: 'syz.3.3762': attribute type 1 has an invalid length. [ 729.246153][T15635] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.3762'. [ 729.864648][T15665] netlink: 'syz.1.3776': attribute type 29 has an invalid length. [ 729.878401][T15665] netlink: 'syz.1.3776': attribute type 29 has an invalid length. [ 734.600557][T15728] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3799'. [ 734.793803][T15731] netlink: 'syz.1.3798': attribute type 4 has an invalid length. [ 734.794106][T15726] delete_channel: no stack [ 734.867262][T15726] delete_channel: no stack [ 734.874111][T15731] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3798'. [ 734.949393][T15731] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 735.335564][T15747] netlink: 'syz.3.3806': attribute type 33 has an invalid length. [ 735.343698][T15747] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3806'. [ 736.318049][T15757] netlink: 'syz.3.3812': attribute type 10 has an invalid length. [ 736.326314][T15757] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3812'. [ 736.426348][T15762] netlink: 'syz.2.3811': attribute type 20 has an invalid length. [ 737.248642][T15777] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.3818'. [ 737.765461][T15797] netlink: 22 bytes leftover after parsing attributes in process `syz.4.3825'. [ 739.129537][T12849] Bluetooth: hci3: command 0x0406 tx timeout [ 740.052697][T15844] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3843'. [ 740.136706][T15840] netlink: 'syz.3.3840': attribute type 10 has an invalid length. [ 740.212350][T15840] device veth1_macvtap left promiscuous mode [ 740.361745][T15851] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.3846'. [ 740.617749][T15857] netlink: 'syz.4.3847': attribute type 2 has an invalid length. [ 740.633985][T15851] netlink: 6955 bytes leftover after parsing attributes in process `syz.1.3846'. [ 740.647985][T15857] netlink: 10 bytes leftover after parsing attributes in process `syz.4.3847'. [ 740.816370][T15859] netlink: 'syz.2.3848': attribute type 46 has an invalid length. [ 740.840727][T15859] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3848'. [ 740.876380][ T4283] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 740.889678][ T4283] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 740.898201][ T4283] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 740.922439][ T4283] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 740.930233][ T4283] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 740.937821][ T4283] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 741.592567][T15860] chnl_net:caif_netlink_parms(): no params data found [ 741.795301][T15899] bridge0: port 2(bridge_slave_1) entered disabled state [ 741.803037][T15899] bridge0: port 1(bridge_slave_0) entered disabled state [ 741.995537][T15860] bridge0: port 1(bridge_slave_0) entered blocking state [ 742.088004][T15860] bridge0: port 1(bridge_slave_0) entered disabled state [ 742.141729][T15860] device bridge_slave_0 entered promiscuous mode [ 742.177298][T15860] bridge0: port 2(bridge_slave_1) entered blocking state [ 742.219381][T15860] bridge0: port 2(bridge_slave_1) entered disabled state [ 742.239359][T15860] device bridge_slave_1 entered promiscuous mode [ 742.389711][T15860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 742.482506][T15860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 742.773599][T15860] team0: Port device team_slave_0 added [ 742.979490][T12849] Bluetooth: hci1: command 0x0409 tx timeout [ 743.009021][T15860] team0: Port device team_slave_1 added [ 743.181767][T15860] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 743.188839][T15860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 743.306948][T12849] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 743.353154][T15860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 743.366529][T15860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 743.374050][T15860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 743.401202][T15860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 743.470649][T15860] device hsr_slave_0 entered promiscuous mode [ 743.492628][T15860] device hsr_slave_1 entered promiscuous mode [ 743.504486][T15860] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 743.519139][T15860] Cannot create hsr debugfs directory [ 744.068421][T15860] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 744.109188][T15860] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 744.156390][T15860] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 744.202123][T15860] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 744.513477][T15860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 744.577644][T15245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 744.596460][T15245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 744.638217][T15860] 8021q: adding VLAN 0 to HW filter on device team0 [ 744.681151][T15245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 744.701210][T15245] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 744.731736][T15245] bridge0: port 1(bridge_slave_0) entered blocking state [ 744.739007][T15245] bridge0: port 1(bridge_slave_0) entered forwarding state [ 744.834418][T15245] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 744.848429][T15245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 744.873203][T15245] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 744.906696][T15245] bridge0: port 2(bridge_slave_1) entered blocking state [ 744.914127][T15245] bridge0: port 2(bridge_slave_1) entered forwarding state [ 744.968537][T15245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 745.006630][T15245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 745.049762][T12849] Bluetooth: hci1: command 0x041b tx timeout [ 745.066040][T15245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 745.133321][T15245] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 745.192920][T15245] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 745.228216][T15245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 745.250660][T15245] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 745.308423][T15245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 745.331174][T15245] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 745.357948][T15245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 745.369648][ T4283] Bluetooth: hci3: command 0x2016 tx timeout [ 745.406013][T15245] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 745.434541][T15860] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 746.608145][T15247] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 746.626814][T15247] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 746.661946][T15860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 747.129473][T12849] Bluetooth: hci1: command 0x040f tx timeout [ 747.303055][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.309524][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.635590][T16028] netlink: 'syz.3.3900': attribute type 10 has an invalid length. [ 747.670859][T16028] bridge0: port 2(bridge_slave_1) entered disabled state [ 747.678152][T16028] bridge0: port 1(bridge_slave_0) entered disabled state [ 748.054849][T15247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 748.074538][T15247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 748.145608][T15860] device veth0_vlan entered promiscuous mode [ 748.191289][T15251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 748.205808][T15251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 748.244634][T16040] netlink: 'syz.4.3904': attribute type 10 has an invalid length. [ 748.311250][T15860] device veth1_vlan entered promiscuous mode [ 748.361578][T15251] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 748.373952][T15251] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 748.400995][T15251] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 748.524713][T15252] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 748.542463][T15252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 748.594916][T15252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 748.622872][T15860] device veth0_macvtap entered promiscuous mode [ 748.653351][T15860] device veth1_macvtap entered promiscuous mode [ 748.723955][T15860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 748.779126][T15860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 748.803655][T16054] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.3908'. [ 748.821602][T15860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 748.866797][T16058] netlink: 1034 bytes leftover after parsing attributes in process `syz.1.3908'. [ 748.869224][T15860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 748.920537][T15860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 748.959151][T15860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 748.988154][T15860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 749.009201][T15860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 749.051405][T15860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 749.060315][T15252] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 749.075688][T15252] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 749.118177][T15252] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 749.158357][T15252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 749.209568][T12849] Bluetooth: hci1: command 0x0419 tx timeout [ 749.238986][T15860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 749.286526][T15860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 749.297553][T15860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 749.308674][T15860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 749.319231][T15860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 749.330388][T15860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 749.341005][T15860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 749.358792][T15860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 749.383565][T15860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 749.411164][T15252] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 749.432177][T15252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 749.463593][T16067] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3912'. [ 749.473412][T16070] FAULT_INJECTION: forcing a failure. [ 749.473412][T16070] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 749.509184][T16070] CPU: 1 PID: 16070 Comm: syz.2.3913 Not tainted syzkaller #0 [ 749.516760][T16070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 749.526911][T16070] Call Trace: [ 749.530334][T16070] [ 749.533396][T16070] dump_stack_lvl+0x188/0x24e [ 749.538153][T16070] ? show_regs_print_info+0x12/0x12 [ 749.543503][T16070] ? load_image+0x400/0x400 [ 749.548070][T16070] ? __might_fault+0xa6/0x120 [ 749.552911][T16070] should_fail_ex+0x399/0x4d0 [ 749.557745][T16070] copyin+0x1b/0x120 [ 749.561828][T16070] _copy_from_iter+0x447/0x1130 [ 749.566801][T16070] ? copyout_mc+0x110/0x110 [ 749.571380][T16070] ? __virt_addr_valid+0x188/0x540 [ 749.576581][T16070] ? __virt_addr_valid+0x188/0x540 [ 749.581777][T16070] ? __virt_addr_valid+0x465/0x540 [ 749.586982][T16070] ? __check_object_size+0x500/0xa40 [ 749.592338][T16070] netlink_sendmsg+0x755/0xbd0 [ 749.597170][T16070] ? netlink_getsockopt+0x550/0x550 [ 749.602455][T16070] ? aa_sock_msg_perm+0x94/0x150 [ 749.607446][T16070] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 749.612773][T16070] ? security_socket_sendmsg+0x7c/0xa0 [ 749.618288][T16070] ? netlink_getsockopt+0x550/0x550 [ 749.623542][T16070] ____sys_sendmsg+0x5be/0x970 [ 749.628392][T16070] ? __sys_sendmsg_sock+0x30/0x30 [ 749.633488][T16070] ? __import_iovec+0x315/0x500 [ 749.638408][T16070] ? import_iovec+0x6f/0xa0 [ 749.643047][T16070] ___sys_sendmsg+0x2a2/0x360 [ 749.647806][T16070] ? __sys_sendmsg+0x290/0x290 [ 749.652633][T16070] ? __lock_acquire+0x7d10/0x7d10 [ 749.657803][T16070] __se_sys_sendmsg+0x1bb/0x2a0 [ 749.662785][T16070] ? __x64_sys_sendmsg+0x80/0x80 [ 749.667806][T16070] ? lockdep_hardirqs_on+0x94/0x140 [ 749.673049][T16070] do_syscall_64+0x4c/0xa0 [ 749.677666][T16070] ? clear_bhb_loop+0x60/0xb0 [ 749.682400][T16070] ? clear_bhb_loop+0x60/0xb0 [ 749.687388][T16070] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 749.693355][T16070] RIP: 0033:0x7f4bb279c819 [ 749.697810][T16070] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 749.717824][T16070] RSP: 002b:00007f4bb3688028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 749.726458][T16070] RAX: ffffffffffffffda RBX: 00007f4bb2a15fa0 RCX: 00007f4bb279c819 [ 749.734463][T16070] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 749.742470][T16070] RBP: 00007f4bb3688090 R08: 0000000000000000 R09: 0000000000000000 [ 749.750671][T16070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 749.758679][T16070] R13: 00007f4bb2a16038 R14: 00007f4bb2a15fa0 R15: 00007ffe6f6e5f48 [ 749.767167][T16070] [ 749.772366][T16067] device hsr_slave_0 left promiscuous mode [ 749.818729][T16067] device hsr_slave_1 left promiscuous mode [ 750.068598][T15860] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 750.087613][T15860] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 750.107245][T15860] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 750.144603][T15860] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 750.419228][T15245] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 750.427145][T15245] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 750.510079][T15237] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 750.534066][T15245] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 750.543530][T15245] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 750.553569][T15252] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 751.250276][T16108] netlink: 'syz.4.3927': attribute type 21 has an invalid length. [ 751.298039][T16108] netlink: 'syz.4.3927': attribute type 1 has an invalid length. [ 751.388609][T16109] netlink: 'syz.4.3927': attribute type 21 has an invalid length. [ 751.409224][T16109] netlink: 'syz.4.3927': attribute type 1 has an invalid length. [ 752.906274][T16148] netlink: 'syz.2.3939': attribute type 2 has an invalid length. [ 753.000559][T16148] device 0 entered promiscuous mode [ 755.024944][T16210] FAULT_INJECTION: forcing a failure. [ 755.024944][T16210] name failslab, interval 1, probability 0, space 0, times 0 [ 755.079412][T16210] CPU: 0 PID: 16210 Comm: syz.1.3962 Not tainted syzkaller #0 [ 755.086977][T16210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 755.097076][T16210] Call Trace: [ 755.100383][T16210] [ 755.103437][T16210] dump_stack_lvl+0x188/0x24e [ 755.108339][T16210] ? show_regs_print_info+0x12/0x12 [ 755.113604][T16210] ? load_image+0x400/0x400 [ 755.118152][T16210] ? __might_sleep+0xd0/0xd0 [ 755.122887][T16210] ? __lock_acquire+0x7d10/0x7d10 [ 755.128032][T16210] should_fail_ex+0x399/0x4d0 [ 755.132872][T16210] should_failslab+0x5/0x20 [ 755.137411][T16210] slab_pre_alloc_hook+0x59/0x310 [ 755.142487][T16210] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 755.148249][T16210] __kmem_cache_alloc_node+0x4f/0x260 [ 755.153695][T16210] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 755.159500][T16210] __kmalloc+0xa0/0x240 [ 755.163713][T16210] tomoyo_realpath_from_path+0xdf/0x5d0 [ 755.169318][T16210] ? tomoyo_path_number_perm+0x205/0x650 [ 755.175014][T16210] tomoyo_path_number_perm+0x22f/0x650 [ 755.180522][T16210] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 755.186012][T16210] ? ksys_write+0x1c0/0x250 [ 755.190548][T16210] ? common_file_perm+0x171/0x1c0 [ 755.195714][T16210] ? __fget_files+0x28/0x4b0 [ 755.200351][T16210] ? __fget_files+0x28/0x4b0 [ 755.204984][T16210] security_file_ioctl+0x6c/0xa0 [ 755.209961][T16210] __se_sys_ioctl+0x48/0x170 [ 755.214601][T16210] do_syscall_64+0x4c/0xa0 [ 755.219060][T16210] ? clear_bhb_loop+0x60/0xb0 [ 755.223787][T16210] ? clear_bhb_loop+0x60/0xb0 [ 755.228515][T16210] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 755.234534][T16210] RIP: 0033:0x7f32b259c819 [ 755.238983][T16210] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 755.258631][T16210] RSP: 002b:00007f32b3415028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 755.267263][T16210] RAX: ffffffffffffffda RBX: 00007f32b2816090 RCX: 00007f32b259c819 [ 755.275798][T16210] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 000000000000002a [ 755.283812][T16210] RBP: 00007f32b3415090 R08: 0000000000000000 R09: 0000000000000000 [ 755.291812][T16210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 755.299979][T16210] R13: 00007f32b2816128 R14: 00007f32b2816090 R15: 00007ffd2daa8528 [ 755.308111][T16210] [ 755.339411][T16210] ERROR: Out of memory at tomoyo_realpath_from_path. [ 756.292095][T16251] netlink: 'syz.2.3977': attribute type 10 has an invalid length. [ 756.357825][T16251] bond0: (slave bond_slave_0): Releasing backup interface [ 756.710910][T16265] FAULT_INJECTION: forcing a failure. [ 756.710910][T16265] name failslab, interval 1, probability 0, space 0, times 0 [ 756.740992][T16265] CPU: 1 PID: 16265 Comm: syz.5.3982 Not tainted syzkaller #0 [ 756.748560][T16265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 756.758663][T16265] Call Trace: [ 756.761984][T16265] [ 756.764967][T16265] dump_stack_lvl+0x188/0x24e [ 756.769724][T16265] ? show_regs_print_info+0x12/0x12 [ 756.774996][T16265] ? load_image+0x400/0x400 [ 756.779570][T16265] ? __lock_acquire+0x7d10/0x7d10 [ 756.784657][T16265] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 756.790717][T16265] should_fail_ex+0x399/0x4d0 [ 756.795454][T16265] should_failslab+0x5/0x20 [ 756.800016][T16265] slab_pre_alloc_hook+0x59/0x310 [ 756.805113][T16265] ? bpf_test_init+0x9f/0x140 [ 756.809859][T16265] __kmem_cache_alloc_node+0x4f/0x260 [ 756.815335][T16265] ? bpf_test_init+0x9f/0x140 [ 756.820083][T16265] __kmalloc+0xa0/0x240 [ 756.824307][T16265] bpf_test_init+0x9f/0x140 [ 756.828872][T16265] bpf_prog_test_run_xdp+0x484/0xf10 [ 756.834233][T16265] ? dev_put+0x80/0x80 [ 756.838362][T16265] ? dev_put+0x80/0x80 [ 756.842483][T16265] bpf_prog_test_run+0x31e/0x390 [ 756.847499][T16265] __sys_bpf+0x62b/0x780 [ 756.851800][T16265] ? bpf_link_show_fdinfo+0x380/0x380 [ 756.857249][T16265] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 756.863470][T16265] __x64_sys_bpf+0x78/0x90 [ 756.867941][T16265] do_syscall_64+0x4c/0xa0 [ 756.872419][T16265] ? clear_bhb_loop+0x60/0xb0 [ 756.877158][T16265] ? clear_bhb_loop+0x60/0xb0 [ 756.881891][T16265] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 756.887843][T16265] RIP: 0033:0x7fab5619c819 [ 756.892305][T16265] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 756.912053][T16265] RSP: 002b:00007fab570eb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 756.920556][T16265] RAX: ffffffffffffffda RBX: 00007fab56415fa0 RCX: 00007fab5619c819 [ 756.928600][T16265] RDX: 0000000000000050 RSI: 0000200000000540 RDI: 000000000000000a [ 756.936730][T16265] RBP: 00007fab570eb090 R08: 0000000000000000 R09: 0000000000000000 [ 756.944748][T16265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 756.952762][T16265] R13: 00007fab56416038 R14: 00007fab56415fa0 R15: 00007ffdc0931148 [ 756.960805][T16265] [ 758.031272][T16277] netlink: 65027 bytes leftover after parsing attributes in process `syz.5.3987'. [ 758.931665][T16315] device wlan1 entered promiscuous mode [ 759.939226][T16330] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.4001'. [ 762.514886][T16392] netlink: 'syz.4.4023': attribute type 10 has an invalid length. [ 763.632477][T16392] team0: Port device geneve1 added [ 763.855741][T16408] -1: renamed from syzkaller0 [ 764.574363][T16433] netlink: 'syz.2.4037': attribute type 4 has an invalid length. [ 764.609432][T16433] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4037'. [ 764.712423][T16433] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 764.899102][T12849] Bluetooth: hci0: command 0x0406 tx timeout [ 766.581254][T16464] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.4049'. [ 766.987944][T16463] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.4046'. [ 768.190300][T16497] netlink: 463 bytes leftover after parsing attributes in process `syz.3.4059'. [ 770.337338][T16590] netlink: 'syz.5.4069': attribute type 27 has an invalid length. [ 770.371574][T16590] netlink: 164 bytes leftover after parsing attributes in process `syz.5.4069'. [ 770.908429][T16603] netlink: 165860 bytes leftover after parsing attributes in process `syz.3.4074'. [ 771.722999][T16618] netlink: 1047 bytes leftover after parsing attributes in process `syz.5.4079'. [ 772.040956][T16616] delete_channel: no stack [ 773.082698][T16650] netlink: 'syz.3.4092': attribute type 17 has an invalid length. [ 773.872972][T16676] netlink: 184 bytes leftover after parsing attributes in process `syz.2.4104'. [ 774.010314][T16680] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.4104'. [ 775.156088][T16710] FAULT_INJECTION: forcing a failure. [ 775.156088][T16710] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 775.169683][T16710] CPU: 1 PID: 16710 Comm: syz.2.4114 Not tainted syzkaller #0 [ 775.177207][T16710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 775.187594][T16710] Call Trace: [ 775.190929][T16710] [ 775.193902][T16710] dump_stack_lvl+0x188/0x24e [ 775.198922][T16710] ? show_regs_print_info+0x12/0x12 [ 775.204326][T16710] ? load_image+0x400/0x400 [ 775.208902][T16710] ? __lock_acquire+0x7d10/0x7d10 [ 775.213998][T16710] should_fail_ex+0x399/0x4d0 [ 775.218735][T16710] _copy_from_user+0x2c/0x170 [ 775.223738][T16710] __sys_bpf+0x2ea/0x780 [ 775.228050][T16710] ? bpf_link_show_fdinfo+0x380/0x380 [ 775.233545][T16710] ? lock_chain_count+0x20/0x20 [ 775.238481][T16710] __x64_sys_bpf+0x78/0x90 [ 775.242965][T16710] do_syscall_64+0x4c/0xa0 [ 775.247552][T16710] ? clear_bhb_loop+0x60/0xb0 [ 775.252280][T16710] ? clear_bhb_loop+0x60/0xb0 [ 775.257006][T16710] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 775.263042][T16710] RIP: 0033:0x7f4bb279c819 [ 775.267518][T16710] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 775.287165][T16710] RSP: 002b:00007f4bb3667028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 775.295707][T16710] RAX: ffffffffffffffda RBX: 00007f4bb2a16090 RCX: 00007f4bb279c819 [ 775.303734][T16710] RDX: 0000000000000048 RSI: 000020000000e000 RDI: 0000000000000005 [ 775.311738][T16710] RBP: 00007f4bb3667090 R08: 0000000000000000 R09: 0000000000000000 [ 775.319826][T16710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 775.327832][T16710] R13: 00007f4bb2a16128 R14: 00007f4bb2a16090 R15: 00007ffe6f6e5f48 [ 775.336196][T16710] [ 776.828378][T16721] device syzkaller0 entered promiscuous mode [ 776.883560][T16725] netlink: 56863 bytes leftover after parsing attributes in process `syz.1.4119'. [ 777.535733][T16750] netlink: 'syz.1.4130': attribute type 2 has an invalid length. [ 777.544132][T16750] netlink: 'syz.1.4130': attribute type 1 has an invalid length. [ 777.566989][T16750] netlink: 170140 bytes leftover after parsing attributes in process `syz.1.4130'. [ 780.678920][T16778] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4141'. [ 781.558148][T16795] device wlan1 entered promiscuous mode [ 781.611482][T16802] netlink: 'syz.2.4149': attribute type 2 has an invalid length. [ 781.645387][T16802] netlink: 'syz.2.4149': attribute type 1 has an invalid length. [ 781.720736][T16802] netlink: 170140 bytes leftover after parsing attributes in process `syz.2.4149'. [ 783.691557][T16835] netlink: 'syz.2.4161': attribute type 3 has an invalid length. [ 783.718931][T16835] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4161'. [ 784.874665][T16865] delete_channel: no stack [ 785.657187][T16880] netlink: 14546 bytes leftover after parsing attributes in process `syz.2.4176'. [ 786.140481][T16898] netlink: 'syz.2.4183': attribute type 10 has an invalid length. [ 786.164940][T16898] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4183'. [ 786.283965][T16898] team0: Port device geneve0 added [ 786.389268][T16904] netlink: 'syz.2.4183': attribute type 19 has an invalid length. [ 786.397238][T16904] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4183'. [ 788.904014][T16963] netlink: 'syz.1.4204': attribute type 39 has an invalid length. [ 790.601080][T17012] netlink: 'syz.3.4225': attribute type 10 has an invalid length. [ 790.633887][T17012] netlink: 2 bytes leftover after parsing attributes in process `syz.3.4225'. [ 790.685635][T17012] device batadv_slave_1 entered promiscuous mode [ 790.711338][T17012] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 790.729689][T17012] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 791.141946][T17025] netlink: 'syz.1.4229': attribute type 1 has an invalid length. [ 791.199406][T17025] netlink: 'syz.1.4229': attribute type 3 has an invalid length. [ 791.208497][T17025] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4229'. [ 791.568297][T17044] netlink: 4083 bytes leftover after parsing attributes in process `syz.5.4234'. [ 791.784863][T17053] device lo entered promiscuous mode [ 792.120707][T17068] syz.2.4244[17068] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 792.121321][T17068] syz.2.4244[17068] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 792.831869][T17081] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4249'. [ 792.924699][T17089] netlink: 'syz.5.4252': attribute type 21 has an invalid length. [ 792.963446][T17089] netlink: 156 bytes leftover after parsing attributes in process `syz.5.4252'. [ 793.294985][T17107] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4259'. [ 794.015144][T17118] netlink: 'syz.4.4264': attribute type 1 has an invalid length. [ 794.039616][T17118] netlink: 112865 bytes leftover after parsing attributes in process `syz.4.4264'. [ 794.056070][T17118] netlink: 'syz.4.4264': attribute type 4 has an invalid length. [ 794.314557][T17135] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4270'. [ 795.449269][T12849] Bluetooth: hci5: command 0x0406 tx timeout [ 795.746366][T17149] netlink: 'syz.1.4277': attribute type 1 has an invalid length. [ 795.782065][T17149] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.4277'. [ 796.568524][T17186] device bridge_slave_1 left promiscuous mode [ 796.616647][T17186] bridge0: port 2(bridge_slave_1) entered disabled state [ 799.536581][T17186] device bridge_slave_0 left promiscuous mode [ 799.551686][T17186] bridge0: port 1(bridge_slave_0) entered disabled state [ 801.072645][T17237] netlink: 164 bytes leftover after parsing attributes in process `syz.5.4303'. [ 801.109225][T17242] netlink: 'syz.2.4306': attribute type 33 has an invalid length. [ 801.149261][T17242] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4306'. [ 801.992000][T17246] netlink: 'syz.2.4309': attribute type 10 has an invalid length. [ 802.026674][T17246] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4309'. [ 803.129646][T17280] netlink: 'syz.3.4321': attribute type 9 has an invalid length. [ 803.138383][T17280] netlink: 61951 bytes leftover after parsing attributes in process `syz.3.4321'. [ 803.407063][T17287] netlink: 22 bytes leftover after parsing attributes in process `syz.4.4324'. [ 804.351091][T17316] netlink: 'syz.2.4333': attribute type 10 has an invalid length. [ 804.583838][T17316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 804.702901][T17316] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 804.736659][T17327] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4337'. [ 805.163098][T17330] netlink: 'syz.1.4340': attribute type 9 has an invalid length. [ 805.201469][T17330] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.4340'. [ 805.249949][T17338] netlink: 'syz.1.4340': attribute type 2 has an invalid length. [ 805.289560][T17338] netlink: 10 bytes leftover after parsing attributes in process `syz.1.4340'. [ 806.764179][T17370] netlink: 126588 bytes leftover after parsing attributes in process `syz.5.4353'. [ 806.840928][T17370] netlink: 1034 bytes leftover after parsing attributes in process `syz.5.4353'. [ 806.910136][T17373] bridge0: port 2(bridge_slave_1) entered disabled state [ 806.919403][T17373] bridge0: port 1(bridge_slave_0) entered disabled state [ 807.320685][T17388] netlink: 'syz.3.4361': attribute type 15 has an invalid length. [ 807.393646][T17388] netlink: 'syz.3.4361': attribute type 5 has an invalid length. [ 807.412178][T17388] netlink: 144 bytes leftover after parsing attributes in process `syz.3.4361'. [ 807.466910][T17393] netlink: 'syz.3.4361': attribute type 15 has an invalid length. [ 807.499908][T17393] netlink: 'syz.3.4361': attribute type 5 has an invalid length. [ 807.548965][T17393] netlink: 144 bytes leftover after parsing attributes in process `syz.3.4361'. [ 808.287205][T17413] netlink: 'syz.3.4369': attribute type 2 has an invalid length. [ 808.308976][T17413] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4369'. [ 808.763597][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.770190][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.116675][T17445] netlink: 'syz.3.4380': attribute type 17 has an invalid length. [ 810.167762][T17445] netlink: 'syz.3.4380': attribute type 41 has an invalid length. [ 810.215235][T17445] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4380'. [ 810.975361][T17467] netlink: 194236 bytes leftover after parsing attributes in process `syz.2.4388'. [ 811.036965][T17467] netlink: zone id is out of range [ 811.059527][T17467] netlink: get zone limit has 8 unknown bytes [ 811.109651][T17471] netlink: 'syz.1.4389': attribute type 10 has an invalid length. [ 812.521136][T17500] FAULT_INJECTION: forcing a failure. [ 812.521136][T17500] name failslab, interval 1, probability 0, space 0, times 0 [ 812.577506][T17500] CPU: 1 PID: 17500 Comm: syz.1.4399 Not tainted syzkaller #0 [ 812.585171][T17500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 812.595320][T17500] Call Trace: [ 812.598647][T17500] [ 812.601656][T17500] dump_stack_lvl+0x188/0x24e [ 812.606426][T17500] ? show_regs_print_info+0x12/0x12 [ 812.611792][T17500] ? load_image+0x400/0x400 [ 812.616378][T17500] ? verify_lock_unused+0x140/0x140 [ 812.621656][T17500] should_fail_ex+0x399/0x4d0 [ 812.626753][T17500] should_failslab+0x5/0x20 [ 812.631310][T17500] slab_pre_alloc_hook+0x59/0x310 [ 812.636406][T17500] kmem_cache_alloc+0x56/0x2f0 [ 812.641244][T17500] ? skb_clone+0x1e7/0x370 [ 812.645831][T17500] skb_clone+0x1e7/0x370 [ 812.650152][T17500] __netlink_deliver_tap+0x3ed/0x800 [ 812.655526][T17500] ? netlink_deliver_tap+0x2e/0x1b0 [ 812.660794][T17500] netlink_deliver_tap+0x19c/0x1b0 [ 812.666064][T17500] netlink_unicast+0x728/0x8d0 [ 812.671014][T17500] netlink_sendmsg+0x8ad/0xbd0 [ 812.676131][T17500] ? netlink_getsockopt+0x550/0x550 [ 812.681406][T17500] ? aa_sock_msg_perm+0x94/0x150 [ 812.686410][T17500] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 812.691799][T17500] ? security_socket_sendmsg+0x7c/0xa0 [ 812.697332][T17500] ? netlink_getsockopt+0x550/0x550 [ 812.702617][T17500] ____sys_sendmsg+0x5be/0x970 [ 812.707548][T17500] ? __sys_sendmsg_sock+0x30/0x30 [ 812.712628][T17500] ? __import_iovec+0x315/0x500 [ 812.717544][T17500] ? import_iovec+0x6f/0xa0 [ 812.722140][T17500] ___sys_sendmsg+0x2a2/0x360 [ 812.726888][T17500] ? __sys_sendmsg+0x290/0x290 [ 812.731729][T17500] ? __lock_acquire+0x7d10/0x7d10 [ 812.736912][T17500] __se_sys_sendmsg+0x1bb/0x2a0 [ 812.741850][T17500] ? __x64_sys_sendmsg+0x80/0x80 [ 812.746875][T17500] ? lockdep_hardirqs_on+0x94/0x140 [ 812.752136][T17500] do_syscall_64+0x4c/0xa0 [ 812.756617][T17500] ? clear_bhb_loop+0x60/0xb0 [ 812.761367][T17500] ? clear_bhb_loop+0x60/0xb0 [ 812.766104][T17500] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 812.772057][T17500] RIP: 0033:0x7f32b259c819 [ 812.776699][T17500] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 812.796351][T17500] RSP: 002b:00007f32b3436028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 812.804889][T17500] RAX: ffffffffffffffda RBX: 00007f32b2815fa0 RCX: 00007f32b259c819 [ 812.812951][T17500] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 812.820971][T17500] RBP: 00007f32b3436090 R08: 0000000000000000 R09: 0000000000000000 [ 812.828991][T17500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 812.837132][T17500] R13: 00007f32b2816038 R14: 00007f32b2815fa0 R15: 00007ffd2daa8528 [ 812.845184][T17500] [ 812.869381][T17500] netlink: 'syz.1.4399': attribute type 10 has an invalid length. [ 812.890213][T17500] bridge0: port 2(bridge_slave_1) entered blocking state [ 812.897547][T17500] bridge0: port 2(bridge_slave_1) entered forwarding state [ 812.905270][T17500] bridge0: port 1(bridge_slave_0) entered blocking state [ 812.912495][T17500] bridge0: port 1(bridge_slave_0) entered forwarding state [ 813.073059][T17500] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 816.181370][T17560] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 816.282278][T17560] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 816.291613][T17560] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 816.300843][T17560] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 816.310054][T17560] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 816.319239][T17560] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 816.328411][T17560] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 816.337648][T17560] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 816.346947][T17560] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 816.356267][T17560] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 819.655838][T17619] FAULT_INJECTION: forcing a failure. [ 819.655838][T17619] name failslab, interval 1, probability 0, space 0, times 0 [ 819.672589][T17619] CPU: 1 PID: 17619 Comm: syz.4.4441 Not tainted syzkaller #0 [ 819.680144][T17619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 819.690256][T17619] Call Trace: [ 819.693591][T17619] [ 819.696565][T17619] dump_stack_lvl+0x188/0x24e [ 819.701313][T17619] ? show_regs_print_info+0x12/0x12 [ 819.707025][T17619] ? load_image+0x400/0x400 [ 819.711595][T17619] ? __might_sleep+0xd0/0xd0 [ 819.716240][T17619] ? __lock_acquire+0x7d10/0x7d10 [ 819.721569][T17619] should_fail_ex+0x399/0x4d0 [ 819.726318][T17619] should_failslab+0x5/0x20 [ 819.730877][T17619] slab_pre_alloc_hook+0x59/0x310 [ 819.735961][T17619] ? tomoyo_encode+0x27e/0x540 [ 819.740795][T17619] __kmem_cache_alloc_node+0x4f/0x260 [ 819.746233][T17619] ? tomoyo_encode+0x27e/0x540 [ 819.751037][T17619] __kmalloc+0xa0/0x240 [ 819.755243][T17619] tomoyo_encode+0x27e/0x540 [ 819.759871][T17619] tomoyo_realpath_from_path+0x58e/0x5d0 [ 819.765572][T17619] ? tomoyo_path_number_perm+0x205/0x650 [ 819.771281][T17619] tomoyo_path_number_perm+0x22f/0x650 [ 819.776808][T17619] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 819.782406][T17619] ? trace_call_bpf+0xbf/0x6b0 [ 819.787240][T17619] ? trace_call_bpf+0xbf/0x6b0 [ 819.792051][T17619] ? trace_call_bpf+0x5d6/0x6b0 [ 819.796972][T17619] ? __fget_files+0x28/0x4b0 [ 819.801649][T17619] ? __fget_files+0x28/0x4b0 [ 819.806298][T17619] security_file_ioctl+0x6c/0xa0 [ 819.811288][T17619] __se_sys_ioctl+0x48/0x170 [ 819.815930][T17619] do_syscall_64+0x4c/0xa0 [ 819.820385][T17619] ? clear_bhb_loop+0x60/0xb0 [ 819.825120][T17619] ? clear_bhb_loop+0x60/0xb0 [ 819.829857][T17619] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 819.835909][T17619] RIP: 0033:0x7f45df59c819 [ 819.840456][T17619] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 819.860288][T17619] RSP: 002b:00007f45e04a9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 819.868830][T17619] RAX: ffffffffffffffda RBX: 00007f45df815fa0 RCX: 00007f45df59c819 [ 819.876869][T17619] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 000000000000002a [ 819.884902][T17619] RBP: 00007f45e04a9090 R08: 0000000000000000 R09: 0000000000000000 [ 819.892919][T17619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 819.900929][T17619] R13: 00007f45df816038 R14: 00007f45df815fa0 R15: 00007fffba6ac3c8 [ 819.908958][T17619] [ 820.073564][T17619] ERROR: Out of memory at tomoyo_realpath_from_path. [ 820.327938][T17638] netlink: 121408 bytes leftover after parsing attributes in process `syz.1.4445'. [ 820.360876][T17639] netlink: 121408 bytes leftover after parsing attributes in process `syz.1.4445'. [ 821.299136][T17669] FAULT_INJECTION: forcing a failure. [ 821.299136][T17669] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 821.371147][T17669] CPU: 0 PID: 17669 Comm: syz.3.4455 Not tainted syzkaller #0 [ 821.377774][T17665] netlink: 'syz.4.4452': attribute type 10 has an invalid length. [ 821.378709][T17669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 821.378728][T17669] Call Trace: [ 821.378738][T17669] [ 821.378749][T17669] dump_stack_lvl+0x188/0x24e [ 821.378796][T17669] ? show_regs_print_info+0x12/0x12 [ 821.378833][T17669] ? load_image+0x400/0x400 [ 821.378866][T17669] ? __lock_acquire+0x7d10/0x7d10 [ 821.378911][T17669] should_fail_ex+0x399/0x4d0 [ 821.378953][T17669] _copy_from_user+0x2c/0x170 [ 821.432804][T17669] ___sys_sendmsg+0x1c3/0x360 [ 821.437543][T17669] ? __sys_sendmsg+0x290/0x290 [ 821.442463][T17669] ? trace_call_bpf+0xbf/0x6b0 [ 821.447746][T17669] __se_sys_sendmsg+0x1bb/0x2a0 [ 821.452650][T17669] ? __x64_sys_sendmsg+0x80/0x80 [ 821.457652][T17669] ? lockdep_hardirqs_on+0x94/0x140 [ 821.462892][T17669] do_syscall_64+0x4c/0xa0 [ 821.467434][T17669] ? clear_bhb_loop+0x60/0xb0 [ 821.472155][T17669] ? clear_bhb_loop+0x60/0xb0 [ 821.476895][T17669] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 821.482847][T17669] RIP: 0033:0x7f3c8e59c819 [ 821.487309][T17669] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 821.506959][T17669] RSP: 002b:00007f3c8f463028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 821.515578][T17669] RAX: ffffffffffffffda RBX: 00007f3c8e815fa0 RCX: 00007f3c8e59c819 [ 821.523664][T17669] RDX: 0000000000000000 RSI: 0000200000003780 RDI: 0000000000000007 [ 821.531663][T17669] RBP: 00007f3c8f463090 R08: 0000000000000000 R09: 0000000000000000 [ 821.539664][T17669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 821.547663][T17669] R13: 00007f3c8e816038 R14: 00007f3c8e815fa0 R15: 00007ffd89a47168 [ 821.555941][T17669] [ 821.882122][T17665] device bridge_slave_1 left promiscuous mode [ 821.893067][T17665] bridge0: port 2(bridge_slave_1) entered disabled state [ 822.011126][T17665] team0: Port device bridge_slave_1 added [ 822.168910][T17680] netlink: 'syz.1.4457': attribute type 3 has an invalid length. [ 822.192869][T17680] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4457'. [ 822.207260][T17684] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4459'. [ 822.375218][T17687] FAULT_INJECTION: forcing a failure. [ 822.375218][T17687] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 822.433527][T17687] CPU: 1 PID: 17687 Comm: syz.4.4460 Not tainted syzkaller #0 [ 822.441075][T17687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 822.451270][T17687] Call Trace: [ 822.454579][T17687] [ 822.457534][T17687] dump_stack_lvl+0x188/0x24e [ 822.462253][T17687] ? show_regs_print_info+0x12/0x12 [ 822.467488][T17687] ? load_image+0x400/0x400 [ 822.472034][T17687] ? __lock_acquire+0x7d10/0x7d10 [ 822.477109][T17687] should_fail_ex+0x399/0x4d0 [ 822.481826][T17687] _copy_from_user+0x2c/0x170 [ 822.486540][T17687] kstrtouint_from_user+0xda/0x170 [ 822.491727][T17687] ? kstrtol_from_user+0x190/0x190 [ 822.496937][T17687] proc_fail_nth_write+0x8b/0x200 [ 822.501996][T17687] ? proc_fail_nth_read+0x220/0x220 [ 822.507219][T17687] ? common_file_perm+0x171/0x1c0 [ 822.512283][T17687] ? proc_fail_nth_read+0x220/0x220 [ 822.517511][T17687] vfs_write+0x2e6/0xa30 [ 822.521807][T17687] ? file_end_write+0x250/0x250 [ 822.526788][T17687] ? __fget_files+0x28/0x4b0 [ 822.531420][T17687] ? __fget_files+0x28/0x4b0 [ 822.536069][T17687] ? __fget_files+0x43d/0x4b0 [ 822.540791][T17687] ? __fdget_pos+0x2ae/0x360 [ 822.545413][T17687] ? ksys_write+0x71/0x250 [ 822.549868][T17687] ksys_write+0x14c/0x250 [ 822.554239][T17687] ? __ia32_sys_read+0x80/0x80 [ 822.559056][T17687] ? lockdep_hardirqs_on+0x94/0x140 [ 822.564309][T17687] do_syscall_64+0x4c/0xa0 [ 822.568762][T17687] ? clear_bhb_loop+0x60/0xb0 [ 822.573555][T17687] ? clear_bhb_loop+0x60/0xb0 [ 822.578272][T17687] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 822.584230][T17687] RIP: 0033:0x7f45df55d04e [ 822.588692][T17687] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 822.608421][T17687] RSP: 002b:00007f45e0487fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 822.617674][T17687] RAX: ffffffffffffffda RBX: 00007f45e04886c0 RCX: 00007f45df55d04e [ 822.625674][T17687] RDX: 0000000000000001 RSI: 00007f45e04880a0 RDI: 0000000000000007 [ 822.633704][T17687] RBP: 00007f45e0488090 R08: 0000000000000000 R09: 0000000000000000 [ 822.641699][T17687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 822.649709][T17687] R13: 00007f45df816128 R14: 00007f45df816090 R15: 00007fffba6ac3c8 [ 822.657725][T17687] [ 823.755120][T17713] netlink: 'syz.3.4470': attribute type 9 has an invalid length. [ 823.819262][T17713] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.4470'. [ 823.883321][T17714] sctp: [Deprecated]: syz.1.4468 (pid 17714) Use of int in maxseg socket option. [ 823.883321][T17714] Use struct sctp_assoc_value instead [ 824.092190][T17726] sctp: [Deprecated]: syz.5.4471 (pid 17726) Use of struct sctp_assoc_value in delayed_ack socket option. [ 824.092190][T17726] Use struct sctp_sack_info instead [ 824.672072][T17729] netlink: 'syz.2.4472': attribute type 2 has an invalid length. [ 824.831550][T17740] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 824.838905][T17740] IPv6: NLM_F_CREATE should be set when creating new route [ 824.846630][T17740] IPv6: NLM_F_CREATE should be set when creating new route [ 824.854227][T17740] IPv6: NLM_F_CREATE should be set when creating new route [ 824.911507][T17729] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4472'. [ 827.020098][T17759] netlink: 'syz.1.4479': attribute type 20 has an invalid length. [ 827.705003][T17766] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.4479'. [ 827.801089][T17759] netlink: 'syz.1.4479': attribute type 2 has an invalid length. [ 827.885388][T17759] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.4479'. [ 828.405816][T17796] netlink: 61211 bytes leftover after parsing attributes in process `syz.5.4491'. [ 828.610365][T17802] netlink: 'syz.1.4493': attribute type 22 has an invalid length. [ 828.641063][T17802] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4493'. [ 829.883171][T17836] netlink: 'syz.3.4506': attribute type 27 has an invalid length. [ 829.916429][T17836] netlink: 'syz.3.4506': attribute type 3 has an invalid length. [ 829.951026][T17836] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4506'. [ 829.999685][T17839] netlink: 'syz.3.4506': attribute type 10 has an invalid length. [ 830.110528][T17839] team0: Port device geneve1 added [ 830.236171][T17843] netlink: 188 bytes leftover after parsing attributes in process `syz.2.4509'. [ 830.403346][T17847] netlink: 'syz.1.4510': attribute type 4 has an invalid length. [ 830.442256][T17847] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4510'. [ 830.651990][T17847] net_ratelimit: 185 callbacks suppressed [ 830.652012][T17847] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 832.699447][T17879] netlink: 'syz.5.4521': attribute type 2 has an invalid length. [ 835.148650][T17928] netlink: 188 bytes leftover after parsing attributes in process `syz.3.4540'. [ 835.865385][T17950] netlink: 'syz.2.4547': attribute type 1 has an invalid length. [ 835.901707][T17950] netlink: 112865 bytes leftover after parsing attributes in process `syz.2.4547'. [ 835.981802][T17942] delete_channel: no stack [ 836.900638][T17970] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.4553'. [ 840.101028][T18045] IPv6: NLM_F_CREATE should be specified when creating new route [ 840.173445][T18045] netlink: 1 bytes leftover after parsing attributes in process `syz.2.4579'. [ 841.250110][T18065] device syzkaller0 entered promiscuous mode [ 845.488377][T18125] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4609'. [ 845.525446][T18125] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 847.299147][T18163] netlink: 14975 bytes leftover after parsing attributes in process `syz.5.4622'. [ 847.758848][T18182] netlink: 'syz.2.4629': attribute type 10 has an invalid length. [ 847.779837][T18182] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4629'. [ 847.903395][T18188] netlink: 'syz.2.4629': attribute type 19 has an invalid length. [ 847.972879][T18188] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4629'. [ 848.009295][T18189] netlink: 'syz.5.4631': attribute type 21 has an invalid length. [ 848.070460][T18189] netlink: 'syz.5.4631': attribute type 4 has an invalid length. [ 848.109222][T18189] netlink: 152 bytes leftover after parsing attributes in process `syz.5.4631'. [ 848.580300][T18210] netlink: 'syz.5.4636': attribute type 46 has an invalid length. [ 848.830691][T18220] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.4642'. [ 849.152586][T18230] netlink: 'syz.2.4643': attribute type 39 has an invalid length. [ 850.812389][T18250] netlink: 180 bytes leftover after parsing attributes in process `syz.2.4652'. [ 851.684210][T18268] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.4659'. [ 852.349197][T18287] netlink: 'syz.1.4666': attribute type 3 has an invalid length. [ 852.357047][T18287] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4666'. [ 854.686558][T18318] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.4677'. [ 854.697819][T18318] netlink: 6320 bytes leftover after parsing attributes in process `syz.3.4677'. [ 854.709218][T18318] tc_dump_action: action bad kind [ 854.750926][T18319] device lo entered promiscuous mode [ 854.828364][T18319] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 856.005357][T18347] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.4687'. [ 856.088825][T18352] netlink: 'syz.5.4689': attribute type 10 has an invalid length. [ 856.934671][T18352] team0: Device wg1 is of different type [ 856.992705][T18354] netlink: 'syz.3.4690': attribute type 10 has an invalid length. [ 857.479336][T18367] netlink: 'syz.2.4692': attribute type 10 has an invalid length. [ 857.556382][T18367] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4692'. [ 857.669693][T18367] device batadv_slave_1 entered promiscuous mode [ 857.702295][T18367] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 857.750177][T18367] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 857.930090][T18383] netlink: 'syz.4.4700': attribute type 21 has an invalid length. [ 857.938723][T18383] netlink: 'syz.4.4700': attribute type 1 has an invalid length. [ 859.490306][T18419] netlink: 'syz.1.4713': attribute type 1 has an invalid length. [ 859.498539][T18419] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.4713'. [ 860.425610][T18468] netlink: 4595 bytes leftover after parsing attributes in process `syz.5.4728'. [ 860.457274][T18468] netlink: 4595 bytes leftover after parsing attributes in process `syz.5.4728'. [ 860.498449][T18474] netlink: 4595 bytes leftover after parsing attributes in process `syz.5.4728'. [ 863.378944][T18480] netlink: 3 bytes leftover after parsing attributes in process `syz.1.4731'. [ 864.829420][T18514] netlink: 'syz.4.4742': attribute type 33 has an invalid length. [ 864.846954][T18514] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4742'. [ 864.875777][T18515] netlink: 164 bytes leftover after parsing attributes in process `syz.5.4743'. [ 865.146970][T18517] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.4745'. [ 865.601895][T18519] device syzkaller0 entered promiscuous mode [ 866.055276][T18537] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.4759'. [ 867.141065][T12849] Bluetooth: hci1: command 0x0406 tx timeout [ 868.981293][T18549] netlink: 'syz.5.4751': attribute type 10 has an invalid length. [ 868.989469][T18549] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4751'. [ 868.998457][T18549] team0: Device geneve0 is up. Set it down before adding it as a team port [ 869.007964][T18549] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 869.253837][T18561] netlink: 3 bytes leftover after parsing attributes in process `syz.4.4755'. [ 870.175561][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.182108][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.520967][T18584] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.4762'. [ 870.630361][T18586] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.4763'. [ 871.240942][T18605] netlink: 'syz.5.4772': attribute type 29 has an invalid length. [ 871.252816][T18605] netlink: 'syz.5.4772': attribute type 29 has an invalid length. [ 871.262665][T18605] netlink: 'syz.5.4772': attribute type 29 has an invalid length. [ 871.352463][T18608] netlink: 22 bytes leftover after parsing attributes in process `syz.1.4771'. [ 873.689712][T18616] netlink: 3 bytes leftover after parsing attributes in process `syz.3.4773'. [ 874.059361][T18624] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.4776'. [ 876.017335][T18630] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.4777'. [ 876.392925][T18635] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.4778'. [ 876.673312][T18650] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4783'. [ 876.903024][T18655] netlink: 'syz.4.4787': attribute type 2 has an invalid length. [ 876.918610][T18655] netlink: 10 bytes leftover after parsing attributes in process `syz.4.4787'. [ 877.058322][T18663] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.4789'. [ 877.210063][ T28] INFO: task syz.0.3722:15529 blocked for more than 143 seconds. [ 877.237772][ T28] Not tainted syzkaller #0 [ 877.243292][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 877.273597][ T28] task:syz.0.3722 state:D stack:25648 pid:15529 ppid:12848 flags:0x00004002 [ 877.285125][ T28] Call Trace: [ 877.291009][ T28] [ 877.294323][ T28] __schedule+0x11d1/0x40e0 [ 877.299299][ T28] ? __mutex_lock+0x1ab/0xaf0 [ 877.304460][ T28] ? __sched_text_start+0x8/0x8 [ 877.309730][ T28] ? task_work_cancel+0xa1/0x220 [ 877.316617][ T28] ? task_work_cancel_func+0x210/0x210 [ 877.322695][ T28] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 877.328734][ T28] ? _free_event+0xfd/0x10a0 [ 877.334967][ T28] schedule+0xb9/0x180 [ 877.339633][ T28] _free_event+0x171/0x10a0 [ 877.344433][ T28] ? perf_mmap+0x13d0/0x13d0 [ 877.359651][ T28] ? perf_mmap+0x13d0/0x13d0 [ 877.364563][ T28] perf_event_release_kernel+0x83e/0x8d0 [ 877.378614][ T28] ? __might_sleep+0xd0/0xd0 [ 877.388099][ T28] ? calc_timer_values+0x410/0x410 [ 877.402860][ T28] ? perf_mmap+0x13d0/0x13d0 [ 877.408655][ T28] perf_release+0x37/0x40 [ 877.416858][ T28] __fput+0x22c/0x920 [ 877.423332][ T28] task_work_run+0x1d0/0x260 [ 877.428580][ T28] ? task_work_cancel+0x220/0x220 [ 877.435829][ T28] ? do_raw_spin_unlock+0x11d/0x230 [ 877.441925][ T28] do_exit+0x982/0x2480 [ 877.446356][ T28] ? lock_chain_count+0x20/0x20 [ 877.453444][ T28] ? put_task_struct+0x80/0x80 [ 877.458502][ T28] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 877.465662][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 877.472574][ T28] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 877.479666][ T28] do_group_exit+0x217/0x2d0 [ 877.484555][ T28] ? _raw_spin_unlock_irq+0x25/0x40 [ 877.494295][ T28] get_signal+0x1272/0x1350 [ 877.500809][ T28] arch_do_signal_or_restart+0xc4/0x1350 [ 877.506844][ T28] ? __bpf_trace_bpf_trace_printk+0x20/0x20 [ 877.520628][ T28] ? do_futex+0xcf/0x320 [ 877.525142][ T28] ? do_futex+0x310/0x320 [ 877.539429][ T28] ? get_sigframe_size+0x10/0x10 [ 877.547597][ T28] ? perf_trace_run_bpf_submit+0x124/0x1c0 [ 877.562648][ T28] ? exit_to_user_mode_loop+0x3b/0x110 [ 877.568411][ T28] exit_to_user_mode_loop+0x70/0x110 [ 877.577410][ T28] exit_to_user_mode_prepare+0xee/0x180 [ 877.587648][ T28] syscall_exit_to_user_mode+0x16/0x40 [ 877.596427][ T28] do_syscall_64+0x58/0xa0 [ 877.608555][ T28] ? clear_bhb_loop+0x60/0xb0 [ 877.618702][ T28] ? clear_bhb_loop+0x60/0xb0 [ 877.628126][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 877.637137][ T28] RIP: 0033:0x7f8aceb9c819 [ 877.646285][ T28] RSP: 002b:00007f8acf9870e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 877.664466][ T28] RAX: fffffffffffffe00 RBX: 00007f8acee16098 RCX: 00007f8aceb9c819 [ 877.676197][ T28] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f8acee16098 [ 877.688869][ T28] RBP: 00007f8acee16090 R08: 0000000000000000 R09: 0000000000000000 [ 877.703992][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 877.717372][ T28] R13: 00007f8acee16128 R14: 00007ffe0fc85bf0 R15: 00007ffe0fc85cd8 [ 877.733778][ T28] [ 877.737687][ T28] [ 877.737687][ T28] Showing all locks held in the system: [ 877.748074][ T28] 1 lock held by rcu_tasks_kthre/12: [ 877.763131][ T28] #0: ffffffff8cb2df70 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00 [ 877.782432][ T28] 2 locks held by rcu_tasks_trace/13: [ 877.788353][ T28] #0: ffffffff8cb2e790 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00 [ 877.811557][ T28] #1: ffffffff8cb332b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x2ec/0x890 [ 877.838460][ T28] 1 lock held by khungtaskd/28: [ 877.846316][ T28] #0: ffffffff8cb2d5e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 877.865200][ T28] 2 locks held by getty/4034: [ 877.872667][ T28] #0: ffff88802fc16098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 877.888686][ T28] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x429/0x1390 [ 877.906020][ T28] 2 locks held by kworker/u4:7/4338: [ 877.912477][ T28] #0: ffff8880b8f3ab18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x26/0x140 [ 877.933939][ T28] #1: ffffc90004547d00 ((work_completion)(&(&forw_packet_aggr->delayed_work)->work)){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 877.957354][ T28] 2 locks held by kworker/1:0/13681: [ 877.963407][ T28] #0: ffff888017472138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 877.983589][ T28] #1: ffffc90003b67d00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 877.998319][ T28] 2 locks held by kworker/u4:14/15240: [ 878.008317][ T28] #0: ffff888017479138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 878.027642][ T28] #1: ffffc90003657d00 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 878.049344][ T28] 2 locks held by kworker/u4:21/15248: [ 878.055544][ T28] #0: ffff8880b8f3ab18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x26/0x140 [ 878.075945][ T28] #1: ffffffff8cb2d5e0 (rcu_read_lock){....}-{1:2}, at: ___perf_sw_event+0x180/0x6e0 [ 878.086355][ T28] 1 lock held by syz.1.4782/18643: [ 878.099718][ T28] #0: ffffffff8cb826a8 (event_mutex){+.+.}-{3:3}, at: perf_trace_destroy+0x2a/0x140 [ 878.115086][ T28] 1 lock held by syz.3.4785/18654: [ 878.122170][ T28] #0: ffff888055f6dc10 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x90/0x240 [ 878.138813][ T28] 2 locks held by syz.4.4787/18659: [ 878.146341][ T28] #0: ffffffff8cb826a8 (event_mutex){+.+.}-{3:3}, at: perf_trace_destroy+0x2a/0x140 [ 878.166850][ T28] #1: ffffffff8cb332b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3c0/0x890 [ 878.188787][ T28] 1 lock held by syz.5.4789/18662: [ 878.194773][ T28] #0: ffff888071494410 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x90/0x240 [ 878.212889][ T28] 1 lock held by syz.5.4789/18663: [ 878.218929][ T28] 1 lock held by syz.2.4788/18664: [ 878.226054][ T28] #0: ffffffff8cb826a8 (event_mutex){+.+.}-{3:3}, at: perf_trace_destroy+0x2a/0x140 [ 878.242908][ T28] [ 878.245525][ T28] ============================================= [ 878.245525][ T28] [ 878.263537][ T28] NMI backtrace for cpu 1 [ 878.267975][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 878.275315][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 878.285431][ T28] Call Trace: [ 878.288792][ T28] [ 878.291775][ T28] dump_stack_lvl+0x188/0x24e [ 878.296522][ T28] ? ct_irq_enter_irqson+0x170/0x170 [ 878.301860][ T28] ? show_regs_print_info+0x12/0x12 [ 878.307128][ T28] ? load_image+0x400/0x400 [ 878.311706][ T28] ? vprintk_emit+0x59f/0x6a0 [ 878.316469][ T28] ? nmi_cpu_backtrace+0x1cb/0x460 [ 878.321663][ T28] nmi_cpu_backtrace+0x3e6/0x460 [ 878.326738][ T28] ? nmi_trigger_cpumask_backtrace+0x450/0x450 [ 878.332976][ T28] ? _printk+0xda/0x130 [ 878.337198][ T28] ? load_image+0x400/0x400 [ 878.341753][ T28] ? load_image+0x400/0x400 [ 878.346298][ T28] ? nmi_trigger_cpumask_backtrace+0xf3/0x450 [ 878.352585][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 878.358900][ T28] nmi_trigger_cpumask_backtrace+0x1d4/0x450 [ 878.364958][ T28] watchdog+0xeee/0xf30 [ 878.369189][ T28] ? watchdog+0x1ed/0xf30 [ 878.373585][ T28] kthread+0x29d/0x330 [ 878.377727][ T28] ? hungtask_pm_notify+0x40/0x40 [ 878.382811][ T28] ? kthread_blkcg+0xd0/0xd0 [ 878.387719][ T28] ret_from_fork+0x1f/0x30 [ 878.392327][ T28] [ 878.396716][ T28] Sending NMI from CPU 1 to CPUs 0: [ 878.402276][ C0] NMI backtrace for cpu 0 [ 878.402290][ C0] CPU: 0 PID: 18663 Comm: syz.5.4789 Not tainted syzkaller #0 [ 878.402310][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 878.402321][ C0] RIP: 0010:kasan_check_range+0x0/0x290 [ 878.402358][ C0] Code: 48 01 c6 48 89 c7 e8 bf 2c 5b 08 31 c0 c3 0f 0b b8 ea ff ff ff c3 0f 0b b8 ea ff ff ff c3 00 00 cc cc 00 00 cc cc 00 00 cc cc 01 48 85 f6 0f 84 ac 01 00 00 55 41 57 41 56 41 54 53 49 89 f8 [ 878.402374][ C0] RSP: 0018:ffffc900000074e8 EFLAGS: 00000246 [ 878.402391][ C0] RAX: 0000000000000000 RBX: 0000000000000010 RCX: ffffffff813925ba [ 878.402405][ C0] RDX: 0000000000000001 RSI: 0000000000000010 RDI: ffffc90000007638 [ 878.402417][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000004 [ 878.402429][ C0] R10: dffffc0000000000 R11: fffff52000000ec9 R12: 1ffff92000000ebe [ 878.402444][ C0] R13: dffffc0000000000 R14: ffffc90000007638 R15: ffffc9000000761d [ 878.402458][ C0] FS: 00007fab570eb6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 878.402475][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 878.402489][ C0] CR2: 00007fab561e9f00 CR3: 000000002feb1000 CR4: 00000000003506f0 [ 878.402505][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 878.402517][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 878.402529][ C0] Call Trace: [ 878.402535][ C0] [ 878.402541][ C0] memset+0x1e/0x40 [ 878.402561][ C0] unwind_next_frame+0xb8a/0x20b0 [ 878.402590][ C0] ? __netdev_alloc_skb+0x114/0x4f0 [ 878.402621][ C0] ? stack_trace_save+0xf0/0xf0 [ 878.402647][ C0] arch_stack_walk+0x10c/0x140 [ 878.402673][ C0] ? __ieee80211_beacon_get+0xe17/0x1600 [ 878.402699][ C0] stack_trace_save+0xa6/0xf0 [ 878.402723][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 878.402746][ C0] ? kasan_set_track+0x60/0x70 [ 878.402772][ C0] ? kmem_cache_alloc_node+0x14d/0x320 [ 878.402792][ C0] ? __alloc_skb+0xfc/0x7e0 [ 878.402818][ C0] ? __netdev_alloc_skb+0x114/0x4f0 [ 878.402848][ C0] kasan_set_track+0x4b/0x70 [ 878.402872][ C0] ? kasan_set_track+0x4b/0x70 [ 878.402896][ C0] ? __kasan_kmalloc+0x8e/0xa0 [ 878.402921][ C0] ? __kmalloc_node_track_caller+0xae/0x230 [ 878.402958][ C0] ? __alloc_skb+0x22a/0x7e0 [ 878.402982][ C0] ? __netdev_alloc_skb+0x114/0x4f0 [ 878.403042][ C0] ? __kmem_cache_alloc_node+0x140/0x260 [ 878.403064][ C0] __kasan_kmalloc+0x8e/0xa0 [ 878.403090][ C0] ? __netdev_alloc_skb+0x114/0x4f0 [ 878.403116][ C0] __kmalloc_node_track_caller+0xae/0x230 [ 878.403147][ C0] ? __netdev_alloc_skb+0x114/0x4f0 [ 878.403173][ C0] __alloc_skb+0x22a/0x7e0 [ 878.403202][ C0] __netdev_alloc_skb+0x114/0x4f0 [ 878.403230][ C0] ? __alloc_skb+0x7e0/0x7e0 [ 878.403255][ C0] ? hrtimer_interrupt+0x7b7/0x9c0 [ 878.403281][ C0] ? __ieee80211_beacon_get+0x36/0x1600 [ 878.403303][ C0] __ieee80211_beacon_get+0xe17/0x1600 [ 878.403325][ C0] ? __ieee80211_beacon_get+0x36/0x1600 [ 878.403350][ C0] ieee80211_beacon_get_tim+0x63/0x4e0 [ 878.403375][ C0] mac80211_hwsim_beacon_tx+0x21c/0xae0 [ 878.403398][ C0] ? read_lock_is_recursive+0x10/0x10 [ 878.403429][ C0] __iterate_interfaces+0x243/0x500 [ 878.403455][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 878.403476][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x26/0x170 [ 878.403505][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 878.403525][ C0] ieee80211_iterate_active_interfaces_atomic+0xd7/0x170 [ 878.403555][ C0] mac80211_hwsim_beacon+0xb7/0x1b0 [ 878.403586][ C0] __hrtimer_run_queues+0x54a/0xd50 [ 878.403611][ C0] ? hw_scan_work+0xf50/0xf50 [ 878.403643][ C0] ? hrtimer_interrupt+0x9c0/0x9c0 [ 878.403664][ C0] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 878.403695][ C0] hrtimer_run_softirq+0x183/0x2a0 [ 878.403718][ C0] handle_softirqs+0x2a1/0x930 [ 878.403741][ C0] ? do_softirq+0x142/0x210 [ 878.403761][ C0] ? do_softirq+0x210/0x210 [ 878.403783][ C0] do_softirq+0x142/0x210 [ 878.403800][ C0] [ 878.403806][ C0] [ 878.403813][ C0] ? __local_bh_enable_ip+0x1c0/0x1c0 [ 878.403831][ C0] ? lockdep_hardirqs_on_prepare+0x770/0x770 [ 878.403859][ C0] ? __local_bh_enable_ip+0xd7/0x1c0 [ 878.403877][ C0] ? __local_bh_enable_ip+0xd7/0x1c0 [ 878.403894][ C0] ? trace_irq_disable_rcuidle+0xe6/0x140 [ 878.403921][ C0] ? bpf_test_run_xdp_live+0x518/0x1a90 [ 878.403950][ C0] __local_bh_enable_ip+0x180/0x1c0 [ 878.403969][ C0] ? _local_bh_enable+0xa0/0xa0 [ 878.403986][ C0] ? rcu_is_watching+0x18/0xa0 [ 878.404015][ C0] ? netif_receive_skb_list+0xd7/0x4e0 [ 878.404039][ C0] ? bpf_test_run_xdp_live+0x178b/0x1a90 [ 878.404064][ C0] bpf_test_run_xdp_live+0x1834/0x1a90 [ 878.404088][ C0] ? 0xffffffffa0004440 [ 878.404110][ C0] ? bpf_test_run_xdp_live+0x518/0x1a90 [ 878.404135][ C0] ? xdp_convert_md_to_buff+0x330/0x330 [ 878.404176][ C0] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 878.404205][ C0] ? xdp_convert_md_to_buff+0x5b/0x330 [ 878.404229][ C0] bpf_prog_test_run_xdp+0x736/0xf10 [ 878.404260][ C0] ? dev_put+0x80/0x80 [ 878.404287][ C0] ? dev_put+0x80/0x80 [ 878.404308][ C0] bpf_prog_test_run+0x31e/0x390 [ 878.404337][ C0] __sys_bpf+0x62b/0x780 [ 878.404363][ C0] ? bpf_link_show_fdinfo+0x380/0x380 [ 878.404395][ C0] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 878.404430][ C0] __x64_sys_bpf+0x78/0x90 [ 878.404455][ C0] do_syscall_64+0x4c/0xa0 [ 878.404481][ C0] ? clear_bhb_loop+0x60/0xb0 [ 878.404505][ C0] ? clear_bhb_loop+0x60/0xb0 [ 878.404530][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 878.404553][ C0] RIP: 0033:0x7fab5619c819 [ 878.404569][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 878.404585][ C0] RSP: 002b:00007fab570eb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 878.404604][ C0] RAX: ffffffffffffffda RBX: 00007fab56415fa0 RCX: 00007fab5619c819 [ 878.404619][ C0] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 878.404631][ C0] RBP: 00007fab56232c91 R08: 0000000000000000 R09: 0000000000000000 [ 878.404643][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 878.404655][ C0] R13: 00007fab56416038 R14: 00007fab56415fa0 R15: 00007ffdc0931148 [ 878.404677][ C0] [ 879.054711][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 879.061656][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 879.068898][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 879.079106][ T28] Call Trace: [ 879.082435][ T28] [ 879.085403][ T28] dump_stack_lvl+0x188/0x24e [ 879.090140][ T28] ? memcpy+0x3c/0x60 [ 879.094173][ T28] ? show_regs_print_info+0x12/0x12 [ 879.099427][ T28] ? load_image+0x400/0x400 [ 879.104002][ T28] panic+0x2e5/0x730 [ 879.107944][ T28] ? schedule_preempt_disabled+0x20/0x20 [ 879.113660][ T28] ? bpf_jit_dump+0xd0/0xd0 [ 879.118224][ T28] ? __irq_work_queue_local+0x12c/0x190 [ 879.123922][ T28] ? nmi_trigger_cpumask_backtrace+0x35b/0x450 [ 879.130132][ T28] ? nmi_trigger_cpumask_backtrace+0x360/0x450 [ 879.136338][ T28] watchdog+0xf2d/0xf30 [ 879.140582][ T28] ? watchdog+0x1ed/0xf30 [ 879.144995][ T28] kthread+0x29d/0x330 [ 879.149178][ T28] ? hungtask_pm_notify+0x40/0x40 [ 879.154367][ T28] ? kthread_blkcg+0xd0/0xd0 [ 879.159060][ T28] ret_from_fork+0x1f/0x30 [ 879.163550][ T28] [ 879.167196][ T28] Kernel Offset: disabled [ 879.171713][ T28] Rebooting in 86400 seconds..