last executing test programs: 19m31.900192687s ago: executing program 1 (id=1362): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000140), 0x4) sendmsg$kcm(r0, 0x0, 0x4) r1 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x88, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x1000001000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19m31.519464016s ago: executing program 1 (id=1366): r0 = socket$kcm(0x10, 0x2, 0x4) (async) r1 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xe, &(0x7f0000000340), 0x4) sendmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)="48000000140081fb60590c04000a020011000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8d96d6f", 0x48}], 0x1}, 0x24000014) (async) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0), 0x4) (async, rerun: 64) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0xecc}, 0x4240}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x221, 0x0, 0x0, 0xc, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) (async) socketpair(0xa, 0x3, 0xff, &(0x7f0000000300)) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000100)=r3, 0x4) (async, rerun: 64) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xa, 0xffffffffffffffff, 0x0) (async, rerun: 64) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) close(r4) ioctl$SIOCSIFHWADDR(r4, 0x8b32, &(0x7f0000000700)={'virt_wifi0\x00', @local}) (async) openat$cgroup_ro(r4, &(0x7f0000000740)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) r5 = socket$kcm(0x2, 0x5, 0x84) (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x3, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="180200000000000000000000000000008500000053000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0xe, 0x0, &(0x7f0000000680)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) setsockopt$sock_attach_bpf(r5, 0x84, 0x11, &(0x7f00000001c0)=r3, 0x4) (async) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000040)="6700000011008188040f56ecdb4cb9cca7480ef434000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x4000010) 19m27.985444045s ago: executing program 1 (id=1373): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000600000004000fffff0000010400000000040000000000000000000d040000000000000000000010040000000400000000000008030000000000000061"], 0x0, 0x52}, 0x28) 19m27.829322031s ago: executing program 1 (id=1374): perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x8f, 0x7, 0x5, 0xb, 0x0, 0x3, 0x10040, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0xbe, 0x5}, 0x4a04, 0x8, 0x5, 0x6, 0x9, 0x7dc5e388, 0x7, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x15, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2080, 0x0) socket$kcm(0xa, 0x6, 0x0) socket$kcm(0x2, 0x3, 0x2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0xfffffffeffffffff}, 0xc001, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000002c0000002c00000002000000120000000400000d"], &(0x7f0000000480)=""/4096, 0x46, 0x1000, 0xa}, 0x28) sendmsg$kcm(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000001500)}], 0x1}, 0x0) 19m27.550881319s ago: executing program 1 (id=1378): perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xfe, 0x0, 0x0, 0x2, 0x0, 0x0, 0x682c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x2, @perf_bp={0x0, 0x9}, 0x0, 0xc8, 0x0, 0x7, 0x4000000000, 0x2, 0x13, 0x0, 0x20, 0x0, 0x8}, 0x0, 0x3, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="8fedcb7908009875f37538e486dd6317ce8100072900fe80000000000000875a65019ff57b00ff0200000000050000000001ffaaaaaa"], 0xfdef) 19m27.317390673s ago: executing program 1 (id=1383): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000300), 0x12) r3 = openat$cgroup_ro(r0, &(0x7f0000000100)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x0, 0xc, &(0x7f0000000340)=@framed={{0x18, 0x2}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x23}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x14, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000075"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000540)={r4}, 0xc) write$cgroup_freezer_state(r3, &(0x7f0000000080)='THAWED\x00', 0x7) mkdir(&(0x7f0000000180)='./file0\x00', 0x120) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) 19m12.294583282s ago: executing program 32 (id=1383): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000300), 0x12) r3 = openat$cgroup_ro(r0, &(0x7f0000000100)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x0, 0xc, &(0x7f0000000340)=@framed={{0x18, 0x2}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x23}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x14, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000075"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000540)={r4}, 0xc) write$cgroup_freezer_state(r3, &(0x7f0000000080)='THAWED\x00', 0x7) mkdir(&(0x7f0000000180)='./file0\x00', 0x120) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) 3.625626479s ago: executing program 2 (id=7019): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000940)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000240e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 3.585987373s ago: executing program 0 (id=7021): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f80)=ANY=[@ANYBLOB="b702000009000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2e6405000000000065060400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000002c3f2cc2b7956244cef7baf48e6d2885a09a87507ebfc75b5b0f4e4309ebcdac5f7a860c008cbdd3b4c3b7f28754860c9c781f6410457253e89ad528d985636a86ec0f68f59cd1159a2c2e85d726859a919cc9548a349980d1ccdce27f94bc074c27f81078545c146a0857153b7b8f00034debae58a4ab415b0d7ff0575cc272cd3d7e8d974927676468ff2d86e0ffac94792ed9cf6b40b3cf252a47c05ae8a70d57cc3e067d1867b54d24e20000000000000020009ebf84d3b042d6e432cd080e3b57239f0127473e6ba922aff649609d40b47ec331ccba3cf96f9483ff19a6471bf5abc742d9cbcfb964b11b31034694a6aad86cf08a6c7b2235dc99de9aa3e6b77c7a2877261ed32da90864987f30926c9013eec3b86836ae50447aa5a79f40c235000000453302712c3d8fc4e2b61adb0695e800000000d4f4e91f0000002c33df424d1bafe5725c8a404724f8a4f1cda7997b65954f74097560b91da309b887af2485c2d9ab09b523000000000000000bf7b2ff4602aec1eea200000064881c5630521a08e051374cf05c921a06fb7818000000009dc8d95e0e5b365d10e1004dae58b3b5b89709b0ff47b200000000004000cbef88811dc8c1b27ac7d9a6bb70f60eb9c01dd2fc79b85e4d961498f3a80131d21d856177a2189f45d011ef1da5c6d57bb8fd387ccea9c3899a914e47e82f040000009d81003f927355408f87264797d3fa970949793b94329d580500d1f91c0d22587e05a61e3d8576ca168e88d7a9af95b04a37c27bfffab9abbb31fa8c0080258cfa6d3f166e695f3c56490aeef464d9965d70a50f1282619344f223548e750339643adac1322c87ca253ff2fb1882760d6feab16bacdf83c11816dbe959ebc5ec479c8319f73e2249eab0486b110702a481d3b51976a52303056e800b4ae5acc2dfae60ab958e9f3ef9b4aaa4e8d6166f636a65eb1d672bf2000000cda8462cc9b16624998be65683321e970000000009b8e20762c1bf4a3eb6769f2b23e842bacd9c685edea0ffa3e975424f8ede49e61a4de808a38ba3512d64dc71867df4eee3f1ff791cf7c9862f98b45852e4b2f78721b978a2df2f2a29a387c6f0576b36038f819286eca99a6a434811cf2a117d775fe986a49fb82cf5f15972d5ab18f1045384501adabb20f7b0e15ff47f1744e2341b59034959a1289ba6e243668e6735305707e3de7652bfc5b60c76deff43a1d6fd6a4180ab723735abbeffe7f2ec3a0bb86f9eddfc0f3d1d503d7a54b49e1ae6c5aa620d27e91aa0aa0ed6fcacfc91fbb4c256409e54daefbb107c381fa729ff5f3907d93430da178d685d7730f5e129438a5214f722096d2986334c2576bef69145d3fbd78a9059e454474f92e65828b018174a9f4738b8c71fbdeac26ab95e02f9a847182766964976b1fccdb9f35721e43e33883cf16ed1343fb7429eb395123b0a4262b7023c22039b9002589a378ed4c6267965af78b861bd025312538cec97966b8973d4e299d9802264d06e40ae118e1d242d1128dcedeb44030df12ef68f78215d65f96eb55db8cbcb060008000d988374f85451a694ffe38a1d03916ff10dc82b31c98d42e1a1bda1290de1a499a5a385b31112a48ba3e6d6849914c1788a7aca37177cc341fff44fec5c5e0abae01c439a1b0311e074e81ae9993b5b3459553e4ece78d4c1501c70f5d81e0725d5b273755c0000000000000000aa4234ff82182952a76233d18e7d49638aeb04e7a9e9e7eafb7c255372795d2d192a0a33cab0f5bf2e93e0544fcdf2df2bc6ce96e5a11993d54f97a23754ac828674dbb93c0ad345715be4a13678b01edf76d8a923655800a2c88cce004505ab45d8f5f88aa887bbce5c18970428516f6099bdbb2cd7a2356397f1a0a23e662e2a6c4834400cbaa41c3c574e6e6aefb7a68da5ec1ae49f968bbe0e0bf9878516f553639f5b4828e92019b61f5874be1c7cdd9482df50bc24b8a1fa10d291390eb84e26a2e8dbeaa45604b05a116c1210a7540bf81005044273f5a8ffc538db289350eb248e483bd8920efcf30a798c2b636243e0a37262ca47dfeefa753ba528f7ba77e825051ce69b4475d7d714ba0c636e6ae9f710411d30ef424aeaabe057c7df6ff8f767bcd9012e1047c686f5ccb76ab3a5df53cbc22ba7ea8f6a8e220bb4d83de1e4dc19d6c1be841503850803bc2c2d5e0e34270a7f1cca0c6c53a8e5f891f7a793a70da62d6d88fbb90d220acc687931b42d6be83ab870da3c0a567f5e65ec0457f4ad2a4ec0b671b36388afd5520a8483a4b11f7d02a409315f0f9e59f47668d68a74838d6976e12fd45200014041dffacbf60892ec8bd7560686f137a806d3dfaba900b47cac62f828342fff009adb5b2251461a1b9d6ba625b8fe04e69a1a4be2696f0000000086e172932e03000000000000005942e1b9d6dc28ab8e19e1111dd893e801015642faf21eef40d6e7de3ef62c4bc5ff17e7aeb2841098f845d1cc9ec4eee79c298fb0ba939b13707044e2e9cc0d350438c1c8c6bb9a38c6ac5ca0d9cf1f3d6915f25cb26edfc28b3079b97df32601240e454db103fb0c4a143673a3f160d3a7b83ecd0509ce9eba0c7bf7843799b1b56a234f9eaab8a3f14f1472bb6aaeb8ac9ee4054605558ab31f339f6a4caf2ee2fd01f34dca3300000000000000000000000000000000f59f8e6e00000000c44130098d833a24000000000095e6f945ba9a941cef5e70b8c152321e24b5b29bcf374dcf5a29a35d76e6e2bf8df95462690a4fc9ec8129e92b6ebb4b40a992a75d3c595426ae40d0bfc87db24d856359079b29b3c374d081c300b2cfaa596d24e800ef8e2201f2fb7a9946f89f9f31f7cbd603fd7f8898c70b5c65f2e28f22e1a79a6af3a54861b07f124642e98389557affbdede09b5566a4a1ee73b20846810030a754acddcdafe3ceeeebc0b5f2fedfe7d198e3067f3dbac9441a9ab8409cbbb7e15b9ae3944097de34de2001c8533a3766e6e4c4c4702ccb932a27a3962814cd6aa8fc684beeaa3932efae3a9052be8eec1e95f6ad8d41dd34829503ba4b66e27154cb6e34aa13450522df1723130b6fe347c93f00e40e293c98d849a33f773c743728992f40faccd5c23130a1c6bfd6fc661bca1598137ddd1090ded672f5a48a40cab3f640c8241a364cbdd3f188eec7da7bccafbd5bf28a46f0eecc6b550471b0b0770c6a5a411c0e0b19e15a461e7c6833ba936e214b013f2819ec6572a43b5cd32b11d7e4f8dcf8f7820a17b7b2ee6178a03351dd25091e46bfd82a3979b9cad109fd6217cd52aa81bdabd50826a674bd16b8f7e6aed12a305366599f5f029a7b24558c027518c669760500002f1c19d16a6f391906000000cc0bbbfb8c698ecc137d96711100e0108d3bd2afed0b279ebf0527552a9331e646c424b14ffbb815622bfd2f635855bed1b164d0a56bd104be069854111c5b26ec3c652b5f0a6b9676dae987ec23456ba05a4dfb15321ef6b76e7e547a688c67ab531cfc784c9f940d9fb0464a6cce635e14b80dc5c1c64e75e6bd5355d84f8df272f18f58c570e7afd83ee77f157c146aa747b728969aeb4aba1d8f9de1b3fb8ab6ea50e884c2ea98e6400bf0c5ae2887cd1da0e57ccfdf5eca2b455247efcc13102846c0a85f20c80007c0ce6efce627b95b8ad3003385de97101678fb2163ecea6e70a77a6fbc089e31a5ccece932229b8f79faa6863d6857c3d9a9710f9f8ad16eeb8342278f311cbc226498028234d21466892983378fe64acbb44f694cd78e43c74aa75505cb1c91b189f8f89f233a05f5cd4e173a373178557843dd705268f74a9e5429945503195aefd6706b584d8408c9652b3fe68500747f7ee8375fa559c3ad195d3795df1a8364cd13acc3256ee4634c73eeb6954d0fcf09ab84df0b8900e0c6fea2ccb600ae7a4b128cae19df160e7c207b89132d1d5bdc9ffc79f0549b82df521817651d5fead5128205b92ccdccc69407ab556217af277af911dbd456dfc43dd061b6c91485dcc208cf0b3d0bf851de413f5de5ec015e296914afab6411109355e027ce04990d9aae251b9deb11b7db45b9f15b7b55d8fdbedd9e6cf891205694f02be8b9ea8ecd41308a0e1b93ae3435bfa88b440b1f701b4d0fc49c82193f27f8023b630ea97edbf3bf421a0a1a2b4ac7bb30bcd1cdd172c0df37408fd6827bb03e8742fc1c7a2befd1299928c5f79e846a8dc7ca648d960a759e6711b69776896a9656d59af6d44bc5348229fa84ae78af8421a22c4b4c17a3d24a4a0104000000000000d77cc4eef51c2b417c8c7458ddd7dd9d1a863bf0a9e1a30a19020490038017a5c7e474c83302a2c2b5c976dacf3dda7191c757f208000000000000005f7ed983f65723fbb36b9b51abb0dbcd335700000000000000000000000000000086666201251aa4f139d0485ffcf89f01639fd1579a3802f720a0215c720a97071f5065a23642a58275dbca444b00e2e5835185d5d5b2796eb0fe32cf3b0633f58ecc7648c3c6efe82f93a3008052416512eea30ea9472e0b456a652883c0907323cf03be193a05008cdef7a98a1671a1918df310dc4bfd61c3db4819ab1c57b348a8ff1ed36364a20fe846f1cd086058d139ce528425b31c5d08b433562ffb318c1285011f9b78b2401989384311101e452f54661ecdb2514a6ae50dbdd422de0f0f8c670000000000390be79688f80c47314cb1b14afcaa5d23f9032e0ec51f45f447d6a7c798fcf7e60e2180e289410801e4f03a0e140f388f25b92da1025d8409e171a2336ed71cca86eb4658fe06df286e0e20276b0618eeffd05774f15686cd9d3182ca2fec863875f305fed6baf48a594db12582a38cfdffffffffffffff0cf8d920517835fe7d09cfcb624f6931f1cc6f6b71f58de9ddc38e0c43992f6bc57a718d0cfd197b5324b4e05ef1caa96db3ae1f2f2e5791faba2ebbe1a6faf21f2748fb1fb6743c3ca8af4e6b02518c9b7fdc1b5721eb1c3ed98db25536f74ac7861afc94544e52dcb5c60460a05802e3b437ac977bfa26b887a2443e8d559c58187f004eb82b07937df6e96f77ed551926bec4e0188fae10a35d1c5f1768ac6be829bea46f1babc3d74adc31ca71bdab9079e4288881b434484eadde9da6b81802842abd462d546c59d87acc014f81d3414759bda12d2a2c6bc1bfa807bd3101eb227184a61107b6d0618e2a3b842671e084ac3f0ff94dc48b51601247318ab4d1c5106458000000000008000000000000cfee0107e6c2fe8639d926829fdbbd86bf591a8c3c235d8939af9d923f648165881a6c29997234406400b3b1c321cc158dbe17123eace30000000000009ea77cb4d3ca892600000000796de6ae4ae40bdf9a6e8c5dc29562262af9cd54e8e3ecc7e3c8cba0ecc791683496c4e5c1a5729714d9f9031f49b400cd2667b4ea6df54809615a4f973f93e6ccec72f16ff998e29ed99df733680a9d5cea57f99cc139b6ea9014f3000000000000000000000000000000000000feeab45a4046a622b0dceb413e4e39b7317e92cbed46b41ab5115bfb542c933783d750852dfdc6656aaf15e10615a88821f2f1bc53969b52d6852755e7681ad5beda80b38ccd34116b99f50b4fdd967b3f20f260455412b67563e40e323bde9d673fceda0ad6981565c8a183d928903b4f4472dde41b6dcd75314c31e704dfcb222c8359fe88944f852242270c932abfaeece0843d708f5cd25b2a63ae1e79723c1c3c013836b47da0a35d0f34c070000000000000422ae2c148d444dd437a7d2f5e575009bc2d17a199802409329dae8baa58d3de63ad45328a9d4dc1ace543dfe11913c6c6413f8f7a15657d012fea460bb4656a20df1ba26932b0ef49f8ea88d7b4c1289314ba789661640f1b5d7cbae103fa95b0035f1e8e866207d4796eab0992704f9e00be4b1af8dfa9e94ad74e607ea9d7d7a95ed5a15429426abbed8d2c657018305c6f9e5159a5453f958991a908ff4cb2e8cbccb1d3c8daf754e4b01b2edd023e5bfdf293bd28fc1f8885f6edd5a715df4d180247feb08e9e2e5126c48be6098e711f0d86de5d76fdccae34eef9197c32ab4e6fcb52eb9ce18fdb621a75913a97254d783778203ec0bd1a8859683e1d01da4e81fb73bb3b358340a0310bf5ae17b917208da607fd7b125cf99fd3e9056f5184df7570ede94b736ae354b5b8ae2cc473b455f2f86d47c69027676bf1141f316b0f278f1692406572ee82766f8e5ff1cfec2a7a6cab7d0f2582a877c9bd4ca81089373f738d02e6bb4d3df30ac0f041e51ad36e1ff140812baf54b80635cc80963c8f69fa4506f7a30c99d3e538cc0aeafcad86ead38ed949aa3c204aea50e5e0039f01b82595b7dc921a8acc1f76340f060cc9a3acad3451c17dc9b5ca5d10a0cb1708592d1900a046f33761d50895febd9fd58cb132989766cf7c252daac259576ec218e3857e6fa97fe445d1fab51d87302a4bb28a4cfe462ee4849cc6832650188ca187d85509d8beccf9d9cf752368985804195b9fd2faf1aff8248f3981bd55cbbf514cd8365fee72cc7af053e5388ceadadb96a9acd5261df6a90cab13f58f6d563c9ab4ad37297aecffd8446cb2b14ec36a99af8393e3760d5970ba1debdcbccd54012c559ee2797ff962328aa6a252c0756e396ce4d52937546675203bdf1d6b120acac576523f8b1daa922188bf61536312f90dba92fb380c3c6fb5f9883a2c4dd99a1bac9b7cb25ff2ef9bd58ff97ddfdd2d4bcc371ee82245b57cd91a7fa3479cd339f54a5c422b753cd42d441ea881d46e419312db1f0cccced13468a188df7ab4840b9961e2a8b5202c9d9b00ee912572eea15d13abdf3b21ad680c88a513021c1d3a7b30d64960c03a01364b2324966bd89d917b15dcb4f8cbacfe05ddcc213d14189edcd9f8b828ebaaab4f56470d3abef47b6d88dc438c9b0a253c26c386464754e76c0d7bfbc1dfa7248982ec26bd725eb623bb12f96e63eb5d1a0030e58a6653247c986c7ca9f15fd84d5eb1cd5ee35c4f464dc1a789b06c6c7074fc927680eac8546b2aee2f8867d6bf36b88a99ff67c7b2dd68ae3380622653efcad276a0f4b446091b80653014e67629dfde0091c7f090a22b5c427d03ddbc"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa6, 0x0, 0x0, 0x10, 0x3}, 0x48) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0xff, 0x0, 0xffffffffffffffff, 0x9010, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={0x0, 0x4}, 0xce6b9b20411c70f4, 0x800000000000ca, 0x0, 0x9, 0xffffffbffffffffc, 0x0, 0x0, 0x0, 0x400000f, 0x0, 0x3}, 0x0, 0xc, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x104101, 0x4, 0x0, 0x1, 0x9, 0x10000000, 0x801}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x3) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20488, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x111d09, 0x4, 0x10000, 0x1, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[@ANYRES8=r1, @ANYRES32=r4], 0x9a) 3.208666541s ago: executing program 2 (id=7022): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7f, 0x2, @perf_config_ext={0x7fffffff, 0xa2e}, 0xc501, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000500)={@map, 0xffffffffffffffff, 0x14}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={r0, 0x0, 0x0}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000005c0)={0x0, 0x1c0000, 0x10}, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan1\x00', 0x800}) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080)) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa19a, 0x1000}, 0x0, 0x0, 0xffffffff, 0x5, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r2 = socket$kcm(0x2b, 0x1, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="02000000040000000900000001"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x11, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b705000000000000850000000400000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r4, r3}, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$TUNGETSNDBUF(r6, 0x800454d3, &(0x7f00000007c0)) setsockopt$sock_attach_bpf(r2, 0x6, 0x10, &(0x7f0000000200)=r6, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) 3.160441296s ago: executing program 0 (id=7023): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0}, 0x4100, 0x0, 0x0, 0x9, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x2, 0x3, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}}, 0x0, 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20003}, 0x94) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB], 0xa) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000380)={&(0x7f0000000500)=@nameseq={0x1e, 0x1, 0x0, {0x43, 0x1}}, 0x10, 0x0}, 0x0) r1 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000540), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x6, 0xb, &(0x7f00000012c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffffbfa3000000"], &(0x7f0000001340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001580)={0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000018c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='+\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB, @ANYBLOB="a67716880a8ebc55964d673d072e9b184d9954fcd41fde60027c6262612b327ec06e2049c194b51e12bcfd50d5dd63140b886080a54684e83485c6209ea2400e38a8f517e433018c18a410dade2589205cf9dab0880ec75a6319cffdebfed938a747aaa2ce41ce63cc655c12cd77024cb483daad0a737b375aac2bf5af1c864d727c5e1d16270fb2a94959f5c366f7e72abeb29ee611333417e533cfee712a1f87f20c71a9dafb47d0828df84e09f17f106a7ccb6b09dd3b48232cb55dab7670d3beb24b650ec88316dbf728900577c34b91987306926d37fc3cea741db83f0bf3", @ANYRES64=0x0], 0x20) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001680)={0x0, 0x2}, 0xc) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000016c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xa, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x4}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001800)={0x18, 0x4, &(0x7f0000001380)=@raw=[@ringbuf_query], &(0x7f00000013c0)='GPL\x00', 0x5, 0x28, &(0x7f0000001400)=""/40, 0x40f00, 0x40, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001480)={0x4, 0x1}, 0x8, 0x10, &(0x7f00000014c0)={0x2, 0x2, 0x0, 0xe}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000001740)=[r3, r5, r6, r7], &(0x7f0000001780)=[{0x5, 0x2, 0x10, 0x1}, {0x5, 0x4, 0x1, 0x9}, {0x5, 0x1, 0xa, 0x6}, {0x5, 0x3, 0xb, 0x3}, {0x5, 0x3, 0xa, 0x4}], 0x10, 0xffffffff}, 0x94) bpf$ITER_CREATE(0x21, &(0x7f0000000580)={r1}, 0x8) r8 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r8, 0x29, 0x24, &(0x7f0000000100), 0x4) sendmsg$sock(r0, &(0x7f0000000a00)={&(0x7f00000005c0)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000640)="71b0f652274cb87a61247e5ab05307ff86bbf82b00a8e5349c3007c256c07cb3b5eaae47410ed74656e6f63f4fe25900d7c6cc93a7bf6a8177c622ef85", 0x3d}, {&(0x7f0000000700)="0162d5039b3e4b9188757b31313b88ec529c707fcb65e4d19deeb00ad50acd3fa8542b24d2a581074bf2056f91218da1795c91f766fdafeae054134325e484bc3a73a82239548202c695e49a459c60ef8d96b294bca33f605f53a4649fb8491ddc3ae9a3ed1c438240dca2bcc2ac4ece8550e7d7828deec9c82d6b8769c6aa53e78f5638e48cf091c965a1123caf0478fafef0722fffe9dd7600ed560f79c8956b78f2757302fa7487cd163e3c7b49e835f303a8da866211dbbb1d5df641de", 0xbf}], 0x2, &(0x7f0000000980)=[@txtime={{0x18, 0x1, 0x3d, 0x9}}, @mark={{0x14, 0x1, 0x24, 0x9bdc}}, @txtime={{0x18}}, @timestamping={{0x14, 0x1, 0x25, 0x5c8}}], 0x60}, 0x20000010) sendmsg$kcm(r8, &(0x7f00000001c0)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x2940000, @remote, 0x9, 0x80}, 0x80, &(0x7f0000000280)=[{&(0x7f00000002c0)="f4000900062b2c25fe80000000000000dc8b850f238466ccfe807a4c0000bd6e911b51818462b400060000016e50dcd29a7a9daa67daa6873e747a7d55f14f472f6ba03f", 0x44}], 0x1}, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0x3, &(0x7f0000000c80)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000cc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={r9, 0xf8, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000e40)={r9, 0xe0, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000f80)={0x6, 0x3, &(0x7f0000001040)=ANY=[@ANYBLOB="180000000000000000000000070000009500000000000000f55f31fa59222ac75ee3897389db6cb87d5bd7ab376ce20cfd7f"], &(0x7f0000001080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r11}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000010c0)=@bpf_ext={0x1c, 0xf, &(0x7f0000001180)=ANY=[], &(0x7f00000011c0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x26, '\x00', r10, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1bc0a, r12, 0x0, 0x0, 0x0, 0x10, 0x81}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x4, &(0x7f0000000900)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x64}, [@ldst={0x5, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffff8}]}, &(0x7f0000000940)='GPL\x00', 0x5, 0xc3, &(0x7f0000000ac0)=""/195, 0x41100, 0x0, '\x00', r10, @sock_ops}, 0x94) 3.093607153s ago: executing program 4 (id=7024): bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x3, 0x7f, 0x7, 0x9, 0x0, 0x100, 0x208d0, 0x6, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffff, 0x4, @perf_config_ext={0x8, 0x14ed10b8}, 0x8000, 0x5, 0x1, 0x9, 0x4, 0x7, 0x0, 0x0, 0x5, 0x0, 0x8001}, 0x0, 0x10, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xfffffffffffffff9) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33a2d912}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000280), 0x8) bpf$LINK_DETACH(0x22, &(0x7f00000002c0)=r3, 0x4) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) recvmsg(r4, 0x0, 0x40) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) perf_event_open$cgroup(&(0x7f0000000000)={0x5, 0x80, 0xb3, 0x3, 0x6, 0x49, 0x0, 0x2, 0x2001, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7, 0x4, @perf_config_ext={0x8, 0x1}, 0x1410, 0x401, 0x0, 0x5, 0x1b, 0xffff0001, 0x2, 0x0, 0x4, 0x0, 0x727}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0xa) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8916, &(0x7f0000000000)={'wlan1\x00', @random="0200ff7fffff"}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x20800, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r3, 0xffffffffffffffff}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000cc0)={r3, 0xe0, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00), ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x9, &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000a80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x4e, &(0x7f00000003c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000b00), &(0x7f0000000800), 0x8, 0xd5, 0x8, 0x8, &(0x7f0000000b80)}}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r9 = bpf$ITER_CREATE(0xb, &(0x7f0000000d80), 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000dc0)={0xffffffffffffffff, 0xe0, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000f00)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000f40)=[0x0, 0x0, 0x0], 0x0, 0xef, &(0x7f0000000f80)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000880), &(0x7f0000001000), 0x8, 0xef, 0x8, 0x8, &(0x7f0000001040)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="1e00000005000000090000000e00000000c00400", @ANYRES32=r7, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32=r9, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\f\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r9, @ANYBLOB='\x00\x00\x00\x00'], 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x1f, 0xe, &(0x7f0000001140)=ANY=[@ANYBLOB, @ANYRES32=r9, @ANYBLOB], &(0x7f0000001180)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = openat$cgroup_ro(r3, &(0x7f00000011c0)='rdma.current\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x12, 0x2d, &(0x7f0000001780)=ANY=[@ANYBLOB="18000000ff01000000010000ecefffff1811000019d377bbd6b0431e8a769ecf6cd251b959c16e83f2c546e4fd5d010bad8e190dc464c06b5e78245ec5e04316a598c67fc4fa2992e8d4b177135aaedf6f80d0f043a6cfc0e0e906bfc7c1c3a3032bbe6defee5738bcc71d264a9283727cad0457ce8d7f6ca4fb614ea180193320f5ad3560e5c97420211316646efcae2f28b793a2637ee4cc791dfd364d48bd7eedc4e6a2f8048cdbfb0da3baf6d173e48d7414e684f5308cd589b7b8489f72b17b", @ANYRES32=r3, @ANYRES32=r0, @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a5000000b7080000000000007b8af8ff00000000b7080000040000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRESOCT=r11, @ANYBLOB="0000000000000000b70500000800000085000000a5000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000980)='syzkaller\x00', 0x6, 0x3e, &(0x7f00000009c0)=""/62, 0x41100, 0x9, '\x00', r8, @cgroup_sock_addr, r3, 0x8, &(0x7f0000000d00)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000d40)={0x3, 0xa, 0x7, 0x3ff}, 0x10, r10, r1, 0x4, &(0x7f0000001200)=[r12], &(0x7f0000001240)=[{0x0, 0x4, 0x4, 0x6}, {0x3, 0x3, 0x1, 0x6}, {0x3, 0x2, 0x7}, {0x0, 0x3, 0xc}], 0x10, 0x1}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x7, &(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="00000000feffffff9500000000000000850000004d000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, &(0x7f00000003c0), 0x41100, 0x10, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f0000000400)={0xa, 0x5}, 0x8, 0x10, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f00000004c0)=[{0x0, 0x1, 0x4, 0x8}, {0x3, 0x2, 0x0, 0x6}, {0x3, 0x5, 0xf, 0xb}, {0x5, 0x5, 0xe, 0x9}], 0x10, 0xbf8}, 0x94) r13 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETLINK(r6, 0x400454cd, 0x336) ioctl$SIOCSIFHWADDR(r13, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) close(r6) 2.63105542s ago: executing program 3 (id=7025): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x4, 0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000400)=0xb217) write$cgroup_type(r0, &(0x7f0000000080), 0x40001) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000000)={'vlan1\x00'}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xe, 0xdc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000400000000000000", @ANYRES32=r0, @ANYBLOB="460400"/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="020000000300000001000000000000000000000000000000000000006bf076f7dc70765aead8c8aea9cf229d263fd67973f5760cb1078628c6fdae27395e269e853b0bcbaddda2ae16a623e6c2af27e68dc9f64a52c5188a3c67968f59905451d44c61b79c4cd971f1c137fef9efcb5fb8dab5317601892ab6a424c924b062b0ebc9c30a65adee07a15a62e0cdcd0bd7f1cba0825866c469a090489493cd3700"/185], 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000001b40)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000001bc0)) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001c00)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) perf_event_open(&(0x7f0000001c80)={0x2, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x440}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d00)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0x9, 0x4022, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x1, 0x0, 0xfffffffc, 0x5, 0x0, 0x5285, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001e00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001e40)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001e80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001ec0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001f00)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000001f40)={0x0, 0x0, 0x0, 0xd0, &(0x7f0000001f80), 0x80}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000002080), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000020c0)={'veth1_to_bond\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000002140)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b00000000000000000000000100000000000000", @ANYRES32=r0, @ANYBLOB="000100"/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="000000000500000002000000000000135b00"/28], 0x50) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r4, 0x6, 0x3, &(0x7f0000000440), 0x4) sendmsg$kcm(r4, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x30000810) 2.509711483s ago: executing program 4 (id=7026): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x19, 0x4, 0x8, 0xb, 0x10, 0xffffffffffffffff, 0x3}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0x11, 0x14, &(0x7f0000001080)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa1", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000001180)={r1}, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x20208, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x78, 0x9}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x81, 0x64}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r3, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)='%-5lx \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000580)={{r4, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000600)='%pB \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r5, r3}, 0x4) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x19, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r6) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x5, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x4, 0x310c, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x140) r10 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$SIOCSIFHWADDR(r10, 0x4020940d, &(0x7f00000004c0)={'\x00', @link_local}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0xb, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xc, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000d00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000d40), 0x0, 0x10, &(0x7f0000000d80), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000dc0)={r11, 0x18000000000002a0, 0x15, 0x0, &(0x7f0000000e40)="b90103606989068c3c27004065582f9e0ff008001f", 0x0, 0x104, 0x6000000000000000, 0x10c, 0x0, &(0x7f0000000e80)="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", &(0x7f0000000fc0)}, 0x50) 2.340011981s ago: executing program 3 (id=7027): ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0}, 0x400, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0xff, 0x0, 0x0, 0x59, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={&(0x7f00000006c0), 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xd, 0xffffffffffffffff, 0xa) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYRESOCT=r0], 0x0, 0xffffffffffffffac, 0x0, 0x1, 0x6abb}, 0x28) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x40010080) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000001) sendmsg$sock(0xffffffffffffffff, &(0x7f0000001bc0)={&(0x7f00000008c0)=@llc={0x1a, 0x322, 0x0, 0x0, 0x2, 0x6, @link_local}, 0x80, &(0x7f0000001ac0)=[{&(0x7f0000000940)="a7f7662c163f42db8f0e242226ba6100b2807fb6a63f3fd2e75da30b116bc9e1f2d43b731b046fef4a510398e6a1352b408163d27bbad2664cd55fb78cc3ce6984110188a55aeb4eaabc261f73d3e55084b7c69dbc7d19bf8e82014a5da3339fec71af459021ac1164d5f377eb4cda4e920bccf8ed34fa80ef5af9364d4157c2df26c1f32b7694956c2be83e6078f762a146a1bf30b832fcaaabda86b2d78c74f8ddd06c2a06f4fa9d4f6a8609a085422d68435820a9736f1f457686b1224d7d1912147ec4b1e3d30f3c5066b5b8b965cde46958c22ef64e5c2cbfda2dea2a53b4e83a96f7e8cb8a196519ecc7a8685c2b58e75b", 0xf4}, {&(0x7f00000017c0)="19c0f71145d52c6a05c10c9433913fafd65cc8f88b64d3d43025e5133e7b7833faf2e6348f36cb6c6c5ffe2c56b97a80fad716706e617e8c1373c29a98a46987f4cd20c99740785aebe1cdf1e316be593145975841f30c2b4ae25b8479556891d9681c9d145de2ad3616e06d9edf33cea209bd7a800c0e077b1e6215b96f89b5cf07e8e0bc855079cbce994a6018a51313c6ecd02e9cab14d2136bca930c2706a66d1702f39f4fcefc5ed5a7c8ebca9092bd642be63e93351655aced3b744063cbcd21cf364221df6ace49e2a6708806289e19d5e70532a7377fe391499b8eecc5412041e896754ec79d55117a700cae04eb9bc520a5", 0xf6}, {&(0x7f00000018c0)="774cade24d6663efac8f653650d24fcd0e339c0689ee227623ce34b1ea2073624befce2b6a8fe5b90cb7bd268f25f0b86d3c1e5af5c05e92e1fee3f4ca0e80beffb9e9019a234165121f5cf823f18a322aa73d5c4773272e817eb666feb66d0d915ac8fada0517ed3c89953a096501d24149889ab9974321e88d3ec4cf", 0x7d}, {&(0x7f0000001940)="b7959714dd1f05b500acc88cecd5eff94f5ad630bede7900200b80c75ebb7cba4d326bc51bea0c60e826a35df26a1498e415f470eef776b162943675c6859f53b42573634505891e14beae888a7233218705f27d5c2152c7a1c098bb821c7071", 0x60}, {&(0x7f00000019c0)="cfdb6a08f682985023285cf4865e41d6bcc0302358f1295fa1608dd8f00e3e1542", 0x21}], 0x5, &(0x7f0000001b40)=[@timestamping={{0x14, 0x1, 0x25, 0xa5f}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}, @mark={{0x14, 0x1, 0x24, 0x5}}], 0x60}, 0x4004850) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x9) perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x100600, 0x81, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000008c0), 0x200002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000028000000280000000600000004000000000000840281000000000000000000010500000020000000000000000000000b02000000006100302e00"], 0x0, 0x46}, 0x28) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000090401a80016000a00014006f5ff00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 2.229397812s ago: executing program 4 (id=7028): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa6, 0x0, 0x0, 0x10, 0x3}, 0x48) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0xff, 0x0, 0xffffffffffffffff, 0x9010, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={0x0, 0x4}, 0xce6b9b20411c70f4, 0x800000000000ca, 0x0, 0x9, 0xffffffbffffffffc, 0x0, 0x0, 0x0, 0x400000f, 0x0, 0x3}, 0x0, 0xc, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x104101, 0x4, 0x0, 0x1, 0x9, 0x10000000, 0x801}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x3) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x400000002, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20488, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x111d09, 0x4, 0x10000, 0x1, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0}, 0x1c0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYRES8=r1, @ANYRES32=r4], 0x9a) 2.186350426s ago: executing program 3 (id=7029): socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000840)=ANY=[], 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, 0x0}, 0x20) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x1ff, 0x0, 0xa8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x10006, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/29], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0xf, 0x3, 0x2) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x926) sendmsg$inet(r2, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000640)={0xffffffffffffffff, 0x0, &(0x7f0000000680)=""/166}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000740)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x1, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f00000007c0)) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x10, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="7a0a00ff0000000071104d000000000095"], &(0x7f0000000900)='syzkaller\x00'}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r4) r5 = socket$kcm(0xa, 0x1, 0x106) sendmsg(r4, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0), 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x1d8}, 0x20008004) r6 = perf_event_open(&(0x7f0000000bc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$kcm(r5, &(0x7f0000000c40)={&(0x7f0000000c80)=@in6={0xa, 0x4001, 0xfffffffd, @empty}, 0x80, 0x0}, 0x20000001) write$cgroup_type(r4, &(0x7f0000000d00), 0x11ffffce1) (fail_nth: 2) ioctl$PERF_EVENT_IOC_DISABLE(r4, 0x2401, 0xbc5) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r6, 0x4008240b, 0x0) 2.160787109s ago: executing program 2 (id=7030): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x202, 0x42011, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x400006}, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001a40)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8946, &(0x7f0000001ac0)={'syz_tun\x00', @random='\x00\x00\x00\x00\x00 '}) 2.047077091s ago: executing program 0 (id=7031): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa6, 0x0, 0x0, 0x10, 0x3}, 0x48) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0xff, 0x0, 0xffffffffffffffff, 0x9010, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={0x0, 0x4}, 0xce6b9b20411c70f4, 0x800000000000ca, 0x0, 0x9, 0xffffffbffffffffc, 0x0, 0x0, 0x0, 0x400000f, 0x0, 0x3}, 0x0, 0xc, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x104101, 0x4, 0x0, 0x1, 0x9, 0x10000000, 0x801}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x3) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20488, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x111d09, 0x4, 0x10000, 0x1, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[@ANYRES8=r1, @ANYRES32=r4], 0x9a) 1.973505518s ago: executing program 4 (id=7032): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x4, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@kfunc]}, &(0x7f0000000280)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value=0x4100}, 0x94) 1.607946596s ago: executing program 4 (id=7033): sendmsg$inet(0xffffffffffffffff, 0x0, 0x3000c085) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socket$kcm(0x29, 0x7, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/29], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) r2 = perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x4, 0xe, &(0x7f0000000e80)=ANY=[@ANYBLOB="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"], &(0x7f0000001980)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1c}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000019c0)={r4, 0x18000000000002a0, 0xfe, 0x11, &(0x7f0000001a40)="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", 0x0, 0x8024, 0x60000000, 0x0, 0x0, &(0x7f0000001b40), &(0x7f0000001b80), 0x0, 0x3000000}, 0x2a) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000c00)={0xffffffffffffffff, &(0x7f0000000c40), 0x0}, 0x20) sendmsg$kcm(r3, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000000) perf_event_open$cgroup(&(0x7f0000000100)={0x4, 0x80, 0x5, 0xfc, 0x7f, 0xa, 0x0, 0x4, 0x11000, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_config_ext={0xfffffffffffffff8, 0x1}, 0x10200, 0x1ff, 0x7, 0x4, 0x400, 0x3, 0x7ff, 0x0, 0x2afe2eeb, 0x0, 0x1}, r0, 0x6, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f00000009c0)='\xb8\xb6|\xd7\x00tr,z[mb\x97\x16\xc8D\xe9d\xd3b\x05N\xfcb\x05P\vy\xf0\x1c\xcf$t*\x17\xe9\x81p\xe6\x83\\\xccw\xa8\xb9\b\xa2\xad\xadn#m\x92\xc95!4tLJ\x91\xa1\xf5\x89\xe7t\\\xda\xee\xca\xad[\x85y{d\x1a\x94\x86\x9a\xfa\xd2\xad\v\xb5\xbb\x14;\xd4\x85\xddw\x9d~\'\xbe\xf7\x10\xe8\xabc\x88\x1e\x00\x00\x00\x00\x8e\x94\xa3[9\xa8O\\\x13\t\x1d\x17\x14\xeb.\xb9\xcf\x1bp\x11pl\xab\xb9\xef\xdbdr*\xfe\x1a\xbf\xbd\xdc\x98 \xc9\xf3\x8c\xa8\xea\xff\xd1\x85*h\xfc*\xf4W}>\x89\xf8Wd\xd1\xdf#\x1d\xe5\xeb\xd3\xf0\xe7\xb6s\xd5\xed5\x82\xda\xd9\xcf\'Z\xd0\x9f\xb4\x18\xe3-q\xc58\xf1\x8e\xa6\xf7\x87(\xb0\x87\xc1%E0\x17\xcc\x963\xe8$H\xc0\xdf\xe0\x93\\\xd4T\x872\x80\xb8g\x11\xb0 ~\xcdWf') r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'dummy0\x00'}) 1.574860219s ago: executing program 2 (id=7034): bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x3, 0x7f, 0x7, 0x9, 0x0, 0x100, 0x208d0, 0x6, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffff, 0x4, @perf_config_ext={0x8, 0x14ed10b8}, 0x8000, 0x5, 0x1, 0x9, 0x4, 0x7, 0x0, 0x0, 0x5, 0x0, 0x8001}, 0x0, 0x10, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xfffffffffffffff9) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33a2d912}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000280), 0x8) bpf$LINK_DETACH(0x22, &(0x7f00000002c0)=r3, 0x4) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) recvmsg(r4, 0x0, 0x40) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) perf_event_open$cgroup(&(0x7f0000000000)={0x5, 0x80, 0xb3, 0x3, 0x6, 0x49, 0x0, 0x2, 0x2001, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7, 0x4, @perf_config_ext={0x8, 0x1}, 0x1410, 0x401, 0x0, 0x5, 0x1b, 0xffff0001, 0x2, 0x0, 0x4, 0x0, 0x727}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0xa) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8916, &(0x7f0000000000)={'wlan1\x00', @random="0200ff7fffff"}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x20800, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r3, 0xffffffffffffffff}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000cc0)={r3, 0xe0, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00), ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x9, &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000a80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x4e, &(0x7f00000003c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000b00), &(0x7f0000000800), 0x8, 0xd5, 0x8, 0x8, &(0x7f0000000b80)}}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r9 = bpf$ITER_CREATE(0xb, &(0x7f0000000d80), 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000dc0)={0xffffffffffffffff, 0xe0, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000f00)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000f40)=[0x0, 0x0, 0x0], 0x0, 0xef, &(0x7f0000000f80)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000880), &(0x7f0000001000), 0x8, 0xef, 0x8, 0x8, &(0x7f0000001040)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="1e00000005000000090000000e00000000c00400", @ANYRES32=r7, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32=r9, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\f\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r9, @ANYBLOB='\x00\x00\x00\x00'], 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x1f, 0xe, &(0x7f0000001140)=ANY=[@ANYBLOB, @ANYRES32=r9, @ANYBLOB], &(0x7f0000001180)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = openat$cgroup_ro(r3, &(0x7f00000011c0)='rdma.current\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x12, 0x2d, &(0x7f0000001780)=ANY=[@ANYBLOB="18000000ff01000000010000ecefffff1811000019d377bbd6b0431e8a769ecf6cd251b959c16e83f2c546e4fd5d010bad8e190dc464c06b5e78245ec5e04316a598c67fc4fa2992e8d4b177135aaedf6f80d0f043a6cfc0e0e906bfc7c1c3a3032bbe6defee5738bcc71d264a9283727cad0457ce8d7f6ca4fb614ea180193320f5ad3560e5c97420211316646efcae2f28b793a2637ee4cc791dfd364d48bd7eedc4e6a2f8048cdbfb0da3baf6d173e48d7414e684f5308cd589b7b8489f72b17b", @ANYRES32=r3, @ANYRES32=r0, @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a5000000b7080000000000007b8af8ff00000000b7080000040000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRESOCT=r11, @ANYBLOB="0000000000000000b70500000800000085000000a5000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000980)='syzkaller\x00', 0x6, 0x3e, &(0x7f00000009c0)=""/62, 0x41100, 0x9, '\x00', r8, @cgroup_sock_addr, r3, 0x8, &(0x7f0000000d00)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000d40)={0x3, 0xa, 0x7, 0x3ff}, 0x10, r10, r1, 0x4, &(0x7f0000001200)=[r12], &(0x7f0000001240)=[{0x0, 0x4, 0x4, 0x6}, {0x3, 0x3, 0x1, 0x6}, {0x3, 0x2, 0x7}, {0x0, 0x3, 0xc}], 0x10, 0x1}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x7, &(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="00000000feffffff9500000000000000850000004d000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, &(0x7f00000003c0), 0x41100, 0x10, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f0000000400)={0xa, 0x5}, 0x8, 0x10, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f00000004c0)=[{0x0, 0x1, 0x4, 0x8}, {0x3, 0x2, 0x0, 0x6}, {0x3, 0x5, 0xf, 0xb}, {0x5, 0x5, 0xe, 0x9}], 0x10, 0xbf8}, 0x94) r13 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETLINK(r6, 0x400454cd, 0x336) ioctl$SIOCSIFHWADDR(r13, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) close(r6) 1.569623039s ago: executing program 0 (id=7035): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000000)=@bpf_lsm={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000180)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xb, &(0x7f0000000940)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffff7963}, [@printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa}}]}, &(0x7f00000009c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b00)={r1, 0x0, 0x216c, 0x0, &(0x7f0000000b80), 0x0, 0x11, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 1.476034129s ago: executing program 3 (id=7036): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x19, 0x4, 0x8, 0xb, 0x10, 0xffffffffffffffff, 0x3}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0x11, 0x14, &(0x7f0000001080)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa1", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000001180)={r1}, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x20208, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x78, 0x9}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x81, 0x64}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r3, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)='%-5lx \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000580)={{r4, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000600)='%pB \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r5, r3}, 0x4) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x19, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r6) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x5, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x4, 0x310c, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x140) r10 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$SIOCSIFHWADDR(r10, 0x4020940d, &(0x7f00000004c0)={'\x00', @link_local}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0xb, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xc, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d640500000000006504040001001f000404000001007d60b7030000000000006a0a00fe00000100850000000d000000b7000000000000009500000000000000c74396c8e3ebbadc20e5a7ef8c9ac1465cbf188ef10871b81ac7553358380b3a1f59916ffc9bf0bdf81524f07fb2819bf5774fedda52e39c90af27db5b56024df96b4673b4e8d5467e114604ea09b290a248a120c9c6cd87cef9000000a39c15a7ef365cc27dfeac7b9b0e9048517354b0ca4f9cf8b59ee6fa003fe1f2c4c15f20a07db4583a462d8be6602186fd68ee14a19ea2eb42122b8635a66ce6b5b92356081bc0f18a0ca83dbc089a9813c1efa26001b3f486ebfaae85c4d0b96778478ae5355e6f923b11056969f486f80a35f7f2339704fa93fa915ab8e1e0d7f31ebd19455e6827cd493907bf9d0000000000000000000000004e1fa60acabcf0553910ca2e5ea499fd5889dde9261f0848a5b8af657bfc96049308e8953431b269053627a1523551c160c813969925a892d266792352ec0204596a37ce8d6d260b32239bddbce2e79f93cb5a0ad897adb53b397d07c50f84b74f2605a565ee149016aa75ea31c0087dcd821b47c8b36efc6da4fb2ea7f1f36c85856b73ac9872babc62149699b6b8c796a79d833eb4b5ca668d430db5653a2b3c5b87e17ca1"], &(0x7f0000000d00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000d40), 0x0, 0x10, &(0x7f0000000d80), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000dc0)={r11, 0x18000000000002a0, 0x15, 0x0, &(0x7f0000000e40)="b90103606989068c3c27004065582f9e0ff008001f", 0x0, 0x104, 0x6000000000000000, 0x10c, 0x0, &(0x7f0000000e80)="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", &(0x7f0000000fc0)}, 0x50) 606.557418ms ago: executing program 0 (id=7037): ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0}, 0x400, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0xff, 0x0, 0x0, 0x59, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={&(0x7f00000006c0), 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xd, 0xffffffffffffffff, 0xa) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYRESOCT=r0], 0x0, 0xffffffffffffffac, 0x0, 0x1, 0x6abb}, 0x28) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x40010080) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000001) sendmsg$sock(0xffffffffffffffff, &(0x7f0000001bc0)={&(0x7f00000008c0)=@llc={0x1a, 0x322, 0x0, 0x0, 0x2, 0x6, @link_local}, 0x80, &(0x7f0000001ac0)=[{&(0x7f0000000940)="a7f7662c163f42db8f0e242226ba6100b2807fb6a63f3fd2e75da30b116bc9e1f2d43b731b046fef4a510398e6a1352b408163d27bbad2664cd55fb78cc3ce6984110188a55aeb4eaabc261f73d3e55084b7c69dbc7d19bf8e82014a5da3339fec71af459021ac1164d5f377eb4cda4e920bccf8ed34fa80ef5af9364d4157c2df26c1f32b7694956c2be83e6078f762a146a1bf30b832fcaaabda86b2d78c74f8ddd06c2a06f4fa9d4f6a8609a085422d68435820a9736f1f457686b1224d7d1912147ec4b1e3d30f3c5066b5b8b965cde46958c22ef64e5c2cbfda2dea2a53b4e83a96f7e8cb8a196519ecc7a8685c2b58e75b", 0xf4}, {&(0x7f00000017c0)="19c0f71145d52c6a05c10c9433913fafd65cc8f88b64d3d43025e5133e7b7833faf2e6348f36cb6c6c5ffe2c56b97a80fad716706e617e8c1373c29a98a46987f4cd20c99740785aebe1cdf1e316be593145975841f30c2b4ae25b8479556891d9681c9d145de2ad3616e06d9edf33cea209bd7a800c0e077b1e6215b96f89b5cf07e8e0bc855079cbce994a6018a51313c6ecd02e9cab14d2136bca930c2706a66d1702f39f4fcefc5ed5a7c8ebca9092bd642be63e93351655aced3b744063cbcd21cf364221df6ace49e2a6708806289e19d5e70532a7377fe391499b8eecc5412041e896754ec79d55117a700cae04eb9bc520a5", 0xf6}, {&(0x7f00000018c0)="774cade24d6663efac8f653650d24fcd0e339c0689ee227623ce34b1ea2073624befce2b6a8fe5b90cb7bd268f25f0b86d3c1e5af5c05e92e1fee3f4ca0e80beffb9e9019a234165121f5cf823f18a322aa73d5c4773272e817eb666feb66d0d915ac8fada0517ed3c89953a096501d24149889ab9974321e88d3ec4cf", 0x7d}, {&(0x7f0000001940)="b7959714dd1f05b500acc88cecd5eff94f5ad630bede7900200b80c75ebb7cba4d326bc51bea0c60e826a35df26a1498e415f470eef776b162943675c6859f53b42573634505891e14beae888a7233218705f27d5c2152c7a1c098bb821c7071", 0x60}, {&(0x7f00000019c0)="cfdb6a08f682985023285cf4865e41d6bcc0302358f1295fa1608dd8f00e3e154232a20858afc62178f831efb35b47b8d7", 0x31}], 0x5, &(0x7f0000001b40)=[@timestamping={{0x14, 0x1, 0x25, 0xa5f}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}, @mark={{0x14, 0x1, 0x24, 0x5}}], 0x60}, 0x4004850) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x9) perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x100600, 0x81, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000008c0), 0x200002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000028000000280000000600000004000000000000840281000000000000000000010500000020000000000000000000000b02000000006100302e00"], 0x0, 0x46}, 0x28) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000090401a80016000a00014006f5ff00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 511.700708ms ago: executing program 4 (id=7038): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="bf16000000000000b70100003b0204007b1ae0ff00000000b7010000000000007b1ae8ff000000007b1af0ff00000000bf61000000000000b702000001000000bfa300000000000007030000e0ffffffb7040000180000008500000049000000b70000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0x0, 0x36, 0x0, &(0x7f0000000300)="52540012345652540012345786dd6000000000003b400000000000000000000000000000000100000003000000000000000000000001", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 413.465628ms ago: executing program 3 (id=7039): perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xff, 0x1, 0x0, 0x0, 0x0, 0x400000000004, 0x5e6f8a6df01f95be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x200970, 0xf2f3}, 0x42, 0xc8, 0x0, 0x0, 0x65, 0x10000, 0x20e, 0x0, 0x0, 0x0, 0x3ff}, 0x0, 0x9, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="8fedcb7907031175f37538e486dd630080fc00400000db5b686158bbcfe8875a060300001123000000000000000000000300ac1414aa89"], 0xfdef) 368.203972ms ago: executing program 2 (id=7040): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r1, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f0000001380)}}, 0x10) 347.481235ms ago: executing program 0 (id=7041): socket$kcm(0x10, 0x2, 0x4) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x1, 0x6d5, 0xffffffff, 0x20008, 0xffffffffffffffff, 0x81, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x3, 0x8}, 0x50) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300), 0x200002, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002100)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002140)={0x3, 0x10, &(0x7f0000002200)=ANY=[@ANYBLOB="18050000000000000000000000000005b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000300000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000001c00000095"], &(0x7f0000002280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 269.410383ms ago: executing program 3 (id=7042): r0 = socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x6, 0x2, 0x2, 0x80, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0x8a121, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x5, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)}, 0x4004801) socket$kcm(0x10, 0x400000002, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x6, 0x2, 0x2, 0x80, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) (async) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0x8a121, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x5, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)}, 0x4004801) (async) 0s ago: executing program 2 (id=7043): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa6, 0x0, 0x0, 0x10, 0x3}, 0x48) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0xff, 0x0, 0xffffffffffffffff, 0x9010, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={0x0, 0x4}, 0xce6b9b20411c70f4, 0x800000000000ca, 0x0, 0x9, 0xffffffbffffffffc, 0x0, 0x0, 0x0, 0x400000f, 0x0, 0x3}, 0x0, 0xc, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x104101, 0x4, 0x0, 0x1, 0x9, 0x10000000, 0x801}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x3) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/32], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20488, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x111d09, 0x4, 0x10000, 0x1, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[@ANYRES8=r1, @ANYRES32=r4], 0x9a) kernel console output (not intermixed with test programs): ibutes in process `syz.4.5851'. [ 1315.837346][T24933] netlink: 'syz.3.5850': attribute type 10 has an invalid length. [ 1315.856642][T24933] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5850'. [ 1315.892429][T24934] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5851'. [ 1315.908115][T24934] netlink: 6 bytes leftover after parsing attributes in process `syz.4.5851'. [ 1316.156353][T24940] netlink: 'syz.0.5852': attribute type 10 has an invalid length. [ 1316.169625][T24940] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5852'. [ 1316.481651][T24947] netlink: 'syz.3.5856': attribute type 10 has an invalid length. [ 1316.510457][T24947] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5856'. [ 1316.537973][T24947] bridge0: port 4(team0) entered blocking state [ 1316.575028][T24947] bridge0: port 4(team0) entered disabled state [ 1316.590849][T24947] team0: entered allmulticast mode [ 1316.610659][T24947] team_slave_0: entered allmulticast mode [ 1316.627524][T24947] team_slave_1: entered allmulticast mode [ 1316.647798][T24947] geneve1: entered allmulticast mode [ 1316.694291][T12707] Bluetooth: hci4: unexpected event 0x08 length: 151 > 4 [ 1316.709467][T24947] team0: entered promiscuous mode [ 1316.750244][T24947] team_slave_0: entered promiscuous mode [ 1316.761885][T24947] team_slave_1: entered promiscuous mode [ 1316.779724][T24947] geneve1: entered promiscuous mode [ 1316.829080][T24947] bridge0: port 4(team0) entered blocking state [ 1316.836740][T24947] bridge0: port 4(team0) entered forwarding state [ 1316.886160][T24951] netlink: 'syz.0.5854': attribute type 10 has an invalid length. [ 1316.929004][T24951] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5854'. [ 1317.036469][T24961] FAULT_INJECTION: forcing a failure. [ 1317.036469][T24961] name failslab, interval 1, probability 0, space 0, times 0 [ 1317.088347][T24961] CPU: 1 PID: 24961 Comm: syz.2.5860 Not tainted syzkaller #0 [ 1317.095915][T24961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1317.106060][T24961] Call Trace: [ 1317.109386][T24961] [ 1317.112366][T24961] dump_stack_lvl+0x18c/0x250 [ 1317.117111][T24961] ? show_regs_print_info+0x20/0x20 [ 1317.122385][T24961] ? load_image+0x420/0x420 [ 1317.126951][T24961] ? __might_sleep+0xe0/0xe0 [ 1317.131603][T24961] ? __lock_acquire+0x7eb0/0x7eb0 [ 1317.136684][T24961] ? __lock_acquire+0x1431/0x7eb0 [ 1317.141777][T24961] should_fail_ex+0x394/0x4c0 [ 1317.146544][T24961] should_failslab+0x9/0x20 [ 1317.151121][T24961] slab_pre_alloc_hook+0x59/0x300 [ 1317.156216][T24961] ? __get_vm_area_node+0x125/0x370 [ 1317.161492][T24961] __kmem_cache_alloc_node+0x53/0x260 [ 1317.166939][T24961] ? __get_vm_area_node+0x125/0x370 [ 1317.172226][T24961] kmalloc_node_trace+0x26/0xe0 [ 1317.177156][T24961] __get_vm_area_node+0x125/0x370 [ 1317.182270][T24961] __vmalloc_node_range+0x36f/0x1320 [ 1317.187628][T24961] ? ethtool_get_stats+0x20b/0x3a0 [ 1317.192838][T24961] ? free_vm_area+0x50/0x50 [ 1317.197403][T24961] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1317.203439][T24961] ? __might_fault+0xaa/0x120 [ 1317.208167][T24961] ? __might_fault+0xc6/0x120 [ 1317.212885][T24961] ? ethtool_get_stats+0x20b/0x3a0 [ 1317.218045][T24961] vzalloc+0x79/0x90 [ 1317.221999][T24961] ? ethtool_get_stats+0x20b/0x3a0 [ 1317.227175][T24961] ethtool_get_stats+0x20b/0x3a0 [ 1317.232169][T24961] ? ethtool_phys_id+0x5a0/0x5a0 [ 1317.237176][T24961] dev_ethtool+0xa63/0x18d0 [ 1317.241739][T24961] ? ethtool_get_module_eeprom_call+0x170/0x170 [ 1317.248029][T24961] ? __lock_acquire+0x7eb0/0x7eb0 [ 1317.253107][T24961] ? dev_load+0x21/0x1f0 [ 1317.257394][T24961] dev_ioctl+0x392/0x1140 [ 1317.261776][T24961] sock_do_ioctl+0x239/0x310 [ 1317.266422][T24961] ? sock_show_fdinfo+0xb0/0xb0 [ 1317.271318][T24961] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1317.277363][T24961] sock_ioctl+0x5be/0x7e0 [ 1317.281742][T24961] ? sock_poll+0x460/0x460 [ 1317.286239][T24961] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1317.291216][T24961] ? security_file_ioctl+0x80/0xa0 [ 1317.296375][T24961] ? sock_poll+0x460/0x460 [ 1317.300843][T24961] __se_sys_ioctl+0xfd/0x170 [ 1317.305487][T24961] do_syscall_64+0x55/0xb0 [ 1317.309975][T24961] ? clear_bhb_loop+0x40/0x90 [ 1317.314707][T24961] ? clear_bhb_loop+0x40/0x90 [ 1317.319433][T24961] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1317.325373][T24961] RIP: 0033:0x7f7100d9f559 [ 1317.329826][T24961] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1317.349478][T24961] RSP: 002b:00007f7101bda028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1317.357939][T24961] RAX: ffffffffffffffda RBX: 00007f7101025fa0 RCX: 00007f7100d9f559 [ 1317.365953][T24961] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000006 [ 1317.373962][T24961] RBP: 00007f7101bda090 R08: 0000000000000000 R09: 0000000000000000 [ 1317.381976][T24961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1317.390009][T24961] R13: 00007f7101026038 R14: 00007f7101025fa0 R15: 00007ffdd3667988 [ 1317.398136][T24961] [ 1317.452684][T24961] syz.2.5860: vmalloc error: size 232, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 1317.513918][T24961] CPU: 0 PID: 24961 Comm: syz.2.5860 Not tainted syzkaller #0 [ 1317.521498][T24961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1317.531629][T24961] Call Trace: [ 1317.534970][T24961] [ 1317.537957][T24961] dump_stack_lvl+0x18c/0x250 [ 1317.542711][T24961] ? show_regs_print_info+0x20/0x20 [ 1317.547983][T24961] ? load_image+0x420/0x420 [ 1317.552555][T24961] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1317.559048][T24961] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 1317.565628][T24961] warn_alloc+0x246/0x340 [ 1317.570017][T24961] ? __get_vm_area_node+0x125/0x370 [ 1317.575287][T24961] ? zone_watermark_ok_safe+0x230/0x230 [ 1317.580908][T24961] ? rcu_is_watching+0x15/0xb0 [ 1317.585753][T24961] ? __get_vm_area_node+0x356/0x370 [ 1317.591032][T24961] __vmalloc_node_range+0x394/0x1320 [ 1317.596425][T24961] ? free_vm_area+0x50/0x50 [ 1317.600987][T24961] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1317.607015][T24961] ? __might_fault+0xaa/0x120 [ 1317.611740][T24961] ? __might_fault+0xc6/0x120 [ 1317.616462][T24961] ? ethtool_get_stats+0x20b/0x3a0 [ 1317.621624][T24961] vzalloc+0x79/0x90 [ 1317.625579][T24961] ? ethtool_get_stats+0x20b/0x3a0 [ 1317.630752][T24961] ethtool_get_stats+0x20b/0x3a0 [ 1317.635738][T24961] ? ethtool_phys_id+0x5a0/0x5a0 [ 1317.640740][T24961] dev_ethtool+0xa63/0x18d0 [ 1317.645316][T24961] ? ethtool_get_module_eeprom_call+0x170/0x170 [ 1317.651606][T24961] ? __lock_acquire+0x7eb0/0x7eb0 [ 1317.656687][T24961] ? dev_load+0x21/0x1f0 [ 1317.660976][T24961] dev_ioctl+0x392/0x1140 [ 1317.665355][T24961] sock_do_ioctl+0x239/0x310 [ 1317.670000][T24961] ? sock_show_fdinfo+0xb0/0xb0 [ 1317.674904][T24961] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1317.680963][T24961] sock_ioctl+0x5be/0x7e0 [ 1317.685347][T24961] ? sock_poll+0x460/0x460 [ 1317.689819][T24961] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1317.694804][T24961] ? security_file_ioctl+0x80/0xa0 [ 1317.699969][T24961] ? sock_poll+0x460/0x460 [ 1317.704438][T24961] __se_sys_ioctl+0xfd/0x170 [ 1317.709085][T24961] do_syscall_64+0x55/0xb0 [ 1317.713546][T24961] ? clear_bhb_loop+0x40/0x90 [ 1317.718281][T24961] ? clear_bhb_loop+0x40/0x90 [ 1317.723035][T24961] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1317.729015][T24961] RIP: 0033:0x7f7100d9f559 [ 1317.733475][T24961] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1317.753137][T24961] RSP: 002b:00007f7101bda028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1317.761595][T24961] RAX: ffffffffffffffda RBX: 00007f7101025fa0 RCX: 00007f7100d9f559 [ 1317.769602][T24961] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000006 [ 1317.777598][T24961] RBP: 00007f7101bda090 R08: 0000000000000000 R09: 0000000000000000 [ 1317.785623][T24961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1317.793622][T24961] R13: 00007f7101026038 R14: 00007f7101025fa0 R15: 00007ffdd3667988 [ 1317.801640][T24961] [ 1317.844059][T24961] Mem-Info: [ 1317.848746][T24961] active_anon:8247 inactive_anon:0 isolated_anon:0 [ 1317.848746][T24961] active_file:17519 inactive_file:40441 isolated_file:0 [ 1317.848746][T24961] unevictable:768 dirty:160 writeback:0 [ 1317.848746][T24961] slab_reclaimable:10731 slab_unreclaimable:101914 [ 1317.848746][T24961] mapped:29945 shmem:1364 pagetables:580 [ 1317.848746][T24961] sec_pagetables:0 bounce:0 [ 1317.848746][T24961] kernel_misc_reclaimable:0 [ 1317.848746][T24961] free:1317343 free_pcp:6271 free_cma:0 [ 1317.898921][T24961] Node 0 active_anon:33088kB inactive_anon:0kB active_file:70076kB inactive_file:161568kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:119780kB dirty:640kB writeback:0kB shmem:3920kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11516kB pagetables:2320kB sec_pagetables:0kB all_unreclaimable? no [ 1317.947462][T24961] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1318.062704][T24961] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1318.107668][T24961] lowmem_reserve[]: 0 2503 2504 2504 2504 [ 1318.114276][T24961] Node 0 DMA32 free:1325008kB boost:0kB min:34492kB low:43112kB high:51732kB reserved_highatomic:0KB active_anon:32964kB inactive_anon:0kB active_file:70076kB inactive_file:160740kB unevictable:1536kB writepending:640kB present:3129332kB managed:2567744kB mlocked:0kB bounce:0kB free_pcp:12908kB local_pcp:8700kB free_cma:0kB [ 1318.170241][T24961] lowmem_reserve[]: 0 0 0 0 0 [ 1318.175088][T24961] Node 0 Normal free:4kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1318.230100][T24961] lowmem_reserve[]: 0 0 0 0 0 [ 1318.234955][T24961] Node 1 Normal free:3913628kB boost:0kB min:55396kB low:69244kB high:83092kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:11328kB local_pcp:3680kB free_cma:0kB [ 1318.305072][T24961] lowmem_reserve[]: 0 0 0 0 0 [ 1318.309934][T24961] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1318.363143][T24961] Node 0 DMA32: 234*4kB (ME) 570*8kB (UME) 782*16kB (UME) 793*32kB (UME) 430*64kB (UME) 678*128kB (UME) 208*256kB (UME) 51*512kB (UM) 54*1024kB (UME) 25*2048kB (UME) 239*4096kB (UM) = 1322488kB [ 1318.387260][T24961] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 1318.400071][T24961] Node 1 Normal: 205*4kB (UE) 61*8kB (UE) 38*16kB (UE) 261*32kB (UE) 84*64kB (UME) 21*128kB (UME) 2*256kB (U) 1*512kB (M) 1*1024kB (U) 1*2048kB (U) 950*4096kB (M) = 3913628kB [ 1318.418505][T24961] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1318.428795][T24961] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1318.438915][T24961] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1318.456315][T24961] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1318.467420][T24961] 59324 total pagecache pages [ 1318.479744][T24961] 0 pages in swap cache [ 1318.486064][T24961] Free swap = 124996kB [ 1318.504486][T24961] Total swap = 124996kB [ 1318.508731][T24961] 2097051 pages RAM [ 1318.519755][T24961] 0 pages HighMem/MovableOnly [ 1318.528378][T24961] 421729 pages reserved [ 1318.546010][T24961] 0 pages cma reserved [ 1318.555788][T24969] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5862'. [ 1318.587202][T24972] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5862'. [ 1318.631016][T24972] netlink: 6 bytes leftover after parsing attributes in process `syz.0.5862'. [ 1318.894202][T24979] netlink: 'syz.4.5865': attribute type 29 has an invalid length. [ 1318.921550][T24979] netlink: 'syz.4.5865': attribute type 29 has an invalid length. [ 1318.942493][T24982] netlink: 'syz.4.5865': attribute type 29 has an invalid length. [ 1318.978985][T24979] netlink: 'syz.4.5865': attribute type 29 has an invalid length. [ 1319.051651][T24979] netlink: 'syz.4.5865': attribute type 10 has an invalid length. [ 1319.079953][T24979] veth0_vlan: left promiscuous mode [ 1319.091527][T12707] Bluetooth: hci4: unexpected event 0x08 length: 151 > 4 [ 1319.103670][T24979] veth0_vlan: entered promiscuous mode [ 1319.225266][T24979] team0: Device veth0_vlan failed to register rx_handler [ 1319.516573][T24982] netlink: 'syz.4.5865': attribute type 29 has an invalid length. [ 1319.793302][T25009] batman_adv: batadv0: Adding interface: netdevsim0 [ 1319.800788][T25009] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1319.840397][T25009] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 1320.023485][T12707] Bluetooth: hci4: unexpected event 0x08 length: 151 > 4 [ 1320.426707][T25017] __nla_validate_parse: 11 callbacks suppressed [ 1320.426799][T25017] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5879'. [ 1320.548614][T25017] bridge0: port 4(team0) entered blocking state [ 1320.569450][T25017] bridge0: port 4(team0) entered disabled state [ 1320.582136][T25017] team0: entered allmulticast mode [ 1320.588053][T25017] team_slave_0: entered allmulticast mode [ 1320.624325][T25017] team_slave_1: entered allmulticast mode [ 1320.876394][T25017] team0: entered promiscuous mode [ 1321.027016][T25017] team_slave_0: entered promiscuous mode [ 1321.044737][T25017] team_slave_1: entered promiscuous mode [ 1321.066444][T25017] bridge0: port 4(team0) entered blocking state [ 1321.074257][T25017] bridge0: port 4(team0) entered forwarding state [ 1321.433642][T25040] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5886'. [ 1321.537559][T25040] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5886'. [ 1321.558489][T25040] netlink: 6 bytes leftover after parsing attributes in process `syz.2.5886'. [ 1321.671349][T12707] Bluetooth: hci2: unexpected event 0x08 length: 151 > 4 [ 1321.815930][T25053] validate_nla: 3 callbacks suppressed [ 1321.815983][T25053] netlink: 'syz.3.5892': attribute type 10 has an invalid length. [ 1321.861389][T25053] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5892'. [ 1321.994472][T25059] netlink: 'syz.2.5894': attribute type 10 has an invalid length. [ 1322.010961][T25059] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5894'. [ 1322.132048][T25059] bridge0: port 4(team0) entered blocking state [ 1322.201058][T25059] bridge0: port 4(team0) entered disabled state [ 1322.305411][T25059] team0: entered allmulticast mode [ 1322.347929][T25059] team_slave_0: entered allmulticast mode [ 1322.387913][T25059] team_slave_1: entered allmulticast mode [ 1322.417447][T25059] bridge0: entered allmulticast mode [ 1322.537146][T25059] team0: left allmulticast mode [ 1322.555750][T25059] team_slave_0: left allmulticast mode [ 1322.580808][T25059] team_slave_1: left allmulticast mode [ 1322.601582][T25059] bridge0: left allmulticast mode [ 1322.662162][T25059] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1322.705679][T25068] netlink: 'syz.3.5895': attribute type 10 has an invalid length. [ 1322.720278][T25068] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5895'. [ 1322.959783][T25073] syzkaller0: entered promiscuous mode [ 1323.008880][T25073] syzkaller0: entered allmulticast mode [ 1323.024290][T25083] FAULT_INJECTION: forcing a failure. [ 1323.024290][T25083] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1323.069093][T25083] CPU: 1 PID: 25083 Comm: syz.2.5899 Not tainted syzkaller #0 [ 1323.076638][T25083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1323.086759][T25083] Call Trace: [ 1323.090088][T25083] [ 1323.093063][T25083] dump_stack_lvl+0x18c/0x250 [ 1323.097807][T25083] ? show_regs_print_info+0x20/0x20 [ 1323.103096][T25083] ? load_image+0x420/0x420 [ 1323.107659][T25083] ? __lock_acquire+0x7eb0/0x7eb0 [ 1323.112761][T25083] ? snprintf+0xe9/0x140 [ 1323.117065][T25083] should_fail_ex+0x394/0x4c0 [ 1323.121801][T25083] _copy_to_user+0x2f/0xa0 [ 1323.126272][T25083] simple_read_from_buffer+0xe7/0x150 [ 1323.131701][T25083] proc_fail_nth_read+0x1e8/0x260 [ 1323.136797][T25083] ? proc_fault_inject_write+0x360/0x360 [ 1323.142501][T25083] ? fsnotify_perm+0x271/0x5e0 [ 1323.147327][T25083] ? proc_fault_inject_write+0x360/0x360 [ 1323.153026][T25083] vfs_read+0x298/0x990 [ 1323.157251][T25083] ? kernel_read+0x1e0/0x1e0 [ 1323.161912][T25083] ? __fget_files+0x28/0x460 [ 1323.166589][T25083] ? __fget_files+0x3fc/0x460 [ 1323.171350][T25083] ? __fdget_pos+0x2a3/0x330 [ 1323.176000][T25083] ? ksys_read+0x74/0x260 [ 1323.180393][T25083] ksys_read+0x151/0x260 [ 1323.184705][T25083] ? vfs_write+0x9a0/0x9a0 [ 1323.189194][T25083] ? lockdep_hardirqs_on+0x98/0x150 [ 1323.194443][T25083] do_syscall_64+0x55/0xb0 [ 1323.198899][T25083] ? clear_bhb_loop+0x40/0x90 [ 1323.203634][T25083] ? clear_bhb_loop+0x40/0x90 [ 1323.208355][T25083] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1323.214289][T25083] RIP: 0033:0x7f7100d5fd8e [ 1323.218736][T25083] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1323.238372][T25083] RSP: 002b:00007f7101bd9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1323.246813][T25083] RAX: ffffffffffffffda RBX: 00007f7101bda6c0 RCX: 00007f7100d5fd8e [ 1323.254812][T25083] RDX: 000000000000000f RSI: 00007f7101bda0a0 RDI: 0000000000000005 [ 1323.262816][T25083] RBP: 00007f7101bda090 R08: 0000000000000000 R09: 0000000000000000 [ 1323.270813][T25083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1323.278815][T25083] R13: 00007f7101026038 R14: 00007f7101025fa0 R15: 00007ffdd3667988 [ 1323.286851][T25083] [ 1323.359894][T25085] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5900'. [ 1323.387120][T12707] Bluetooth: hci2: unexpected event 0x08 length: 151 > 4 [ 1323.454664][T25085] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5900'. [ 1323.478597][T25085] netlink: 6 bytes leftover after parsing attributes in process `syz.3.5900'. [ 1323.648308][T25096] netlink: 'syz.0.5905': attribute type 10 has an invalid length. [ 1324.084347][T25105] netlink: 'syz.0.5908': attribute type 10 has an invalid length. [ 1324.542526][T25112] netlink: 'syz.0.5909': attribute type 10 has an invalid length. [ 1324.570677][T25112] bridge0: port 4(team0) entered blocking state [ 1324.589834][T25112] bridge0: port 4(team0) entered disabled state [ 1324.600511][T25112] team0: entered allmulticast mode [ 1324.614785][T25112] team_slave_0: entered allmulticast mode [ 1324.630248][T25112] team_slave_1: entered allmulticast mode [ 1324.654016][T25112] team0: entered promiscuous mode [ 1324.680310][T25112] team_slave_0: entered promiscuous mode [ 1324.695341][T25112] team_slave_1: entered promiscuous mode [ 1324.715971][T25112] bridge0: port 4(team0) entered blocking state [ 1324.722709][T25112] bridge0: port 4(team0) entered forwarding state [ 1324.752354][T25108] netlink: 'syz.3.5911': attribute type 25 has an invalid length. [ 1324.768810][T25108] netlink: 'syz.3.5911': attribute type 28 has an invalid length. [ 1324.906091][T25115] netlink: 'syz.4.5912': attribute type 4 has an invalid length. [ 1324.940562][T25115] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1325.043405][T12707] Bluetooth: hci4: unexpected event 0x09 length: 151 > 3 [ 1326.009579][T25143] __nla_validate_parse: 5 callbacks suppressed [ 1326.009622][T25143] netlink: 148 bytes leftover after parsing attributes in process `syz.2.5919'. [ 1326.103327][T25143] netlink: 'syz.2.5919': attribute type 10 has an invalid length. [ 1326.120280][T25143] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5919'. [ 1326.309775][T25154] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5924'. [ 1326.329809][T25152] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5923'. [ 1326.394273][T25154] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5924'. [ 1326.421765][T25154] netlink: 6 bytes leftover after parsing attributes in process `syz.4.5924'. [ 1326.474534][T12707] Bluetooth: hci2: unexpected event 0x09 length: 151 > 3 [ 1326.587401][T25161] FAULT_INJECTION: forcing a failure. [ 1326.587401][T25161] name failslab, interval 1, probability 0, space 0, times 0 [ 1326.607509][T25161] CPU: 1 PID: 25161 Comm: syz.2.5927 Not tainted syzkaller #0 [ 1326.615051][T25161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1326.625190][T25161] Call Trace: [ 1326.628533][T25161] [ 1326.631555][T25161] dump_stack_lvl+0x18c/0x250 [ 1326.636358][T25161] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1326.640740][T25159] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5926'. [ 1326.642573][T25161] ? show_regs_print_info+0x20/0x20 [ 1326.642609][T25161] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1326.642665][T25161] should_fail_ex+0x394/0x4c0 [ 1326.667790][T25161] should_failslab+0x9/0x20 [ 1326.672348][T25161] slab_pre_alloc_hook+0x59/0x300 [ 1326.677422][T25161] kmem_cache_alloc+0x5a/0x2d0 [ 1326.682234][T25161] ? skb_clone+0x1eb/0x370 [ 1326.686714][T25161] skb_clone+0x1eb/0x370 [ 1326.691015][T25161] bpf_clone_redirect+0x16d/0x4a0 [ 1326.696098][T25161] ? lock_chain_count+0x20/0x20 [ 1326.701044][T25161] bpf_prog_6893982b85ceadf7+0x5e/0x63 [ 1326.706551][T25161] ? __static_call_text_end+0x1dc3c0/0x1dc3c0 [ 1326.712674][T25161] ? lockdep_hardirqs_on+0x98/0x150 [ 1326.717936][T25161] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1326.724159][T25161] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 1326.730456][T25161] ? lockdep_softirqs_on+0x5b0/0x5b0 [ 1326.735826][T25161] ? seqcount_lockdep_reader_access+0x19a/0x1d0 [ 1326.742141][T25161] ? ktime_get_real_ts64+0x440/0x440 [ 1326.747486][T25161] ? __x64_sys_bpf+0x7c/0x90 [ 1326.752136][T25161] ? __local_bh_disable_ip+0x108/0x1a0 [ 1326.757659][T25161] ? __cant_sleep+0x220/0x220 [ 1326.762406][T25161] ? read_tsc+0x9/0x20 [ 1326.766531][T25161] ? ktime_get+0x24b/0x280 [ 1326.771014][T25161] ? bpf_test_run+0x174/0x870 [ 1326.775757][T25161] bpf_test_run+0x2df/0x870 [ 1326.780350][T25161] ? bpf_test_run+0x174/0x870 [ 1326.785095][T25161] ? dst_hold+0x70/0x70 [ 1326.789328][T25161] ? eth_get_headlen+0x210/0x210 [ 1326.794306][T25161] ? slab_build_skb+0x25a/0x3e0 [ 1326.799197][T25161] ? convert___skb_to_skb+0x3d/0x590 [ 1326.804543][T25161] bpf_prog_test_run_skb+0xdbb/0x18f0 [ 1326.809972][T25161] ? cpu_online+0x60/0x60 [ 1326.814356][T25161] bpf_prog_test_run+0x31f/0x390 [ 1326.819350][T25161] __sys_bpf+0x49d/0x890 [ 1326.823645][T25161] ? bpf_link_show_fdinfo+0x560/0x560 [ 1326.829094][T25161] ? lock_chain_count+0x20/0x20 [ 1326.833999][T25161] __x64_sys_bpf+0x7c/0x90 [ 1326.838456][T25161] do_syscall_64+0x55/0xb0 [ 1326.842908][T25161] ? clear_bhb_loop+0x40/0x90 [ 1326.847621][T25161] ? clear_bhb_loop+0x40/0x90 [ 1326.852355][T25161] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1326.858300][T25161] RIP: 0033:0x7f7100d9f559 [ 1326.862761][T25161] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1326.882408][T25161] RSP: 002b:00007f7101bda028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1326.890859][T25161] RAX: ffffffffffffffda RBX: 00007f7101025fa0 RCX: 00007f7100d9f559 [ 1326.898869][T25161] RDX: 000000000000002a RSI: 00002000000019c0 RDI: 000000000000000a [ 1326.906869][T25161] RBP: 00007f7101bda090 R08: 0000000000000000 R09: 0000000000000000 [ 1326.914878][T25161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1326.922886][T25161] R13: 00007f7101026038 R14: 00007f7101025fa0 R15: 00007ffdd3667988 [ 1326.930905][T25161] [ 1327.399336][T25165] bridge0: port 3(dummy0) entered disabled state [ 1328.544316][T25193] bridge0: port 3(dummy0) entered disabled state [ 1328.704179][T12707] Bluetooth: hci4: unexpected event 0x08 length: 151 > 4 [ 1328.866550][T25196] delete_channel: no stack [ 1329.025868][T25204] validate_nla: 2 callbacks suppressed [ 1329.025906][T25204] netlink: 'syz.2.5940': attribute type 10 has an invalid length. [ 1329.050548][T25204] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5940'. [ 1329.119523][T25204] bridge0: port 3(dummy0) entered blocking state [ 1329.126973][T25204] bridge0: port 3(dummy0) entered forwarding state [ 1329.354061][T25216] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.5945'. [ 1329.516216][T25211] syzkaller0: entered promiscuous mode [ 1329.545696][T25211] syzkaller0: entered allmulticast mode [ 1329.631355][T25224] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.5945'. [ 1329.822344][T25216] netlink: 'syz.3.5945': attribute type 21 has an invalid length. [ 1329.907461][T25226] netlink: 'syz.3.5945': attribute type 21 has an invalid length. [ 1330.637061][T12707] Bluetooth: hci2: unexpected event 0x08 length: 151 > 4 [ 1334.318414][T12707] Bluetooth: hci2: unexpected event 0x07 length: 151 < 255 [ 1334.416770][T12707] Bluetooth: hci0: unexpected event 0x08 length: 151 > 4 [ 1334.715035][T25261] __nla_validate_parse: 1 callbacks suppressed [ 1334.715057][T25261] netlink: 148 bytes leftover after parsing attributes in process `syz.2.5959'. [ 1334.969826][T25261] netlink: 'syz.2.5959': attribute type 10 has an invalid length. [ 1335.023814][T25261] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5959'. [ 1335.043507][T25257] netlink: 'syz.4.5958': attribute type 25 has an invalid length. [ 1335.063928][T25257] netlink: 'syz.4.5958': attribute type 28 has an invalid length. [ 1336.384024][T25288] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5965'. [ 1336.593458][T25294] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5968'. [ 1336.717060][T25294] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5968'. [ 1336.750560][T25294] netlink: 6 bytes leftover after parsing attributes in process `syz.3.5968'. [ 1336.968869][T12707] Bluetooth: hci3: unexpected event 0x07 length: 151 < 255 [ 1337.769709][T25328] netlink: 'syz.3.5980': attribute type 2 has an invalid length. [ 1337.788520][T25328] netlink: 'syz.3.5980': attribute type 8 has an invalid length. [ 1337.806704][T25328] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5980'. [ 1337.828248][T25330] netlink: 'syz.4.5981': attribute type 21 has an invalid length. [ 1337.851085][T25330] netlink: 156 bytes leftover after parsing attributes in process `syz.4.5981'. [ 1337.887742][T25328] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5980'. [ 1337.917516][T25333] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5982'. [ 1337.996263][T12707] Bluetooth: hci3: unexpected event 0x07 length: 151 < 255 [ 1339.150756][T12707] Bluetooth: hci2: unexpected event 0x07 length: 151 < 255 [ 1339.329434][T25378] rxe_eth0 speed is unknown, defaulting to 1000 [ 1339.352914][T12707] Bluetooth: hci2: unexpected event 0x08 length: 151 > 4 [ 1340.178538][T25404] __nla_validate_parse: 6 callbacks suppressed [ 1340.178562][T25404] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6003'. [ 1340.212878][T25402] netlink: 'syz.3.6002': attribute type 9 has an invalid length. [ 1340.220846][T25402] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.6002'. [ 1340.313966][T25401] netlink: 'syz.3.6002': attribute type 9 has an invalid length. [ 1340.327749][T25404] netlink: 152 bytes leftover after parsing attributes in process `syz.0.6003'. [ 1340.329487][T25401] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.6002'. [ 1340.350838][T25404] netlink: 6 bytes leftover after parsing attributes in process `syz.0.6003'. [ 1340.352751][T25408] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6004'. [ 1340.901252][T25412] netlink: 'syz.0.6005': attribute type 25 has an invalid length. [ 1340.916301][T25410] netlink: 'syz.4.6004': attribute type 2 has an invalid length. [ 1340.926758][T25412] netlink: 'syz.0.6005': attribute type 28 has an invalid length. [ 1340.937805][T25410] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.6004'. [ 1340.969865][T12707] Bluetooth: hci4: unexpected event 0x07 length: 151 < 255 [ 1341.445232][T25417] netlink: 'syz.4.6007': attribute type 25 has an invalid length. [ 1341.469734][T12707] Bluetooth: hci4: unexpected event 0x08 length: 151 > 4 [ 1341.477515][T25417] netlink: 'syz.4.6007': attribute type 28 has an invalid length. [ 1341.796342][T25425] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.6011'. [ 1341.923673][T25431] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6012'. [ 1342.076845][T25429] 2žÿ: renamed from vlan1 [ 1342.106341][T25434] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6013'. [ 1342.480778][T12707] Bluetooth: hci0: unexpected event 0x07 length: 151 < 255 [ 1343.406571][T25454] netlink: 'syz.3.6023': attribute type 25 has an invalid length. [ 1343.432128][T25454] netlink: 'syz.3.6023': attribute type 28 has an invalid length. [ 1343.581401][T25462] 2žÿ: renamed from vlan1 (while UP) [ 1343.794846][T12707] Bluetooth: hci3: unexpected event 0x08 length: 151 > 4 [ 1344.670285][T25483] netlink: 'syz.3.6033': attribute type 10 has an invalid length. [ 1345.220008][T25488] validate_nla: 1 callbacks suppressed [ 1345.220030][T25488] netlink: 'syz.0.6035': attribute type 28 has an invalid length. [ 1345.284899][T12707] Bluetooth: hci0: unexpected event 0x07 length: 151 < 255 [ 1345.477726][T25494] netlink: 'syz.4.6037': attribute type 25 has an invalid length. [ 1345.511478][T25494] netlink: 'syz.4.6037': attribute type 28 has an invalid length. [ 1345.587267][T25496] __nla_validate_parse: 16 callbacks suppressed [ 1345.587290][T25496] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6040'. [ 1345.663506][T12707] Bluetooth: hci2: unexpected event 0x07 length: 151 < 255 [ 1345.728140][T25496] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6040'. [ 1345.743629][T25496] netlink: 6 bytes leftover after parsing attributes in process `syz.2.6040'. [ 1345.813559][T25500] 2žÿ: renamed from vlan1 [ 1346.283611][T25511] netlink: 'syz.2.6052': attribute type 2 has an invalid length. [ 1346.313492][T25511] netlink: 'syz.2.6052': attribute type 8 has an invalid length. [ 1346.343207][T25511] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6052'. [ 1346.380837][T25511] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6052'. [ 1346.385753][T25516] netlink: 'syz.4.6044': attribute type 9 has an invalid length. [ 1346.460131][T25516] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.6044'. [ 1346.708525][T25524] netlink: 148 bytes leftover after parsing attributes in process `syz.0.6045'. [ 1346.748792][T25523] netlink: 'syz.0.6045': attribute type 10 has an invalid length. [ 1346.760261][T25523] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6045'. [ 1346.772929][T25523] bridge0: port 3(dummy0) entered blocking state [ 1346.779513][T25523] bridge0: port 3(dummy0) entered forwarding state [ 1347.083615][T25533] netlink: 'syz.4.6050': attribute type 25 has an invalid length. [ 1347.101641][T12707] Bluetooth: hci2: unexpected event 0x07 length: 151 < 255 [ 1347.117685][T25533] netlink: 'syz.4.6050': attribute type 28 has an invalid length. [ 1348.551854][T25566] netlink: 148 bytes leftover after parsing attributes in process `syz.0.6061'. [ 1348.596288][T25570] delete_channel: no stack [ 1348.622446][T25566] netlink: 'syz.0.6061': attribute type 10 has an invalid length. [ 1348.651712][T25566] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6061'. [ 1348.749872][T25577] FAULT_INJECTION: forcing a failure. [ 1348.749872][T25577] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1348.802589][T25577] CPU: 0 PID: 25577 Comm: syz.3.6065 Not tainted syzkaller #0 [ 1348.810140][T25577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1348.820250][T25577] Call Trace: [ 1348.823573][T25577] [ 1348.826542][T25577] dump_stack_lvl+0x18c/0x250 [ 1348.831284][T25577] ? show_regs_print_info+0x20/0x20 [ 1348.836582][T25577] ? load_image+0x420/0x420 [ 1348.841156][T25577] ? __lock_acquire+0x7eb0/0x7eb0 [ 1348.846246][T25577] ? snprintf+0xe9/0x140 [ 1348.850549][T25577] should_fail_ex+0x394/0x4c0 [ 1348.855285][T25577] _copy_to_user+0x2f/0xa0 [ 1348.859790][T25577] simple_read_from_buffer+0xe7/0x150 [ 1348.865230][T25577] proc_fail_nth_read+0x1e8/0x260 [ 1348.870324][T25577] ? proc_fault_inject_write+0x360/0x360 [ 1348.876223][T25577] ? fsnotify_perm+0x271/0x5e0 [ 1348.881043][T25577] ? proc_fault_inject_write+0x360/0x360 [ 1348.886737][T25577] vfs_read+0x298/0x990 [ 1348.890966][T25577] ? kernel_read+0x1e0/0x1e0 [ 1348.895614][T25577] ? __fget_files+0x28/0x460 [ 1348.900266][T25577] ? __fget_files+0x3fc/0x460 [ 1348.905011][T25577] ? __fdget_pos+0x2a3/0x330 [ 1348.909644][T25577] ? ksys_read+0x74/0x260 [ 1348.914012][T25577] ksys_read+0x151/0x260 [ 1348.918300][T25577] ? vfs_write+0x9a0/0x9a0 [ 1348.922756][T25577] ? lockdep_hardirqs_on+0x98/0x150 [ 1348.928014][T25577] do_syscall_64+0x55/0xb0 [ 1348.932465][T25577] ? clear_bhb_loop+0x40/0x90 [ 1348.937176][T25577] ? clear_bhb_loop+0x40/0x90 [ 1348.941890][T25577] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1348.947845][T25577] RIP: 0033:0x7f814555fd8e [ 1348.952290][T25577] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1348.971942][T25577] RSP: 002b:00007f81463ebfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1348.980393][T25577] RAX: ffffffffffffffda RBX: 00007f81463ec6c0 RCX: 00007f814555fd8e [ 1348.988397][T25577] RDX: 000000000000000f RSI: 00007f81463ec0a0 RDI: 0000000000000005 [ 1348.996402][T25577] RBP: 00007f81463ec090 R08: 0000000000000000 R09: 0000000000000000 [ 1349.004398][T25577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1349.012396][T25577] R13: 00007f8145826038 R14: 00007f8145825fa0 R15: 00007ffe3acd9b88 [ 1349.020422][T25577] [ 1349.067431][T25579] : port 1(ip6gretap0) entered blocking state [ 1349.087691][T25579] : port 1(ip6gretap0) entered disabled state [ 1349.123304][T25579] ip6gretap0: entered allmulticast mode [ 1349.149066][T25579] ip6gretap0: entered promiscuous mode [ 1349.175264][T25578] ip6gretap0: left allmulticast mode [ 1349.181329][T25578] ip6gretap0: left promiscuous mode [ 1349.186976][T25578] : port 1(ip6gretap0) entered disabled state [ 1349.527609][T25596] rxe_eth0 speed is unknown, defaulting to 1000 [ 1350.338254][T25622] validate_nla: 6 callbacks suppressed [ 1350.338395][T25622] netlink: 'syz.0.6078': attribute type 25 has an invalid length. [ 1350.360675][T25622] netlink: 'syz.0.6078': attribute type 28 has an invalid length. [ 1350.658820][T25632] __nla_validate_parse: 7 callbacks suppressed [ 1350.658851][T25632] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6082'. [ 1350.766060][T25632] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6082'. [ 1350.780792][T25632] netlink: 6 bytes leftover after parsing attributes in process `syz.3.6082'. [ 1351.383118][T25651] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6087'. [ 1351.421047][T25650] netlink: 148 bytes leftover after parsing attributes in process `syz.0.6086'. [ 1351.465004][T25652] netlink: 'syz.0.6086': attribute type 10 has an invalid length. [ 1351.479851][T25652] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6086'. [ 1351.806230][T25656] syzkaller0: entered promiscuous mode [ 1351.833586][T25656] syzkaller0: entered allmulticast mode [ 1355.353768][T25699] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.6103'. [ 1358.654015][T25668] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6092'. [ 1358.686896][T25673] netlink: 152 bytes leftover after parsing attributes in process `syz.0.6092'. [ 1358.699241][T25673] netlink: 6 bytes leftover after parsing attributes in process `syz.0.6092'. [ 1358.730094][T25684] netlink: 148 bytes leftover after parsing attributes in process `syz.2.6097'. [ 1358.768604][T25687] netlink: 'syz.2.6097': attribute type 10 has an invalid length. [ 1358.840752][T25687] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6097'. [ 1358.967806][T25705] netlink: 'syz.4.6104': attribute type 21 has an invalid length. [ 1359.002063][T25705] netlink: 156 bytes leftover after parsing attributes in process `syz.4.6104'. [ 1359.030677][T25702] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.6105'. [ 1359.441944][T25711] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6107'. [ 1359.467046][T25711] netlink: 'syz.4.6107': attribute type 2 has an invalid length. [ 1359.501593][T25711] netlink: 'syz.4.6107': attribute type 8 has an invalid length. [ 1359.530975][T25711] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6107'. [ 1359.810708][T25708] bridge0: port 3(dummy0) entered disabled state [ 1360.216135][T25716] netlink: 'syz.0.6109': attribute type 25 has an invalid length. [ 1360.242301][T25716] netlink: 'syz.0.6109': attribute type 28 has an invalid length. [ 1360.468046][T25718] rxe_eth0 speed is unknown, defaulting to 1000 [ 1360.515488][T25726] netlink: 'syz.3.6111': attribute type 10 has an invalid length. [ 1360.560598][T25726] dummy0: left allmulticast mode [ 1360.582557][T25726] dummy0: left promiscuous mode [ 1360.587825][T25726] bridge0: port 3(dummy0) entered disabled state [ 1360.614840][T25726] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1360.659180][T25717] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.6108'. [ 1361.305188][T25740] netlink: 'syz.3.6116': attribute type 10 has an invalid length. [ 1361.349441][T25740] dummy0: entered promiscuous mode [ 1361.431902][T25740] dummy0: entered allmulticast mode [ 1361.471924][T25740] bond0: (slave dummy0): Releasing backup interface [ 1361.505244][T25740] bridge0: port 3(dummy0) entered blocking state [ 1361.540242][T25740] bridge0: port 3(dummy0) entered disabled state [ 1361.694349][T25748] rxe_eth0 speed is unknown, defaulting to 1000 [ 1361.853640][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.863671][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.079605][T25754] netlink: 'syz.3.6121': attribute type 25 has an invalid length. [ 1362.137758][T25754] netlink: 'syz.3.6121': attribute type 28 has an invalid length. [ 1364.123364][T25809] __nla_validate_parse: 2 callbacks suppressed [ 1364.123406][T25809] netlink: 148 bytes leftover after parsing attributes in process `syz.3.6142'. [ 1364.174962][T25809] validate_nla: 2 callbacks suppressed [ 1364.175078][T25809] netlink: 'syz.3.6142': attribute type 10 has an invalid length. [ 1364.193728][T25809] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6142'. [ 1364.218346][T25809] bridge0: port 3(dummy0) entered blocking state [ 1364.225581][T25809] bridge0: port 3(dummy0) entered forwarding state [ 1364.434245][T25818] netlink: 'syz.3.6145': attribute type 25 has an invalid length. [ 1364.450727][T25818] netlink: 'syz.3.6145': attribute type 28 has an invalid length. [ 1364.676288][T25826] netlink: 126388 bytes leftover after parsing attributes in process `syz.3.6148'. [ 1364.817945][T25830] netlink: 'syz.2.6149': attribute type 9 has an invalid length. [ 1364.859153][T25830] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.6149'. [ 1365.015093][T25835] netlink: 192 bytes leftover after parsing attributes in process `syz.0.6151'. [ 1365.070722][T25835] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6151'. [ 1365.386341][T25841] netlink: 148 bytes leftover after parsing attributes in process `syz.2.6154'. [ 1365.443860][T25841] netlink: 'syz.2.6154': attribute type 10 has an invalid length. [ 1365.486926][T25841] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6154'. [ 1365.541089][T12707] Bluetooth: hci2: unexpected event 0x08 length: 151 > 4 [ 1365.763531][T25845] netlink: 'syz.3.6156': attribute type 25 has an invalid length. [ 1365.818837][T25845] netlink: 'syz.3.6156': attribute type 28 has an invalid length. [ 1365.843440][T25850] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.6155'. [ 1366.938821][T25863] bridge0: port 3(dummy0) entered disabled state [ 1366.976716][T25862] delete_channel: no stack [ 1367.253972][T12707] Bluetooth: hci0: unexpected event 0x08 length: 151 > 4 [ 1367.261698][T25874] netlink: 148 bytes leftover after parsing attributes in process `syz.4.6167'. [ 1367.365867][T25874] netlink: 'syz.4.6167': attribute type 10 has an invalid length. [ 1367.664857][T25878] netlink: 'syz.2.6168': attribute type 3 has an invalid length. [ 1367.673687][T25878] netlink: 'syz.2.6168': attribute type 6 has an invalid length. [ 1368.563187][T12707] Bluetooth: hci0: unexpected event 0x08 length: 151 > 4 [ 1369.225222][T25913] validate_nla: 5 callbacks suppressed [ 1369.225250][T25913] netlink: 'syz.0.6183': attribute type 3 has an invalid length. [ 1369.266787][T25913] netlink: 'syz.0.6183': attribute type 6 has an invalid length. [ 1369.280655][T25913] __nla_validate_parse: 5 callbacks suppressed [ 1369.280697][T25913] netlink: 144448 bytes leftover after parsing attributes in process `syz.0.6183'. [ 1369.487436][T25919] syzkaller0: entered promiscuous mode [ 1369.510153][T25919] syzkaller0: entered allmulticast mode [ 1370.403222][T12707] Bluetooth: hci0: unexpected event 0x08 length: 151 > 4 [ 1370.964798][T25962] netlink: 'syz.3.6198': attribute type 3 has an invalid length. [ 1371.002170][T25962] netlink: 'syz.3.6198': attribute type 6 has an invalid length. [ 1371.018083][T25962] netlink: 144448 bytes leftover after parsing attributes in process `syz.3.6198'. [ 1372.776210][T25934] netlink: 56 bytes leftover after parsing attributes in process `syz.4.6190'. [ 1373.257047][T25975] netlink: 148 bytes leftover after parsing attributes in process `syz.4.6203'. [ 1373.508826][T25980] netlink: 'syz.4.6203': attribute type 10 has an invalid length. [ 1373.536326][T25980] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6203'. [ 1373.585861][T25982] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6205'. [ 1373.688293][T25985] netlink: 'syz.3.6206': attribute type 15 has an invalid length. [ 1373.722167][T25985] netlink: 156 bytes leftover after parsing attributes in process `syz.3.6206'. [ 1374.363578][T26000] netlink: 'syz.0.6211': attribute type 2 has an invalid length. [ 1374.374609][T26000] netlink: 'syz.0.6211': attribute type 8 has an invalid length. [ 1374.394865][T26000] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6211'. [ 1374.466865][T26000] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6211'. [ 1377.690588][T26012] bridge0: port 3(dummy0) entered disabled state [ 1377.777413][T26011] netlink: 148 bytes leftover after parsing attributes in process `syz.3.6216'. [ 1377.813633][T26013] netlink: 'syz.3.6216': attribute type 10 has an invalid length. [ 1377.846028][T26013] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6216'. [ 1377.997582][T26016] netlink: 'syz.2.6217': attribute type 10 has an invalid length. [ 1378.067054][T26016] bridge0: port 3(dummy0) entered disabled state [ 1378.229311][T26016] dummy0: left allmulticast mode [ 1378.249466][T26016] dummy0: left promiscuous mode [ 1378.282114][T26016] bridge0: port 3(dummy0) entered disabled state [ 1378.386975][T26016] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1379.479204][T26049] netlink: 'syz.0.6226': attribute type 10 has an invalid length. [ 1379.534466][T26049] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6226'. [ 1379.571897][T26049] bridge0: port 3(dummy0) entered blocking state [ 1379.578505][T26049] bridge0: port 3(dummy0) entered forwarding state [ 1379.632479][T26046] netlink: 'syz.0.6226': attribute type 10 has an invalid length. [ 1379.647349][T26046] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6226'. [ 1379.727568][T26053] netlink: 'syz.2.6228': attribute type 21 has an invalid length. [ 1379.772549][T26053] netlink: 164 bytes leftover after parsing attributes in process `syz.2.6228'. [ 1380.404199][T26065] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.6230'. [ 1380.489024][T26067] netlink: 'syz.3.6233': attribute type 2 has an invalid length. [ 1380.547020][T26067] netlink: 'syz.3.6233': attribute type 8 has an invalid length. [ 1380.570476][T26067] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6233'. [ 1380.576601][T26071] netlink: 'syz.2.6234': attribute type 9 has an invalid length. [ 1380.615291][T26071] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.6234'. [ 1380.635166][T26067] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6233'. [ 1381.093832][T26085] netlink: 'syz.2.6237': attribute type 25 has an invalid length. [ 1381.102328][T26085] netlink: 'syz.2.6237': attribute type 28 has an invalid length. [ 1381.176512][T26087] netlink: 148 bytes leftover after parsing attributes in process `syz.0.6238'. [ 1381.242193][T26087] netlink: 'syz.0.6238': attribute type 10 has an invalid length. [ 1381.252083][T26087] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6238'. [ 1382.512269][T26110] bridge0: port 3(dummy0) entered disabled state [ 1382.563661][T26108] delete_channel: no stack [ 1382.747747][T26120] netlink: 'syz.3.6248': attribute type 25 has an invalid length. [ 1382.834244][T26124] netlink: 148 bytes leftover after parsing attributes in process `syz.0.6250'. [ 1385.506317][T26201] __nla_validate_parse: 3 callbacks suppressed [ 1385.506357][T26201] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.6274'. [ 1386.054508][T26216] netlink: 148 bytes leftover after parsing attributes in process `syz.3.6279'. [ 1386.105783][T26216] validate_nla: 3 callbacks suppressed [ 1386.105817][T26216] netlink: 'syz.3.6279': attribute type 10 has an invalid length. [ 1386.121149][T26216] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6279'. [ 1386.148529][T26216] bridge0: port 3(dummy0) entered blocking state [ 1386.155719][T26216] bridge0: port 3(dummy0) entered forwarding state [ 1386.694327][T26239] netlink: 'syz.0.6284': attribute type 10 has an invalid length. [ 1386.803683][T26239] bridge0: port 4(team0) entered disabled state [ 1386.972970][T26239] team0 (unregistering): left allmulticast mode [ 1387.023781][T26239] team_slave_0: left allmulticast mode [ 1387.050139][T26239] team_slave_1: left allmulticast mode [ 1387.080184][T26239] team0 (unregistering): left promiscuous mode [ 1387.151919][T26239] team_slave_0: left promiscuous mode [ 1387.176126][T26239] team_slave_1: left promiscuous mode [ 1387.195766][T26239] bridge0: port 4(team0) entered disabled state [ 1387.359934][T26239] team0 (unregistering): Port device team_slave_0 removed [ 1387.485097][T26239] team0 (unregistering): Port device team_slave_1 removed [ 1388.236385][T26253] rxe_eth0 speed is unknown, defaulting to 1000 [ 1388.571286][T26269] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6292'. [ 1388.592692][T26267] netlink: 148 bytes leftover after parsing attributes in process `syz.0.6291'. [ 1388.624499][T26267] netlink: 'syz.0.6291': attribute type 10 has an invalid length. [ 1388.650214][T26267] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6291'. [ 1393.137633][T26305] netlink: 'syz.0.6300': attribute type 21 has an invalid length. [ 1393.190588][T26305] netlink: 156 bytes leftover after parsing attributes in process `syz.0.6300'. [ 1393.329820][T26309] netlink: 'syz.2.6302': attribute type 12 has an invalid length. [ 1393.348420][T26309] netlink: 'syz.2.6302': attribute type 15 has an invalid length. [ 1393.435296][T26313] IPv6: Can't replace route, no match found [ 1395.256978][T24004] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1395.267392][T24004] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1395.297051][T24004] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1395.307761][T24004] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1395.315697][T24004] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1395.323561][T24004] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1395.599385][T26355] netlink: 148 bytes leftover after parsing attributes in process `syz.3.6319'. [ 1395.673240][T26358] netlink: 'syz.3.6319': attribute type 10 has an invalid length. [ 1395.701803][T26358] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6319'. [ 1395.866015][T26360] rxe_eth0 speed is unknown, defaulting to 1000 [ 1395.900991][T26365] netlink: 'syz.2.6320': attribute type 10 has an invalid length. [ 1396.083179][T26370] netlink: 'syz.3.6322': attribute type 25 has an invalid length. [ 1396.140634][T26370] netlink: 'syz.3.6322': attribute type 28 has an invalid length. [ 1396.288025][T14730] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1396.619237][T14730] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1396.660193][T26379] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6325'. [ 1396.687571][T26379] netlink: 6 bytes leftover after parsing attributes in process `syz.3.6325'. [ 1396.762816][T14730] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1396.882433][T12707] Bluetooth: hci4: unexpected event 0x07 length: 151 < 255 [ 1396.944862][T14730] batman_adv: batadv0: Removing interface: netdevsim0 [ 1396.973027][T14730] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1397.137355][T26394] netlink: 'syz.3.6336': attribute type 2 has an invalid length. [ 1397.176128][T26394] netlink: 'syz.3.6336': attribute type 8 has an invalid length. [ 1397.223254][T26394] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6336'. [ 1397.246546][T26392] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1397.254346][T26392] IPv6: NLM_F_CREATE should be set when creating new route [ 1397.262605][T26392] IPv6: NLM_F_CREATE should be set when creating new route [ 1397.270138][T26392] IPv6: NLM_F_CREATE should be set when creating new route [ 1397.348103][T26396] netlink: 148 bytes leftover after parsing attributes in process `syz.2.6330'. [ 1397.359531][T26397] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6336'. [ 1397.370360][T12707] Bluetooth: hci5: command tx timeout [ 1397.376410][T26360] chnl_net:caif_netlink_parms(): no params data found [ 1397.413186][T26398] netlink: 'syz.2.6330': attribute type 10 has an invalid length. [ 1397.426456][T26398] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6330'. [ 1397.458866][T26398] dummy0: entered promiscuous mode [ 1397.479271][T26398] dummy0: entered allmulticast mode [ 1397.493564][T26398] bond0: (slave dummy0): Releasing backup interface [ 1397.547803][T26398] bridge0: port 3(dummy0) entered blocking state [ 1397.568414][T26398] bridge0: port 3(dummy0) entered disabled state [ 1397.705921][T26408] netlink: 16182 bytes leftover after parsing attributes in process `syz.3.6331'. [ 1397.854333][T26360] bridge0: port 1(bridge_slave_0) entered blocking state [ 1397.880159][T26360] bridge0: port 1(bridge_slave_0) entered disabled state [ 1397.887484][T26360] bridge_slave_0: entered allmulticast mode [ 1397.961993][T26360] bridge_slave_0: entered promiscuous mode [ 1397.993508][T26360] bridge0: port 2(bridge_slave_1) entered blocking state [ 1398.011016][T26360] bridge0: port 2(bridge_slave_1) entered disabled state [ 1398.018325][T26360] bridge_slave_1: entered allmulticast mode [ 1398.051715][T26360] bridge_slave_1: entered promiscuous mode [ 1398.306475][T26360] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1398.361426][T26419] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6335'. [ 1398.406471][T26419] netlink: 6 bytes leftover after parsing attributes in process `syz.3.6335'. [ 1398.497113][T26360] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1398.640380][T26360] team0: Port device team_slave_0 added [ 1398.853575][T26360] team0: Port device team_slave_1 added [ 1398.951938][T12707] Bluetooth: hci4: unexpected event 0x07 length: 151 < 255 [ 1399.371155][T26360] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1399.380513][T26360] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1399.440958][T12707] Bluetooth: hci5: command tx timeout [ 1399.455721][T26360] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1399.516997][T26360] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1399.538545][T26360] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1399.652216][T26360] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1400.378933][T26449] bridge0: port 3(dummy0) entered disabled state [ 1400.550686][T26466] netlink: 'syz.3.6346': attribute type 10 has an invalid length. [ 1400.794061][T26360] hsr_slave_0: entered promiscuous mode [ 1400.814944][T26360] hsr_slave_1: entered promiscuous mode [ 1400.872617][T26476] netlink: 'syz.0.6350': attribute type 9 has an invalid length. [ 1400.962165][T12707] Bluetooth: hci0: unexpected event 0x07 length: 151 < 255 [ 1400.990409][T26476] netlink: 182608 bytes leftover after parsing attributes in process `syz.0.6350'. [ 1401.520988][T12707] Bluetooth: hci5: command tx timeout [ 1401.770493][T26490] netlink: 148 bytes leftover after parsing attributes in process `syz.3.6353'. [ 1401.830719][T26496] netlink: 'syz.3.6353': attribute type 10 has an invalid length. [ 1401.871118][T26496] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6353'. [ 1402.691900][T12707] Bluetooth: hci0: unexpected event 0x07 length: 151 < 255 [ 1402.708098][T14730] hsr_slave_0: left promiscuous mode [ 1402.724154][T14730] hsr_slave_1: left promiscuous mode [ 1402.761604][T14730] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1402.775034][T14730] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1402.811318][T14730] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1402.819632][T14730] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1402.880464][T14730] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi [ 1402.917781][T14730] batman_adv: batadv0: Removing interface: veth1_virt_wifi [ 1403.085794][T14730] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 1403.100107][T14730] batman_adv: batadv0: Removing interface: virt_wifi0 [ 1403.115268][T14730] team0: left allmulticast mode [ 1403.127090][T14730] team_slave_0: left allmulticast mode [ 1403.135103][T14730] team_slave_1: left allmulticast mode [ 1403.143165][T14730] team0: left promiscuous mode [ 1403.148001][T14730] team_slave_0: left promiscuous mode [ 1403.154969][T14730] team_slave_1: left promiscuous mode [ 1403.161525][T14730] bridge0: port 4(team0) entered disabled state [ 1403.179561][T14730] dummy0: left allmulticast mode [ 1403.184876][T14730] dummy0: left promiscuous mode [ 1403.190913][T14730] bridge0: port 3(dummy0) entered disabled state [ 1403.201997][T14730] bridge_slave_1: left allmulticast mode [ 1403.207723][T14730] bridge_slave_1: left promiscuous mode [ 1403.215045][T14730] bridge0: port 2(bridge_slave_1) entered disabled state [ 1403.236959][T14730] bridge_slave_0: left promiscuous mode [ 1403.245642][T14730] bridge0: port 1(bridge_slave_0) entered disabled state [ 1403.278130][T14730] veth1_macvtap: left promiscuous mode [ 1403.284991][T14730] veth0_macvtap: left promiscuous mode [ 1403.291571][T14730] veth1_vlan: left promiscuous mode [ 1403.614464][T12707] Bluetooth: hci5: command tx timeout [ 1404.100205][T14730] team0 (unregistering): Port device team_slave_1 removed [ 1404.158753][T14730] team0 (unregistering): Port device team_slave_0 removed [ 1404.674386][T26509] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6356'. [ 1404.894988][T26526] syzkaller0: entered promiscuous mode [ 1404.911495][T26526] syzkaller0: entered allmulticast mode [ 1407.470715][T26543] netlink: 'syz.0.6365': attribute type 21 has an invalid length. [ 1407.478652][T26543] netlink: 128 bytes leftover after parsing attributes in process `syz.0.6365'. [ 1407.492213][T26543] netlink: 'syz.0.6365': attribute type 5 has an invalid length. [ 1407.500188][T26543] netlink: 3 bytes leftover after parsing attributes in process `syz.0.6365'. [ 1407.766521][T12707] Bluetooth: hci4: unexpected event 0x07 length: 151 < 255 [ 1407.891365][T26360] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1407.929406][T26360] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1407.990994][T26360] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1408.024642][T26360] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1408.114353][T26559] netlink: 148 bytes leftover after parsing attributes in process `syz.0.6368'. [ 1408.258318][T26559] netlink: 'syz.0.6368': attribute type 10 has an invalid length. [ 1408.302278][T26559] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6368'. [ 1408.397375][T26559] bridge0: port 3(dummy0) entered blocking state [ 1408.406229][T26559] bridge0: port 3(dummy0) entered forwarding state [ 1408.500552][T26565] netlink: 'syz.2.6369': attribute type 25 has an invalid length. [ 1408.520258][T26565] netlink: 'syz.2.6369': attribute type 28 has an invalid length. [ 1408.685582][T26360] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1408.749404][T26360] 8021q: adding VLAN 0 to HW filter on device team0 [ 1408.835029][T13524] bridge0: port 1(bridge_slave_0) entered blocking state [ 1408.842319][T13524] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1408.856347][T13524] bridge0: port 2(bridge_slave_1) entered blocking state [ 1408.863646][T13524] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1408.874458][T26575] netlink: 152 bytes leftover after parsing attributes in process `syz.0.6371'. [ 1408.894542][T26575] netlink: 6 bytes leftover after parsing attributes in process `syz.0.6371'. [ 1409.631231][T26593] netlink: 'syz.2.6376': attribute type 29 has an invalid length. [ 1409.686491][T26593] netlink: 'syz.2.6376': attribute type 29 has an invalid length. [ 1409.767148][T26360] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1409.918342][T12707] Bluetooth: hci2: unexpected event 0x07 length: 151 < 255 [ 1410.317230][T26602] rxe_eth0 speed is unknown, defaulting to 1000 [ 1410.539402][T26617] netlink: 152 bytes leftover after parsing attributes in process `syz.0.6381'. [ 1410.570469][T26617] netlink: 6 bytes leftover after parsing attributes in process `syz.0.6381'. [ 1411.136521][T26360] veth0_vlan: entered promiscuous mode [ 1411.167222][T26633] bridge0: port 3(dummy0) entered disabled state [ 1411.216062][T26360] veth1_vlan: entered promiscuous mode [ 1411.254908][T12707] Bluetooth: hci0: unexpected event 0x07 length: 151 < 255 [ 1411.439276][T26360] veth0_macvtap: entered promiscuous mode [ 1411.606915][T26360] veth1_macvtap: entered promiscuous mode [ 1411.697072][T26640] netlink: 'syz.0.6387': attribute type 25 has an invalid length. [ 1411.718972][T26640] netlink: 'syz.0.6387': attribute type 28 has an invalid length. [ 1411.764946][T26360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1411.782452][T26360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1411.793803][T26360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1411.805168][T26360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1411.818055][T26360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1411.841445][T26360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1411.867979][T26360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1411.886528][T26360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1411.908636][T26360] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1411.955731][T26360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1411.976493][T26360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1411.999679][T26360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1412.025628][T26360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1412.046731][T26360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1412.069301][T26360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1412.088285][T26360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1412.110541][T26360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1412.132813][T26360] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1412.165951][T26360] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1412.197506][T26360] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1412.226490][T26360] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1412.247525][T26360] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1412.471765][T26662] netlink: 152 bytes leftover after parsing attributes in process `syz.0.6390'. [ 1412.511523][T26662] netlink: 6 bytes leftover after parsing attributes in process `syz.0.6390'. [ 1412.637100][T26665] netlink: 'syz.3.6391': attribute type 10 has an invalid length. [ 1413.113848][T26678] netlink: 148 bytes leftover after parsing attributes in process `syz.0.6394'. [ 1413.172188][T13520] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1413.180649][T13520] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1413.220108][T26679] netlink: 'syz.0.6394': attribute type 10 has an invalid length. [ 1413.241306][T26679] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6394'. [ 1413.271627][T26679] bridge0: port 3(dummy0) entered blocking state [ 1413.278195][T26679] bridge0: port 3(dummy0) entered forwarding state [ 1413.345223][T14730] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1413.399800][T14730] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1413.862756][T26697] netlink: 'syz.2.6397': attribute type 9 has an invalid length. [ 1413.871896][T26697] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.6397'. [ 1414.134087][T26704] netlink: 152 bytes leftover after parsing attributes in process `syz.4.6399'. [ 1414.172533][T26704] netlink: 6 bytes leftover after parsing attributes in process `syz.4.6399'. [ 1414.336491][T26710] delete_channel: no stack [ 1416.149289][T26758] netlink: 'syz.4.6417': attribute type 25 has an invalid length. [ 1416.165007][T26758] netlink: 'syz.4.6417': attribute type 28 has an invalid length. [ 1416.187719][T26763] netlink: 'syz.2.6419': attribute type 8 has an invalid length. [ 1416.202645][T26763] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.6419'. [ 1416.222904][T26763] netlink: 'syz.2.6419': attribute type 8 has an invalid length. [ 1416.241903][T26763] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.6419'. [ 1416.290661][T26763] netlink: 'syz.2.6419': attribute type 8 has an invalid length. [ 1416.313459][T26763] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.6419'. [ 1416.358320][T26763] netlink: 'syz.2.6419': attribute type 8 has an invalid length. [ 1416.389676][T26763] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.6419'. [ 1416.428741][T26763] netlink: 'syz.2.6419': attribute type 8 has an invalid length. [ 1416.460070][T26763] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.6419'. [ 1416.472454][T26763] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.6419'. [ 1416.544486][T26763] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.6419'. [ 1416.586728][T26763] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.6419'. [ 1416.672206][T26763] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.6419'. [ 1416.727530][T26763] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.6419'. [ 1417.762344][T12707] Bluetooth: hci5: unexpected event 0x08 length: 151 > 4 [ 1418.959220][T26827] syzkaller0: entered promiscuous mode [ 1418.980282][T26827] syzkaller0: entered allmulticast mode [ 1419.504660][T12707] Bluetooth: hci5: unexpected event 0x07 length: 151 < 255 [ 1422.447113][T26843] __nla_validate_parse: 25 callbacks suppressed [ 1422.447137][T26843] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6444'. [ 1422.462776][T26843] netlink: 6 bytes leftover after parsing attributes in process `syz.3.6444'. [ 1422.475502][T26850] validate_nla: 28 callbacks suppressed [ 1422.475518][T26850] netlink: 'syz.2.6447': attribute type 25 has an invalid length. [ 1422.500177][T26850] netlink: 'syz.2.6447': attribute type 28 has an invalid length. [ 1422.548635][T26872] netlink: 'syz.0.6455': attribute type 39 has an invalid length. [ 1422.606610][T12707] Bluetooth: hci0: unexpected event 0x07 length: 151 < 255 [ 1422.753291][T26878] netlink: 'syz.2.6457': attribute type 21 has an invalid length. [ 1423.194629][T26896] syzkaller1: tun_chr_ioctl cmd 2147767521 [ 1423.268164][T26899] netlink: 152 bytes leftover after parsing attributes in process `syz.0.6464'. [ 1423.287129][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.293665][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.311860][T26899] netlink: 6 bytes leftover after parsing attributes in process `syz.0.6464'. [ 1423.381886][T26902] netlink: 'syz.4.6465': attribute type 25 has an invalid length. [ 1423.400313][T26902] netlink: 'syz.4.6465': attribute type 28 has an invalid length. [ 1426.562418][T26921] netlink: 'syz.2.6471': attribute type 8 has an invalid length. [ 1426.617021][T26921] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6471'. [ 1426.674698][T26923] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6471'. [ 1427.059118][T26937] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6475'. [ 1427.074584][T26937] netlink: 6 bytes leftover after parsing attributes in process `syz.2.6475'. [ 1427.266806][T26943] netlink: 148 bytes leftover after parsing attributes in process `syz.4.6477'. [ 1427.309345][T26946] netlink: 'syz.3.6476': attribute type 2 has an invalid length. [ 1427.338790][T26947] netlink: 'syz.4.6477': attribute type 10 has an invalid length. [ 1427.378957][T26947] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6477'. [ 1427.427955][T26947] dummy0: entered promiscuous mode [ 1427.445997][T26947] dummy0: entered allmulticast mode [ 1427.472780][T26947] bridge0: port 3(dummy0) entered blocking state [ 1427.479718][T26947] bridge0: port 3(dummy0) entered disabled state [ 1427.492234][T26947] bridge0: port 3(dummy0) entered blocking state [ 1427.498685][T26947] bridge0: port 3(dummy0) entered forwarding state [ 1427.515210][T26949] netlink: 'syz.2.6478': attribute type 25 has an invalid length. [ 1427.530860][T26949] netlink: 'syz.2.6478': attribute type 28 has an invalid length. [ 1427.726316][T26952] netlink: 148 bytes leftover after parsing attributes in process `syz.4.6479'. [ 1427.766454][T26952] netlink: 'syz.4.6479': attribute type 10 has an invalid length. [ 1427.775255][T26952] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6479'. [ 1430.747764][T26964] netlink: 'syz.3.6484': attribute type 39 has an invalid length. [ 1431.053134][T26976] netlink: 'syz.2.6489': attribute type 29 has an invalid length. [ 1431.079612][T26976] netlink: 'syz.2.6489': attribute type 29 has an invalid length. [ 1431.425089][T26984] netlink: 148 bytes leftover after parsing attributes in process `syz.2.6490'. [ 1431.474439][T26989] netlink: 'syz.4.6498': attribute type 4 has an invalid length. [ 1431.496077][T26984] netlink: 'syz.2.6490': attribute type 10 has an invalid length. [ 1431.505443][T26984] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6490'. [ 1431.550673][T26989] netlink: 128124 bytes leftover after parsing attributes in process `syz.4.6498'. [ 1431.634334][T26984] bridge0: port 3(dummy0) entered blocking state [ 1431.641758][T26984] bridge0: port 3(dummy0) entered forwarding state [ 1431.742250][T26987] netlink: 'syz.3.6491': attribute type 25 has an invalid length. [ 1431.760385][T26987] netlink: 'syz.3.6491': attribute type 28 has an invalid length. [ 1431.827890][T26991] netlink: 148 bytes leftover after parsing attributes in process `syz.0.6492'. [ 1431.855958][T26991] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6492'. [ 1431.906449][T26984] syz.2.6490 (26984) used greatest stack depth: 18280 bytes left [ 1432.046890][T27000] netlink: 152 bytes leftover after parsing attributes in process `syz.4.6496'. [ 1432.060486][T27000] netlink: 6 bytes leftover after parsing attributes in process `syz.4.6496'. [ 1432.093696][T27002] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6497'. [ 1432.813715][T27017] validate_nla: 1 callbacks suppressed [ 1432.813738][T27017] netlink: 'syz.3.6504': attribute type 25 has an invalid length. [ 1432.996652][T27017] netlink: 'syz.3.6504': attribute type 28 has an invalid length. [ 1433.208774][T27022] netlink: 148 bytes leftover after parsing attributes in process `syz.0.6505'. [ 1433.303461][T27022] netlink: 'syz.0.6505': attribute type 10 has an invalid length. [ 1433.378877][T27022] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6505'. [ 1433.419569][T27027] netlink: 148 bytes leftover after parsing attributes in process `syz.3.6507'. [ 1433.444570][T27030] netlink: 'syz.3.6507': attribute type 10 has an invalid length. [ 1433.470574][T27030] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6507'. [ 1433.481564][T27024] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6506'. [ 1433.600640][T27035] netlink: 152 bytes leftover after parsing attributes in process `syz.0.6509'. [ 1433.610667][T27035] netlink: 6 bytes leftover after parsing attributes in process `syz.0.6509'. [ 1433.834642][T27047] netlink: 'syz.2.6511': attribute type 2 has an invalid length. [ 1433.860407][T27047] netlink: 'syz.2.6511': attribute type 8 has an invalid length. [ 1433.887545][T27047] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6511'. [ 1433.935480][T27039] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6511'. [ 1434.039195][T27052] netlink: 'syz.4.6514': attribute type 21 has an invalid length. [ 1434.060368][T27052] netlink: 156 bytes leftover after parsing attributes in process `syz.4.6514'. [ 1434.119045][T27051] netlink: 'syz.3.6515': attribute type 25 has an invalid length. [ 1434.147555][T27051] netlink: 'syz.3.6515': attribute type 28 has an invalid length. [ 1434.225559][T27042] netlink: 'syz.0.6512': attribute type 10 has an invalid length. [ 1434.727816][T12707] Bluetooth: hci4: unexpected event 0x08 length: 151 > 4 [ 1434.742549][T27065] syzkaller0: entered promiscuous mode [ 1434.776441][T27065] syzkaller0: entered allmulticast mode [ 1440.349502][T27086] __nla_validate_parse: 4 callbacks suppressed [ 1440.349522][T27086] netlink: 156 bytes leftover after parsing attributes in process `syz.3.6525'. [ 1440.394370][T27093] validate_nla: 3 callbacks suppressed [ 1440.394392][T27093] netlink: 'syz.0.6526': attribute type 25 has an invalid length. [ 1440.425490][T27093] netlink: 'syz.0.6526': attribute type 28 has an invalid length. [ 1440.696772][T12707] Bluetooth: hci5: unexpected event 0x08 length: 151 > 4 [ 1440.821476][T27111] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6532'. [ 1440.857078][T27111] netlink: 6 bytes leftover after parsing attributes in process `syz.2.6532'. [ 1441.097745][T27123] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.6537'. [ 1441.363207][T27135] netlink: 'syz.0.6539': attribute type 2 has an invalid length. [ 1441.385474][T27135] netlink: 'syz.0.6539': attribute type 8 has an invalid length. [ 1441.406831][T27135] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6539'. [ 1441.458924][T27135] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6539'. [ 1441.724058][T27138] netlink: 148 bytes leftover after parsing attributes in process `syz.4.6540'. [ 1441.771950][T27140] netlink: 'syz.3.6541': attribute type 25 has an invalid length. [ 1441.786303][T12707] Bluetooth: hci2: unexpected event 0x08 length: 151 > 4 [ 1441.791766][T27140] netlink: 'syz.3.6541': attribute type 28 has an invalid length. [ 1441.845279][T27138] netlink: 'syz.4.6540': attribute type 10 has an invalid length. [ 1441.869585][T27138] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6540'. [ 1442.113823][T12707] Bluetooth: hci0: unexpected event 0x07 length: 151 < 255 [ 1442.239317][T27152] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6545'. [ 1442.946254][T27169] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.6550'. [ 1443.039399][T12707] Bluetooth: hci5: unexpected event 0x08 length: 151 > 4 [ 1443.221872][T27180] netlink: 'syz.2.6552': attribute type 25 has an invalid length. [ 1443.270233][T27180] netlink: 'syz.2.6552': attribute type 28 has an invalid length. [ 1443.647883][T27186] netlink: 'syz.0.6553': attribute type 10 has an invalid length. [ 1443.734815][T27184] delete_channel: no stack [ 1443.953720][T12707] Bluetooth: hci4: unexpected event 0x07 length: 151 < 255 [ 1444.696528][T12707] Bluetooth: hci4: unexpected event 0x08 length: 151 > 4 [ 1445.207197][T27208] bridge0: port 3(dummy0) entered disabled state [ 1445.464528][T27216] __nla_validate_parse: 2 callbacks suppressed [ 1445.464570][T27216] netlink: 148 bytes leftover after parsing attributes in process `syz.2.6565'. [ 1445.561598][T27216] netlink: 'syz.2.6565': attribute type 10 has an invalid length. [ 1445.580207][T27216] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6565'. [ 1445.627369][T27215] rxe_eth0 speed is unknown, defaulting to 1000 [ 1445.929002][T27222] netlink: 'syz.4.6566': attribute type 25 has an invalid length. [ 1445.959288][T27222] netlink: 'syz.4.6566': attribute type 28 has an invalid length. [ 1446.624133][T27237] netlink: 152 bytes leftover after parsing attributes in process `syz.0.6571'. [ 1446.659015][T27237] netlink: 6 bytes leftover after parsing attributes in process `syz.0.6571'. [ 1449.748329][T27251] netlink: 148 bytes leftover after parsing attributes in process `syz.0.6575'. [ 1449.759934][T27252] netlink: 'syz.0.6575': attribute type 10 has an invalid length. [ 1449.773236][T27252] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6575'. [ 1449.785385][T27252] bridge0: port 3(dummy0) entered blocking state [ 1449.791975][T27252] bridge0: port 3(dummy0) entered forwarding state [ 1450.211134][T12707] Bluetooth: hci0: unexpected event 0x07 length: 151 < 255 [ 1450.418379][T27267] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6580'. [ 1450.590197][T27274] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6582'. [ 1450.599945][T27274] netlink: 6 bytes leftover after parsing attributes in process `syz.2.6582'. [ 1450.904026][T27278] netlink: 'syz.2.6584': attribute type 25 has an invalid length. [ 1450.952443][T27278] netlink: 'syz.2.6584': attribute type 28 has an invalid length. [ 1451.145401][T27281] netlink: 'syz.3.6585': attribute type 25 has an invalid length. [ 1451.900442][T27281] netlink: 'syz.3.6585': attribute type 28 has an invalid length. [ 1451.920100][T27285] netlink: 'syz.4.6586': attribute type 10 has an invalid length. [ 1451.940917][T27285] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6586'. [ 1451.952428][T27283] netlink: 'syz.4.6586': attribute type 10 has an invalid length. [ 1451.961089][T27283] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6586'. [ 1452.612714][T12707] Bluetooth: hci4: unexpected event 0x08 length: 151 > 4 [ 1452.651218][T27306] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6593'. [ 1452.681226][T27306] netlink: 6 bytes leftover after parsing attributes in process `syz.3.6593'. [ 1452.871754][T27310] netlink: 'syz.0.6595': attribute type 25 has an invalid length. [ 1452.882918][T27310] netlink: 'syz.0.6595': attribute type 28 has an invalid length. [ 1452.953573][T27314] netlink: 148 bytes leftover after parsing attributes in process `syz.3.6597'. [ 1452.991552][T27314] netlink: 'syz.3.6597': attribute type 10 has an invalid length. [ 1453.013187][T27314] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6597'. [ 1453.464422][T27324] netlink: 'syz.0.6600': attribute type 29 has an invalid length. [ 1453.551560][T12707] Bluetooth: hci0: unexpected event 0x07 length: 151 < 255 [ 1453.873831][T12707] Bluetooth: hci4: unexpected event 0x08 length: 151 > 4 [ 1453.940782][T27335] netlink: 152 bytes leftover after parsing attributes in process `syz.0.6605'. [ 1453.961738][T27335] netlink: 6 bytes leftover after parsing attributes in process `syz.0.6605'. [ 1454.275057][T27343] bridge0: port 3(dummy0) entered disabled state [ 1454.313683][T27343] dummy0: left allmulticast mode [ 1454.325015][T27343] dummy0: left promiscuous mode [ 1454.335682][T27343] bridge0: port 3(dummy0) entered disabled state [ 1454.358526][T27343] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1454.713752][T12707] Bluetooth: hci2: unexpected event 0x07 length: 151 < 255 [ 1454.949122][T12707] Bluetooth: hci4: unexpected event 0x08 length: 151 > 4 [ 1455.749304][T27382] __nla_validate_parse: 5 callbacks suppressed [ 1455.749341][T27382] netlink: 148 bytes leftover after parsing attributes in process `syz.0.6621'. [ 1455.816270][T27382] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6621'. [ 1455.947538][T27387] validate_nla: 15 callbacks suppressed [ 1455.947556][T27387] netlink: 'syz.2.6623': attribute type 21 has an invalid length. [ 1455.973979][T27387] netlink: 164 bytes leftover after parsing attributes in process `syz.2.6623'. [ 1455.988851][T12707] Bluetooth: hci0: unexpected event 0x07 length: 151 < 255 [ 1456.194249][T12707] Bluetooth: hci4: unexpected event 0x08 length: 151 > 4 [ 1456.417341][T27406] netlink: 'syz.2.6632': attribute type 25 has an invalid length. [ 1456.469278][T27406] netlink: 'syz.2.6632': attribute type 28 has an invalid length. [ 1456.718689][T27412] netlink: 148 bytes leftover after parsing attributes in process `syz.0.6633'. [ 1456.765016][T27412] netlink: 'syz.0.6633': attribute type 10 has an invalid length. [ 1456.779088][T27412] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6633'. [ 1456.891141][T12707] Bluetooth: hci0: unexpected event 0x07 length: 151 < 255 [ 1457.062293][T27427] netlink: 'syz.0.6639': attribute type 9 has an invalid length. [ 1457.097274][T27427] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.6639'. [ 1457.929111][T27433] bridge0: port 3(dummy0) entered disabled state [ 1458.097092][T27437] netlink: 'syz.0.6642': attribute type 21 has an invalid length. [ 1458.136333][T27437] netlink: 'syz.0.6642': attribute type 3 has an invalid length. [ 1458.161620][T27437] netlink: 144 bytes leftover after parsing attributes in process `syz.0.6642'. [ 1458.199182][T27441] netlink: 'syz.3.6643': attribute type 25 has an invalid length. [ 1458.220841][T27441] netlink: 'syz.3.6643': attribute type 28 has an invalid length. [ 1458.395403][T12707] Bluetooth: hci5: unexpected event 0x07 length: 151 < 255 [ 1458.447962][T27448] netlink: 148 bytes leftover after parsing attributes in process `syz.0.6647'. [ 1458.481827][T27452] netlink: 'syz.0.6647': attribute type 10 has an invalid length. [ 1458.490040][T27452] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6647'. [ 1458.939274][T27470] rxe_eth0 speed is unknown, defaulting to 1000 [ 1459.674889][T12707] Bluetooth: hci4: unexpected event 0x07 length: 151 < 255 [ 1460.264025][T27494] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6659'. [ 1462.147961][T27533] bridge0: port 3(dummy0) entered disabled state [ 1462.195915][T27538] rxe_eth0 speed is unknown, defaulting to 1000 [ 1462.398468][T12707] Bluetooth: hci2: unexpected event 0x08 length: 151 > 4 [ 1462.502281][T27548] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6675'. [ 1462.605157][T27550] netlink: 148 bytes leftover after parsing attributes in process `syz.0.6676'. [ 1462.630970][T27550] validate_nla: 5 callbacks suppressed [ 1462.631006][T27550] netlink: 'syz.0.6676': attribute type 10 has an invalid length. [ 1462.670154][T27550] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6676'. [ 1462.719237][T27550] bridge0: port 3(dummy0) entered blocking state [ 1462.728899][T27550] bridge0: port 3(dummy0) entered forwarding state [ 1463.483168][T27564] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1463.490603][T27564] IPv6: NLM_F_CREATE should be set when creating new route [ 1463.497902][T27564] IPv6: NLM_F_CREATE should be set when creating new route [ 1463.505247][T27564] IPv6: NLM_F_CREATE should be set when creating new route [ 1463.623048][T27566] netlink: 'syz.2.6680': attribute type 9 has an invalid length. [ 1463.652965][T27566] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.6680'. [ 1464.443065][T27576] netlink: 'syz.3.6683': attribute type 21 has an invalid length. [ 1464.486619][T27576] netlink: 156 bytes leftover after parsing attributes in process `syz.3.6683'. [ 1464.519039][T12707] Bluetooth: hci2: unexpected event 0x08 length: 151 > 4 [ 1464.757142][T27581] syzkaller0: entered promiscuous mode [ 1464.783978][T27581] syzkaller0: entered allmulticast mode [ 1464.792837][T27583] netlink: 'syz.4.6685': attribute type 2 has an invalid length. [ 1464.803424][T27583] netlink: 'syz.4.6685': attribute type 8 has an invalid length. [ 1464.820113][T27583] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6685'. [ 1464.845394][T27588] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6685'. [ 1464.902697][T27584] netlink: 148 bytes leftover after parsing attributes in process `syz.2.6687'. [ 1464.929875][T27589] netlink: 'syz.2.6687': attribute type 10 has an invalid length. [ 1464.944130][T27589] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6687'. [ 1464.954534][T27589] dummy0: entered promiscuous mode [ 1464.959759][T27589] dummy0: entered allmulticast mode [ 1464.999720][T27589] bond0: (slave dummy0): Releasing backup interface [ 1465.170474][T27589] bridge0: port 3(dummy0) entered blocking state [ 1465.177147][T27589] bridge0: port 3(dummy0) entered disabled state [ 1467.431449][T12707] Bluetooth: hci2: unexpected event 0x08 length: 151 > 4 [ 1468.516253][T27639] netlink: 148 bytes leftover after parsing attributes in process `syz.2.6701'. [ 1468.571242][T27643] netlink: 'syz.4.6702': attribute type 27 has an invalid length. [ 1468.614121][T27643] netlink: 'syz.4.6702': attribute type 25 has an invalid length. [ 1468.628076][T27639] netlink: 'syz.2.6701': attribute type 10 has an invalid length. [ 1468.658033][T27639] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6701'. [ 1468.693423][T27639] bridge0: port 3(dummy0) entered blocking state [ 1468.700877][T27639] bridge0: port 3(dummy0) entered forwarding state [ 1468.729615][T27634] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6699'. [ 1468.917550][T12707] Bluetooth: hci2: unexpected event 0x08 length: 151 > 4 [ 1470.028442][T27665] syzkaller0: entered promiscuous mode [ 1470.090781][T27665] syzkaller0: entered allmulticast mode [ 1471.603108][T12707] Bluetooth: hci5: unexpected event 0x08 length: 151 > 4 [ 1472.845674][T27673] netlink: 148 bytes leftover after parsing attributes in process `syz.2.6713'. [ 1472.864416][T27676] netlink: 'syz.2.6713': attribute type 10 has an invalid length. [ 1472.873554][T27676] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6713'. [ 1472.890051][T27679] netlink: 148 bytes leftover after parsing attributes in process `syz.0.6715'. [ 1472.913032][T27682] netlink: 'syz.0.6715': attribute type 10 has an invalid length. [ 1472.926201][T27682] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6715'. [ 1473.514233][T12707] Bluetooth: hci5: unexpected event 0x08 length: 151 > 4 [ 1473.859063][T27714] sit0: entered allmulticast mode [ 1473.910257][T27717] sit0: entered promiscuous mode [ 1474.011391][T27719] netlink: 148 bytes leftover after parsing attributes in process `syz.0.6729'. [ 1474.039399][T27721] netlink: 'syz.0.6729': attribute type 10 has an invalid length. [ 1474.049784][T27721] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6729'. [ 1474.415110][T27727] syzkaller0: entered promiscuous mode [ 1474.420925][T27727] syzkaller0: entered allmulticast mode [ 1474.434096][T27734] netlink: 'syz.3.6731': attribute type 10 has an invalid length. [ 1474.450567][T27734] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6731'. [ 1474.475250][T27734] bridge0: port 3(dummy0) entered blocking state [ 1474.481894][T27734] bridge0: port 3(dummy0) entered forwarding state [ 1474.498080][T27732] netlink: 148 bytes leftover after parsing attributes in process `syz.3.6731'. [ 1475.103187][T12707] Bluetooth: hci0: unexpected event 0x08 length: 151 > 4 [ 1476.875970][T27744] netlink: 'syz.0.6735': attribute type 10 has an invalid length. [ 1476.891476][T27744] netlink: 2 bytes leftover after parsing attributes in process `syz.0.6735'. [ 1476.901402][T27744] hsr0: entered promiscuous mode [ 1476.906761][T27744] bridge0: port 4(hsr0) entered blocking state [ 1476.914176][T27744] bridge0: port 4(hsr0) entered disabled state [ 1476.925300][T27744] hsr0: entered allmulticast mode [ 1476.930764][T27744] hsr_slave_0: entered allmulticast mode [ 1476.936468][T27744] hsr_slave_1: entered allmulticast mode [ 1476.957546][T27744] bridge0: port 4(hsr0) entered blocking state [ 1476.963992][T27744] bridge0: port 4(hsr0) entered forwarding state [ 1476.981734][T27753] netlink: 'syz.3.6739': attribute type 10 has an invalid length. [ 1477.223063][T27759] netlink: 148 bytes leftover after parsing attributes in process `syz.4.6741'. [ 1477.316083][T27759] netlink: 'syz.4.6741': attribute type 10 has an invalid length. [ 1477.350388][T27759] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6741'. [ 1477.596770][T27767] sit0: entered allmulticast mode [ 1477.617316][T27769] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.6744'. [ 1477.634950][T27770] sit0: entered promiscuous mode [ 1477.855896][T12707] Bluetooth: hci5: unexpected event 0x08 length: 151 > 4 [ 1477.907391][T27777] delete_channel: no stack [ 1478.099183][T27784] netlink: 'syz.4.6749': attribute type 29 has an invalid length. [ 1478.126088][T27784] netlink: 'syz.4.6749': attribute type 29 has an invalid length. [ 1478.172231][T27790] netlink: 'syz.4.6749': attribute type 29 has an invalid length. [ 1478.199348][T27782] rxe_eth0 speed is unknown, defaulting to 1000 [ 1478.230979][T27784] netlink: 'syz.4.6749': attribute type 29 has an invalid length. [ 1478.787675][T27799] netlink: 148 bytes leftover after parsing attributes in process `syz.3.6753'. [ 1478.837135][T27799] netlink: 'syz.3.6753': attribute type 10 has an invalid length. [ 1478.846228][T27799] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6753'. [ 1478.991246][T27806] tun0: tun_chr_ioctl cmd 1074025681 [ 1478.996980][T27806] tun0: tun_chr_ioctl cmd 2147767507 [ 1479.348302][T12707] Bluetooth: hci0: unexpected event 0x08 length: 151 > 4 [ 1479.365284][T27818] netlink: 72 bytes leftover after parsing attributes in process `syz.0.6758'. [ 1479.958345][T27830] netlink: 148 bytes leftover after parsing attributes in process `syz.0.6763'. [ 1480.075651][T27830] netlink: 'syz.0.6763': attribute type 10 has an invalid length. [ 1480.111805][T27830] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6763'. [ 1480.188424][T27832] sit0: entered allmulticast mode [ 1480.236699][T27829] sit0: entered promiscuous mode [ 1480.574634][T27838] netlink: 'syz.2.6766': attribute type 25 has an invalid length. [ 1480.585100][T27838] netlink: 'syz.2.6766': attribute type 28 has an invalid length. [ 1480.709122][T12707] Bluetooth: hci2: unexpected event 0x08 length: 151 > 4 [ 1480.873486][T27851] netlink: 'syz.4.6770': attribute type 21 has an invalid length. [ 1480.893933][T27851] IPv6: NLM_F_CREATE should be specified when creating new route [ 1481.082896][T27864] C: renamed from team_slave_0 (while UP) [ 1481.130881][T27864] netlink: 'syz.4.6770': attribute type 3 has an invalid length. [ 1481.157651][T27864] netlink: 152 bytes leftover after parsing attributes in process `syz.4.6770'. [ 1481.697071][T24004] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1481.713951][T24004] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1481.722587][T24004] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1481.750590][T24004] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1481.765300][T24004] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1481.780617][T24004] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1481.965255][T13524] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1482.006677][T27874] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6777'. [ 1482.048785][T27869] rxe_eth0 speed is unknown, defaulting to 1000 [ 1482.154700][T13524] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1482.293786][T13524] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1482.327741][T27880] netlink: 'syz.2.6779': attribute type 25 has an invalid length. [ 1482.340744][T27880] netlink: 'syz.2.6779': attribute type 28 has an invalid length. [ 1482.426081][T13524] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1482.502293][T12707] Bluetooth: hci5: unexpected event 0x07 length: 151 < 255 [ 1482.819335][T13524] tipc: Left network mode [ 1483.096859][T27902] syzkaller0: entered promiscuous mode [ 1483.130487][T27902] syzkaller0: entered allmulticast mode [ 1483.200703][T27869] chnl_net:caif_netlink_parms(): no params data found [ 1483.840533][T12707] Bluetooth: hci3: command tx timeout [ 1484.724418][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.731328][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1485.923300][T12707] Bluetooth: hci3: command tx timeout [ 1486.066837][T27914] netlink: 'syz.2.6786': attribute type 10 has an invalid length. [ 1486.078097][T27914] netlink: 2 bytes leftover after parsing attributes in process `syz.2.6786'. [ 1486.089747][T27914] bridge0: port 4(hsr0) entered blocking state [ 1486.096321][T27914] bridge0: port 4(hsr0) entered disabled state [ 1486.103034][T27914] hsr0: entered allmulticast mode [ 1486.108120][T27914] hsr_slave_0: entered allmulticast mode [ 1486.114227][T27914] hsr_slave_1: entered allmulticast mode [ 1486.123475][T27914] bridge0: port 4(hsr0) entered blocking state [ 1486.130027][T27914] bridge0: port 4(hsr0) entered forwarding state [ 1486.179388][T27933] netlink: 'syz.4.6790': attribute type 25 has an invalid length. [ 1486.201057][T27933] netlink: 'syz.4.6790': attribute type 28 has an invalid length. [ 1486.477710][T12707] Bluetooth: hci5: unexpected event 0x07 length: 151 < 255 [ 1486.647171][T27869] bridge0: port 1(bridge_slave_0) entered blocking state [ 1486.666322][T27869] bridge0: port 1(bridge_slave_0) entered disabled state [ 1486.674168][T27869] bridge_slave_0: entered allmulticast mode [ 1486.685948][T27869] bridge_slave_0: entered promiscuous mode [ 1486.702253][T27869] bridge0: port 2(bridge_slave_1) entered blocking state [ 1486.710267][T27869] bridge0: port 2(bridge_slave_1) entered disabled state [ 1486.717613][T27869] bridge_slave_1: entered allmulticast mode [ 1486.738613][T27869] bridge_slave_1: entered promiscuous mode [ 1487.074130][T27869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1487.144251][T27970] netlink: 'syz.4.6800': attribute type 25 has an invalid length. [ 1487.158471][T27970] netlink: 'syz.4.6800': attribute type 28 has an invalid length. [ 1487.243119][T27869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1487.355913][T27869] team0: Port device team_slave_0 added [ 1487.397285][T27869] team0: Port device team_slave_1 added [ 1487.551870][T27869] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1487.558891][T27869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1487.620304][T27869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1487.678485][T27869] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1487.706306][T27869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1487.775092][T27869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1487.947471][T12707] Bluetooth: hci5: unexpected event 0x07 length: 151 < 255 [ 1488.000474][T12707] Bluetooth: hci3: command tx timeout [ 1488.263137][T27998] netlink: 'syz.4.6807': attribute type 2 has an invalid length. [ 1488.283236][T27998] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.6807'. [ 1488.407763][T27869] hsr_slave_0: entered promiscuous mode [ 1488.436143][T27869] hsr_slave_1: entered promiscuous mode [ 1488.462202][T27869] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1488.472293][T27869] Cannot create hsr debugfs directory [ 1488.705169][T28007] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6808'. [ 1488.721051][T28007] netlink: 6 bytes leftover after parsing attributes in process `syz.2.6808'. [ 1488.731823][T28006] netlink: 'syz.0.6809': attribute type 25 has an invalid length. [ 1488.760116][T28006] netlink: 'syz.0.6809': attribute type 28 has an invalid length. [ 1489.149398][T13524] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1489.192241][T13524] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1489.231421][T13524] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1489.238922][T13524] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1489.268177][T13524] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi [ 1489.286196][T13524] batman_adv: batadv0: Removing interface: veth1_virt_wifi [ 1489.305788][T13524] bridge0: port 3(dummy0) entered disabled state [ 1489.317128][T13524] team0: left allmulticast mode [ 1489.328296][T13524] team_slave_0: left allmulticast mode [ 1489.349270][T13524] team_slave_1: left allmulticast mode [ 1489.367549][T13524] geneve1: left allmulticast mode [ 1489.380360][T13524] team0: left promiscuous mode [ 1489.385217][T13524] team_slave_0: left promiscuous mode [ 1489.407578][T13524] team_slave_1: left promiscuous mode [ 1489.415006][T13524] geneve1: left promiscuous mode [ 1489.425197][T13524] bridge0: port 4(team0) entered disabled state [ 1489.438674][T13524] bridge_slave_1: left allmulticast mode [ 1489.448117][T13524] bridge_slave_1: left promiscuous mode [ 1489.454713][T13524] bridge0: port 2(bridge_slave_1) entered disabled state [ 1489.477783][T13524] bridge_slave_0: left promiscuous mode [ 1489.483904][T12707] Bluetooth: hci5: unexpected event 0x07 length: 151 < 255 [ 1489.491861][T13524] bridge0: port 1(bridge_slave_0) entered disabled state [ 1489.552556][T13524] veth1_vlan: left promiscuous mode [ 1489.879049][T13524] team0 (unregistering): Port device geneve1 removed [ 1490.081224][T12707] Bluetooth: hci3: command tx timeout [ 1490.153169][T28037] FAULT_INJECTION: forcing a failure. [ 1490.153169][T28037] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1490.193857][T28037] CPU: 0 PID: 28037 Comm: syz.4.6816 Not tainted syzkaller #0 [ 1490.201435][T28037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1490.211787][T28037] Call Trace: [ 1490.215134][T28037] [ 1490.218126][T28037] dump_stack_lvl+0x18c/0x250 [ 1490.222894][T28037] ? show_regs_print_info+0x20/0x20 [ 1490.228174][T28037] ? load_image+0x420/0x420 [ 1490.232766][T28037] ? __lock_acquire+0x7eb0/0x7eb0 [ 1490.237872][T28037] ? __lock_acquire+0x7eb0/0x7eb0 [ 1490.242993][T28037] should_fail_ex+0x394/0x4c0 [ 1490.247939][T28037] _copy_from_user+0x2f/0xe0 [ 1490.252615][T28037] perf_copy_attr+0x16a/0x820 [ 1490.257403][T28037] __se_sys_perf_event_open+0x11b/0x1d40 [ 1490.263133][T28037] ? mutex_unlock+0x10/0x10 [ 1490.267711][T28037] ? __fget_files+0x3fc/0x460 [ 1490.272478][T28037] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 1490.278230][T28037] ? lock_chain_count+0x20/0x20 [ 1490.283185][T28037] ? lockdep_hardirqs_on+0x98/0x150 [ 1490.288456][T28037] ? __x64_sys_perf_event_open+0x20/0xc0 [ 1490.294183][T28037] do_syscall_64+0x55/0xb0 [ 1490.298674][T28037] ? clear_bhb_loop+0x40/0x90 [ 1490.303427][T28037] ? clear_bhb_loop+0x40/0x90 [ 1490.308185][T28037] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1490.314152][T28037] RIP: 0033:0x7fa284d9f559 [ 1490.318664][T28037] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1490.338355][T28037] RSP: 002b:00007fa285d46028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1490.346846][T28037] RAX: ffffffffffffffda RBX: 00007fa285025fa0 RCX: 00007fa284d9f559 [ 1490.354982][T28037] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 1490.363032][T28037] RBP: 00007fa285d46090 R08: 0000000000000000 R09: 0000000000000000 [ 1490.371075][T28037] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 1490.379122][T28037] R13: 00007fa285026038 R14: 00007fa285025fa0 R15: 00007ffdebbde698 [ 1490.387220][T28037] [ 1490.668030][T13524] team0 (unregistering): Port device team_slave_1 removed [ 1490.722944][T13524] team0 (unregistering): Port device team_slave_0 removed [ 1490.776042][T13524] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1490.834660][T13524] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1491.244222][T13524] bond0 (unregistering): Released all slaves [ 1491.384195][T28040] netlink: 152 bytes leftover after parsing attributes in process `syz.4.6817'. [ 1491.412138][T28040] netlink: 6 bytes leftover after parsing attributes in process `syz.4.6817'. [ 1491.618648][T28042] netlink: 'syz.0.6818': attribute type 25 has an invalid length. [ 1491.649336][T28042] netlink: 'syz.0.6818': attribute type 28 has an invalid length. [ 1491.867722][T28047] netlink: 148 bytes leftover after parsing attributes in process `syz.2.6819'. [ 1491.879801][T28046] netlink: 'syz.2.6819': attribute type 10 has an invalid length. [ 1491.888224][T28046] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6819'. [ 1492.305237][T12707] Bluetooth: hci4: unexpected event 0x07 length: 151 < 255 [ 1492.966635][T27869] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1493.008847][T28064] rxe_eth0 speed is unknown, defaulting to 1000 [ 1493.020995][T27869] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1493.054737][T27869] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1493.122234][T27869] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1493.496747][T28076] netlink: 152 bytes leftover after parsing attributes in process `syz.4.6827'. [ 1493.588153][T28076] netlink: 6 bytes leftover after parsing attributes in process `syz.4.6827'. [ 1493.670760][T27869] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1493.754856][T27869] 8021q: adding VLAN 0 to HW filter on device team0 [ 1493.834642][T13537] bridge0: port 1(bridge_slave_0) entered blocking state [ 1493.841899][T13537] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1493.877606][T13537] bridge0: port 2(bridge_slave_1) entered blocking state [ 1493.884917][T13537] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1494.018443][T28083] netlink: 'syz.4.6828': attribute type 25 has an invalid length. [ 1494.056417][T28083] netlink: 'syz.4.6828': attribute type 28 has an invalid length. [ 1494.745205][T27869] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1494.889211][T27869] veth0_vlan: entered promiscuous mode [ 1494.929912][T27869] veth1_vlan: entered promiscuous mode [ 1495.064710][T27869] veth0_macvtap: entered promiscuous mode [ 1495.092916][T27869] veth1_macvtap: entered promiscuous mode [ 1495.146633][T12707] Bluetooth: hci2: unexpected event 0x07 length: 151 < 255 [ 1495.174041][T27869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1495.186448][T27869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1495.197490][T27869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1495.220022][T27869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1495.230584][T27869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1495.242371][T27869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1495.252636][T27869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1495.263523][T27869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1495.275944][T27869] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1495.302663][T27869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1495.326561][T27869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1495.337358][T27869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1495.348407][T27869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1495.358895][T27869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1495.369613][T27869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1495.381208][T27869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1495.392763][T27869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1495.406099][T27869] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1495.445553][T27869] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1495.480021][T27869] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1495.504421][T27869] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1495.544992][T27869] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1495.778969][T28117] netlink: 148 bytes leftover after parsing attributes in process `syz.4.6833'. [ 1495.833705][T28117] netlink: 'syz.4.6833': attribute type 10 has an invalid length. [ 1495.847577][T28117] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6833'. [ 1495.970857][T13537] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1495.978782][T13537] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1496.074711][T28126] netlink: 152 bytes leftover after parsing attributes in process `syz.0.6835'. [ 1496.098564][T28126] netlink: 6 bytes leftover after parsing attributes in process `syz.0.6835'. [ 1496.148025][T27863] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1496.168091][T27863] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1496.211193][T12707] Bluetooth: hci4: unexpected event 0x08 length: 151 > 4 [ 1496.354874][T28134] netlink: 'syz.4.6838': attribute type 2 has an invalid length. [ 1496.404537][T28134] netlink: 'syz.4.6838': attribute type 8 has an invalid length. [ 1496.437345][T28134] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6838'. [ 1496.470678][T28140] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6838'. [ 1496.537446][T12707] Bluetooth: hci4: unexpected event 0x07 length: 151 < 255 [ 1496.801755][T28155] netlink: 'syz.4.6841': attribute type 21 has an invalid length. [ 1496.975435][T28161] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6844'. [ 1497.051721][T28161] netlink: 6 bytes leftover after parsing attributes in process `syz.2.6844'. [ 1497.352189][T12707] Bluetooth: hci4: unexpected event 0x08 length: 151 > 4 [ 1497.394807][T28175] netlink: 148 bytes leftover after parsing attributes in process `syz.0.6845'. [ 1497.447172][T12707] Bluetooth: hci3: unexpected event 0x07 length: 151 < 255 [ 1497.481349][T28180] netlink: 'syz.0.6845': attribute type 10 has an invalid length. [ 1497.489262][T28180] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6845'. [ 1497.700576][T28188] netlink: 'syz.3.6851': attribute type 25 has an invalid length. [ 1497.714764][T28188] netlink: 'syz.3.6851': attribute type 9 has an invalid length. [ 1497.723753][T28188] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6851'. [ 1497.995353][T28199] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6855'. [ 1498.030344][T28199] netlink: 6 bytes leftover after parsing attributes in process `syz.3.6855'. [ 1498.388256][T12707] Bluetooth: hci3: unexpected event 0x08 length: 151 > 4 [ 1498.561212][T12707] Bluetooth: hci4: unexpected event 0x07 length: 151 < 255 [ 1500.804242][T28235] bridge0: port 3(dummy0) entered disabled state [ 1501.358417][T28268] tap0: tun_chr_ioctl cmd 1074025677 [ 1501.385900][T28268] tap0: linktype set to 773 [ 1501.871713][T28270] netlink: 152 bytes leftover after parsing attributes in process `syz.0.6866'. [ 1501.890218][T28270] netlink: 6 bytes leftover after parsing attributes in process `syz.0.6866'. [ 1502.187610][T12707] Bluetooth: hci3: unexpected event 0x08 length: 151 > 4 [ 1502.227106][T28278] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.6870'. [ 1502.250358][T12707] Bluetooth: hci4: unexpected event 0x07 length: 151 < 255 [ 1502.462249][T28283] netlink: 'syz.4.6870': attribute type 10 has an invalid length. [ 1502.531325][T28283] netlink: 55 bytes leftover after parsing attributes in process `syz.4.6870'. [ 1503.191194][T28297] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6879'. [ 1503.219389][T28297] netlink: 6 bytes leftover after parsing attributes in process `syz.2.6879'. [ 1503.273830][T28295] netlink: 'syz.0.6877': attribute type 10 has an invalid length. [ 1503.300677][T28295] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6877'. [ 1503.329770][T28295] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 1503.499621][T28305] netlink: 148 bytes leftover after parsing attributes in process `syz.2.6881'. [ 1503.568626][T28305] netlink: 'syz.2.6881': attribute type 10 has an invalid length. [ 1503.581927][T12707] Bluetooth: hci5: unexpected event 0x07 length: 151 < 255 [ 1503.590655][T28305] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6881'. [ 1503.607864][T12707] Bluetooth: hci2: unexpected event 0x08 length: 151 > 4 [ 1503.971989][T28318] netlink: 168 bytes leftover after parsing attributes in process `syz.2.6887'. [ 1504.244383][T28326] nbd: must specify a device to reconfigure [ 1504.540717][T12707] Bluetooth: hci5: unexpected event 0x07 length: 151 < 255 [ 1504.999702][T28341] netlink: 'syz.4.6895': attribute type 10 has an invalid length. [ 1505.581714][T12707] Bluetooth: hci2: unexpected event 0x07 length: 151 < 255 [ 1505.799885][T28369] netlink: 'syz.0.6906': attribute type 10 has an invalid length. [ 1505.831795][T12707] Bluetooth: hci3: unexpected event 0x08 length: 151 > 4 [ 1505.844296][T28369] bridge0: port 3(dummy0) entered blocking state [ 1505.858871][T28369] bridge0: port 3(dummy0) entered forwarding state [ 1506.746979][T12707] Bluetooth: hci4: unexpected event 0x07 length: 151 < 255 [ 1507.019780][T12707] Bluetooth: hci2: unexpected event 0x08 length: 151 > 4 [ 1508.427195][T28434] __nla_validate_parse: 13 callbacks suppressed [ 1508.427215][T28434] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.6931'. [ 1508.474988][T12707] Bluetooth: hci3: unexpected event 0x08 length: 151 > 4 [ 1508.549860][T28438] netlink: 152 bytes leftover after parsing attributes in process `syz.4.6933'. [ 1508.588399][T28438] netlink: 6 bytes leftover after parsing attributes in process `syz.4.6933'. [ 1508.628996][T28439] netlink: 'syz.2.6932': attribute type 21 has an invalid length. [ 1508.651610][T28439] netlink: 'syz.2.6932': attribute type 6 has an invalid length. [ 1508.720688][T28442] netlink: 'syz.0.6931': attribute type 10 has an invalid length. [ 1508.779028][T28442] netlink: 55 bytes leftover after parsing attributes in process `syz.0.6931'. [ 1509.811609][T12707] Bluetooth: hci2: unexpected event 0x08 length: 151 > 4 [ 1509.979883][T28473] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6944'. [ 1510.034209][T28473] netlink: 6 bytes leftover after parsing attributes in process `syz.3.6944'. [ 1510.138438][T28476] netlink: 148 bytes leftover after parsing attributes in process `syz.0.6945'. [ 1510.185988][T28476] netlink: 'syz.0.6945': attribute type 10 has an invalid length. [ 1510.216095][T28476] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6945'. [ 1510.237056][T28478] netlink: 148 bytes leftover after parsing attributes in process `syz.3.6946'. [ 1510.296471][T28478] netlink: 'syz.3.6946': attribute type 10 has an invalid length. [ 1510.315974][T28478] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6946'. [ 1510.342021][T28478] dummy0: entered promiscuous mode [ 1510.351036][T28478] dummy0: entered allmulticast mode [ 1510.382565][T28478] bridge0: port 3(dummy0) entered blocking state [ 1510.421666][T28478] bridge0: port 3(dummy0) entered disabled state [ 1510.513740][T28478] bridge0: port 3(dummy0) entered blocking state [ 1510.520991][T28478] bridge0: port 3(dummy0) entered forwarding state [ 1510.723180][T28488] netlink: 'syz.4.6957': attribute type 10 has an invalid length. [ 1512.273705][T28515] bridge0: port 3(dummy0) entered disabled state [ 1512.310391][T28514] netlink: 'syz.2.6961': attribute type 10 has an invalid length. [ 1512.763669][T28524] netlink: 'syz.2.6964': attribute type 10 has an invalid length. [ 1513.277087][T28531] syzkaller0: entered promiscuous mode [ 1513.283175][T28531] syzkaller0: entered allmulticast mode [ 1513.514314][T28544] __nla_validate_parse: 10 callbacks suppressed [ 1513.514334][T28544] netlink: 144848 bytes leftover after parsing attributes in process `syz.0.6974'. [ 1513.619870][T28544] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8 [ 1516.468422][T28557] netlink: 148 bytes leftover after parsing attributes in process `syz.0.6979'. [ 1516.478044][T28562] netlink: 'syz.0.6979': attribute type 10 has an invalid length. [ 1516.498325][T28562] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6979'. [ 1516.515070][T28562] bridge0: port 3(dummy0) entered blocking state [ 1516.521754][T28562] bridge0: port 3(dummy0) entered forwarding state [ 1516.535704][T28564] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6981'. [ 1516.557356][T28564] netlink: 6 bytes leftover after parsing attributes in process `syz.3.6981'. [ 1516.779610][T28573] netlink: 'syz.4.6985': attribute type 1 has an invalid length. [ 1516.891081][T28576] netlink: 'syz.0.6986': attribute type 21 has an invalid length. [ 1516.921810][T28576] netlink: 156 bytes leftover after parsing attributes in process `syz.0.6986'. [ 1517.114661][T28582] netlink: 'syz.3.6988': attribute type 1 has an invalid length. [ 1517.146816][T28582] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.6988'. [ 1517.196612][T28582] netlink: 'syz.3.6988': attribute type 21 has an invalid length. [ 1517.397761][T28590] netlink: 148 bytes leftover after parsing attributes in process `syz.4.6991'. [ 1517.435150][T28592] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6992'. [ 1517.459457][T28592] netlink: 6 bytes leftover after parsing attributes in process `syz.2.6992'. [ 1517.469195][T28590] netlink: 'syz.4.6991': attribute type 10 has an invalid length. [ 1517.531843][T24004] Bluetooth: hci5: command 0x0406 tx timeout [ 1518.140536][T12707] Bluetooth: hci5: unexpected event 0x07 length: 151 < 255 [ 1518.397839][T28627] netlink: 'syz.3.7005': attribute type 9 has an invalid length. [ 1518.468277][T28626] netlink: 'syz.4.7004': attribute type 10 has an invalid length. [ 1518.849016][T28638] __nla_validate_parse: 7 callbacks suppressed [ 1518.849036][T28638] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7010'. [ 1519.023196][T12707] Bluetooth: hci5: unexpected event 0x07 length: 151 < 255 [ 1524.058490][T28649] netlink: 152 bytes leftover after parsing attributes in process `syz.3.7014'. [ 1524.068379][T28649] netlink: 6 bytes leftover after parsing attributes in process `syz.3.7014'. [ 1524.273972][T28654] netlink: 148 bytes leftover after parsing attributes in process `syz.4.7017'. [ 1524.350221][T28658] netlink: 'syz.2.7019': attribute type 10 has an invalid length. [ 1524.379198][T28658] bridge0: port 4(hsr0) entered disabled state [ 1524.385806][T28658] bridge0: port 3(dummy0) entered disabled state [ 1524.392494][T28658] bridge0: port 2(bridge_slave_1) entered disabled state [ 1524.400167][T28658] bridge0: port 1(bridge_slave_0) entered disabled state [ 1524.434867][T28658] team0: Port device bridge0 removed [ 1524.444898][T28658] bond0: (slave bridge0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1524.459631][T28658] bridge0: port 4(hsr0) entered blocking state [ 1524.466064][T28658] bridge0: port 4(hsr0) entered forwarding state [ 1524.472880][T28658] bridge0: port 3(dummy0) entered blocking state [ 1524.479443][T28658] bridge0: port 3(dummy0) entered forwarding state [ 1524.486353][T28658] bridge0: port 2(bridge_slave_1) entered blocking state [ 1524.493668][T28658] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1524.501262][T28658] bridge0: port 1(bridge_slave_0) entered blocking state [ 1524.508543][T28658] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1524.523873][T28658] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1524.533420][T28654] netlink: 'syz.4.7017': attribute type 10 has an invalid length. [ 1524.542331][T12707] Bluetooth: hci2: unexpected event 0x07 length: 151 < 255 [ 1524.570609][T28654] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7017'. [ 1525.619257][T28689] netlink: 152 bytes leftover after parsing attributes in process `syz.3.7027'. [ 1525.650207][T28689] netlink: 6 bytes leftover after parsing attributes in process `syz.3.7027'. [ 1525.937525][T28697] FAULT_INJECTION: forcing a failure. [ 1525.937525][T28697] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1525.980788][T28697] CPU: 0 PID: 28697 Comm: syz.3.7029 Not tainted syzkaller #0 [ 1525.988345][T28697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1525.998460][T28697] Call Trace: [ 1526.001803][T28697] [ 1526.004798][T28697] dump_stack_lvl+0x18c/0x250 [ 1526.009532][T28697] ? show_regs_print_info+0x20/0x20 [ 1526.014789][T28697] ? load_image+0x420/0x420 [ 1526.019335][T28697] ? __might_fault+0xaa/0x120 [ 1526.024049][T28697] ? __lock_acquire+0x7eb0/0x7eb0 [ 1526.029120][T28697] should_fail_ex+0x394/0x4c0 [ 1526.033849][T28697] _copy_from_iter+0x1cd/0x1290 [ 1526.038742][T28697] ? rcu_is_watching+0x15/0xb0 [ 1526.043574][T28697] ? copyout_mc+0x70/0x70 [ 1526.047958][T28697] ? __sk_mem_raise_allocated+0x97b/0x11e0 [ 1526.053812][T28697] ? page_copy_sane+0x16a/0x270 [ 1526.058720][T28697] copy_page_from_iter+0x7b/0x100 [ 1526.063803][T28697] mptcp_sendmsg+0x9b7/0x1670 [ 1526.068548][T28697] ? mptcp_shutdown+0x160/0x160 [ 1526.073437][T28697] ? inet_send_prepare+0x5b/0x250 [ 1526.078498][T28697] ? inet6_sendmsg+0x5f/0xd0 [ 1526.083133][T28697] sock_write_iter+0x2dc/0x420 [ 1526.087937][T28697] ? sock_read_iter+0x3f0/0x3f0 [ 1526.092849][T28697] ? common_file_perm+0x198/0x1f0 [ 1526.097918][T28697] vfs_write+0x474/0x9a0 [ 1526.102211][T28697] ? file_end_write+0x250/0x250 [ 1526.107131][T28697] ? __fget_files+0x3fc/0x460 [ 1526.111863][T28697] ? __fdget_pos+0x1d8/0x330 [ 1526.116501][T28697] ? ksys_write+0x74/0x260 [ 1526.120969][T28697] ksys_write+0x151/0x260 [ 1526.125340][T28697] ? __ia32_sys_read+0x90/0x90 [ 1526.130181][T28697] ? lockdep_hardirqs_on+0x98/0x150 [ 1526.135428][T28697] do_syscall_64+0x55/0xb0 [ 1526.139893][T28697] ? clear_bhb_loop+0x40/0x90 [ 1526.144613][T28697] ? clear_bhb_loop+0x40/0x90 [ 1526.149349][T28697] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1526.155318][T28697] RIP: 0033:0x7f1a96f9f559 [ 1526.159771][T28697] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1526.179425][T28697] RSP: 002b:00007f1a97e12028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1526.187871][T28697] RAX: ffffffffffffffda RBX: 00007f1a97226090 RCX: 00007f1a96f9f559 [ 1526.195890][T28697] RDX: 000000011ffffce1 RSI: 0000200000000d00 RDI: 0000000000000009 [ 1526.203887][T28697] RBP: 00007f1a97e12090 R08: 0000000000000000 R09: 0000000000000000 [ 1526.211890][T28697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1526.219889][T28697] R13: 00007f1a97226128 R14: 00007f1a97226090 R15: 00007fff1d6c25e8 [ 1526.227916][T28697] [ 1526.253936][T12707] Bluetooth: hci2: unexpected event 0x07 length: 151 < 255 [ 1527.289460][T28712] bridge0: port 3(dummy0) entered disabled state [ 1527.417001][T28720] netlink: 152 bytes leftover after parsing attributes in process `syz.0.7037'. [ 1527.438673][T28720] netlink: 6 bytes leftover after parsing attributes in process `syz.0.7037'. [ 1527.844138][T12707] Bluetooth: hci4: unexpected event 0x07 length: 151 < 255 [ 1544.471384][T24004] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1544.482691][T24004] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1544.491444][T24004] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1544.501431][T24004] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1544.509520][T24004] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1544.519122][T24004] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1544.695696][T28741] rxe_eth0 speed is unknown, defaulting to 1000 [ 1546.089001][T28741] chnl_net:caif_netlink_parms(): no params data found [ 1546.189054][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.200512][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.331442][T12707] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1546.351419][T12707] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1546.361947][T12707] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1546.372121][T12707] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1546.381305][T12707] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1546.393270][T12707] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1546.650547][T24004] Bluetooth: hci0: command tx timeout [ 1548.400462][T28748] rxe_eth0 speed is unknown, defaulting to 1000 [ 1548.411057][T28741] bridge0: port 1(bridge_slave_0) entered blocking state [ 1548.430360][T28741] bridge0: port 1(bridge_slave_0) entered disabled state [ 1548.465619][T28741] bridge_slave_0: entered allmulticast mode [ 1548.480520][T12707] Bluetooth: hci6: command tx timeout [ 1548.511861][T28741] bridge_slave_0: entered promiscuous mode [ 1548.541118][T28741] bridge0: port 2(bridge_slave_1) entered blocking state [ 1548.548345][T28741] bridge0: port 2(bridge_slave_1) entered disabled state [ 1548.621809][T28741] bridge_slave_1: entered allmulticast mode [ 1548.650187][T28741] bridge_slave_1: entered promiscuous mode [ 1548.731307][T12707] Bluetooth: hci0: command tx timeout [ 1548.847973][T28741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1548.895274][T28741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1549.072722][T28741] team0: Port device team_slave_0 added [ 1549.127093][T28741] team0: Port device team_slave_1 added [ 1549.250946][T28741] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1549.270385][T28741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1549.345542][T28741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1549.481805][T12707] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1549.493469][T28761] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1549.501867][T28761] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1549.511047][T28761] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1549.519271][T28761] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 1549.528132][T28761] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1549.621458][T28761] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1549.640308][T28761] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1549.651452][T28761] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1549.660251][T28761] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1549.670919][T28761] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 1549.678497][T28761] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1550.562799][T28761] Bluetooth: hci6: command tx timeout [ 1550.800226][T28761] Bluetooth: hci0: command tx timeout [ 1551.600337][T28761] Bluetooth: hci7: command tx timeout [ 1551.760257][T28761] Bluetooth: hci8: command tx timeout [ 1552.645890][T28761] Bluetooth: hci6: command tx timeout [ 1552.880371][T28761] Bluetooth: hci0: command tx timeout [ 1553.680910][T28761] Bluetooth: hci7: command tx timeout [ 1553.840935][T28761] Bluetooth: hci8: command tx timeout [ 1554.720336][T28761] Bluetooth: hci6: command tx timeout [ 1555.763519][T28761] Bluetooth: hci7: command tx timeout [ 1555.920470][T28761] Bluetooth: hci8: command tx timeout [ 1557.840372][T28761] Bluetooth: hci7: command tx timeout [ 1558.000375][T28761] Bluetooth: hci8: command tx timeout [ 1604.575111][T28761] Bluetooth: hci3: command 0x0406 tx timeout [ 1605.631980][T24004] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1605.647321][T24004] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1605.655995][T24004] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1605.666353][T24004] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1605.680291][T24004] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 1605.689149][T24004] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1606.598479][T28771] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1606.610913][T28771] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1606.619052][T28771] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1606.629012][T28771] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1606.637320][T28771] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 1606.647131][T28771] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1607.610460][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.616898][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1608.802155][T28775] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1608.812809][T28775] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1608.821208][T28775] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1608.832404][T28775] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1608.841374][T28775] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 1608.849064][T28775] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1610.028930][T28778] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1610.050270][T28778] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1610.058967][T28778] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1610.074679][T28778] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1610.084423][T28778] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 1610.092273][T28778] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1632.669921][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 1632.676611][ C0] rcu: 0-....: (10500 ticks this GP) idle=6d5c/1/0x4000000000000000 softirq=141784/141784 fqs=5094 [ 1632.688800][ C0] rcu: hardirqs softirqs csw/system [ 1632.695231][ C0] rcu: number: 1093506 0 0 [ 1632.701656][ C0] rcu: cputime: 19353 33136 63 ==> 52500(ms) [ 1632.709495][ C0] rcu: (t=10502 jiffies g=180129 q=1812 ncpus=2) [ 1632.715961][ C0] CPU: 0 PID: 28730 Comm: syz.3.7042 Not tainted syzkaller #0 [ 1632.723536][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1632.733627][ C0] RIP: 0010:lock_acquire+0x208/0x420 [ 1632.738960][ C0] Code: f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 3c 04 f8 0f 85 f0 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 04 3c 00 00 00 00 43 c7 44 3c 08 00 00 00 00 65 48 8b 04 25 [ 1632.758588][ C0] RSP: 0018:ffffc90000007100 EFLAGS: 00000206 [ 1632.764686][ C0] RAX: 0000000000000001 RBX: 0000000000000001 RCX: 215709a5a4515b00 [ 1632.772673][ C0] RDX: 0000000000000000 RSI: ffffffff8aeae2c0 RDI: ffffffff8b3c5260 [ 1632.780826][ C0] RBP: ffffc90000007208 R08: dffffc0000000000 R09: 1ffffffff24446a0 [ 1632.788808][ C0] R10: dffffc0000000000 R11: fffffbfff24446a1 R12: 1ffff92000000e2c [ 1632.796786][ C0] R13: ffffffff8e7e3520 R14: 0000000000000246 R15: dffffc0000000000 [ 1632.804765][ C0] FS: 00007f1a97e336c0(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000 [ 1632.813702][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1632.820309][ C0] CR2: 0000200000002100 CR3: 00000000692ae000 CR4: 00000000003506f0 [ 1632.828293][ C0] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000008d24 [ 1632.836272][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1632.844250][ C0] Call Trace: [ 1632.847546][ C0] [ 1632.850413][ C0] ? trace_irq_enable+0xbb/0xe0 [ 1632.855291][ C0] ? read_lock_is_recursive+0x20/0x20 [ 1632.860681][ C0] ? ktime_get_real_ts64+0x440/0x440 [ 1632.865979][ C0] ? debug_objects_fill_pool+0x8b/0x790 [ 1632.871534][ C0] debug_objects_fill_pool+0xab/0x790 [ 1632.876915][ C0] ? debug_objects_fill_pool+0x8b/0x790 [ 1632.882473][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 1632.887694][ C0] ? sched_clock_cpu+0x75/0x430 [ 1632.892552][ C0] ? debug_object_activate+0x500/0x500 [ 1632.898025][ C0] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 1632.903763][ C0] ? mark_lock+0x94/0x320 [ 1632.908109][ C0] debug_object_activate+0x36/0x500 [ 1632.913317][ C0] ? lock_chain_count+0x20/0x20 [ 1632.918179][ C0] ? rcuref_put+0x220/0x220 [ 1632.922702][ C0] call_rcu+0xa6/0x900 [ 1632.926786][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1632.932955][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 1632.938161][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1632.944332][ C0] ? rcu_force_quiescent_state+0x220/0x220 [ 1632.950179][ C0] ? dst_release+0x128/0x1a0 [ 1632.954800][ C0] ? dst_release+0x121/0x1a0 [ 1632.959425][ C0] __dev_queue_xmit+0x8ee/0x3a30 [ 1632.964403][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1632.970597][ C0] ? __dev_queue_xmit+0x6d1/0x3a30 [ 1632.975756][ C0] ? __asan_memcpy+0x40/0x70 [ 1632.980376][ C0] ? netdev_core_pick_tx+0x370/0x370 [ 1632.985710][ C0] ? llc_sysctl_exit+0x70/0x70 [ 1632.990579][ C0] ? neigh_resolve_output+0x5f5/0x710 [ 1632.995996][ C0] ip6_finish_output2+0xe61/0x1550 [ 1633.001238][ C0] ? nf_hook+0x390/0x390 [ 1633.005501][ C0] ? ip6_mtu+0x38c/0x4a0 [ 1633.009766][ C0] ? ip6_finish_output+0x567/0x7f0 [ 1633.014895][ C0] ? ip6_output+0x11e/0x530 [ 1633.019415][ C0] ip6_output+0x33b/0x530 [ 1633.023761][ C0] ndisc_send_skb+0xbb9/0x1480 [ 1633.028540][ C0] ? ndisc_alloc_skb+0x18c/0x450 [ 1633.033519][ C0] ? ndisc_send_skb+0x201/0x1480 [ 1633.038502][ C0] ? ndisc_mc_map+0x680/0x680 [ 1633.043240][ C0] ? skb_dst+0xd0/0xd0 [ 1633.047351][ C0] addrconf_rs_timer+0x36b/0x640 [ 1633.052360][ C0] ? addrconf_disable_policy_idev+0x480/0x480 [ 1633.058448][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1633.064459][ C0] call_timer_fn+0x189/0x540 [ 1633.069060][ C0] ? addrconf_disable_policy_idev+0x480/0x480 [ 1633.075138][ C0] ? call_timer_fn+0xd2/0x540 [ 1633.079823][ C0] ? __run_timers+0x810/0x810 [ 1633.084519][ C0] ? addrconf_disable_policy_idev+0x480/0x480 [ 1633.090623][ C0] __run_timers+0x570/0x810 [ 1633.095175][ C0] ? detach_timer+0x2b0/0x2b0 [ 1633.099895][ C0] run_timer_softirq+0x67/0xf0 [ 1633.104671][ C0] handle_softirqs+0x27d/0x820 [ 1633.109446][ C0] ? read_tsc+0x9/0x20 [ 1633.113523][ C0] ? ktime_get+0x24b/0x280 [ 1633.117988][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 1633.122781][ C0] ? do_softirq+0x1a0/0x1a0 [ 1633.127343][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 1633.132588][ C0] __irq_exit_rcu+0xd3/0x190 [ 1633.137218][ C0] ? irq_exit_rcu+0x20/0x20 [ 1633.141746][ C0] irq_exit_rcu+0x9/0x20 [ 1633.145998][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1633.151665][ C0] [ 1633.154612][ C0] [ 1633.157556][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1633.163564][ C0] RIP: 0010:generic_exec_single+0x477/0x4e0 [ 1633.169484][ C0] Code: 75 11 e8 2c 15 0b 00 48 85 db 75 16 e8 22 15 0b 00 eb 15 e8 1b 15 0b 00 e8 f6 18 1b 09 48 85 db 74 ea e8 0c 15 0b 00 fb 31 c0 <48> c7 44 24 20 0e 36 e0 45 4b c7 04 2c 00 00 00 00 43 c7 44 2c 08 [ 1633.189099][ C0] RSP: 0018:ffffc9000f8dfa00 EFLAGS: 00000246 [ 1633.195189][ C0] RAX: 0000000000000000 RBX: 0000000000000200 RCX: ffff88802bdc0000 [ 1633.203167][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1633.211161][ C0] RBP: ffffc9000f8dfad0 R08: ffffffff92223607 R09: 1ffffffff24446c0 [ 1633.219160][ C0] R10: dffffc0000000000 R11: fffffbfff24446c1 R12: 1ffff92001f1bf44 [ 1633.227147][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff92001f1bf65 [ 1633.235154][ C0] ? event_function+0x300/0x300 [ 1633.240043][ C0] ? smp_call_function_single+0x5a0/0x5a0 [ 1633.245773][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1633.251764][ C0] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 1633.259004][ C0] ? lock_chain_count+0x20/0x20 [ 1633.263868][ C0] ? smp_call_function_single+0xb0/0x5a0 [ 1633.269514][ C0] smp_call_function_single+0x36d/0x5a0 [ 1633.275075][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 1633.280294][ C0] ? event_function+0x300/0x300 [ 1633.285157][ C0] ? flush_smp_call_function_queue+0x250/0x250 [ 1633.291338][ C0] ? event_function+0x300/0x300 [ 1633.296213][ C0] perf_install_in_context+0x5bb/0x920 [ 1633.301686][ C0] ? alloc_file_pseudo+0x1ae/0x210 [ 1633.306809][ C0] ? exclusive_event_installable+0x2c0/0x2c0 [ 1633.312815][ C0] ? add_event_to_ctx+0x1170/0x1170 [ 1633.318033][ C0] ? anon_inode_getfile+0x109/0x1a0 [ 1633.323238][ C0] ? perf_event__header_size+0x165/0x220 [ 1633.328884][ C0] __se_sys_perf_event_open+0x180d/0x1d40 [ 1633.334625][ C0] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 1633.340287][ C0] ? syscall_enter_from_user_mode+0x2e/0x80 [ 1633.346187][ C0] ? __x64_sys_perf_event_open+0x20/0xc0 [ 1633.351832][ C0] do_syscall_64+0x55/0xb0 [ 1633.356261][ C0] ? clear_bhb_loop+0x40/0x90 [ 1633.360966][ C0] ? clear_bhb_loop+0x40/0x90 [ 1633.365657][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1633.371601][ C0] RIP: 0033:0x7f1a96f9f559 [ 1633.376032][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1633.395751][ C0] RSP: 002b:00007f1a97e33028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1633.404173][ C0] RAX: ffffffffffffffda RBX: 00007f1a97225fa0 RCX: 00007f1a96f9f559 [ 1633.412150][ C0] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 00002000000000c0 [ 1633.420124][ C0] RBP: 00007f1a97036b50 R08: 0000000000000002 R09: 0000000000000000 [ 1633.428101][ C0] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1633.436076][ C0] R13: 00007f1a97226038 R14: 00007f1a97225fa0 R15: 00007fff1d6c25e8 [ 1633.444069][ C0]