last executing test programs: 2m48.378439538s ago: executing program 1 (id=1476): r0 = socket$kcm(0x18, 0x7, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x2a, 0x5, 0xfffffffc, &(0x7f0000000000)) close(0xffffffffffffffff) r1 = socket$kcm(0x15, 0x5, 0x0) sendmsg$inet(r1, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x4000000) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000f0400000000005f"], 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r2, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x4, &(0x7f0000000180)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x20}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000440)="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", 0x155}], 0x1}, 0x0) r4 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f00000017c0)={&(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000000540), 0x0, &(0x7f0000000580)=[{0x18, 0x84, 0x0, "7f"}], 0x18}, 0x80c4) 2m48.050568413s ago: executing program 1 (id=1479): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x3f, &(0x7f0000000600), 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x4002, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x7}, 0x4046, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x42c100, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30080, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x11245, 0x0, 0x4, 0x5, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x5f21df7aec8d40fb, 0x0, 0x0, 0x5}, 0x0, 0x0, r3, 0x0) perf_event_open(0x0, 0x0, 0x40000000000000, r3, 0x0) close(0x3) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'lo\x00'}) socketpair(0x1, 0x1, 0x1, &(0x7f0000000000)) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r4, 0xc008240a, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8b1b, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00\\ \x00'}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="05ae240ef1717f00000001000000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRESDEC=r2, @ANYRES32], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r5, &(0x7f0000000180), &(0x7f0000000280)=""/223}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) setsockopt$sock_attach_bpf(r6, 0x84, 0x2, &(0x7f0000000000), 0x8) 2m47.777392338s ago: executing program 1 (id=1483): r0 = getpid() r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, r0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x4110, 0x0, 0x0, 0x5, 0x0, 0x9}, 0x0, 0x0, r1, 0x0) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) syz_clone(0x41980100, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89e0, 0x0) perf_event_open(&(0x7f0000000280)={0x3, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x200, 0x220, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x0, 0xb, &(0x7f00000000c0)=@framed={{0x18, 0x8}, [@printk={@ld}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x18}, 0x18) r3 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x29, 0x23, &(0x7f0000000040), 0xcf) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x3) 2m46.720590514s ago: executing program 1 (id=1488): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x1, 0x0, 0x3}, {0x0, 0x3, 0x8}, {0x0, 0x4, 0x10007, 0x8}], 0x10, 0x0, @void, @value}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f90324fc60100005000a000200053582c137153e37000c", 0x26}], 0x1}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001080)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r1, 0x18000000000002a0, 0x10, 0x0, &(0x7f00000003c0)="76389e147583ddd0569ba56a5cfd5588", 0x0, 0xfffffe00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) r3 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x4) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe000031"], 0xfe33) 2m43.211992619s ago: executing program 1 (id=1496): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="d8000000200081044e81f782db44b90402000000e8fe450f55a1180015000600142603600e120900100000000401a80016000a00114006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0808856e408e8d8cbf7a7ff4841ef52b49816277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4d180a54f14f00004d9db22fe7c9f8775730d16a4683f1aea4edbb57a5025ccca9e00360db70100000040fad95667e006d8df969b3ef35ce3bb9ad809d561cace91ed0bffd6e4edef3d93452a92954b43370e00"/216, 0xd8}], 0x1}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/12, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x14, &(0x7f0000000240)=ANY=[@ANYRES32=r1, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = socket$kcm(0x23, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000000c0)=r3, 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000940)={r3, r3}) 2m42.488461341s ago: executing program 1 (id=1501): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000001, 0x8}, 0x7602, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x24084200, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001a40)) r0 = socket$kcm(0x2, 0x5, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000340)=r1, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) recvmsg$kcm(r1, &(0x7f0000001600)={&(0x7f00000001c0)=@nl, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000240)=""/37, 0x25}, {&(0x7f0000000380)=""/194, 0xc2}, {&(0x7f0000000280)=""/22, 0x16}, {&(0x7f0000001500)=""/189, 0xbd}], 0x4, &(0x7f00000015c0)=""/44, 0x2c}, 0x40) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x0, 0xa, 0x0, 0x0) 2m27.393593269s ago: executing program 32 (id=1501): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000001, 0x8}, 0x7602, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x24084200, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001a40)) r0 = socket$kcm(0x2, 0x5, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000340)=r1, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) recvmsg$kcm(r1, &(0x7f0000001600)={&(0x7f00000001c0)=@nl, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000240)=""/37, 0x25}, {&(0x7f0000000380)=""/194, 0xc2}, {&(0x7f0000000280)=""/22, 0x16}, {&(0x7f0000001500)=""/189, 0xbd}], 0x4, &(0x7f00000015c0)=""/44, 0x2c}, 0x40) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x0, 0xa, 0x0, 0x0) 1m11.320857627s ago: executing program 3 (id=580): socket$kcm(0x2c, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000002c0)='mm_page_alloc\x00', r0}, 0x10) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 57.15393919s ago: executing program 3 (id=580): socket$kcm(0x2c, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000002c0)='mm_page_alloc\x00', r0}, 0x10) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 40.040809999s ago: executing program 3 (id=580): socket$kcm(0x2c, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000002c0)='mm_page_alloc\x00', r0}, 0x10) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 27.452853307s ago: executing program 3 (id=580): socket$kcm(0x2c, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000002c0)='mm_page_alloc\x00', r0}, 0x10) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 14.267870425s ago: executing program 3 (id=580): socket$kcm(0x2c, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000002c0)='mm_page_alloc\x00', r0}, 0x10) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 3.295176968s ago: executing program 4 (id=2135): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) socket$kcm(0x2c, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0xffffffffffffffe5) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x103}, 0x203242}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x600, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20004808) sendmsg$sock(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)='k', 0x1}], 0x1, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x303}}], 0x18}, 0x0) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x2100) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f00000008c0)='blkio.bfq.idle_time\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x8, 0x5, 0x7, 0x8, 0x0, 0x80000001, 0x100, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x8000000000000000, 0x5}, 0x4, 0x1, 0x9, 0x2, 0x10000, 0x9, 0x9, 0x0, 0x7f, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080b01000000e8fe55a1180015000600142603600e1208", 0x29}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x33fe0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) syz_clone(0x10020300, &(0x7f0000000980)="b9ebf24c249cb9721ea4971228c6799884b9166846b5e945defd37d979c65607d9d8606c4911d42eecde1c51d025efad7dea13056aa832c653e462dcea26ff606e439d8c89c8c49112562c9ce34b1bf586539ac9573d0d6d86e8f9300c3048a01849761607068b5d51a7cdf54423a9d8be7083d7b7119d3ca27658e74d203073fb996d66b8d7efe5b55dca5b303ceee2076356ece6ef25f8f30984592140520073c22f3f30136537dbff001d7716874ffc1507101eb382e23b187dc63e90df08cd5b9541675d019ed289847326499883d0c48319b9f26075014ef85cf8f1327cf539b2ddc9e43a95b6369a578de349568d4615fabcda0099296377877268865facaf90ac8f63f47249fc1f1d178cf84edc91a07d37285c1b79101f5e9838baf606e4958a4ba9c3ac37aa391995c07c270b98f9ef68c76e0fed90f46801fdee55313e916379ce64c94997f8514a6021ac9d53ce7f9db5baa7e4ebbd5d670a45713f7e41acf635fffe5ff15a5dfa8ee6a51d827bd9ab9aa4ae633aade6d116048a5d27fface379db7f7cc3941fc79f67bdeb309e604488a4067d1a4aa47bb0edcdfe23993c8b7883cc0000da6f4ccc22050c404cf614d47932cd191786351121f71b69350cb451ab0058079d4d6309e5bd50e53439a852f470e601c41961f49b1df8b26350218c4cdaa3437dbe4fcc9fe00d76292753c51f8ec013a7d97289cfc0994796733ec90060d27e11725c5d0189c549524b323e6e8ba33689cb5e169da9275cc9cc4d338078d5679f49ffd2749056a22d021005c905a6fb6f8d5a3ffcfe34d68622a72239cd6eaf62e79cc322f63a1ca0cd29b540", 0x257, &(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0)="6847e94beba208081d8fca3a7fd223a11d99bfc0cf282d8019bddc79e050fef4bbac7efb0900386b9d9845f242c80f60e220931cf6e300") socket$kcm(0xa, 0x2, 0x11) 2.914631994s ago: executing program 4 (id=2138): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x18108, 0x0, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@restrict]}}, &(0x7f0000000380)=""/254, 0x26, 0xfe, 0x1, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x18, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x1, 0xffffffff, 0x0, 0x0, @void, @value, @void, @value}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x5, 0xa, 0x7, 0x0) getpid() syz_clone(0xd024100, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYBLOB], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x2d) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000740)='=q', 0x2}], 0x1}, 0x1) recvmsg(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x2) recvmsg$unix(r3, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x40000000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r6, &(0x7f00000003c0)={&(0x7f00000000c0)=@abs, 0x6e, &(0x7f0000000140)=[{&(0x7f0000000200)=""/226, 0xe2}], 0x1, &(0x7f0000000340)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x38}, 0x2123) ioctl$SIOCSIFHWADDR(r5, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x541b, &(0x7f0000000340)={'syzkaller1\x00', @remote}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @local}) r7 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2}, 0x0, 0x1000, 0x3, 0x6}, 0x0, 0xffffffffffffffff, r7, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100), 0xa7c, r8, 0x0, 0x5c0900a0}, 0x38) 2.808270766s ago: executing program 0 (id=2140): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) 2.732823047s ago: executing program 5 (id=2141): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='pids.current\x00', 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000140)=r1}, 0x20) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@generic={&(0x7f00000001c0)='./file0\x00', 0x0, 0x8}, 0x18) sendmsg$inet(r1, &(0x7f0000000400)={&(0x7f0000000240)={0x2, 0x4e24, @private=0xa010100}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000280)="0d1a8e9201c3e61507fccfd60e85844f84e99961dce815aebce98ff5e8", 0x1d}, {&(0x7f00000002c0)="b3da77804108721fc965087d40db0aa35b8d83890de6cb", 0x17}, {&(0x7f0000000300)="99692cd23e3a6cc7d2ec5f758c786d8ab049507c915d5c1eb3e7d772a2e80837aa4c7f3f8282716d21a72d86ad882e83b7b42bbbc6079c4fdf1d37d5e0163d6a251bf14b9cdaa47ac975bc217daed16e43bea955b71c8b2e1c4abe4a3019f4f635da832ed1e9d44c4522d07099eb27cbfa0140885c3f23911cbf21f0c65e64c689179ef6af891bd60e2c5f5504ac9873e040de25547a96c5ec7225d3a5fb53347920d6bbe1368f5714", 0xa9}], 0x3}, 0x54010) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r3, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000500)=[0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x74, &(0x7f0000000580)=[{}, {}], 0x10, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0x35, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x6, 0x2, &(0x7f0000000440)=@raw=[@btf_id={0x18, 0x1, 0x3, 0x0, 0x4}], &(0x7f0000000480)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x40, '\x00', r4, 0x25, r1, 0x8, &(0x7f00000007c0)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000800)={0x1, 0xf, 0x4}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000840)=[r0, r1, r1], &(0x7f0000000880)=[{0x5, 0x5, 0x6, 0x9}, {0x5, 0x1, 0xd, 0x5}, {0x0, 0x5, 0x5, 0x5}, {0x3, 0x4, 0x0, 0x8}, {0x3, 0x4, 0xd, 0x3}, {0x5, 0x1, 0x5, 0x5}, {0x2, 0x3, 0x6, 0x8}, {0x2, 0x3, 0xd, 0xc}], 0x10, 0x8, @void, @value}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000c00)={&(0x7f00000009c0)="66a1e0812e099c64985ddcb606a23f3de258f3f8b7401260de1bb017452091cddc69a5b4cf691a1b4ac5a27e331cfd582566b425bd34ce3deecc2f36487f51a1ee710bddb8c4a23f5c89b05950af0028d3276001af6272eb8f30a295ccdd1976a872ee41f5c5347a54b413b83014e5d776b1e61aea7fdf68c53a5e0e", &(0x7f0000000a40)=""/93, &(0x7f0000000ac0)="5c42126c9c9212632acb39801937b41cdb6aff125b94719e1e004a74a29a81afbe11e51ff45ff791cd695c346b7bac1ac054eda44df9f2002fdb0bfa4257845644", &(0x7f0000000b40)="31cf78870528856ee5b3dd4c693dcee21a1c2e68cf5c3dac0b0ce422042c07c3cf3c15287d4ebb26cb290220b9d4ef0155a621ef93362639d8eabc31f3b713977ec78ef9a9cbf0ed21927457432f7ea39d4bac03bf2ad98a0b9dade6b2e6a634b48b64087a3aec4a0e7aac3800fd780e4949072b326d38eea5e0e98dae92c760f11873ba74f3c032e42e9a5a9919ab464e7b97c30c69ff2cb570061e22b7841b58f88e8fc2e8af1a787aa93d78f15394cf1e112e8da332ff2c65c1e3c571", 0x9, r0, 0x4}, 0x38) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000cc0)={r1, 0x58, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000d00)={r6, 0x1, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001e40)={r1, 0xffffffffffffffff}, 0x4) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001f80)={0x6, 0xc, &(0x7f0000000d40)=@raw=[@btf_id={0x18, 0x7, 0x3, 0x0, 0x3}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @exit], &(0x7f0000000dc0)='syzkaller\x00', 0x8, 0x1000, &(0x7f0000000e00)=""/4096, 0x41100, 0x41, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001e00)={0x2, 0x3, 0x200, 0x7}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000001e80)=[r2, r2, r1, r1, r1, r9, r1], &(0x7f0000001ec0)=[{0x0, 0x3, 0x10, 0x2}, {0x1, 0x4, 0xf, 0x1}, {0x2, 0x5, 0x3, 0x4}, {0x1, 0x5, 0x10, 0xb}, {0x0, 0x3, 0x8, 0xa}, {0x4, 0x2, 0x3, 0x4}, {0x0, 0x1, 0x6, 0x5}, {0x1, 0x4, 0x1, 0x3}, {0x0, 0x1, 0xf, 0x3}], 0x10, 0xffffffff, @void, @value}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000002040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r1, &(0x7f00000036c0)={&(0x7f0000002080)=@pppol2tpin6={0x18, 0x1, {0x0, r11, 0x81, 0x4, 0x2, 0x4, {0xa, 0x4e24, 0x1, @loopback, 0x7ff}}}, 0x80, &(0x7f0000003300)=[{&(0x7f0000002100)="3fcae0e48b38d579bbd00294e237ca2f659454d2bcb0cfbeda1a7197c8fc008e31c1f4722616d02f288eb2271cdb49fb290aea550c9fe69840cbf7ba0bd1c522", 0x40}, {&(0x7f0000002140)="5beb2c1972efab72bf07731a8e0d19d6c951760ed8b95cd0b723856e0770bdd6ab0edefac7b2e4b8257ab5d09ed589df266243b23d445628a374016f9100e9a51e78", 0x42}, {&(0x7f00000021c0)="695b1588049d85de90b22dadbf4dfc979e110c373302e696bf5a0b8cabf125e09fdcc1f7d089cc6876e5c5bd8cc0da75057bd4670acd299cadc1d6d6b1e82026c43c703eff15a63964779353e40838dac4c99ea96a2b70d90a1ac18ab97e5deaa97a19e51eb0c68f454d9041c5ddb8182e1df035922b551152d6a53eba51a285f107eb0bf8b057e847480bc9396e87c6c2163eb2aec5eb77f025c4ac24", 0x9d}, {&(0x7f0000002280)="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", 0x1000}, {&(0x7f0000003280)="93b133ff8f3d43069495760fd58b5462901818aa9ba8f5837e20e525587177cf2aa06c430e5e8ba4655a2accbcb022d77242169e3ed0cf1fa60fbe6c0c970ad794b2b02ce14a8ea5b48f4303e216", 0x4e}], 0x5, &(0x7f0000003380)=[{0x110, 0x114, 0x7, "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"}, {0x58, 0x12d, 0xfffffffd, "bae42b244d4d604f5bcd9ced82350f1a95a900dfd14f30cdb10c8dfc6f9d734e467e89e5f64af1663c3a158dc8d8c7e37333c788f6576e6761a908f8346671e80d"}, {0x18, 0x116, 0x5, "d0"}, {0x68, 0x10e, 0x1, "fb1ce0fb49e7662fafd0ea5303a9a0c5449f1ce66d16b5b37d934db840903e53332b6a9d3077654181a545f753e0fc6ffe3cef7c774c5193bcb769622c31251db19a1e794026eadc686c2e7fe89378d9dd8e79285e7d"}, {0xa0, 0x145, 0x6, "cfda1cd83cae847bb5b875638c728c0b9e6ffd8d7fba18ec697110c248414895116b6fb360a46203ff55db6e26ae26b65f557886f934b067ef047f49782c3e669b73202d773e6525ff64d81bc71ec538051149a5bfd81f856d083191939bbefb032aac8eff52a5244fa49aad6d436eed8d485203e1fc3dd0edc6b9aa23558928c30b8cd86ef471aae1cc72"}, {0xb0, 0x110, 0x2, "c82ea77214b6bc8d504cfe61ef2efa19b9fefc2b462b82414bae37484f200f00e6eff79f3f433fac4da294d173a56cf0e85822afc0118eaef785bba305b2e4c4935c7b03ad5c10f2eccdf8cd7d8837e8a393768b19b7bf9bcbb059deb91938efbc5a2ca8ba333febff6f1066a806e9edcef9ac27cf8d230cb8d520d497fe91616b6aab9fc4112503e9b3398c466558c800814ad2fc40f3bf1ff8786c18748ef9"}], 0x338}, 0x90) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000003700)={0x1b, 0x0, 0x0, 0x0, 0x0, r0, 0x7, '\x00', r4, 0xffffffffffffffff, 0x4, 0x1, 0x3, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000003a00)={r10, 0x0, 0xd8, 0x5b, &(0x7f0000003780)="61eb9a5d60908ef97465b1b2fb95cb95f549c6d722f94cde333f5fc8cbc68cf89ae39fd188ca371d3e9911763c21058468170a232081691cc8cb13d35192611ae3268277bbd5a321f9dc82217e7b5e4b27245768f025621fd6d48453c89edd5ef2496790861eb4027e7f5dd70ba3c8435e6eb1d238b7b0a1a4fc3914586c29238d100ec952af2801d106fdcd50e7e2f7f157cedc6c4be06ab16316f3e77ac171bcd9a960ee9ee00ce4f1511c738dbbe3b211cf10f0090f1959956d02703db4f4c26cfe550f0974ad4bfe632a8ae09aeaa51c697375aba0e1", &(0x7f0000003880)=""/91, 0x5, 0x0, 0x40, 0x96, &(0x7f0000003900)="2c2cd9f1c1002441b6787cb271fd79707504e0bdf23f30c09c4b151e2813d0ef7acf215bf7f959496eb54129db22b17db2b82399959f4319248ad18103d3c686", &(0x7f0000003940)="1dfd778ac23fb16def1630924851e34075578070417b0eb40d0ecb3d133b60ac484474a9a1390844fc732e8cfecc2dda91fcba725c7c4a4f25ee7202e4b1a8b4ee87524ed1ed3d51c5c9248a758ab23ebe6603238e7f44c7024307879d1bff75cd89234611ec226d7a1cea341cbe064f0d522eb3b6cb902acbeb9054014abbaa64195df3e94cb9865d05db287c747411487d9a251ce1", 0x7, 0x0, 0x6}, 0x50) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000003a80), 0x80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000003cc0)={0xe, 0x10, &(0x7f0000003ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@call={0x85, 0x0, 0x0, 0x76}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000003b40)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x8, '\x00', r4, @fallback=0x8, r1, 0x8, &(0x7f0000003b80)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000003bc0)={0x5, 0xd, 0x7, 0x1}, 0x10, r5, 0xffffffffffffffff, 0x7, &(0x7f0000003c00)=[r9, r1], &(0x7f0000003c40)=[{0x1, 0x3, 0x2, 0x6}, {0x4, 0x4, 0x3, 0xc}, {0x4, 0x5, 0x0, 0x2}, {0x2, 0x2, 0x4, 0x3}, {0x3, 0x3, 0xe, 0x3}, {0x5, 0x2, 0x1, 0xc}, {0x3, 0x3, 0x7, 0x1}], 0x10, 0x8, @void, @value}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000003e80)={r1, 0x20, &(0x7f0000003e40)={&(0x7f0000003d80)=""/8, 0x8, 0x0, &(0x7f0000003dc0)=""/69, 0x45}}, 0x10) r14 = syz_clone(0x10000, &(0x7f0000003ec0)="78577dd05f06a81a0e50ac590d8788d5f64ce71943b9ca7498c5bf5af26d84c45393f22862293a28fc21fedde56e0bd8ada0a78780276ffbfb1af667541e296860d2c21fb58eda2188466daf424bb9f9c96e8a99c7bbeff6486a3100c73a030f54e825a07ac456c410760e5197ffd8b881e466de3ad57ba3088172018652f1b8640cd29717f43adc8bcaa94db4fe3767a0835facd5474edd06db6b91136811", 0x9f, &(0x7f0000003f80), &(0x7f0000003fc0), &(0x7f0000004000)="0fb4b8377cc3a038fbb9dedff54fb37c53950e339459cad1ba4c8a3541bd59593450fde325a231c22f034289ac9fa9089dab3b661886dda8f5bcd35a8ece") bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000004340)={&(0x7f0000004040)="1c66443f250d16d24bb1f8ad7031c0532238b91e9a14838984c4711bd1950565a63380d33d7bc42b45b55abe841b35328d38aeb183b0b5661ad48d4b8b7c282a65a6b58bafa00624bfb46f65462c0ffe16495b0ba2d79649cec4b6ff60422adeb7e3b23bf720f523f2805bd9b96c98869071b4c2c0c2959f66a38f562d8876a268fcf23c4718ed6042420ade2f93ebc4212da2cb73f207038c1a3d28475d92b5bd2ddc3c676075a996840eac6f59f7d4af5ab64847c48263ba06549988873171eba430", &(0x7f0000004140)=""/152, &(0x7f0000004200)="83381ab8daf9290f545004610c108f08f85e2c0a0d3ba44b24725d5854a31e8d1bc7360aff9f10fee11fb1190aa0cc786579b6463c00e0accbc5b9009cdff849a2cc1627134a018360f5f3", &(0x7f0000004280)="edefcfb2d160a58fbf058a5d941cf58b62ed5b263e8ef7a1a928891170ff10a6bbf8c88bb35f192d3bbb81248fc6ec1913b8daa84a9bfc5255cfad56cd1764cce1cd99892dcc06509651e329dad1f6df65d3137296f94430ac48510e032d97984da0c3e06281d37ae932e97e3b4a95b9e28680e64820a2203c62c3ef60c00b6c80536ba5341858900dc3ff1210d64b9fa7ab139a65984259acac2482fb65cfc0486bb6399d8791e13e415f9d0202418d", 0x27a, r0, 0xa21baffe100ddeed}, 0x38) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004540)={{r1, 0xffffffffffffffff}, &(0x7f00000044c0), &(0x7f0000004500)=r1}, 0x20) r16 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000004580)={0x1b, 0x0, 0x0, 0xf, 0x0, r8, 0x3d, '\x00', r4, 0xffffffffffffffff, 0x1, 0x4, 0x1, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000046c0)={0x10, 0x10, &(0x7f0000004380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000001}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}]}, &(0x7f0000004400)='syzkaller\x00', 0x7, 0x4, &(0x7f0000004440)=""/4, 0x41100, 0x1, '\x00', r7, @fallback=0xb, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000004480)={0x3, 0xe, 0x8, 0x200}, 0x10, r13, r10, 0x6, &(0x7f0000004600)=[r0, r15, r16, r9, r9, r2, r2], &(0x7f0000004640)=[{0x7, 0x5, 0x6, 0xc}, {0x2, 0x4, 0x1, 0x1}, {0x2, 0x3, 0xa, 0xb}, {0x2, 0x2, 0x6}, {0x4, 0x5, 0xf, 0xa}, {0x1, 0x4, 0xd, 0x7}], 0x10, 0x1, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000004780)=@bloom_filter={0x1e, 0x6, 0x7ff, 0xc6, 0x2301, r8, 0x1, '\x00', r4, 0xffffffffffffffff, 0x0, 0x2, 0x2, 0x8, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000004800)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', r7, r15, 0x0, 0x3, 0x4, 0x0, @void, @value, @void, @value}, 0x50) r17 = openat$cgroup_freezer_state(r12, &(0x7f0000004880), 0x2, 0x0) write$cgroup_freezer_state(r17, &(0x7f00000048c0)='THAWED\x00', 0x7) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000004900)={'gretap0\x00', 0x2}) perf_event_open(&(0x7f0000004980)={0x5, 0x80, 0xfc, 0x6, 0xf3, 0x6, 0x0, 0x800, 0x6208, 0x5, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x2, @perf_bp={&(0x7f0000004940), 0x4}, 0x100, 0x2, 0x40, 0x4, 0xffffffff, 0xfffffffc, 0x2, 0x0, 0xffff, 0x0, 0xb}, r14, 0x6, r1, 0x2) 2.406767472s ago: executing program 2 (id=2143): socket$kcm(0x1e, 0x5, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$kcm(0x21, 0x2, 0xa) socket$kcm(0xa, 0x2, 0x88) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161) sendmsg$inet(r1, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380)}], 0x1}, 0x0) 2.388941022s ago: executing program 5 (id=2144): bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}, 0x38) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') ioctl$TUNGETVNETHDRSZ(r1, 0xb701, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r2 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='cpu\t\t\t') socketpair(0x1e, 0x4, 0xfff, &(0x7f00000016c0)) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cgroup.freeze\x00', 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xcd, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000100)='\'pu&\t0\t\t\t') r6 = getpid() perf_event_open(&(0x7f0000000280)={0x3, 0x80, 0x31, 0xf9, 0x0, 0xf8, 0x0, 0x3, 0x48004, 0x6, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x800, 0x332}, 0x2020, 0x200, 0x8, 0x2, 0xc, 0x2, 0x1ff, 0x0, 0x7f, 0x0, 0xef3}, r6, 0xf, r4, 0x8) perf_event_open(0x0, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$tipc(r3, &(0x7f0000001680)={&(0x7f0000000300)=@id={0x1e, 0x3, 0x0, {0x4e20, 0x3}}, 0x10, &(0x7f0000000340)=[{&(0x7f00000003c0)="9bce5654d8a221430d9b9a5813df32d6c62271ca74f02f7c11b271033fd07c30c62e4e2af6fa5e7394f580ecee9c6b1f5a6dc916d741fc23b3a225cf1ba0cae99f701acd538098be64662e443eab600a076d5240371eb0faf9d218b25c78e222184ed46896d9dbf64f6e2f577bb8e085bbc16049c3c42d6cb4d2353934686a0470857e4de62d3ad786603822b162b196beb2c73fe3bdf0ce96bd0b44bd9dedb9dd3881594a995ab1", 0xa8}, {&(0x7f0000000580)="60948abe48330e5e40549599766f826f429c45de851d80e67746f58fbc6ee3637fb1c65115de615e4dc8b8f7e260ce05ebc9bdb6d3e888acce68a2d275a29bd9fc246133bce2e1af5e1923b6407371e6d756d3bed17a3d79fc822b992954e75280cda9c1f0732e", 0x67}, {&(0x7f0000000600)="de7b87f4b684aaaae379e53086e684721ff4559ac133b494ada35604f977b4664e02748bb2d31706cbb462cac3257917150f324d20f1c3e75b45974c94a4699b014e51ae18eb89f86267f47271c9529ba3a6463c7b513410215f3474506cc1c1b4b233d380bf1f430300c618f0df37519118e404dd7210851194c7a0aa3e147b", 0x80}], 0x3, &(0x7f0000000680)="5d475ee810c82b2012343e953604ad31002d4add3d4a84be9ff51d272bf81235b899290283638a44d5e6807bd7b3c4f15b0ec2453e9a54eda2aa94e788e455f72c02b4a1445f262f6772a5c3d94f1623bd2fc7978ad08ffe02c53ee0b0a7111bd9eace91e7fa1a0a48fd626ed458c2b97eb3ccdf0c58e2f7b179c3bd3ffcf9d9c17e26e4b113a063842d104a84f28fc03754b7bc0962648045e55d190d6d0e1bde26f7c8f478376f71f89791390805326d4b61f74e590ff32596e63b017957dcade650b72004e066a2e97c0cbc445bec4970fe682a382e16e43b3e42cb20b7f9ad7f91058d512562c37b62bc20274729546cadbbaf235a34e207b6784eb5cc8729ad8db14ffa3437ba779295143fde4210a18509491bcf9872526c5c4630fe7f49b389c2bf6062d392088cf602214881640f15e2e2081e4ca41fa945a94468962794432bb0430ad96bf091c121606ab52f4fb31652da1dd8f7a75563b3a7e5d32f01ec648443aec8805b10d83a61277082397f584f302d28688851f7084bc74529c04f11bd927663dd28bfb84cfc6bdc3d4030ed36c6f202c2d2f5c84166525ec6221d7573dc4aec2d134e00eb830faaf4db4b58fbb05b181ed011ba487a7c771845a235b61fd44c6c221912d42acd3e2e2db4f97810770eee09695a8844391271f31ae2e20f69b5fd69ad5d3720ba792c62133fa9e4551eda77e1b1bf94b3f9fc6c72796f12ee1d595c1fcc878002ec78ed95e8f7e746c8db231293e365eef62d999ae7703d8e4062c5ed10028c6c79d17ec4aa21f3d5b33f54c940a936f5c840845319e2a8210f2cdc713b5d8d484608381a54c077e3b418806b133bfd42c8fc8d38c4df7efa300d353d8c6860d9e60179de2aaf09024ebd9d833cd14d97df0aac3b03bbda74030ee90328abcd3d2254eb068dac1280190d720f479da1f397dff1e2744c5cf559746895ce18588a108d8dbaa84503db4db26cf4ffa7fd9fe995c26c325315bba315813fe6130b34fa2ae524ae8e981685c530df580ece048fbd5411650d1973fc3bfe53ed4c1805716728b024444690ae9a5b82bacb453c999f232a08b8e053c71771091bbac4c720455d63c1d37f0513b440972045df5cafd3c8a4b5edd84de9b25830cfd83f5237672b01c41f9e53727ca007b930ba851af8628351fc4756982ea110ea68f05f4935ed3f033d3cdd0316e254bff0291472f396e96a4ff4ae9d2baa157f521940526a819681e0af176d827a9183bc66e022998a3b9e8a11dc95564a94865d19cffcef1f8f1e0cda271922b82eac6d146464b79717b6d1b6ecec099f3331a8085623e79308354e6a35ec01c9cb4876fd2cba1179f23fecf4cb5ba9c3452f60cf6d2222141abc63803e242c66784831da505dbb7af6e24104fbf4ad84e92b5579ab41d0ed42482cff1b35cf31c795549f76cb94859d24008f33bdc2e95b6e3ddbef3075ea7c26b913f87297282c5196363cdf66e89319e0a7cb7235cd536c4b131d8bdc87c21dc565e73bf21bb2b8131152c32b820ee3d3885351dc29fe3edaeb33b27d0ca22c355166310f1053d07e1bea5bb6a866af152b5a365f36afdc40f3158c5f887fe05196bd8ac13e3ef9e441106dec046807be6ef07932708a941029e0b1a05d355d915fc51bea208a3dbc52e10f80433971c72dea53f594f38b3ab55a6d9cd2ecd72db46b046c74b26e2fead153b11f58e7b4499a42213e5534a94fe32d33f0a3a148ee4289f82cff167cf8ae77ce5e18d697d7844d0d308f24156efda549c108a2f4c11d0966bdcc86cd49118b33b2618ea421588f9e64ffdfeddeaf03594e2de327dcdce52ab6e8026bdcc484f3e11dcf3c74b70df3d70f3f5cca3167c48b9721b2f72c91a21526613b4fa2dae0eeedcf363961223a4608ffd01883b9ecdba6522a6337eeac5fe4c9841685d2d5a7145a0c89197da2192c0e95453c30b91969392e1b3e0e77f756f4bb9ca3e855043d6cb89f7f6fe2f10d163937787798edc888a612e16c1a3a2abb4e9644d81424af32a4e8f7f3bdfb0af32e1c9c16fdc04676aea43101364a53e4b54e284d03863c3bcbdb5297af82f405886f3d3bd448a13896cbb61dbcb3c2129a89727db86f8e2eb3258498d38db25c2f4cf49e975e7d24b1bef1a7053cddfc3979d3b43c6077d959e0ad27a99aee758f246cf91e3be8b0f8da0e5a5969ad76dd1999c17c4b8d19d8f33785a96fe549d1d9fee7990e9e80507b99e4746c1f411aad28ece1bb6dd826adecd9168b407bdbe69173c8223719ce526f315402db5d9f46e4173f8900a7e25d21fad807cd21a47347fabd52cecd6e05fbb1a5cf6ac244d125a3184d334ae1fa8d74dcca64a208d9288070172203d19fdb728a94aa20288bfaa4f9a6d19c11fa63bd95187804a68148c1e5b651e5840a19070411cb890e187852bf646f5ba108db9137e52693d8cadb88d682678ed1896613d5ed7bd94699dc293f3c505fa78645e88e4747d33c7a3b13dbeecd208d78416eb85eca6eaf115b74e1d0cf44529b12e73bf9c817b293e670862937a48dc5e51a9b5c091e6060771e1977239cf9931c3098af9e57c6c147ccb220edd6081a7d30b1a88562418050cd46b1e53558d5c8a614039035b0175271adea5e629944b75296e2120ec4ed72c42529b0dc3b27e10d9553e2c83b4f4a3d666c6d2783be434bb0c00939fe68f83bdcda210b422612ee88b50fc68d7539e92eaf6ee6410d8b2f89022c9ff2abb3086e5ee6593c33c216b893947a39ab45e67fa0f9fcff48e90f1c79e2fc1a2c541e69fa115e6e9d87bc20301f60cf4a48316c289e9e77e01752898ddae2307bb3308c14ee1f2e51f94805e203b510bf10751708c4f67188f35f22b802956980534f388b207208856cff6ac351f88a4c28593528467ee9839c49318fde7d65dbe1e9f7c3640380e05c949c8f61928d9d9c4b66baafba67afb1d9e35ac238e1393fff3c404ea1fb8cb351bd6405b5ae361ee82bc3d596f44a7ccee3f100c9af83cc8fd225c3b743476b60ed8557a13231e791ff0edaa9b649813b7743cabfe2d410c689f386451bbb44ecbb960adb12fd5091497b5b7286db0a875ba8f62973b5621aa49c8794932de6a1bbca7e0886831e7b2aa578b5abab64161994f033c11dc384707f47db592143c116ea9b86706127117038c87f636a4e2d8c8bf26332f4ed607fa0727f980454f31ded2fe2bb58fb2447af17c0bf0ac483ddaf032b400a630a1ce9a4d5f0d54589789bbca917b24139068a70a57c228d7110354c6011039fe7bda484e886c414d32e5823b6474063b86c5e52368de7f331821869a82b6ac7dc88b61a5741ad983f202b2efeb31c4d1aee0a61db193cfb6cb088d2b4c60aab00b8fb0827320631b7c7ab08b35d95f453b80aca517c286107bcf7a3b702aa4f010823aad33dd27a19ea159a918029a1c2e677ca8e6099ecf69440f84c5b63cb96432fb0b3474f821e8aebdea641c527100503fe21d84a807d84cdd943f6f84844a5db81b3dc8db8fa6afb5d2c820b5a29f1dea7cb9a9c6cf48220239aef699c03ec92430aa57659d7e39b517fd96bdd1c10ed86b48c2434def64a8c228d6f616a822e0854f382207d17712a3cd685f1e3ab16e5a41edae562025a98d7d56bd1ab3317e8df4204deaea12f961bab5a340b0f5c43fbc89d179d61093a5331fb71efcc5b7e8088862ff91485cd79673bdfdee44cad8cdf340cbbf823c1977e076c85a60e7c6a61863b652f02815d01ef63e028ff79f1abce506346a6286e8e3f7feb161d0e4b31d9bdfe961e8930559ef5b6bcb8dd1283eeac5d74ac4e7bcabf29de033518c51b13eaaa5a99f6a7827a4cf75919c5a5fdc31d65108bb58d290d55fa35c8bb426944ab6e02dc6f0b75de8948527f8438fd5dc8303d35ba3f0193d2e41d7723c387df88278a8cfc36983ffbe67f4705cae6affeb47fd9c5c5353b8682b897821ae173c6efa8755212a5abeb8b10fbe3b3005899391108a5ec599a096163f2f23ec5619bfc4c9ee10939fc7c41e3fb964c4a91326a399493c80f98bab4ac82dbdbff1d91358b91ebf5ac2c1fb99ee41b3d8b4d0a0da917b10d84ca46fcc889229e6125bd8557b5ccd84ac041730f17b3f98ceff74c9b7b629260a0d72185ace700b6c0a27ebb6a5c6faff1f7eb4968549b32250a3f17ffc6b49b1c7a7e6dd60f1ebf1c2dcd89a2ab029717da17e864103202177f9b332d4ebdb12d7a04f36141f8ac2f7be510193e13221e600d04001a386acb4b6765a59471b6c5df916bfc53c10b7777b345d7c63b68a355b95be706845c74d51d6883d8579a63d53e152ffb4c1968ce88a05d7f068b5c4b8b86b7b95b6562f04abd81b8490bedef906792afc040b95203356e3427f8b4c3fb3f0abe8cdb32551d1c7039d072d60068d426063cc3a36816068b146d34edb5cba23336680034fb877f17b378650e97a2e7a7380fbfabca217ed454889375aef112ad2d41784688c0dff08ca1441c6b748af8f7f6fe6b9d997c31960ded95ace67ec8a7b09ece5e0487f6be8d6b20e1c346c7e9dd21621e1fc5e4792ef07bfb5fca1a62ef52ccd726f04b3a2909049d802665ce72b83e7cae9db48b4fac150ea3046d53ecc7fc92c28b3887cc52a209772a124b4c1128c9e286eed6e910ac7b9b49480fd6b0b7d5ec5f935390fb928159ee73ac2197461e30b75f2a5bd2e65b2f58dbd4f91037cdde1456eba914e056815441fa22a010d1f2272c8d2d2794364210eccaac1e09e99039efae36baca98e07263ce456c645ae0aa18a7d1106ebd7fb0d9f1ecebc158e8efcc5149a8ba706e62254d18dbc624a4fcd22a59245099a79ecb5b396759e5dc2a24c0ae229dd711e404ecf3a31342d45fc1f9c69ec05e4f6f2144418731d6d72d10faa6a6a849586859a4a7cd2f03e99573ec6aba8ada80a76205742a2c6fc83676f2fdf93677c3e8edb9c31410512fdbbc2485ea4a77ad97d95e5b61b08a172aff47ebf083379350eb6d09ac697a4e2ce7a837be498e53e07fae7e711c67e0e24ca271068b2ae9715967cef2de845f8f0b95eaa8d6a96abdffa6af3817e1515e051cdc884deb4e9099d481288b1ddef752690dc875ee5b816e7964edeb783698bb9e43f20626a13f64aed52495bc2e68ff2b16d91084f4c778e82ab94282c36382704135e5add2afab260b54ba4af8466fd2dda6f446f6261b80b27acc11e126b41b354714e001394d8b9cf2ba5c1b4b5f4bb962e598171ca291c825f8315f4598916c9c9f293276755e08e5f047dd63417d2e935b73ec8c9fc2a4dcc9b6830049ec5179512dc127e071c520f44eee9c8bff8672a7288a70162e310a9cd0311f685e68a156bf02a58ed05cc6ff4a0649c00c34819c6ab55cf79c0bd70a6e0244ea7513589f0dd51aca5cd0e0903b2cc55b7b93ec01ebf504d448ba9bca0474aaca349fef4556cfcf8c715fedb5c67f06e955c9f197f0efbbe3859b7dba4ea9167f1fbcb0d1ec196ecdbb8a8cb6cdfe256ea5aef06ea270ea4e3a5e8dfa821cc2bb9026a95b6a736874997f71d87239228edd4227901405ae84a4364222995e4e3119e7bdfd759a37203d20c34bbf390db3e242ca7d57f1ed03faa9a5dc4a960af9950684fbc60b7beae8fd2c80d9db78ec69a1da591fd90b67624ac93dd836a9b58b26e903cad511d9b79e6b006db3552ba211a112f8cb8d8219d91e06d178125d3921234ab80d8e5d09d1454c712ff3182efc29ffa52f24ead0578e9dd777164366b2dccbf5d3", 0x1000}, 0x80) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x2, 0x0, 0x27, 0x52, 0x0, 0x2, 0x41080, 0x8, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x4, @perf_bp={&(0x7f00000000c0), 0x5}, 0x80, 0x8000, 0x7ff, 0x6, 0x8000, 0x352, 0x88, 0x0, 0x2, 0x0, 0x100000001}, r6, 0x5, r0, 0x9) recvmsg(0xffffffffffffffff, 0x0, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r7, 0x0, 0x0}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="186000000000000000000000000000001857000000000000000000000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x10, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x55, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x44490, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b73, 0x1, @perf_config_ext={0x41235a2a, 0xaea}, 0x14101, 0x32, 0xfffffbff, 0x3, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2007}, 0x0, 0x0, 0xffffffffffffffff, 0x9) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x10, 0x3, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) r9 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r9, 0x1, 0x3e, &(0x7f00000002c0)=r8, 0x4) sendmsg$inet(r9, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)="9f", 0x1}], 0x1}, 0x3e8) 1.93044953s ago: executing program 2 (id=2145): r0 = socket$kcm(0xa, 0x3, 0x73) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000001140), 0x10) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x1c) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @multicast2}, 0x3c, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x3e}}, @ip_tos_u8={{0x18, 0x29, 0x37}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @remote}}}], 0x50}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, 0x0) close(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x128040, 0x0) ioctl$TUNSETCARRIER(r2, 0x400454e2, &(0x7f0000000080)=0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016004163d25a80648c2594f91724fc60", 0x14}], 0x1}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r5 = socket$kcm(0x2, 0x1000000000000002, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1f000000}, @generic={0x2f}, @map_fd={0x18, 0x0, 0x1, 0x0, r6}, @exit]}, &(0x7f0000000000)='GPL\x00', 0x6, 0xfdcb, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000540)={r7, 0x58, &(0x7f00000004c0)}, 0x10) setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f00000002c0)=r4, 0x161) sendmsg$inet(r5, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e22, @rand_addr=0x20}, 0x10, 0x0}, 0x814) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000011c0)='./cgroup/syz0\x00', 0x1ff) 1.92961263s ago: executing program 0 (id=2155): socket$kcm(0x1e, 0x5, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$kcm(0x21, 0x2, 0xa) socket$kcm(0xa, 0x2, 0x88) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161) sendmsg$inet(r1, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380)}], 0x1}, 0x0) 1.662344954s ago: executing program 5 (id=2146): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) socket$kcm(0x2c, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0xffffffffffffffe5) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x103}, 0x203242}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x600, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20004808) sendmsg$sock(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)='k', 0x1}], 0x1, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x303}}], 0x18}, 0x0) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x2100) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f00000008c0)='blkio.bfq.idle_time\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402000000e8fe55a1180015000600142603600e1209000a0000000401a80016000a0013", 0x33}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080b01000000e8fe55a1180015000600142603600e1208", 0x29}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x33fe0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) syz_clone(0x10020300, &(0x7f0000000980)="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", 0x257, &(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0)="6847e94beba208081d8fca3a7fd223a11d99bfc0cf282d8019bddc79e050fef4bbac7efb0900386b9d9845f242c80f60e220931cf6e300") socket$kcm(0xa, 0x2, 0x11) 1.631859634s ago: executing program 4 (id=2147): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x21}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) ioctl$SIOCSIFHWADDR(r1, 0xc0189436, &(0x7f0000000040)={'team_slave_0\x00', @random='\\\x00\x00 \x00'}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x3, 0x73) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f00000001c0)=@nl=@unspec={0x0, 0x0, 0x0, 0xd8ff}, 0x80, 0x0, 0x0, &(0x7f0000000380)=[@timestamping={{0x14, 0x1, 0x25, 0x3}}], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000140)='blkio.bfq.io_serviced\x00') recvmsg(r2, &(0x7f0000001f40)={0x0, 0x0, 0x0}, 0x2102) r3 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000000)='percpu_alloc_percpu\x00'}, 0x4b) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000), 0xfdef) recvmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f00000030c0)=""/4094, 0xffe}, {&(0x7f0000002040)=""/122, 0x7a}, {&(0x7f0000001040)=""/4090, 0xffa}, {&(0x7f0000000180)=""/242, 0xf2}, {&(0x7f0000000a00)=""/191, 0xbf}], 0x5}, 0x0) sendmsg$inet(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000fc0)="5c00000012006bab9a3fe3d86e17aa0a046b4877c4aaf68187bae53dca2ba35bda6a876c1d0048007ea608649e7524765f0ef82e3c0000a705259a3651f60a84c9f4d4938037e70e4509c5bb00000000e513aeac9bf2bee150d5fe86", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r6 = socket$kcm(0x25, 0x1, 0x0) recvmsg(r6, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0xa0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbc0413a181000d00000000010000000000000e000a000f000060028002002d1f", 0x2e}], 0x1}, 0x0) 1.367405889s ago: executing program 2 (id=2148): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)="5c00000003006b02c84e21100af32c6e0a0675f8d34460400000000100005c1e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d493803792684b71bdd70000b6c0504bb9183132", 0x4c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xfffff008}, {0x6, 0x0, 0x0, 0xfffffffd}]}) r2 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x400000002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="d8000000580081044e81f782db44b904021d080009000200e8fe55a1180015000600142603600e120900210000000401a80016000a00014006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7ce", 0x6c}, {&(0x7f0000000ec0)="c9df04cd8ce4f37656ffabb858c02ee95c69ff108ad5b76475bf8916734cbd57c84685f29a99074838097ed28b3d45bd4f24b1ad5ed7661fcf04c5f4e9fbfcebef046540294bb08de607993d1594343d19b89e6da0c4d2f7d7b92a2222268aa59e3113070d539092c09406c9", 0x6c}], 0x2}, 0x24004880) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_type(r3, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r4, &(0x7f0000000280), 0x9) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000c40), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="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"/1952], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000080)={[{0x2b, 'cpu'}]}, 0x5) 1.043501123s ago: executing program 5 (id=2149): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) socket$kcm(0x2c, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0xffffffffffffffe5) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x103}, 0x203242}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x600, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20004808) sendmsg$sock(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)='k', 0x1}], 0x1, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x303}}], 0x18}, 0x0) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x2100) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f00000008c0)='blkio.bfq.idle_time\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x8, 0x5, 0x7, 0x8, 0x0, 0x80000001, 0x100, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x8000000000000000, 0x5}, 0x4, 0x1, 0x9, 0x2, 0x10000, 0x9, 0x9, 0x0, 0x7f, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402000000e8fe55a1180015000600142603600e1209000a0000000401a80016000a0013", 0x33}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x33fe0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) syz_clone(0x10020300, &(0x7f0000000980)="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", 0x257, &(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0)="6847e94beba208081d8fca3a7fd223a11d99bfc0cf282d8019bddc79e050fef4bbac7efb0900386b9d9845f242c80f60e220931cf6e300") socket$kcm(0xa, 0x2, 0x11) 1.038762434s ago: executing program 0 (id=2160): socket$kcm(0x1e, 0x5, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$kcm(0x21, 0x2, 0xa) socket$kcm(0xa, 0x2, 0x88) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161) sendmsg$inet(r1, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380)}], 0x1, &(0x7f0000007880)}, 0x0) 869.235587ms ago: executing program 2 (id=2150): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040), 0x4) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000000), 0x18) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, &(0x7f00000000c0), 0x4) r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x82, &(0x7f00000008c0), 0x43) 646.96223ms ago: executing program 2 (id=2151): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x1}], 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000)=r2, 0x8) 570.655911ms ago: executing program 0 (id=2152): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000100)="5c00000012006b906fdfe1ef704ad931c605876c1d0000007ea60864160af3650400400038002e000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f4d4938037e786a6d0bdd7fcf50e4509c5bb5b64f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='contention_end\x00', r0}, 0x10) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x5411, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f93d24fc60", 0x14}], 0x1}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000002440)={0x0, 0x0, 0x0}, 0x0) 497.246492ms ago: executing program 4 (id=2153): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r3 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r3, 0x88, 0x66, &(0x7f00000009c0)=r2, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000015c0)={0x11, 0x3, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) syz_clone(0x100, 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000001480)="08e72743e00d031bb87255e0d6b9996118e414625483df69795fcb752bece940ffc1a14bfcea673fad989081047a2df67ead8fbe73a72168ed53c27aa1658324a88a42cdbf96728df3d14b0eeb15e750a3e8c7635d36e5cbae4e1bccc76ea442b3e7034c4e222843389452b953e08635e0649e5c920eb2b6118a289fc70a7e27bb731edb0ecfa570c9c11c447b3e38295339debdb996f04e93165146135318f077231b2978bc2f0547e57ce88f7714df8192385edf5fa16528050f9400960e2f143bf2aa6aa2818e84db33dfa14b56a141896763e8e21456feaa8e80d91acbd1384d6b80548bec630e0fbdc0ae0e1931fd1b") sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000000180)="1400000016001963d25a", 0xa}], 0x1}, 0x4000000) 445.042123ms ago: executing program 2 (id=2154): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) socket$kcm(0x2c, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0xffffffffffffffe5) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x103}, 0x203242}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x600, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20004808) sendmsg$sock(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)='k', 0x1}], 0x1, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x303}}], 0x18}, 0x0) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x2100) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f00000008c0)='blkio.bfq.idle_time\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x8, 0x5, 0x7, 0x8, 0x0, 0x80000001, 0x100, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x8000000000000000, 0x5}, 0x4, 0x1, 0x9, 0x2, 0x10000, 0x9, 0x9, 0x0, 0x7f, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080b01000000e8fe55a1180015000600142603600e1208", 0x29}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x33fe0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) syz_clone(0x10020300, &(0x7f0000000980)="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", 0x257, &(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0)="6847e94beba208081d8fca3a7fd223a11d99bfc0cf282d8019bddc79e050fef4bbac7efb0900386b9d9845f242c80f60e220931cf6e300") socket$kcm(0xa, 0x2, 0x11) 367.658244ms ago: executing program 5 (id=2156): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) 299.908956ms ago: executing program 4 (id=2157): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000001000000060000000c"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r0, 0xffffffffffffffff}, &(0x7f0000000400), &(0x7f0000000440)}, 0x20) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x1d, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0xa2}, @call={0x85, 0x0, 0x0, 0xd0}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x1}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xc}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @alu={0x4, 0x0, 0x7, 0x9, 0xa, 0xfffffffffffffffe}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000100)='syzkaller\x00', 0x7, 0xbb, &(0x7f0000000140)=""/187, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000240)={0x1, 0x6, 0x2, 0xe}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000280)=[{0x2, 0x2, 0xc, 0x8}], 0x10, 0x6d, @void, @value}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x6, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x44ce, 0x0, 0x0, 0x0, 0xf0}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x5}]}, &(0x7f00000003c0)='syzkaller\x00', 0x7f, 0xef, &(0x7f00000004c0)=""/239, 0x1e00, 0x41, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0x4, 0x1, 0x400}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000640)=[r0, r0, r1, r1], &(0x7f0000000680)=[{0x4, 0x5, 0xd, 0x3}, {0x5, 0x5, 0xe, 0x8}], 0x10, 0x9, @void, @value}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000780)={0xffffffffffffffff, r2, 0x4, r3}, 0x10) 213.136576ms ago: executing program 0 (id=2158): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100), 0xa7c, r0, 0x0, 0x5c0900a0}, 0x38) 83.851038ms ago: executing program 0 (id=2159): bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}, 0x38) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') ioctl$TUNGETVNETHDRSZ(r1, 0xb701, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r2 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='cpu\t\t\t') socketpair(0x1e, 0x4, 0xfff, &(0x7f00000016c0)) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cgroup.freeze\x00', 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xcd, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000100)='\'pu&\t0\t\t\t') r6 = getpid() perf_event_open(&(0x7f0000000280)={0x3, 0x80, 0x31, 0xf9, 0x0, 0xf8, 0x0, 0x3, 0x48004, 0x6, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x800, 0x332}, 0x2020, 0x200, 0x8, 0x2, 0xc, 0x2, 0x1ff, 0x0, 0x7f, 0x0, 0xef3}, r6, 0xf, r4, 0x8) perf_event_open(0x0, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$tipc(r3, &(0x7f0000001680)={&(0x7f0000000300)=@id={0x1e, 0x3, 0x0, {0x4e20, 0x3}}, 0x10, &(0x7f0000000340)=[{&(0x7f00000003c0)="9bce5654d8a221430d9b9a5813df32d6c62271ca74f02f7c11b271033fd07c30c62e4e2af6fa5e7394f580ecee9c6b1f5a6dc916d741fc23b3a225cf1ba0cae99f701acd538098be64662e443eab600a076d5240371eb0faf9d218b25c78e222184ed46896d9dbf64f6e2f577bb8e085bbc16049c3c42d6cb4d2353934686a0470857e4de62d3ad786603822b162b196beb2c73fe3bdf0ce96bd0b44bd9dedb9dd3881594a995ab1", 0xa8}, {&(0x7f0000000580)="60948abe48330e5e40549599766f826f429c45de851d80e67746f58fbc6ee3637fb1c65115de615e4dc8b8f7e260ce05ebc9bdb6d3e888acce68a2d275a29bd9fc246133bce2e1af5e1923b6407371e6d756d3bed17a3d79fc822b992954e75280cda9c1f0732e", 0x67}, {&(0x7f0000000600)="de7b87f4b684aaaae379e53086e684721ff4559ac133b494ada35604f977b4664e02748bb2d31706cbb462cac3257917150f324d20f1c3e75b45974c94a4699b014e51ae18eb89f86267f47271c9529ba3a6463c7b513410215f3474506cc1c1b4b233d380bf1f430300c618f0df37519118e404dd7210851194c7a0aa3e147b", 0x80}], 0x3, &(0x7f0000000680)="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", 0x1000}, 0x80) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x2, 0x0, 0x27, 0x52, 0x0, 0x2, 0x41080, 0x8, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x4, @perf_bp={&(0x7f00000000c0), 0x5}, 0x80, 0x8000, 0x7ff, 0x6, 0x8000, 0x352, 0x88, 0x0, 0x2, 0x0, 0x100000001}, r6, 0x5, r0, 0x9) recvmsg(0xffffffffffffffff, 0x0, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r7, 0x0, 0x0}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="186000000000000000000000000000001857000000000000000000000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x10, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x55, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x44490, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b73, 0x1, @perf_config_ext={0x41235a2a, 0xaea}, 0x14101, 0x32, 0xfffffbff, 0x3, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2007}, 0x0, 0x0, 0xffffffffffffffff, 0x9) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x10, 0x3, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) r9 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r9, 0x1, 0x3e, &(0x7f00000002c0)=r8, 0x4) sendmsg$inet(r9, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)="9f", 0x1}], 0x1}, 0x3e8) 83.519819ms ago: executing program 5 (id=2161): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) socket$kcm(0x2c, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0xffffffffffffffe5) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x103}, 0x203242}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x600, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20004808) sendmsg$sock(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)='k', 0x1}], 0x1, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x303}}], 0x18}, 0x0) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x2100) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f00000008c0)='blkio.bfq.idle_time\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402000000e8fe55a1180015000600142603600e1209000a0000000401a80016000a0013", 0x33}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080b01000000e8fe55a1180015000600142603600e1208", 0x29}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x33fe0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) syz_clone(0x10020300, &(0x7f0000000980)="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", 0x257, &(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0)="6847e94beba208081d8fca3a7fd223a11d99bfc0cf282d8019bddc79e050fef4bbac7efb0900386b9d9845f242c80f60e220931cf6e300") socket$kcm(0xa, 0x2, 0x11) 83.280499ms ago: executing program 4 (id=2162): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)="5c00000003006b02c84e21100af32c6e0a0675f8d34460400000000100005c1e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d493803792684b71bdd70000b6c0504bb9183132", 0x4c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xfffff008}, {0x6, 0x0, 0x0, 0xfffffffd}]}) r2 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x400000002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="d8000000580081044e81f782db44b904021d080009000200e8fe55a1180015000600142603600e120900210000000401a80016000a00014006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7ce", 0x6c}, {&(0x7f0000000ec0)="c9df04cd8ce4f37656ffabb858c02ee95c69ff108ad5b76475bf8916734cbd57c84685f29a99074838097ed28b3d45bd4f24b1ad5ed7661fcf04c5f4e9fbfcebef046540294bb08de607993d1594343d19b89e6da0c4d2f7d7b92a2222268aa59e3113070d539092c09406c9", 0x6c}], 0x2}, 0x24004880) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_type(r3, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r4, &(0x7f0000000280), 0x9) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000c40), 0x12) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r6 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="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"/1952], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = openat$cgroup_subtree(r5, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000080)={[{0x2b, 'cpu'}]}, 0x5) 0s ago: executing program 3 (id=580): socket$kcm(0x2c, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000002c0)='mm_page_alloc\x00', r0}, 0x10) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): re name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 705.408427][T10611] Call Trace: [ 705.411717][T10611] [ 705.414663][T10611] dump_stack_lvl+0x1e3/0x2cb [ 705.419365][T10611] ? nf_tcp_handle_invalid+0x647/0x647 [ 705.424842][T10611] ? panic+0x764/0x764 [ 705.428925][T10611] ? __might_sleep+0xb0/0xb0 [ 705.433526][T10611] ? vsnprintf+0x1bc7/0x1c70 [ 705.438145][T10611] should_fail_ex+0x3a6/0x4d0 [ 705.442840][T10611] should_failslab+0x5/0x20 [ 705.447361][T10611] slab_pre_alloc_hook+0x59/0x300 [ 705.452420][T10611] ? ip_options_get+0x98/0x570 [ 705.457201][T10611] __kmem_cache_alloc_node+0x47/0x260 [ 705.462591][T10611] ? tomoyo_supervisor+0x54f/0x12d0 [ 705.467802][T10611] ? ip_options_get+0x98/0x570 [ 705.472584][T10611] __kmalloc+0xa1/0x230 [ 705.476755][T10611] ip_options_get+0x98/0x570 [ 705.481372][T10611] ? ip_options_undo+0x5e0/0x5e0 [ 705.486327][T10611] ? __lock_acquire+0x1f80/0x1f80 [ 705.491374][T10611] ? ip4_string+0xd1/0xb90 [ 705.495809][T10611] ip_cmsg_send+0x57d/0xb20 [ 705.500332][T10611] raw_sendmsg+0x664/0x25a0 [ 705.504855][T10611] ? tomoyo_check_inet_address+0x27f/0xae0 [ 705.510696][T10611] ? compat_raw_ioctl+0x60/0x60 [ 705.515598][T10611] ? aa_sk_perm+0x92d/0xa60 [ 705.520121][T10611] ? aa_af_perm+0x350/0x350 [ 705.524636][T10611] ? sock_rps_record_flow+0x1a/0x3f0 [ 705.529934][T10611] ? inet_sendmsg+0x81/0x310 [ 705.534532][T10611] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 705.539833][T10611] ? security_socket_sendmsg+0x7d/0xa0 [ 705.545310][T10611] ? inet_send_prepare+0x250/0x250 [ 705.550440][T10611] ____sys_sendmsg+0x5d3/0x9a0 [ 705.555219][T10611] ? __sys_sendmsg_sock+0x30/0x30 [ 705.560263][T10611] __sys_sendmsg+0x2a9/0x390 [ 705.564869][T10611] ? ____sys_sendmsg+0x9a0/0x9a0 [ 705.569833][T10611] ? vfs_write+0x6cf/0xbc0 [ 705.574335][T10611] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 705.580362][T10611] ? syscall_enter_from_user_mode+0x2e/0x230 [ 705.586369][T10611] ? lockdep_hardirqs_on+0x94/0x130 [ 705.591593][T10611] ? syscall_enter_from_user_mode+0x2e/0x230 [ 705.597593][T10611] do_syscall_64+0x3b/0xb0 [ 705.602027][T10611] ? clear_bhb_loop+0x45/0xa0 [ 705.606719][T10611] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 705.612628][T10611] RIP: 0033:0x7fc2c9f8d169 [ 705.617055][T10611] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 705.636689][T10611] RSP: 002b:00007fc2cad1a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 705.645112][T10611] RAX: ffffffffffffffda RBX: 00007fc2ca1a5fa0 RCX: 00007fc2c9f8d169 [ 705.653100][T10611] RDX: 0000000004008804 RSI: 0000200000003a80 RDI: 0000000000000003 [ 705.661113][T10611] RBP: 00007fc2cad1a090 R08: 0000000000000000 R09: 0000000000000000 [ 705.669093][T10611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 705.677071][T10611] R13: 0000000000000000 R14: 00007fc2ca1a5fa0 R15: 00007ffe618798e8 [ 705.685071][T10611] [ 705.752929][T10599] device syzkaller0 entered promiscuous mode [ 705.848596][T10614] netlink: 'syz.4.1625': attribute type 3 has an invalid length. [ 705.866406][T10614] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1625'. [ 705.979421][T10551] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 707.219668][ T4277] Bluetooth: hci2: command 0x041b tx timeout [ 707.908426][T10551] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 707.942974][T10625] netlink: 'syz.0.1630': attribute type 33 has an invalid length. [ 707.968581][T10625] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1630'. [ 708.107359][T10631] netlink: 'syz.2.1632': attribute type 33 has an invalid length. [ 708.132245][T10631] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1632'. [ 708.387708][T10551] team0: Port device team_slave_0 added [ 708.436278][T10551] team0: Port device team_slave_1 added [ 709.296307][ T4277] Bluetooth: hci2: command 0x040f tx timeout [ 709.716456][T10551] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 709.723750][T10551] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 709.801149][T10551] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 709.899171][T10551] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 709.926295][T10551] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 709.995789][T10551] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 710.085406][T10682] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1641'. [ 710.144824][T10683] device syzkaller0 entered promiscuous mode [ 710.204113][T10551] device hsr_slave_0 entered promiscuous mode [ 710.212000][T10551] device hsr_slave_1 entered promiscuous mode [ 710.534294][T10697] netlink: 'syz.2.1643': attribute type 3 has an invalid length. [ 710.553457][T10697] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1643'. [ 711.376362][ T4282] Bluetooth: hci2: command 0x0419 tx timeout [ 713.200917][ T4320] device hsr_slave_0 left promiscuous mode [ 713.236885][ T4320] device hsr_slave_1 left promiscuous mode [ 713.258532][ T4320] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 713.276191][ T4320] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 713.306816][ T4320] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 713.321549][ T4320] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 713.330968][ T4320] device bridge_slave_1 left promiscuous mode [ 713.342363][ T4320] bridge0: port 2(bridge_slave_1) entered disabled state [ 713.365681][ T4320] device bridge_slave_0 left promiscuous mode [ 713.372340][ T4320] bridge0: port 1(bridge_slave_0) entered disabled state [ 713.498944][ T4320] device veth1_macvtap left promiscuous mode [ 713.505082][ T4320] device veth0_macvtap left promiscuous mode [ 713.527516][ T4320] device veth1_vlan left promiscuous mode [ 713.544761][ T4320] device veth0_vlan left promiscuous mode [ 713.665161][T10751] netlink: 14975 bytes leftover after parsing attributes in process `syz.4.1652'. [ 714.844443][T10781] netlink: 'syz.2.1658': attribute type 3 has an invalid length. [ 714.854211][T10781] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1658'. [ 715.264487][ T4320] team0 (unregistering): Port device team_slave_1 removed [ 715.315201][ T4320] team0 (unregistering): Port device team_slave_0 removed [ 715.360933][ T4320] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 715.411951][ T4320] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 715.743022][T10789] netlink: 14975 bytes leftover after parsing attributes in process `syz.5.1661'. [ 716.059736][ T4320] bond0 (unregistering): Released all slaves [ 716.237479][T10795] netlink: 766 bytes leftover after parsing attributes in process `syz.5.1664'. [ 716.263810][T10795] device bond_slave_0 entered promiscuous mode [ 716.270635][T10795] device bond_slave_1 entered promiscuous mode [ 716.668299][T10805] netlink: 14975 bytes leftover after parsing attributes in process `syz.0.1667'. [ 717.167842][T10551] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 717.230209][T10551] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 717.256023][T10822] netlink: 14975 bytes leftover after parsing attributes in process `syz.2.1672'. [ 717.281576][T10551] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 717.303413][T10551] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 717.353612][T10831] netlink: 'syz.0.1673': attribute type 3 has an invalid length. [ 717.383070][T10831] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1673'. [ 717.596905][T10551] 8021q: adding VLAN 0 to HW filter on device bond0 [ 717.635127][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 717.682114][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 717.702413][T10551] 8021q: adding VLAN 0 to HW filter on device team0 [ 717.719825][T10836] netlink: 14719 bytes leftover after parsing attributes in process `syz.5.1675'. [ 717.777812][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 717.813171][T10841] netlink: 'syz.0.1677': attribute type 3 has an invalid length. [ 717.819006][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 717.831154][T10841] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1677'. [ 717.844308][ T4320] bridge0: port 1(bridge_slave_0) entered blocking state [ 717.851569][ T4320] bridge0: port 1(bridge_slave_0) entered forwarding state [ 717.874911][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 717.980525][T10843] device syzkaller0 entered promiscuous mode [ 718.011484][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 718.024364][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 718.075192][ T4320] bridge0: port 2(bridge_slave_1) entered blocking state [ 718.082457][ T4320] bridge0: port 2(bridge_slave_1) entered forwarding state [ 718.098061][T10847] netlink: 'syz.2.1679': attribute type 3 has an invalid length. [ 718.106935][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 718.123538][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 718.138448][T10847] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1679'. [ 718.449544][T10857] FAULT_INJECTION: forcing a failure. [ 718.449544][T10857] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 718.487453][T10857] CPU: 0 PID: 10857 Comm: syz.5.1683 Not tainted 6.1.134-syzkaller #0 [ 718.495747][T10857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 718.505858][T10857] Call Trace: [ 718.509169][T10857] [ 718.512128][T10857] dump_stack_lvl+0x1e3/0x2cb [ 718.516889][T10857] ? nf_tcp_handle_invalid+0x647/0x647 [ 718.522379][T10857] ? panic+0x764/0x764 [ 718.526515][T10857] should_fail_ex+0x3a6/0x4d0 [ 718.531232][T10857] _copy_from_user+0x2b/0x170 [ 718.535956][T10857] map_update_elem+0x45a/0x680 [ 718.540767][T10857] __sys_bpf+0x337/0x6c0 [ 718.545051][T10857] ? bpf_link_show_fdinfo+0x300/0x300 [ 718.550493][T10857] ? syscall_enter_from_user_mode+0x37/0x230 [ 718.556523][T10857] __x64_sys_bpf+0x78/0x90 [ 718.560983][T10857] do_syscall_64+0x3b/0xb0 [ 718.565437][T10857] ? clear_bhb_loop+0x45/0xa0 [ 718.570158][T10857] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 718.576104][T10857] RIP: 0033:0x7fe97f98d169 [ 718.580542][T10857] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 718.600519][T10857] RSP: 002b:00007fe9807bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 718.608947][T10857] RAX: ffffffffffffffda RBX: 00007fe97fba5fa0 RCX: 00007fe97f98d169 [ 718.616924][T10857] RDX: 0000000000000020 RSI: 00002000000003c0 RDI: 0000000000000002 [ 718.624898][T10857] RBP: 00007fe9807bb090 R08: 0000000000000000 R09: 0000000000000000 [ 718.632881][T10857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 718.640856][T10857] R13: 0000000000000000 R14: 00007fe97fba5fa0 R15: 00007ffd7e0a48a8 [ 718.648847][T10857] [ 719.477742][T10864] netlink: 14975 bytes leftover after parsing attributes in process `syz.0.1686'. [ 721.777652][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 721.796989][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 721.810125][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 721.827023][T10867] netlink: 'syz.5.1687': attribute type 10 has an invalid length. [ 721.882825][T10867] 8021q: adding VLAN 0 to HW filter on device team0 [ 721.908899][T10867] device team_slave_0 entered promiscuous mode [ 721.915447][T10867] device team_slave_1 entered promiscuous mode [ 721.922737][T10867] bond0: (slave team0): Enslaving as an active interface with an up link [ 721.932625][T10870] netlink: 'syz.0.1688': attribute type 46 has an invalid length. [ 721.974815][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 721.990774][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 722.032682][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 722.051940][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 722.061073][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 722.074432][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 722.092976][T10551] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 722.512140][T10886] netlink: 'syz.4.1693': attribute type 3 has an invalid length. [ 722.593148][T10886] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1693'. [ 722.876857][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 722.885634][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 722.931952][T10551] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 722.994578][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 723.014883][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 723.082268][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 723.098043][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 723.109248][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 723.118763][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 723.140837][T10551] device veth0_vlan entered promiscuous mode [ 723.179803][T10551] device veth1_vlan entered promiscuous mode [ 723.227891][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 723.250644][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 723.283170][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 723.293837][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 723.313379][T10551] device veth0_macvtap entered promiscuous mode [ 723.333285][T10551] device veth1_macvtap entered promiscuous mode [ 723.367500][T10551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 723.400625][T10551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 723.431327][T10551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 723.447293][T10551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 723.468512][T10551] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 723.488479][ T5402] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 723.535989][ T5402] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 723.562305][ T5402] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 723.602615][ T5402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 723.634295][T10551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 723.653979][T10551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 723.706282][T10551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 723.735638][T10919] netlink: 14975 bytes leftover after parsing attributes in process `syz.0.1698'. [ 723.749304][T10551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 723.769516][T10551] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 723.789894][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 723.845625][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 723.862216][T10921] netlink: 'syz.2.1699': attribute type 3 has an invalid length. [ 723.873611][T10921] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1699'. [ 723.900584][T10551] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 723.937703][T10551] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 723.950797][T10551] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 723.960094][T10551] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.087224][T10923] device syzkaller0 entered promiscuous mode [ 724.168858][T10931] netlink: 'syz.5.1702': attribute type 46 has an invalid length. [ 727.013218][T10955] netlink: 14975 bytes leftover after parsing attributes in process `syz.2.1711'. [ 727.927334][T10943] bridge0: port 2(bridge_slave_1) entered disabled state [ 727.935155][T10943] bridge0: port 1(bridge_slave_0) entered disabled state [ 728.006657][T10944] bridge0: port 2(bridge_slave_1) entered blocking state [ 728.014014][T10944] bridge0: port 2(bridge_slave_1) entered forwarding state [ 728.021734][T10944] bridge0: port 1(bridge_slave_0) entered blocking state [ 728.029063][T10944] bridge0: port 1(bridge_slave_0) entered forwarding state [ 728.047529][T10944] device bridge0 entered promiscuous mode [ 728.077266][T10957] netlink: 14719 bytes leftover after parsing attributes in process `syz.2.1712'. [ 728.136840][T10960] FAULT_INJECTION: forcing a failure. [ 728.136840][T10960] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 728.162150][T10960] CPU: 1 PID: 10960 Comm: syz.4.1713 Not tainted 6.1.134-syzkaller #0 [ 728.170374][T10960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 728.180442][T10960] Call Trace: [ 728.183729][T10960] [ 728.186682][T10960] dump_stack_lvl+0x1e3/0x2cb [ 728.191373][T10960] ? nf_tcp_handle_invalid+0x647/0x647 [ 728.196840][T10960] ? panic+0x764/0x764 [ 728.200933][T10960] should_fail_ex+0x3a6/0x4d0 [ 728.205618][T10960] strncpy_from_user+0x32/0x360 [ 728.210490][T10960] bpf_prog_load+0x1fb/0x1bf0 [ 728.215182][T10960] ? map_freeze+0x390/0x390 [ 728.219693][T10960] ? __might_fault+0xa1/0x110 [ 728.224391][T10960] ? __might_fault+0xbd/0x110 [ 728.229083][T10960] ? bpf_lsm_bpf+0x5/0x10 [ 728.233421][T10960] ? security_bpf+0x7d/0xa0 [ 728.237935][T10960] __sys_bpf+0x382/0x6c0 [ 728.242183][T10960] ? __fget_files+0x435/0x4a0 [ 728.246893][T10960] ? bpf_link_show_fdinfo+0x300/0x300 [ 728.252271][T10960] ? perf_trace_preemptirq_template+0xf4/0x3d0 [ 728.258461][T10960] ? print_irqtrace_events+0x210/0x210 [ 728.263942][T10960] ? print_irqtrace_events+0x210/0x210 [ 728.269423][T10960] ? syscall_enter_from_user_mode+0x2e/0x230 [ 728.275420][T10960] ? lockdep_hardirqs_on+0x94/0x130 [ 728.280729][T10960] __x64_sys_bpf+0x78/0x90 [ 728.285171][T10960] do_syscall_64+0x3b/0xb0 [ 728.289595][T10960] ? clear_bhb_loop+0x45/0xa0 [ 728.294289][T10960] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 728.300197][T10960] RIP: 0033:0x7fa24398d169 [ 728.304625][T10960] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 728.324247][T10960] RSP: 002b:00007fa2437ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 728.332677][T10960] RAX: ffffffffffffffda RBX: 00007fa243ba5fa0 RCX: 00007fa24398d169 [ 728.340659][T10960] RDX: 0000000000000080 RSI: 0000200000000340 RDI: 0000000000000005 [ 728.348636][T10960] RBP: 00007fa2437ff090 R08: 0000000000000000 R09: 0000000000000000 [ 728.356626][T10960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 728.364623][T10960] R13: 0000000000000001 R14: 00007fa243ba5fa0 R15: 00007ffecc9c5a98 [ 728.372635][T10960] [ 728.475312][ T4320] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 728.505711][T10962] netlink: 'syz.0.1714': attribute type 3 has an invalid length. [ 728.515096][ T4320] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 728.544357][ T5402] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 728.544516][T10962] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1714'. [ 728.572466][ T5402] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 728.586529][ T5402] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 728.614055][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 728.901048][T10974] netlink: 'syz.4.1717': attribute type 46 has an invalid length. [ 729.668380][T10982] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 729.688219][T10982] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 729.818317][ T5402] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 730.099597][T10992] netlink: 'syz.5.1722': attribute type 19 has an invalid length. [ 730.118715][T10992] netlink: 156 bytes leftover after parsing attributes in process `syz.5.1722'. [ 730.339928][T10982] syz.0.1719 (10982) used greatest stack depth: 19776 bytes left [ 730.424806][ T5402] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.691732][ T5402] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.839450][ T5402] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.886751][T11007] bridge0: port 2(bridge_slave_1) entered disabled state [ 731.894165][T11007] bridge0: port 1(bridge_slave_0) entered disabled state [ 731.934032][T11007] device bridge0 left promiscuous mode [ 731.996878][T11012] bridge0: port 2(bridge_slave_1) entered blocking state [ 732.004167][T11012] bridge0: port 2(bridge_slave_1) entered forwarding state [ 732.011915][T11012] bridge0: port 1(bridge_slave_0) entered blocking state [ 732.019236][T11012] bridge0: port 1(bridge_slave_0) entered forwarding state [ 732.086250][T11012] device bridge0 entered promiscuous mode [ 732.365252][T11009] device syzkaller0 entered promiscuous mode [ 732.477472][ T4266] syzkaller0: tun_net_xmit 48 [ 732.621457][T11018] netlink: 'syz.4.1728': attribute type 3 has an invalid length. [ 732.641773][T11018] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1728'. [ 732.803321][T11023] netlink: 'syz.2.1729': attribute type 29 has an invalid length. [ 733.268389][ T4282] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 733.290862][ T4282] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 733.306987][ T4282] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 733.326833][ T4282] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 733.335624][ T4282] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 733.352730][ T4282] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 735.377752][ T4277] Bluetooth: hci2: command 0x0409 tx timeout [ 736.300692][T11023] netlink: 'syz.2.1729': attribute type 29 has an invalid length. [ 737.456461][ T4277] Bluetooth: hci2: command 0x041b tx timeout [ 737.960448][T11025] chnl_net:caif_netlink_parms(): no params data found [ 738.145466][T11070] netlink: 'syz.0.1740': attribute type 29 has an invalid length. [ 738.180247][T11061] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 738.200008][T11061] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 738.259582][T11070] netlink: 'syz.0.1740': attribute type 29 has an invalid length. [ 738.274177][T11076] netlink: 'syz.0.1740': attribute type 29 has an invalid length. [ 738.451210][T11072] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1738'. [ 738.523380][T11025] bridge0: port 1(bridge_slave_0) entered blocking state [ 738.551623][T11025] bridge0: port 1(bridge_slave_0) entered disabled state [ 738.660344][T11025] device bridge_slave_0 entered promiscuous mode [ 738.982312][T11025] bridge0: port 2(bridge_slave_1) entered blocking state [ 739.002627][T11025] bridge0: port 2(bridge_slave_1) entered disabled state [ 739.080434][T11025] device bridge_slave_1 entered promiscuous mode [ 739.257383][T11089] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1742'. [ 739.328495][T11076] netlink: 'syz.0.1740': attribute type 29 has an invalid length. [ 739.463643][T11089] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1742'. [ 739.566226][ T4277] Bluetooth: hci2: command 0x040f tx timeout [ 739.640137][T11025] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 739.711110][T11095] netlink: 'syz.2.1742': attribute type 10 has an invalid length. [ 739.746688][T11095] bridge0: port 1(team0) entered disabled state [ 739.771277][T11095] device bridge_slave_1 left promiscuous mode [ 739.797399][T11095] bridge0: port 2(bridge_slave_1) entered disabled state [ 740.352593][T11086] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1742'. [ 740.384929][T11025] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 740.694421][T11025] team0: Port device team_slave_0 added [ 740.735004][ T5402] device hsr_slave_0 left promiscuous mode [ 740.796867][ T5402] device hsr_slave_1 left promiscuous mode [ 740.809768][ T5402] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 740.864900][ T5402] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 740.904600][ T5402] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 740.931686][ T5402] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 740.970680][ T5402] device bridge_slave_1 left promiscuous mode [ 740.991829][ T5402] bridge0: port 2(bridge_slave_1) entered disabled state [ 741.033049][ T5402] device bridge_slave_0 left promiscuous mode [ 741.055608][ T5402] bridge0: port 1(bridge_slave_0) entered disabled state [ 741.110056][ T5402] device veth1_macvtap left promiscuous mode [ 741.126301][ T5402] device veth0_macvtap left promiscuous mode [ 741.142794][ T5402] device veth1_vlan left promiscuous mode [ 741.152901][ T5402] device veth0_vlan left promiscuous mode [ 741.628630][ T4277] Bluetooth: hci2: command 0x0419 tx timeout [ 742.613906][ T5402] team0 (unregistering): Port device team_slave_1 removed [ 742.672387][ T5402] team0 (unregistering): Port device team_slave_0 removed [ 742.737222][ T5402] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 742.790824][ T5402] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 743.524465][ T5402] bond0 (unregistering): Released all slaves [ 743.610761][T11025] team0: Port device team_slave_1 added [ 743.629536][T11131] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1753'. [ 743.752295][T11025] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 743.780771][T11025] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 743.861386][T11025] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 743.892485][T11025] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 743.915891][T11025] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 743.957203][T11139] netlink: 'syz.4.1756': attribute type 29 has an invalid length. [ 744.071246][T11025] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 744.099221][T11139] netlink: 'syz.4.1756': attribute type 29 has an invalid length. [ 744.192449][T11147] bridge0: port 2(bridge_slave_1) entered disabled state [ 744.217323][T11147] device bridge0 left promiscuous mode [ 744.285892][T11143] netlink: 'syz.4.1756': attribute type 29 has an invalid length. [ 744.387052][T11137] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 744.436801][T11137] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 744.602849][T11142] bridge0: port 2(bridge_slave_1) entered blocking state [ 744.610245][T11142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 744.636844][T11142] device bridge0 entered promiscuous mode [ 744.734017][T11025] device hsr_slave_0 entered promiscuous mode [ 744.753623][T11025] device hsr_slave_1 entered promiscuous mode [ 744.964453][T11148] device syzkaller0 entered promiscuous mode [ 745.027404][ T4328] syzkaller0: tun_net_xmit 48 [ 745.397567][T11167] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1760'. [ 747.309338][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.317307][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.632524][T11143] netlink: 'syz.4.1756': attribute type 29 has an invalid length. [ 747.644945][T11167] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1760'. [ 747.665641][T11171] netlink: 'syz.0.1760': attribute type 10 has an invalid length. [ 747.688642][T11171] device bridge_slave_1 left promiscuous mode [ 747.716396][T11171] bridge0: port 2(bridge_slave_1) entered disabled state [ 747.909468][T11177] netlink: 'syz.5.1762': attribute type 3 has an invalid length. [ 747.934825][T11177] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.1762'. [ 749.244221][T11025] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 749.317851][T11025] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 749.369215][T11025] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 749.457895][T11025] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 750.012118][T11220] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1771'. [ 750.212893][T11025] 8021q: adding VLAN 0 to HW filter on device bond0 [ 750.471734][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 750.519000][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 750.555213][T11025] 8021q: adding VLAN 0 to HW filter on device team0 [ 750.616758][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 750.645566][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 750.665396][ T4261] bridge0: port 1(bridge_slave_0) entered blocking state [ 750.672639][ T4261] bridge0: port 1(bridge_slave_0) entered forwarding state [ 750.758198][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 750.770812][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 750.790159][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 750.800210][ T4261] bridge0: port 2(bridge_slave_1) entered blocking state [ 750.807413][ T4261] bridge0: port 2(bridge_slave_1) entered forwarding state [ 750.824088][T11238] netlink: 'syz.5.1772': attribute type 2 has an invalid length. [ 750.832308][T11238] netlink: 'syz.5.1772': attribute type 1 has an invalid length. [ 750.846429][T11236] netlink: 'syz.0.1774': attribute type 3 has an invalid length. [ 750.854238][T11236] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1774'. [ 750.869077][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 750.880051][T11238] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1772'. [ 750.894060][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 750.925890][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 750.965902][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 751.075869][T11239] device syzkaller0 entered promiscuous mode [ 751.129946][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 751.158793][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 751.188574][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 753.559017][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 753.567897][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 753.621293][T11025] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 753.698832][T11025] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 753.725555][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 753.765640][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 754.331394][T11288] bridge0: port 2(bridge_slave_1) entered disabled state [ 754.371503][T11288] device bridge0 left promiscuous mode [ 754.461486][T11289] bridge0: port 2(bridge_slave_1) entered blocking state [ 754.468936][T11289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 754.576810][T11289] device bridge0 entered promiscuous mode [ 754.718691][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 754.739831][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 754.817236][T11025] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 754.933282][T11297] netlink: 'syz.2.1787': attribute type 3 has an invalid length. [ 754.949637][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 754.979414][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 755.006295][T11297] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1787'. [ 755.058091][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 755.067299][T11304] sock: sock_timestamping_bind_phc: sock not bind to device [ 755.079077][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 755.100976][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 755.146656][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 755.188621][T11025] device veth0_vlan entered promiscuous mode [ 755.233282][T11025] device veth1_vlan entered promiscuous mode [ 755.340549][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 755.361452][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 755.397168][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 755.422412][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 755.454287][T11025] device veth0_macvtap entered promiscuous mode [ 755.676912][T11309] device syzkaller0 entered promiscuous mode [ 755.688245][T11025] device veth1_macvtap entered promiscuous mode [ 755.701490][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 755.733212][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 755.760893][T11314] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1802'. [ 755.818545][ T4325] syzkaller0: tun_net_xmit 48 [ 756.208993][T11331] netlink: 'syz.2.1795': attribute type 3 has an invalid length. [ 756.225256][T11331] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1795'. [ 758.101367][T11025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 758.146844][T11025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 758.206173][T11025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 758.246217][T11025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 758.287241][T11025] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 758.296511][ T5402] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 758.330442][ T5402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 758.361369][T11025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 758.402486][T11025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 758.430911][T11025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 758.453463][T11343] netlink: 'syz.4.1800': attribute type 2 has an invalid length. [ 758.470469][T11025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 758.471714][T11343] netlink: 'syz.4.1800': attribute type 1 has an invalid length. [ 758.501669][T11025] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 758.507571][T11343] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1800'. [ 758.523579][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 758.557660][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 758.610474][T11025] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 758.653044][T11025] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 758.710945][T11025] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 758.756163][T11025] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 758.843273][T11352] sock: sock_timestamping_bind_phc: sock not bind to device [ 759.151099][T11356] bridge0: port 2(bridge_slave_1) entered disabled state [ 759.158641][T11356] bridge0: port 1(bridge_slave_0) entered disabled state [ 759.187839][T11356] device bridge0 left promiscuous mode [ 759.247840][ T4320] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 759.255941][ T4320] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 759.309582][T11357] bridge0: port 2(bridge_slave_1) entered blocking state [ 759.316867][T11357] bridge0: port 2(bridge_slave_1) entered forwarding state [ 759.324528][T11357] bridge0: port 1(bridge_slave_0) entered blocking state [ 759.331852][T11357] bridge0: port 1(bridge_slave_0) entered forwarding state [ 759.455057][T11357] device bridge0 entered promiscuous mode [ 759.507207][ T5402] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 759.742696][ T5402] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 759.759594][ T5402] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 759.829625][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 760.161839][T11379] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.1810'. [ 760.401281][ T9] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 760.552273][ T9] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 760.635001][ T9] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 760.890915][ T9] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 761.929795][ T9] device hsr_slave_0 left promiscuous mode [ 761.937083][ T9] device hsr_slave_1 left promiscuous mode [ 761.943509][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 761.951966][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 761.959896][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 761.967766][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 761.975457][ T9] device bridge_slave_1 left promiscuous mode [ 761.981764][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 761.990854][ T9] device bridge_slave_0 left promiscuous mode [ 761.997151][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 762.024925][ T9] device veth1_macvtap left promiscuous mode [ 762.066212][ T9] device veth0_macvtap left promiscuous mode [ 762.072418][ T9] device veth1_vlan left promiscuous mode [ 762.108346][ T9] device veth0_vlan left promiscuous mode [ 762.700096][ T4282] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 762.723124][ T4282] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 762.734377][ T4282] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 762.747391][ T4282] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 762.757123][ T4282] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 762.764663][ T4282] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 763.109929][ T9] team0 (unregistering): Port device team_slave_1 removed [ 763.151445][ T9] team0 (unregistering): Port device team_slave_0 removed [ 763.194016][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 763.239025][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 763.633960][ T9] bond0 (unregistering): Released all slaves [ 763.741947][T11456] netlink: 'syz.2.1819': attribute type 19 has an invalid length. [ 763.751441][T11456] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1819'. [ 764.373041][T11474] bridge0: port 2(bridge_slave_1) entered disabled state [ 764.380480][T11474] bridge0: port 1(bridge_slave_0) entered disabled state [ 764.392409][T11474] device bridge0 left promiscuous mode [ 764.426777][T11476] bridge0: port 2(bridge_slave_1) entered blocking state [ 764.434055][T11476] bridge0: port 2(bridge_slave_1) entered forwarding state [ 764.441800][T11476] bridge0: port 1(bridge_slave_0) entered blocking state [ 764.449106][T11476] bridge0: port 1(bridge_slave_0) entered forwarding state [ 764.493769][T11476] device bridge0 entered promiscuous mode [ 764.816326][ T4277] Bluetooth: hci2: command 0x0409 tx timeout [ 764.987527][T11457] chnl_net:caif_netlink_parms(): no params data found [ 765.339954][T11457] bridge0: port 1(bridge_slave_0) entered blocking state [ 765.376275][T11457] bridge0: port 1(bridge_slave_0) entered disabled state [ 765.384627][T11457] device bridge_slave_0 entered promiscuous mode [ 765.427339][T11457] bridge0: port 2(bridge_slave_1) entered blocking state [ 765.434587][T11457] bridge0: port 2(bridge_slave_1) entered disabled state [ 765.475303][T11457] device bridge_slave_1 entered promiscuous mode [ 765.554961][T11457] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 765.590787][T11457] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 765.700787][T11457] team0: Port device team_slave_0 added [ 765.711949][T11511] netlink: 'syz.5.1830': attribute type 19 has an invalid length. [ 765.722131][T11511] netlink: 156 bytes leftover after parsing attributes in process `syz.5.1830'. [ 765.742519][T11457] team0: Port device team_slave_1 added [ 765.776405][T11457] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 765.783469][T11457] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 765.831062][T11457] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 765.844182][T11457] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 765.858406][T11457] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 765.896190][T11457] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 766.068434][T11457] device hsr_slave_0 entered promiscuous mode [ 766.112678][T11457] device hsr_slave_1 entered promiscuous mode [ 766.130795][T11526] netlink: 65055 bytes leftover after parsing attributes in process `syz.4.1833'. [ 766.227718][T11530] netlink: 'syz.2.1834': attribute type 19 has an invalid length. [ 766.235624][T11530] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1834'. [ 766.819535][T11550] bridge0: port 2(bridge_slave_1) entered disabled state [ 766.827121][T11550] bridge0: port 1(bridge_slave_0) entered disabled state [ 766.847176][T11550] device bridge0 left promiscuous mode [ 766.896274][ T4282] Bluetooth: hci2: command 0x041b tx timeout [ 766.962957][T11552] bridge0: port 2(bridge_slave_1) entered blocking state [ 766.970390][T11552] bridge0: port 2(bridge_slave_1) entered forwarding state [ 766.978118][T11552] bridge0: port 1(bridge_slave_0) entered blocking state [ 766.985295][T11552] bridge0: port 1(bridge_slave_0) entered forwarding state [ 766.996641][T11552] device bridge0 entered promiscuous mode [ 767.503574][T11457] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 767.628908][T11457] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 767.658953][T11457] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 767.716611][T11457] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 767.893310][T11564] netlink: 'syz.4.1843': attribute type 3 has an invalid length. [ 767.922781][T11564] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1843'. [ 768.043147][T11572] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1844'. [ 768.067443][T11457] 8021q: adding VLAN 0 to HW filter on device bond0 [ 768.091450][T11572] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1844'. [ 768.130432][T11568] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1844'. [ 768.195353][T11457] 8021q: adding VLAN 0 to HW filter on device team0 [ 768.212795][T11572] netlink: 'syz.2.1844': attribute type 10 has an invalid length. [ 768.232925][ T5402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 768.250931][ T5402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 768.339622][ T5402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 768.357037][ T5402] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 768.385968][ T5402] bridge0: port 1(bridge_slave_0) entered blocking state [ 768.393209][ T5402] bridge0: port 1(bridge_slave_0) entered forwarding state [ 768.443980][ T5402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 768.465152][ T5402] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 768.515572][ T5402] bridge0: port 2(bridge_slave_1) entered blocking state [ 768.522852][ T5402] bridge0: port 2(bridge_slave_1) entered forwarding state [ 768.584004][T11580] netlink: 'syz.0.1848': attribute type 19 has an invalid length. [ 768.605392][T11580] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1848'. [ 768.630495][T11584] netlink: 65055 bytes leftover after parsing attributes in process `syz.5.1849'. [ 768.672206][ T5402] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 768.681676][ T5402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 768.691699][ T5402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 768.704046][ T5402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 768.739211][ T5402] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 768.794278][ T5402] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 768.813463][ T5402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 768.870943][ T5402] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 768.900210][ T5402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 768.913581][ T5402] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 768.926581][T11596] netlink: 'syz.2.1852': attribute type 19 has an invalid length. [ 768.956193][T11596] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1852'. [ 768.976403][ T4282] Bluetooth: hci2: command 0x040f tx timeout [ 768.988768][T11457] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 769.043674][T11604] syz.5.1856[11604] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 769.044268][T11604] syz.5.1856[11604] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 769.045732][T11457] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 769.143012][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 769.152534][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 769.344730][T11612] netlink: 'syz.0.1858': attribute type 3 has an invalid length. [ 769.369494][T11612] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1858'. [ 769.520483][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 769.544170][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 769.561787][T11457] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 769.634049][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 769.649221][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 769.688886][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 769.702970][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 769.714006][T11627] netlink: 'syz.0.1863': attribute type 10 has an invalid length. [ 769.731472][T11457] device veth0_vlan entered promiscuous mode [ 769.732467][T11622] FAULT_INJECTION: forcing a failure. [ 769.732467][T11622] name failslab, interval 1, probability 0, space 0, times 0 [ 769.755655][T11457] device veth1_vlan entered promiscuous mode [ 769.781758][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 769.795680][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 769.806226][T11622] CPU: 0 PID: 11622 Comm: syz.4.1862 Not tainted 6.1.134-syzkaller #0 [ 769.814453][T11622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 769.824546][T11622] Call Trace: [ 769.827842][T11622] [ 769.830786][T11622] dump_stack_lvl+0x1e3/0x2cb [ 769.835488][T11622] ? nf_tcp_handle_invalid+0x647/0x647 [ 769.840969][T11622] ? panic+0x764/0x764 [ 769.845247][T11622] ? __might_sleep+0xb0/0xb0 [ 769.849871][T11622] should_fail_ex+0x3a6/0x4d0 [ 769.854572][T11622] should_failslab+0x5/0x20 [ 769.859123][T11622] slab_pre_alloc_hook+0x59/0x300 [ 769.864200][T11622] ? allocate_cgrp_cset_links+0xc5/0x320 [ 769.869854][T11622] __kmem_cache_alloc_node+0x47/0x260 [ 769.875260][T11622] ? allocate_cgrp_cset_links+0xc5/0x320 [ 769.880908][T11622] kmalloc_trace+0x26/0xe0 [ 769.885350][T11622] allocate_cgrp_cset_links+0xc5/0x320 [ 769.890845][T11622] find_css_set+0xb23/0x1710 [ 769.895470][T11622] ? cgroup_migrate_prepare_dst+0x680/0x680 [ 769.901436][T11622] cgroup_migrate_prepare_dst+0x120/0x680 [ 769.907182][T11622] ? lockdep_hardirqs_on+0x94/0x130 [ 769.912405][T11622] cgroup_attach_task+0x5e3/0x970 [ 769.917448][T11622] ? cgroup_attach_task+0x2ae/0x970 [ 769.922666][T11622] ? cgroup_migrate_execute+0x1060/0x1060 [ 769.928433][T11622] ? get_task_cred+0x22/0x3a0 [ 769.933127][T11622] ? get_task_cred+0x362/0x3a0 [ 769.937908][T11622] ? get_task_cred+0x22/0x3a0 [ 769.942612][T11622] __cgroup1_procs_write+0x2ef/0x460 [ 769.947927][T11622] ? cgroup_pidlist_destroy_work_fn+0x210/0x210 [ 769.954190][T11622] ? read_lock_is_recursive+0x10/0x10 [ 769.959587][T11622] ? cgroup_sane_behavior_show+0x20/0x20 [ 769.965237][T11622] cgroup_file_write+0x2c6/0x6c0 [ 769.970211][T11622] ? kernfs_fop_write_iter+0x1e7/0x4f0 [ 769.975705][T11622] ? cgroup_seqfile_stop+0xd0/0xd0 [ 769.980841][T11622] ? __virt_addr_valid+0x17f/0x530 [ 769.985993][T11622] ? cgroup_seqfile_stop+0xd0/0xd0 [ 769.991136][T11622] kernfs_fop_write_iter+0x3a2/0x4f0 [ 769.996586][T11622] vfs_write+0x857/0xbc0 [ 770.000870][T11622] ? file_end_write+0x250/0x250 [ 770.005850][T11622] ? __fget_files+0x28/0x4a0 [ 770.010460][T11622] ? __fget_files+0x435/0x4a0 [ 770.015184][T11622] ? __fdget_pos+0x2ba/0x360 [ 770.019802][T11622] ? ksys_write+0x77/0x2c0 [ 770.024242][T11622] ksys_write+0x19c/0x2c0 [ 770.028589][T11622] ? print_irqtrace_events+0x210/0x210 [ 770.034090][T11622] ? __ia32_sys_read+0x80/0x80 [ 770.038875][T11622] ? syscall_enter_from_user_mode+0x2e/0x230 [ 770.044882][T11622] ? lockdep_hardirqs_on+0x94/0x130 [ 770.050114][T11622] ? syscall_enter_from_user_mode+0x2e/0x230 [ 770.056125][T11622] do_syscall_64+0x3b/0xb0 [ 770.060562][T11622] ? clear_bhb_loop+0x45/0xa0 [ 770.065301][T11622] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 770.071214][T11622] RIP: 0033:0x7fa24398d169 [ 770.075653][T11622] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 770.095279][T11622] RSP: 002b:00007fa2437ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 770.103713][T11622] RAX: ffffffffffffffda RBX: 00007fa243ba5fa0 RCX: 00007fa24398d169 [ 770.111701][T11622] RDX: 0000000000000012 RSI: 0000200000000580 RDI: 0000000000000004 [ 770.119688][T11622] RBP: 00007fa2437ff090 R08: 0000000000000000 R09: 0000000000000000 [ 770.127671][T11622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 770.135653][T11622] R13: 0000000000000000 R14: 00007fa243ba5fa0 R15: 00007ffecc9c5a98 [ 770.143674][T11622] [ 770.153869][T11631] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1861'. [ 770.167204][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 770.183157][T11631] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1861'. [ 770.225512][T11632] netlink: 'syz.5.1861': attribute type 10 has an invalid length. [ 770.345351][T11632] device bridge_slave_1 left promiscuous mode [ 770.375282][T11632] bridge0: port 2(bridge_slave_1) entered disabled state [ 770.402533][T11632] device bridge_slave_0 left promiscuous mode [ 770.419179][T11632] bridge0: port 1(bridge_slave_0) entered disabled state [ 770.504928][T11626] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1861'. [ 770.525687][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 770.538040][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 770.558326][T11635] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.1865'. [ 770.599480][T11457] device veth0_macvtap entered promiscuous mode [ 770.661628][T11457] device veth1_macvtap entered promiscuous mode [ 770.723331][T11457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 770.766655][T11457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 770.786792][T11457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 770.803736][T11457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 770.817751][T11457] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 770.833688][T11457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 770.844520][T11457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 770.865633][T11457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 770.876479][T11457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 770.888154][T11457] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 770.901253][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 770.910508][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 770.919676][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 770.937470][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 770.947122][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 770.957658][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 771.022740][T11649] device syzkaller0 entered promiscuous mode [ 771.032835][T11652] netlink: 'syz.2.1869': attribute type 19 has an invalid length. [ 771.041412][T11652] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1869'. [ 771.055837][T11457] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 771.064994][ T4282] Bluetooth: hci2: command 0x0419 tx timeout [ 771.075099][T11457] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 771.084381][T11457] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 771.093717][T11457] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 771.165936][T11659] netlink: 'syz.4.1873': attribute type 3 has an invalid length. [ 771.175153][T11659] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1873'. [ 771.573420][T11667] netlink: 'syz.0.1875': attribute type 2 has an invalid length. [ 771.582570][T11667] netlink: 'syz.0.1875': attribute type 1 has an invalid length. [ 771.592406][T11667] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1875'. [ 773.417358][ T5402] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 773.425602][ T5402] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 773.472678][T11675] netlink: 'syz.5.1878': attribute type 29 has an invalid length. [ 773.493416][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 773.518530][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 773.533437][T11675] netlink: 'syz.5.1878': attribute type 29 has an invalid length. [ 773.553579][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 773.623355][T11683] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1879'. [ 773.638667][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 774.126565][T11695] validate_nla: 2 callbacks suppressed [ 774.126584][T11695] netlink: 'syz.5.1881': attribute type 29 has an invalid length. [ 774.155113][T11695] netlink: 'syz.5.1881': attribute type 29 has an invalid length. [ 774.185210][T11695] netlink: 'syz.5.1881': attribute type 29 has an invalid length. [ 774.428978][T11706] syz.2.1885[11706] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 774.429885][T11706] syz.2.1885[11706] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 774.524181][T11709] netlink: 'syz.5.1887': attribute type 3 has an invalid length. [ 774.565322][T11709] __nla_validate_parse: 2 callbacks suppressed [ 774.565368][T11709] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.1887'. [ 774.618205][ T9] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 774.934808][ T9] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.124021][ T9] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.291046][ T9] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 776.434718][ T9] device hsr_slave_0 left promiscuous mode [ 776.441518][ T9] device hsr_slave_1 left promiscuous mode [ 776.448193][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 776.455776][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 776.471313][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 776.478974][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 776.491038][ T9] device bridge_slave_1 left promiscuous mode [ 776.497695][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 776.511314][ T9] device bridge_slave_0 left promiscuous mode [ 776.517670][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 776.557153][ T9] device veth1_macvtap left promiscuous mode [ 776.563456][ T9] device veth0_macvtap left promiscuous mode [ 776.572716][ T9] device veth1_vlan left promiscuous mode [ 776.578841][ T9] device veth0_vlan left promiscuous mode [ 777.033815][T11777] netlink: 'syz.5.1889': attribute type 2 has an invalid length. [ 777.052573][T11777] netlink: 'syz.5.1889': attribute type 1 has an invalid length. [ 777.076965][T11777] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1889'. [ 777.866406][ T4277] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 777.875709][ T9] team0 (unregistering): Port device team_slave_1 removed [ 777.875762][ T4277] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 777.892292][ T4277] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 777.904609][ T4277] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 777.913374][ T4283] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 777.920890][ T4277] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 777.959355][ T9] team0 (unregistering): Port device team_slave_0 removed [ 778.001211][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 778.042689][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 778.454119][ T9] bond0 (unregistering): Released all slaves [ 779.170077][T11793] chnl_net:caif_netlink_parms(): no params data found [ 779.215314][T11814] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1897'. [ 779.283427][T11814] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1897'. [ 779.300894][T11810] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1897'. [ 779.334070][T11816] netlink: 'syz.2.1897': attribute type 10 has an invalid length. [ 780.026635][ T4277] Bluetooth: hci2: command 0x0409 tx timeout [ 780.346166][T11793] bridge0: port 1(bridge_slave_0) entered blocking state [ 780.353427][T11793] bridge0: port 1(bridge_slave_0) entered disabled state [ 780.413237][T11793] device bridge_slave_0 entered promiscuous mode [ 780.460908][T11793] bridge0: port 2(bridge_slave_1) entered blocking state [ 780.482701][T11793] bridge0: port 2(bridge_slave_1) entered disabled state [ 780.503488][T11793] device bridge_slave_1 entered promiscuous mode [ 780.534979][T11854] syz.4.1906[11854] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 780.535652][T11854] syz.4.1906[11854] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 780.544232][T11855] netlink: 'syz.0.1903': attribute type 2 has an invalid length. [ 780.666297][T11855] netlink: 'syz.0.1903': attribute type 1 has an invalid length. [ 780.673124][T11846] device syzkaller0 entered promiscuous mode [ 780.719403][T11793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 780.729197][T11855] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1903'. [ 780.765160][T11793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 780.800489][ T4266] syzkaller0: tun_net_xmit 48 [ 780.855137][T11793] team0: Port device team_slave_0 added [ 780.909089][T11793] team0: Port device team_slave_1 added [ 781.100271][T11867] netlink: 'syz.0.1909': attribute type 3 has an invalid length. [ 781.157590][T11867] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1909'. [ 782.106212][ T4277] Bluetooth: hci2: command 0x041b tx timeout [ 783.026742][T11793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 783.040799][T11793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 783.097417][T11793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 783.126533][T11793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 783.133560][T11793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 783.196789][T11881] netlink: 'syz.4.1915': attribute type 29 has an invalid length. [ 783.205237][T11793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 783.221880][T11881] netlink: 'syz.4.1915': attribute type 29 has an invalid length. [ 783.252749][T11881] netlink: 'syz.4.1915': attribute type 29 has an invalid length. [ 783.326979][T11888] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1913'. [ 783.410437][T11888] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1913'. [ 783.428186][T11882] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1913'. [ 783.458078][T11891] netlink: 'syz.5.1913': attribute type 10 has an invalid length. [ 783.483667][T11793] device hsr_slave_0 entered promiscuous mode [ 783.519286][T11793] device hsr_slave_1 entered promiscuous mode [ 784.171259][T11903] IPv6: Can't replace route, no match found [ 784.186874][ T4277] Bluetooth: hci2: command 0x040f tx timeout [ 784.572644][T11922] netlink: 'syz.4.1919': attribute type 2 has an invalid length. [ 784.595899][T11922] netlink: 'syz.4.1919': attribute type 1 has an invalid length. [ 784.627885][T11922] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1919'. [ 784.657572][T11923] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.1922'. [ 785.033931][T11935] netlink: 'syz.2.1924': attribute type 3 has an invalid length. [ 785.079526][T11939] netlink: 'syz.4.1926': attribute type 29 has an invalid length. [ 785.101118][T11935] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1924'. [ 785.106753][T11939] netlink: 'syz.4.1926': attribute type 29 has an invalid length. [ 785.151984][T11941] netlink: 'syz.4.1926': attribute type 29 has an invalid length. [ 785.401173][T11793] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 785.412085][T11793] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 785.444854][T11949] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1927'. [ 785.469423][T11793] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 785.486559][T11949] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1927'. [ 785.506806][T11793] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 785.537682][T11953] netlink: 'syz.5.1927': attribute type 10 has an invalid length. [ 785.622112][T11952] tap0: tun_chr_ioctl cmd 2147767507 [ 785.901485][T11793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 785.982407][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 785.999229][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 786.059189][T11970] bridge0: port 2(bridge_slave_1) entered disabled state [ 786.080485][T11970] device bridge0 left promiscuous mode [ 786.183186][T11793] 8021q: adding VLAN 0 to HW filter on device team0 [ 786.220212][T11971] bridge0: port 2(bridge_slave_1) entered blocking state [ 786.227571][T11971] bridge0: port 2(bridge_slave_1) entered forwarding state [ 786.262935][ T4277] Bluetooth: hci2: command 0x0419 tx timeout [ 786.308939][T11971] device bridge0 entered promiscuous mode [ 786.343602][ T4779] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 786.357743][ T4779] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 786.377376][ T4779] bridge0: port 1(bridge_slave_0) entered blocking state [ 786.384583][ T4779] bridge0: port 1(bridge_slave_0) entered forwarding state [ 786.404641][ T4779] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 786.526634][ T4779] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 786.539636][ T4779] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 786.577808][ T4779] bridge0: port 2(bridge_slave_1) entered blocking state [ 786.585092][ T4779] bridge0: port 2(bridge_slave_1) entered forwarding state [ 786.616804][T11979] FAULT_INJECTION: forcing a failure. [ 786.616804][T11979] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 786.642273][ T4779] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 786.672839][T11979] CPU: 0 PID: 11979 Comm: syz.5.1934 Not tainted 6.1.134-syzkaller #0 [ 786.681185][T11979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 786.691324][T11979] Call Trace: [ 786.694661][T11979] [ 786.697641][T11979] dump_stack_lvl+0x1e3/0x2cb [ 786.702379][T11979] ? nf_tcp_handle_invalid+0x647/0x647 [ 786.707877][T11979] ? panic+0x764/0x764 [ 786.711987][T11979] ? __might_fault+0xa1/0x110 [ 786.716718][T11979] should_fail_ex+0x3a6/0x4d0 [ 786.721442][T11979] _copy_from_user+0x2b/0x170 [ 786.726160][T11979] move_addr_to_kernel+0x7e/0x140 [ 786.731229][T11979] copy_msghdr_from_user+0x436/0x670 [ 786.736588][T11979] ? sendmsg_copy_msghdr+0x70/0x70 [ 786.741771][T11979] __sys_sendmsg+0x236/0x390 [ 786.746401][T11979] ? ____sys_sendmsg+0x9a0/0x9a0 [ 786.751361][T11979] ? vfs_write+0x6cf/0xbc0 [ 786.755890][T11979] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 786.761967][T11979] ? syscall_enter_from_user_mode+0x2e/0x230 [ 786.767981][T11979] ? lockdep_hardirqs_on+0x94/0x130 [ 786.773217][T11979] ? syscall_enter_from_user_mode+0x2e/0x230 [ 786.779244][T11979] do_syscall_64+0x3b/0xb0 [ 786.783687][T11979] ? clear_bhb_loop+0x45/0xa0 [ 786.788414][T11979] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 786.794339][T11979] RIP: 0033:0x7fe97f98d169 [ 786.798782][T11979] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 786.818422][T11979] RSP: 002b:00007fe9807bb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 786.826870][T11979] RAX: ffffffffffffffda RBX: 00007fe97fba5fa0 RCX: 00007fe97f98d169 [ 786.834870][T11979] RDX: 0000000000000080 RSI: 0000200000000380 RDI: 0000000000000003 [ 786.842872][T11979] RBP: 00007fe9807bb090 R08: 0000000000000000 R09: 0000000000000000 [ 786.850869][T11979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 786.858861][T11979] R13: 0000000000000000 R14: 00007fe97fba5fa0 R15: 00007ffd7e0a48a8 [ 786.866903][T11979] [ 786.903028][ T4779] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 786.936723][ T4779] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 786.950988][ T4779] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 786.961861][ T4779] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 786.995009][ T4779] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 787.035947][ T4779] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 787.084737][T11793] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 787.180789][T11793] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 787.229538][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 787.246870][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 787.280629][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 787.300545][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 787.324398][T11995] netlink: 'syz.4.1938': attribute type 2 has an invalid length. [ 787.334409][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 787.348570][T11995] netlink: 'syz.4.1938': attribute type 1 has an invalid length. [ 787.358995][T11991] __nla_validate_parse: 1 callbacks suppressed [ 787.359013][T11991] netlink: 65039 bytes leftover after parsing attributes in process `syz.5.1936'. [ 787.388625][T11995] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1938'. [ 787.575785][T12001] netlink: 'syz.2.1940': attribute type 29 has an invalid length. [ 787.862754][T12011] device team0 left promiscuous mode [ 787.887617][T12011] device team_slave_0 left promiscuous mode [ 787.897372][T12011] device team_slave_1 left promiscuous mode [ 787.956487][T12011] bridge0: port 3(team0) entered disabled state [ 788.017747][T12011] device bridge_slave_1 left promiscuous mode [ 788.047723][T12011] bridge0: port 2(bridge_slave_1) entered disabled state [ 788.414987][ T4779] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 788.432210][ T4779] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 788.493705][T11793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 788.568929][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 788.590679][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 788.675370][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 788.698273][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 788.720994][T11793] device veth0_vlan entered promiscuous mode [ 788.735122][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 788.758592][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 788.782126][T12030] FAULT_INJECTION: forcing a failure. [ 788.782126][T12030] name failslab, interval 1, probability 0, space 0, times 0 [ 788.825264][T11793] device veth1_vlan entered promiscuous mode [ 788.830090][T12030] CPU: 1 PID: 12030 Comm: syz.2.1947 Not tainted 6.1.134-syzkaller #0 [ 788.839473][T12030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 788.849561][T12030] Call Trace: [ 788.852872][T12030] [ 788.855836][T12030] dump_stack_lvl+0x1e3/0x2cb [ 788.860553][T12030] ? nf_tcp_handle_invalid+0x647/0x647 [ 788.862101][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 788.866026][T12030] ? panic+0x764/0x764 [ 788.866061][T12030] ? __might_sleep+0xb0/0xb0 [ 788.866092][T12030] should_fail_ex+0x3a6/0x4d0 [ 788.874591][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 788.877610][T12030] should_failslab+0x5/0x20 [ 788.877644][T12030] slab_pre_alloc_hook+0x59/0x300 [ 788.877680][T12030] kmem_cache_alloc_node+0x52/0x310 [ 788.877710][T12030] ? __alloc_skb+0xd3/0x2c0 [ 788.877738][T12030] __alloc_skb+0xd3/0x2c0 [ 788.877764][T12030] netlink_ack+0x392/0x12a0 [ 788.877789][T12030] ? __dev_queue_xmit+0x2d6/0x3d50 [ 788.877829][T12030] ? ref_tracker_free+0x638/0x7d0 [ 788.877861][T12030] ? memcpy+0x3c/0x60 [ 788.877888][T12030] ? netlink_dump+0xc80/0xc80 [ 788.941382][T12030] ? __copy_skb_header+0x47b/0x600 [ 788.946523][T12030] netlink_rcv_skb+0x24a/0x410 [ 788.951297][T12030] ? rtnetlink_bind+0x80/0x80 [ 788.955983][T12030] ? netlink_ack+0x12a0/0x12a0 [ 788.960754][T12030] ? __netlink_deliver_tap+0x748/0x780 [ 788.966240][T12030] ? netlink_deliver_tap+0x2e/0x1b0 [ 788.971448][T12030] netlink_unicast+0x7e2/0x970 [ 788.976235][T12030] ? netlink_detachskb+0x90/0x90 [ 788.981190][T12030] ? __virt_addr_valid+0x45b/0x530 [ 788.986320][T12030] ? __phys_addr_symbol+0x2b/0x70 [ 788.991358][T12030] ? __check_object_size+0x4dd/0xa30 [ 788.996655][T12030] ? bpf_lsm_netlink_send+0x5/0x10 [ 789.001783][T12030] netlink_sendmsg+0xa26/0xd60 [ 789.006566][T12030] ? netlink_getsockopt+0x580/0x580 [ 789.011776][T12030] ? aa_sock_msg_perm+0x91/0x150 [ 789.016723][T12030] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 789.022030][T12030] ? security_socket_sendmsg+0x7d/0xa0 [ 789.027511][T12030] ? netlink_getsockopt+0x580/0x580 [ 789.032722][T12030] ____sys_sendmsg+0x5d3/0x9a0 [ 789.037513][T12030] ? __sys_sendmsg_sock+0x30/0x30 [ 789.042555][T12030] __sys_sendmsg+0x2a9/0x390 [ 789.047163][T12030] ? ____sys_sendmsg+0x9a0/0x9a0 [ 789.052108][T12030] ? vfs_write+0x6cf/0xbc0 [ 789.056562][T12030] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 789.062566][T12030] ? syscall_enter_from_user_mode+0x2e/0x230 [ 789.068556][T12030] ? lockdep_hardirqs_on+0x94/0x130 [ 789.073771][T12030] ? syscall_enter_from_user_mode+0x2e/0x230 [ 789.079766][T12030] do_syscall_64+0x3b/0xb0 [ 789.084285][T12030] ? clear_bhb_loop+0x45/0xa0 [ 789.088976][T12030] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 789.094880][T12030] RIP: 0033:0x7fcfb4d8d169 [ 789.099303][T12030] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 789.118944][T12030] RSP: 002b:00007fcfb5cb3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 789.127376][T12030] RAX: ffffffffffffffda RBX: 00007fcfb4fa5fa0 RCX: 00007fcfb4d8d169 [ 789.135358][T12030] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 789.143420][T12030] RBP: 00007fcfb5cb3090 R08: 0000000000000000 R09: 0000000000000000 [ 789.151398][T12030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 789.159376][T12030] R13: 0000000000000000 R14: 00007fcfb4fa5fa0 R15: 00007ffe36a6c148 [ 789.167366][T12030] [ 789.197245][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 789.220952][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 789.253211][T11793] device veth0_macvtap entered promiscuous mode [ 789.285557][T11793] device veth1_macvtap entered promiscuous mode [ 789.378211][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 789.417885][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 789.540065][T11793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 789.630100][T11793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 789.671842][T11793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 789.708529][T11793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 789.760883][T11793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 789.862012][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 789.887286][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 790.031924][T11793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 790.099114][T11793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 790.138104][T11793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 790.169821][T11793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 790.198697][T11793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 790.254152][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 790.284196][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 790.330286][T12055] validate_nla: 3 callbacks suppressed [ 790.330307][T12055] netlink: 'syz.2.1949': attribute type 19 has an invalid length. [ 790.357318][T12055] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1949'. [ 790.370264][T11793] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 790.382065][T11793] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 790.407680][T11793] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 790.425364][T11793] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 790.643781][T12063] netlink: 'syz.0.1953': attribute type 29 has an invalid length. [ 790.687404][T12063] netlink: 'syz.0.1953': attribute type 29 has an invalid length. [ 790.688213][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 790.705578][T12069] netlink: 'syz.0.1953': attribute type 29 has an invalid length. [ 790.724399][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 790.776588][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 790.785130][T12067] netlink: 'syz.5.1952': attribute type 2 has an invalid length. [ 790.816542][T12067] netlink: 'syz.5.1952': attribute type 1 has an invalid length. [ 790.850848][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 790.862988][T12067] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1952'. [ 790.866051][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 790.935118][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 791.412341][T12092] netlink: 'syz.4.1958': attribute type 10 has an invalid length. [ 791.661463][ T9] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 791.870184][ T9] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 792.061777][ T9] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 792.240521][ T9] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 793.355775][ T9] device hsr_slave_0 left promiscuous mode [ 793.362907][ T9] device hsr_slave_1 left promiscuous mode [ 793.369640][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 793.379690][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 793.388480][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 793.395918][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 793.403917][ T9] device bridge_slave_1 left promiscuous mode [ 793.410333][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 793.419289][ T9] device bridge_slave_0 left promiscuous mode [ 793.425781][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 793.450204][ T9] device veth1_macvtap left promiscuous mode [ 793.456372][ T9] device veth0_macvtap left promiscuous mode [ 793.462469][ T9] device veth1_vlan left promiscuous mode [ 793.469534][ T9] device veth0_vlan left promiscuous mode [ 793.892779][ T9] team0 (unregistering): Port device team_slave_1 removed [ 793.930936][ T9] team0 (unregistering): Port device team_slave_0 removed [ 793.969769][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 794.151038][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 794.241064][T12143] netlink: 'syz.4.1965': attribute type 3 has an invalid length. [ 794.260492][T12143] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1965'. [ 794.366968][T12145] netlink: 'syz.5.1966': attribute type 29 has an invalid length. [ 794.521044][ T4282] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 794.535585][ T4282] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 794.551380][ T4282] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 794.568570][ T4282] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 794.577995][ T4282] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 794.587786][ T4282] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 794.802065][ T9] bond0 (unregistering): Released all slaves [ 794.888839][T12145] netlink: 'syz.5.1966': attribute type 29 has an invalid length. [ 795.210684][T12157] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1969'. [ 795.414382][T12148] chnl_net:caif_netlink_parms(): no params data found [ 795.729016][T12148] bridge0: port 1(bridge_slave_0) entered blocking state [ 795.736802][T12148] bridge0: port 1(bridge_slave_0) entered disabled state [ 795.745195][T12148] device bridge_slave_0 entered promiscuous mode [ 795.757880][T12148] bridge0: port 2(bridge_slave_1) entered blocking state [ 795.766983][T12148] bridge0: port 2(bridge_slave_1) entered disabled state [ 795.777338][T12148] device bridge_slave_1 entered promiscuous mode [ 795.844234][T12148] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 795.909566][T12148] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 796.032544][T12181] validate_nla: 3 callbacks suppressed [ 796.032568][T12181] netlink: 'syz.0.1974': attribute type 10 has an invalid length. [ 796.135424][T12148] team0: Port device team_slave_0 added [ 796.189696][T12148] team0: Port device team_slave_1 added [ 796.416477][T12148] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 796.463439][T12148] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 796.501029][T12148] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 796.514765][T12148] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 796.527212][T12148] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 796.606969][T12148] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 796.656379][ T4282] Bluetooth: hci2: command 0x0409 tx timeout [ 796.762544][T12148] device hsr_slave_0 entered promiscuous mode [ 796.777249][T12148] device hsr_slave_1 entered promiscuous mode [ 796.948061][T12206] netlink: 'syz.0.1982': attribute type 29 has an invalid length. [ 796.976308][T12206] netlink: 'syz.0.1982': attribute type 29 has an invalid length. [ 796.995586][T12206] netlink: 'syz.0.1982': attribute type 29 has an invalid length. [ 797.235898][T12208] netlink: 'syz.0.1983': attribute type 2 has an invalid length. [ 797.297780][T12208] netlink: 'syz.0.1983': attribute type 1 has an invalid length. [ 797.305603][T12208] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1983'. [ 797.692742][T12229] netlink: 'syz.0.1987': attribute type 46 has an invalid length. [ 797.972740][T12148] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 798.121189][T12148] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 798.169809][T12148] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 798.241323][T12148] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 798.572888][T12250] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1992'. [ 798.586360][T12148] 8021q: adding VLAN 0 to HW filter on device bond0 [ 798.624615][T12250] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1992'. [ 798.644088][T12253] netlink: 'syz.2.1993': attribute type 29 has an invalid length. [ 798.674069][T12253] netlink: 'syz.2.1993': attribute type 29 has an invalid length. [ 798.688687][T12254] netlink: 'syz.4.1992': attribute type 10 has an invalid length. [ 798.714914][ T4779] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 798.731552][ T4779] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 798.736317][ T4282] Bluetooth: hci2: command 0x041b tx timeout [ 798.843369][T12148] 8021q: adding VLAN 0 to HW filter on device team0 [ 798.866282][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 798.906844][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 798.935872][ T4327] bridge0: port 1(bridge_slave_0) entered blocking state [ 798.943296][ T4327] bridge0: port 1(bridge_slave_0) entered forwarding state [ 799.038292][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 799.069099][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 799.091977][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 799.126835][ T4327] bridge0: port 2(bridge_slave_1) entered blocking state [ 799.134128][ T4327] bridge0: port 2(bridge_slave_1) entered forwarding state [ 799.170642][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 799.230124][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 799.294879][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 799.338453][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 799.400328][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 799.418906][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 799.448334][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 799.476727][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 799.495697][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 799.515208][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 799.527006][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 799.546511][T12280] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1997'. [ 799.568438][T12148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 799.839753][T12286] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1998'. [ 800.346094][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 800.362231][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 800.371148][T12307] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2006'. [ 800.392326][T12148] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 800.412777][T12307] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2006'. [ 800.439002][T12313] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2008'. [ 800.484000][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 800.505384][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 800.553703][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 800.570384][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 800.604749][T12148] device veth0_vlan entered promiscuous mode [ 800.619405][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 800.632124][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 800.655244][T12148] device veth1_vlan entered promiscuous mode [ 800.702140][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 800.716452][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 800.725091][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 800.740863][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 800.762527][T12148] device veth0_macvtap entered promiscuous mode [ 800.793410][T12148] device veth1_macvtap entered promiscuous mode [ 800.819726][ T4282] Bluetooth: hci2: command 0x040f tx timeout [ 800.850358][T12148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 800.874574][T12148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 800.886380][T12148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 800.898512][T12148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 800.910662][T12148] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 800.924703][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 800.926346][T12324] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2020'. [ 800.934908][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 800.991651][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 801.013008][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 801.036683][T12148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 801.079541][T12148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 801.104472][T12148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 801.127961][T12148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 801.154052][T12148] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 801.172802][T12324] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2020'. [ 801.192674][T12328] validate_nla: 11 callbacks suppressed [ 801.192698][T12328] netlink: 'syz.0.2020': attribute type 10 has an invalid length. [ 801.250981][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 801.280995][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 801.292309][T12339] netlink: 'syz.4.2012': attribute type 2 has an invalid length. [ 801.313234][T12339] netlink: 'syz.4.2012': attribute type 1 has an invalid length. [ 801.329459][T12334] netlink: 'syz.5.2011': attribute type 46 has an invalid length. [ 801.338063][T12339] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2012'. [ 801.363862][T12148] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 801.395501][T12148] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 801.430467][T12148] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 801.465746][T12148] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 802.168517][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 802.219737][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 802.270652][T12356] netlink: 'syz.4.2014': attribute type 3 has an invalid length. [ 802.295446][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 802.311116][T12356] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2014'. [ 802.369688][ T4345] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 802.391239][ T4345] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 802.437582][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 802.548522][T12366] netlink: 'syz.5.2016': attribute type 46 has an invalid length. [ 802.912838][T12377] netlink: 'syz.5.2019': attribute type 29 has an invalid length. [ 802.974820][T12377] netlink: 'syz.5.2019': attribute type 29 has an invalid length. [ 803.014404][T12379] netlink: 'syz.5.2019': attribute type 29 has an invalid length. [ 803.398419][T12394] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2025'. [ 803.438444][T12391] netlink: 'syz.5.2025': attribute type 10 has an invalid length. [ 804.672844][ T4257] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 804.791510][ T4257] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 804.882294][ T4257] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 804.984198][ T4257] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 806.087810][ T4257] device hsr_slave_0 left promiscuous mode [ 806.094402][ T4257] device hsr_slave_1 left promiscuous mode [ 806.102944][ T4257] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 806.110897][ T4257] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 806.119836][ T4257] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 806.127761][ T4257] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 806.135765][ T4257] device bridge_slave_1 left promiscuous mode [ 806.142660][ T4257] bridge0: port 2(bridge_slave_1) entered disabled state [ 806.152024][ T4257] device bridge_slave_0 left promiscuous mode [ 806.160330][ T4257] bridge0: port 1(bridge_slave_0) entered disabled state [ 806.200523][ T4257] device veth1_macvtap left promiscuous mode [ 806.206711][ T4257] device veth0_macvtap left promiscuous mode [ 806.212887][ T4257] device veth1_vlan left promiscuous mode [ 806.219258][ T4257] device veth0_vlan left promiscuous mode [ 806.457610][T12475] validate_nla: 1 callbacks suppressed [ 806.457630][T12475] netlink: 'syz.4.2035': attribute type 29 has an invalid length. [ 806.989154][ T4277] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 807.000395][ T4277] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 807.023226][ T4277] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 807.031545][ T4277] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 807.041474][ T4277] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 807.049182][ T4277] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 807.241595][ T4257] team0 (unregistering): Port device team_slave_1 removed [ 807.285034][ T4257] team0 (unregistering): Port device team_slave_0 removed [ 807.325130][ T4257] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 807.366572][ T4257] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 807.791300][ T4257] bond0 (unregistering): Released all slaves [ 807.871714][T12475] netlink: 'syz.4.2035': attribute type 29 has an invalid length. [ 808.198102][T12506] __nla_validate_parse: 2 callbacks suppressed [ 808.198123][T12506] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2037'. [ 808.239866][T12506] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2037'. [ 808.319643][T12501] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2037'. [ 808.334652][T12506] netlink: 'syz.0.2037': attribute type 10 has an invalid length. [ 808.474435][T12495] chnl_net:caif_netlink_parms(): no params data found [ 808.741621][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.750285][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.967740][T12495] bridge0: port 1(bridge_slave_0) entered blocking state [ 808.975003][T12495] bridge0: port 1(bridge_slave_0) entered disabled state [ 809.037720][T12495] device bridge_slave_0 entered promiscuous mode [ 809.103154][T12495] bridge0: port 2(bridge_slave_1) entered blocking state [ 809.146929][ T4277] Bluetooth: hci2: command 0x0409 tx timeout [ 809.157986][T12495] bridge0: port 2(bridge_slave_1) entered disabled state [ 809.251127][T12495] device bridge_slave_1 entered promiscuous mode [ 809.455887][T12495] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 809.519949][T12495] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 809.734723][T12495] team0: Port device team_slave_0 added [ 809.787193][T12495] team0: Port device team_slave_1 added [ 809.962422][T12495] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 809.974163][T12495] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 810.030885][T12495] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 810.058546][T12546] netlink: 'syz.4.2044': attribute type 46 has an invalid length. [ 810.241336][T12555] netlink: 'syz.2.2048': attribute type 29 has an invalid length. [ 810.293952][T12495] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 810.302125][T12495] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 810.334722][T12495] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 810.369537][T12555] netlink: 'syz.2.2048': attribute type 29 has an invalid length. [ 810.406356][T12556] netlink: 'syz.2.2048': attribute type 29 has an invalid length. [ 810.594762][T12560] netlink: 'syz.5.2049': attribute type 46 has an invalid length. [ 810.625987][T12495] device hsr_slave_0 entered promiscuous mode [ 810.653934][T12495] device hsr_slave_1 entered promiscuous mode [ 810.686824][T12565] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2050'. [ 810.718953][T12565] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2050'. [ 810.799622][T12562] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2050'. [ 810.816353][ T4277] Bluetooth: hci1: command 0x0406 tx timeout [ 810.826775][T12565] netlink: 'syz.2.2050': attribute type 10 has an invalid length. [ 811.216243][ T4282] Bluetooth: hci2: command 0x041b tx timeout [ 811.962216][T12608] netlink: 'syz.4.2060': attribute type 29 has an invalid length. [ 812.005274][T12608] netlink: 'syz.4.2060': attribute type 29 has an invalid length. [ 812.049143][T12616] netlink: 'syz.4.2060': attribute type 29 has an invalid length. [ 812.102475][T12495] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 812.135885][T12495] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 812.177258][T12495] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 812.224166][T12495] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 812.370828][T12623] netlink: 'syz.0.2063': attribute type 46 has an invalid length. [ 812.805720][T12495] 8021q: adding VLAN 0 to HW filter on device bond0 [ 812.871779][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 812.884726][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 812.918116][T12495] 8021q: adding VLAN 0 to HW filter on device team0 [ 812.954333][ T4779] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 812.973656][ T4779] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 813.016782][ T4779] bridge0: port 1(bridge_slave_0) entered blocking state [ 813.023955][ T4779] bridge0: port 1(bridge_slave_0) entered forwarding state [ 813.056589][ T4779] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 813.081184][ T4779] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 813.110627][ T4779] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 813.134540][ T4779] bridge0: port 2(bridge_slave_1) entered blocking state [ 813.141753][ T4779] bridge0: port 2(bridge_slave_1) entered forwarding state [ 813.181671][ T4779] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 813.232680][ T4779] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 813.296779][ T4277] Bluetooth: hci2: command 0x040f tx timeout [ 813.317147][ T4779] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 813.379938][T12642] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2067'. [ 813.399563][ T4779] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 813.427148][ T4779] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 813.486397][T12642] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2067'. [ 813.514418][T12643] netlink: 'syz.4.2067': attribute type 10 has an invalid length. [ 813.555193][ T4779] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 813.572167][ T4779] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 813.597616][T12637] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2067'. [ 813.634090][T12495] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 813.666274][T12495] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 813.701293][ T4779] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 813.733376][ T4779] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 813.787487][ T4779] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 813.821152][ T4779] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 813.847123][ T4779] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 814.457230][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 814.470025][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 814.497204][T12495] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 814.537585][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 814.551816][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 814.578482][ T4779] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 814.600351][ T4779] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 814.631790][ T4779] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 814.643172][ T4779] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 814.667364][T12495] device veth0_vlan entered promiscuous mode [ 814.692192][T12495] device veth1_vlan entered promiscuous mode [ 814.741271][T12495] device veth0_macvtap entered promiscuous mode [ 814.748982][ T4779] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 814.769100][ T4779] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 814.790809][ T4779] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 814.813669][ T4779] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 814.837528][ T4779] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 814.871689][T12495] device veth1_macvtap entered promiscuous mode [ 814.904939][T12495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 814.950897][T12495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 814.986492][T12495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 815.023596][T12495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 815.051544][T12495] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 815.073620][T12495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 815.110122][T12495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 815.141848][T12688] netlink: 'syz.2.2076': attribute type 29 has an invalid length. [ 815.181208][T12495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 815.226336][T12495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 815.268822][T12495] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 815.285101][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 815.302939][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 815.335342][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 815.376328][ T4277] Bluetooth: hci2: command 0x0419 tx timeout [ 815.390168][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 815.407283][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 815.483662][T12688] netlink: 'syz.2.2076': attribute type 29 has an invalid length. [ 815.534643][T12495] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 815.575034][T12495] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 815.610458][T12495] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 815.627459][T12495] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 815.654819][T12700] netlink: 'syz.5.2078': attribute type 46 has an invalid length. [ 815.672878][T12694] netlink: 'syz.2.2076': attribute type 29 has an invalid length. [ 816.263516][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 816.306344][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 816.313615][T12714] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2081'. [ 816.365549][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 816.402811][T12714] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2081'. [ 816.469786][T12716] netlink: 'syz.0.2081': attribute type 10 has an invalid length. [ 816.502874][T12713] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2081'. [ 816.525175][ T4327] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 816.578131][ T4327] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 816.599781][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 817.423164][ T4327] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 817.745719][ T4327] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 817.945945][ T4327] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 818.099716][ T4327] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 819.881533][T12770] netlink: 'syz.2.2089': attribute type 2 has an invalid length. [ 819.922713][T12770] netlink: 'syz.2.2089': attribute type 1 has an invalid length. [ 819.973024][T12770] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2089'. [ 820.211720][T12781] netlink: 'syz.0.2092': attribute type 29 has an invalid length. [ 820.297451][T12781] netlink: 'syz.0.2092': attribute type 29 has an invalid length. [ 820.329499][T12783] netlink: 'syz.0.2092': attribute type 29 has an invalid length. [ 820.506358][ T4327] device hsr_slave_0 left promiscuous mode [ 820.562817][ T4327] device hsr_slave_1 left promiscuous mode [ 820.580521][ T4327] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 820.606517][ T4327] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 820.647053][ T4327] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 820.664785][ T4327] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 820.682608][ T4327] device bridge_slave_1 left promiscuous mode [ 820.723102][ T4327] bridge0: port 2(bridge_slave_1) entered disabled state [ 820.771778][T12798] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2095'. [ 820.775310][ T4282] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 820.795080][ T4282] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 820.804160][ T4282] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 820.814095][ T4283] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 820.822382][ T4283] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 820.832716][ T4283] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 820.866698][ T4327] device bridge_slave_0 left promiscuous mode [ 820.873098][ T4327] bridge0: port 1(bridge_slave_0) entered disabled state [ 820.926974][ T4327] device veth1_macvtap left promiscuous mode [ 820.933087][ T4327] device veth0_macvtap left promiscuous mode [ 820.950252][ T4327] device veth1_vlan left promiscuous mode [ 820.956248][ T4327] device veth0_vlan left promiscuous mode [ 821.921122][ T4327] team0 (unregistering): Port device team_slave_1 removed [ 821.962116][ T4327] team0 (unregistering): Port device team_slave_0 removed [ 822.002001][ T4327] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 822.045162][ T4327] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 822.451779][ T4327] bond0 (unregistering): Released all slaves [ 822.519279][T12789] netlink: 'syz.2.2094': attribute type 46 has an invalid length. [ 822.536499][T12798] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2095'. [ 822.561395][T12801] netlink: 'syz.0.2095': attribute type 10 has an invalid length. [ 822.904530][ T4283] Bluetooth: hci2: command 0x0409 tx timeout [ 823.344333][T12797] chnl_net:caif_netlink_parms(): no params data found [ 823.778243][T12797] bridge0: port 1(bridge_slave_0) entered blocking state [ 823.846301][T12797] bridge0: port 1(bridge_slave_0) entered disabled state [ 823.879756][T12797] device bridge_slave_0 entered promiscuous mode [ 823.955362][T12797] bridge0: port 2(bridge_slave_1) entered blocking state [ 823.968018][T12797] bridge0: port 2(bridge_slave_1) entered disabled state [ 823.998268][T12797] device bridge_slave_1 entered promiscuous mode [ 824.071260][T12855] netlink: 'syz.2.2105': attribute type 29 has an invalid length. [ 824.123250][T12797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 824.154806][T12855] netlink: 'syz.2.2105': attribute type 29 has an invalid length. [ 824.165729][T12857] netlink: 'syz.2.2105': attribute type 29 has an invalid length. [ 824.193783][T12797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 824.301973][T12797] team0: Port device team_slave_0 added [ 824.338769][T12797] team0: Port device team_slave_1 added [ 824.447285][T12797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 824.465570][T12797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 824.556112][T12797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 824.599707][T12797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 824.627586][T12797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 824.688582][T12797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 824.850663][T12797] device hsr_slave_0 entered promiscuous mode [ 824.869192][T12797] device hsr_slave_1 entered promiscuous mode [ 824.878485][T12878] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2110'. [ 824.921663][T12878] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2110'. [ 824.956411][T12876] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2110'. [ 824.979011][ T4283] Bluetooth: hci2: command 0x041b tx timeout [ 825.053627][T12876] validate_nla: 1 callbacks suppressed [ 825.053681][T12876] netlink: 'syz.5.2110': attribute type 10 has an invalid length. [ 825.746868][T12897] netlink: 176 bytes leftover after parsing attributes in process `syz.0.2117'. [ 825.817687][T12909] netlink: 'syz.2.2118': attribute type 2 has an invalid length. [ 825.851278][T12909] netlink: 'syz.2.2118': attribute type 1 has an invalid length. [ 825.905679][T12909] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2118'. [ 826.268083][T12797] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 826.309830][T12797] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 826.358548][T12797] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 826.384001][T12797] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 826.563720][T12928] netlink: 'syz.0.2122': attribute type 46 has an invalid length. [ 826.862367][T12936] FAULT_INJECTION: forcing a failure. [ 826.862367][T12936] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 826.882645][T12797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 826.916424][T12936] CPU: 1 PID: 12936 Comm: syz.2.2127 Not tainted 6.1.134-syzkaller #0 [ 826.924651][T12936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 826.934744][T12936] Call Trace: [ 826.938052][T12936] [ 826.941012][T12936] dump_stack_lvl+0x1e3/0x2cb [ 826.945737][T12936] ? nf_tcp_handle_invalid+0x647/0x647 [ 826.951242][T12936] ? panic+0x764/0x764 [ 826.955369][T12936] ? __lock_acquire+0x1f80/0x1f80 [ 826.960448][T12936] should_fail_ex+0x3a6/0x4d0 [ 826.965171][T12936] _copy_from_user+0x2b/0x170 [ 826.969894][T12936] ___bpf_copy_key+0x8c/0x110 [ 826.974616][T12936] map_update_elem+0x2b4/0x680 [ 826.979427][T12936] __sys_bpf+0x337/0x6c0 [ 826.983700][T12936] ? __fget_files+0x435/0x4a0 [ 826.983770][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 826.988388][T12936] ? bpf_link_show_fdinfo+0x300/0x300 [ 826.988413][T12936] ? perf_trace_preemptirq_template+0xf4/0x3d0 [ 827.007202][T12936] ? print_irqtrace_events+0x210/0x210 [ 827.012709][T12936] ? print_irqtrace_events+0x210/0x210 [ 827.017137][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 827.018196][T12936] ? syscall_enter_from_user_mode+0x2e/0x230 [ 827.031399][T12936] ? lockdep_hardirqs_on+0x94/0x130 [ 827.036630][T12936] __x64_sys_bpf+0x78/0x90 [ 827.041071][T12936] do_syscall_64+0x3b/0xb0 [ 827.045491][T12936] ? clear_bhb_loop+0x45/0xa0 [ 827.050203][T12936] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 827.056121][T12936] RIP: 0033:0x7fcfb4d8d169 [ 827.060543][T12936] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 827.080159][T12936] RSP: 002b:00007fcfb5cb3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 827.088583][T12936] RAX: ffffffffffffffda RBX: 00007fcfb4fa5fa0 RCX: 00007fcfb4d8d169 [ 827.096560][T12936] RDX: 0000000000000020 RSI: 0000200000000480 RDI: 0000000000000002 [ 827.104536][T12936] RBP: 00007fcfb5cb3090 R08: 0000000000000000 R09: 0000000000000000 [ 827.112515][T12936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 827.120494][T12936] R13: 0000000000000000 R14: 00007fcfb4fa5fa0 R15: 00007ffe36a6c148 [ 827.128488][T12936] [ 827.132677][ T4283] Bluetooth: hci2: command 0x040f tx timeout [ 827.209311][T12797] 8021q: adding VLAN 0 to HW filter on device team0 [ 827.306950][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 827.343986][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 827.377076][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 827.384269][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 827.414585][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 827.455610][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 827.465529][T12941] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2130'. [ 827.501287][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 827.553843][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 827.561114][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 827.610086][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 827.628396][T12941] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2130'. [ 827.645155][T12955] netlink: 'syz.4.2130': attribute type 10 has an invalid length. [ 827.664518][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 827.706210][T12957] netlink: 'syz.2.2129': attribute type 10 has an invalid length. [ 827.761307][T12957] netlink: 'syz.2.2129': attribute type 19 has an invalid length. [ 827.792726][T12957] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2129'. [ 827.819200][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 827.853902][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 827.880926][T12949] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2130'. [ 827.898249][T12945] netlink: 176 bytes leftover after parsing attributes in process `syz.0.2139'. [ 827.926636][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 827.960827][ T4779] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 827.980081][ T4779] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 828.019912][ T4779] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 828.050762][ T4779] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 828.080324][ T4779] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 828.091345][ T4779] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 828.105426][T12797] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 828.223544][T12970] netlink: 'syz.5.2133': attribute type 2 has an invalid length. [ 828.256769][T12970] netlink: 'syz.5.2133': attribute type 1 has an invalid length. [ 828.301656][T12970] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2133'. [ 828.471778][T12977] netlink: 176 bytes leftover after parsing attributes in process `syz.4.2135'. [ 828.755127][ T4779] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 828.766285][ T4779] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 828.816945][T12797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 828.929748][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 828.960946][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 829.073753][ T4779] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 829.094324][ T4779] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 829.121785][T12797] device veth0_vlan entered promiscuous mode [ 829.144368][ T4779] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 829.186867][ T4779] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 829.199673][T12797] device veth1_vlan entered promiscuous mode [ 829.217580][ T4283] Bluetooth: hci2: command 0x0419 tx timeout [ 829.321660][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 829.334834][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 829.381346][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 829.417279][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 829.459029][T12797] device veth0_macvtap entered promiscuous mode [ 829.489957][T12797] device veth1_macvtap entered promiscuous mode [ 829.588870][T12797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 829.617406][T12797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 829.666155][T12797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 829.727116][T12797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 829.756225][T12797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 829.764638][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 829.798554][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 829.841823][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 829.887470][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 829.912144][T12797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 829.956434][T12797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 829.996132][T12797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 830.025735][T12797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 830.052871][T12797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 830.072508][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 830.103241][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 830.142490][T12797] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 830.169070][T13025] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2147'. [ 830.171863][T12797] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 830.217002][T12797] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 830.258358][T12797] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 830.301304][T13022] netlink: 'syz.5.2146': attribute type 19 has an invalid length. [ 830.358878][T13023] netlink: 'syz.4.2147': attribute type 10 has an invalid length. [ 830.375158][T13030] netlink: 'syz.2.2148': attribute type 2 has an invalid length. [ 830.393849][T13030] netlink: 'syz.2.2148': attribute type 1 has an invalid length. [ 830.586450][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 830.595356][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 830.668578][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 830.699805][ T4320] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 830.735043][ T4320] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 830.765616][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 830.845269][T13033] netlink: 'syz.5.2149': attribute type 10 has an invalid length. [ 830.865693][T13033] netlink: 'syz.5.2149': attribute type 19 has an invalid length. [ 830.887145][T13033] __nla_validate_parse: 4 callbacks suppressed [ 830.887184][T13033] netlink: 156 bytes leftover after parsing attributes in process `syz.5.2149'. [ 831.165174][T13045] netlink: 'syz.0.2152': attribute type 46 has an invalid length. [ 831.326764][T13053] netlink: 176 bytes leftover after parsing attributes in process `syz.2.2154'. [ 831.523428][T13059] netlink: 'syz.4.2162': attribute type 2 has an invalid length. [ 831.535910][T13059] netlink: 'syz.4.2162': attribute type 1 has an invalid length. [ 831.545283][T13059] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2162'. [ 831.718184][ T4257] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 831.752831][T13060] netlink: 'syz.5.2161': attribute type 19 has an invalid length. [ 831.774842][T13060] netlink: 156 bytes leftover after parsing attributes in process `syz.5.2161'. [ 832.282006][ T4257] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 832.332694][ T4257] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 832.411263][ T4257] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 833.412063][ T4257] device hsr_slave_0 left promiscuous mode [ 833.419804][ T4257] device hsr_slave_1 left promiscuous mode [ 833.427205][ T4257] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 833.434669][ T4257] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 833.443343][ T4257] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 833.451191][ T4257] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 833.459948][ T4257] device bridge_slave_1 left promiscuous mode [ 833.466597][ T4257] bridge0: port 2(bridge_slave_1) entered disabled state [ 833.475670][ T4257] device bridge_slave_0 left promiscuous mode [ 833.482871][ T4257] bridge0: port 1(bridge_slave_0) entered disabled state [ 833.517974][ T4257] device veth1_macvtap left promiscuous mode [ 833.524094][ T4257] device veth0_macvtap left promiscuous mode [ 833.530864][ T4257] device veth1_vlan left promiscuous mode [ 833.537058][ T4257] device veth0_vlan left promiscuous mode [ 833.700300][ T28] INFO: task syz.1.1501:9947 blocked for more than 143 seconds. [ 833.712623][ T28] Not tainted 6.1.134-syzkaller #0 [ 833.718488][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 833.727302][ T28] task:syz.1.1501 state:D stack:23112 pid:9947 ppid:4280 flags:0x00004006 [ 833.736679][ T28] Call Trace: [ 833.739991][ T28] [ 833.742931][ T28] __schedule+0x143f/0x4570 [ 833.747621][ T28] ? release_firmware_map_entry+0x18b/0x18b [ 833.753570][ T28] ? __mutex_unlock_slowpath+0x218/0x750 [ 833.759327][ T28] ? task_work_cancel_func+0x2b0/0x2b0 [ 833.764885][ T28] ? _free_event+0xf5/0x1090 [ 833.769892][ T28] schedule+0xbf/0x180 [ 833.774016][ T28] _free_event+0x169/0x1090 [ 833.778609][ T28] perf_event_release_kernel+0x873/0x900 [ 833.784278][ T28] ? calc_timer_values+0x420/0x420 [ 833.789568][ T28] ? rcu_is_watching+0x11/0xb0 [ 833.794377][ T28] ? ima_file_free+0xe8/0x3c0 SYZFAIL: failed to send rpc fd=3 want=48 sent=0 n=-1 (errno 32: Broken pipe) [ 833.799480][ T28] perf_release+0x37/0x40 [ 833.803846][ T28] ? perf_mmap+0x13e0/0x13e0 [ 833.808615][ T28] __fput+0x3f6/0x8d0 [ 833.812664][ T28] task_work_run+0x246/0x300 [ 833.817411][ T28] ? task_work_cancel+0x2e0/0x2e0 [ 833.822558][ T28] ? kasan_check_range+0x7b/0x290 [ 833.827736][ T28] ? exit_task_namespaces+0xdd/0xf0 [ 833.832997][ T28] do_exit+0xa6e/0x26a0 [ 833.837530][ T28] ? put_task_struct+0x80/0x80 [ 833.842376][ T28] ? get_signal+0x1352/0x17a0 [ 833.877131][ T28] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 833.883215][ T28] ? print_irqtrace_events+0x210/0x210 [ 833.912552][ T28] ? _raw_spin_lock_irq+0xdb/0x110 [ 833.921164][ T28] do_group_exit+0x202/0x2b0 [ 833.925836][ T28] ? _raw_spin_unlock_irq+0x1f/0x40 [ 833.932420][ T28] ? lockdep_hardirqs_on+0x94/0x130 [ 833.976045][ T28] get_signal+0x16cb/0x17a0 [ 833.980666][ T28] ? ptrace_notify+0x370/0x370 [ 833.996075][ T28] arch_do_signal_or_restart+0xb0/0x1a10 [ 834.001806][ T28] ? perf_trace_run_bpf_submit+0xf7/0x1d0 [ 834.036058][ T28] ? irqentry_enter+0x33/0x50 [ 834.040833][ T28] ? perf_trace_run_bpf_submit+0xf7/0x1d0 [ 834.086135][ T28] ? get_sigframe_size+0x10/0x10 [ 834.091164][ T28] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 834.136060][ T28] ? exit_to_user_mode_loop+0x39/0x100 [ 834.141636][ T28] exit_to_user_mode_loop+0x6a/0x100 [ 834.176829][ T28] exit_to_user_mode_prepare+0xb1/0x140 [ 834.182476][ T28] syscall_exit_to_user_mode+0x60/0x270 [ 834.246041][ T28] do_syscall_64+0x47/0xb0 [ 834.250536][ T28] ? clear_bhb_loop+0x45/0xa0 [ 834.255268][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 834.286163][ T28] RIP: 0033:0x7f9e2f18d169 [ 834.290673][ T28] RSP: 002b:00007f9e2ff85fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 834.326090][ T28] RAX: fffffffffffffff4 RBX: 00007f9e2f3a5fa0 RCX: 00007f9e2f18d169 [ 834.334143][ T28] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000024084200 [ 834.369390][ T28] RBP: 00007f9e2f20e990 R08: 0000200000001a40 R09: 0000200000001a40 [ 834.396204][ T28] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 834.404255][ T28] R13: 0000000000000000 R14: 00007f9e2f3a5fa0 R15: 00007fff5d5dd3b8 [ 834.466145][ T28] [ 834.476714][ T28] [ 834.476714][ T28] Showing all locks held in the system: [ 834.484652][ T28] 1 lock held by rcu_tasks_kthre/12: [ 834.556040][ T28] #0: ffffffff8d32e990 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 834.578366][ T28] 1 lock held by rcu_tasks_trace/13: [ 834.583764][ T28] #0: ffffffff8d32f190 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 834.616046][ T28] 1 lock held by khungtaskd/28: [ 834.620966][ T28] #0: ffffffff8d32e7c0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 834.656148][ T28] 1 lock held by dhcpcd/3917: [ 834.660898][ T28] #0: ffffffff8e550ea8 (rtnl_mutex){+.+.}-{3:3}, at: devinet_ioctl+0x29a/0x1ae0 [ 834.686042][ T28] 2 locks held by getty/4008: [ 834.690942][ T28] #0: ffff88814d37b098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 834.716088][ T28] #1: ffffc9000325e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x54a/0x1620 [ 834.729958][ T28] 5 locks held by kworker/u4:2/4257: [ 834.735298][ T28] #0: ffff888017e16938 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x806/0x1260 [ 834.757499][ T28] #1: ffffc90000a5fd20 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x806/0x1260 [ 834.768780][ T28] #2: ffffffff8e544350 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x166/0xd20 [ 834.778413][ T28] #3: ffffffff8e550ea8 (rtnl_mutex){+.+.}-{3:3}, at: default_device_exit_batch+0xe5/0xa20 [ 834.790006][ T28] #4: ffffffff8d333df8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x360/0x930 [ 834.801115][ T28] 3 locks held by syz-executor/4275: [ 834.810204][ T28] #0: ffff888028dc90b8 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x1ff/0x500 [ 834.822083][ T28] #1: ffff888028dc8078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x48d/0xfc0 [ 834.835419][ T28] #2: ffffffff8e6b3408 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xb8/0x2a0 [ 834.845747][ T28] 3 locks held by syz-executor/4284: [ 834.854737][ T28] #0: ffff88807370d0b8 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x1ff/0x500 [ 834.864843][ T28] #1: ffff88807370c078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x48d/0xfc0 [ 834.878271][ T28] #2: ffffffff8e6b3408 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xb8/0x2a0 [ 834.889654][ T28] 4 locks held by syz-executor/4286: [ 834.895133][ T28] #0: ffff8880282d90b8 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x1ff/0x500 [ 834.906934][ T28] #1: ffff8880282d8078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x48d/0xfc0 [ 834.917108][ T28] #2: ffffffff8e6b3408 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xb8/0x2a0 [ 834.928092][ T28] #3: ffffffff8d333df8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x4f0/0x930 [ 834.942721][ T28] 2 locks held by kworker/1:3/4324: [ 834.948173][ T28] #0: ffff888017c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x806/0x1260 [ 834.962436][ T28] #1: ffffc90003f97d20 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x806/0x1260 [ 834.972260][ T28] 3 locks held by kworker/1:4/4325: [ 834.981753][ T28] #0: ffff888030037138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x806/0x1260 [ 834.993051][ T28] #1: ffffc90003fa7d20 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x806/0x1260 [ 835.009961][ T28] #2: ffffffff8e550ea8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x15/0x30 [ 835.021171][ T28] 3 locks held by kworker/1:5/4326: [ 835.030230][ T28] #0: ffff888017c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x806/0x1260 [ 835.041787][ T28] #1: ffffc90003fb7d20 (deferred_process_work){+.+.}-{0:0}, at: process_one_work+0x806/0x1260 [ 835.057192][ T28] #2: ffffffff8e550ea8 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xa/0x20 [ 835.068072][ T28] 3 locks held by kworker/u4:6/4345: [ 835.073412][ T28] #0: ffff888017c79138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x806/0x1260 [ 835.079747][ T4283] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 835.089259][ T28] #1: ffffc90004007d20 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x806/0x1260 [ 835.094163][ T4282] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 835.106766][ T28] #2: ffffffff8e550ea8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xa/0x50 [ 835.111069][ T4282] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 835.122890][ T28] 2 locks held by kworker/1:6/4356: [ 835.129812][ T4282] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 835.130769][ T28] #0: ffff888017c72138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x806/0x1260 [ 835.138674][ T4282] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 835.153107][ T28] #1: ffffc90003ff7d20 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x806/0x1260 [ 835.157174][ T4282] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 835.172613][ T28] 3 locks held by syz-executor/10263: [ 835.179561][ T28] #0: ffff8880737090b8 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x1ff/0x500 [ 835.192750][ T28] #1: ffff888073708078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x48d/0xfc0 [ 835.202623][ T28] #2: ffffffff8e6b3408 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xb8/0x2a0 [ 835.212782][ T28] 1 lock held by syz-executor/13095: [ 835.218170][ T28] #0: ffffffff8e550ea8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7cb/0x1000 [ 835.227835][ T28] [ 835.230199][ T28] ============================================= [ 835.230199][ T28] [ 835.240319][ T28] NMI backtrace for cpu 0 [ 835.244702][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted 6.1.134-syzkaller #0 [ 835.252631][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 835.262745][ T28] Call Trace: [ 835.266053][ T28] [ 835.269009][ T28] dump_stack_lvl+0x1e3/0x2cb [ 835.273716][ T28] ? nf_tcp_handle_invalid+0x647/0x647 [ 835.279181][ T28] ? panic+0x764/0x764 [ 835.283268][ T28] ? vprintk_emit+0x622/0x740 [ 835.287965][ T28] ? printk_sprint+0x490/0x490 [ 835.292778][ T28] ? nmi_cpu_backtrace+0x252/0x560 [ 835.297913][ T28] nmi_cpu_backtrace+0x4e1/0x560 [ 835.302859][ T28] ? nmi_trigger_cpumask_backtrace+0x430/0x430 [ 835.309029][ T28] ? _printk+0xd1/0x111 [ 835.313206][ T28] ? panic+0x764/0x764 [ 835.317284][ T28] ? __wake_up_klogd+0xcc/0x100 [ 835.322141][ T28] ? panic+0x764/0x764 [ 835.326214][ T28] ? nmi_trigger_cpumask_backtrace+0xfc/0x430 [ 835.332286][ T28] nmi_trigger_cpumask_backtrace+0x1ca/0x430 [ 835.338272][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 835.344354][ T28] watchdog+0xf88/0xfd0 [ 835.348529][ T28] ? watchdog+0x1f8/0xfd0 [ 835.352875][ T28] kthread+0x28d/0x320 [ 835.356948][ T28] ? hungtask_pm_notify+0x50/0x50 [ 835.361986][ T28] ? kthread_blkcg+0xd0/0xd0 [ 835.366602][ T28] ret_from_fork+0x1f/0x30 [ 835.371146][ T28] [ 835.374932][ T28] Sending NMI from CPU 0 to CPUs 1: [ 835.380237][ C1] NMI backtrace for cpu 1 [ 835.380251][ C1] CPU: 1 PID: 4779 Comm: kworker/u4:7 Not tainted 6.1.134-syzkaller #0 [ 835.380270][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 835.380281][ C1] Workqueue: bat_events batadv_nc_worker [ 835.380313][ C1] RIP: 0010:check_preemption_disabled+0x37/0x110 [ 835.380347][ C1] Code: 8b 04 25 28 00 00 00 48 89 44 24 08 65 8b 1d d0 4c 50 75 65 8b 05 71 a2 50 75 a9 ff ff ff 7f 74 22 65 48 8b 04 25 28 00 00 00 <48> 3b 44 24 08 0f 85 c7 00 00 00 89 d8 48 83 c4 10 5b 41 5c 41 5e [ 835.380362][ C1] RSP: 0018:ffffc900038c79a8 EFLAGS: 00000002 [ 835.380377][ C1] RAX: 8d79d51172eba400 RBX: 0000000000000001 RCX: ffffffff816b7272 [ 835.380390][ C1] RDX: dffffc0000000000 RSI: ffffffff8b0c3040 RDI: ffffffff8b5f7360 [ 835.380404][ C1] RBP: ffffc900038c7b30 R08: dffffc0000000000 R09: fffffbfff2257868 [ 835.380418][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff92000718f44 [ 835.380431][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000246 [ 835.380443][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 835.380459][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 835.380472][ C1] CR2: 00007ffc5854a338 CR3: 000000007e429000 CR4: 00000000003506e0 [ 835.380488][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 835.380499][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 835.380510][ C1] Call Trace: [ 835.380515][ C1] [ 835.380524][ C1] lock_acquire+0x208/0x5a0 [ 835.380554][ C1] ? read_lock_is_recursive+0x10/0x10 [ 835.380581][ C1] ? __local_bh_disable_ip+0x183/0x210 [ 835.380610][ C1] ? lockdep_hardirqs_on+0x94/0x130 [ 835.380632][ C1] ? batadv_nc_purge_paths+0xe8/0x3b0 [ 835.380664][ C1] ? __bpf_trace_softirq+0x10/0x10 [ 835.380690][ C1] ? __local_bh_enable_ip+0x164/0x1f0 [ 835.380717][ C1] ? batadv_nc_purge_paths+0x30e/0x3b0 [ 835.380743][ C1] ? _local_bh_enable+0xa0/0xa0 [ 835.380771][ C1] ? batadv_nc_purge_paths+0xe8/0x3b0 [ 835.380797][ C1] _raw_spin_lock_bh+0x31/0x40 [ 835.380816][ C1] ? batadv_nc_purge_paths+0xe8/0x3b0 [ 835.380840][ C1] ? batadv_nc_purge_paths+0x3b0/0x3b0 [ 835.380865][ C1] batadv_nc_purge_paths+0xe8/0x3b0 [ 835.380898][ C1] batadv_nc_worker+0x324/0x610 [ 835.380924][ C1] ? batadv_nc_worker+0xc7/0x610 [ 835.380950][ C1] ? process_one_work+0x806/0x1260 [ 835.380972][ C1] process_one_work+0x917/0x1260 [ 835.381000][ C1] ? worker_detach_from_pool+0x260/0x260 [ 835.381024][ C1] ? _raw_spin_lock_irqsave+0x120/0x120 [ 835.381043][ C1] ? kthread_data+0x4e/0xc0 [ 835.381071][ C1] ? wq_worker_running+0x97/0x190 [ 835.381089][ C1] worker_thread+0xa47/0x1200 [ 835.381111][ C1] ? _raw_spin_unlock+0x40/0x40 [ 835.381129][ C1] ? release_firmware_map_entry+0x18b/0x18b [ 835.381156][ C1] ? _raw_spin_unlock+0x40/0x40 [ 835.381179][ C1] kthread+0x28d/0x320 [ 835.381195][ C1] ? worker_clr_flags+0x190/0x190 [ 835.381215][ C1] ? kthread_blkcg+0xd0/0xd0 [ 835.381232][ C1] ret_from_fork+0x1f/0x30 [ 835.381264][ C1] [ 835.385748][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 835.693254][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted 6.1.134-syzkaller #0 [ 835.701175][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 835.711235][ T28] Call Trace: [ 835.714556][ T28] [ 835.717497][ T28] dump_stack_lvl+0x1e3/0x2cb [ 835.722192][ T28] ? nf_tcp_handle_invalid+0x647/0x647 [ 835.727666][ T28] ? panic+0x764/0x764 [ 835.731745][ T28] ? __x2apic_send_IPI_mask+0xe5/0x320 [ 835.737220][ T28] ? vscnprintf+0x59/0x80 [ 835.741563][ T28] panic+0x318/0x764 [ 835.745469][ T28] ? nmi_trigger_cpumask_backtrace+0x2db/0x430 [ 835.751630][ T28] ? memcpy_page_flushcache+0xfc/0xfc [ 835.757016][ T28] ? preempt_schedule_thunk+0x16/0x18 [ 835.762409][ T28] ? nmi_trigger_cpumask_backtrace+0x2db/0x430 [ 835.768571][ T28] ? nmi_trigger_cpumask_backtrace+0x358/0x430 [ 835.774739][ T28] ? nmi_trigger_cpumask_backtrace+0x35d/0x430 [ 835.780902][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 835.786979][ T28] watchdog+0xfc7/0xfd0 [ 835.791184][ T28] ? watchdog+0x1f8/0xfd0 [ 835.795542][ T28] kthread+0x28d/0x320 [ 835.799619][ T28] ? hungtask_pm_notify+0x50/0x50 [ 835.804658][ T28] ? kthread_blkcg+0xd0/0xd0 [ 835.809252][ T28] ret_from_fork+0x1f/0x30 [ 835.813694][ T28] [ 835.817059][ T28] Kernel Offset: disabled [ 835.821397][ T28] Rebooting in 86400 seconds..