last executing test programs: 15m44.396892346s ago: executing program 1 (id=1474): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa0000000}, {0x3, 0x3, 0x3, 0xa, 0x5, 0xfff8, 0xffffffd0}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x15}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 15m44.153922567s ago: executing program 1 (id=1486): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x80, 0x0, 0x0, 0x5d31, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f00000001c0), 0xc}, 0x800}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x214ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0x8}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0xfc74, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xa}, 0xc05}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffff2, &(0x7f0000001500)=[{&(0x7f0000002000)="d80000001a0081044e81f782db4cb9040a1d0800f3c90d4f1e81f8d81500010000000000000000000200ffff7a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x4008044) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x12, &(0x7f00000002c0), 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) write$cgroup_subtree(r2, &(0x7f0000000240)=ANY=[], 0x31) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0}, 0x94) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) mkdir(&(0x7f0000000180)='./file0\x00', 0x140) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b26, &(0x7f0000000000)={'wlan1\x00', @random="080000000400"}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001f80)={r5, 0x0, 0x98, 0xae, &(0x7f00000003c0)="f892e0f495596fb8ca85a5f4be6a57335b7a3f44693006aa74b48d3823c7b3f26ff8d0fb4d164f42f9a2203c841420628aafecedb21f5097ac5819a43551c8475164cfd5206f3fcda9bfde6eabca48b77c48e5378707d443c60c65049c6868f467b56a6787fe39cb86baa1fb6ae95aa989de4a051139f87b3a37b9426c667028c832065c60c08a450ffce0a1e324dde21bd4925b45ce029d", &(0x7f0000000540)=""/174, 0x5, 0x0, 0xf00, 0x53, &(0x7f0000000f00)="9de149d40209821482512ecbc29defd5b60be499f12b3ba19193222b55ab0e3544a4231f51e3b0b212658566759458aba0f25265ce9b3be482fbcc225b67858da3a386b7310e57c6c7c7d6121c36442e9ccdcefe7e1eb57faf6f7c2cc285ef067569972a032ad3b414f74e757259465d5ad6bdf127accc11137c9b7c2c69feea7d395b6dcdac48796fe9ce393589e0cc66f7cdafcc087ad3b51dee8662645847e28c38001cfcae1e73cd014e8a44816bf574ffd6e8dd2788cd45054b06d77922ecb6ba938eaa1f2aa570ee52d699bd8bc3f9235a514a6ee37bb3b5feaac2e024e0953c07c83b01f30ce6d426d6dd0a08ccc91b042d6115134446050ce65395eef220e5c940f3258f4ae513924913e6c383817c555a43e93d1fb0a4434eae27de36c0df86538833f1d81c8f16bccb685299ac071a1469ec08b278c19550afa10e50be8a7e48b80d7e71fba2d42d2a41864341144f88fe19b0e73ef36446ac00fa4a1bfec3fef3ee1fd42efaa5a849a21e25374bedae0202ff450be8bd069f6c9ff90b32dc4ffb89d8cb2688685f7b9d8d64cba73783aef424dab5c409a21a174406694a180fea9ed6c3845d11295ce1d16ba38e9eb33208a85f3c15a8e683d6615f8bcd6f8eb263cc7d8cb05c7e6252b86756e7c13d035fac63c937a14445928e861110729c4bec8e2000c8d5603471cd1293b58c9e74931b9842389c6d2741d9deec395ad2d720f482ef114ec4639c7a267928ba0d06ff8a93e74d7b87b0c9512b0a7fb620e0fe8b388999feecd88d71e347fad8028ec0ec334483ff3f84fe6faef96c915f2465cda9959c9e786c84346a968c8c1ba1a7bb8a3d416171a0f1df678c1616590b129c021509b5013681b7062fb4efef3a957fb2f6595051b67ee6c348579dd05fb41564cb715e515f4a0d914b7000788be00bd39749e4d0e5084131ea82d846db74bbecb1c7e140e649b312d567c937c56a4e463fb020971862573a03ce91c986e61da0aeb187012de030381d7cf51b5bc476491908dcc67d4ccff1c2c4b46d867cce9632026c2b2512f98554c0dc7b171ea1ac0f862a39b97b545a4b93d1884c9206e89a90c2e1ef93374dddc22138f95fee3a883b17253d868931e00cb7642d31a5fa813a2315443c8d4b4f65d1008fc4793fed8843c0cdfc6d07204fc2130382cdd3086b59dd498dca38c9fe99f37538aa13afa283f20d5a76545060cd804030f2a09ed08b7558647460e4e2705a4348314ca65958642914b778e5b60878222b6d9c410d151bba081893ca636c06bd67678d2560c20df36e9bcb1cc9b8b985095107766b760e126b4c82453a0bd75f8c5cfadf160e8d41e194cf109966bd25e43e7c40e559693936878f86f07d93cc862c28886bb7276dccda3c6afacbf1a4338f9dd1816758640ab19b98fa486361aa57845b3ba58742691962cf6dcfc619eee2260920af861b8be7f7e8e9460391f5f243fe427746b751f3c21b4c51d49bc5dd7aeae5b97a77f6eddf18a14abac3da956e32237f69a7d2c29e5bc2011ced1ee47a07c3e978329b0f00bcaced37a61e1a0f0ba4d8811e226bb67224d0711369bb9924fe67e68e8781f07d0a6ed480cbc3d9ee19573c3eaa8f7fe09b025158cf81bbe6a54630f29af8ff72beb896390e5fb21f414d9a1a29b711ff5cc2906c8a11fd2ac4d92f9227d83258a8e55a6041948f49d8dd16fff1d3d9995c9316eafb8e71039518440ff8e7c3830088a052a49635d590360fe820fad0e623c1dc48e1eaf79ae7bc17717b5e25ac6b7257d1b00727e6b5524c61a53b9b1d714023d71d96084b3c7c8bd0f67cefc998a49430673421d729b7c8e972c6eac57ab2cdeaae96a0f58643a426e889103e1168ac98120ef683c7ab36c747e7b0a4cc0fd0369270c7719f4fa47ca058175e383d193b8fcaf30131fca2f386f65a938d353acaad07b4a0ce85c81456704978935dc9d101a343d53c23a46d17b861fd346f9b0525c64513112f9b78cbf5dfe4b29c9215d20e6f432a65142d5fa1184e34d1bb1806e2671d791e9627e462810f994f38c9169dc0a0adb6e68a097c29922629258a52e2325fd44d367a7452b7bb09b6d75f1c4835cb5bfa4158c770cd7a8b78abcbc041d842ebacf01700b3c433532a7e43af6f10585df4b0850d467aef6525f86123b87e935dc364b7ad2881d62949a0af3317761e59cabd6d64c58c893056c9796fe475073093f1ff70024cda420d7e5316d71f0badadb1710024f40b0a020ce028b0e078ea1f0f4178e280abec30717b8d16cb031626920e960327842efe57081db5d314b1b8182dda7ddf43da91c630bcf105f717143d1a07188b96c968f98fae7c8e288eb69b9a5af7d10347ee32759b94f869937bd76e3b6a51a1e6ce89b0fa4c15322ca297af3c605dc53c6c78da3216ed0bf6fa3db9939ad4a5e00b62a184b0c2be0794456e0bf9f93301faa9f14e2cd04cb6118ce00af33353be5b0ea6e0d72fda118becdb51c6e38b3222b2ba2a7260198f85c61acf12b320f6e3960855ad9ad4318c87d85e3f9f23d4bf853af5b201567173c3568b86c1dd6a3f339c3ea51b0c369ed9b65428498d12d0a86e0fa4b9053e407b11f941e9709b1e55603e0e7206c8c41e2ccf26d15f7e61d4bce7509795ca3780b47d1400f2ec10078e1296620880a2f6888a85ccc028c32fbf3c3f8dfdcc79a18bf4c44359f6a87c75c75de68b3bbc3b26a418579cfe76000c9ea4ff55d4c57de3820b9c9d131825c5e6630697b837f878c752c989dfff0a197aee4d472fcf961da696f4ebfa763626e1e7b6bc91be0e9329dd126803aadc6445c785fee2ac015c276df62ea39c00cfb79440e27b528957d6e9d7e5ef5070e0b54f1b593f25b94c7c6915185cee3ab89c918fd93826adaa7c50224d6f2eadada6164d478b1717905487d1c54cf94ad81d2811d6a3a7ee37a94241cb93419e50e57370760678f7a02721a3d505bd9c69afe7e6a4b22f577cc4bd743c9a1a6205cf4e66cffb79492b734915368476c3f77466e3f4592fef2dddfeea293b8cbf3ba689b5bcd23d0f5b4e160ffd16f23c9ea3b246bd90bd78128d409f856775fb924ce6699438ec2e3c4b9823629f0a5629bc7e1cea74e306f6c503b688ce8493b3dcb2671cbd4a458e7beed6f788360827cf4e02fe0047fc719b85dace7dc1a7f317e6deced0cfd916acb573dcd0fc398ae0d3f014b57e475c54f8703e1cd5129b63affed35e52c1c4c1288bbeb479006a2cca8147fcd7d4f5acda2e5184d5c86dcf8a9d86d375df414550f60258d2d0315d68d555dcd08622894ebbd2bff5eb9905ee74c8e73088f92adc96ff26a2e87e27144d8202f35348670aadd5f7b777c7db1001762a7949278e78de6a203122b7b36923985c8251a76b136ce9f50ab1b8aa76bc55671d857ab39edc54696f28fee1c195ec5aacf3638497a321cdbf604c435cb784fd0cce715376b13ba4bcd53aa1beec32585719fd621cf8a1c473c73e795314e721f498830ac6f5a299d512a64a3ebae7bfb4d3cf1447afffbbb8f545675c4bce77a1d2f136dedfd177f9366e51fe721a8b0cf67d2e03517152d108d82fdf29c4d93362c967f0968357429bf9ff6946b60a56ca88168bb16abebe927a587a12b01693f57b8ca0c629c8bbfbaa5585462f45e209091e57b9f9ac343715f9e367b701de2dad90807c5e6fbfc4a22e45d0ef1a70875ee302c2855096839dce426e8da7bb3fd0b17d220ac4327013596be9399cd723c577b0c54e99cddec9cd00b1afaf7312a62f3cd8b9e33fe3cee1bb4c60fc56542fbdf5696f9607bf0d7152379c64514c1a85276da9de6a28103329016ab35588932fc8b34b5507c2a588088ee8aba1838d4778527c18876a3ca45d476e1611227582f4f0312f5911b82ffffa8c25ce1022e62344c6f1f85798f7ad1adc8bf0b45f31d5644646738c8354ba92ab06b94841155266f17ca8fac5574cc99da8e02928cd1e796407eaf577ab6686040150e44577ed8239a0c6e561c85b7812f713049000676f44ea70af1390345417fe1ef9b5be92348af6e6bf17e9e9f81d36483a81a500bf9934825b28512c192f42db3549866ec076fe5001b067508a6b647cb1ebabe0cfa6df8d9f409df6f2bdaf7c1968166eb21d2069ff3c32a2568e7f36969cf4ea0f98aeced8e8bc5583349084507f0b53f58f127e86e722bed43a90b899b42533fd64615631042034a02be3fd7d160b0d33d47c78bf750faca0ea6afd49eea0b4624887c94014b260b2af8c9c8bd6145e4959a05757f279c4eb5538183294b98a44128652449af5af3217e85a6107d6e31108021cad2d4241edea0320b7ab5e0df42a6444e774186c33eb92416333eec3c1123a1a9040b6654d45b9d51ff88d26ed3ef2960b4cbd142af0b3ca043a6fdf38e63d21de0012034edf23f49b27b91004865bfebfeef712aed1509812a2713c8416dbcf7b5a9198e324850c634cd438d87e3491cb5a2a7a01a1fe59f73e8b71099762db37f4c5e42637a0b88537c0cf675f52577ef820995a576cace3261d70487f587371062e8d449ea518e33382cdd94526951b5529904b7bf6cf884b32473dc196d2698a700a6e3c0307c2f4c7d15bcca15a418d76c15b505e7da3782b796d45876a9821d0ffc0af06e1cb49cb7ecedf605f65c845b16150a78533b8bc2634237cae6278c4f719e66d71ed91cf8a2e670fc5c13536d129988c87adfe24b18a0cb1cf808bd260da4afcb4b7e528def4f06b4bd3c03fb1f27314c9f7061cd2eddf36492f02fad7f0b6e067293610d3257f59caa533bba4ae54986c36b07a1f01802f56c4163ac1b057b17ac0dfc0eaa08c01d14726c0189de5746a51db3a5772794419f393b5a38cf9b402e9f7a6fab5f40811efc8281afb2455996d44c9f4595d46116f68e218b791a0a72e8927dd0a7d01b39bc23348bc8679da626aa14343d895284583a5b4fbb0f8a8bb332c01ee1d4f3612078162c71db91c6fd96279ef7c35a1977430cc4fdb86f41a97623b111b1460535576543351345660d79cc10de05de746878719ebf108403a58ebb98b9679aeb382ad6423fce3ea88f99e025eabdfce3bd1e2d6bb9496d6754eb286f911d6f2e433eb841067e7888bcb4371379548c23e4d852b062a8b465eb19061e573317be324b22cefd910426f001921dc289b06f8e875a88fb1754f1895be6e4966c416cbdd826eac439815adafa282fcdaa79211fe8c0e5d56ba9462df01279664105066b0a7e09340c3b93c59d7dfe1f316e61101cb76f91f19f0c12655ce7bb55c05ff677b91ea072ab2499fc5acf3e54c7d0e2d5b166c4293dd2737a27ac17769618270fda655f909efe646a4359950f8872ad8eca79967d53f5430a8cad941d4b499b70e8a24bc88691b3708ab", &(0x7f0000001f00)="431d7cd0c51cc463b6f342141228bd1d2a489bc9a0426cb3cb822b26e94e9c5cbcfce12513838d8a7cc4b86e8e46cb587bebb98654385a43747e42c9ba7604a19d958b7ee218ac0e2bd0b1ddd93be0e2cfc48a", 0x3, 0x0, 0x8}, 0x50) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e281ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014006040400010404009bbc7a46e3988285dcdf12f213e6f768fec601955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000200)={0x9, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040033, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 15m43.548049515s ago: executing program 1 (id=1480): ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x803}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xe, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x54}}]}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000080)) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x200000007ff}, 0x10022, 0xac5f, 0x0, 0x4, 0x0, 0x67af}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="b702000002000000732ac0fe00000000180200000a0000010000000000000000180200000a0000010000000000000000bfa200000000000007020000c0ffffffb703000040000000b704000000000000850000004500000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r2, 0x0, 0x22, 0x0, &(0x7f00000005c0)="001122334455001122334456080045000028000000004006f8ce0a0000010a000002", 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) 15m42.474739936s ago: executing program 1 (id=1484): r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) socket$kcm(0x10, 0x400000002, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x86bf2056334f3ae6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffa}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1d, 0x803, 0x1, &(0x7f0000000040)) openat$tun(0xffffffffffffff9c, 0x0, 0x400000, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000000)="d80000002c0081024e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a400014006006000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809f6e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 15m41.762034379s ago: executing program 1 (id=1490): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg(r0, &(0x7f0000001b80)={&(0x7f0000000140)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw-serpent-avx2\x00'}, 0x80, 0x0, 0x0, &(0x7f0000000600)=[{0x88, 0x112, 0x6, "b78bfa79f89ca74480361f254527e7a01ca5272651e4e69436d712eb4f9fbe382fff96c8735bfb71e31448f069003212e8aabfc397fbcb19a07985e922ad62972e709b9d5843f50f79bb09a275c9378415b710408b9ec29ac0ddbe62ccc1ac525b95a95d55e8b6a227a7b51d5a0dc47cc0"}, {0xc0, 0x6, 0x401, "43e205fe069d4f7477e58f51212fbbb8d6c93bfb6c79b08f686533a3c06dde044cca4878a5a03633130d16b950bb101fc292f95045955e50b4477bfa4eeb45ff71a53adbc0c64bda7301cf3bc66aa21bbbe1081e46ee55dd2d3c079d5560a4b9060ff0dcc4d0d2214b9bc30d09b2cbe30af7054eed05d2776c05618bf9cf9ee891bcdf138f607c2133953a8172b16ba808d9d9c5a09a119e3fbd55f36322384200c893e489dfed3214471b9a92d101"}, {0x10, 0x109, 0x9a4}], 0x158}, 0x40000) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0xff0f000000000000) 15m41.1139696s ago: executing program 1 (id=1493): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x2, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000009c0)="ec", 0x1}], 0x1, &(0x7f0000000780)=ANY=[@ANYBLOB="1400000000000000", @ANYBLOB="1b00"], 0x18}, 0x0) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) (async) r3 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f00000005c0)=r3, 0x12) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x10020, 0x0, 0xc2ba}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r6 = socket$kcm(0x10, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e21, 0x7, @local, 0x8}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x68000000}, 0x0) r7 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r7, 0x84, 0x1f, &(0x7f0000000100), 0x120) (async) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1c, 0xf, &(0x7f0000000500)=ANY=[@ANYBLOB="180000007f000000000000000400000018110000", @ANYRESDEC=r0, @ANYBLOB="0000000000000000b702000014800000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r8, 0xfffffffffffffec9, 0x0}, 0x10) (async) write$cgroup_subtree(r6, &(0x7f0000000340)=ANY=[], 0xfe33) (async) socket$kcm(0x10, 0x2, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1f, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="180000e5d763f269c00902500000000007000000000000009500000001000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x37}, 0x94) openat$cgroup_freezer_state(r2, &(0x7f0000000080), 0x2, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x50) r9 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000680)="1400000036000b63717abc0d0ed8980009000000", 0x14}], 0x1}, 0x20040010) 15m25.819510768s ago: executing program 32 (id=1493): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x2, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000009c0)="ec", 0x1}], 0x1, &(0x7f0000000780)=ANY=[@ANYBLOB="1400000000000000", @ANYBLOB="1b00"], 0x18}, 0x0) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) (async) r3 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f00000005c0)=r3, 0x12) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x10020, 0x0, 0xc2ba}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r6 = socket$kcm(0x10, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e21, 0x7, @local, 0x8}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x68000000}, 0x0) r7 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r7, 0x84, 0x1f, &(0x7f0000000100), 0x120) (async) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1c, 0xf, &(0x7f0000000500)=ANY=[@ANYBLOB="180000007f000000000000000400000018110000", @ANYRESDEC=r0, @ANYBLOB="0000000000000000b702000014800000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r8, 0xfffffffffffffec9, 0x0}, 0x10) (async) write$cgroup_subtree(r6, &(0x7f0000000340)=ANY=[], 0xfe33) (async) socket$kcm(0x10, 0x2, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1f, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="180000e5d763f269c00902500000000007000000000000009500000001000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x37}, 0x94) openat$cgroup_freezer_state(r2, &(0x7f0000000080), 0x2, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x50) r9 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000680)="1400000036000b63717abc0d0ed8980009000000", 0x14}], 0x1}, 0x20040010) 10.913603607s ago: executing program 0 (id=6636): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)="5c00000013006bcd9e3fe3dc6e48aa31086b8703040047887ea60264160af365040004", 0x23}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff858500000073000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000020000000f4ff0000000000009500000000000000", @ANYRESDEC, @ANYRES16, @ANYRES32], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/210, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x1, 0x0, 0x0, 0xfffffe0b}, 0x80) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002f000b08d25a80648c7494f90424fc600b", 0x15}], 0x1}, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002f000b08d25a80648c7494f90424fc600b", 0x15}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="934300005a"], 0xfe33) (async) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="934300005a"], 0xfe33) perf_event_open(&(0x7f0000000900)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2420, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$kcm(0x10, 0x2, 0x4) (async) socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x40448c5) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) socket$kcm(0x25, 0x1, 0x0) (async) r5 = socket$kcm(0x25, 0x1, 0x0) sendmsg$kcm(r5, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x4041) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r7, 0x86dd, 0x26, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 9.514115853s ago: executing program 4 (id=6642): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x23}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value=0xffffffff}, 0x94) 9.083330004s ago: executing program 4 (id=6644): r0 = socket$kcm(0xa, 0x2, 0x0) socketpair$tipc(0x1e, 0x7, 0x0, &(0x7f0000000000)) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0x2, &(0x7f00000000c0)=@raw=[@map_val={0x18, 0x2, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x9}], &(0x7f0000000140)='syzkaller\x00', 0x5, 0xc9, &(0x7f0000000180)=""/201, 0x41100, 0x10, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x9, 0x3}, 0x8, 0x10, &(0x7f00000002c0)={0x4, 0x5, 0x80, 0x6}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000300)=[0xffffffffffffffff, 0x1, 0x1, 0x1], &(0x7f0000000340)=[{0x3, 0x2, 0x7, 0x6}, {0x1, 0x1, 0x0, 0x6}, {0x4, 0x1, 0xf, 0xa}, {0x5, 0x5, 0xd, 0x8}, {0x2, 0x2, 0x9, 0x7}], 0x10, 0x5}, 0x94) setsockopt$sock_attach_bpf(r1, 0x29, 0x4b, &(0x7f0000000100)=r2, 0x4) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x4e20, @private=0xa010102}, 0x10, 0x0, 0x0, &(0x7f0000000480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @local}}}], 0x20}, 0x4000010) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000800)="390000001400070000113c000500018311001f9f660300000000000000f691f3bd3508abca1be6eeb89c44ebb37358582bdb954c53b4e92155", 0x39}], 0x1}, 0x0) 8.721827221s ago: executing program 4 (id=6645): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0xfe, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x80}, 0x0, 0x10000, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x20, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x440, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="b702000000000080bfa3000000b0ff000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000001a000000b70000000000000095000000000000008e17f199a68b061b93d83298a8cdda1ce784909b849d5550ad855dab54d8877a6db61d69f2ffcaa10350e11cb97ce8df1bc9a0c4eeceb9971e43405d621ffbc9b0d8ca56b50f0c010d631f6dbc8486bc5d5bf2ca8285056892db03cf1c62d57c08a90b189d190c341035de53a9a53608c10556e5734eb84049761451ce540c772e069f80cb201b2de17dfdb4b60939d5d6aed4062049b87e03e2cd18a77dda613e0c64497fcc059c062234d5595f6fbaa187b81d1106000000000f0000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd8000000000000000b91c61bd99dc89f12907af7dccd106cb937b450f859ce8292a79c3e40000b59b0fc46d6cec3c080a882add4e1179bd4a44f231a2d73148be4248cdc138408ba953df4aece69311687f4122073a236c3a32efa04137d46f0247d2638da3261c8162bb7c7824be6195a66d2e17e122040e11001131ce319045e5b3334e68475ac3f46aa2837f9004600daded9b19b35eebe52613c346e255421b23a278fd00004270b1cd5fc9aa2286ccca37db965d9dd366598f5ec993cb0cf127e2a46cfbdf63eea190d86a4d1b75ae98480100bd5828954a7d093a54f7e75b3753508ca3c41685d1e407315e59d626c23b3f89a926e9382966853774e7dd1f1a2177cdf2802237c177d543e8da47a01f05e113e53518270239b69c117e2637c31085f4d8a596b6edab26afaf6605b231199f38a6fc7eb83714387450ea18eafbace8eec18a4b2c442e7b88a7611c1283bec84e1715fb9f4fcaf52c08058fc4f21c0ad71adabdd850aed3eeec6eaab347bdf474e17b9aa345d1e6e3bb83f90230bdf53e7d0e5c3f914d905422b83f30936674ba8f0bffaf2305c0972df71fe5f4e01506471e897bced7798509e64df360d95f9a4099f86438ac2bbcbdbd1d9db21a1d5c065567fd70aae68096827fa5c2d9bd20292344c7dcf6241447cfbb05b5d0fdb4e08afbac5397b64aa369922ed7ed8918f97294b6854210d2b93aaf92159dbaa2f186d4a420c68d6baf1c31de4f0bf478bfd51bb1e96ea849a80ae5a89be7e38474c7aade344d68324f9e12a6b9770e6bd12ae69efffaee58040753701af84c2924c1b5aea1650f42c9ae9820a33095f062fb88313d035ea405515a61a4be64f9fa0985c5be592090cc48291004609fdac2ab6100000000000000a84570c7c00d647daf8af334050b61e9b2d3f0adad1d1ff47be19b8da2799e9ecef8efabe73f92dbd0760f8bbd9c590bd1371e2b5d9a2ea2190f5e4f5cd641cdfe5d89f84a368ef7e6ff1eacdc0ec9e97b8f9c9e314661ea0aa8a104008d188b66b3a4aedeed9df4238a08fc2fb1007233cc2c87fcaa0cccd8ec03444471c1dd660c87acc17bff740d199a7c0c52c63c0408b5158e0000000c275eedb02f141113cf2c55b2c08c2c68cc99d2bb5840fba332e1c82862ec9b90106248f81d32a47ac94ddee815dba8aeb5d3121cf247a81aef7805b020e9eec44cbe3055be69fe066824ba2292b9cdce41635fc00df96fb10a3a8cc60c4a76c65ebbb0640e0a29de94edf5cbefac1c5fa96e7080af804b22cabce10ea52f1018527f4aa39cdafa3eff63de2a7f50d042667820f6f86f276afb2b8134301e031351ee13013137e9d5cec0c84d7e3f82c6fd12eb98f9ea654bcb9ce59a2015183c6e65bb0537e611b830d74c30fb8207fca0990acdbb51e4e234026e00000000b3ebae3eb52c140953a350fcf0124b1a30b1afc29ea56f8413686d912eb8118d73ef9c6d3843ebcb555301c0205dd3bd9b1d742e334319c8979c322e92"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) 7.292423437s ago: executing program 4 (id=6646): perf_event_open(&(0x7f00000006c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x8400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x2c, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0xc, 0x100020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0xfffffffe, 0x0, 0x5, 0xd}, 0x0, 0xffffffffdfffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x29, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000003680)={&(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000003540)=[{&(0x7f0000000500)=""/30, 0x1e}, {&(0x7f0000000540)=""/100, 0x64}, {&(0x7f00000005c0)=""/243, 0xf3}, {&(0x7f0000002540)=""/4096, 0x1000}], 0x4, &(0x7f0000003580)=""/197, 0xc5}, 0x40) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xaa, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, @perf_config_ext={0x1, 0xb529}, 0x821, 0x0, 0x0, 0x2, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000100)="5c0000001e006bcd9e3fe3dc6e08000007000000190000007ea60864160af36504005425198bc3488bc3a0e69ee517d34460bc24eab556a705251e6182949a3651f668c3664402682fb6e27bbfa83b5cae0300c9f4d1938037e786a6", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r3, &(0x7f0000000300), 0x0}, 0x20) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000004000000080000000a"], 0x48) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000e00000001000000000000010400000020000001000000000000000d01000000050000000000000c020000000a0000000000000c0200000000696e74006d61696e0073"], 0x0, 0x5a}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18110000", @ANYRES32=r4, @ANYBLOB="000000000000000018420000060000000000000000000000b703000000000000b70400000000000085000000a4000000b7000000000000009500000000000000b7000000000000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x1, 0x100000, &(0x7f0000000700)=""/1048576, 0x0, 0x0, '\x00', 0x0, @fallback, r5, 0x8, &(0x7f0000000600)={0x0, 0x3}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x5, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="08461bb1cc7f46438874171d5e0127cf61c9634a562c20c7efc5c902f5f10ece1f069307a69b6e4fe370d889124e962403802761bbe7652c49f6300b18119222a5de13c78846919367162e43543542eab74b10753bbf1c93dbe9cfcf277e512914d764355bcf7aa422c8fe0dd749e1fb9e6eaa32e5f4b806818a8fa04765e93187ad13d44484098523f3c318108c610235ad33aff246e01d514a4da9f8574fa8c162612d37f4b187c3154dfe47e7eb2996f5bf556a87b674fb5cfe68f03f8b99a4724cefb4be1317805620150c16e49587326c815eb943411bf5647d23cae9cb4438b5615f28f9bf8cba6de6d8523710860361"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000007008500000004"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r6}, 0xc) r7 = openat$cgroup_int(r2, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[@ANYBLOB='-0'], 0x9) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed0", 0x2b}], 0x1}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188e6b62aa73f72cc9f0ba1f8483d0000005e140602000000000e", 0x21}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8001c00180081064e81f782db44b9b545c7910006007c09e8fe55a10a0017", 0x1f}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f7d28344b904020000", 0x2}], 0x1}, 0x0) 6.81269802s ago: executing program 0 (id=6652): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x30000000}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x50, 0x6000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x20}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0x2, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x3, 0x8, 0x0, 0x0, 0xffffffb0}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0}, 0x94) 6.563219352s ago: executing program 4 (id=6654): perf_event_open(&(0x7f0000000480)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340), 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340), 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x19, 0xf, &(0x7f0000000000)=ANY=[@ANYRESDEC, @ANYBLOB="0000000000000000b70200001400001e219999dcade5b2c9f000b7030000008900000000000031"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYRESHEX=r0], 0x0}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYRESHEX=r0], 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce2200"], 0xfdef) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_config_ext={0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x8040) recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)}, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x22, &(0x7f00000000c0), 0x4) r3 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071116200000000008510000002000000850000000500000095000000000000009504a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000000)={'ipvlan1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) (async) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000000)={'ipvlan1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) sendmsg$kcm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000005c0)="2e00000010008188e6b62aa73f72cc9f0ba1f848120000005e140602000000000e000a00100000000a8000001294", 0x2e}], 0x1}, 0x40400) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000300), 0x24) bpf$ITER_CREATE(0xb, &(0x7f00000002c0)={r5}, 0x8) (async) r6 = bpf$ITER_CREATE(0xb, &(0x7f00000002c0)={r5}, 0x8) write$cgroup_int(r6, &(0x7f00000001c0), 0xfffffdef) (async) write$cgroup_int(r6, &(0x7f00000001c0), 0xfffffdef) write$cgroup_freezer_state(r5, &(0x7f0000000280)='THAWED\x00', 0xfffffe24) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000dc0)={r5, 0x0, 0x0}, 0x10) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000dc0)={r5, 0x0, 0x0}, 0x10) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) (async) sendmsg$kcm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000025c0)=""/4073, 0xfe9}], 0x1}, 0x12040) (async) recvmsg$kcm(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000025c0)=""/4073, 0xfe9}], 0x1}, 0x12040) r8 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xffffff58, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020027000b35d25a806f8c6394f90224fc602f1b01000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000), 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c40)=@bpf_ext={0x1c, 0x8, 0x0, 0x0, 0xfffffe00, 0x0, 0x0, 0x41000, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xb80c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) (async) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c40)=@bpf_ext={0x1c, 0x8, 0x0, 0x0, 0xfffffe00, 0x0, 0x0, 0x41000, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xb80c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES16=r9, @ANYRES16=r9, @ANYBLOB="0c71c5b65aac2aef41b0a65610e155b83d1e5c788a51cf879739a4aba0f9b6e2d4d7f76d0f84518caaf3ca8d8f0e5d5da3ebebe9a59d1cd4c5ef23e3fd1fa0e8eca9071687af125f", @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES16=r9, @ANYRES16=r9, @ANYBLOB="0c71c5b65aac2aef41b0a65610e155b83d1e5c788a51cf879739a4aba0f9b6e2d4d7f76d0f84518caaf3ca8d8f0e5d5da3ebebe9a59d1cd4c5ef23e3fd1fa0e8eca9071687af125f", @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) 6.158018991s ago: executing program 0 (id=6659): r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f00000017c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x80fe, 0x7, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x12, 0x2}, 0x80, &(0x7f00000003c0)=[{0x0}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB], 0xd0}, 0x480c4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x21580, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x11201, 0x0, 0x0, 0x0, 0x3, 0x4, 0x54b8, 0x0, 0x0, 0x0, 0x2ac7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0x58, &(0x7f0000000680)}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0x20, &(0x7f0000000600)={&(0x7f0000000500)=""/119, 0x77, 0x0, 0x0}}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8922, &(0x7f0000001f40)='lo:\x96o8\x14d\xa1\xe3\xd7\\b}\x1f\xa1C\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\xf5\a\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'5\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\x06\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\r\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5\xdcZ\xb9\xd7Z\x88\x9b\xdff[\x90\xfa\x9a{b\xf4Dq') r3 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x120a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2b8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b9040a1d08020a0000000e0096a1180002000000030000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) sendmsg$inet(r1, 0x0, 0x40000) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001980)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffff8}, [@call={0x85, 0x0, 0x0, 0x36}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0xa, 0x3, 0x73) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x200048cc) socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) 5.191522346s ago: executing program 0 (id=6665): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffa}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x1e, &(0x7f0000000500), 0x4) socket$kcm(0x10, 0x3, 0x10) r0 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x6, &(0x7f0000000500), 0x4) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xc81e9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x4846, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000600)={0x5, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={0x0, 0x8}, 0x4010, 0x0, 0x0, 0x0, 0x3, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020705200000000002020207b0ae8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x12, 0x4, 0x4, 0xc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000001800000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0xa, 0x0, 0x0, 0x2, 0x0, 0x5, 0x44, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x0, 0xa7, 0x2, 0x5, 0xa5, 0x9b9b, 0x7000, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x3, @remote, 0x5, 0x3}, 0x80, 0x0}, 0x2600c055) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000061106c000000000063013000000000009500090000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x600, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000200)={'wlan0\x00', @remote}) 4.761465556s ago: executing program 4 (id=6666): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x8020, 0x0, 0x1780, 0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x6, 0x0) r3 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r3, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x572, @remote}, 0x80, &(0x7f0000001340)=[{&(0x7f0000000040)="f4001100022b3325a6d5b02f3af8", 0xe}, {&(0x7f0000000080)}, {&(0x7f0000000140)="9d7fa74553ce3f5d59516d02ede9999f3b073dd99175af73c8a3248a83807167484645540f8749acf5a7b3fe4fbe939939d14b68517342797d181af72c28b57d02234901e359e6a3807d9181abfbd8d9ad9b", 0x52}, {&(0x7f0000000340)}], 0x4}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x10d, 0x2, &(0x7f0000000000)=r4, 0x4) recvmsg$kcm(r2, &(0x7f0000000680)={&(0x7f0000000500)=@nl=@unspec, 0x80, &(0x7f0000000600)=[{&(0x7f0000000580)=""/62, 0x3e}, {0x0}], 0x2, &(0x7f0000000640)=""/48, 0x30}, 0x3) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/syz1\x00', 0x200002, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000200)=@o_path={&(0x7f00000001c0)='./cgroup/file0/file0\x00', r4, 0x4000, r1}, 0x18) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x12, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000010"], 0x0, 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000811900000000000000800014850000006d00000095"], 0x0, 0x7}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r6}, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = syz_clone(0x2020200, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffd}, r7, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) socket$kcm(0xa, 0x7, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 4.639585302s ago: executing program 2 (id=6667): socket$kcm(0x11, 0xa, 0x300) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r0) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xe, 0x1c, &(0x7f0000001140)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b70300002bb91a008520000008000000bc0900000000000045090100002000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000bf2700000000000007080000fffdffffbfa400000000000007040000f0ffffffc40200000800000018220000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608efff76000000bf9800000000000056090000000000008500000000000000b700000000000000950000006eda7c25ec9527d2e657a1568a0bcb0c766b60b4af1d352c581b990dc2"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 4.066351349s ago: executing program 0 (id=6668): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40814) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x61, &(0x7f00000027c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x10100) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000207b8ae8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70100000200000085000000a600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb0105", 0x1e}], 0x1, 0x0, 0x0, 0xc9e}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b00000005000000010001000a00afcb25c4d627079d178e0914050001000000", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f700000001", 0x18}], 0x1}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002780)=[{&(0x7f00000006c0)='{', 0x1}], 0x1}, 0x4000040) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000100000000a500020000000000000000fe"], 0x0, 0x0, 0x0, 0x0, 0x80000, 0x19, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000080000000000000000000000850000004100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2e0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x12, 0x0, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b3114", 0x0, 0x0, 0x3}, 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @empty}, 0x80, 0x0}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d087277b9b108b4ab51c"], 0xfe33) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe000018"], 0xfe33) 4.065724599s ago: executing program 2 (id=6670): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000fcffffff0000000007000000850000007b0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000400000095"], 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1002, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x1, @perf_bp={0x0}, 0x8061, 0x3, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a0000000400000008000000"], 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x48) r2 = socket$kcm(0x10, 0x2, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000000), 0x4) sendmsg$kcm(r2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x0, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x10) r3 = socket$kcm(0x2, 0x1, 0x84) sendmsg$kcm(r3, &(0x7f00000003c0)={&(0x7f0000000740)=@in={0x2, 0x4e21, @loopback}, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000000880)='\r', 0x34000}], 0x1}, 0x40) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xe}, 0x1000, 0x3, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000040000000203000000000000"], &(0x7f0000000140)=""/240, 0x56, 0xf0, 0x1}, 0x28) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x98}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 4.010161571s ago: executing program 3 (id=6671): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x43}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8a}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r1, 0x4) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x1}, 0x88, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 3.720895685s ago: executing program 3 (id=6672): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) (async) perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x1e37cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x401, 0x200, 0x0, 0x7, 0x0, 0x100}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x400000}, 0x50) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socketpair(0x1, 0x5, 0x0, 0x0) (async) socket$kcm(0xf, 0x3, 0x2) (async) close(0x3) socket$kcm(0xf, 0x3, 0x2) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000400)=@generic={&(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0, 0x1c}, 0x18) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socketpair(0x18, 0x800, 0x7ff, &(0x7f0000000180)) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) close(0x3) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r1, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)=r2}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r3, &(0x7f0000000040), 0x0}, 0x20) (async) mkdir(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xf2) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x5d, 0x0, &(0x7f0000000100)="257d526be1b04f894b50bd5a0180000000000000f1337432eac13ac5e75f5e0baaea0dd70ac392c6eccd90668920ff6e4165b95a6022362626dde7890e04e97ebc3c11b772b1a35614bef05987274fe4c84cd5aab611b4e65fc070d68b", 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00}, 0x50) 3.675674018s ago: executing program 5 (id=6673): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x600, &(0x7f0000000000)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fc3000000060000040014000d000a000d00ffc39ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x40) 3.297865165s ago: executing program 0 (id=6674): bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080), 0x4) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40040, 0x0) close(r0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x7, 0x7, 0x8, 0x0, 0x0, 0xe7d, 0xa04, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x400, 0x1, @perf_bp={0x0, 0x8}, 0x8000, 0x1, 0x60c42711, 0x0, 0x400004, 0xeeb1, 0x0, 0x0, 0x5, 0x0, 0x8}, 0x0, 0x1, r1, 0x8) write$cgroup_int(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0xe, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000a000000000000000300000018110000582464b6f08c6d7c29", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000635540000400000018230000", @ANYRES32=0x1, @ANYBLOB="00000000fcffffff95000000000000008520000001000000183300000500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x8000, 0x3b, &(0x7f0000000200)=""/59, 0x40f00, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000280)={0x3, 0xb, 0x2, 0xcbb}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000002c0)=[0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0x1], &(0x7f0000000300)=[{0x1, 0x3, 0x9}, {0x0, 0x5, 0xd, 0xb}, {0x4, 0x3, 0x1, 0x4}, {0x0, 0x1, 0x9, 0x2}], 0x10, 0x901a}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001200)=@base={0x19, 0x4, 0x4, 0xc}, 0x50) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) close(r5) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)="d80000001e0081054e81f782db020000001d080006007c09e8fe08a104000e000a00142603600e1208000fc01e000406a80016c008000e400400027c035c0461c1967f6f94007134cff6d26efb8000a0ffa290457f01895416277ce06bba0000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d25ccca95c9757c01deeb12c0e440f57d6cf23b1900360db7e5167fda40fad956d809d5e12a9ecbee5de6ccd40dd6e4edef3d93452a92950b0000000000000023f9a941000000000000000000007d59ef7e1359485303f720a1ed469c778f", 0xd8}], 0x1}, 0x804) 3.006050559s ago: executing program 5 (id=6675): r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f00000017c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x80fe, 0x7, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x12, 0x2}, 0x80, &(0x7f00000003c0)=[{0x0}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB], 0xd0}, 0x480c4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x21580, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x11201, 0x0, 0x0, 0x0, 0x3, 0x4, 0x54b8, 0x0, 0x0, 0x0, 0x2ac7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0x58, &(0x7f0000000680)}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0x20, &(0x7f0000000600)={&(0x7f0000000500)=""/119, 0x77, 0x0, 0x0}}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8922, &(0x7f0000001f40)='lo:\x96o8\x14d\xa1\xe3\xd7\\b}\x1f\xa1C\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\xf5\a\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'5\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\x06\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\r\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5\xdcZ\xb9\xd7Z\x88\x9b\xdff[\x90\xfa\x9a{b\xf4Dq') r3 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x120a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2b8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b9040a1d08020a0000000e0096a1180002000000030000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) sendmsg$inet(r1, 0x0, 0x40000) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001980)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffff8}, [@call={0x85, 0x0, 0x0, 0x36}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0xa, 0x3, 0x73) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x200048cc) socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) 2.994525339s ago: executing program 3 (id=6676): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001", @ANYBLOB], 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYBLOB], 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x18}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1a}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xa, 0x9}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1000000, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.75764721s ago: executing program 2 (id=6677): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="05000000040000000400000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x15, 0x17, &(0x7f0000000880)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x20000000}, {0x85, 0x0, 0x0, 0xa0}}, {{0x6, 0x0, 0x2, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [@printk={@llx, {0x5, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x14}}], {{0x4, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x2000000}}}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xd, 0xd, &(0x7f0000000000)="4645363bc385a115d1c8b541a5", &(0x7f0000000040)=""/13, 0x3, 0x0, 0x51, 0x51, &(0x7f00000001c0)="54eda387c37dd97530a6058665fae29ec8a41da0105f4e588bb705427d511a7190fb2db6495df1f6050ce2e3ef96cf86c9e18f4b5ca7c54a838eb12187db88b86b5e7698509193e9162395c414f40c47d6", &(0x7f0000000240)="c7627b2235b4b24e40f3d8a8281dc5e547e7871224fcbc96c8593c746864f4eeef0d60f117e40a47f163c3f57c06e59e3551c789b2a87f8a22daa54c4c4bc978ba64fb351c193f0c6dfa8857f8897b68f6", 0x6, 0x0, 0x5}, 0x50) 2.628030026s ago: executing program 5 (id=6678): perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_config_ext={0x101, 0x6}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x308) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r1, 0x1, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB="bfa200000000000007020000fcffffff620200000000000018110000", @ANYRES32=r2, @ANYBLOB="002000000000000085000000010000001500070000000000bf06000000000000bf610000000000000701000004000000850000005e000000bf610000000000000701000004000000850000005e000000b70000000000000095"], &(0x7f0000000500)='GPL\x00', 0x7, 0x1000, &(0x7f0000001000)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0xffff0000}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @cgroup_sock_addr=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.525166221s ago: executing program 3 (id=6679): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffa}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x1e, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) r0 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x6, &(0x7f0000000500), 0x4) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xc81e9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x4846, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000600)={0x5, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={0x0, 0x8}, 0x4010, 0x0, 0x0, 0x0, 0x3, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020705200000000002020207b0ae8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x12, 0x4, 0x4, 0xc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000001800000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0xa, 0x0, 0x0, 0x2, 0x0, 0x5, 0x44, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x0, 0xa7, 0x2, 0x5, 0xa5, 0x9b9b, 0x7000, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x3, @remote, 0x5, 0x3}, 0x80, 0x0}, 0x2600c055) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000061106c000000000063013000000000009500090000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x600, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000200)={'wlan0\x00', @remote}) 1.537512878s ago: executing program 5 (id=6680): socket$kcm(0xa, 0x3, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[], 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x4, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x35, 0x0, 0x67, 0x4}]}, {0x0, [0x2e, 0x2e]}}, &(0x7f0000000280)=""/176, 0x2c, 0xb0, 0x0, 0xffffff7b, 0x10000}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1d, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x14, &(0x7f0000000140)=""/20, 0x41000, 0x4, '\x00', 0x0, @lsm=0x2b, r2, 0x8, &(0x7f0000000380)={0x3, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, r0, 0x2, 0x0, &(0x7f00000003c0)=[{0x5, 0x2, 0x1, 0xb}, {0x5, 0x2, 0x8, 0x7}], 0x10, 0x8a6}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xc, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000008000000850000001500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0xfeff, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0xa) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) 1.48827244s ago: executing program 2 (id=6681): socket$kcm(0x10, 0x2, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socketpair(0x22, 0x3, 0x4, &(0x7f0000000340)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1b, 0x10, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0xfffffffffffffe96, 0x0, 0x0, 0x0, 0x0, 0x20000001}, 0x40000) socket$kcm(0x22, 0x2, 0x21) socket$kcm(0x21, 0x2, 0xa) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'macsec0\x00', 0xca58c30f81b68ebf}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x38) r3 = gettid() r4 = perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x0, 0xb9, 0x5, 0x1, 0x0, 0x2f03, 0x20, 0xb, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000180), 0xb}, 0x8000, 0x9, 0xd7c, 0x1, 0x7, 0x3, 0x3, 0x0, 0x5, 0x0, 0x7fffffffffffffff}, r3, 0x3, r4, 0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x410, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xa, 0xffffffffffffffff, 0x8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'macsec0\x00', 0x1}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8924, &(0x7f0000000080)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)) 1.306140378s ago: executing program 3 (id=6682): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="bf16000000000000b70100003b0204007b1ae0ff00000000b7010000000000007b1ae8ff000000007b1af0ff00000000bf61000000000000b702000001000000bfa300000000000007030000e0ffffffb7040000180000008500000049000000b70000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r0, 0x0, 0x36, 0x0, &(0x7f0000000680)="52540012345652540012345786dd6000000000003b400000000000000000000000000000000100004000000000000000000000000001", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 965.818674ms ago: executing program 2 (id=6683): ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r0) recvmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000015c0)=""/4096, 0x1000}], 0x1, 0x0, 0x18}, 0x100) write$cgroup_devices(r0, &(0x7f00000005c0)=ANY=[], 0xfffffeff) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$kcm(0x21, 0x2, 0x2) bpf$ITER_CREATE(0xb, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) sendmsg$sock(r1, 0x0, 0x24040004) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x9, 0x0, 0x0, 0xd2cf, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2, 0xffffffffffffffff}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000c00000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000001a00000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x5350a0e2ad0fd2e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b0f, &(0x7f00000000c0)={'tunl0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="76389e6a65585578f830e9000000", 0x0, 0x10001, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c"], 0x10b8}, 0xff00) 955.970295ms ago: executing program 5 (id=6684): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40814) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x61, &(0x7f00000027c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x10100) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000207b8ae8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70100000200000085000000a600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb0105", 0x1e}], 0x1, 0x0, 0x0, 0xc9e}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b00000005000000010001000a00afcb25c4d627079d178e0914050001000000", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f700000001", 0x18}], 0x1}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002780)=[{&(0x7f00000006c0)='{', 0x1}], 0x1}, 0x4000040) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000100000000a500020000000000000000fe"], 0x0, 0x0, 0x0, 0x0, 0x80000, 0x19, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000080000000000000000000000850000004100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2e0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x12, 0x0, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b3114", 0x0, 0x0, 0x3}, 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @empty}, 0x80, 0x0}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d087277b9b108b4ab51c"], 0xfe33) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe000018"], 0xfe33) 786.053873ms ago: executing program 2 (id=6685): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000010000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x100002f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 429.962419ms ago: executing program 5 (id=6686): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a8000900080008400400027c9c000461c1d67f6f94001600cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e97039207", 0xd4}, {&(0x7f0000000040)="603ade1f", 0x4}], 0x2}, 0x20004040) (fail_nth: 2) socket$kcm(0x29, 0x5, 0x0) sendmsg$sock(0xffffffffffffffff, 0x0, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x604, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x50, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x5, 0x830d}, 0x0, 0x4, 0xfffffffe, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc202, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x2, 0x3cd, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0xa) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xf, &(0x7f00000002c0)=r0, 0x4) socket$kcm(0x10, 0x2, 0x10) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xc, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0xa, 0x3, 0x3a) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0x22072a18}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)}], 0x1, 0x0, 0x0, 0x900}, 0x60) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) 0s ago: executing program 3 (id=6687): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x189001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x39, 0x0, &(0x7f0000000100)="b9ff030f6044238cb89e14f088a81bff88f7ffff4000630677fbac14142c88a8a0a688a89f4b4d2f87e56dca6aab84fe13f2325f1a3901050b", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800006}, 0x50) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r1) (async) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x22227040, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000004c0)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x20, 0x5, 0x7, 0xfffff008}, {0x6, 0xfd, 0x6, 0xe5}]}) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7465, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x4000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) r3 = socket$kcm(0x2, 0x2, 0x73) sendmsg$inet(r3, &(0x7f0000000500)={&(0x7f0000000300)={0x2, 0x0, @multicast2}, 0xf, &(0x7f0000000400)=[{&(0x7f0000000340)='+', 0x1}], 0x1}, 0x900000000000000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r5, 0x0, 0x31) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)}, 0x20040842) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) (async) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x13) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="04000000040000000400000010"], 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0x7, &(0x7f0000000000)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): 083.214059][T22202] netlink: 'syz.2.5603': attribute type 1 has an invalid length. [ 1083.246494][T22202] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.5603'. [ 1085.035658][T22220] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5609'. [ 1085.340417][T22220] netlink: 'syz.0.5609': attribute type 10 has an invalid length. [ 1085.348388][T22220] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5609'. [ 1085.422438][T22220] 8021q: adding VLAN 0 to HW filter on device team0 [ 1085.494999][T22220] bond0: (slave team0): Releasing backup interface [ 1085.506100][T22218] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.5608'. [ 1085.553766][T22220] bridge0: port 3(team0) entered blocking state [ 1085.581053][T22220] bridge0: port 3(team0) entered disabled state [ 1085.614900][T22227] netlink: 63763 bytes leftover after parsing attributes in process `syz.4.5611'. [ 1086.966906][T22253] netlink: 'syz.3.5628': attribute type 4 has an invalid length. [ 1087.039613][T22253] netlink: 60519 bytes leftover after parsing attributes in process `syz.3.5628'. [ 1087.376838][T22260] netlink: 'syz.0.5619': attribute type 6 has an invalid length. [ 1089.086142][T22276] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5626'. [ 1089.143942][T22281] netlink: 'syz.0.5626': attribute type 10 has an invalid length. [ 1089.182456][T22281] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5626'. [ 1089.260357][T22281] 8021q: adding VLAN 0 to HW filter on device team0 [ 1091.691173][T22322] netlink: 63763 bytes leftover after parsing attributes in process `syz.0.5643'. [ 1092.716986][T22354] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5657'. [ 1092.744761][T22354] netlink: 'syz.2.5657': attribute type 10 has an invalid length. [ 1092.769772][T22354] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5657'. [ 1092.798254][T22354] bond0: (slave team0): Releasing backup interface [ 1092.844442][T22354] bridge0: port 2(team0) entered blocking state [ 1092.857243][T22354] bridge0: port 2(team0) entered disabled state [ 1092.888736][T22357] netlink: 63763 bytes leftover after parsing attributes in process `syz.3.5658'. [ 1093.376390][T22364] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5661'. [ 1094.878059][T22393] netlink: 63763 bytes leftover after parsing attributes in process `syz.5.5672'. [ 1094.910903][T22391] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5673'. [ 1094.936079][T22397] netlink: 'syz.0.5674': attribute type 10 has an invalid length. [ 1094.954492][T22397] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5674'. [ 1094.966832][T22397] bridge0: port 4(dummy0) entered disabled state [ 1094.995901][T22397] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 1095.031657][T22391] netlink: 'syz.3.5673': attribute type 10 has an invalid length. [ 1095.049124][T22391] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5673'. [ 1095.886570][T22401] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.5675'. [ 1096.149735][T22401] netlink: zone id is out of range [ 1096.950979][T22434] netlink: 63763 bytes leftover after parsing attributes in process `syz.4.5686'. [ 1097.277681][T22445] sctp: [Deprecated]: syz.3.5689 (pid 22445) Use of int in max_burst socket option deprecated. [ 1097.277681][T22445] Use struct sctp_assoc_value instead [ 1099.330258][T22453] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5693'. [ 1099.389510][T22453] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1099.417441][T22453] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1100.311882][T22478] netlink: 'syz.5.5699': attribute type 10 has an invalid length. [ 1100.371019][T22478] bridge0: port 3(team0) entered disabled state [ 1100.432941][T22478] device team0 left promiscuous mode [ 1100.470951][T22478] device team_slave_0 left promiscuous mode [ 1100.497325][T22478] device team_slave_1 left promiscuous mode [ 1100.513871][T22478] bridge0: port 3(team0) entered disabled state [ 1100.541166][T22478] 8021q: adding VLAN 0 to HW filter on device team0 [ 1100.565758][T22478] device team0 entered promiscuous mode [ 1100.579887][T22478] device team_slave_0 entered promiscuous mode [ 1100.598366][T22478] device team_slave_1 entered promiscuous mode [ 1100.614928][T22478] bond0: (slave team0): Enslaving as an active interface with an up link [ 1100.665589][T22481] netlink: 63763 bytes leftover after parsing attributes in process `syz.4.5700'. [ 1100.689805][T22490] netlink: 'syz.2.5702': attribute type 21 has an invalid length. [ 1101.342717][ T4293] Bluetooth: hci2: ISO packet for unknown connection handle 7 [ 1101.847381][T22511] FAULT_INJECTION: forcing a failure. [ 1101.847381][T22511] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1101.928808][T22511] CPU: 0 PID: 22511 Comm: syz.0.5709 Not tainted syzkaller #0 [ 1101.936379][T22511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1101.946662][T22511] Call Trace: [ 1101.949995][T22511] [ 1101.952980][T22511] dump_stack_lvl+0x188/0x24e [ 1101.957716][T22511] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1101.963930][T22511] ? show_regs_print_info+0x12/0x12 [ 1101.969188][T22511] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1101.975407][T22511] should_fail_ex+0x390/0x4c0 [ 1101.980156][T22511] _copy_from_user+0x2c/0x170 [ 1101.984877][T22511] __sys_bpf+0x2ea/0x780 [ 1101.989179][T22511] ? bpf_link_show_fdinfo+0x380/0x380 [ 1101.994617][T22511] ? lock_chain_count+0x20/0x20 [ 1101.999636][T22511] __x64_sys_bpf+0x78/0x90 [ 1102.004098][T22511] do_syscall_64+0x4c/0xa0 [ 1102.008554][T22511] ? clear_bhb_loop+0x60/0xb0 [ 1102.013266][T22511] ? clear_bhb_loop+0x60/0xb0 [ 1102.018073][T22511] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1102.024024][T22511] RIP: 0033:0x7f1edfd9e159 [ 1102.028482][T22511] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1102.048139][T22511] RSP: 002b:00007f1ee0c21028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1102.056596][T22511] RAX: ffffffffffffffda RBX: 00007f1ee0026090 RCX: 00007f1edfd9e159 [ 1102.064611][T22511] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 0000000000000012 [ 1102.072724][T22511] RBP: 00007f1ee0c21090 R08: 0000000000000000 R09: 0000000000000000 [ 1102.080824][T22511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1102.088835][T22511] R13: 00007f1ee0026128 R14: 00007f1ee0026090 R15: 00007fff56c71be8 [ 1102.096868][T22511] [ 1102.923363][T22539] netlink: 63763 bytes leftover after parsing attributes in process `syz.3.5718'. [ 1103.024571][T22541] netlink: 'syz.2.5720': attribute type 29 has an invalid length. [ 1103.077484][T22541] netlink: 'syz.2.5720': attribute type 29 has an invalid length. [ 1103.110751][T22544] netlink: 'syz.2.5720': attribute type 29 has an invalid length. [ 1105.272598][T22590] netlink: 'syz.0.5731': attribute type 2 has an invalid length. [ 1105.285951][T22590] netlink: 'syz.0.5731': attribute type 4 has an invalid length. [ 1105.318225][T22590] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5731'. [ 1105.508091][T22612] netlink: 63763 bytes leftover after parsing attributes in process `syz.2.5737'. [ 1105.808161][T22620] netlink: 15743 bytes leftover after parsing attributes in process `syz.3.5739'. [ 1105.835324][T22623] netlink: 'syz.4.5741': attribute type 10 has an invalid length. [ 1105.982778][T22623] bridge0: port 3(team0) entered disabled state [ 1106.067207][T22623] device team0 left promiscuous mode [ 1106.093543][T22623] device team_slave_0 left promiscuous mode [ 1106.114370][T22623] device team_slave_1 left promiscuous mode [ 1106.131117][T22623] device geneve1 left promiscuous mode [ 1106.248937][T22623] bridge0: port 3(team0) entered disabled state [ 1106.505641][T22623] 8021q: adding VLAN 0 to HW filter on device team0 [ 1106.592598][T22623] device team0 entered promiscuous mode [ 1106.607424][T22623] device team_slave_0 entered promiscuous mode [ 1106.645581][T22623] device team_slave_1 entered promiscuous mode [ 1106.682923][T22623] device geneve1 entered promiscuous mode [ 1106.753097][T22623] bond0: (slave team0): Enslaving as an active interface with an up link [ 1107.075732][T22651] device syzkaller0 entered promiscuous mode [ 1107.092608][T22653] netlink: 'syz.0.5748': attribute type 10 has an invalid length. [ 1107.107773][T22653] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5748'. [ 1107.143935][T22653] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 1107.189637][T22658] netlink: 63763 bytes leftover after parsing attributes in process `syz.4.5750'. [ 1109.227544][T22695] netlink: 'syz.5.5764': attribute type 9 has an invalid length. [ 1109.235544][T22695] netlink: 207496 bytes leftover after parsing attributes in process `syz.5.5764'. [ 1109.273934][T22695] netlink: 'syz.5.5764': attribute type 9 has an invalid length. [ 1109.287361][T22695] netlink: 207496 bytes leftover after parsing attributes in process `syz.5.5764'. [ 1110.922974][T22673] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5755'. [ 1110.932464][T22675] netlink: 'syz.3.5755': attribute type 10 has an invalid length. [ 1110.941546][T22675] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5755'. [ 1110.951704][T22678] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.5758'. [ 1110.968418][T22694] netlink: 'syz.5.5764': attribute type 46 has an invalid length. [ 1110.989151][T22694] netlink: 55 bytes leftover after parsing attributes in process `syz.5.5764'. [ 1111.030334][T22697] netlink: 'syz.5.5764': attribute type 46 has an invalid length. [ 1111.038513][T22697] netlink: 55 bytes leftover after parsing attributes in process `syz.5.5764'. [ 1111.166977][T22703] sctp: [Deprecated]: syz.2.5765 (pid 22703) Use of int in max_burst socket option deprecated. [ 1111.166977][T22703] Use struct sctp_assoc_value instead [ 1111.727997][T22716] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5771'. [ 1112.311709][T22730] netlink: 'syz.0.5775': attribute type 16 has an invalid length. [ 1112.354189][T22730] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5775'. [ 1112.380772][T22735] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5778'. [ 1112.646368][T22730] netlink: 'syz.0.5775': attribute type 2 has an invalid length. [ 1112.711314][T22730] netlink: 'syz.0.5775': attribute type 1 has an invalid length. [ 1112.799809][T22746] netlink: 'syz.3.5780': attribute type 21 has an invalid length. [ 1113.394262][T22765] bridge0: port 2(bridge_slave_1) entered disabled state [ 1113.405329][T22765] bridge0: port 1(bridge_slave_0) entered disabled state [ 1113.529188][T22769] device bridge_slave_1 left promiscuous mode [ 1113.607328][T22769] bridge0: port 2(bridge_slave_1) entered disabled state [ 1113.646538][T22769] device bridge_slave_0 left promiscuous mode [ 1113.679463][T22769] bridge0: port 1(bridge_slave_0) entered disabled state [ 1115.942947][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.949435][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.291545][ T4289] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1116.301572][ T4289] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1116.311245][ T4289] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1116.320695][ T4289] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1116.330314][ T4289] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1116.337770][ T4289] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1116.594411][T19695] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1116.662247][T22817] netlink: 'syz.5.5803': attribute type 10 has an invalid length. [ 1116.786346][T22817] bond0: (slave team0): Releasing backup interface [ 1116.804180][T22817] device team0 left promiscuous mode [ 1116.840265][T22817] device team_slave_0 left promiscuous mode [ 1116.847459][T22817] device team_slave_1 left promiscuous mode [ 1117.137047][T22817] team0 (unregistering): Port device team_slave_0 removed [ 1117.258133][T22817] team0 (unregistering): Port device team_slave_1 removed [ 1117.388133][T19695] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1117.537596][T19695] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1117.650501][T22837] __nla_validate_parse: 2 callbacks suppressed [ 1117.650594][T22837] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.5809'. [ 1117.669554][T19695] bond0: (slave netdevsim0): Releasing backup interface [ 1117.705239][T19695] device netdevsim0 left promiscuous mode [ 1117.733878][T19695] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1118.383813][T22813] chnl_net:caif_netlink_parms(): no params data found [ 1118.419533][ T4289] Bluetooth: hci4: command 0x0409 tx timeout [ 1118.861125][T22813] bridge0: port 1(bridge_slave_0) entered blocking state [ 1118.868687][T22813] bridge0: port 1(bridge_slave_0) entered disabled state [ 1118.894878][T22871] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5818'. [ 1118.905565][T22813] device bridge_slave_0 entered promiscuous mode [ 1118.927327][T22813] bridge0: port 2(bridge_slave_1) entered blocking state [ 1118.994823][T22813] bridge0: port 2(bridge_slave_1) entered disabled state [ 1119.013755][T22813] device bridge_slave_1 entered promiscuous mode [ 1119.229645][T22871] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5818'. [ 1119.420358][T22874] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5818'. [ 1119.440279][T22813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1119.479155][T22873] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5818'. [ 1119.533942][T22813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1119.618902][T22813] team0: Port device team_slave_0 added [ 1119.673501][T22813] team0: Port device team_slave_1 added [ 1119.779695][T22813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1119.803745][T22813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1119.897558][T22813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1120.227439][T22813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1120.250980][T22813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1120.369022][T22813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1120.509321][ T4289] Bluetooth: hci4: command 0x041b tx timeout [ 1120.633628][T22912] netlink: 'syz.3.5828': attribute type 10 has an invalid length. [ 1120.648885][T22912] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5828'. [ 1120.670366][T22912] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 1120.771493][T22813] device hsr_slave_0 entered promiscuous mode [ 1120.819277][T22813] device hsr_slave_1 entered promiscuous mode [ 1120.865505][T22813] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1120.894163][T22813] Cannot create hsr debugfs directory [ 1122.000270][T22944] netlink: 63763 bytes leftover after parsing attributes in process `syz.5.5838'. [ 1122.548413][T22958] FAULT_INJECTION: forcing a failure. [ 1122.548413][T22958] name failslab, interval 1, probability 0, space 0, times 0 [ 1122.580472][T22958] CPU: 0 PID: 22958 Comm: syz.2.5844 Not tainted syzkaller #0 [ 1122.588036][T22958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1122.589235][ T4289] Bluetooth: hci4: command 0x040f tx timeout [ 1122.598122][T22958] Call Trace: [ 1122.598135][T22958] [ 1122.598145][T22958] dump_stack_lvl+0x188/0x24e [ 1122.598178][T22958] ? show_regs_print_info+0x12/0x12 [ 1122.620970][T22958] ? load_image+0x410/0x410 [ 1122.625551][T22958] ? __lock_acquire+0x7c40/0x7c40 [ 1122.630642][T22958] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1122.636866][T22958] should_fail_ex+0x390/0x4c0 [ 1122.641615][T22958] should_failslab+0x5/0x20 [ 1122.646190][T22958] slab_pre_alloc_hook+0x59/0x300 [ 1122.651273][T22958] ? bpf_prog_test_run_skb+0x23e/0x18e0 [ 1122.656876][T22958] __kmem_cache_alloc_node+0x4f/0x270 [ 1122.662313][T22958] ? bpf_prog_test_run_skb+0x23e/0x18e0 [ 1122.667922][T22958] __kmalloc+0xa3/0x240 [ 1122.672177][T22958] bpf_prog_test_run_skb+0x23e/0x18e0 [ 1122.677582][T22958] ? __fget_files+0x28/0x460 [ 1122.682241][T22958] ? __fget_files+0x3fc/0x460 [ 1122.686998][T22958] ? cpu_online+0xa0/0xa0 [ 1122.691395][T22958] bpf_prog_test_run+0x31c/0x390 [ 1122.696409][T22958] __sys_bpf+0x62b/0x780 [ 1122.700700][T22958] ? bpf_link_show_fdinfo+0x380/0x380 [ 1122.706148][T22958] ? lock_chain_count+0x20/0x20 [ 1122.711069][T22958] __x64_sys_bpf+0x78/0x90 [ 1122.715531][T22958] do_syscall_64+0x4c/0xa0 [ 1122.719979][T22958] ? clear_bhb_loop+0x60/0xb0 [ 1122.724703][T22958] ? clear_bhb_loop+0x60/0xb0 [ 1122.729428][T22958] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1122.735365][T22958] RIP: 0033:0x7fb83bf9e159 [ 1122.739813][T22958] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1122.759463][T22958] RSP: 002b:00007fb83ceb4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1122.767913][T22958] RAX: ffffffffffffffda RBX: 00007fb83c225fa0 RCX: 00007fb83bf9e159 [ 1122.775918][T22958] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 1122.783930][T22958] RBP: 00007fb83ceb4090 R08: 0000000000000000 R09: 0000000000000000 [ 1122.791938][T22958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1122.799945][T22958] R13: 00007fb83c226038 R14: 00007fb83c225fa0 R15: 00007ffce4021f58 [ 1122.807961][T22958] [ 1122.937988][T19695] bond0: (slave wlan1): Releasing backup interface [ 1123.029443][T19695] device wlan1 left promiscuous mode [ 1123.210940][T22961] bridge0: port 4(team0) entered disabled state [ 1123.218418][T22961] bridge0: port 2(bridge_slave_1) entered disabled state [ 1123.227387][T22961] bridge0: port 1(bridge_slave_0) entered disabled state [ 1123.265309][T22961] device bridge0 left promiscuous mode [ 1123.343968][T22962] bridge0: port 4(team0) entered disabled state [ 1123.418664][T22962] device bridge_slave_1 left promiscuous mode [ 1123.457088][T22962] bridge0: port 2(bridge_slave_1) entered disabled state [ 1123.501039][T22962] device bridge_slave_0 left promiscuous mode [ 1123.517652][T22962] bridge0: port 1(bridge_slave_0) entered disabled state [ 1124.531840][T22989] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5852'. [ 1124.632285][T22989] netlink: 'syz.2.5852': attribute type 10 has an invalid length. [ 1124.652170][T22992] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.5850'. [ 1124.664410][ T4289] Bluetooth: hci4: command 0x0419 tx timeout [ 1124.672969][T22989] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5852'. [ 1124.720163][T22989] 8021q: adding VLAN 0 to HW filter on device team0 [ 1124.777202][T19695] device hsr_slave_0 left promiscuous mode [ 1124.784590][T19695] device hsr_slave_1 left promiscuous mode [ 1124.829303][T19695] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1124.836892][T19695] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1124.869924][T19695] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1124.892481][T19695] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1124.922481][T19695] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 1124.946724][T19695] batman_adv: batadv0: Removing interface: virt_wifi0 [ 1124.985341][T19695] device bridge_slave_1 left promiscuous mode [ 1125.021442][T19695] bridge0: port 2(bridge_slave_1) entered disabled state [ 1125.070202][T19695] device bridge_slave_0 left promiscuous mode [ 1125.098812][T19695] bridge0: port 1(bridge_slave_0) entered disabled state [ 1125.250630][T19695] device veth1_macvtap left promiscuous mode [ 1125.256805][T19695] device veth0_macvtap left promiscuous mode [ 1125.561965][T19695] device geneve1 left promiscuous mode [ 1125.590296][T19695] team0 (unregistering): Port device geneve1 removed [ 1125.790441][T23016] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.5859'. [ 1126.747195][T19695] device team_slave_1 left promiscuous mode [ 1126.754897][T19695] team0 (unregistering): Port device team_slave_1 removed [ 1126.811076][T19695] device team_slave_0 left promiscuous mode [ 1126.819984][T19695] team0 (unregistering): Port device team_slave_0 removed [ 1126.883389][T19695] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1126.895223][T19695] device bond_slave_1 left promiscuous mode [ 1126.965124][T19695] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1126.978520][T19695] device bond_slave_0 left promiscuous mode [ 1127.366676][T19695] bond0 (unregistering): (slave team0): Releasing backup interface [ 1127.378080][T19695] device team0 left promiscuous mode [ 1127.424240][T19695] bond0 (unregistering): Released all slaves [ 1127.558879][T23016] sysfs: cannot create duplicate filename '/class/ieee80211/.! 5‚Á7>7H€' [ 1127.583267][T23016] CPU: 0 PID: 23016 Comm: syz.3.5859 Not tainted syzkaller #0 [ 1127.592545][T23016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1127.604322][T23016] Call Trace: [ 1127.608121][T23016] [ 1127.611928][T23016] dump_stack_lvl+0x188/0x24e [ 1127.617793][T23016] ? show_regs_print_info+0x12/0x12 [ 1127.623590][T23016] ? load_image+0x410/0x410 [ 1127.630579][T23016] sysfs_warn_dup+0x8a/0xa0 [ 1127.637025][T23016] sysfs_do_create_link_sd+0xc0/0x110 [ 1127.643023][T23016] device_add+0x83b/0x1050 [ 1127.649257][T23016] wiphy_register+0x1d8b/0x2aa0 [ 1127.655511][T23016] ? cfg80211_event_work+0x40/0x40 [ 1127.662231][T23016] ? minstrel_ht_alloc+0x894/0xa20 [ 1127.668837][T23016] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1127.676580][T23016] ieee80211_register_hw+0x2d48/0x39f0 [ 1127.683637][T23016] ? ieee80211_register_hw+0xf41/0x39f0 [ 1127.690394][T23016] ? ieee80211_register_hw+0xf41/0x39f0 [ 1127.696990][T23016] ? ieee80211_tasklet_handler+0x20/0x20 [ 1127.705583][T23016] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1127.712605][T23016] ? __debug_object_init+0xed/0x440 [ 1127.719556][T23016] ? memset+0x1e/0x40 [ 1127.725533][T23016] ? __hrtimer_init+0x189/0x270 [ 1127.731270][T23016] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 1127.737494][T23016] ? memcpy+0x3c/0x60 [ 1127.742166][T23016] hwsim_new_radio_nl+0xab7/0xc90 [ 1127.748678][T23016] genl_family_rcv_msg_doit+0x22f/0x350 [ 1127.756084][T23016] ? end_current_label_crit_section+0x170/0x170 [ 1127.763265][T23016] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1127.769748][T23016] ? bpf_lsm_capable+0x5/0x10 [ 1127.775272][T23016] ? security_capable+0x85/0xb0 [ 1127.780292][T23016] genl_rcv_msg+0x601/0x790 [ 1127.785637][T23016] ? genl_bind+0x360/0x360 [ 1127.791024][T23016] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 1127.799918][T23016] ? netlink_rcv_skb+0xca/0x440 [ 1127.806898][T23016] netlink_rcv_skb+0x1ef/0x440 [ 1127.813099][T23016] ? genl_bind+0x360/0x360 [ 1127.817790][T23016] ? netlink_ack+0x1160/0x1160 [ 1127.822718][T23016] ? down_read+0x1a8/0x2d0 [ 1127.827458][T23016] genl_rcv+0x24/0x40 [ 1127.832554][T23016] netlink_unicast+0x7ad/0x920 [ 1127.839548][T23016] netlink_sendmsg+0x8ad/0xbd0 [ 1127.846142][T23016] ? netlink_getsockopt+0x550/0x550 [ 1127.852224][T23016] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1127.859242][T23016] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1127.867338][T23016] ? security_socket_sendmsg+0x7c/0xa0 [ 1127.874492][T23016] ? netlink_getsockopt+0x550/0x550 [ 1127.879824][T23016] ____sys_sendmsg+0x5ed/0x9a0 [ 1127.884912][T23016] ? __sys_sendmsg_sock+0x30/0x30 [ 1127.890074][T23016] ? __import_iovec+0x306/0x510 [ 1127.895476][T23016] ? import_iovec+0x6f/0xa0 [ 1127.900940][T23016] ___sys_sendmsg+0x2a2/0x360 [ 1127.905799][T23016] ? __sys_sendmsg+0x2a0/0x2a0 [ 1127.912314][T23016] ? bpf_prog_free_id+0x1d0/0x1d0 [ 1127.917510][T23016] __se_sys_sendmsg+0x1c3/0x2b0 [ 1127.923903][T23016] ? ct_nmi_exit+0x145/0x1c0 [ 1127.928595][T23016] ? __x64_sys_sendmsg+0x80/0x80 [ 1127.933820][T23016] ? lockdep_hardirqs_on+0x94/0x140 [ 1127.939588][T23016] do_syscall_64+0x4c/0xa0 [ 1127.944179][T23016] ? clear_bhb_loop+0x60/0xb0 [ 1127.948903][T23016] ? clear_bhb_loop+0x60/0xb0 [ 1127.953713][T23016] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1127.960246][T23016] RIP: 0033:0x7fbec599e159 [ 1127.965093][T23016] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1127.985763][T23016] RSP: 002b:00007fbec6815028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1127.994927][T23016] RAX: ffffffffffffffda RBX: 00007fbec5c25fa0 RCX: 00007fbec599e159 [ 1128.003034][T23016] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 1128.011825][T23016] RBP: 00007fbec5a3506b R08: 0000000000000000 R09: 0000000000000000 [ 1128.021733][T23016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1128.030976][T23016] R13: 00007fbec5c26038 R14: 00007fbec5c25fa0 R15: 00007ffdd89d7e58 [ 1128.039726][T23016] [ 1128.100177][T23023] bridge0: port 3(team0) entered disabled state [ 1128.118482][T23023] device bridge_slave_1 left promiscuous mode [ 1128.149556][T23023] bridge0: port 2(bridge_slave_1) entered disabled state [ 1128.166458][T23023] device bridge_slave_0 left promiscuous mode [ 1128.189570][T23023] bridge0: port 1(bridge_slave_0) entered disabled state [ 1128.464318][T23032] netlink: 132 bytes leftover after parsing attributes in process `syz.5.5864'. [ 1128.524076][T22813] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1128.575513][T23032] netlink: 'syz.5.5864': attribute type 10 has an invalid length. [ 1128.610879][T23032] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5864'. [ 1128.680795][T22813] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1128.710010][T22813] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1128.762002][T22813] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1129.281155][T22813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1129.373626][T19690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1129.403499][T19690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1129.474618][T22813] 8021q: adding VLAN 0 to HW filter on device team0 [ 1129.605920][T18954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1129.633760][T18954] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1129.663985][T18954] bridge0: port 1(bridge_slave_0) entered blocking state [ 1129.671935][T18954] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1129.696148][T18954] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1129.727455][T18954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1129.748619][T18954] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1129.773261][T18954] bridge0: port 2(bridge_slave_1) entered blocking state [ 1129.782221][T18954] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1129.808461][T18954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1129.826779][T18954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1129.858232][T18954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1129.874004][T18954] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1129.886415][T18954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1129.900126][T18954] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1129.941913][T18954] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1129.963873][T18954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1129.987913][T18954] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1130.022317][T22813] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1130.064688][T22813] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1130.097700][T18954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1130.116417][T18954] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1130.614520][T23067] netlink: 'syz.0.5871': attribute type 10 has an invalid length. [ 1130.723025][T23067] device team0 left promiscuous mode [ 1130.734939][T23067] device team_slave_0 left promiscuous mode [ 1130.765590][T23067] device team_slave_1 left promiscuous mode [ 1130.976535][T23067] 8021q: adding VLAN 0 to HW filter on device team0 [ 1131.031354][T23067] device team0 entered promiscuous mode [ 1131.046746][T23067] device team_slave_0 entered promiscuous mode [ 1131.074704][T23067] device team_slave_1 entered promiscuous mode [ 1131.109574][T23067] bond0: (slave team0): Enslaving as an active interface with an up link [ 1131.500873][T23085] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5877'. [ 1131.561260][T23085] netlink: 'syz.3.5877': attribute type 10 has an invalid length. [ 1131.641001][T23085] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5877'. [ 1131.728849][T23085] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1131.924270][T19690] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1131.947858][T19690] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1131.985195][T23096] netlink: 63763 bytes leftover after parsing attributes in process `syz.0.5879'. [ 1132.014563][T22813] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1133.240695][T23122] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1133.388859][T23122] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1133.557947][T23132] netlink: 132 bytes leftover after parsing attributes in process `syz.5.5890'. [ 1133.628118][T23137] netlink: 'syz.5.5890': attribute type 10 has an invalid length. [ 1133.688781][T23137] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5890'. [ 1134.048889][T19695] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1134.068699][T19695] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1134.126873][T22813] device veth0_vlan entered promiscuous mode [ 1134.156350][T19695] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1134.174840][T19695] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1134.213044][T19695] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1134.250554][T19695] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1134.319751][T22813] device veth1_vlan entered promiscuous mode [ 1134.356751][T23155] netlink: 63763 bytes leftover after parsing attributes in process `syz.3.5896'. [ 1134.448029][T23158] ¥: port 1(bond0) entered blocking state [ 1134.471682][T23158] ¥: port 1(bond0) entered disabled state [ 1134.574947][T18954] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1134.606440][T18954] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1134.640818][T18954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1134.686008][T18954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1134.747511][T22813] device veth0_macvtap entered promiscuous mode [ 1134.794195][T18954] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1134.841107][T22813] device veth1_macvtap entered promiscuous mode [ 1134.935597][T22813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1134.967651][T22813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1135.015994][T22813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1135.042054][T22813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1135.057168][T22813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1135.088089][T22813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1135.125870][T22813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1135.153511][T22813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1135.170650][T22813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1135.187605][T22813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1135.208126][T22813] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1135.229258][T23172] netlink: 1047 bytes leftover after parsing attributes in process `syz.5.5900'. [ 1135.238608][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1135.254410][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1135.296558][T22813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1135.327434][T22813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1135.348117][T22813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1135.368570][T22813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1135.392239][T22813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1135.432467][T22813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1135.471624][T22813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1135.505472][T22813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1135.537622][T22813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1135.577552][T22813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1135.616416][T22813] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1135.646313][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1135.683447][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1135.735903][T22813] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1135.762036][T22813] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1135.840550][T22813] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1135.900186][T22813] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1136.043459][T23192] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5904'. [ 1136.074771][T23192] netlink: 'syz.3.5904': attribute type 10 has an invalid length. [ 1136.130922][T23192] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5904'. [ 1136.212874][T23192] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1136.357392][T23200] netlink: 'syz.0.5914': attribute type 10 has an invalid length. [ 1136.466425][T23199] netlink: 'syz.5.5905': attribute type 10 has an invalid length. [ 1136.638371][T10721] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1136.692525][T10721] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1136.757210][T10721] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1136.782999][ T4636] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1136.795090][ T4636] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1136.853564][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1137.174464][T23218] netlink: 'syz.4.5794': attribute type 16 has an invalid length. [ 1137.251963][T23218] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5794'. [ 1137.500039][T23218] netlink: 'syz.4.5794': attribute type 2 has an invalid length. [ 1137.604471][T23218] netlink: 'syz.4.5794': attribute type 1 has an invalid length. [ 1137.689387][T23218] netlink: 'syz.4.5794': attribute type 4 has an invalid length. [ 1137.751037][T23218] netlink: 'syz.4.5794': attribute type 6 has an invalid length. [ 1137.812086][T23218] netlink: 'syz.4.5794': attribute type 7 has an invalid length. [ 1137.905422][T23218] netlink: 'syz.4.5794': attribute type 5 has an invalid length. [ 1138.074170][T23218] netlink: 206468 bytes leftover after parsing attributes in process `syz.4.5794'. [ 1139.032264][T23246] device sit0 left promiscuous mode [ 1139.600651][T23253] netlink: 132 bytes leftover after parsing attributes in process `syz.5.5922'. [ 1139.626580][T23255] device sit0 entered promiscuous mode [ 1140.651413][T23287] netlink: 48 bytes leftover after parsing attributes in process `syz.5.5929'. [ 1140.793732][T23292] netlink: 206468 bytes leftover after parsing attributes in process `syz.5.5929'. [ 1141.575622][T23308] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5939'. [ 1141.600196][T23308] validate_nla: 9 callbacks suppressed [ 1141.600214][T23308] netlink: 'syz.3.5939': attribute type 10 has an invalid length. [ 1141.649183][T23308] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5939'. [ 1141.690657][T23308] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1142.295019][T23335] netlink: 63763 bytes leftover after parsing attributes in process `syz.5.5948'. [ 1142.526044][T23340] netlink: 'syz.2.5950': attribute type 16 has an invalid length. [ 1142.555565][T23340] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5950'. [ 1142.648396][T23340] netlink: 'syz.2.5950': attribute type 2 has an invalid length. [ 1142.677745][T23340] netlink: 'syz.2.5950': attribute type 1 has an invalid length. [ 1142.717969][T23340] netlink: 'syz.2.5950': attribute type 4 has an invalid length. [ 1142.828274][T23346] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.5953'. [ 1142.829722][T23340] netlink: 'syz.2.5950': attribute type 6 has an invalid length. [ 1142.908487][T23340] netlink: 'syz.2.5950': attribute type 7 has an invalid length. [ 1142.952923][T23350] netlink: 'syz.3.5954': attribute type 10 has an invalid length. [ 1143.019278][T23340] netlink: 'syz.2.5950': attribute type 5 has an invalid length. [ 1143.027557][T23340] netlink: 206468 bytes leftover after parsing attributes in process `syz.2.5950'. [ 1144.050420][T23362] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5958'. [ 1144.110330][T23362] netlink: 'syz.2.5958': attribute type 10 has an invalid length. [ 1144.138678][T23362] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5958'. [ 1145.411997][T23375] team0: Device wg1 is of different type [ 1145.499551][T23395] netlink: 63763 bytes leftover after parsing attributes in process `syz.0.5967'. [ 1146.471796][T23403] device sit0 entered promiscuous mode [ 1146.585031][T23425] sctp: [Deprecated]: syz.3.5978 (pid 23425) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1146.585031][T23425] Use struct sctp_sack_info instead [ 1148.527325][T23432] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.5979'. [ 1149.057510][T23464] netlink: 63763 bytes leftover after parsing attributes in process `syz.3.5986'. [ 1150.041717][T23481] validate_nla: 1 callbacks suppressed [ 1150.041860][T23481] netlink: 'syz.5.5993': attribute type 7 has an invalid length. [ 1150.139496][T23486] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5995'. [ 1150.940217][T23498] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5999'. [ 1151.395811][T23505] netlink: 132 bytes leftover after parsing attributes in process `syz.5.6000'. [ 1152.385829][T23518] netlink: 63763 bytes leftover after parsing attributes in process `syz.3.6004'. [ 1152.903758][T23523] netlink: 'syz.5.6006': attribute type 20 has an invalid length. [ 1153.365257][T23528] netlink: 'syz.3.6009': attribute type 7 has an invalid length. [ 1153.901404][T23540] netlink: 132 bytes leftover after parsing attributes in process `syz.5.6012'. [ 1153.979488][T23543] netlink: 'syz.5.6012': attribute type 10 has an invalid length. [ 1153.987456][T23543] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6012'. [ 1154.504904][T23555] netlink: 63763 bytes leftover after parsing attributes in process `syz.5.6019'. [ 1154.870353][T23565] netlink: 'syz.2.6023': attribute type 11 has an invalid length. [ 1154.894031][T23565] netlink: 140 bytes leftover after parsing attributes in process `syz.2.6023'. [ 1154.934630][T23567] netlink: 'syz.0.6024': attribute type 7 has an invalid length. [ 1156.182290][T23585] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6029'. [ 1156.256669][T23588] netlink: 'syz.4.6029': attribute type 10 has an invalid length. [ 1156.287301][T23588] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6029'. [ 1156.372389][T23588] device team0 entered promiscuous mode [ 1156.405870][T23588] device team_slave_0 entered promiscuous mode [ 1156.423172][T23588] device team_slave_1 entered promiscuous mode [ 1156.480648][T23588] bridge0: port 3(team0) entered blocking state [ 1156.550003][T23588] bridge0: port 3(team0) entered disabled state [ 1156.691511][T23588] bridge0: port 3(team0) entered blocking state [ 1156.697967][T23588] bridge0: port 3(team0) entered forwarding state [ 1157.490697][T23613] netlink: 63763 bytes leftover after parsing attributes in process `syz.2.6037'. [ 1158.094830][T23626] netlink: 'syz.0.6043': attribute type 21 has an invalid length. [ 1158.452237][T23631] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6044'. [ 1158.885041][T23640] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6049'. [ 1158.962156][T23643] netlink: 'syz.0.6049': attribute type 10 has an invalid length. [ 1159.011976][T23643] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6049'. [ 1159.080487][T23643] 8021q: adding VLAN 0 to HW filter on device team0 [ 1159.118388][T23643] bond0: (slave team0): Releasing backup interface [ 1159.172331][T23643] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1160.251149][ T4289] Bluetooth: hci0: unexpected event 0x3c length: 151 > 7 [ 1160.383992][T23661] netlink: 'syz.3.6054': attribute type 10 has an invalid length. [ 1160.605336][T23661] device team0 left promiscuous mode [ 1160.796537][T23661] device team_slave_0 left promiscuous mode [ 1160.905144][T23661] device team_slave_1 left promiscuous mode [ 1161.568429][T23661] 8021q: adding VLAN 0 to HW filter on device team0 [ 1161.626257][T23661] device team0 entered promiscuous mode [ 1161.669094][T23661] device team_slave_0 entered promiscuous mode [ 1161.696064][T23661] device team_slave_1 entered promiscuous mode [ 1161.721721][T23661] bond0: (slave team0): Enslaving as an active interface with an up link [ 1161.814500][T23663] netlink: 'syz.3.6054': attribute type 27 has an invalid length. [ 1161.900254][T23663] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6054'. [ 1161.933872][T23663] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1162.029143][T23672] netlink: 'syz.2.6056': attribute type 21 has an invalid length. [ 1162.067177][T23673] netlink: 63763 bytes leftover after parsing attributes in process `syz.0.6057'. [ 1162.218496][T23679] device bond0 entered promiscuous mode [ 1162.231186][T23679] device bond_slave_0 entered promiscuous mode [ 1162.272751][T23679] device bond_slave_1 entered promiscuous mode [ 1163.727594][T23717] netlink: 'syz.4.6073': attribute type 21 has an invalid length. [ 1163.954261][T23721] netlink: 'syz.0.6074': attribute type 10 has an invalid length. [ 1163.969263][T23721] device team0 left promiscuous mode [ 1163.988006][T23721] device team_slave_0 left promiscuous mode [ 1164.024739][T23721] device team_slave_1 left promiscuous mode [ 1164.164041][T23721] 8021q: adding VLAN 0 to HW filter on device team0 [ 1164.255886][T23721] device team0 entered promiscuous mode [ 1164.280525][T23721] device team_slave_0 entered promiscuous mode [ 1164.318002][T23721] device team_slave_1 entered promiscuous mode [ 1164.372459][T23721] bond0: (slave team0): Enslaving as an active interface with an up link [ 1164.424777][T23722] netlink: 63763 bytes leftover after parsing attributes in process `syz.3.6072'. [ 1164.469190][T23724] netlink: 'syz.0.6074': attribute type 27 has an invalid length. [ 1164.494164][T23724] netlink: 152 bytes leftover after parsing attributes in process `syz.0.6074'. [ 1164.527343][T23724] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1164.726881][ T4293] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1164.747924][ T4293] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1164.756603][ T4293] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1164.766885][ T4293] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1164.778918][ T4293] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1164.786645][ T4293] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1165.134868][T23748] netlink: 63763 bytes leftover after parsing attributes in process `syz.0.6088'. [ 1165.385621][ T4636] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1165.573539][ T4636] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1165.855176][ T4636] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1166.153950][ T4636] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1166.225193][T23767] netlink: 'syz.0.6085': attribute type 21 has an invalid length. [ 1166.317801][T23740] chnl_net:caif_netlink_parms(): no params data found [ 1166.337414][T23772] FAULT_INJECTION: forcing a failure. [ 1166.337414][T23772] name failslab, interval 1, probability 0, space 0, times 0 [ 1166.406817][T23772] CPU: 0 PID: 23772 Comm: syz.4.6086 Not tainted syzkaller #0 [ 1166.414431][T23772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1166.424560][T23772] Call Trace: [ 1166.427897][T23772] [ 1166.430909][T23772] dump_stack_lvl+0x188/0x24e [ 1166.435646][T23772] ? show_regs_print_info+0x12/0x12 [ 1166.440911][T23772] ? load_image+0x410/0x410 [ 1166.445574][T23772] ? __might_sleep+0xd0/0xd0 [ 1166.450227][T23772] ? __lock_acquire+0x7c40/0x7c40 [ 1166.455446][T23772] should_fail_ex+0x390/0x4c0 [ 1166.460280][T23772] should_failslab+0x5/0x20 [ 1166.464834][T23772] slab_pre_alloc_hook+0x59/0x300 [ 1166.469953][T23772] kmem_cache_alloc_node+0x5a/0x310 [ 1166.475204][T23772] ? __alloc_skb+0xf9/0x7d0 [ 1166.479755][T23772] __alloc_skb+0xf9/0x7d0 [ 1166.484148][T23772] alloc_skb_with_frags+0xa7/0x710 [ 1166.489337][T23772] ? verify_lock_unused+0x140/0x140 [ 1166.494615][T23772] ? verify_lock_unused+0x140/0x140 [ 1166.499872][T23772] sock_alloc_send_pskb+0x87f/0x9a0 [ 1166.505178][T23772] ? sock_kzfree_s+0x50/0x50 [ 1166.509833][T23772] ? do_raw_spin_lock+0x128/0x2f0 [ 1166.514926][T23772] ? __rwlock_init+0x140/0x140 [ 1166.519842][T23772] ? do_raw_spin_unlock+0x11d/0x230 [ 1166.525108][T23772] unix_dgram_sendmsg+0x5c1/0x16f0 [ 1166.530412][T23772] ? aa_sk_perm+0x81f/0x950 [ 1166.534984][T23772] ? aa_af_perm+0x340/0x340 [ 1166.539544][T23772] ? unix_dgram_poll+0x680/0x680 [ 1166.544538][T23772] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 1166.551107][T23772] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1166.556738][T23772] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1166.562088][T23772] ? security_socket_sendmsg+0x7c/0xa0 [ 1166.567615][T23772] ? unix_dgram_poll+0x680/0x680 [ 1166.572624][T23772] ____sys_sendmsg+0x5ed/0x9a0 [ 1166.577447][T23772] ? __might_fault+0xa6/0x120 [ 1166.582374][T23772] ? __sys_sendmsg_sock+0x30/0x30 [ 1166.587481][T23772] ? __import_iovec+0x306/0x510 [ 1166.592410][T23772] ? import_iovec+0x6f/0xa0 [ 1166.596980][T23772] ___sys_sendmsg+0x2a2/0x360 [ 1166.601724][T23772] ? __sys_sendmsg+0x2a0/0x2a0 [ 1166.606579][T23772] ? __lock_acquire+0x7c40/0x7c40 [ 1166.611702][T23772] __se_sys_sendmsg+0x1c3/0x2b0 [ 1166.616629][T23772] ? __x64_sys_sendmsg+0x80/0x80 [ 1166.621654][T23772] ? lockdep_hardirqs_on+0x94/0x140 [ 1166.626937][T23772] do_syscall_64+0x4c/0xa0 [ 1166.631570][T23772] ? clear_bhb_loop+0x60/0xb0 [ 1166.636308][T23772] ? clear_bhb_loop+0x60/0xb0 [ 1166.641042][T23772] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1166.647142][T23772] RIP: 0033:0x7f2d1379e159 [ 1166.651624][T23772] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1166.671376][T23772] RSP: 002b:00007f2d14656028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1166.680028][T23772] RAX: ffffffffffffffda RBX: 00007f2d13a25fa0 RCX: 00007f2d1379e159 [ 1166.688091][T23772] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000006 [ 1166.696119][T23772] RBP: 00007f2d14656090 R08: 0000000000000000 R09: 0000000000000000 [ 1166.704149][T23772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1166.712182][T23772] R13: 00007f2d13a26038 R14: 00007f2d13a25fa0 R15: 00007ffc1eae1e78 [ 1166.720227][T23772] [ 1166.819217][ T4293] Bluetooth: hci6: command 0x0409 tx timeout [ 1166.838440][T23774] dvmrp1: tun_chr_ioctl cmd 1074025694 [ 1167.094974][T23786] netlink: 'syz.0.6093': attribute type 9 has an invalid length. [ 1167.110875][T23786] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.6093'. [ 1167.695128][T23779] dvmrp1: tun_chr_ioctl cmd 1074025672 [ 1167.708101][T23779] dvmrp1: ignored: set checksum enabled [ 1167.733453][T23793] netlink: 63763 bytes leftover after parsing attributes in process `syz.0.6095'. [ 1167.975210][T23740] bridge0: port 1(bridge_slave_0) entered blocking state [ 1168.014939][T23740] bridge0: port 1(bridge_slave_0) entered disabled state [ 1168.074853][T23740] device bridge_slave_0 entered promiscuous mode [ 1168.129987][T23804] netlink: 'syz.5.6098': attribute type 21 has an invalid length. [ 1168.359312][T23740] bridge0: port 2(bridge_slave_1) entered blocking state [ 1168.366521][T23740] bridge0: port 2(bridge_slave_1) entered disabled state [ 1168.396152][T23740] device bridge_slave_1 entered promiscuous mode [ 1168.496217][T23817] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6100'. [ 1168.541783][T23819] netlink: 'syz.3.6100': attribute type 10 has an invalid length. [ 1168.617242][T23819] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6100'. [ 1168.678125][T23819] bond0: (slave team0): Releasing backup interface [ 1168.741254][T23819] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1168.900363][ T4293] Bluetooth: hci6: command 0x041b tx timeout [ 1168.958205][T23740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1169.106974][T23740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1169.332873][T23740] team0: Port device team_slave_0 added [ 1169.475497][T23740] team0: Port device team_slave_1 added [ 1169.551106][T23844] bridge0: port 3(team0) entered disabled state [ 1169.558160][T23844] bridge0: port 2(bridge_slave_1) entered disabled state [ 1169.566120][T23844] bridge0: port 1(bridge_slave_0) entered disabled state [ 1169.612779][T23845] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6106'. [ 1169.740861][T23740] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1169.756704][T23740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1169.810344][T23740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1169.919923][T23740] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1169.949667][T23740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1170.075731][T23740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1170.119539][T23855] netlink: 'syz.0.6110': attribute type 21 has an invalid length. [ 1170.144559][T23865] netlink: 63763 bytes leftover after parsing attributes in process `syz.4.6111'. [ 1170.233978][T23859] netlink: 'syz.5.6112': attribute type 10 has an invalid length. [ 1170.403633][T23740] device hsr_slave_0 entered promiscuous mode [ 1170.427573][T23740] device hsr_slave_1 entered promiscuous mode [ 1170.445057][T23740] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1170.457102][T23740] Cannot create hsr debugfs directory [ 1170.563188][T23872] device syzkaller0 entered promiscuous mode [ 1170.926593][ T4636] bond0: (slave wlan1): Releasing backup interface [ 1170.956291][ T4636] device wlan1 left promiscuous mode [ 1170.992303][ T4293] Bluetooth: hci6: command 0x040f tx timeout [ 1171.677556][T23895] TCP: TCP_TX_DELAY enabled [ 1173.069112][ T4293] Bluetooth: hci6: command 0x0419 tx timeout [ 1174.944724][ T4636] device hsr_slave_0 left promiscuous mode [ 1174.963392][ T4636] device hsr_slave_1 left promiscuous mode [ 1174.971039][ T4636] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1174.978755][ T4636] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1174.994148][ T4636] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1175.024168][ T4636] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1175.062444][ T4636] bridge0: port 2(team0) entered disabled state [ 1175.113394][ T4636] device bridge_slave_0 left promiscuous mode [ 1175.120478][ T4636] bridge0: port 1(bridge_slave_0) entered disabled state [ 1175.170417][ T4636] device veth0_macvtap left promiscuous mode [ 1175.178345][ T4636] device veth1_vlan left promiscuous mode [ 1175.197179][ T4636] device veth0_vlan left promiscuous mode [ 1175.756812][ T4636] device geneve1 left promiscuous mode [ 1175.777716][ T4636] team0 (unregistering): Port device geneve1 removed [ 1176.466294][ T4636] device team_slave_1 left promiscuous mode [ 1176.474522][ T4636] team0 (unregistering): Port device team_slave_1 removed [ 1176.530484][ T4636] device team_slave_0 left promiscuous mode [ 1176.547162][ T4636] team0 (unregistering): Port device team_slave_0 removed [ 1176.600244][ T4636] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1176.609536][ T4636] device bond_slave_1 left promiscuous mode [ 1176.657674][ T4636] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1176.666755][ T4636] device bond_slave_0 left promiscuous mode [ 1176.717130][ T4636] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 1176.727221][ T4636] device bridge_slave_1 left promiscuous mode [ 1177.208513][ T4636] bond0 (unregistering): Released all slaves [ 1177.325185][T23933] netlink: 63763 bytes leftover after parsing attributes in process `syz.4.6129'. [ 1177.382280][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.388681][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.883504][T23959] netlink: 'syz.5.6141': attribute type 21 has an invalid length. [ 1178.399273][T23982] netlink: 63763 bytes leftover after parsing attributes in process `syz.4.6148'. [ 1178.472735][T23984] netlink: 'syz.3.6150': attribute type 10 has an invalid length. [ 1178.501595][T23984] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6150'. [ 1178.523983][T23984] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 1178.782650][T23740] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1178.878796][T23740] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1178.929932][T23740] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1178.961480][T23740] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1179.457397][T24004] netlink: 'syz.0.6154': attribute type 1 has an invalid length. [ 1179.466073][T23740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1179.500255][T23740] 8021q: adding VLAN 0 to HW filter on device team0 [ 1179.546425][T24004] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.6154'. [ 1179.605249][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1179.622567][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1179.646216][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1179.672744][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1179.682149][ T4636] bridge0: port 1(bridge_slave_0) entered blocking state [ 1179.689375][ T4636] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1179.779554][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1179.789719][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1179.798716][ T4636] bridge0: port 2(bridge_slave_1) entered blocking state [ 1179.805962][ T4636] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1179.848730][T24014] netlink: 'syz.5.6156': attribute type 21 has an invalid length. [ 1179.860055][T24020] netlink: 180 bytes leftover after parsing attributes in process `syz.3.6158'. [ 1179.899304][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1179.908424][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1179.941579][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1179.979458][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1180.018819][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1180.062413][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1180.130930][T24022] netlink: 'syz.4.6157': attribute type 10 has an invalid length. [ 1180.198163][T24022] device team0 left promiscuous mode [ 1180.209148][T24022] device team_slave_0 left promiscuous mode [ 1180.234201][T24022] device team_slave_1 left promiscuous mode [ 1180.271572][T24022] bridge0: port 3(team0) entered disabled state [ 1180.306455][T24022] 8021q: adding VLAN 0 to HW filter on device team0 [ 1180.328441][T24022] device team0 entered promiscuous mode [ 1180.360985][T24022] device team_slave_0 entered promiscuous mode [ 1180.368362][T24022] device team_slave_1 entered promiscuous mode [ 1180.377534][T24022] bond0: (slave team0): Enslaving as an active interface with an up link [ 1180.388298][T21381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1180.408007][T21381] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1180.451820][T10721] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1180.482645][T24033] FAULT_INJECTION: forcing a failure. [ 1180.482645][T24033] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1180.496269][T10721] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1180.525551][T24033] CPU: 1 PID: 24033 Comm: syz.0.6162 Not tainted syzkaller #0 [ 1180.533136][T24033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1180.542084][T10721] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1180.543223][T24033] Call Trace: [ 1180.543234][T24033] [ 1180.557362][T24033] dump_stack_lvl+0x188/0x24e [ 1180.562101][T24033] ? show_regs_print_info+0x12/0x12 [ 1180.567364][T24033] ? load_image+0x410/0x410 [ 1180.571952][T24033] ? __lock_acquire+0x7c40/0x7c40 [ 1180.577059][T24033] ? migrate_enable+0x148/0x220 [ 1180.582068][T24033] should_fail_ex+0x390/0x4c0 [ 1180.586811][T24033] _copy_to_user+0x2c/0x130 [ 1180.591406][T24033] bpf_test_finish+0x198/0x600 [ 1180.593936][T10721] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1180.596225][T24033] ? convert_skb_to___skb+0x420/0x420 [ 1180.609390][T24033] ? __build_skb+0x24b/0x3b0 [ 1180.614039][T24033] bpf_prog_test_run_skb+0x1129/0x18e0 [ 1180.619605][T24033] ? cpu_online+0xa0/0xa0 [ 1180.623992][T24033] bpf_prog_test_run+0x31c/0x390 [ 1180.628999][T24033] __sys_bpf+0x62b/0x780 [ 1180.633301][T24033] ? bpf_link_show_fdinfo+0x380/0x380 [ 1180.638750][T24033] ? lock_chain_count+0x20/0x20 [ 1180.643667][T24033] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1180.649713][T24033] __x64_sys_bpf+0x78/0x90 [ 1180.654226][T24033] do_syscall_64+0x4c/0xa0 [ 1180.658743][T24033] ? clear_bhb_loop+0x60/0xb0 [ 1180.663486][T24033] ? clear_bhb_loop+0x60/0xb0 [ 1180.668227][T24033] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1180.669834][T23740] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1180.674162][T24033] RIP: 0033:0x7f1edfd9e159 [ 1180.674189][T24033] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1180.674208][T24033] RSP: 002b:00007f1ee0c42028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1180.714192][T24033] RAX: ffffffffffffffda RBX: 00007f1ee0025fa0 RCX: 00007f1edfd9e159 [ 1180.722612][T24033] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 1180.730741][T24033] RBP: 00007f1ee0c42090 R08: 0000000000000000 R09: 0000000000000000 [ 1180.738775][T24033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1180.746909][T24033] R13: 00007f1ee0026038 R14: 00007f1ee0025fa0 R15: 00007fff56c71be8 [ 1180.754954][T24033] [ 1181.026690][T24044] netlink: 63763 bytes leftover after parsing attributes in process `syz.4.6164'. [ 1181.925987][T24066] netlink: 'syz.0.6170': attribute type 21 has an invalid length. [ 1181.934894][T18954] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1181.959714][T18954] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1181.993364][T23740] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1182.092990][T19695] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1182.112725][T19695] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1182.211398][T18954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1182.229963][T18954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1182.261042][T23740] device veth0_vlan entered promiscuous mode [ 1182.283538][T18954] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1182.331185][T18954] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1182.458273][T23740] device veth1_vlan entered promiscuous mode [ 1182.571263][T10721] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1182.592211][T10721] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1182.601147][T10721] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1182.616710][T10721] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1182.638175][T23740] device veth0_macvtap entered promiscuous mode [ 1182.657914][T23740] device veth1_macvtap entered promiscuous mode [ 1182.687763][T23740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1182.704284][T23740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1182.724289][T23740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1182.756908][T23740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1182.777070][T23740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1182.794900][T23740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1182.805067][T23740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1182.824203][T23740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1182.867177][T23740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1182.896880][T23740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1182.931220][T23740] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1182.953794][T18954] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1182.970013][T18954] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1183.019397][T18954] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1183.076725][T18954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1183.132382][T23740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1183.160638][T23740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1183.190043][T23740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1183.267382][T23740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1183.277837][T23740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1183.290539][T23740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1183.309109][T23740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1183.350121][T23740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1183.419010][T23740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1183.472320][T23740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1183.552322][T23740] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1183.598840][T19695] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1183.651099][T19695] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1183.684074][T23740] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1183.710987][T23740] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1183.754900][T23740] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1183.785337][T23740] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1184.324509][T18954] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1184.354688][T18954] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1184.370382][T24119] netlink: 'syz.5.6185': attribute type 21 has an invalid length. [ 1184.410865][T19695] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1184.498626][T18954] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1184.539827][T18954] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1184.586655][T18954] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1186.460032][ T4289] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1186.477276][ T4291] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1186.485960][ T4291] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1186.499692][ T4291] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1186.513510][ T4291] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1186.521324][ T4291] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1188.579208][ T4291] Bluetooth: hci2: command 0x0409 tx timeout [ 1189.385408][T24159] netlink: 'syz.0.6198': attribute type 21 has an invalid length. [ 1189.439006][T24181] netlink: 10 bytes leftover after parsing attributes in process `syz.5.6204'. [ 1189.688352][ T4633] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1189.799582][T24207] netlink: 'syz.4.6205': attribute type 10 has an invalid length. [ 1189.815154][T24207] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6205'. [ 1189.861817][T24207] bond0: (slave team0): Releasing backup interface [ 1189.954513][T24207] bridge0: port 3(team0) entered blocking state [ 1190.019815][T24207] bridge0: port 3(team0) entered disabled state [ 1190.185453][ T4633] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1190.461219][ T4633] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1190.652342][ T4633] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1190.663511][ T4291] Bluetooth: hci2: command 0x041b tx timeout [ 1191.018343][T24234] netlink: 'syz.0.6213': attribute type 10 has an invalid length. [ 1191.058234][T24234] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6213'. [ 1191.160065][T24234] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 1191.195616][T24236] netlink: 'syz.4.6215': attribute type 21 has an invalid length. [ 1191.221028][T24232] netlink: 'syz.5.6214': attribute type 10 has an invalid length. [ 1191.387788][T24162] chnl_net:caif_netlink_parms(): no params data found [ 1191.654060][ T4633] device .*! left promiscuous mode [ 1191.820759][T24254] netlink: 'syz.4.6220': attribute type 10 has an invalid length. [ 1191.828695][T24254] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6220'. [ 1191.905160][T24254] 8021q: adding VLAN 0 to HW filter on device team0 [ 1191.919287][T24162] bridge0: port 1(bridge_slave_0) entered blocking state [ 1191.926525][T24162] bridge0: port 1(bridge_slave_0) entered disabled state [ 1191.985561][T24162] device bridge_slave_0 entered promiscuous mode [ 1192.350489][T24263] FAULT_INJECTION: forcing a failure. [ 1192.350489][T24263] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1192.375418][T24162] bridge0: port 2(bridge_slave_1) entered blocking state [ 1192.388743][T24162] bridge0: port 2(bridge_slave_1) entered disabled state [ 1192.390704][T24263] CPU: 1 PID: 24263 Comm: syz.5.6222 Not tainted syzkaller #0 [ 1192.403354][T24263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1192.413467][T24263] Call Trace: [ 1192.416793][T24263] [ 1192.419775][T24263] dump_stack_lvl+0x188/0x24e [ 1192.424527][T24263] ? show_regs_print_info+0x12/0x12 [ 1192.429870][T24263] ? load_image+0x410/0x410 [ 1192.434447][T24263] ? __lock_acquire+0x7c40/0x7c40 [ 1192.439550][T24263] should_fail_ex+0x390/0x4c0 [ 1192.444474][T24263] _copy_to_user+0x2c/0x130 [ 1192.449036][T24263] bpf_test_finish+0x266/0x600 [ 1192.453888][T24263] ? convert_skb_to___skb+0x420/0x420 [ 1192.456507][T24162] device bridge_slave_1 entered promiscuous mode [ 1192.459350][T24263] ? __build_skb+0x24b/0x3b0 [ 1192.459385][T24263] bpf_prog_test_run_skb+0x1129/0x18e0 [ 1192.459434][T24263] ? cpu_online+0xa0/0xa0 [ 1192.459461][T24263] bpf_prog_test_run+0x31c/0x390 [ 1192.459495][T24263] __sys_bpf+0x62b/0x780 [ 1192.459526][T24263] ? bpf_link_show_fdinfo+0x380/0x380 [ 1192.459568][T24263] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1192.501269][T24263] __x64_sys_bpf+0x78/0x90 [ 1192.505740][T24263] do_syscall_64+0x4c/0xa0 [ 1192.510202][T24263] ? clear_bhb_loop+0x60/0xb0 [ 1192.515002][T24263] ? clear_bhb_loop+0x60/0xb0 [ 1192.519715][T24263] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1192.525694][T24263] RIP: 0033:0x7f0fd779e159 [ 1192.530142][T24263] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1192.549793][T24263] RSP: 002b:00007f0fd863c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1192.558266][T24263] RAX: ffffffffffffffda RBX: 00007f0fd7a25fa0 RCX: 00007f0fd779e159 [ 1192.566274][T24263] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 1192.574286][T24263] RBP: 00007f0fd863c090 R08: 0000000000000000 R09: 0000000000000000 [ 1192.582290][T24263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1192.590368][T24263] R13: 00007f0fd7a26038 R14: 00007f0fd7a25fa0 R15: 00007ffebdbaf008 [ 1192.598396][T24263] [ 1192.620256][T24268] sctp: [Deprecated]: syz.0.6224 (pid 24268) Use of int in max_burst socket option deprecated. [ 1192.620256][T24268] Use struct sctp_assoc_value instead [ 1192.750190][ T4291] Bluetooth: hci2: command 0x040f tx timeout [ 1193.012666][T24162] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1193.281456][T24162] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1193.328261][T24280] netlink: 'syz.4.6225': attribute type 16 has an invalid length. [ 1193.339242][T24280] netlink: 152 bytes leftover after parsing attributes in process `syz.4.6225'. [ 1193.353126][T24280] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1193.812988][T24162] team0: Port device team_slave_0 added [ 1194.819518][ T4291] Bluetooth: hci2: command 0x0419 tx timeout [ 1194.983006][T24162] team0: Port device team_slave_1 added [ 1195.019225][T24298] netlink: 'syz.5.6229': attribute type 39 has an invalid length. [ 1195.028542][T24302] netlink: 'syz.4.6228': attribute type 10 has an invalid length. [ 1195.054704][T24302] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1195.090806][T24306] netlink: 63763 bytes leftover after parsing attributes in process `syz.0.6230'. [ 1195.374132][T24162] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1195.416898][T24162] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1195.490442][T24162] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1195.546491][T24162] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1195.628740][T24162] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1195.771752][T24162] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1196.243779][T24310] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.6231'. [ 1196.264294][T24316] netlink: 'syz.5.6233': attribute type 10 has an invalid length. [ 1196.290257][T24316] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6233'. [ 1196.570429][T24162] device hsr_slave_0 entered promiscuous mode [ 1196.613022][T24162] device hsr_slave_1 entered promiscuous mode [ 1196.656144][T24162] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1196.690066][T24162] Cannot create hsr debugfs directory [ 1196.821874][T24333] netlink: 'syz.4.6234': attribute type 10 has an invalid length. [ 1196.865348][T24333] device team0 left promiscuous mode [ 1196.887365][T24333] device team_slave_0 left promiscuous mode [ 1196.924604][T24333] device team_slave_1 left promiscuous mode [ 1196.945167][T24333] bridge0: port 3(team0) entered disabled state [ 1196.968770][T24333] 8021q: adding VLAN 0 to HW filter on device team0 [ 1196.987941][T24333] device team0 entered promiscuous mode [ 1197.012485][T24333] device team_slave_0 entered promiscuous mode [ 1197.024417][T24333] device team_slave_1 entered promiscuous mode [ 1197.052026][T24333] bond0: (slave team0): Enslaving as an active interface with an up link [ 1197.492599][T24350] netlink: 'syz.4.6239': attribute type 3 has an invalid length. [ 1197.557327][T24350] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.6239'. [ 1197.582750][T24348] netlink: 63763 bytes leftover after parsing attributes in process `syz.0.6240'. [ 1198.029488][ T4633] device hsr_slave_0 left promiscuous mode [ 1198.087465][ T4633] device hsr_slave_1 left promiscuous mode [ 1198.228492][ T4633] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1198.254204][ T4633] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1198.298106][ T4633] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1198.326530][ T4633] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1198.430443][ T4633] device veth1_macvtap left promiscuous mode [ 1198.448563][ T4633] device veth0_macvtap left promiscuous mode [ 1198.465948][ T4633] device veth1_vlan left promiscuous mode [ 1198.503728][ T4633] device veth0_vlan left promiscuous mode [ 1198.905511][T24367] netlink: 'syz.4.6246': attribute type 3 has an invalid length. [ 1198.914520][T24367] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.6246'. [ 1199.434170][ T4633] device team_slave_1 left promiscuous mode [ 1199.444890][ T4633] team0 (unregistering): Port device team_slave_1 removed [ 1199.495747][ T4633] device team_slave_0 left promiscuous mode [ 1199.505013][ T4633] team0 (unregistering): Port device team_slave_0 removed [ 1199.564099][ T4633] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1199.573992][ T4633] device bond_slave_1 left promiscuous mode [ 1199.944227][ T4633] bond0 (unregistering): Released all slaves [ 1200.006351][T24359] netlink: 'syz.0.6242': attribute type 10 has an invalid length. [ 1200.014758][T24359] device hsr0 left promiscuous mode [ 1200.022693][T24359] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1200.053290][T24368] netlink: 'syz.2.6245': attribute type 10 has an invalid length. [ 1200.069044][T24368] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6245'. [ 1200.078120][T24368] device team0 entered promiscuous mode [ 1200.115401][T24368] device team_slave_0 entered promiscuous mode [ 1200.125355][T24368] device team_slave_1 entered promiscuous mode [ 1200.160953][T24368] bridge0: port 3(team0) entered blocking state [ 1200.178557][T24368] bridge0: port 3(team0) entered disabled state [ 1200.206395][T24368] bridge0: port 3(team0) entered blocking state [ 1200.212913][T24368] bridge0: port 3(team0) entered forwarding state [ 1200.314056][T24378] netlink: 16278 bytes leftover after parsing attributes in process `syz.5.6248'. [ 1200.655284][T24385] netlink: 'syz.2.6249': attribute type 10 has an invalid length. [ 1200.851369][T24385] bridge0: port 3(team0) entered disabled state [ 1200.895791][T24385] device team0 left promiscuous mode [ 1200.909491][T24385] device team_slave_0 left promiscuous mode [ 1200.926542][T24385] device team_slave_1 left promiscuous mode [ 1200.945647][T24385] bridge0: port 3(team0) entered disabled state [ 1201.048136][T24385] 8021q: adding VLAN 0 to HW filter on device team0 [ 1201.138396][T24385] bond0: (slave team0): Enslaving as an active interface with an up link [ 1201.955145][T24162] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1202.002239][T24162] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1202.048315][T24162] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1202.059499][T24162] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1202.190950][T24419] netlink: 63763 bytes leftover after parsing attributes in process `syz.0.6266'. [ 1202.342451][T24423] netlink: 'syz.2.6257': attribute type 10 has an invalid length. [ 1202.440785][T24423] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1202.496043][T24162] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1202.578837][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1202.598385][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1202.644135][T24162] 8021q: adding VLAN 0 to HW filter on device team0 [ 1202.686981][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1202.716675][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1202.775601][ T4636] bridge0: port 1(bridge_slave_0) entered blocking state [ 1202.782953][ T4636] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1202.856469][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1202.891154][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1202.911675][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1202.981770][ T4636] bridge0: port 2(bridge_slave_1) entered blocking state [ 1202.989097][ T4636] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1203.147867][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1203.180229][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1203.215761][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1203.248543][T24433] netlink: 'syz.2.6261': attribute type 1 has an invalid length. [ 1203.270505][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1203.282932][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1203.299196][T24433] netlink: 112865 bytes leftover after parsing attributes in process `syz.2.6261'. [ 1203.323144][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1203.357347][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1203.396658][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1203.454613][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1203.512478][T19695] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1203.533007][T19695] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1203.581332][T24162] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1203.792203][T24447] netlink: 'syz.4.6264': attribute type 10 has an invalid length. [ 1203.850741][T24447] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6264'. [ 1203.910280][T24447] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 1204.057614][T24450] netlink: 'syz.0.6265': attribute type 10 has an invalid length. [ 1204.146390][T24456] netlink: 63763 bytes leftover after parsing attributes in process `syz.5.6269'. [ 1204.804772][T21381] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1204.824248][T21381] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1204.856960][T24162] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1204.957138][T21381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1204.976922][T21381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1205.127082][T10721] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1205.144338][T10721] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1205.212553][T24162] device veth0_vlan entered promiscuous mode [ 1205.248472][T10721] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1205.272033][T10721] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1205.324219][T24162] device veth1_vlan entered promiscuous mode [ 1205.479401][T19695] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1205.497057][T24486] FAULT_INJECTION: forcing a failure. [ 1205.497057][T24486] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1205.502814][T19695] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1205.544478][T19695] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1205.579175][T24486] CPU: 0 PID: 24486 Comm: syz.2.6278 Not tainted syzkaller #0 [ 1205.586742][T24486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1205.596866][T24486] Call Trace: [ 1205.600196][T24486] [ 1205.603176][T24486] dump_stack_lvl+0x188/0x24e [ 1205.607951][T24486] ? show_regs_print_info+0x12/0x12 [ 1205.613210][T24486] ? load_image+0x410/0x410 [ 1205.617776][T24486] ? __lock_acquire+0x7c40/0x7c40 [ 1205.622872][T24486] should_fail_ex+0x390/0x4c0 [ 1205.627717][T24486] _copy_to_user+0x2c/0x130 [ 1205.632369][T24486] bpf_test_finish+0x4a2/0x600 [ 1205.637294][T24486] ? rcu_is_watching+0x11/0xa0 [ 1205.642214][T24486] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1205.648435][T24486] ? lockdep_hardirqs_on+0x94/0x140 [ 1205.653694][T24486] ? convert_skb_to___skb+0x420/0x420 [ 1205.659143][T24486] bpf_prog_test_run_skb+0x1129/0x18e0 [ 1205.664699][T24486] ? cpu_online+0xa0/0xa0 [ 1205.669092][T24486] bpf_prog_test_run+0x31c/0x390 [ 1205.674110][T24486] __sys_bpf+0x62b/0x780 [ 1205.678423][T24486] ? bpf_link_show_fdinfo+0x380/0x380 [ 1205.683881][T24486] ? lock_chain_count+0x20/0x20 [ 1205.688792][T24486] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1205.694858][T24486] __x64_sys_bpf+0x78/0x90 [ 1205.699352][T24486] do_syscall_64+0x4c/0xa0 [ 1205.703862][T24486] ? clear_bhb_loop+0x60/0xb0 [ 1205.708691][T24486] ? clear_bhb_loop+0x60/0xb0 [ 1205.713550][T24486] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1205.719522][T24486] RIP: 0033:0x7f3784f9e159 [ 1205.723997][T24486] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1205.743750][T24486] RSP: 002b:00007f3785ef1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1205.752235][T24486] RAX: ffffffffffffffda RBX: 00007f3785225fa0 RCX: 00007f3784f9e159 [ 1205.760289][T24486] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 1205.768595][T24486] RBP: 00007f3785ef1090 R08: 0000000000000000 R09: 0000000000000000 [ 1205.776645][T24486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1205.784687][T24486] R13: 00007f3785226038 R14: 00007f3785225fa0 R15: 00007fff55009108 [ 1205.792998][T24486] [ 1205.813946][T19695] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1205.843073][T24162] device veth0_macvtap entered promiscuous mode [ 1205.901428][T24162] device veth1_macvtap entered promiscuous mode [ 1205.956704][T24497] netlink: 'syz.4.6280': attribute type 10 has an invalid length. [ 1205.977001][T24497] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6280'. [ 1206.023033][T24497] bond0: (slave team0): Releasing backup interface [ 1206.080937][T24497] bridge0: port 3(team0) entered blocking state [ 1206.098417][T24497] bridge0: port 3(team0) entered disabled state [ 1206.178862][T24162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1206.236018][T24162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1206.272519][T24162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1206.283758][T24162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1206.343933][T24162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1206.399075][T24162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1206.451287][T24162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1206.482826][T24162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1206.519125][T24162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1206.548858][T24162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1206.617789][T24162] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1206.680895][T24505] netlink: 63763 bytes leftover after parsing attributes in process `syz.4.6281'. [ 1206.725895][T24508] netlink: 'syz.5.6282': attribute type 10 has an invalid length. [ 1206.755340][T24508] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6282'. [ 1206.789271][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1206.860002][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1206.897177][T24162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1206.961760][T24162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1207.016480][T24162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1207.041376][T24162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1207.051656][T24162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1207.062328][T24162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1207.072621][T24162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1207.083975][T24162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1207.102230][T24162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1207.117295][T24162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1207.132132][T24162] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1207.153720][T24510] netlink: 'syz.2.6284': attribute type 10 has an invalid length. [ 1207.446843][T24510] team0: Port device wlan1 added [ 1207.473144][T19695] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1207.503986][T19695] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1207.533130][T24162] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1207.609080][T24162] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1207.617890][T24162] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1207.668576][T24162] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1208.064439][T19690] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1208.092196][T19690] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1208.145159][ T4633] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1208.237406][T19695] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1208.258888][T19695] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1208.319584][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1208.887772][T24557] netlink: 63763 bytes leftover after parsing attributes in process `syz.3.6294'. [ 1209.275898][T24564] netlink: 'syz.5.6296': attribute type 21 has an invalid length. [ 1209.622412][T24564] netlink: 152 bytes leftover after parsing attributes in process `syz.5.6296'. [ 1210.216664][T24579] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.6301'. [ 1210.520407][ T4293] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1210.540149][ T4293] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1210.550903][ T4293] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1210.561367][ T4293] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1210.571861][ T4289] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1210.583258][ T4289] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1210.600555][T24579] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 1210.947673][ T4633] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1211.076660][T24598] netlink: 16098 bytes leftover after parsing attributes in process `syz.5.6304'. [ 1211.290811][ T4633] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1211.345657][T24608] netlink: 63763 bytes leftover after parsing attributes in process `syz.4.6307'. [ 1211.587237][T24619] netlink: 16046 bytes leftover after parsing attributes in process `syz.5.6311'. [ 1211.626612][T24609] netlink: 10 bytes leftover after parsing attributes in process `syz.3.6308'. [ 1211.705167][T24628] netlink: 16270 bytes leftover after parsing attributes in process `syz.5.6311'. [ 1212.201784][T24623] netlink: 10 bytes leftover after parsing attributes in process `syz.3.6308'. [ 1212.353093][ T4633] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1212.436006][T24633] netlink: 152 bytes leftover after parsing attributes in process `syz.5.6313'. [ 1212.497241][ T4633] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1212.557145][T24633] netlink: 'syz.5.6313': attribute type 10 has an invalid length. [ 1212.567792][T24633] device lo left promiscuous mode [ 1212.659157][ T4293] Bluetooth: hci0: command 0x0409 tx timeout [ 1212.858005][T24646] netlink: 16255 bytes leftover after parsing attributes in process `syz.4.6317'. [ 1213.033705][T24647] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6318'. [ 1213.103285][T24647] bond0: (slave bond_slave_0): Releasing backup interface [ 1213.213019][T24647] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 1213.263965][T24650] netlink: 63763 bytes leftover after parsing attributes in process `syz.3.6319'. [ 1213.314230][T24592] chnl_net:caif_netlink_parms(): no params data found [ 1214.067844][T24592] bridge0: port 1(bridge_slave_0) entered blocking state [ 1214.109142][T24592] bridge0: port 1(bridge_slave_0) entered disabled state [ 1214.140213][T24592] device bridge_slave_0 entered promiscuous mode [ 1214.351281][T24592] bridge0: port 2(bridge_slave_1) entered blocking state [ 1214.374057][T24592] bridge0: port 2(bridge_slave_1) entered disabled state [ 1214.388612][T24592] device bridge_slave_1 entered promiscuous mode [ 1214.478393][T24693] netlink: 'syz.5.6330': attribute type 10 has an invalid length. [ 1214.507765][T24693] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 1214.610593][T24686] bond0: (slave team0): Error: Slave device does not support XDP [ 1214.749065][ T4293] Bluetooth: hci0: command 0x041b tx timeout [ 1214.755967][T24695] netlink: 'syz.2.6329': attribute type 10 has an invalid length. [ 1214.878649][T24695] bridge0: port 2(bridge_slave_1) entered disabled state [ 1214.952087][T24695] device bridge_slave_1 left promiscuous mode [ 1214.975130][T24695] bridge0: port 2(bridge_slave_1) entered disabled state [ 1215.015605][T24695] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1215.084808][T24697] netlink: 'syz.4.6331': attribute type 10 has an invalid length. [ 1215.116142][T24697] 8021q: adding VLAN 0 to HW filter on device team0 [ 1215.144235][T24592] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1215.221939][T24592] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1215.441886][T24592] team0: Port device team_slave_0 added [ 1215.503649][T24592] team0: Port device team_slave_1 added [ 1215.792296][T24592] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1215.859224][T24592] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1216.091128][T24592] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1216.345532][T24592] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1216.362067][T24592] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1216.415297][T24738] netlink: 'syz.5.6340': attribute type 3 has an invalid length. [ 1216.436160][T24738] __nla_validate_parse: 4 callbacks suppressed [ 1216.436182][T24738] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.6340'. [ 1216.451893][T24592] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1216.735378][T24734] netlink: 'syz.5.6340': attribute type 21 has an invalid length. [ 1216.753004][T24748] netlink: 'syz.3.6342': attribute type 2 has an invalid length. [ 1216.765513][T24734] netlink: 128 bytes leftover after parsing attributes in process `syz.5.6340'. [ 1216.788260][T24748] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.6342'. [ 1216.800104][T24734] netlink: 'syz.5.6340': attribute type 4 has an invalid length. [ 1216.829136][ T4293] Bluetooth: hci0: command 0x040f tx timeout [ 1217.017568][T24592] device hsr_slave_0 entered promiscuous mode [ 1217.042577][T24592] device hsr_slave_1 entered promiscuous mode [ 1217.109713][T24592] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1217.137128][T24592] Cannot create hsr debugfs directory [ 1217.512054][T24760] netlink: 'syz.4.6345': attribute type 10 has an invalid length. [ 1217.530576][T24760] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6345'. [ 1217.566161][T24764] netlink: 'syz.2.6346': attribute type 4 has an invalid length. [ 1217.579132][T24764] netlink: 60519 bytes leftover after parsing attributes in process `syz.2.6346'. [ 1217.701312][ T4633] device hsr_slave_0 left promiscuous mode [ 1217.729461][ T4633] device hsr_slave_1 left promiscuous mode [ 1217.780145][ T4633] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1217.787686][ T4633] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1217.865360][ T4633] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1217.909315][ T4633] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1218.039945][ T4633] device veth1_macvtap left promiscuous mode [ 1218.058737][ T4633] device veth0_macvtap left promiscuous mode [ 1218.108178][ T4633] device veth1_vlan left promiscuous mode [ 1218.139570][ T4633] device veth0_vlan left promiscuous mode [ 1218.906620][ T4293] Bluetooth: hci0: command 0x0419 tx timeout [ 1220.849786][ T4633] device team_slave_1 left promiscuous mode [ 1220.875364][ T4633] team0 (unregistering): Port device team_slave_1 removed [ 1220.958069][ T4633] device team_slave_0 left promiscuous mode [ 1220.966094][ T4633] team0 (unregistering): Port device team_slave_0 removed [ 1221.064762][ T4633] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1221.084278][ T4633] device bond_slave_1 left promiscuous mode [ 1221.211654][ T4633] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1221.233050][ T4633] device bond_slave_0 left promiscuous mode [ 1221.633795][ T4633] bond0 (unregistering): (slave team0): Releasing backup interface [ 1221.642930][ T4633] device team0 left promiscuous mode [ 1221.685845][ T4633] bond0 (unregistering): Released all slaves [ 1221.777770][T24810] netlink: 'syz.5.6357': attribute type 3 has an invalid length. [ 1221.804295][T24810] netlink: 152 bytes leftover after parsing attributes in process `syz.5.6357'. [ 1222.032897][T24814] netlink: 'syz.2.6358': attribute type 10 has an invalid length. [ 1222.050821][T24814] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6358'. [ 1222.137511][T24814] device team0 entered promiscuous mode [ 1222.149960][T24814] device team_slave_0 entered promiscuous mode [ 1222.178874][T24814] device team_slave_1 entered promiscuous mode [ 1222.188661][T24814] device wlan1 entered promiscuous mode [ 1222.221749][T24814] bond0: (slave team0): Releasing backup interface [ 1222.536788][T24814] bridge0: port 2(team0) entered blocking state [ 1222.550836][T24814] bridge0: port 2(team0) entered disabled state [ 1222.582145][T24816] netlink: 'syz.4.6359': attribute type 4 has an invalid length. [ 1222.597815][T24816] netlink: 60519 bytes leftover after parsing attributes in process `syz.4.6359'. [ 1222.624437][T24819] netlink: 1047 bytes leftover after parsing attributes in process `syz.5.6360'. [ 1222.642350][T24822] netlink: 'syz.3.6361': attribute type 39 has an invalid length. [ 1223.159903][T24822] device hsr_slave_1 left promiscuous mode [ 1223.364512][T24835] netlink: 'syz.4.6363': attribute type 21 has an invalid length. [ 1224.979757][T24872] netlink: 126588 bytes leftover after parsing attributes in process `syz.5.6369'. [ 1225.306234][T24878] netlink: 'syz.4.6372': attribute type 4 has an invalid length. [ 1225.326596][T24878] netlink: 60519 bytes leftover after parsing attributes in process `syz.4.6372'. [ 1225.372457][T24592] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1225.458825][T24592] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1225.513951][T24592] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1225.618007][T24592] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1226.049848][T24592] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1226.111619][T24895] netlink: 'syz.2.6378': attribute type 10 has an invalid length. [ 1226.150920][T24895] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6378'. [ 1226.223576][T24895] bridge0: port 2(team0) entered blocking state [ 1226.230379][T24895] bridge0: port 2(team0) entered forwarding state [ 1226.264538][T24895] 8021q: adding VLAN 0 to HW filter on device team0 [ 1226.327696][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1226.356757][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1226.392484][T24592] 8021q: adding VLAN 0 to HW filter on device team0 [ 1226.408079][T24900] netlink: 'syz.4.6380': attribute type 21 has an invalid length. [ 1226.473988][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1226.515867][T24910] sctp: [Deprecated]: syz.3.6382 (pid 24910) Use of int in max_burst socket option deprecated. [ 1226.515867][T24910] Use struct sctp_assoc_value instead [ 1226.586850][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1226.629934][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 1226.637196][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1226.685043][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1226.728497][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1226.785341][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 1226.792664][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1226.857691][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1226.942103][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1227.045454][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1227.060141][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1227.084634][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1227.137493][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1227.186857][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1227.232971][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1227.257399][T21381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1227.312407][T21381] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1227.360793][T24925] netlink: 'syz.3.6386': attribute type 4 has an invalid length. [ 1227.379328][T24925] netlink: 60519 bytes leftover after parsing attributes in process `syz.3.6386'. [ 1227.432694][T24592] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1227.465516][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1227.484419][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1228.418170][T24951] netlink: 'syz.3.6393': attribute type 21 has an invalid length. [ 1228.968561][T21381] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1229.015055][T21381] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1229.087822][T24592] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1229.253590][T18954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1229.289448][T18954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1229.390397][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1229.438096][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1229.513821][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1229.570475][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1229.596648][T24592] device veth0_vlan entered promiscuous mode [ 1229.668449][T24592] device veth1_vlan entered promiscuous mode [ 1229.804033][T18954] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1229.824765][T18954] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1229.870985][T18954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1229.950620][T18954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1229.997407][T24592] device veth0_macvtap entered promiscuous mode [ 1230.061014][T18954] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1230.107711][T24592] device veth1_macvtap entered promiscuous mode [ 1230.200615][T24592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1230.247053][T24592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1230.300198][T24592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1230.352845][T24592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1230.389250][T24592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1230.439070][T24592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1230.456276][T24592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1230.482193][T24592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1230.520312][T24592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1230.551806][T24592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1230.592211][T24592] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1230.717639][T24990] netlink: 'syz.3.6401': attribute type 21 has an invalid length. [ 1230.796844][T24990] netlink: 'syz.3.6401': attribute type 3 has an invalid length. [ 1230.930261][T24990] netlink: 144 bytes leftover after parsing attributes in process `syz.3.6401'. [ 1230.989113][T24992] netlink: 'syz.3.6401': attribute type 10 has an invalid length. [ 1231.123892][T24992] 8021q: adding VLAN 0 to HW filter on device team0 [ 1231.153420][T24992] bond0: (slave team0): Enslaving as an active interface with an up link [ 1231.189299][T10721] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1231.201572][T10721] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1231.258478][T24592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1231.327526][T24592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1231.368802][T24592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1231.410504][T24592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1231.433482][T24592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1231.505812][T24592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1231.540821][T24592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1231.598145][T24592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1231.639235][T24592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1231.671046][T24592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1231.742891][T24592] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1231.807013][T25005] netlink: 'syz.3.6405': attribute type 21 has an invalid length. [ 1231.849352][T18954] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1231.864974][T18954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1231.900574][T24592] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1231.929319][T24592] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1231.970749][T24592] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1231.999320][T24592] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1232.372931][T19695] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1232.439248][T19695] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1232.506807][T18954] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1232.601819][T19695] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1232.633912][T19695] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1232.693590][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1232.962516][T25024] can: request_module (can-proto-0) failed. [ 1234.051660][T25054] netlink: 1047 bytes leftover after parsing attributes in process `syz.5.6415'. [ 1237.194043][T25114] netlink: 'syz.4.6429': attribute type 10 has an invalid length. [ 1237.211749][T25114] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6429'. [ 1237.412829][T25120] netlink: 'syz.5.6432': attribute type 4 has an invalid length. [ 1237.449457][T25120] netlink: 60519 bytes leftover after parsing attributes in process `syz.5.6432'. [ 1237.919582][T25132] sctp: [Deprecated]: syz.0.6436 (pid 25132) Use of int in max_burst socket option deprecated. [ 1237.919582][T25132] Use struct sctp_assoc_value instead [ 1238.825354][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.831872][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.420247][T25174] netlink: 'syz.0.6445': attribute type 10 has an invalid length. [ 1239.479356][T25174] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6445'. [ 1239.537329][T25174] device team0 entered promiscuous mode [ 1239.543368][T25174] device team_slave_0 entered promiscuous mode [ 1239.560858][T25174] device team_slave_1 entered promiscuous mode [ 1239.578147][T25174] bridge0: port 3(team0) entered blocking state [ 1239.593060][T25174] bridge0: port 3(team0) entered disabled state [ 1239.618326][T25174] bridge0: port 3(team0) entered blocking state [ 1239.624890][T25174] bridge0: port 3(team0) entered forwarding state [ 1239.669126][T25179] netlink: 'syz.5.6446': attribute type 4 has an invalid length. [ 1239.707924][T25179] netlink: 60519 bytes leftover after parsing attributes in process `syz.5.6446'. [ 1240.729038][T25200] netlink: 8964 bytes leftover after parsing attributes in process `syz.4.6453'. [ 1240.782836][T25196] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.6453'. [ 1240.839553][T25196] netlink: 6320 bytes leftover after parsing attributes in process `syz.4.6453'. [ 1240.880247][T25196] netlink: 6 bytes leftover after parsing attributes in process `syz.4.6453'. [ 1240.899119][ T4293] Bluetooth: hci4: command 0x0406 tx timeout [ 1240.919763][T25196] tc_dump_action: action bad kind [ 1241.068139][T25211] netlink: 'syz.0.6458': attribute type 4 has an invalid length. [ 1241.099079][T25211] netlink: 60519 bytes leftover after parsing attributes in process `syz.0.6458'. [ 1241.355825][T25221] netlink: 'syz.5.6459': attribute type 21 has an invalid length. [ 1241.526798][T25225] netlink: 'syz.0.6460': attribute type 10 has an invalid length. [ 1241.571611][T25225] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6460'. [ 1242.629470][T25241] device bond0 entered promiscuous mode [ 1242.645694][T25241] device bond_slave_0 entered promiscuous mode [ 1242.677633][T25241] device bond_slave_1 entered promiscuous mode [ 1242.694937][T25241] device team0 entered promiscuous mode [ 1242.779055][T25241] device team_slave_0 entered promiscuous mode [ 1242.785544][T25241] device team_slave_1 entered promiscuous mode [ 1243.717015][T25252] netlink: 'syz.3.6467': attribute type 9 has an invalid length. [ 1243.727732][T25253] netlink: 'syz.5.6470': attribute type 4 has an invalid length. [ 1243.756822][T25253] netlink: 60519 bytes leftover after parsing attributes in process `syz.5.6470'. [ 1243.779318][T25252] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.6467'. [ 1244.068894][T25262] netlink: 'syz.0.6472': attribute type 13 has an invalid length. [ 1244.562085][T25269] __nla_validate_parse: 1 callbacks suppressed [ 1244.562111][T25269] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.6475'. [ 1244.800145][T25276] netlink: 'syz.0.6476': attribute type 2 has an invalid length. [ 1244.927048][T25276] device 0 entered promiscuous mode [ 1245.223242][T25283] netlink: 14 bytes leftover after parsing attributes in process `syz.2.6478'. [ 1246.449906][T25283] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1246.523951][T25283] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 1246.571124][T25283] bond0 (unregistering): Released all slaves [ 1246.633676][T25300] netlink: 'syz.0.6482': attribute type 10 has an invalid length. [ 1246.659487][T25300] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6482'. [ 1246.696543][T25301] netlink: 'syz.3.6483': attribute type 4 has an invalid length. [ 1246.708539][T25301] netlink: 60519 bytes leftover after parsing attributes in process `syz.3.6483'. [ 1247.394965][T25316] netlink: 'syz.0.6491': attribute type 10 has an invalid length. [ 1247.420918][T25316] netlink: 168 bytes leftover after parsing attributes in process `syz.0.6491'. [ 1247.452466][T25316] netlink: 'syz.0.6491': attribute type 10 has an invalid length. [ 1247.656527][T25316] device wlan1 entered promiscuous mode [ 1247.679928][T25316] team0: Port device wlan1 added [ 1247.932092][T25329] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.6494'. [ 1249.581071][T25348] netlink: 'syz.5.6499': attribute type 10 has an invalid length. [ 1249.606888][T25351] sctp: [Deprecated]: syz.4.6502 (pid 25351) Use of int in max_burst socket option deprecated. [ 1249.606888][T25351] Use struct sctp_assoc_value instead [ 1249.629207][T25348] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6499'. [ 1250.016326][T25361] netlink: 'syz.2.6506': attribute type 2 has an invalid length. [ 1250.046592][T25363] netlink: 'syz.2.6506': attribute type 2 has an invalid length. [ 1250.293431][T25363] device 0 entered promiscuous mode [ 1250.468252][T25370] netlink: 'syz.2.6506': attribute type 10 has an invalid length. [ 1250.477014][T25370] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6506'. [ 1250.755194][T25361] device 1 entered promiscuous mode [ 1250.769664][T25365] netlink: 'syz.5.6509': attribute type 39 has an invalid length. [ 1250.795337][T25370] netlink: 'syz.2.6506': attribute type 10 has an invalid length. [ 1250.829285][T25370] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6506'. [ 1253.490778][T25393] netlink: 63763 bytes leftover after parsing attributes in process `syz.4.6514'. [ 1253.636396][T25399] netlink: 'syz.0.6516': attribute type 19 has an invalid length. [ 1254.816070][T25407] netlink: 'syz.5.6520': attribute type 10 has an invalid length. [ 1254.864937][T25407] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6520'. [ 1254.949311][T25411] netlink: 192 bytes leftover after parsing attributes in process `syz.0.6522'. [ 1255.147167][T25412] netlink: 'syz.4.6521': attribute type 10 has an invalid length. [ 1255.504049][T25420] netlink: 'syz.5.6524': attribute type 10 has an invalid length. [ 1255.518044][T25420] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6524'. [ 1255.557611][T25420] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 1255.639803][T25417] bridge0: port 2(bridge_slave_1) entered disabled state [ 1255.651643][T25417] bridge0: port 1(bridge_slave_0) entered disabled state [ 1256.442569][T25436] netlink: 'syz.4.6529': attribute type 21 has an invalid length. [ 1256.717811][T25440] netlink: 63763 bytes leftover after parsing attributes in process `syz.3.6531'. [ 1256.783977][T25447] netlink: 'syz.0.6534': attribute type 10 has an invalid length. [ 1256.815477][T25447] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6534'. [ 1256.840388][T25446] netlink: 'syz.5.6533': attribute type 19 has an invalid length. [ 1262.491083][T25507] sctp: [Deprecated]: syz.0.6552 (pid 25507) Use of int in max_burst socket option deprecated. [ 1262.491083][T25507] Use struct sctp_assoc_value instead [ 1264.581129][ T4291] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 1264.590125][ T4291] Bluetooth: hci2: Injecting HCI hardware error event [ 1264.598800][ T4291] Bluetooth: hci2: hardware error 0x00 [ 1266.947813][T25533] netlink: 'syz.2.6558': attribute type 10 has an invalid length. [ 1267.952715][ T4291] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1268.704213][T25548] bridge0: port 3(team0) entered disabled state [ 1268.735107][T25548] bridge0: port 2(bridge_slave_1) entered disabled state [ 1268.788195][T25548] bridge0: port 1(bridge_slave_0) entered disabled state [ 1270.122129][T25568] netlink: 'syz.2.6567': attribute type 19 has an invalid length. [ 1271.539579][ T4291] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 1271.549157][ T4291] Bluetooth: hci4: Injecting HCI hardware error event [ 1271.558657][ T4293] Bluetooth: hci4: hardware error 0x00 [ 1272.557689][T25594] netlink: 'syz.0.6576': attribute type 10 has an invalid length. [ 1272.821656][T25598] netlink: 'syz.2.6579': attribute type 21 has an invalid length. [ 1273.398480][T25602] netlink: 'syz.0.6581': attribute type 10 has an invalid length. [ 1273.460382][T25602] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6581'. [ 1273.620287][ T4293] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1278.264251][T25653] netlink: 'syz.5.6597': attribute type 10 has an invalid length. [ 1278.407227][T25652] netlink: 'syz.0.6596': attribute type 10 has an invalid length. [ 1278.439043][T25652] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6596'. [ 1279.020984][T25661] netlink: 'syz.5.6600': attribute type 10 has an invalid length. [ 1279.069212][T25661] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6600'. [ 1279.089887][T25661] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 1279.188691][T25660] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6598'. [ 1283.179207][T25681] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.6606'. [ 1284.052334][T25699] netlink: 'syz.0.6611': attribute type 10 has an invalid length. [ 1284.070969][T25699] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6611'. [ 1284.819369][T25713] netlink: 'syz.0.6616': attribute type 4 has an invalid length. [ 1284.849139][T25713] netlink: 60519 bytes leftover after parsing attributes in process `syz.0.6616'. [ 1285.149211][T25710] netlink: 'syz.2.6615': attribute type 2 has an invalid length. [ 1285.346053][T25710] device .*! entered promiscuous mode [ 1286.980495][ T4291] Bluetooth: hci6: command 0x0406 tx timeout [ 1287.338619][T25742] netlink: 'syz.5.6626': attribute type 10 has an invalid length. [ 1287.380763][T25742] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6626'. [ 1287.885538][T25748] netlink: 'syz.2.6628': attribute type 4 has an invalid length. [ 1287.904086][T25748] netlink: 60519 bytes leftover after parsing attributes in process `syz.2.6628'. [ 1290.765617][T25780] netlink: 'syz.0.6636': attribute type 4 has an invalid length. [ 1290.782975][T25779] netlink: 132 bytes leftover after parsing attributes in process `syz.5.6639'. [ 1290.810218][T25781] netlink: 'syz.0.6636': attribute type 4 has an invalid length. [ 1291.246664][T25789] netlink: 'syz.2.6641': attribute type 4 has an invalid length. [ 1291.263642][T25789] netlink: 60519 bytes leftover after parsing attributes in process `syz.2.6641'. [ 1293.793280][T25802] netlink: 56 bytes leftover after parsing attributes in process `syz.4.6646'. [ 1294.050156][T25808] netlink: 164 bytes leftover after parsing attributes in process `syz.5.6649'. [ 1294.328470][T25821] netlink: 'syz.2.6653': attribute type 4 has an invalid length. [ 1294.380273][T25821] netlink: 60519 bytes leftover after parsing attributes in process `syz.2.6653'. [ 1294.428449][T22813] cgroup: fork rejected by pids controller in /syz4 [ 1295.330952][T25842] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6659'. [ 1295.411464][T25843] netlink: 'syz.2.6660': attribute type 2 has an invalid length. [ 1295.500805][T25843] netlink: 119 bytes leftover after parsing attributes in process `syz.2.6660'. [ 1295.768574][ T4636] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1295.918969][T25848] netlink: 'syz.2.6660': attribute type 2 has an invalid length. [ 1295.926829][T25848] netlink: 119 bytes leftover after parsing attributes in process `syz.2.6660'. [ 1296.213604][ T4636] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1296.483097][ T4636] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1296.674134][ T4636] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1296.977831][T25867] netlink: 'syz.5.6669': attribute type 10 has an invalid length. [ 1297.145688][T25874] netlink: 'syz.0.6668': attribute type 4 has an invalid length. [ 1297.252860][T25874] netlink: 60519 bytes leftover after parsing attributes in process `syz.0.6668'. [ 1297.390362][T25877] netlink: 'syz.5.6673': attribute type 10 has an invalid length. [ 1297.398366][T25877] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6673'. [ 1297.485160][T25877] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 1297.971081][T25889] netlink: 132 bytes leftover after parsing attributes in process `syz.5.6675'. [ 1298.300055][ T4293] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1298.327512][ T4293] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1298.337477][ T4293] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1298.359550][ T4293] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1298.367674][ T4293] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1298.382226][ T4293] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1299.785416][T25911] delete_channel: no stack [ 1300.067934][T25893] chnl_net:caif_netlink_parms(): no params data found [ 1300.163716][T25925] netlink: 'syz.5.6684': attribute type 4 has an invalid length. [ 1300.189508][T25925] netlink: 60519 bytes leftover after parsing attributes in process `syz.5.6684'. [ 1300.262791][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.269308][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.419423][ T4289] Bluetooth: hci3: command 0x0409 tx timeout [ 1300.512161][T25934] FAULT_INJECTION: forcing a failure. [ 1300.512161][T25934] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1300.535675][T25934] CPU: 1 PID: 25934 Comm: syz.5.6686 Not tainted syzkaller #0 [ 1300.543263][T25934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1300.553384][T25934] Call Trace: [ 1300.556710][T25934] [ 1300.559684][T25934] dump_stack_lvl+0x188/0x24e [ 1300.564413][T25934] ? show_regs_print_info+0x12/0x12 [ 1300.569658][T25934] ? load_image+0x410/0x410 [ 1300.574216][T25934] ? __lock_acquire+0x7c40/0x7c40 [ 1300.579294][T25934] should_fail_ex+0x390/0x4c0 [ 1300.584037][T25934] _copy_from_user+0x2c/0x170 [ 1300.588752][T25934] iovec_from_user+0x143/0x360 [ 1300.593581][T25934] __import_iovec+0x6c/0x510 [ 1300.598240][T25934] import_iovec+0x6f/0xa0 [ 1300.602624][T25934] ___sys_sendmsg+0x252/0x360 [ 1300.607358][T25934] ? __sys_sendmsg+0x2a0/0x2a0 [ 1300.612174][T25934] ? trace_call_bpf+0xbf/0x6b0 [ 1300.617008][T25934] __se_sys_sendmsg+0x1c3/0x2b0 [ 1300.621986][T25934] ? perf_trace_preemptirq_template+0x268/0x320 [ 1300.628287][T25934] ? __x64_sys_sendmsg+0x80/0x80 [ 1300.633275][T25934] ? lockdep_hardirqs_on+0x94/0x140 [ 1300.638721][T25934] do_syscall_64+0x4c/0xa0 [ 1300.643179][T25934] ? clear_bhb_loop+0x60/0xb0 [ 1300.647895][T25934] ? clear_bhb_loop+0x60/0xb0 [ 1300.652625][T25934] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1300.658595][T25934] RIP: 0033:0x7f0fd779e159 [ 1300.663061][T25934] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1300.682712][T25934] RSP: 002b:00007f0fd863c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1300.691170][T25934] RAX: ffffffffffffffda RBX: 00007f0fd7a25fa0 RCX: 00007f0fd779e159 [ 1300.699181][T25934] RDX: 0000000020004040 RSI: 0000200000000000 RDI: 0000000000000006 [ 1300.707205][T25934] RBP: 00007f0fd863c090 R08: 0000000000000000 R09: 0000000000000000 [ 1300.715215][T25934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1300.723309][T25934] R13: 00007f0fd7a26038 R14: 00007f0fd7a25fa0 R15: 00007ffebdbaf008 [ 1300.731334][T25934] [ 1300.899143][ T28] INFO: task rcu_tasks_kthre:12 blocked for more than 143 seconds. [ 1300.907166][ T28] Not tainted syzkaller #0 [ 1300.945553][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1301.000314][ T28] task:rcu_tasks_kthre state:D stack:28256 pid:12 ppid:2 flags:0x00004000 [ 1301.038601][ T28] Call Trace: [ 1301.048744][ T28] [ 1301.069069][ T28] __schedule+0x107f/0x4030 [ 1301.073721][ T28] ? perf_trace_run_bpf_submit+0x124/0x1c0 [ 1301.108981][ T28] ? release_firmware_map_entry+0x187/0x187 [ 1301.135877][ T28] schedule+0xb9/0x180 [ 1301.156523][ T28] schedule_timeout+0xbd/0x2d0 [ 1301.179078][ T28] ? console_conditional_schedule+0x40/0x40 [ 1301.185111][ T28] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1301.244221][ T28] ? __lock_acquire+0x7c40/0x7c40 [ 1301.270403][ T28] ? lock_chain_count+0x20/0x20 [ 1301.289071][ T28] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1301.315846][ T28] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1301.342152][ T28] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1301.366190][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 1301.389245][ T28] ? wait_for_completion+0x26f/0x590 [ 1301.412105][ T28] wait_for_completion+0x2c2/0x590 [ 1301.437506][ T28] ? io_schedule+0xd0/0xd0 [ 1301.458235][ T28] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1301.493324][ T28] ? debug_object_active_state+0x6b/0x380 [ 1301.526518][ T28] __synchronize_srcu+0x2b3/0x350 [ 1301.552196][ T28] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 1301.575381][ T28] ? synchronize_srcu_expedited+0x20/0x20 [ 1301.598496][ T28] ? rcu_read_lock_any_held+0x130/0x130 [ 1301.624767][ T28] ? ktime_get_mono_fast_ns+0x199/0x1b0 [ 1301.654455][ T28] ? synchronize_srcu+0x18f/0x1b0 [ 1301.674763][ T28] rcu_tasks_wait_gp+0x49f/0xac0 [ 1301.699232][ T28] ? rcu_tasks_wait_gp+0x21a/0xac0 [ 1301.722547][ T28] ? lock_chain_count+0x20/0x20 [ 1301.741369][ T28] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 1301.771423][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 1301.791789][ T28] ? rcu_tasks_invoke_cbs+0x670/0x670 [ 1301.816378][ T28] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1301.843071][ T28] ? _raw_spin_unlock+0x40/0x40 [ 1301.848103][ T28] rcu_tasks_one_gp+0xd27/0xef0 [ 1301.891404][ T28] ? rcu_tasks_one_gp+0xe5/0xef0 [ 1301.910783][ T28] rcu_tasks_kthread+0x6e/0x90 [ 1301.915714][ T28] kthread+0x29d/0x330 [ 1301.949136][ T28] ? rcu_tasks_postgp+0x10/0x10 [ 1301.964420][ T28] ? kthread_blkcg+0xd0/0xd0 [ 1301.989107][ T28] ret_from_fork+0x1f/0x30 [ 1301.993787][ T28] [ 1302.017556][ T28] [ 1302.017556][ T28] Showing all locks held in the system: [ 1302.052740][ T28] 1 lock held by rcu_tasks_kthre/12: [ 1302.078563][ T28] #0: ffffffff8cb2e170 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xef0 [ 1302.130586][ T28] 1 lock held by rcu_tasks_trace/13: [ 1302.136000][ T28] #0: ffffffff8cb2e990 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xef0 [ 1302.188205][ T28] 1 lock held by khungtaskd/28: [ 1302.218998][ T28] #0: ffffffff8cb2d7e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 1302.269191][ T28] 3 locks held by kworker/0:3/2186: [ 1302.289087][ T28] #0: ffff88814d086538 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 1302.331424][ T28] #1: ffffc90006477d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 1302.384811][ T28] #2: ffffffff8dd550a8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xc4/0x1500 [ 1302.429335][ T28] 2 locks held by getty/4032: [ 1302.434142][ T28] #0: ffff88814d203098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 1302.499059][ T4289] Bluetooth: hci3: command 0x041b tx timeout [ 1302.569613][ T28] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x41e/0x1360 [ 1302.650529][ T28] 5 locks held by kworker/u4:23/4636: [ 1302.656091][ T28] #0: ffff88801761e938 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 1302.789272][ T28] #1: ffffc90005857d00 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 1302.822029][ T28] #2: ffffffff8dd48210 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x148/0xba0 [ 1302.844696][ T28] #3: ffffffff8dd550a8 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_delete_nets+0xd2/0x370 [ 1302.866363][ T28] #4: ffffffff8cb334b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3c0/0x890 [ 1302.896958][ T28] 2 locks held by kworker/0:8/6339: [ 1302.909010][ T28] #0: ffff888017472138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 1302.934220][ T28] #1: ffffc90005e07d00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 1302.959979][ T28] 3 locks held by kworker/u4:4/10721: [ 1302.968082][ T28] #0: ffff8880b8e3acd8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x25/0x130 [ 1302.991326][ T28] #1: ffffc900064d7d00 ((work_completion)(&(&bat_priv->nc.work)->work)){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 1303.020802][ T28] #2: ffff8880b8e3acd8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x25/0x130 [ 1303.044547][ T28] 3 locks held by kworker/0:1/12641: [ 1303.057065][ T28] #0: ffff888017470938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 1303.080616][ T28] #1: ffffc9001c94fd00 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 1303.104037][ T28] #2: ffffffff8cb334b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3c0/0x890 [ 1303.134191][ T28] 1 lock held by syz.0.6674/25885: [ 1303.148872][ T28] #0: ffffffff8dd550a8 (rtnl_mutex){+.+.}-{3:3}, at: __netlink_dump_start+0x11e/0x6f0 [ 1303.178687][ T28] 1 lock held by syz.0.6674/25887: [ 1303.184317][ T28] #0: ffffffff8cb82ae8 (event_mutex){+.+.}-{3:3}, at: perf_trace_destroy+0x2a/0x140 [ 1303.194124][ T28] 1 lock held by syz-executor/25893: [ 1303.199619][ T28] #0: ffffffff8dd550a8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x80d/0xfb0 [ 1303.209423][ T28] 1 lock held by syz.2.6685/25928: [ 1303.214748][ T28] #0: ffffffff8cb82ae8 (event_mutex){+.+.}-{3:3}, at: perf_trace_destroy+0x2a/0x140 [ 1303.224935][ T28] 2 locks held by syz.2.6685/25929: [ 1303.230453][ T28] #0: ffffffff8dd575c8 (bpf_dispatcher_xdp.mutex){+.+.}-{3:3}, at: bpf_dispatcher_change_prog+0xc8/0xf10 [ 1303.242624][ T28] #1: ffffffff8cb334b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3c0/0x890 [ 1303.254018][ T28] 1 lock held by syz.3.6687/25936: [ 1303.259330][ T28] #0: ffffffff8cb82ae8 (event_mutex){+.+.}-{3:3}, at: perf_trace_destroy+0x2a/0x140 [ 1303.269106][ T28] 1 lock held by syz.3.6687/25937: [ 1303.274387][ T28] #0: ffffffff8dd550a8 (rtnl_mutex){+.+.}-{3:3}, at: __tun_chr_ioctl+0x3f3/0x1ed0 [ 1303.284134][ T28] 1 lock held by syz.3.6687/25938: [ 1303.289522][ T28] #0: ffffffff8dd550a8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3d/0x1b0 [ 1303.298735][ T28] 1 lock held by syz.3.6687/25939: [ 1303.304429][ T28] #0: ffffffff8dd550a8 (rtnl_mutex){+.+.}-{3:3}, at: __tun_chr_ioctl+0x3f3/0x1ed0 [ 1303.314095][ T28] 1 lock held by syz.3.6687/25940: [ 1303.325150][ T28] #0: ffffffff8dd550a8 (rtnl_mutex){+.+.}-{3:3}, at: __tun_chr_ioctl+0x3f3/0x1ed0 [ 1303.334825][ T28] 1 lock held by syz.3.6687/25941: [ 1303.341543][ T28] #0: ffffffff8dd550a8 (rtnl_mutex){+.+.}-{3:3}, at: __tun_chr_ioctl+0x3f3/0x1ed0 [ 1303.351589][ T28] 2 locks held by syz.3.6687/25942: [ 1303.357069][ T28] #0: ffffffff96c671a8 (&pmus_srcu){....}-{0:0}, at: perf_event_alloc+0xb28/0x21e0 [ 1303.366847][ T28] #1: ffffffff8cb82ae8 (event_mutex){+.+.}-{3:3}, at: perf_trace_init+0x4c/0x2d0 [ 1303.376577][ T28] [ 1303.405844][ T28] ============================================= [ 1303.405844][ T28] [ 1303.442702][ T28] NMI backtrace for cpu 1 [ 1303.447139][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 1303.454661][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1303.464779][ T28] Call Trace: [ 1303.468109][ T28] [ 1303.471085][ T28] dump_stack_lvl+0x188/0x24e [ 1303.475829][ T28] ? ct_irq_enter_irqson+0x170/0x170 [ 1303.481246][ T28] ? show_regs_print_info+0x12/0x12 [ 1303.486507][ T28] ? load_image+0x410/0x410 [ 1303.491164][ T28] ? vprintk_emit+0x59f/0x6a0 [ 1303.495947][ T28] ? nmi_cpu_backtrace+0x1cb/0x460 [ 1303.501268][ T28] nmi_cpu_backtrace+0x3e6/0x460 [ 1303.506310][ T28] ? nmi_trigger_cpumask_backtrace+0x450/0x450 [ 1303.512538][ T28] ? _printk+0xda/0x130 [ 1303.516758][ T28] ? load_image+0x410/0x410 [ 1303.521335][ T28] ? load_image+0x410/0x410 [ 1303.525905][ T28] ? nmi_trigger_cpumask_backtrace+0xf3/0x450 [ 1303.532028][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 1303.538277][ T28] nmi_trigger_cpumask_backtrace+0x1d4/0x450 [ 1303.544308][ T28] watchdog+0xf0e/0xf50 [ 1303.548517][ T28] ? watchdog+0x1ed/0xf50 [ 1303.552898][ T28] kthread+0x29d/0x330 [ 1303.557002][ T28] ? hungtask_pm_notify+0x40/0x40 [ 1303.562083][ T28] ? kthread_blkcg+0xd0/0xd0 [ 1303.566732][ T28] ret_from_fork+0x1f/0x30 [ 1303.571194][ T28] [ 1303.574772][ T28] Sending NMI from CPU 1 to CPUs 0: [ 1303.580248][ C0] NMI backtrace for cpu 0 [ 1303.580261][ C0] CPU: 0 PID: 3629 Comm: klogd Not tainted syzkaller #0 [ 1303.580277][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1303.580288][ C0] RIP: 0010:maybe_add_creds+0xe9/0x350 [ 1303.580321][ C0] Code: 25 e4 f8 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 18 24 e4 f8 4d 8b 3f 4c 89 fe 48 83 e6 08 31 ff e8 27 e3 92 f8 <49> 83 e7 08 75 18 e8 3c df 92 f8 e9 81 01 00 00 e8 32 df 92 f8 eb [ 1303.580335][ C0] RSP: 0018:ffffc900032b7ae8 EFLAGS: 00000293 [ 1303.580352][ C0] RAX: ffffffff88ef5399 RBX: ffff888028136500 RCX: ffff88807c7d8000 [ 1303.580366][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1303.580376][ C0] RBP: ffff888028136528 R08: ffff888148c54e0f R09: 1ffff1102918a9c1 [ 1303.580388][ C0] R10: dffffc0000000000 R11: ffffed102918a9c2 R12: 0000000000000000 [ 1303.580400][ C0] R13: dffffc0000000000 R14: 1ffff11005026ca5 R15: 0000000000000000 [ 1303.580412][ C0] FS: 00007f842c177c80(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1303.580427][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1303.580438][ C0] CR2: 000055ff97c54138 CR3: 000000007e57a000 CR4: 00000000003506f0 [ 1303.580453][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1303.580463][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1303.580474][ C0] Call Trace: [ 1303.580480][ C0] [ 1303.580488][ C0] unix_dgram_sendmsg+0x1020/0x16f0 [ 1303.580526][ C0] ? unix_dgram_poll+0x680/0x680 [ 1303.580549][ C0] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 1303.580577][ C0] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1303.580604][ C0] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1303.580623][ C0] ? security_socket_sendmsg+0x7c/0xa0 [ 1303.580648][ C0] __sys_sendto+0x497/0x650 [ 1303.580667][ C0] ? __ia32_sys_getpeername+0x80/0x80 [ 1303.580696][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1303.580732][ C0] ? lock_chain_count+0x20/0x20 [ 1303.580758][ C0] __x64_sys_sendto+0xda/0xf0 [ 1303.580776][ C0] do_syscall_64+0x4c/0xa0 [ 1303.580794][ C0] ? clear_bhb_loop+0x60/0xb0 [ 1303.580812][ C0] ? clear_bhb_loop+0x60/0xb0 [ 1303.580829][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1303.580856][ C0] RIP: 0033:0x7f842c2c7407 [ 1303.580869][ C0] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1303.580883][ C0] RSP: 002b:00007ffcb6a6bd50 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 1303.580899][ C0] RAX: ffffffffffffffda RBX: 00007f842c177c80 RCX: 00007f842c2c7407 [ 1303.580911][ C0] RDX: 000000000000004c RSI: 00007ffcb6a6be90 RDI: 0000000000000003 [ 1303.580922][ C0] RBP: 00007ffcb6a6c2c0 R08: 0000000000000000 R09: 0000000000000000 [ 1303.580933][ C0] R10: 0000000000004000 R11: 0000000000000202 R12: 00007ffcb6a6c2d8 [ 1303.580944][ C0] R13: 00007ffcb6a6be90 R14: 0000000000000031 R15: 00007ffcb6a6be90 [ 1303.580964][ C0] [ 1303.909128][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 1303.916058][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 1303.923287][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1303.933390][ T28] Call Trace: [ 1303.936737][ T28] [ 1303.939713][ T28] dump_stack_lvl+0x188/0x24e [ 1303.944452][ T28] ? memcpy+0x3c/0x60 [ 1303.948488][ T28] ? show_regs_print_info+0x12/0x12 [ 1303.953741][ T28] ? load_image+0x410/0x410 [ 1303.958604][ T28] panic+0x2d3/0x710 [ 1303.962565][ T28] ? schedule_preempt_disabled+0x20/0x20 [ 1303.968264][ T28] ? bpf_jit_dump+0xd0/0xd0 [ 1303.972824][ T28] ? __irq_work_queue_local+0x12c/0x190 [ 1303.978481][ T28] ? nmi_trigger_cpumask_backtrace+0x35b/0x450 [ 1303.984697][ T28] ? nmi_trigger_cpumask_backtrace+0x360/0x450 [ 1303.991336][ T28] watchdog+0xf4d/0xf50 [ 1303.995581][ T28] ? watchdog+0x1ed/0xf50 [ 1303.999975][ T28] kthread+0x29d/0x330 [ 1304.004109][ T28] ? hungtask_pm_notify+0x40/0x40 [ 1304.009196][ T28] ? kthread_blkcg+0xd0/0xd0 [ 1304.013824][ T28] ret_from_fork+0x1f/0x30 [ 1304.018289][ T28] [ 1304.021932][ T28] Kernel Offset: disabled [ 1304.026324][ T28] Rebooting in 86400 seconds..