last executing test programs: 2m0.805357551s ago: executing program 3 (id=852): r0 = socket$kcm(0x15, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x114, 0x5, 0x0, 0x3) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$kcm(0x11, 0x3, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x5, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xb4e}, 0x4507, 0x32, 0xfffffbff, 0x5, 0x0, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x2, 0xc5, &(0x7f0000000300)=""/197, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$kcm(0xa, 0x7, 0x88) r3 = socket$kcm(0x10, 0x400000002, 0x0) setsockopt$sock_attach_bpf(r3, 0x10e, 0xb, &(0x7f0000000080), 0x4) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000001c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000400142603600e1208000f0000000401a8001600200008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a73536138f00001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb3adbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc00"/216, 0xd8}], 0x1}, 0x4880) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, r1, 0x0, 0x5b, &(0x7f0000000580)='cg\x00\x00\x00\x00\x00\x10Wu\r\xec\x96s\x9e\xb8\x16\x13dywU)P\xef\\\xe0\xa7\x9dG\x8c\xec\t\xf4y\xa02\x8ap\xe2\x1dr=\xd9\x14\xb5\x89\x11\x9d\x15-T\xba\xca\x85\xeeS5\x06NAB\x800]\xcdY\x9a\xdd\"\x85\xdb\x0e~\xff\x95^\xd1!\x9b\x00'/91}, 0x30) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_GET_PROG_INFO(0x1c, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r2) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000000000000000000000000000000000000000000d5"], 0x48) r4 = socket$kcm(0xa, 0x2, 0x3a) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000000)={'dummy0\x00', @random="010100"}) sendmsg$kcm(r4, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) 1m56.867105411s ago: executing program 4 (id=460): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x20, 0x12504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x5, 0x34, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@map, 0x9, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYRES32=r1, @ANYBLOB="0f000000200600000000000023e727c1cca22bf5f993244522160e269e97b245b82a8ffd61aaaeb6bcbbac640acd62b679b459cf1ec7a2bd15875394a93726b8d4e8d6772fd2b69e5d20d908c11d8e28de0a173b0fe72ed6d9ad062d6b630f85c5959205a6a54b9a920b5aeb32d911aeb845", @ANYRES32=0x0, @ANYRES64=r2], 0x20) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.net/syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x5452, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) setsockopt$sock_attach_bpf(r5, 0x88, 0x67, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES32, @ANYBLOB="0f00000000200000", @ANYRES32, @ANYRES32=r4, @ANYBLOB="45e2a4160b2b5632e6ecab795ef02c6eeb8d0bc67c445538bca91f21b8861057fa469d118a9ba53a1e0f94d968b4ae4aa76967bc521ffc930ee92ae8b1092f0d7745bc0baf6b95b1bb96e6", @ANYRES64=r2], 0x20) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) r6 = socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x105, 0x30, 0xfffffbfe, 0x3, 0x20, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000000004000000040000000020000000300000005000006040000000a000000080000ee0c00000068360000100000000900000008000000690d000002000040000000000d00000000000007"], 0x0, 0x5a, 0x0, 0x1, 0x1, 0x10000, @value}, 0x28) r9 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r9, 0x84, 0x9, &(0x7f0000000380), 0x9c) close(r8) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x20000000}, 0x20) socket$kcm(0x2, 0x2, 0x0) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40010040) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r12) recvmsg$unix(r11, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r13 = socket$kcm(0x2c, 0x3, 0x0) setsockopt$sock_attach_bpf(r13, 0x11b, 0x2, &(0x7f0000000900)=r10, 0x4) sendmsg$inet(r6, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1b, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0x0) 1m36.77127695s ago: executing program 3 (id=852): r0 = socket$kcm(0x15, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x114, 0x5, 0x0, 0x3) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$kcm(0x11, 0x3, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x5, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xb4e}, 0x4507, 0x32, 0xfffffbff, 0x5, 0x0, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x2, 0xc5, &(0x7f0000000300)=""/197, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$kcm(0xa, 0x7, 0x88) r3 = socket$kcm(0x10, 0x400000002, 0x0) setsockopt$sock_attach_bpf(r3, 0x10e, 0xb, &(0x7f0000000080), 0x4) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000001c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000400142603600e1208000f0000000401a8001600200008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a73536138f00001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb3adbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc00"/216, 0xd8}], 0x1}, 0x4880) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, r1, 0x0, 0x5b, &(0x7f0000000580)='cg\x00\x00\x00\x00\x00\x10Wu\r\xec\x96s\x9e\xb8\x16\x13dywU)P\xef\\\xe0\xa7\x9dG\x8c\xec\t\xf4y\xa02\x8ap\xe2\x1dr=\xd9\x14\xb5\x89\x11\x9d\x15-T\xba\xca\x85\xeeS5\x06NAB\x800]\xcdY\x9a\xdd\"\x85\xdb\x0e~\xff\x95^\xd1!\x9b\x00'/91}, 0x30) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_GET_PROG_INFO(0x1c, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r2) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000000000000000000000000000000000000000000d5"], 0x48) r4 = socket$kcm(0xa, 0x2, 0x3a) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000000)={'dummy0\x00', @random="010100"}) sendmsg$kcm(r4, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) 1m29.527574176s ago: executing program 4 (id=460): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x20, 0x12504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x5, 0x34, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@map, 0x9, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYRES32=r1, @ANYBLOB="0f000000200600000000000023e727c1cca22bf5f993244522160e269e97b245b82a8ffd61aaaeb6bcbbac640acd62b679b459cf1ec7a2bd15875394a93726b8d4e8d6772fd2b69e5d20d908c11d8e28de0a173b0fe72ed6d9ad062d6b630f85c5959205a6a54b9a920b5aeb32d911aeb845", @ANYRES32=0x0, @ANYRES64=r2], 0x20) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.net/syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x5452, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) setsockopt$sock_attach_bpf(r5, 0x88, 0x67, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES32, @ANYBLOB="0f00000000200000", @ANYRES32, @ANYRES32=r4, @ANYBLOB="45e2a4160b2b5632e6ecab795ef02c6eeb8d0bc67c445538bca91f21b8861057fa469d118a9ba53a1e0f94d968b4ae4aa76967bc521ffc930ee92ae8b1092f0d7745bc0baf6b95b1bb96e6", @ANYRES64=r2], 0x20) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) r6 = socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x105, 0x30, 0xfffffbfe, 0x3, 0x20, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000000004000000040000000020000000300000005000006040000000a000000080000ee0c00000068360000100000000900000008000000690d000002000040000000000d00000000000007"], 0x0, 0x5a, 0x0, 0x1, 0x1, 0x10000, @value}, 0x28) r9 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r9, 0x84, 0x9, &(0x7f0000000380), 0x9c) close(r8) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x20000000}, 0x20) socket$kcm(0x2, 0x2, 0x0) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40010040) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r12) recvmsg$unix(r11, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r13 = socket$kcm(0x2c, 0x3, 0x0) setsockopt$sock_attach_bpf(r13, 0x11b, 0x2, &(0x7f0000000900)=r10, 0x4) sendmsg$inet(r6, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1b, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0x0) 1m18.364810979s ago: executing program 3 (id=852): r0 = socket$kcm(0x15, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x114, 0x5, 0x0, 0x3) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$kcm(0x11, 0x3, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x5, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xb4e}, 0x4507, 0x32, 0xfffffbff, 0x5, 0x0, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x2, 0xc5, &(0x7f0000000300)=""/197, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$kcm(0xa, 0x7, 0x88) r3 = socket$kcm(0x10, 0x400000002, 0x0) setsockopt$sock_attach_bpf(r3, 0x10e, 0xb, &(0x7f0000000080), 0x4) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000001c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000400142603600e1208000f0000000401a8001600200008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a73536138f00001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb3adbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc00"/216, 0xd8}], 0x1}, 0x4880) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, r1, 0x0, 0x5b, &(0x7f0000000580)='cg\x00\x00\x00\x00\x00\x10Wu\r\xec\x96s\x9e\xb8\x16\x13dywU)P\xef\\\xe0\xa7\x9dG\x8c\xec\t\xf4y\xa02\x8ap\xe2\x1dr=\xd9\x14\xb5\x89\x11\x9d\x15-T\xba\xca\x85\xeeS5\x06NAB\x800]\xcdY\x9a\xdd\"\x85\xdb\x0e~\xff\x95^\xd1!\x9b\x00'/91}, 0x30) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_GET_PROG_INFO(0x1c, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r2) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000000000000000000000000000000000000000000d5"], 0x48) r4 = socket$kcm(0xa, 0x2, 0x3a) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000000)={'dummy0\x00', @random="010100"}) sendmsg$kcm(r4, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) 1m8.368940664s ago: executing program 4 (id=460): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x20, 0x12504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x5, 0x34, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@map, 0x9, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYRES32=r1, @ANYBLOB="0f000000200600000000000023e727c1cca22bf5f993244522160e269e97b245b82a8ffd61aaaeb6bcbbac640acd62b679b459cf1ec7a2bd15875394a93726b8d4e8d6772fd2b69e5d20d908c11d8e28de0a173b0fe72ed6d9ad062d6b630f85c5959205a6a54b9a920b5aeb32d911aeb845", @ANYRES32=0x0, @ANYRES64=r2], 0x20) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.net/syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x5452, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) setsockopt$sock_attach_bpf(r5, 0x88, 0x67, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES32, @ANYBLOB="0f00000000200000", @ANYRES32, @ANYRES32=r4, @ANYBLOB="45e2a4160b2b5632e6ecab795ef02c6eeb8d0bc67c445538bca91f21b8861057fa469d118a9ba53a1e0f94d968b4ae4aa76967bc521ffc930ee92ae8b1092f0d7745bc0baf6b95b1bb96e6", @ANYRES64=r2], 0x20) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) r6 = socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x105, 0x30, 0xfffffbfe, 0x3, 0x20, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000000004000000040000000020000000300000005000006040000000a000000080000ee0c00000068360000100000000900000008000000690d000002000040000000000d00000000000007"], 0x0, 0x5a, 0x0, 0x1, 0x1, 0x10000, @value}, 0x28) r9 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r9, 0x84, 0x9, &(0x7f0000000380), 0x9c) close(r8) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x20000000}, 0x20) socket$kcm(0x2, 0x2, 0x0) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40010040) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r12) recvmsg$unix(r11, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r13 = socket$kcm(0x2c, 0x3, 0x0) setsockopt$sock_attach_bpf(r13, 0x11b, 0x2, &(0x7f0000000900)=r10, 0x4) sendmsg$inet(r6, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1b, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0x0) 51.987352745s ago: executing program 3 (id=852): r0 = socket$kcm(0x15, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x114, 0x5, 0x0, 0x3) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$kcm(0x11, 0x3, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x5, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xb4e}, 0x4507, 0x32, 0xfffffbff, 0x5, 0x0, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x2, 0xc5, &(0x7f0000000300)=""/197, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$kcm(0xa, 0x7, 0x88) r3 = socket$kcm(0x10, 0x400000002, 0x0) setsockopt$sock_attach_bpf(r3, 0x10e, 0xb, &(0x7f0000000080), 0x4) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000001c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000400142603600e1208000f0000000401a8001600200008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a73536138f00001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb3adbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc00"/216, 0xd8}], 0x1}, 0x4880) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, r1, 0x0, 0x5b, &(0x7f0000000580)='cg\x00\x00\x00\x00\x00\x10Wu\r\xec\x96s\x9e\xb8\x16\x13dywU)P\xef\\\xe0\xa7\x9dG\x8c\xec\t\xf4y\xa02\x8ap\xe2\x1dr=\xd9\x14\xb5\x89\x11\x9d\x15-T\xba\xca\x85\xeeS5\x06NAB\x800]\xcdY\x9a\xdd\"\x85\xdb\x0e~\xff\x95^\xd1!\x9b\x00'/91}, 0x30) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_GET_PROG_INFO(0x1c, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r2) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000000000000000000000000000000000000000000d5"], 0x48) r4 = socket$kcm(0xa, 0x2, 0x3a) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000000)={'dummy0\x00', @random="010100"}) sendmsg$kcm(r4, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) 42.912320599s ago: executing program 4 (id=460): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x20, 0x12504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x5, 0x34, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@map, 0x9, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYRES32=r1, @ANYBLOB="0f000000200600000000000023e727c1cca22bf5f993244522160e269e97b245b82a8ffd61aaaeb6bcbbac640acd62b679b459cf1ec7a2bd15875394a93726b8d4e8d6772fd2b69e5d20d908c11d8e28de0a173b0fe72ed6d9ad062d6b630f85c5959205a6a54b9a920b5aeb32d911aeb845", @ANYRES32=0x0, @ANYRES64=r2], 0x20) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.net/syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x5452, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) setsockopt$sock_attach_bpf(r5, 0x88, 0x67, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES32, @ANYBLOB="0f00000000200000", @ANYRES32, @ANYRES32=r4, @ANYBLOB="45e2a4160b2b5632e6ecab795ef02c6eeb8d0bc67c445538bca91f21b8861057fa469d118a9ba53a1e0f94d968b4ae4aa76967bc521ffc930ee92ae8b1092f0d7745bc0baf6b95b1bb96e6", @ANYRES64=r2], 0x20) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) r6 = socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x105, 0x30, 0xfffffbfe, 0x3, 0x20, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000000004000000040000000020000000300000005000006040000000a000000080000ee0c00000068360000100000000900000008000000690d000002000040000000000d00000000000007"], 0x0, 0x5a, 0x0, 0x1, 0x1, 0x10000, @value}, 0x28) r9 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r9, 0x84, 0x9, &(0x7f0000000380), 0x9c) close(r8) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x20000000}, 0x20) socket$kcm(0x2, 0x2, 0x0) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40010040) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r12) recvmsg$unix(r11, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r13 = socket$kcm(0x2c, 0x3, 0x0) setsockopt$sock_attach_bpf(r13, 0x11b, 0x2, &(0x7f0000000900)=r10, 0x4) sendmsg$inet(r6, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1b, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0x0) 35.006521624s ago: executing program 3 (id=852): r0 = socket$kcm(0x15, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x114, 0x5, 0x0, 0x3) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$kcm(0x11, 0x3, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x5, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xb4e}, 0x4507, 0x32, 0xfffffbff, 0x5, 0x0, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x2, 0xc5, &(0x7f0000000300)=""/197, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$kcm(0xa, 0x7, 0x88) r3 = socket$kcm(0x10, 0x400000002, 0x0) setsockopt$sock_attach_bpf(r3, 0x10e, 0xb, &(0x7f0000000080), 0x4) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000001c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000400142603600e1208000f0000000401a8001600200008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a73536138f00001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb3adbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc00"/216, 0xd8}], 0x1}, 0x4880) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, r1, 0x0, 0x5b, &(0x7f0000000580)='cg\x00\x00\x00\x00\x00\x10Wu\r\xec\x96s\x9e\xb8\x16\x13dywU)P\xef\\\xe0\xa7\x9dG\x8c\xec\t\xf4y\xa02\x8ap\xe2\x1dr=\xd9\x14\xb5\x89\x11\x9d\x15-T\xba\xca\x85\xeeS5\x06NAB\x800]\xcdY\x9a\xdd\"\x85\xdb\x0e~\xff\x95^\xd1!\x9b\x00'/91}, 0x30) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_GET_PROG_INFO(0x1c, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r2) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000000000000000000000000000000000000000000d5"], 0x48) r4 = socket$kcm(0xa, 0x2, 0x3a) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000000)={'dummy0\x00', @random="010100"}) sendmsg$kcm(r4, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) 24.327375958s ago: executing program 4 (id=460): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x20, 0x12504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x5, 0x34, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@map, 0x9, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYRES32=r1, @ANYBLOB="0f000000200600000000000023e727c1cca22bf5f993244522160e269e97b245b82a8ffd61aaaeb6bcbbac640acd62b679b459cf1ec7a2bd15875394a93726b8d4e8d6772fd2b69e5d20d908c11d8e28de0a173b0fe72ed6d9ad062d6b630f85c5959205a6a54b9a920b5aeb32d911aeb845", @ANYRES32=0x0, @ANYRES64=r2], 0x20) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.net/syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x5452, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) setsockopt$sock_attach_bpf(r5, 0x88, 0x67, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES32, @ANYBLOB="0f00000000200000", @ANYRES32, @ANYRES32=r4, @ANYBLOB="45e2a4160b2b5632e6ecab795ef02c6eeb8d0bc67c445538bca91f21b8861057fa469d118a9ba53a1e0f94d968b4ae4aa76967bc521ffc930ee92ae8b1092f0d7745bc0baf6b95b1bb96e6", @ANYRES64=r2], 0x20) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) r6 = socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x105, 0x30, 0xfffffbfe, 0x3, 0x20, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000000004000000040000000020000000300000005000006040000000a000000080000ee0c00000068360000100000000900000008000000690d000002000040000000000d00000000000007"], 0x0, 0x5a, 0x0, 0x1, 0x1, 0x10000, @value}, 0x28) r9 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r9, 0x84, 0x9, &(0x7f0000000380), 0x9c) close(r8) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x20000000}, 0x20) socket$kcm(0x2, 0x2, 0x0) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40010040) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r12) recvmsg$unix(r11, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r13 = socket$kcm(0x2c, 0x3, 0x0) setsockopt$sock_attach_bpf(r13, 0x11b, 0x2, &(0x7f0000000900)=r10, 0x4) sendmsg$inet(r6, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1b, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0x0) 14.164072045s ago: executing program 3 (id=852): r0 = socket$kcm(0x15, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x114, 0x5, 0x0, 0x3) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$kcm(0x11, 0x3, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x5, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xb4e}, 0x4507, 0x32, 0xfffffbff, 0x5, 0x0, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x2, 0xc5, &(0x7f0000000300)=""/197, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$kcm(0xa, 0x7, 0x88) r3 = socket$kcm(0x10, 0x400000002, 0x0) setsockopt$sock_attach_bpf(r3, 0x10e, 0xb, &(0x7f0000000080), 0x4) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000001c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000400142603600e1208000f0000000401a8001600200008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a73536138f00001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb3adbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc00"/216, 0xd8}], 0x1}, 0x4880) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, r1, 0x0, 0x5b, &(0x7f0000000580)='cg\x00\x00\x00\x00\x00\x10Wu\r\xec\x96s\x9e\xb8\x16\x13dywU)P\xef\\\xe0\xa7\x9dG\x8c\xec\t\xf4y\xa02\x8ap\xe2\x1dr=\xd9\x14\xb5\x89\x11\x9d\x15-T\xba\xca\x85\xeeS5\x06NAB\x800]\xcdY\x9a\xdd\"\x85\xdb\x0e~\xff\x95^\xd1!\x9b\x00'/91}, 0x30) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_GET_PROG_INFO(0x1c, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r2) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000000000000000000000000000000000000000000d5"], 0x48) r4 = socket$kcm(0xa, 0x2, 0x3a) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000000)={'dummy0\x00', @random="010100"}) sendmsg$kcm(r4, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) 5.148069464s ago: executing program 1 (id=1542): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd61, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x48) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r0, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000040)="76389e147583ddd0569ba56a88a855", 0x0, 0x1c00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x2204, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={0x0, 0x6}, 0x104101, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$inet(r1, &(0x7f0000000840)={&(0x7f0000000680)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000000800)=[{&(0x7f00000006c0)="b196b4363d2d9922fe8b9cfe882c32793abdc8d066cfb35f0090f05fe4dad39e0d2e8e4d8c854776682353c2d85cf455dfd94c688c30515c4c7b9021988c78484b9b337bf5548d71ba715b0278c9d6d3aeb5ab3903", 0x55}, {&(0x7f0000000740)="3a39ef5793102c55d16031015e11708d1744552e63f8ee", 0x17}, {&(0x7f0000000780)="dc8cadb77152de884bb1206cd3e9c460e52fde1ba8a825b72b27cbdd7f79a2bf4f8eb4253fc1399231fb27b4b2c6fc11d1bd344b5c28c70f17357d", 0x3b}, {&(0x7f00000007c0)="f8d8ba2da6568a90080b8e3bb2004355ac9840029a5d8180181c2eef4ea3cff0", 0x20}], 0x4, &(0x7f0000001980)=[@ip_retopts={{0xac, 0x0, 0x7, {[@rr={0x7, 0x7, 0xd5, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @ssrr={0x89, 0x17, 0xc3, [@empty, @rand_addr=0x64010102, @loopback, @dev={0xac, 0x14, 0x14, 0x34}, @dev={0xac, 0x14, 0x14, 0x1e}]}, @timestamp_prespec={0x44, 0x14, 0x76, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0x1c}, 0x7}, {@rand_addr=0x64010100, 0x5}]}, @cipso={0x86, 0x68, 0x1, [{0x5, 0xc, "974bb16866bab5ba5b0f"}, {0x7, 0xd, "9cf55bb823755d9369d96a"}, {0x1, 0x5, "ca90d3"}, {0x0, 0xf, "29d75f843f1c4f31d4725c0122"}, {0x7, 0x2}, {0x6, 0xa, "3f2020e6c282d05f"}, {0x0, 0xc, "65b92c193a70f34e9f72"}, {0x2, 0x10, "fcd635bbc7311958140262b8a09a"}, {0x2, 0xd, "26711d49ef7a6498c264fe"}]}]}}}, @ip_retopts={{0x58, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x14, 0x16, 0x3, 0xf, [{@dev={0xac, 0x14, 0x14, 0x27}, 0x10000}, {@empty}]}, @lsrr={0x83, 0x1b, 0x20, [@rand_addr=0x64010100, @remote, @multicast2, @dev={0xac, 0x14, 0x14, 0x22}, @dev={0xac, 0x14, 0x14, 0x19}, @rand_addr=0x64010102]}, @lsrr={0x83, 0x17, 0xc7, [@broadcast, @multicast1, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @local]}]}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@noop, @lsrr={0x83, 0xb, 0xbc, [@empty, @multicast1]}]}}}, @ip_retopts={{0x40, 0x0, 0x7, {[@lsrr={0x83, 0xb, 0x58, [@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast]}, @timestamp_prespec={0x44, 0x24, 0x3f, 0x3, 0x0, [{@rand_addr=0x64010101, 0x62}, {@local}, {@private=0xa010100}, {@private=0xa010102, 0xed}]}]}}}], 0x168}, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0xcd, &(0x7f0000000040), 0x1}, 0x0) recvmsg$kcm(r1, &(0x7f00000004c0)={&(0x7f0000000180)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000980)=""/4096, 0x1000}, {&(0x7f0000000380)=""/220, 0xdc}], 0x2, &(0x7f0000000580)=""/247, 0xf7}, 0x10000) 4.304096572s ago: executing program 1 (id=1545): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8927, &(0x7f0000000080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0xb0}, @exit], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 4.228747779s ago: executing program 2 (id=1546): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x40, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x2, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000020000000100000000000001e5ff0000080000000000000001000084060000000000000001"], 0x0, 0x42, 0x0, 0x3, 0x0, 0x0, @void, @value}, 0x28) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x1509, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0x62, 0xfe, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736edec6f", &(0x7f0000000440)=""/254, 0x2f00, 0x0, 0xff, 0x194, &(0x7f0000000980)="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", &(0x7f00000007c0)="4c87fe555ceb79157b1e507ff4d3cc053321e42ae89f596427188b4877ab8f1776c0685784f1174c6401ecc1dd6e2a77bc79238f87ad9215a92ff203a30099e77c543e702b4a4438d358616381745f24f74e585498af129c4b173b242f445b08135f7fa40eb7ba78160ff4f0c80e1b324d0c234cb7f43a3ff9e9535dc16000c797113a039f4508a09144090000009f38a90a24f173b3e68377e4272950a80cfcd3aa6850e917bc7e57370060f5e6db941d67fc98a1e98103830b821657438325578d2af822dd4fc13ea7a7eef8d9be4e715aec8fd6cadc41c8da5ce9da2b9e1559d92a1936fc2b3a00000000000000000072200e10ba6269b634f10f7098c65ba67ba65c0e2687637e131fb8d5ba6c12c09c8356853c434a44ff0878e496dcf9a4f5ca02c293279948f37ebb28843f92c87c057a3b410e04418557d5deda7ddd3bd1d384d64ec980187e8b64a0696571a49e847db79349c9b3c3fab5f1f977bde4d802d9026ae0c11744eb1525c5195fd215d7a432497f35c2f2cfcd2b6336b26dfef0cb968c910ea2af5cdd4d58cc08535d5514", 0x2, 0x0, 0x10000}, 0x24) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="1400000023000b6c8cfffdfccabb00f90429fc60", 0x14}], 0x1}, 0x2400c000) socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2c}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000000)='Gb', 0x1c}], 0x1}, 0x480c0) 3.548883531s ago: executing program 1 (id=1548): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x3, [@func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0x6}, {0xc, 0x4}, {0x4, 0x2}, {0x2, 0x2}]}, @int={0x4, 0x0, 0x0, 0x1, 0x0, 0x68, 0x0, 0x7e, 0x7}]}, {0x0, [0x0]}}, &(0x7f0000000080)=""/168, 0x57, 0xa8, 0x0, 0x3, 0x0, @void, @value}, 0x28) r1 = socket$kcm(0x29, 0x5, 0x0) r2 = gettid() r3 = openat$cgroup(r0, &(0x7f0000000180)='syz0\x00', 0x200002, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000001c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x50, &(0x7f0000000280)=[{}, {}], 0x10, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0x87, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x1, 0x4, 0x7, 0x3000, 0xffffffffffffffff, 0x8, '\x00', r5, r0, 0x1, 0x5, 0x3, 0xd, @void, @value, @void, @value}, 0x50) sendmsg$kcm(r1, &(0x7f0000001c00)={&(0x7f0000000540)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000000900)=[{&(0x7f00000005c0)="db74c998cd8a5af411e617d5a6e87902851df853247f9b976c8362df591d9891bb99e0cbf1f31df5484a5141cf787ed4fc3da502ab2b91287a1abbde1daee33a38f05fb05fbf0ecea8ae2175623bbced94880cac5b7c7a1738375b7dd7ed530fef06badddbb17409e58166722b51f9cafdc10c1ee9db76108d91c2a133182172e4cea5fa2c14b6e94d2d95378f39a56d61180e336a1cf2766673d94798cfddb159ab47379ad338b6d59a472d28dcc038a2a6cae9a18b7a6a219e7eade689a2ecd0fde2ae36f6ce8d63d1ae41da4078fe4dfbb1ef417c3fe1a95baf7e1eeea85583ad9467aada1e36fd", 0xe9}, {&(0x7f00000006c0)="beb6d84daa86e3dc45772bdf65abaaa9f6b415503e9474dcd86d2d07fcaa1efa2c94d7a97869cc72ad108afe1da5fb434da0b43326bf354aa7a26ad8f2c06f45fe08734ebf2c218452c8cfb8497f5637705949a97cdf92569d25b251b1823366c475e33b2a0a6ecb1e118576c9cfa5d1fc74e06b91a837dd182fd76b6f625278c85f1b158b47bb3e0326448612251d3fdf272ec450f7175564ab6049b92b3a2b586a1f6a84f6d3aefe2e16ceea81f5c0cc7707caea26acfd3d6c473e2507d7c5c85334c1f2b5d600fd8540d26bf1fc41ebad", 0xd2}, {&(0x7f00000007c0)="e8c0b488d75f6432388c1dae82ba1cb7e5ed10f195557271c66dc695e16565218b6b281a216119c084376d628535789b36af515fc478076041ac0a3c9416ff6a79e28f4e803919aa566a18f39becd8d205e17f2c0d0a7b2b58abdf504545d84366febe4966a779b399ef1a477a3022a7127c3013e3a0b5ab495f720721ec352f6dbb1720ddd17310f9d7c2dbf03e546bc63c8d748c6127afb2c24874fd5ebeb0f4a23b567906965ce0a44cba757766898afc5b5db4c744", 0xb7}, {&(0x7f0000000880)="ac9660f1d6af6c13ac31211b8cd16367ecb75efb2b02f6f9c380f5d3db64750957d93ba5575be3a6336e0dfdbe7d0bf758fc88659b53f6d30779b78380768084af", 0x41}], 0x4, &(0x7f0000000940)=[{0x78, 0x10f, 0xe9, "2892e478e460c306aa8ffee7edf6f5dabf35cff49eeb5ddf1925a77ea3a006fdfcff3a4ec77d30bfd6440d98c78d99ccd03d3f368e23e36e4a24977b4ea1a86ed5e6fccdb9a63563841bc9ea5bb8280351a19587bcd6b4b41776fa9a6e4cd999861fc844"}, {0xe8, 0x116, 0x4, "63170d08efcfb3d03c7a270b31199d74811c1e28e06e97bc134a018f4cbc371fbba3ce76f1407ce8dfa315fba2935dd1ceaceedc4ca7d7287c664f4be077243c5824f2ed6ea99d25bfd4a3fec78db9055f173fb40aaeb103d0f0657501da650b289bd7460108780a944c97e83347855d98dbcdccbc77d061c9aec544f384c78e23ddf3cdddf4f7448bd4eb375123f3e2c8f94d0fce32ee6b83eb97d9f6f8a14b7111444fc0a9c8dc77196b56f048a11830203229553a7895bf0bde483b76692595c7c974070438ee292dfc438b4cbdcf645f952372"}, {0xb0, 0x102, 0xc, "ea5a82cd9b85a166eaeb5b7b2d1d944445b2d45cb13fa2c3c5a6accc6d0b34baa02e67852e651e3f1d70619ca208d50cd079923e676bea808dd9ec83397ade218b58b33fdfd9119ea29881c865678d8ad3966963c91282ca5fcf22051dbfb67dadfd342224eb3d263bb0b6f25a2abd2b736b6c1d9150b0a2efe7879e7c390364d11f60a13fde1fbee711434675eb5ee3ea77c78455733f4622c1234a5bf6"}, {0x18, 0x101, 0xa0, "3e4b89e1"}, {0x50, 0x115, 0x4, "e731a0fe9512c524758fad01a5e15a7f301db8f583c905b35dc9a24becabbfd53a9a602acbad162288f96ecfad955b3bf279ec46f9f4751ceec352daa3582fc1"}, {0x1010, 0x6, 0x7, "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"}], 0x1288}, 0x4010) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000002280)={&(0x7f0000001c40)=@nameseq={0x1e, 0x1, 0x3, {0x41}}, 0x10, &(0x7f0000002140)=[{&(0x7f0000001c80)="6099e4af24e988720306a61c17c36de24a7516ee31e1c3736d5016beb0203561f4d4629dc3783e569abdb3dcbcc6eea8341a1d87498714d69ab8f181ecc58acbb08c6161a309e78ce3a2bb5dcad789afe4119ab1a32df80d8a2e0c54aa542e9d02207858c4aef599d64ca7d56700d638907fd744b2f1383056d66569d913b372ae92b54e7a9ebd59abeff46da085d6ebac959e71613b2841e428bf5c680d282357a3", 0xa2}, {&(0x7f0000001d40)="28c1c777ba091a8911a828e7d8183e55dd2985c225eb7be36f54c5676967405861ada3ea6a1a29b095f5cb76e6ce597815e173beaa9d7a0cd8c97aaafdb9c939923988948f12584bbc75f234cb33e7727855c79db6c2857f31783a524475add079fe67b70e9389cb173af858f00297be422c8bbb0e7635dc933ec07aff9c1fee42d5af40a6b5e31a461c4272a3c6a68f74f67d5c5670236dc5714e27de4429c639679f2c3499bdfed82fa3386f4a8c323c316459673f7177152682e4db132643e12722e9b8cd04c6d7051377528d31ccae40d221de5a27", 0xd7}, {&(0x7f0000001e40)="96f284644d2e3582cc55c8f9685d4c81a531d2421c9ff6f2f4cd1495192ca5eb0f51042b5bb6358205471adf15db", 0x2e}, {&(0x7f0000001e80)="12ce64793a4e7b22c1576fa26f1a61c50b468c61c85111a5dedf15f4e200a9349fcc627c9e19f72ab39d8dfb00a229f6a57b6139f6401801bbc9d90332a7902e07bd488f48d31e501e735975f2312297c63af632ad1cca6d9c9d8656c1a859cf928393740ec290dbf0255fcd0acba5dcc26fc5fb0be2b37cdd85f636a70377f2b88bc8d1", 0x84}, {&(0x7f0000001f40)="585ec0c4a906acaaf56d86af5f1a257bff719bd7bcaece672a598ca2cb0ca86f9d7d0676453ab17b903c1d1f6e75baaf356bff845735e4f770f7fac9450806559473ff767d25fb39fae7d9f051aa0b05db8fd4bb16edb0bc63b00f0caed5430b1c84464ae62de71732319334e6268782d59789725ff0b654cf21ebb5ce89ae430c34536e896a0a6026a58b2628282fe7516f682dd6a24653f145e38b3f520082677b4449ee08957257c6541adc1b5b72a31aa70a2e81d78dd68c43ecc2751f81fc2a7a254211", 0xc6}, {&(0x7f0000002040)="d1d3cd20b70a9b960a288ee2869b59096fdf784c10d7a18d9287186ac5166ec038fac3ebd6bb657a460a4e0f62ff961bc390c93d10ed5671277b00030f717e22ef71550263f8a65ae871180f657c9fdfc0a16e22d86fed18b6332157ed2609b96ecf3972440a0f26ac1090415c74aad4803fb4deb1a2456a44e13560ea73a57170941ab887ddb6963a28e391c4413eab9dae807fc5a088613100f828dc5ffee341f538d3e73de337501d0449be5d8b50a27c1f662257ecdc3dd7fae975163839aa3511f9afb0d12cc4015834616f1dd77932bcf3d768020930c990efead0dc4576a931b974d4cd", 0xe7}], 0x6, &(0x7f00000021c0)="a63a8a3aa32a0971bad30d5040b7afc037d36ce7dedab79fa3f7f725c8160990000535dfddb5354c086e332d5ded7acafdfde8606550fc40409e217c806da77cfa6a6f4a0d8c9b776205cee51817d3064fb18cf63c9625c9c07d28ee113b007e32aa9f9f85df38019dd68249c4ce41e70b4188136619b7d31b3ea2dc89b53c8ae20046f69c3d02444834d5e6ff4b0bdd9a0d02516c43453ac0c1641f23f03a18dd6462655dfd3965d9d74d36", 0xac, 0x8000}, 0x0) r8 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000022c0)={[{0x2d, 'memory'}]}, 0x8) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002300)={0x2, 0x4, 0x8, 0x1, 0x80, r7, 0x0, '\x00', 0x0, r0, 0x3, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r10 = perf_event_open(&(0x7f00000023c0)={0x0, 0x80, 0x10, 0xbd, 0x3, 0x7, 0x0, 0x100000000, 0x8000, 0x7, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000002380), 0x6}, 0x8000, 0x9, 0x1ff, 0x4, 0x4, 0x200, 0x41, 0x0, 0x8, 0x0, 0x8}, r2, 0x6, 0xffffffffffffffff, 0x3) r11 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000002440)={r4}, 0x4) ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, r11) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002780)={0x11, 0x16, &(0x7f0000002480)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r7}}, @ldst={0x0, 0x3, 0x2, 0x0, 0xa, 0x0, 0x8}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffff7}}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, r7}}], &(0x7f0000002540)='syzkaller\x00', 0x0, 0xdc, &(0x7f0000002580)=""/220, 0x41100, 0x65, '\x00', r5, 0x0, r0, 0x8, &(0x7f0000002680)={0x8, 0x1}, 0x8, 0x10, &(0x7f00000026c0)={0x4, 0xb, 0x400, 0x1}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000002700)=[r7, r7, r9, r9, r9], &(0x7f0000002740)=[{0x0, 0x1, 0x2, 0x2}, {0x3, 0x3, 0x7, 0x6}, {0x4, 0x3, 0x2, 0x6}], 0x10, 0x1000, @void, @value}, 0x94) r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002a00)={&(0x7f0000002840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x98, 0x98, 0x6, [@func={0x4, 0x0, 0x0, 0xc, 0x1}, @func_proto={0x0, 0x8, 0x0, 0xd, 0x0, [{0xf, 0x2}, {0xa, 0x3}, {0xb, 0x1}, {0xd, 0x3}, {0x1, 0x2}, {0x1, 0x3}, {0xc, 0x3}, {0x5, 0x5}]}, @func={0x2, 0x0, 0x0, 0xc, 0x4}, @fwd={0x10}, @var={0xc, 0x0, 0x0, 0xe, 0x5, 0x3}, @type_tag={0x10, 0x0, 0x0, 0x12, 0x2}, @type_tag={0xc, 0x0, 0x0, 0x12, 0x4}]}, {0x0, [0x0, 0x5f, 0x61, 0x0]}}, &(0x7f0000002900)=""/193, 0xb6, 0xc1, 0x1, 0x101, 0x10000, @value}, 0x28) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000002a40)=@base={0x10, 0xd0, 0x7, 0x8, 0x4019, r9, 0x3, '\x00', r5, r12, 0x4, 0x2, 0x5, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000002ac0)={0x91, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002b00)=r14, 0x4) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000002b40)={[{0x2b, 'blkio'}, {0x2d, 'freezer'}, {0x2d, 'devices'}, {0x2b, 'blkio'}]}, 0x20) getpid() r15 = perf_event_open$cgroup(&(0x7f0000002bc0)={0x2, 0x80, 0xff, 0xf0, 0x9, 0x20, 0x0, 0x3, 0x902a4, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000002b80), 0x4}, 0x400, 0x5, 0x5, 0x4, 0x1, 0x1, 0x9, 0x0, 0x3, 0x0, 0xc58}, r3, 0x4, r10, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r15, 0x40042408, r11) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000002c40)={r8}) ioctl$sock_kcm_SIOCKCMCLONE(r16, 0x89e2, &(0x7f0000002c80)={r8}) r17 = socket$kcm(0x29, 0x5, 0x0) recvmsg$kcm(r17, &(0x7f0000003180)={&(0x7f0000002cc0)=@tipc=@name, 0x80, &(0x7f0000003000)=[{&(0x7f0000002d40)=""/123, 0x7b}, {&(0x7f0000002dc0)=""/149, 0x95}, {&(0x7f0000002e80)=""/192, 0xc0}, {&(0x7f0000002f40)=""/27, 0x1b}, {&(0x7f0000002f80)=""/55, 0x37}, {&(0x7f0000002fc0)=""/31, 0x1f}], 0x6, &(0x7f0000003080)=""/200, 0xc8}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000031c0)={0x2, 0x4, 0x8, 0x1, 0x80, r7, 0x1, '\x00', r5, r0, 0x0, 0x2, 0x3, 0x0, @void, @value, @void, @value}, 0x50) r18 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000003500)=@bpf_lsm={0x1d, 0x21, &(0x7f0000003240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7a}, {{0x18, 0x1, 0x1, 0x0, r13}}, {}, [@jmp={0x5, 0x1, 0x4, 0x7, 0xb, 0x4, 0xfffffffffffffff9}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x2}, @map_val={0x18, 0xb, 0x2, 0x0, r9, 0x0, 0x0, 0x0, 0x7fffffff}, @map_fd={0x18, 0x0, 0x1, 0x0, r13}, @alu={0x4, 0x0, 0xd, 0x1, 0x3, 0xffffffffffffffc0, 0x12}, @call={0x85, 0x0, 0x0, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xd468}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000003380)='syzkaller\x00', 0x6, 0xbe, &(0x7f00000033c0)=""/190, 0x40f00, 0x5c, '\x00', r5, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r6, 0x0, 0x3, &(0x7f0000003480)=[r7, r9, r9], &(0x7f00000034c0)=[{0x0, 0x1, 0xf, 0x3}, {0x0, 0x4, 0x7, 0x1}, {0x4, 0x1, 0x0, 0x7}], 0x10, 0x49fd, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000003980)={r18, 0x0, 0x98, 0xc9, &(0x7f00000035c0)="bf01c11f60a76861f0c97d44a6ddb96dbbb7a5a9b29d7b9556a33b9ce0cb315fa1171e8f260d0efb67cc1e8467579b13ad36ac892fa3d5aa8ab62b8b93c319a8de371cd8d2348994699faa709c0a46a56f92f27ed8dd9b54c7885fd60c6e4044b9fc3d3626658e5d6903b703350d523e4b56f430209958cdb6a916beee210645d9dfabb633d7a2cc5f73a89be03f34f4a5019f5263f87d06", &(0x7f0000003680)=""/201, 0x2, 0x0, 0xc3, 0xff, &(0x7f0000003780)="0f91e25bdb44803c407ded2b610e222e971e8c1a97f4b32d430b329c2020d664fb3b0627eb66662c37b7c41bb14c691cfc1deb237094d8343e3366f8e987c5f27ee931db7e5275a8937c8ba497309eaaf0bc90bb1a58461c325f299f356a8641386ecd28bfcab16132151fd1d8d452222fd29e11709a6036d213d04382b8b2cb2466a8d1453e33d29986eeec0ed17a854d0cc321f7c58057dcd8b3935d81aca5b5fa095a2b046c96858ddfc944192d381e0e4a40a8239899b88dbe509ecf0baf3451dc", &(0x7f0000003880)="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", 0x1, 0x0, 0x2}, 0x50) 3.54817225s ago: executing program 2 (id=1549): r0 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r0, &(0x7f0000002500)={&(0x7f0000000000)=@generic={0xa, "89ccd083e102efdc507261caa4389d8101fc3690a86c49c810221a09d1dc6259e4c7f375b3ae905c714d90d3cb47469313ff14bd2cb8f42b336ca3e70b837b5a25eec11b23c617ad83440d8c9daa12e5165266b1acdb7211b570fdb54e504d61b1840825c5acebe355c7e7bd2a6963a7557dc212dceecfcfc709595b9a21"}, 0x80, 0x0}, 0xe07e872420dfefca) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.empty_time\x00', 0x26e1, 0x0) close(r1) socket$kcm(0x23, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='bcache_read\x00', r1, 0x0, 0x4}, 0x18) perf_event_open(&(0x7f0000000740)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0xb}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$kcm(0x2, 0x5, 0x84) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x5, 0x84) close(0xffffffffffffffff) socket$kcm(0x2, 0x3, 0x84) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x8}, 0x8080, 0x2, 0x0, 0x0, 0x7fffffff}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000b00)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYRES64=r2, @ANYRES64, @ANYBLOB="13"], 0x20) 3.196153311s ago: executing program 2 (id=1551): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x14, 0x4, 0x8, 0x10006, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000001000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000200), &(0x7f00000003c0)=r1}, 0x20) r2 = getpid() r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x57, 0x1, 0x0, 0x0, 0x0, 0xf0, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) 3.195146319s ago: executing program 0 (id=1552): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7ff1, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x25346c7d6a446d0f, 0x2, 0x80, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010080f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000020000008500000023000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000ff030000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='inet_sock_set_state\x00', r2}, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r4 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r4, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000080)={0x0, 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2.968688987s ago: executing program 0 (id=1553): perf_event_open(0x0, 0x0, 0xf, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x1000, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0xfffffffffffffffe, 0x9}, 0x14185, 0x20032, 0xfffffbff, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890b, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071115f00000000008510"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f903", 0x11}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd4242"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x84, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.848339668s ago: executing program 2 (id=1554): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$sock(r1, &(0x7f0000000740)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x1100}, 0x80, 0x0}, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x18, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xf9a, 0x0, 0x0, 0x0, 0x40}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000380)='syzkaller\x00', 0x5, 0x84, &(0x7f00000003c0)=""/132, 0x41100, 0x2c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000480)={0x2, 0xd, 0x5, 0x1}, 0x10, 0x0, 0x0, 0x5, &(0x7f00000004c0)=[r0, r0, r0, r0, r0, r0], &(0x7f0000000500)=[{0x5, 0x1, 0x10, 0x2}, {0x0, 0x2, 0xc, 0x2}, {0x1, 0x3, 0x0, 0x8}, {0x3, 0x3, 0xe, 0xa}, {0x1, 0x4, 0x5, 0x7}], 0x10, 0x1, @void, @value}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000640)={r1, r2}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001500)}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0xf, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xb}, {0x65}}, [], {{0x7, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r0, &(0x7f00000000c0)="0910b18317555dc265f76547af966b20d13b51a17424015d4d7e0489ad4fb038adb1c61deb819fa55d6db9e6c20fd749059dbe865281c6a170e0d730be42b08d66995da9ec9a2fc61af5db293eb846352306b7d8551e0e0c21969fdcbbc277551d591a92ce5299ff7a8979acd177204b40ca97be506834a0f93798e797d62b790128f007db80066e5bdf5b5fae4be723a93a2223c26cd8bf4d2cef37e4", &(0x7f0000000180)=""/218, 0x4}, 0x20) 2.604644483s ago: executing program 1 (id=1555): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0xf0, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x0, 0x0, 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1c00, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={0xffffffffffffffff, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r3, 0x84, 0x9, &(0x7f0000000380), 0x98) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x55, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0xa892, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b73, 0x1, @perf_config_ext={0x1, 0x1}, 0x14105, 0x32, 0xfffffbff, 0x6, 0x2, 0x6, 0x5, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$kcm(0x10, 0x400000002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$cgroup_subtree(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="33fe0000240013"], 0xfe33) r5 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r5, 0x1, 0x41, &(0x7f0000000040), 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000280)='syzkaller\x00', 0x5, 0xc9, &(0x7f00000006c0)=""/201, 0x41000, 0x60, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x6, 0x1}, 0x8, 0x10, &(0x7f00000005c0)={0x5, 0x10, 0x5, 0x9}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000840)=[{0x4, 0x1, 0x10, 0x7}, {0x3, 0x3, 0x7, 0x7}, {0x4, 0x1, 0x10, 0x1}, {0x2, 0x5, 0x8, 0x4}], 0x10, 0x400, @void, @value}, 0x94) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000580)={&(0x7f00000001c0)=@in6={0xa, 0x4e21, 0x4, @mcast2, 0x9}, 0x1b, 0x0}, 0x4000080) sendmsg$kcm(r4, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000940)="ecf7a033b5fa4cf5c1af1423e093be7f37a2b6f9af87c769767719315c70354ed5e112bf452ac9af54b6c2373f0775944fc491803273213ab5904a4651eaa26f7e508104b2238df942057cf607aaa26d1b47eef5a2cedd294143c0a179fe9a627b3c75b09677ab2b2c7277a5db8a714231f1bc1cc85ca6e5502614332b058b43d0c01570d6c86b2ecc6e2707cffec7a5c074fad042476411d2b854f14d34bd766595049149ba79dec61ab34a33d1e690633b10e7", 0xb4}, {&(0x7f0000000a00)="77f15122df3fc9e0d73222a23bdf88772ad799b37ed000cd71d78b43722901d66cbe99419c276c975eaf9c2747", 0x2d}, {&(0x7f0000000a40)="aedf3c8ca5af6eac187bbcacd85f18781a67f3664b29ff2973105ccfc9ebc3f803d5f6d549a7010357c62e3e5fba01832da4a93e1f2e2eeaba26a6d802c795979ea4529bcaf4ec31c8e38a10b8ed862ed7b6a97388687bfe5a5031ebd14185a6b38da1f8500f5e568e511a9055925d879f6a1d0951b934edea8e5189e66856eb4e3a0619405f7706abaaf7bac391ba40769623ff41894018aa2aa6c52e1941e5c1b2cbc6a9cc9a993be5b5e2f1dd1e3a5963bbc49e7050bce5089ecec0938b8f8281258f2990b7b5c2d652940554b70a4a9c3f16e267087439d8dad195a72d7602b09ddc70675be292ff5b70f37d19c8", 0xf0}], 0x3, &(0x7f0000000b80)=[{0x20, 0x11, 0x9, "6ce00485e04aae33175b700af5d74e"}, {0x70, 0x9d, 0x7, "22462a311bb983e1abce6e88bc37574fb0006c5d41efd979ceed6e418163ac1983ba0d4209557cfbd34cb3d419f79a4a491fffaf723b32ef0daa77ea27b816683df99288eaa909cedd9686acf58ac9124285f24e4650df5248"}, {0x40, 0x10e, 0x3d686d6a, "bf61c5543876b195c5dc8dbdb600ee5a69952c595a3f49fed4686ebb27f7a13b7c9a52fd1217946f09188c66b99514"}, {0xd0, 0x104, 0x9, "d72df694708e70b5d0c542c609282a1a31fe4c032a7c00e236bd13e5f16dd84ba52a95f79af14d12c729c5d00876f39eb25314cc46bce84895c5dc388052b17a5c4a1ecad16ba520e22534f5d215082498ac5f0153af512c39680e0440b85bd431007e70ec8868fbeabe9373f88d1dc18c44e96511a430adb94481ed58bd05c9273b44de8742c54638672f0b69eefb0ac820e255bfba452adb0fd9588488a3b3c605cbd80e8ab34d560110c31427e289799ac95b73ada10da4d36cd054"}], 0x1a0}, 0x10) recvmsg$kcm(r5, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x40003062) 2.458696959s ago: executing program 0 (id=1556): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0xfffffbfc, 0x3, 0x2, 0x0, 0xbffa, 0x0, 0x0, 0x0, 0x2005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000003c0)="d5f0150fdc7da4a10fb473e5c26750dc62503c668ce240a7733af3f9ea3134ecbfb1693cdd14f54161708c24e32816891ff553a0714185cb4e32be55c9b5cab0f7fcc398960fe2a32ba708000000558f2c67bf93ea30db424fe690e36af1a2aa4aaf8c31f3ca39b177f680f2c7611b8ffd9a", 0x72}], 0x1}, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000a689f24c93a05c38f642b6e1724de1e2776cc8865b6273d486f0ca3bc2d5032802aea9331b93f4b262d872650d38b407262fba997c16ea97bd5d519f35db49933efceceed2e94b80124b68693112c2f6a60ce97875515f74a00e7af9865ae65af38accc9de83c55dfb3f437f2ca73beb0cb16007edf0c0b45e1f86af051c0f110928c2655aba96887286c146d92d7909351de7e189e510a29b3b76f78079a3313ec3f5ebcc", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x10) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup, 0x11, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) sendmsg$kcm(r0, &(0x7f0000000600)={&(0x7f0000000100)=@in={0x2, 0x4e21, @remote}, 0x80, &(0x7f0000000000)=[{&(0x7f00000006c0)='@', 0x1}], 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000008400000000000000720000000000000020000000000000018400000008000000eeb4fe8ba15e3999ef000000000000008e3ecefddda29f5160b4f203f1fac8aa95b7408da0585cdc3df4dd7859925442477f9195d03f2c8282cd67"], 0x38}, 0x41) 2.362289567s ago: executing program 0 (id=1557): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={0x0, 0x2}, 0x104141, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES32], 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = getpid() r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x1b, &(0x7f0000000000)='/proc/t/c+\x0fG\xf9aK\fX\a0\x04\x00\x00\x82q\xee\x00\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair(0xa, 0x3, 0xff, &(0x7f0000000180)) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000780)="80005b020eaa4da2", 0x8}], 0x1, 0x0, 0x0, 0x900}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r5) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="1400000034000b45d30000000000000002d25a80", 0x14}], 0x1}, 0x810) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="8dffffffff8d"}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r9, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaf, 0x0, 0xfffffffffffffe86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x73) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r9, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001940)={0x6, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="050000ceb3945f0800000077300000"], &(0x7f00000002c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', r10, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x407, @void, @value}, 0x94) r11 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r8}, 0x8) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="1e00000003000000010001002000000084400900", @ANYRES32=r8, @ANYBLOB='\a\x00'/20, @ANYRES32=r10, @ANYRES32=r0, @ANYBLOB="0200000000000000040000000700000000000000000000002728ebf0599a9e6515f0682f7130204c4850a6f9edbd938463c4c6eeb27ea3", @ANYRES32=r11, @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xc, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r13, 0x2000000, 0xd, 0x0, &(0x7f0000000600)="c9f7b986000000000000000000", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.988266354s ago: executing program 2 (id=1558): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000040)=r0, 0x4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x6, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) recvmsg$unix(0xffffffffffffffff, 0x0, 0x12120) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0xf0, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14905, 0x2e, 0x6e2b, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1c00, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x3) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0xfffffbfc, 0x3, 0x2, 0x0, 0xbffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)}], 0x1}, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={&(0x7f0000000100)=@in={0x2, 0x4e21, @remote}, 0x80, &(0x7f0000000000)=[{&(0x7f00000006c0)='@', 0x1}], 0x1, &(0x7f0000000040)=[{0x18, 0x84, 0x0, 'r'}, {0x20, 0x84, 0x8, "eeb4fe8ba15e3999ef"}], 0x38}, 0x41) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="660a000000000004000000000000000095000000000000002adcb05c829f4ba3d1bb03a3c688d592dfc4b63b11236db1cba948fca449919ea2b2803d90a5307f30416e0ee9d5fefa02d4054dbe7e689b065ac34010e36f0d651906b89d7fc856f702f11e44cc0189a2b70c678a5b2441eecf3162f7f269343672c3c40c332df0ef294e2c409b7973dc0f8a63f4a73e273dfbedc4e2b9b3807aa7cf5cf0cc85a63b9ffe21040000000000000074020f175925b1ef062e08016e2e03a76af817f6a4e5e4c1962d6eeba463b334de6c1eedfd4b93e2467c0e37edadec"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={0x0, r1, 0x0, 0x3}, 0x18) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000a40)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32], 0x20) r3 = socket$kcm(0x2, 0x5, 0x84) r4 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r4, 0x29, 0x2f, 0x0, 0xc) socketpair$unix(0x1, 0x1, 0x0, 0x0) setsockopt$sock_attach_bpf(r3, 0x84, 0x23, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xf, &(0x7f00000002c0), 0x161) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x72e9fbd6, 0x0, 0x0, 0x0, 0x5}}, &(0x7f0000000680)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x7c}, [@ldst={0x6, 0x3}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3c) 1.952621463s ago: executing program 1 (id=1559): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x5000000, &(0x7f0000000680)=[{&(0x7f0000000dc0)="5c00000014006b02c84e21000af32c6e0a0675f80800000044000100fec00e000623004e0033df090e8497b1ed90d3d376bd5f6ffe5aa677b1c6f99b214460bc24f65ee2f308ff9d4f5a60eab556a705251e6182949a36c23d3b48df", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg(r0, &(0x7f0000000500)={&(0x7f00000001c0)=@nfc, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)=""/87, 0x57}, {&(0x7f0000000380)=""/50, 0x32}, {&(0x7f00000003c0)=""/249, 0xf9}], 0x3, &(0x7f0000000640)=""/4096, 0x1000}, 0x40010000) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0x11, &(0x7f0000000000), 0x8) r2 = socket$kcm(0x15, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000140)={r2}) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x16023, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa24, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socket$kcm(0x10, 0x3, 0x10) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a089, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x2019, 0x0, 0x0, 0x8, 0x1000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="140000002d000b35f8ffffffffffffff0424ff0f", 0x14}], 0x1}, 0x90) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14125, 0x2e, 0xfffffbff, 0x3, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x18002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, @perf_bp={&(0x7f0000000580), 0xb}, 0x10580, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, &(0x7f0000002800)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4, &(0x7f0000000200)}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8264, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x2018, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/166}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'batadv_slave_0\x00', 0x1}) socketpair(0x1e, 0x1, 0x400006, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8924, &(0x7f0000000080)) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xf, 0x9, &(0x7f0000000680)=ANY=[@ANYBLOB="180800000000000000000000000000008510000005000000850000000f0000005f00000000000000180000000000000000000000000000009500000000000000950000f1"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001940)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001a00)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001980), &(0x7f00000019c0)=r6}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x10, 0x4, &(0x7f0000001a40)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3df}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x61}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}}, @initr0={0x18, 0x0, 0x0, 0x0, 0xf454, 0x0, 0x0, 0x0, 0x3}, @ldst={0x0, 0x2, 0x1, 0x3, 0x6, 0x18, 0x10}, @jmp={0x5, 0x0, 0x9, 0x0, 0x8, 0x30, 0x2f2bcff88550d2c1}], &(0x7f0000000600)='syzkaller\x00', 0x0, 0xffffffffffffff97, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe82, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)=r9}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r10}, &(0x7f0000000100), &(0x7f0000000140)=r9}, 0x20) 1.904113179s ago: executing program 4 (id=460): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x20, 0x12504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x5, 0x34, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@map, 0x9, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYRES32=r1, @ANYBLOB="0f000000200600000000000023e727c1cca22bf5f993244522160e269e97b245b82a8ffd61aaaeb6bcbbac640acd62b679b459cf1ec7a2bd15875394a93726b8d4e8d6772fd2b69e5d20d908c11d8e28de0a173b0fe72ed6d9ad062d6b630f85c5959205a6a54b9a920b5aeb32d911aeb845", @ANYRES32=0x0, @ANYRES64=r2], 0x20) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.net/syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x5452, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) setsockopt$sock_attach_bpf(r5, 0x88, 0x67, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES32, @ANYBLOB="0f00000000200000", @ANYRES32, @ANYRES32=r4, @ANYBLOB="45e2a4160b2b5632e6ecab795ef02c6eeb8d0bc67c445538bca91f21b8861057fa469d118a9ba53a1e0f94d968b4ae4aa76967bc521ffc930ee92ae8b1092f0d7745bc0baf6b95b1bb96e6", @ANYRES64=r2], 0x20) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) r6 = socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x105, 0x30, 0xfffffbfe, 0x3, 0x20, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000000004000000040000000020000000300000005000006040000000a000000080000ee0c00000068360000100000000900000008000000690d000002000040000000000d00000000000007"], 0x0, 0x5a, 0x0, 0x1, 0x1, 0x10000, @value}, 0x28) r9 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r9, 0x84, 0x9, &(0x7f0000000380), 0x9c) close(r8) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x20000000}, 0x20) socket$kcm(0x2, 0x2, 0x0) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40010040) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r12) recvmsg$unix(r11, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r13 = socket$kcm(0x2c, 0x3, 0x0) setsockopt$sock_attach_bpf(r13, 0x11b, 0x2, &(0x7f0000000900)=r10, 0x4) sendmsg$inet(r6, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1b, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0x0) 209.314764ms ago: executing program 0 (id=1560): socket$kcm(0x10, 0x400000002, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x1, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000300000000000000c29c18120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, &(0x7f0000000280), 0x0}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xe, 0x0, &(0x7f0000000000)="43227504000000b32415f73227b2", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 152.386877ms ago: executing program 1 (id=1561): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[], &(0x7f00000001c0)=""/131, 0x44, 0x83, 0x1, 0x0, 0x0, @void, @value}, 0x28) (async) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x8, 0x0, 0x0, 0xf4, 0x0, 0x0, 0x2010e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0xc8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd63fc80fc020c2f00db5b686158bbcfe8875a060300000023000000000000000000000000ac1414aa3a2008"], 0xfdef) (async, rerun: 32) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0xa80, 0x0) (rerun: 32) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'vlan1\x00', 0x200}) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89b0, &(0x7f0000000080)) (async) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) (async, rerun: 32) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (rerun: 32) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='sched_switch\x00', r8}, 0x10) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4003, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000002c0)={'veth1_to_hsr\x00', 0x2000}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) 151.752806ms ago: executing program 2 (id=1562): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000100)=@in={0x2, 0x4e21, @local}, 0x80, &(0x7f0000000000), 0x0, 0x0, 0x18}, 0x41) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0xfffffbfc, 0x3, 0x2, 0x0, 0xbffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$kcm(0x25, 0x1, 0x0) sendmsg$inet(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x10) socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000400)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$ENABLE_STATS(0x20, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xf, 0x7, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xf, 0x63, 0xa, 0xff00}, [@call={0x55}, @exit, @map_fd]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b05d25a806f8c6394f91a24fc6007020f", 0x17}], 0x1, 0x0, 0x0, 0x400300}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) r3 = openat$cgroup_int(r1, &(0x7f0000000040)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000500), 0x12) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006", 0x15}], 0x1}, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed290007001175f37538e486dd63"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$kcm(0x29, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, 0x0) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)={0x0, 0x0}) 0s ago: executing program 0 (id=1563): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="01000000ff7f00000400000021"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000007c0)={r1, &(0x7f0000000680)="7edc0bb474", &(0x7f0000000700)=""/130}, 0x20) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000711227000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10d, 0x2, 0x0, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r3, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000000c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000340), &(0x7f0000000200)=[0x0], 0x0, 0x7f, &(0x7f0000000280)=[{}], 0x8, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x97, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x4, 0xffff, 0xa, 0x8, 0x50011, r2, 0xf, '\x00', r5, 0xffffffffffffffff, 0x1, 0x0, 0x3, 0x0, @void, @value, @value=r7}, 0x50) r9 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r9, &(0x7f0000000700)=ANY=[@ANYBLOB="0007000042339103ffbad209fa89cc09fcd28455542bc4bb6f2e16671d3d2640b61c26", @ANYRES16=r8, @ANYRESHEX=r0], 0xfe33) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1400, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) recvmsg(r9, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000400000000c0000f40b"], 0x0, 0x2c, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r10 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0), 0x3a}, 0x20000000) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89a0, &(0x7f0000000080)) getpid() socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000100)={r0, &(0x7f00000000c0), 0x20000000}, 0xc) kernel console output (not intermixed with test programs): interface with an up link [ 243.809327][ T6770] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.872265][ T8971] netlink: 'syz.2.864': attribute type 13 has an invalid length. [ 243.882979][ T8971] netlink: 24859 bytes leftover after parsing attributes in process `syz.2.864'. [ 243.894597][ T8928] chnl_net:caif_netlink_parms(): no params data found [ 243.924710][ T8971] netlink: 'syz.2.864': attribute type 17 has an invalid length. [ 243.958153][ T6770] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.982872][ T8973] netlink: 'syz.2.864': attribute type 3 has an invalid length. [ 243.991215][ T8973] netlink: 'syz.2.864': attribute type 33 has an invalid length. [ 244.005084][ T8873] team0: Port device team_slave_0 added [ 244.016203][ T8873] team0: Port device team_slave_1 added [ 244.067052][ T8971] netlink: 160 bytes leftover after parsing attributes in process `syz.2.864'. [ 244.077308][ T5840] Bluetooth: hci3: command tx timeout [ 244.244485][ T6770] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.274866][ T8873] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 244.282891][ T8873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.283761][ T8980] netlink: 4 bytes leftover after parsing attributes in process `syz.0.867'. [ 244.309364][ T8873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 244.354380][ T8873] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 244.373185][ T8873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.404857][ T8873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 244.573322][ T8928] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.585047][ T8928] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.593393][ T8928] bridge_slave_0: entered allmulticast mode [ 244.606179][ T8928] bridge_slave_0: entered promiscuous mode [ 244.638220][ T6770] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.760118][ T8928] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.772495][ T8928] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.784727][ T8928] bridge_slave_1: entered allmulticast mode [ 244.795357][ T8928] bridge_slave_1: entered promiscuous mode [ 244.806519][ T8989] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.869'. [ 245.005728][ T8873] hsr_slave_0: entered promiscuous mode [ 245.026140][ T8873] hsr_slave_1: entered promiscuous mode [ 245.040158][ T8873] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 245.048703][ T8873] Cannot create hsr debugfs directory [ 245.092323][ T8928] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 245.108888][ T5840] Bluetooth: hci2: command tx timeout [ 245.242269][ T8928] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 245.266862][ T8998] netlink: 40 bytes leftover after parsing attributes in process `syz.0.871'. [ 245.425306][ T8928] team0: Port device team_slave_0 added [ 245.494342][ T9001] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 245.502261][ T9001] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 245.546857][ T8928] team0: Port device team_slave_1 added [ 245.713871][ T8928] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 245.724656][ T8928] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.908604][ T8928] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 246.063606][ T8928] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 246.077211][ T8928] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.107838][ T8928] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 246.158015][ T5840] Bluetooth: hci3: command tx timeout [ 246.592318][ T6770] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 246.604169][ T6770] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 246.615193][ T6770] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 246.625367][ T6770] bond0 (unregistering): Released all slaves [ 246.655983][ T9028] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.880'. [ 246.803192][ T8928] hsr_slave_0: entered promiscuous mode [ 246.810973][ T8928] hsr_slave_1: entered promiscuous mode [ 246.824160][ T8928] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 246.845396][ T8928] Cannot create hsr debugfs directory [ 246.860458][ T9034] netlink: 'syz.1.882': attribute type 10 has an invalid length. [ 246.891517][ T9034] bond0: (slave 3@0ÿ): Releasing backup interface [ 247.052004][ T6770] hsr_slave_0: left promiscuous mode [ 247.068049][ T6770] hsr_slave_1: left promiscuous mode [ 247.135830][ T6770] veth0_macvtap: left promiscuous mode [ 247.142363][ T6770] veth1_vlan: left promiscuous mode [ 247.148681][ T6770] veth0_vlan: left promiscuous mode [ 247.188302][ T5840] Bluetooth: hci2: command tx timeout [ 247.219533][ T9043] netlink: 'syz.2.885': attribute type 10 has an invalid length. [ 248.230834][ T5840] Bluetooth: hci3: command tx timeout [ 249.413790][ T9039] batadv0: entered promiscuous mode [ 249.526107][ T9054] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.888'. [ 249.581178][ T9059] netlink: 2 bytes leftover after parsing attributes in process `syz.1.889'. [ 249.687073][ T9059] batadv_slave_1: entered promiscuous mode [ 249.806380][ T9065] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.891'. [ 249.985674][ T8873] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 250.028261][ T9067] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.893'. [ 250.044272][ T8873] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 250.081340][ T8873] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 250.096765][ T8873] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 250.283915][ T8873] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.308141][ T5840] Bluetooth: hci3: command tx timeout [ 250.375339][ T8873] 8021q: adding VLAN 0 to HW filter on device team0 [ 250.430517][ T6795] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.437820][ T6795] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.449253][ T8928] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 250.463658][ T8928] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 250.482732][ T8928] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 250.499156][ T8928] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 250.512834][ T6766] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.520101][ T6766] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.797400][ T8928] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.842867][ T8928] 8021q: adding VLAN 0 to HW filter on device team0 [ 250.865496][ T6782] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.872761][ T6782] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.913493][ T6782] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.920737][ T6782] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.440388][ T8873] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 251.860965][ T9102] netdevsim netdevsim0 ªªªªªª: renamed from netdevsim0 [ 252.840342][ T8928] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 252.987016][ T8928] veth0_vlan: entered promiscuous mode [ 253.003160][ T8928] veth1_vlan: entered promiscuous mode [ 253.123381][ T9118] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.904'. [ 253.133218][ T9122] netlink: 15743 bytes leftover after parsing attributes in process `syz.2.906'. [ 253.147216][ T8928] veth0_macvtap: entered promiscuous mode [ 253.160092][ T8928] veth1_macvtap: entered promiscuous mode [ 253.213168][ T8928] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 253.248581][ T8928] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 253.324578][ T8928] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.347378][ T8928] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.358733][ T8928] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.367544][ T8928] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.472009][ T8873] veth0_vlan: entered promiscuous mode [ 253.529651][ T8873] veth1_vlan: entered promiscuous mode [ 253.672470][ T6798] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.745024][ T6798] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.829636][ T8873] veth0_macvtap: entered promiscuous mode [ 254.198651][ T8873] veth1_macvtap: entered promiscuous mode [ 254.465114][ T6782] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.503653][ T6782] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.506410][ T8873] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 254.567366][ T8873] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 254.599401][ T8873] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.631960][ T8873] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.640981][ T8873] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.654686][ T8873] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.000793][ T6798] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.035251][ T6798] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.176263][ T6766] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.220623][ T6766] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.606379][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.614065][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.654875][ T9156] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.918'. [ 255.897516][ T6766] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.112600][ T6766] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.320836][ T6766] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.446544][ T9177] netlink: 40 bytes leftover after parsing attributes in process `syz.2.924'. [ 256.555530][ T9177] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.739482][ T9177] bridge_slave_0 (unregistering): left allmulticast mode [ 256.746591][ T9177] bridge_slave_0 (unregistering): left promiscuous mode [ 256.789190][ T9177] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.831830][ T9180] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 256.841395][ T9180] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 256.884200][ T6766] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.910347][ T5845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 256.918864][ T5845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 256.927038][ T5845] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 256.935311][ T5845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 256.945437][ T5845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 257.120320][ T6766] bridge_slave_1: left allmulticast mode [ 257.126016][ T6766] bridge_slave_1: left promiscuous mode [ 257.136452][ T6766] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.146954][ T6766] bridge_slave_0: left allmulticast mode [ 257.152699][ T6766] bridge_slave_0: left promiscuous mode [ 257.159901][ T6766] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.929905][ T6766] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 257.956749][ T6766] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 257.972594][ T6766] bond0 (unregistering): Released all slaves [ 258.030966][ T5845] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 258.042556][ T9198] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.929'. [ 258.047923][ T5845] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 258.060215][ T5845] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 258.070977][ T5845] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 258.092578][ T5845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 258.503720][ T9183] chnl_net:caif_netlink_parms(): no params data found [ 258.891056][ T6766] hsr_slave_0: left promiscuous mode [ 258.897791][ T6766] hsr_slave_1: left promiscuous mode [ 258.903668][ T6766] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 258.912016][ T6766] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 258.948011][ T6766] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 258.962406][ T6766] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 258.993164][ T6766] veth1_macvtap: left promiscuous mode [ 259.003551][ T6766] veth0_macvtap: left promiscuous mode [ 259.009597][ T6766] veth1_vlan: left promiscuous mode [ 259.015123][ T6766] veth0_vlan: left promiscuous mode [ 259.031154][ T5840] Bluetooth: hci2: command tx timeout [ 259.571507][ T6766] team0 (unregistering): Port device team_slave_1 removed [ 259.608770][ T6766] team0 (unregistering): Port device team_slave_0 removed [ 259.957893][ T9183] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.965212][ T9183] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.972950][ T9183] bridge_slave_0: entered allmulticast mode [ 259.981598][ T9183] bridge_slave_0: entered promiscuous mode [ 260.021165][ T9241] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.942'. [ 260.036327][ T9183] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.067382][ T9183] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.083552][ T9183] bridge_slave_1: entered allmulticast mode [ 260.104037][ T9183] bridge_slave_1: entered promiscuous mode [ 260.148000][ T5840] Bluetooth: hci3: command tx timeout [ 260.212494][ T9183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 260.256386][ T9183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 260.622641][ T9183] team0: Port device team_slave_0 added [ 260.634861][ T9183] team0: Port device team_slave_1 added [ 260.722418][ T5840] Bluetooth: hci4: unexpected event 0x03 length: 151 > 11 [ 260.793079][ T9183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 260.807449][ T9183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.837625][ T9183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 260.850747][ T9183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 260.857727][ T9183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.886937][ T9183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 260.913314][ T9260] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.947'. [ 261.112845][ T9204] chnl_net:caif_netlink_parms(): no params data found [ 261.120101][ T5840] Bluetooth: hci2: command tx timeout [ 261.539005][ T9183] hsr_slave_0: entered promiscuous mode [ 261.554412][ T9183] hsr_slave_1: entered promiscuous mode [ 261.561199][ T9183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 261.568972][ T9183] Cannot create hsr debugfs directory [ 261.634848][ T6766] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.752487][ T6766] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.904274][ T9204] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.922592][ T9204] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.934038][ T9204] bridge_slave_0: entered allmulticast mode [ 261.955101][ T9204] bridge_slave_0: entered promiscuous mode [ 262.228083][ T5840] Bluetooth: hci3: command tx timeout [ 262.397722][ T6766] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.426286][ T9285] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.955'. [ 262.460670][ T9204] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.474043][ T9204] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.485045][ T9204] bridge_slave_1: entered allmulticast mode [ 262.495111][ T9204] bridge_slave_1: entered promiscuous mode [ 262.603132][ T6766] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.878296][ T9204] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 262.950597][ T9204] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 263.150571][ T9204] team0: Port device team_slave_0 added [ 263.190297][ T5840] Bluetooth: hci2: command tx timeout [ 263.269411][ T9204] team0: Port device team_slave_1 added [ 263.544144][ T9204] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 263.563361][ T9204] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.687869][ T9204] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 263.787907][ T9204] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 263.794910][ T9204] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.884334][ T9204] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 264.307843][ T5840] Bluetooth: hci3: command tx timeout [ 265.268492][ T5840] Bluetooth: hci2: command tx timeout [ 265.926064][ T9331] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.969'. [ 265.946805][ T9204] hsr_slave_0: entered promiscuous mode [ 265.978139][ T9204] hsr_slave_1: entered promiscuous mode [ 266.003426][ T9204] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 266.021883][ T9204] Cannot create hsr debugfs directory [ 266.033740][ T6766] bridge_slave_1: left allmulticast mode [ 266.050118][ T9336] netlink: 14585 bytes leftover after parsing attributes in process `syz.0.970'. [ 266.083973][ T6766] bridge_slave_1: left promiscuous mode [ 266.104602][ T6766] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.115051][ T9334] netlink: 14585 bytes leftover after parsing attributes in process `syz.0.970'. [ 266.149878][ T6766] bridge_slave_0: left allmulticast mode [ 266.155595][ T6766] bridge_slave_0: left promiscuous mode [ 266.182257][ T6766] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.395983][ T5840] Bluetooth: hci3: command tx timeout [ 266.855280][ T6766] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 266.868244][ T6766] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 266.880746][ T6766] bond0 (unregistering): Released all slaves [ 267.282694][ T9358] netlink: 'syz.0.976': attribute type 41 has an invalid length. [ 267.312756][ T9359] netlink: 'syz.0.976': attribute type 41 has an invalid length. [ 267.455744][ T9363] netlink: 15119 bytes leftover after parsing attributes in process `syz.1.977'. [ 267.848588][ T6766] hsr_slave_0: left promiscuous mode [ 267.878135][ T6766] hsr_slave_1: left promiscuous mode [ 267.884233][ T6766] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 267.927893][ T6766] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 267.946126][ T6766] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 267.987847][ T6766] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 268.045974][ T6766] veth1_macvtap: left promiscuous mode [ 268.077852][ T6766] veth0_macvtap: left promiscuous mode [ 268.097992][ T6766] veth1_vlan: left promiscuous mode [ 268.103403][ T6766] veth0_vlan: left promiscuous mode [ 269.709118][ T6766] team0 (unregistering): Port device team_slave_1 removed [ 269.878563][ T6766] team0 (unregistering): Port device team_slave_0 removed [ 272.000269][ T9183] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 272.021501][ T9379] netlink: 68 bytes leftover after parsing attributes in process `syz.2.982'. [ 272.038791][ T9373] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.981'. [ 272.144394][ T9183] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 272.188525][ T9183] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 272.291440][ T9183] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 272.694573][ T9183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 272.907615][ T9183] 8021q: adding VLAN 0 to HW filter on device team0 [ 272.976443][ T9204] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 273.041625][ T9204] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 273.091252][ T9420] netlink: 152 bytes leftover after parsing attributes in process `syz.1.993'. [ 273.128980][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.136205][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 273.175578][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.182832][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 273.209782][ T9204] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 273.236331][ T9204] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 273.324319][ T9183] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 273.639739][ T9430] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.997'. [ 273.683160][ T9204] 8021q: adding VLAN 0 to HW filter on device bond0 [ 273.836957][ T9204] 8021q: adding VLAN 0 to HW filter on device team0 [ 274.447218][ T9447] netlink: 763 bytes leftover after parsing attributes in process `syz.2.999'. [ 274.469008][ T1340] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.476203][ T1340] bridge0: port 1(bridge_slave_0) entered forwarding state [ 274.524426][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.531677][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 274.689130][ T9204] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 274.708783][ T9204] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 274.913187][ T9183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 275.191615][ T9183] veth0_vlan: entered promiscuous mode [ 275.211468][ T9183] veth1_vlan: entered promiscuous mode [ 275.283142][ T9183] veth0_macvtap: entered promiscuous mode [ 275.318688][ T9466] TCP: TCP_TX_DELAY enabled [ 275.321794][ T9183] veth1_macvtap: entered promiscuous mode [ 275.379128][ T9183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 275.427020][ T9183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 275.471469][ T9183] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.482555][ T9183] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.499380][ T9183] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.513753][ T9183] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.717131][ T9204] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 275.947209][ T1340] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.959789][ T1340] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 276.152896][ T6798] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 276.171207][ T6798] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 276.647989][ T9204] veth0_vlan: entered promiscuous mode [ 276.806946][ T36] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.859583][ T9204] veth1_vlan: entered promiscuous mode [ 276.964243][ T36] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.029001][ T9204] veth0_macvtap: entered promiscuous mode [ 277.099993][ T36] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.152243][ T9204] veth1_macvtap: entered promiscuous mode [ 277.230434][ T9204] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 277.264114][ T9204] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 277.395490][ T36] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.557241][ T9204] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.611722][ T9204] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.648138][ T9204] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.681936][ T9204] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.803197][ T9530] netlink: 'syz.0.1024': attribute type 58 has an invalid length. [ 277.818080][ T9530] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1024'. [ 278.062979][ T1340] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.063205][ T5845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 278.096981][ T5845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 278.106437][ T5845] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 278.121210][ T1340] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.128858][ T5845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 278.136604][ T5845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 278.407745][ T6782] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.415892][ T6782] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.550995][ T36] bridge_slave_1: left allmulticast mode [ 278.573748][ T36] bridge_slave_1: left promiscuous mode [ 278.584056][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.598714][ T36] bridge_slave_0: left allmulticast mode [ 278.604417][ T36] bridge_slave_0: left promiscuous mode [ 278.619615][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.288757][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 279.319995][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 279.334656][ T36] bond0 (unregistering): Released all slaves [ 279.501394][ T9567] netlink: 22 bytes leftover after parsing attributes in process `syz.2.1033'. [ 279.594808][ T9567] delete_channel: no stack [ 280.266971][ T5845] Bluetooth: hci2: command tx timeout [ 280.533433][ T36] hsr_slave_0: left promiscuous mode [ 280.540281][ T36] hsr_slave_1: left promiscuous mode [ 280.547709][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 280.569430][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 280.578720][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 280.586239][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 280.607278][ T36] veth1_macvtap: left promiscuous mode [ 280.614826][ T36] veth0_macvtap: left promiscuous mode [ 280.628266][ T36] veth1_vlan: left promiscuous mode [ 280.643846][ T36] veth0_vlan: left promiscuous mode [ 281.353732][ T36] team0 (unregistering): Port device team_slave_1 removed [ 281.411018][ T36] team0 (unregistering): Port device team_slave_0 removed [ 282.005555][ T5840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 282.014270][ T5840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 282.032114][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 282.048188][ T5840] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 282.056329][ T5840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 282.143539][ T9533] chnl_net:caif_netlink_parms(): no params data found [ 282.307883][ T5845] Bluetooth: hci2: command tx timeout [ 282.418125][ T9533] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.466082][ T9533] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.473559][ T9533] bridge_slave_0: entered allmulticast mode [ 282.482905][ T9533] bridge_slave_0: entered promiscuous mode [ 282.529400][ T9533] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.543165][ T9533] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.555790][ T9533] bridge_slave_1: entered allmulticast mode [ 282.563840][ T9533] bridge_slave_1: entered promiscuous mode [ 282.673600][ T9533] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 282.727187][ T9533] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 282.849921][ T9533] team0: Port device team_slave_0 added [ 282.860779][ T9533] team0: Port device team_slave_1 added [ 282.953694][ T9533] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 282.964859][ T9533] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.991400][ T9533] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 283.014273][ T9533] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 283.033973][ T9533] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 283.073032][ T9533] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 283.574339][ T9633] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1049'. [ 283.645324][ T36] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.682470][ T9533] hsr_slave_0: entered promiscuous mode [ 283.690651][ T9533] hsr_slave_1: entered promiscuous mode [ 283.697710][ T9533] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 283.716219][ T9533] Cannot create hsr debugfs directory [ 283.872473][ T36] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.889686][ T9646] netlink: 'syz.2.1052': attribute type 1 has an invalid length. [ 283.912859][ T9646] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1052'. [ 284.121918][ T36] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.148025][ T5845] Bluetooth: hci3: command tx timeout [ 284.196629][ T9606] chnl_net:caif_netlink_parms(): no params data found [ 284.380136][ T36] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.415139][ T5845] Bluetooth: hci2: command tx timeout [ 284.608939][ T9606] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.661279][ T9606] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.679676][ T9606] bridge_slave_0: entered allmulticast mode [ 284.702886][ T9606] bridge_slave_0: entered promiscuous mode [ 284.824954][ T9606] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.854157][ T9606] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.874341][ T9606] bridge_slave_1: entered allmulticast mode [ 284.896480][ T9606] bridge_slave_1: entered promiscuous mode [ 285.082280][ T9657] syz.0.1056 (9657) used greatest stack depth: 15320 bytes left [ 285.236966][ T9606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 285.296279][ T9606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 286.228115][ T5845] Bluetooth: hci3: command tx timeout [ 286.354805][ T36] bridge_slave_1: left allmulticast mode [ 286.362821][ T36] bridge_slave_1: left promiscuous mode [ 286.369158][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.468005][ T5845] Bluetooth: hci2: command tx timeout [ 286.550261][ T36] bridge_slave_0: left allmulticast mode [ 286.556004][ T36] bridge_slave_0: left promiscuous mode [ 286.629749][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.183815][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 288.205629][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 288.223162][ T36] bond0 (unregistering): Released all slaves [ 288.266509][ T9606] team0: Port device team_slave_0 added [ 288.280962][ T9606] team0: Port device team_slave_1 added [ 288.313981][ T5845] Bluetooth: hci3: command tx timeout [ 288.320761][ T9704] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1069'. [ 288.558541][ T9606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 288.565549][ T9606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 288.602170][ T9606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 288.632154][ T9606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 288.640071][ T9606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 288.698399][ T9606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 288.739744][ T9721] delete_channel: no stack [ 288.865430][ T9728] netlink: 'syz.1.1077': attribute type 10 has an invalid length. [ 288.984047][ T9606] hsr_slave_0: entered promiscuous mode [ 288.992574][ T9606] hsr_slave_1: entered promiscuous mode [ 289.000692][ T9606] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 289.016103][ T9606] Cannot create hsr debugfs directory [ 289.059102][ T9728] batman_adv: batadv0: Removing interface: team0 [ 289.069384][ T9728] 8021q: adding VLAN 0 to HW filter on device team0 [ 289.082712][ T9728] bond0: (slave team0): Enslaving as an active interface with an up link [ 289.218793][ T36] hsr_slave_0: left promiscuous mode [ 289.235002][ T36] hsr_slave_1: left promiscuous mode [ 289.253122][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 289.265111][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 289.298103][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 289.337932][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 289.389032][ T36] veth1_macvtap: left promiscuous mode [ 289.394657][ T36] veth0_macvtap: left promiscuous mode [ 289.411925][ T36] veth1_vlan: left promiscuous mode [ 289.417333][ T36] veth0_vlan: left promiscuous mode [ 289.444988][ T5845] Bluetooth: hci0: unexpected event for opcode 0x00c9 [ 289.449020][ T9741] netlink: 'syz.0.1080': attribute type 41 has an invalid length. [ 289.460626][ T9739] netlink: 'syz.0.1080': attribute type 41 has an invalid length. [ 290.389686][ T5845] Bluetooth: hci3: command tx timeout [ 291.324803][ T36] team0 (unregistering): Port device team_slave_1 removed [ 291.462154][ T36] team0 (unregistering): Port device team_slave_0 removed [ 293.198655][ T9533] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 293.294662][ T9533] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 293.312832][ T9769] netlink: 'syz.2.1089': attribute type 3 has an invalid length. [ 293.348242][ T9769] netlink: 'syz.2.1089': attribute type 1 has an invalid length. [ 293.356325][ T9769] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.1089'. [ 293.413683][ T9533] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 293.457132][ T9533] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 293.518011][ T5845] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 293.526503][ T5845] Bluetooth: hci0: Injecting HCI hardware error event [ 293.534564][ T5845] Bluetooth: hci0: hardware error 0x00 [ 294.568177][ T9783] delete_channel: no stack [ 294.572780][ T9783] delete_channel: no stack [ 295.176794][ T9533] 8021q: adding VLAN 0 to HW filter on device bond0 [ 295.281832][ T9533] 8021q: adding VLAN 0 to HW filter on device team0 [ 295.320878][ T6770] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.328115][ T6770] bridge0: port 1(bridge_slave_0) entered forwarding state [ 295.347281][ T6770] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.354644][ T6770] bridge0: port 2(bridge_slave_1) entered forwarding state [ 295.749054][ T6795] wlan1: Trigger new scan to find an IBSS to join [ 295.856360][ T9533] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 295.965853][ T9533] veth0_vlan: entered promiscuous mode [ 295.988470][ T9533] veth1_vlan: entered promiscuous mode [ 296.041952][ T9533] veth0_macvtap: entered promiscuous mode [ 296.053867][ T9533] veth1_macvtap: entered promiscuous mode [ 296.077906][ T9533] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 296.096437][ T9533] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 296.112742][ T9533] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.125444][ T9533] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.135280][ T9533] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.150296][ T9533] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.308341][ T5845] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 298.187196][ T9808] netlink: 'syz.1.1100': attribute type 30 has an invalid length. [ 298.788389][ T6795] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 298.842716][ T6795] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 298.936685][ T9606] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 299.095626][ T6795] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 299.114913][ T9606] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 299.135833][ T6795] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.169086][ T9606] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 299.182003][ T9825] netlink: 'syz.1.1104': attribute type 21 has an invalid length. [ 299.202383][ T9606] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 299.229803][ T9825] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1104'. [ 299.247946][ T9825] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1104'. [ 299.579963][ T9834] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1107'. [ 299.713321][ T9838] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1108'. [ 299.758180][ T9606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 299.805438][ T9606] 8021q: adding VLAN 0 to HW filter on device team0 [ 299.834442][ T6774] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.841684][ T6774] bridge0: port 1(bridge_slave_0) entered forwarding state [ 299.887599][ T6774] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.894858][ T6774] bridge0: port 2(bridge_slave_1) entered forwarding state [ 300.031260][ T9606] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 300.261689][ T9857] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1114'. [ 300.305223][ T9857] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1114'. [ 300.369350][ T9861] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.1115'. [ 300.644143][ T9606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 300.709854][ T6774] wlan1: Trigger new scan to find an IBSS to join [ 300.964450][ T6795] wlan1: Creating new IBSS network, BSSID 86:2e:7d:27:95:12 [ 301.013605][ T6770] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.140430][ T6770] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.222895][ T6770] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.295185][ T6770] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.323076][ T9606] veth0_vlan: entered promiscuous mode [ 301.335052][ T9606] veth1_vlan: entered promiscuous mode [ 301.365650][ T9606] veth0_macvtap: entered promiscuous mode [ 301.376130][ T9606] veth1_macvtap: entered promiscuous mode [ 301.429911][ T9606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 301.470113][ T9606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 301.486044][ T6770] bridge_slave_1: left allmulticast mode [ 301.492283][ T6770] bridge_slave_1: left promiscuous mode [ 301.498668][ T6770] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.508358][ T6770] bridge_slave_0: left allmulticast mode [ 301.514025][ T6770] bridge_slave_0: left promiscuous mode [ 301.521808][ T6770] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.164099][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 302.175399][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 302.184553][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 302.205516][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 302.217350][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 302.290080][ T6770] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 302.307893][ T6770] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 302.318669][ T6770] bond0 (unregistering): Released all slaves [ 302.344141][ T9905] netlink: 'syz.0.1125': attribute type 29 has an invalid length. [ 302.375481][ T9606] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.399101][ T9606] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.408043][ T9606] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.416865][ T9606] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.455574][ T9908] netlink: 'syz.0.1125': attribute type 29 has an invalid length. [ 302.533678][ T9909] netlink: 'syz.0.1125': attribute type 29 has an invalid length. [ 302.605298][ T9910] netlink: 'syz.0.1125': attribute type 29 has an invalid length. [ 302.623396][ T9916] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 302.632709][ T9916] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 302.641871][ T9916] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 302.651021][ T9916] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 302.660155][ T9916] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 302.669270][ T9916] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 302.678399][ T9916] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 302.687484][ T9916] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 302.696595][ T9916] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 302.705698][ T9916] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 303.986069][ T1340] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.994165][ T1340] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.029501][ T6770] hsr_slave_0: left promiscuous mode [ 304.038804][ T6770] hsr_slave_1: left promiscuous mode [ 304.048768][ T6770] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 304.056235][ T6770] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 304.084070][ T6770] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 304.122439][ T6770] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 304.155538][ T6770] veth1_macvtap: left promiscuous mode [ 304.169288][ T6770] veth0_macvtap: left promiscuous mode [ 304.175118][ T6770] veth1_vlan: left promiscuous mode [ 304.186873][ T6770] veth0_vlan: left promiscuous mode [ 304.317895][ T5840] Bluetooth: hci2: command tx timeout [ 304.555087][ T9951] netlink: 'syz.2.1137': attribute type 10 has an invalid length. [ 304.612179][ T9955] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1137'. [ 304.624520][ T9956] netlink: 'syz.0.1136': attribute type 17 has an invalid length. [ 304.953623][ T6770] team0 (unregistering): Port device team_slave_1 removed [ 305.003144][ T6770] team0 (unregistering): Port device team_slave_0 removed [ 305.441315][ T9950] netlink: 'syz.0.1136': attribute type 13 has an invalid length. [ 305.455395][ T9950] netlink: 24859 bytes leftover after parsing attributes in process `syz.0.1136'. [ 305.476280][ T9956] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1136'. [ 305.504025][ T9958] netlink: 'syz.0.1136': attribute type 3 has an invalid length. [ 305.519210][ T9958] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1136'. [ 305.532814][ T6795] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 305.561004][ T6795] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.837934][ T9966] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.1141'. [ 306.110921][ T9906] chnl_net:caif_netlink_parms(): no params data found [ 306.410830][ T5840] Bluetooth: hci2: command tx timeout [ 307.116749][ T9992] netlink: 'syz.1.1148': attribute type 17 has an invalid length. [ 307.133515][ T9992] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1148'. [ 307.669219][ T9906] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.695089][ T9906] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.706904][ T9906] bridge_slave_0: entered allmulticast mode [ 307.732291][ T9906] bridge_slave_0: entered promiscuous mode [ 307.820732][ T9906] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.838746][ T9906] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.846355][ T9906] bridge_slave_1: entered allmulticast mode [ 307.899914][ T9906] bridge_slave_1: entered promiscuous mode [ 308.467893][ T5840] Bluetooth: hci2: command tx timeout [ 308.764476][ T9906] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 308.781783][ T9906] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 308.832258][ T9906] team0: Port device team_slave_0 added [ 308.841232][ T9906] team0: Port device team_slave_1 added [ 308.891493][ T9906] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 308.902576][ T9906] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 308.934597][ T9906] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 308.948473][ T9906] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 308.955456][ T9906] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 308.982614][ T9906] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 309.029626][ T6770] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.076215][ T9906] hsr_slave_0: entered promiscuous mode [ 309.082953][ T9906] hsr_slave_1: entered promiscuous mode [ 309.090882][ T9906] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 309.098669][ T9906] Cannot create hsr debugfs directory [ 309.116538][ T6770] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.196143][ T6770] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.289252][ T6770] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.991372][ T6770] bridge_slave_1: left allmulticast mode [ 309.997102][ T6770] bridge_slave_1: left promiscuous mode [ 310.018404][ T6770] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.108513][ T6770] bridge_slave_0: left allmulticast mode [ 310.114226][ T6770] bridge_slave_0: left promiscuous mode [ 310.148042][ T6770] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.383015][ T5845] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 310.403262][ T5845] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 310.413525][ T5845] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 310.443589][ T5845] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 310.451373][ T5845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 310.549170][ T5840] Bluetooth: hci2: command tx timeout [ 310.961346][ T6770] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 310.983652][ T6770] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 311.004803][ T6770] bond0 (unregistering): Released all slaves [ 311.952330][ T9906] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 311.985609][ T9906] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 312.044362][ T9906] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 312.093861][ T6770] hsr_slave_0: left promiscuous mode [ 312.115259][ T6770] hsr_slave_1: left promiscuous mode [ 312.129601][ T6770] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 312.142249][ T6770] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 312.158616][ T6770] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 312.166071][ T6770] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 312.220201][ T6770] veth1_macvtap: left promiscuous mode [ 312.230798][T10047] netlink: 'syz.1.1167': attribute type 10 has an invalid length. [ 312.239565][ T6770] veth0_macvtap: left promiscuous mode [ 312.245281][ T6770] veth1_vlan: left promiscuous mode [ 312.251167][T10047] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1167'. [ 312.258056][ T6770] veth0_vlan: left promiscuous mode [ 312.548014][ T5840] Bluetooth: hci3: command tx timeout [ 312.687701][ T6770] team0 (unregistering): Port device team_slave_1 removed [ 312.725882][ T6770] team0 (unregistering): Port device team_slave_0 removed [ 313.074034][ T9906] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 313.114119][T10045] Ÿë: port 1(ip6gretap0) entered blocking state [ 313.120969][T10045] Ÿë: port 1(ip6gretap0) entered disabled state [ 313.132629][T10045] ip6gretap0: entered allmulticast mode [ 313.141491][T10045] ip6gretap0: entered promiscuous mode [ 313.419607][ T9906] 8021q: adding VLAN 0 to HW filter on device bond0 [ 313.458941][ T9906] 8021q: adding VLAN 0 to HW filter on device team0 [ 313.572043][ T9906] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 313.603081][ T9906] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 314.094640][ T6774] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.101861][ T6774] bridge0: port 1(bridge_slave_0) entered forwarding state [ 314.124829][ T6774] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.132064][ T6774] bridge0: port 2(bridge_slave_1) entered forwarding state [ 314.196520][T10014] chnl_net:caif_netlink_parms(): no params data found [ 314.234721][ T9906] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 314.283660][T10069] netlink: 'syz.1.1171': attribute type 10 has an invalid length. [ 314.628166][ T5840] Bluetooth: hci3: command tx timeout [ 314.790617][ T9906] veth0_vlan: entered promiscuous mode [ 314.823814][ T9906] veth1_vlan: entered promiscuous mode [ 314.971756][T10014] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.979108][T10014] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.986311][T10014] bridge_slave_0: entered allmulticast mode [ 314.994245][T10014] bridge_slave_0: entered promiscuous mode [ 315.013471][T10014] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.048142][T10014] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.055642][T10014] bridge_slave_1: entered allmulticast mode [ 315.114829][T10014] bridge_slave_1: entered promiscuous mode [ 315.585584][T10014] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 315.734022][T10014] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 315.858465][T10014] team0: Port device team_slave_0 added [ 315.878518][ T9906] veth0_macvtap: entered promiscuous mode [ 315.895900][T10014] team0: Port device team_slave_1 added [ 315.925978][ T9906] veth1_macvtap: entered promiscuous mode [ 316.046379][T10014] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 316.059972][T10014] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 316.098496][T10014] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 316.127397][T10014] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 316.139143][T10014] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 316.165882][T10014] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 316.342197][ T9906] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 316.436520][T10014] hsr_slave_0: entered promiscuous mode [ 316.452561][T10014] hsr_slave_1: entered promiscuous mode [ 316.462874][T10014] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 316.471935][T10014] Cannot create hsr debugfs directory [ 316.479911][ T9906] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 316.510979][T10120] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1182'. [ 316.577634][ T9906] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.603797][T10123] netlink: 'syz.1.1183': attribute type 10 has an invalid length. [ 316.607919][ T9906] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.621927][ T9906] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.631400][ T9906] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.708203][ T5840] Bluetooth: hci3: command tx timeout [ 317.033508][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.043906][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.477621][ T6782] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 317.498644][ T6782] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 317.726393][T10144] netlink: 'syz.2.1190': attribute type 3 has an invalid length. [ 317.734595][T10144] netlink: 'syz.2.1190': attribute type 4 has an invalid length. [ 317.767898][T10144] netlink: 9067 bytes leftover after parsing attributes in process `syz.2.1190'. [ 318.016325][ T6770] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.089117][ T6770] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 318.793061][ T5840] Bluetooth: hci3: command tx timeout [ 319.009378][T10014] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 319.023113][T10014] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 319.057620][T10014] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 319.224759][ T1340] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.289598][T10014] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 319.349519][T10158] netlink: 'syz.2.1197': attribute type 29 has an invalid length. [ 319.499047][ T1340] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.815131][ T1340] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.992685][ T1340] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.052073][T10014] 8021q: adding VLAN 0 to HW filter on device bond0 [ 320.086116][T10014] 8021q: adding VLAN 0 to HW filter on device team0 [ 320.111752][ T6774] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.118994][ T6774] bridge0: port 1(bridge_slave_0) entered forwarding state [ 320.131231][ T6774] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.138472][ T6774] bridge0: port 2(bridge_slave_1) entered forwarding state [ 320.223905][T10014] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 320.430734][T10014] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 320.818310][ T1340] bridge_slave_1: left allmulticast mode [ 320.824017][ T1340] bridge_slave_1: left promiscuous mode [ 320.849540][ T1340] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.871332][ T1340] bridge_slave_0: left allmulticast mode [ 320.907774][ T1340] bridge_slave_0: left promiscuous mode [ 320.913596][ T1340] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.184321][ T5845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 321.204209][ T5845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 321.235614][ T5845] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 321.255914][ T5845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 321.264002][ T5845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 321.900694][ T1340] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 321.912287][ T1340] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 321.939709][ T1340] bond0 (unregistering): Released all slaves [ 322.502098][T10014] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 322.685286][ T1340] hsr_slave_0: left promiscuous mode [ 322.692374][ T1340] hsr_slave_1: left promiscuous mode [ 322.700825][ T1340] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 322.714680][ T1340] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 322.740444][ T1340] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 322.753392][ T1340] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 322.781087][ T1340] veth1_macvtap: left promiscuous mode [ 322.786721][ T1340] veth0_macvtap: left promiscuous mode [ 322.794396][ T1340] veth1_vlan: left promiscuous mode [ 322.803653][ T1340] veth0_vlan: left promiscuous mode [ 323.046035][T10253] netlink: 'syz.2.1218': attribute type 5 has an invalid length. [ 323.354792][ T5840] Bluetooth: hci2: command tx timeout [ 324.078878][ T1340] team0 (unregistering): Port device team_slave_1 removed [ 324.119641][ T1340] team0 (unregistering): Port device team_slave_0 removed [ 324.587358][T10254] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 324.724845][T10203] chnl_net:caif_netlink_parms(): no params data found [ 325.501764][ T5840] Bluetooth: hci2: command tx timeout [ 325.883398][T10203] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.891280][T10203] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.899147][T10203] bridge_slave_0: entered allmulticast mode [ 325.906404][T10203] bridge_slave_0: entered promiscuous mode [ 325.921891][T10203] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.929269][T10203] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.936479][T10203] bridge_slave_1: entered allmulticast mode [ 325.944233][T10203] bridge_slave_1: entered promiscuous mode [ 326.019131][T10203] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 326.050076][T10203] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 326.065899][T10014] veth0_vlan: entered promiscuous mode [ 326.173521][T10282] netlink: 'syz.0.1224': attribute type 39 has an invalid length. [ 326.192518][T10203] team0: Port device team_slave_0 added [ 326.262998][T10203] team0: Port device team_slave_1 added [ 326.263378][T10289] netlink: 'syz.1.1227': attribute type 10 has an invalid length. [ 326.307775][T10014] veth1_vlan: entered promiscuous mode [ 326.383611][T10290] netlink: 'syz.1.1227': attribute type 21 has an invalid length. [ 326.404358][T10289] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 326.443849][T10203] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 326.452254][T10203] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 326.500256][T10203] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 326.513709][T10203] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 326.520847][T10203] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 326.587348][T10203] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 326.673623][T10297] can: request_module (can-proto-0) failed. [ 326.706318][T10014] veth0_macvtap: entered promiscuous mode [ 326.918258][T10307] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1232'. [ 327.018794][T10203] hsr_slave_0: entered promiscuous mode [ 327.048737][T10203] hsr_slave_1: entered promiscuous mode [ 327.057617][T10203] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 327.067108][T10203] Cannot create hsr debugfs directory [ 327.258995][T10014] veth1_macvtap: entered promiscuous mode [ 327.502866][T10014] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 327.520368][ T5840] Bluetooth: hci2: command tx timeout [ 327.601261][T10014] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 327.676603][T10014] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.686365][T10014] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.702667][T10014] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.712994][T10014] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.858042][T10318] netlink: 'syz.0.1237': attribute type 30 has an invalid length. [ 328.129719][ T6798] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 328.137597][ T6798] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 328.489236][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 328.537838][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 328.792801][T10203] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 328.822666][T10203] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 328.859768][T10203] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 328.937228][T10203] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 329.061513][T10342] Â: renamed from pim6reg1 [ 329.424839][ T1340] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.587910][ T5840] Bluetooth: hci2: command tx timeout [ 329.666556][ T1340] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.058744][ T5845] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 331.067304][ T5845] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 331.075107][ T5845] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 331.083928][ T5845] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 331.105798][ T5845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 332.035895][T10203] 8021q: adding VLAN 0 to HW filter on device bond0 [ 332.100796][ T1340] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.232583][T10203] 8021q: adding VLAN 0 to HW filter on device team0 [ 332.597164][T10382] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1256'. [ 332.649693][T10382] net_ratelimit: 3319 callbacks suppressed [ 332.649745][T10382] netlink: zone id is out of range [ 332.676360][ T1340] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.726943][T10382] netlink: zone id is out of range [ 332.748926][T10382] netlink: zone id is out of range [ 332.790963][ T6770] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.794140][T10382] netlink: zone id is out of range [ 332.798176][ T6770] bridge0: port 1(bridge_slave_0) entered forwarding state [ 332.833258][T10382] netlink: zone id is out of range [ 332.852264][T10382] netlink: zone id is out of range [ 332.943960][ T6770] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.951217][ T6770] bridge0: port 2(bridge_slave_1) entered forwarding state [ 332.968083][T10382] netlink: zone id is out of range [ 332.973709][T10382] netlink: zone id is out of range [ 332.984591][T10382] netlink: zone id is out of range [ 332.991831][T10382] netlink: zone id is out of range [ 333.003143][T10381] netlink: 3752 bytes leftover after parsing attributes in process `syz.1.1255'. [ 333.196224][ T5845] Bluetooth: hci3: command tx timeout [ 333.986448][ T1340] bridge_slave_1: left allmulticast mode [ 333.994288][ T1340] bridge_slave_1: left promiscuous mode [ 334.000605][ T1340] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.039922][ T1340] bridge_slave_0: left allmulticast mode [ 334.045708][ T1340] bridge_slave_0: left promiscuous mode [ 334.058373][ T1340] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.267892][ T5845] Bluetooth: hci3: command tx timeout [ 335.713674][ T1340] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 335.745080][ T1340] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 335.774254][ T1340] bond0 (unregistering): Released all slaves [ 335.840845][T10424] netlink: 'syz.2.1267': attribute type 17 has an invalid length. [ 336.218392][T10361] chnl_net:caif_netlink_parms(): no params data found [ 336.683105][ T1340] hsr_slave_0: left promiscuous mode [ 336.702472][ T1340] hsr_slave_1: left promiscuous mode [ 336.717162][ T1340] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 336.730655][ T1340] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 336.741857][ T1340] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 336.751605][ T1340] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 336.786133][ T1340] veth1_macvtap: left promiscuous mode [ 336.793622][ T1340] veth0_macvtap: left promiscuous mode [ 336.799450][ T1340] veth1_vlan: left promiscuous mode [ 336.804968][ T1340] veth0_vlan: left promiscuous mode [ 337.348059][ T5845] Bluetooth: hci3: command tx timeout [ 337.451051][ T1340] team0 (unregistering): Port device team_slave_1 removed [ 337.504964][ T1340] team0 (unregistering): Port device team_slave_0 removed [ 337.904172][T10361] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.912439][T10361] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.919738][T10361] bridge_slave_0: entered allmulticast mode [ 337.927519][T10361] bridge_slave_0: entered promiscuous mode [ 337.952100][T10203] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 338.012446][T10449] syzkaller0: entered promiscuous mode [ 338.018006][T10449] syzkaller0: entered allmulticast mode [ 338.367556][T10485] netlink: 'syz.1.1278': attribute type 17 has an invalid length. [ 338.400689][T10485] netlink: 'syz.1.1278': attribute type 41 has an invalid length. [ 338.415519][T10485] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1278'. [ 339.438195][ T5845] Bluetooth: hci3: command tx timeout [ 341.573568][T10361] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.580984][T10361] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.588341][T10361] bridge_slave_1: entered allmulticast mode [ 341.595571][T10361] bridge_slave_1: entered promiscuous mode [ 341.775727][T10361] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 341.803953][T10361] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 341.968460][T10499] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.1285'. [ 342.030428][T10361] team0: Port device team_slave_0 added [ 342.043769][T10361] team0: Port device team_slave_1 added [ 342.179661][T10361] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 342.193180][T10361] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 342.236524][T10361] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 342.274477][T10361] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 342.291559][T10361] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 342.326780][T10361] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 342.401453][T10203] veth0_vlan: entered promiscuous mode [ 342.474237][T10361] hsr_slave_0: entered promiscuous mode [ 342.489134][T10361] hsr_slave_1: entered promiscuous mode [ 342.496962][T10361] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 342.509484][T10361] Cannot create hsr debugfs directory [ 342.530209][T10518] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1292'. [ 342.547975][T10518] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1292'. [ 342.592609][T10516] tap0: tun_chr_ioctl cmd 1074025677 [ 342.600200][T10516] tap0: linktype set to 776 [ 342.857462][T10524] IPv6: Can't replace route, no match found [ 342.890894][T10203] veth1_vlan: entered promiscuous mode [ 343.443566][T10203] veth0_macvtap: entered promiscuous mode [ 343.482834][T10203] veth1_macvtap: entered promiscuous mode [ 343.577421][T10203] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 343.601217][T10203] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 343.616346][T10203] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.633855][T10203] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.650687][T10203] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.663346][T10203] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.810901][T10539] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.1299'. [ 344.602532][ T6778] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.630229][ T6778] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.883008][ T6778] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.923764][ T6778] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 345.425609][T10361] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 345.465533][T10361] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 345.526861][T10361] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 345.548825][T10361] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 345.717162][ T1340] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.857278][ T1340] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.975180][ T1340] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.015193][T10361] 8021q: adding VLAN 0 to HW filter on device bond0 [ 346.037029][T10361] 8021q: adding VLAN 0 to HW filter on device team0 [ 346.056707][ T1340] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.077242][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.084428][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 346.105418][ T6770] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.112686][ T6770] bridge0: port 2(bridge_slave_1) entered forwarding state [ 346.260516][ T1340] bridge_slave_1: left allmulticast mode [ 346.266246][ T1340] bridge_slave_1: left promiscuous mode [ 346.274868][ T1340] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.291205][ T1340] bridge_slave_0: left allmulticast mode [ 346.296913][ T1340] bridge_slave_0: left promiscuous mode [ 346.304479][ T1340] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.838575][ T1340] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 346.888794][ T1340] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 347.245352][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 347.254652][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 347.263504][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 347.273006][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 347.282437][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 347.703307][ T1340] bond0 (unregistering): Released all slaves [ 347.861058][T10589] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1312'. [ 347.915270][T10585] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1312'. [ 348.041071][T10586] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1312'. [ 348.130391][T10588] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1312'. [ 348.185332][T10361] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 349.351534][ T5845] Bluetooth: hci2: command tx timeout [ 349.441336][ T1340] hsr_slave_0: left promiscuous mode [ 349.449282][ T1340] hsr_slave_1: left promiscuous mode [ 349.472672][ T1340] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 349.484252][ T1340] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 349.495616][ T1340] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 349.506364][ T1340] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 349.556071][ T1340] veth1_macvtap: left promiscuous mode [ 349.574090][ T1340] veth0_macvtap: left promiscuous mode [ 349.585970][ T1340] veth1_vlan: left promiscuous mode [ 349.596751][ T1340] veth0_vlan: left promiscuous mode [ 350.015381][ T1340] team0 (unregistering): Port device team_slave_1 removed [ 350.056025][ T1340] team0 (unregistering): Port device team_slave_0 removed [ 350.475108][T10582] chnl_net:caif_netlink_parms(): no params data found [ 350.653522][T10644] netlink: 'syz.2.1323': attribute type 3 has an invalid length. [ 350.685137][T10644] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1323'. [ 350.692544][T10361] veth0_vlan: entered promiscuous mode [ 350.755617][T10361] veth1_vlan: entered promiscuous mode [ 351.223875][T10659] netlink: 'syz.1.1326': attribute type 21 has an invalid length. [ 351.375476][T10582] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.385192][T10582] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.409098][T10582] bridge_slave_0: entered allmulticast mode [ 351.428548][ T5845] Bluetooth: hci2: command tx timeout [ 351.435753][T10582] bridge_slave_0: entered promiscuous mode [ 351.493313][T10582] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.514325][T10582] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.541063][T10582] bridge_slave_1: entered allmulticast mode [ 351.568505][T10582] bridge_slave_1: entered promiscuous mode [ 351.681138][T10361] veth0_macvtap: entered promiscuous mode [ 351.720128][T10582] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 351.736621][T10361] veth1_macvtap: entered promiscuous mode [ 351.778852][T10582] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 351.876407][T10361] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 351.911120][T10582] team0: Port device team_slave_0 added [ 351.979922][T10661] netlink: 'syz.2.1327': attribute type 10 has an invalid length. [ 352.064404][T10582] team0: Port device team_slave_1 added [ 352.400505][T10661] mac80211_hwsim hwsim7 wlan1: left promiscuous mode [ 352.407558][T10661] mac80211_hwsim hwsim7 wlan1: left allmulticast mode [ 352.531056][T10661] team0: Port device wlan1 removed [ 352.554552][T10661] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 352.572999][T10361] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 352.649899][T10582] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 352.656902][T10582] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 352.689587][T10582] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 352.731117][T10361] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.742547][T10361] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.753436][T10361] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.777775][T10361] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.802121][T10582] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 352.822375][T10582] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 352.866395][T10582] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 353.080723][T10582] hsr_slave_0: entered promiscuous mode [ 353.087322][T10582] hsr_slave_1: entered promiscuous mode [ 353.094092][T10582] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 353.103710][T10582] Cannot create hsr debugfs directory [ 353.415390][ T6770] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.459865][ T6770] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.509222][ T5845] Bluetooth: hci2: command tx timeout [ 354.130155][T10695] net_ratelimit: 76 callbacks suppressed [ 354.130173][T10695] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 354.164495][ T6774] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 354.175879][ T6774] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 354.615288][ T1340] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.921785][ T1340] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.034796][ T1340] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.112457][ T1340] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.138441][T10582] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 355.162859][T10582] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 355.176625][T10582] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 355.187405][T10582] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 355.296632][ T1340] bridge_slave_1: left allmulticast mode [ 355.303379][ T1340] bridge_slave_1: left promiscuous mode [ 355.309376][ T1340] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.319049][ T1340] bridge_slave_0: left allmulticast mode [ 355.324700][ T1340] bridge_slave_0: left promiscuous mode [ 355.331514][ T1340] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.589087][ T5845] Bluetooth: hci2: command tx timeout [ 355.603266][ T1340] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 355.614279][ T1340] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 355.624878][ T1340] bond0 (unregistering): Released all slaves [ 355.692233][T10582] 8021q: adding VLAN 0 to HW filter on device bond0 [ 355.719845][T10582] 8021q: adding VLAN 0 to HW filter on device team0 [ 355.754050][ T6774] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.761232][ T6774] bridge0: port 1(bridge_slave_0) entered forwarding state [ 355.776054][ T6778] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.783230][ T6778] bridge0: port 2(bridge_slave_1) entered forwarding state [ 355.931145][ T1340] hsr_slave_0: left promiscuous mode [ 355.947761][ T1340] hsr_slave_1: left promiscuous mode [ 355.953684][ T1340] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 355.964198][ T1340] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 355.973996][ T1340] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 355.981533][ T1340] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 356.012008][ T1340] veth1_macvtap: left promiscuous mode [ 356.017605][ T1340] veth0_macvtap: left promiscuous mode [ 356.075086][ T1340] veth1_vlan: left promiscuous mode [ 356.091691][ T1340] veth0_vlan: left promiscuous mode [ 356.763916][ T5840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 356.778414][ T5840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 356.786466][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 356.798156][ T5840] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 356.806975][ T5840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 357.060692][ T1340] team0 (unregistering): Port device team_slave_1 removed [ 357.097331][ T1340] team0 (unregistering): Port device team_slave_0 removed [ 357.710977][T10582] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 358.080413][T10754] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1355'. [ 358.123451][T10754] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1355'. [ 358.193363][T10582] veth0_vlan: entered promiscuous mode [ 358.221432][T10736] chnl_net:caif_netlink_parms(): no params data found [ 358.528390][T10582] veth1_vlan: entered promiscuous mode [ 358.649064][T10736] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.656483][T10736] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.668725][T10736] bridge_slave_0: entered allmulticast mode [ 358.680556][T10736] bridge_slave_0: entered promiscuous mode [ 358.703298][T10736] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.711355][T10736] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.719630][T10736] bridge_slave_1: entered allmulticast mode [ 358.777906][T10736] bridge_slave_1: entered promiscuous mode [ 358.868281][ T5840] Bluetooth: hci3: command tx timeout [ 359.025548][T10736] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 359.065743][T10582] veth0_macvtap: entered promiscuous mode [ 359.115893][T10736] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 359.139503][T10582] veth1_macvtap: entered promiscuous mode [ 359.413287][T10736] team0: Port device team_slave_0 added [ 359.461562][T10736] team0: Port device team_slave_1 added [ 359.793594][T10582] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 360.047610][T10736] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 360.080167][T10736] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 360.158072][T10736] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 360.244272][T10582] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 360.296446][T10736] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 360.304374][T10736] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 360.350145][T10736] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 360.384702][T10582] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.402989][T10582] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.412555][T10582] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.425171][T10582] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.682910][T10736] hsr_slave_0: entered promiscuous mode [ 360.700151][T10736] hsr_slave_1: entered promiscuous mode [ 360.711469][T10736] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 360.719956][T10736] Cannot create hsr debugfs directory [ 360.948032][ T5840] Bluetooth: hci3: command tx timeout [ 361.189710][T10840] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.1380'. [ 361.725776][ T6774] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 361.768061][ T6774] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 361.941700][ T6774] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 361.957792][ T6774] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 362.278180][T10860] netlink: 'syz.0.1386': attribute type 10 has an invalid length. [ 362.397511][T10736] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 362.412937][T10736] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 362.443777][T10736] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 362.522522][ T6795] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.557527][T10736] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 362.670209][ T6795] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.793165][ T6795] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.869344][ T6795] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.889089][T10736] 8021q: adding VLAN 0 to HW filter on device bond0 [ 362.910964][T10736] 8021q: adding VLAN 0 to HW filter on device team0 [ 362.936815][ T6766] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.943965][ T6766] bridge0: port 1(bridge_slave_0) entered forwarding state [ 362.954569][ T6766] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.961753][ T6766] bridge0: port 2(bridge_slave_1) entered forwarding state [ 363.038806][ T5840] Bluetooth: hci3: command tx timeout [ 363.082462][ T6795] bridge_slave_1: left allmulticast mode [ 363.088949][ T6795] bridge_slave_1: left promiscuous mode [ 363.095399][ T6795] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.105305][ T6795] bridge_slave_0: left allmulticast mode [ 363.113853][ T6795] bridge_slave_0: left promiscuous mode [ 363.120028][ T6795] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.423276][ T6795] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 363.434906][ T6795] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 363.445944][ T6795] bond0 (unregistering): Released all slaves [ 363.657029][T10882] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.1392'. [ 363.971110][T10736] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 364.299371][ T5845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 364.308286][ T5845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 364.316334][ T5845] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 364.332118][ T5845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 364.340270][ T5845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 365.117959][ T5845] Bluetooth: hci3: command tx timeout [ 366.388211][ T5845] Bluetooth: hci2: command tx timeout [ 367.195948][ T6795] hsr_slave_0: left promiscuous mode [ 367.218111][ T6795] hsr_slave_1: left promiscuous mode [ 367.224179][ T6795] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 367.236760][ T6795] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 367.341322][ T6795] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 367.353430][ T6795] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 367.402316][ T6795] veth1_macvtap: left promiscuous mode [ 367.408828][ T6795] veth0_macvtap: left promiscuous mode [ 367.414515][ T6795] veth1_vlan: left promiscuous mode [ 367.426056][ T6795] veth0_vlan: left promiscuous mode [ 367.493503][ T5845] Bluetooth: hci1: unexpected event 0x10 length: 15 > 1 [ 367.494598][ T5840] Bluetooth: hci1: hardware error 0x00 [ 368.306409][ T6795] team0 (unregistering): Port device team_slave_1 removed [ 368.354372][ T6795] team0 (unregistering): Port device team_slave_0 removed [ 368.471461][ T5845] Bluetooth: hci2: command tx timeout [ 368.862375][T10928] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.1405'. [ 369.387041][T10941] netlink: 'syz.1.1410': attribute type 2 has an invalid length. [ 369.548022][T10736] veth0_vlan: entered promiscuous mode [ 369.588677][ T5840] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 369.597645][T10736] veth1_vlan: entered promiscuous mode [ 369.640821][T10903] chnl_net:caif_netlink_parms(): no params data found [ 369.736597][T10736] veth0_macvtap: entered promiscuous mode [ 369.766363][T10736] veth1_macvtap: entered promiscuous mode [ 369.843320][T10963] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1414'. [ 370.071125][T10903] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.101839][T10903] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.123030][T10903] bridge_slave_0: entered allmulticast mode [ 370.137043][T10903] bridge_slave_0: entered promiscuous mode [ 370.147540][T10903] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.155012][T10903] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.167032][T10903] bridge_slave_1: entered allmulticast mode [ 370.179571][T10903] bridge_slave_1: entered promiscuous mode [ 370.211758][T10736] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 370.253250][T10736] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 370.443338][T10989] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.1421'. [ 370.529589][T10903] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 370.550463][ T5840] Bluetooth: hci2: command tx timeout [ 370.562151][T10903] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 370.582570][T10736] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.591868][T10736] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.604887][T10736] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.615344][T10736] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.772562][T10998] netlink: 14593 bytes leftover after parsing attributes in process `syz.1.1423'. [ 370.808406][T10903] team0: Port device team_slave_0 added [ 370.825935][T10903] team0: Port device team_slave_1 added [ 370.938510][T10903] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 370.963345][T10903] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 371.093823][T10903] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 371.174676][T10903] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 371.208164][T10903] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 371.335859][T10903] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 372.116541][T10903] hsr_slave_0: entered promiscuous mode [ 372.129049][T10903] hsr_slave_1: entered promiscuous mode [ 372.135377][T10903] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 372.177788][T10903] Cannot create hsr debugfs directory [ 372.335079][ T6798] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 372.372761][ T6798] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 372.525994][ T6798] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 372.541788][ T6798] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 372.637749][ T5840] Bluetooth: hci2: command tx timeout [ 372.762717][T11033] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.1436'. [ 373.023307][T11040] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1438'. [ 373.734741][ T6766] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.855850][ T6766] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.962112][ T6766] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.992084][T10903] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 374.011559][T10903] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 374.021456][T10903] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 374.051278][ T6766] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.066260][T10903] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 374.256121][T10903] 8021q: adding VLAN 0 to HW filter on device bond0 [ 374.263579][ T6766] bridge_slave_1: left allmulticast mode [ 374.270746][ T6766] bridge_slave_1: left promiscuous mode [ 374.276536][ T6766] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.292878][ T6766] bridge_slave_0: left allmulticast mode [ 374.298809][ T6766] bridge_slave_0: left promiscuous mode [ 374.304587][ T6766] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.712821][ T6766] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 374.724870][ T6766] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 374.734903][ T6766] bond0 (unregistering): Released all slaves [ 374.764709][T10903] 8021q: adding VLAN 0 to HW filter on device team0 [ 374.785770][ T6782] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.792956][ T6782] bridge0: port 1(bridge_slave_0) entered forwarding state [ 374.827008][ T6798] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.834195][ T6798] bridge0: port 2(bridge_slave_1) entered forwarding state [ 375.040769][T11054] syz.2.1444: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 375.076712][T11054] CPU: 0 UID: 0 PID: 11054 Comm: syz.2.1444 Not tainted 6.15.0-syzkaller-gcd2e103d57e5 #0 PREEMPT(full) [ 375.076745][T11054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 375.076768][T11054] Call Trace: [ 375.076777][T11054] [ 375.076787][T11054] dump_stack_lvl+0x189/0x250 [ 375.076831][T11054] ? __pfx_dump_stack_lvl+0x10/0x10 [ 375.076866][T11054] ? __pfx__printk+0x10/0x10 [ 375.076890][T11054] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 375.076923][T11054] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 375.076958][T11054] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 375.077004][T11054] warn_alloc+0x214/0x310 [ 375.077025][T11054] ? stack_depot_save_flags+0x40/0x900 [ 375.077058][T11054] ? __pfx_warn_alloc+0x10/0x10 [ 375.077081][T11054] ? kasan_save_track+0x4f/0x80 [ 375.077108][T11054] ? xskq_create+0x56/0x170 [ 375.077130][T11054] ? xsk_init_queue+0xb0/0x110 [ 375.077150][T11054] ? xsk_setsockopt+0x4de/0x710 [ 375.077169][T11054] ? do_sock_setsockopt+0x25a/0x3e0 [ 375.077187][T11054] ? __x64_sys_setsockopt+0x18b/0x220 [ 375.077203][T11054] ? do_syscall_64+0xfa/0x3b0 [ 375.077228][T11054] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.077257][T11054] __vmalloc_node_range_noprof+0x125/0x12f0 [ 375.077322][T11054] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 375.077362][T11054] ? __kasan_kmalloc+0x93/0xb0 [ 375.077395][T11054] vmalloc_user_noprof+0xad/0xf0 [ 375.077414][T11054] ? xskq_create+0xbf/0x170 [ 375.077439][T11054] xskq_create+0xbf/0x170 [ 375.077466][T11054] xsk_init_queue+0xb0/0x110 [ 375.077494][T11054] xsk_setsockopt+0x4de/0x710 [ 375.077520][T11054] ? __pfx_xsk_setsockopt+0x10/0x10 [ 375.077550][T11054] ? aa_sock_opt_perm+0x74/0x110 [ 375.077579][T11054] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 375.077602][T11054] ? __pfx_xsk_setsockopt+0x10/0x10 [ 375.077632][T11054] do_sock_setsockopt+0x25a/0x3e0 [ 375.077657][T11054] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 375.077686][T11054] ? __fget_files+0x2a/0x420 [ 375.077715][T11054] __x64_sys_setsockopt+0x18b/0x220 [ 375.077743][T11054] do_syscall_64+0xfa/0x3b0 [ 375.077768][T11054] ? lockdep_hardirqs_on+0x9c/0x150 [ 375.077790][T11054] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.077809][T11054] ? clear_bhb_loop+0x60/0xb0 [ 375.077834][T11054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.077861][T11054] RIP: 0033:0x7f30a8d8e929 [ 375.077880][T11054] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 375.077900][T11054] RSP: 002b:00007f30a6bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 375.077922][T11054] RAX: ffffffffffffffda RBX: 00007f30a8fb5fa0 RCX: 00007f30a8d8e929 [ 375.077937][T11054] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000006 [ 375.077949][T11054] RBP: 00007f30a8e10b39 R08: 0000000000000004 R09: 0000000000000000 [ 375.077963][T11054] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 375.077975][T11054] R13: 0000000000000000 R14: 00007f30a8fb5fa0 R15: 00007fff62baee38 [ 375.078008][T11054] [ 375.420543][T11054] Mem-Info: [ 375.423728][T11054] active_anon:4799 inactive_anon:0 isolated_anon:0 [ 375.423728][T11054] active_file:19457 inactive_file:39976 isolated_file:0 [ 375.423728][T11054] unevictable:768 dirty:73 writeback:0 [ 375.423728][T11054] slab_reclaimable:10435 slab_unreclaimable:98527 [ 375.423728][T11054] mapped:27130 shmem:1364 pagetables:1006 [ 375.423728][T11054] sec_pagetables:0 bounce:0 [ 375.423728][T11054] kernel_misc_reclaimable:0 [ 375.423728][T11054] free:1315947 free_pcp:18063 free_cma:0 [ 375.533444][T10903] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 375.577228][T11054] Node 0 active_anon:19196kB inactive_anon:0kB active_file:77828kB inactive_file:159700kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116720kB dirty:288kB writeback:0kB shmem:3920kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11876kB pagetables:3880kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 375.626630][ T5845] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 375.643753][ T5845] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 375.658156][ T5845] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 375.667020][ T5845] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 375.677672][ T5845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 375.687289][T11054] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 375.806083][T11054] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 375.846126][T11054] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 375.854852][T11054] Node 0 DMA32 free:1323220kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:19284kB inactive_anon:0kB active_file:77828kB inactive_file:157864kB unevictable:1536kB writepending:300kB present:3129332kB managed:2561192kB mlocked:0kB bounce:0kB free_pcp:62212kB local_pcp:34308kB free_cma:0kB [ 375.918276][T11054] lowmem_reserve[]: 0 0 1 1 1 [ 375.923112][T11054] Node 0 Normal free:4kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1840kB unevictable:0kB writepending:4kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 375.953448][T11054] lowmem_reserve[]: 0 0 0 0 0 [ 375.958709][T11054] Node 1 Normal free:3907772kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:11680kB local_pcp:9216kB free_cma:0kB [ 375.998252][T11054] lowmem_reserve[]: 0 0 0 0 0 [ 376.004514][T11054] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 376.097887][T11054] Node 0 DMA32: 1781*4kB (UME) 1318*8kB (ME) 893*16kB (UME) 694*32kB (UME) 273*64kB (UM) 97*128kB (UM) 59*256kB (UME) 72*512kB (UM) 26*1024kB (UME) 17*2048kB (UM) 275*4096kB (UM) = 1323860kB [ 376.120947][T11054] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 376.142358][T11054] Node 1 Normal: 199*4kB (UME) 60*8kB (UME) 44*16kB (UME) 150*32kB (UME) 41*64kB (UME) 10*128kB (UME) 5*256kB (UME) 3*512kB (ME) 1*1024kB (M) 1*2048kB (E) 950*4096kB (UM) = 3907772kB [ 376.161400][T11054] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 376.172405][T11054] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 376.182400][T11054] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 376.243846][T11054] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 376.272971][T11054] 60795 total pagecache pages [ 376.287037][T11054] 0 pages in swap cache [ 376.301592][T11054] Free swap = 124996kB [ 376.326139][T11054] Total swap = 124996kB [ 376.351180][T11054] 2097051 pages RAM [ 376.355169][T11054] 0 pages HighMem/MovableOnly [ 376.362118][T11054] 424647 pages reserved [ 376.375563][ T6766] hsr_slave_0: left promiscuous mode [ 376.379667][T11054] 0 pages cma reserved [ 376.409877][ T6766] hsr_slave_1: left promiscuous mode [ 376.424222][ T6766] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 376.443968][ T6766] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 376.484028][ T6766] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 376.499539][ T6766] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 376.555527][ T6766] veth1_macvtap: left promiscuous mode [ 376.562135][ T6766] veth0_macvtap: left promiscuous mode [ 376.568787][ T6766] veth1_vlan: left promiscuous mode [ 376.574195][ T6766] veth0_vlan: left promiscuous mode [ 377.755048][ T5840] Bluetooth: hci3: command tx timeout [ 377.846703][ T6766] team0 (unregistering): Port device team_slave_1 removed [ 377.945082][ T6766] team0 (unregistering): Port device team_slave_0 removed [ 378.486644][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.498527][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.831205][T11078] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.1449'. [ 379.242095][T10903] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 379.386353][T11095] netlink: 'syz.0.1456': attribute type 21 has an invalid length. [ 379.433015][T11095] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1456'. [ 379.449141][T11103] netlink: 'syz.1.1458': attribute type 21 has an invalid length. [ 379.467986][T11095] netlink: 'syz.0.1456': attribute type 5 has an invalid length. [ 379.475783][T11095] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1456'. [ 379.586281][T11102] delete_channel: no stack [ 379.685069][T10903] veth0_vlan: entered promiscuous mode [ 379.717145][T10903] veth1_vlan: entered promiscuous mode [ 379.772857][T11065] chnl_net:caif_netlink_parms(): no params data found [ 379.828525][ T5840] Bluetooth: hci3: command tx timeout [ 380.063084][T11065] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.071340][T11065] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.079191][T11065] bridge_slave_0: entered allmulticast mode [ 380.086950][T11065] bridge_slave_0: entered promiscuous mode [ 380.095748][T11065] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.103630][T11065] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.110947][T11065] bridge_slave_1: entered allmulticast mode [ 380.118797][T11065] bridge_slave_1: entered promiscuous mode [ 380.129841][T10903] veth0_macvtap: entered promiscuous mode [ 380.242766][T11065] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 380.315222][T11065] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 380.541019][T10903] veth1_macvtap: entered promiscuous mode [ 380.570397][T11065] team0: Port device team_slave_0 added [ 380.582331][T11065] team0: Port device team_slave_1 added [ 381.136973][T11065] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 381.144665][T11065] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 381.197852][T11065] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 381.223734][T10903] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 381.252655][T11134] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.1466'. [ 381.288669][T11065] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 381.295669][T11065] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 381.323595][T11065] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 381.340530][T10903] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 381.370783][T10903] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.385489][T10903] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.394503][T10903] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.412561][T10903] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.682832][T11065] hsr_slave_0: entered promiscuous mode [ 381.718909][T11065] hsr_slave_1: entered promiscuous mode [ 381.725229][T11065] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 381.750609][T11065] Cannot create hsr debugfs directory [ 381.909032][ T5840] Bluetooth: hci3: command tx timeout [ 382.050144][ T6766] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 382.068481][ T6766] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 382.202592][T11170] FAULT_INJECTION: forcing a failure. [ 382.202592][T11170] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 382.234955][T11170] CPU: 1 UID: 0 PID: 11170 Comm: syz.1.1479 Not tainted 6.15.0-syzkaller-gcd2e103d57e5 #0 PREEMPT(full) [ 382.234983][T11170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 382.234995][T11170] Call Trace: [ 382.235002][T11170] [ 382.235011][T11170] dump_stack_lvl+0x189/0x250 [ 382.235044][T11170] ? __pfx____ratelimit+0x10/0x10 [ 382.235067][T11170] ? __pfx_dump_stack_lvl+0x10/0x10 [ 382.235095][T11170] ? __pfx__printk+0x10/0x10 [ 382.235116][T11170] ? __might_fault+0xb0/0x130 [ 382.235154][T11170] should_fail_ex+0x414/0x560 [ 382.235184][T11170] _copy_from_user+0x2d/0xb0 [ 382.235205][T11170] __sys_bpf+0x1ed/0x860 [ 382.235230][T11170] ? __pfx___sys_bpf+0x10/0x10 [ 382.235267][T11170] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 382.235290][T11170] ? __pfx_ksys_write+0x10/0x10 [ 382.235323][T11170] __x64_sys_bpf+0x7c/0x90 [ 382.235343][T11170] do_syscall_64+0xfa/0x3b0 [ 382.235366][T11170] ? lockdep_hardirqs_on+0x9c/0x150 [ 382.235388][T11170] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.235406][T11170] ? clear_bhb_loop+0x60/0xb0 [ 382.235427][T11170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.235444][T11170] RIP: 0033:0x7f61d138e929 [ 382.235461][T11170] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 382.235478][T11170] RSP: 002b:00007f61d211a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 382.235497][T11170] RAX: ffffffffffffffda RBX: 00007f61d15b5fa0 RCX: 00007f61d138e929 [ 382.235511][T11170] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 382.235523][T11170] RBP: 00007f61d211a090 R08: 0000000000000000 R09: 0000000000000000 [ 382.235534][T11170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 382.235544][T11170] R13: 0000000000000000 R14: 00007f61d15b5fa0 R15: 00007ffef9858688 [ 382.235573][T11170] [ 382.400543][ T6774] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 382.446387][ T6774] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 382.485940][T11173] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.1480'. [ 382.599500][T11176] netlink: 'syz.1.1481': attribute type 4 has an invalid length. [ 382.607565][T11176] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1481'. [ 382.715848][T11176] wlan1: mtu less than device minimum [ 382.723628][T11176] team0: Device wlan1 failed to change mtu [ 383.553488][ T6766] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.710120][ T6766] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.800773][ T6766] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.911456][ T6766] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.988394][ T5840] Bluetooth: hci3: command tx timeout [ 384.054269][T11065] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 384.076106][T11065] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 384.113909][T11065] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 384.153400][T11065] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 384.239480][ T6766] bridge_slave_1: left allmulticast mode [ 384.245210][ T6766] bridge_slave_1: left promiscuous mode [ 384.256818][ T6766] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.270616][ T6766] bridge_slave_0: left allmulticast mode [ 384.276318][ T6766] bridge_slave_0: left promiscuous mode [ 384.282636][ T6766] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.636227][T11203] FAULT_INJECTION: forcing a failure. [ 384.636227][T11203] name failslab, interval 1, probability 0, space 0, times 0 [ 384.671245][T11203] CPU: 0 UID: 0 PID: 11203 Comm: syz.2.1491 Not tainted 6.15.0-syzkaller-gcd2e103d57e5 #0 PREEMPT(full) [ 384.671273][T11203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 384.671285][T11203] Call Trace: [ 384.671293][T11203] [ 384.671301][T11203] dump_stack_lvl+0x189/0x250 [ 384.671336][T11203] ? __pfx____ratelimit+0x10/0x10 [ 384.671360][T11203] ? __pfx_dump_stack_lvl+0x10/0x10 [ 384.671389][T11203] ? __pfx__printk+0x10/0x10 [ 384.671417][T11203] ? __pfx___might_resched+0x10/0x10 [ 384.671440][T11203] ? fs_reclaim_acquire+0x7d/0x100 [ 384.671465][T11203] should_fail_ex+0x414/0x560 [ 384.671496][T11203] should_failslab+0xa8/0x100 [ 384.671551][T11203] __kmalloc_noprof+0xcb/0x4f0 [ 384.671591][T11203] ? bpf_test_init+0xc2/0x170 [ 384.671623][T11203] bpf_test_init+0xc2/0x170 [ 384.671674][T11203] bpf_prog_test_run_xdp+0x37c/0x1000 [ 384.671732][T11203] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 384.671770][T11203] ? __fget_files+0x2a/0x420 [ 384.671797][T11203] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 384.671830][T11203] bpf_prog_test_run+0x2c4/0x340 [ 384.671861][T11203] __sys_bpf+0x4a4/0x860 [ 384.671888][T11203] ? __pfx___sys_bpf+0x10/0x10 [ 384.671932][T11203] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 384.671956][T11203] ? __pfx_ksys_write+0x10/0x10 [ 384.671981][T11203] ? rcu_is_watching+0x15/0xb0 [ 384.672018][T11203] __x64_sys_bpf+0x7c/0x90 [ 384.672041][T11203] do_syscall_64+0xfa/0x3b0 [ 384.672065][T11203] ? lockdep_hardirqs_on+0x9c/0x150 [ 384.672090][T11203] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.672110][T11203] ? clear_bhb_loop+0x60/0xb0 [ 384.672136][T11203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.672154][T11203] RIP: 0033:0x7f30a8d8e929 [ 384.672173][T11203] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 384.672190][T11203] RSP: 002b:00007f30a6bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 384.672211][T11203] RAX: ffffffffffffffda RBX: 00007f30a8fb5fa0 RCX: 00007f30a8d8e929 [ 384.672225][T11203] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 384.672238][T11203] RBP: 00007f30a6bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 384.672250][T11203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 384.672261][T11203] R13: 0000000000000000 R14: 00007f30a8fb5fa0 R15: 00007fff62baee38 [ 384.672297][T11203] [ 385.384696][ T6766] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 385.408929][ T6766] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 385.444581][ T6766] bond0 (unregistering): Released all slaves [ 385.562488][T11212] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.1493'. [ 385.648184][ T5845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 385.657866][ T5845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 385.683423][ T5845] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 385.693194][ T5845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 385.713491][ T5845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 386.151723][T11227] netlink: 'syz.1.1497': attribute type 37 has an invalid length. [ 386.642635][ T6766] hsr_slave_0: left promiscuous mode [ 386.696551][ T6766] hsr_slave_1: left promiscuous mode [ 386.708605][ T6766] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 386.716054][ T6766] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 386.762070][ T6766] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 386.784194][ T6766] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 386.972502][ T6766] veth1_macvtap: left promiscuous mode [ 386.991050][ T6766] veth0_macvtap: left promiscuous mode [ 387.003136][ T6766] veth1_vlan: left promiscuous mode [ 387.018097][ T6766] veth0_vlan: left promiscuous mode [ 387.839258][ T5840] Bluetooth: hci2: command tx timeout [ 387.991166][ T6766] team0 (unregistering): Port device team_slave_1 removed [ 388.105711][ T6766] team0 (unregistering): Port device team_slave_0 removed [ 388.705084][T11250] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.1507'. [ 388.872348][T11065] 8021q: adding VLAN 0 to HW filter on device bond0 [ 388.928449][T11065] 8021q: adding VLAN 0 to HW filter on device team0 [ 388.941839][ T6782] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.949003][ T6782] bridge0: port 1(bridge_slave_0) entered forwarding state [ 389.013211][ T6795] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.020428][ T6795] bridge0: port 2(bridge_slave_1) entered forwarding state [ 389.166956][T11280] netlink: 163260 bytes leftover after parsing attributes in process `syz.1.1518'. [ 389.249322][T11065] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 389.436016][T11221] chnl_net:caif_netlink_parms(): no params data found [ 389.907807][ T5840] Bluetooth: hci2: command tx timeout [ 390.289530][T11221] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.308548][T11221] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.331693][T11221] bridge_slave_0: entered allmulticast mode [ 390.347536][T11221] bridge_slave_0: entered promiscuous mode [ 390.397425][T11221] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.416877][T11221] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.444199][T11221] bridge_slave_1: entered allmulticast mode [ 390.474779][T11221] bridge_slave_1: entered promiscuous mode [ 390.488080][T11304] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.1524'. [ 390.752533][T11221] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 390.776284][T11065] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 390.790348][T11221] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 391.016485][T11221] team0: Port device team_slave_0 added [ 391.050778][T11338] netlink: 'syz.2.1533': attribute type 4 has an invalid length. [ 391.051389][T11221] team0: Port device team_slave_1 added [ 391.087899][T11338] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1533'. [ 391.364721][T11338] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1533'. [ 391.390113][T11346] syzkaller0: left promiscuous mode [ 391.395383][T11346] syzkaller0: left allmulticast mode [ 391.432033][T11221] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 391.441616][T11221] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 391.472114][T11221] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 391.493959][T11221] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 391.520335][T11221] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 391.586242][T11221] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 391.993140][ T5840] Bluetooth: hci2: command tx timeout [ 392.214452][T11362] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.1540'. [ 392.282562][T11221] hsr_slave_0: entered promiscuous mode [ 392.305227][T11221] hsr_slave_1: entered promiscuous mode [ 392.333107][T11221] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 392.341077][T11221] Cannot create hsr debugfs directory [ 393.161151][T11065] veth0_vlan: entered promiscuous mode [ 393.238668][T11375] netlink: 'syz.0.1544': attribute type 39 has an invalid length. [ 393.476021][T11065] veth1_vlan: entered promiscuous mode [ 393.794552][T11065] veth0_macvtap: entered promiscuous mode [ 393.809979][T11065] veth1_macvtap: entered promiscuous mode [ 393.946401][T11065] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 393.985753][T11065] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 394.039522][T11065] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.066387][T11065] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.078081][ T5840] Bluetooth: hci2: command tx timeout [ 394.100140][T11065] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.137764][T11065] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.383499][ T6778] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 394.404779][ T6778] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 394.495732][ T6766] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 394.519399][ T6766] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 394.560839][T11221] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 394.597377][T11221] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 394.876338][T11221] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 395.315416][T11407] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.1555'. [ 395.437117][T11221] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 395.614435][ T6770] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.940652][ T6770] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.002930][T11221] 8021q: adding VLAN 0 to HW filter on device bond0 [ 396.074539][ T6770] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.121925][T11221] 8021q: adding VLAN 0 to HW filter on device team0 [ 396.136964][ T6774] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.144198][ T6774] bridge0: port 1(bridge_slave_0) entered forwarding state [ 396.166838][ T6778] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.174055][ T6778] bridge0: port 2(bridge_slave_1) entered forwarding state [ 396.199855][ T6770] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.416615][ T6770] bridge_slave_1: left allmulticast mode [ 396.430974][ T6770] bridge_slave_1: left promiscuous mode [ 396.436751][ T6770] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.446950][ T6770] bridge_slave_0: left allmulticast mode [ 396.453303][ T6770] bridge_slave_0: left promiscuous mode [ 396.459836][ T6770] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.780260][ T6770] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 396.791831][ T6770] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 396.803754][ T6770] bond0 (unregistering): Released all slaves [ 396.917341][T11221] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 396.996265][T11221] veth0_vlan: entered promiscuous mode [ 397.041022][T11221] veth1_vlan: entered promiscuous mode [ 397.073660][ T6770] hsr_slave_0: left promiscuous mode [ 397.079844][ T6770] hsr_slave_1: left promiscuous mode [ 397.085678][ T6770] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 397.094832][ T6770] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 397.102787][ T6770] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 397.112532][ T6770] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 397.130471][ T6770] veth1_macvtap: left promiscuous mode [ 397.135986][ T6770] veth0_macvtap: left promiscuous mode [ 397.141781][ T6770] veth1_vlan: left promiscuous mode [ 397.147100][ T6770] veth0_vlan: left promiscuous mode [ 397.718928][ T5845] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 397.734200][ T5845] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 397.743262][ T5845] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 397.750486][ T6778] wlan1: Trigger new scan to find an IBSS to join [ 397.750523][ T6778] ------------[ cut here ]------------ [ 397.750533][ T6778] UBSAN: array-index-out-of-bounds in net/mac80211/scan.c:1224:5 [ 397.750554][ T6778] index 1 is out of range for type 'struct ieee80211_channel *[] __counted_by(n_channels)' (aka 'struct ieee80211_channel *[]') [ 397.750581][ T6778] CPU: 0 UID: 0 PID: 6778 Comm: kworker/u8:37 Not tainted 6.15.0-syzkaller-gcd2e103d57e5 #0 PREEMPT(full) [ 397.750605][ T6778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 397.750617][ T6778] Workqueue: events_unbound cfg80211_wiphy_work [ 397.750650][ T6778] Call Trace: [ 397.750658][ T6778] [ 397.750666][ T6778] dump_stack_lvl+0x189/0x250 [ 397.750703][ T6778] ? __pfx_dump_stack_lvl+0x10/0x10 [ 397.750733][ T6778] ? __pfx__printk+0x10/0x10 [ 397.750776][ T6778] ubsan_epilogue+0xa/0x40 [ 397.750800][ T6778] __ubsan_handle_out_of_bounds+0xe9/0xf0 [ 397.750850][ T6778] ieee80211_request_ibss_scan+0x600/0x8b0 [ 397.750897][ T6778] ieee80211_ibss_work+0xde7/0x1060 [ 397.750937][ T6778] ? __pfx_ieee80211_ibss_work+0x10/0x10 [ 397.750979][ T6778] ? ieee80211_iface_work+0xf39/0xfe0 [ 397.751010][ T6778] ? rcu_is_watching+0x15/0xb0 [ 397.751048][ T6778] cfg80211_wiphy_work+0x2df/0x460 [ 397.751080][ T6778] ? process_scheduled_works+0x9ef/0x17b0 [ 397.751112][ T6778] process_scheduled_works+0xade/0x17b0 [ 397.751180][ T6778] ? __pfx_process_scheduled_works+0x10/0x10 [ 397.751230][ T6778] worker_thread+0x8a0/0xda0 [ 397.751294][ T6778] kthread+0x711/0x8a0 [ 397.751325][ T6778] ? __pfx_worker_thread+0x10/0x10 [ 397.751353][ T6778] ? __pfx_kthread+0x10/0x10 [ 397.751375][ T6778] ? _raw_spin_unlock_irq+0x23/0x50 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 397.751401][ T6778] ? lockdep_hardirqs_on+0x9c/0x150 [ 397.751426][ T6778] ? __pfx_kthread+0x10/0x10 [ 397.751448][ T6778] ret_from_fork+0x3fc/0x770 [ 397.751477][ T6778] ? __pfx_ret_from_fork+0x10/0x10 [ 397.751512][ T6778] ? __switch_to_asm+0x39/0x70 [ 397.751533][ T6778] ? __switch_to_asm+0x33/0x70 [ 397.751554][ T6778] ? __pfx_kthread+0x10/0x10 [ 397.751582][ T6778] ret_from_fork_asm+0x1a/0x30 [ 397.751626][ T6778] [ 397.751726][ T6778] ---[ end trace ]--- [ 397.919152][ T5845] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 397.996588][ T6778] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 398.003942][ T6778] CPU: 1 UID: 0 PID: 6778 Comm: kworker/u8:37 Not tainted 6.15.0-syzkaller-gcd2e103d57e5 #0 PREEMPT(full) [ 398.015337][ T6778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 398.025403][ T6778] Workqueue: events_unbound cfg80211_wiphy_work [ 398.031660][ T6778] Call Trace: [ 398.034945][ T6778] [ 398.037896][ T6778] dump_stack_lvl+0x99/0x250 [ 398.042508][ T6778] ? __asan_memcpy+0x40/0x70 [ 398.047110][ T6778] ? __pfx_dump_stack_lvl+0x10/0x10 [ 398.052326][ T6778] ? __pfx__printk+0x10/0x10 [ 398.056934][ T6778] panic+0x2db/0x790 [ 398.060864][ T6778] ? __pfx_panic+0x10/0x10 [ 398.065289][ T6778] ? _printk+0xcf/0x120 [ 398.069459][ T6778] ? __pfx__printk+0x10/0x10 [ 398.074063][ T6778] check_panic_on_warn+0x89/0xb0 [ 398.079015][ T6778] __ubsan_handle_out_of_bounds+0xe9/0xf0 [ 398.084757][ T6778] ieee80211_request_ibss_scan+0x600/0x8b0 [ 398.090582][ T6778] ieee80211_ibss_work+0xde7/0x1060 [ 398.095791][ T6778] ? __pfx_ieee80211_ibss_work+0x10/0x10 [ 398.101457][ T6778] ? ieee80211_iface_work+0xf39/0xfe0 [ 398.106850][ T6778] ? rcu_is_watching+0x15/0xb0 [ 398.111626][ T6778] cfg80211_wiphy_work+0x2df/0x460 [ 398.116751][ T6778] ? process_scheduled_works+0x9ef/0x17b0 [ 398.122483][ T6778] process_scheduled_works+0xade/0x17b0 [ 398.128067][ T6778] ? __pfx_process_scheduled_works+0x10/0x10 [ 398.134077][ T6778] worker_thread+0x8a0/0xda0 [ 398.138705][ T6778] kthread+0x711/0x8a0 [ 398.142785][ T6778] ? __pfx_worker_thread+0x10/0x10 [ 398.147906][ T6778] ? __pfx_kthread+0x10/0x10 [ 398.152511][ T6778] ? _raw_spin_unlock_irq+0x23/0x50 [ 398.157715][ T6778] ? lockdep_hardirqs_on+0x9c/0x150 [ 398.162938][ T6778] ? __pfx_kthread+0x10/0x10 [ 398.167527][ T6778] ret_from_fork+0x3fc/0x770 [ 398.172123][ T6778] ? __pfx_ret_from_fork+0x10/0x10 [ 398.177244][ T6778] ? __switch_to_asm+0x39/0x70 [ 398.182017][ T6778] ? __switch_to_asm+0x33/0x70 [ 398.186791][ T6778] ? __pfx_kthread+0x10/0x10 [ 398.191388][ T6778] ret_from_fork_asm+0x1a/0x30 [ 398.196176][ T6778] [ 398.199356][ T6778] Kernel Offset: disabled [ 398.203733][ T6778] Rebooting in 86400 seconds..