last executing test programs: 2m57.987781908s ago: executing program 0 (id=1): r0 = socket$kcm(0xa, 0x5, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYRES16=r0, @ANYRES64=r1, @ANYBLOB="0000000000f92ac829f2c4000000000000000000000000b57af794eebb58b350c441ab77e0f56b2e723467320d880acf89f3d89c966f1f", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000480)=ANY=[@ANYRES32=r2, @ANYRES32, @ANYBLOB="05"], 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r2, 0xffffffffffffffff, 0x26}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x19, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r4, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) socket$kcm(0x2, 0x200000000000001, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xa}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r5 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r5, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f0000001840)=ANY=[@ANYBLOB="1400000000000000010000002500000002010000000000004800000000000000080000000700000010000034366567f2219787566400007300000000000000000000000008000000ef3820f3439cb150a3651e799e1459c9c9a7521737a8879e3ef4dca1e3c32158996e4b2abde5342e22f2ba8b679121ac0b0ad62ade31fb2c47f0bbf781eb8bd1e3064141e90e9eac25b189c0da98b676571bbeefba392c3e15a10e03dee4ae1dfe99793e51ec0c6bb5fa6d7b357d249502f5919ef251e5d0e5bed378265b8bd55fde4689cb509b14fa754813a27e72d175e8d677420e10d651833e6e2ab8168b1d633b1bb9a7d4d59ebdc7083d93d35cd469de", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES8=r3], 0x6b}, 0x0) close(r5) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r6 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r6, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) r7 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r7, &(0x7f0000000000)={&(0x7f0000001340)={0x2, 0x6, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x41}, @multicast1}}}], 0x20}, 0x8000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000500)="76457fbbd09d124b10302606657a52c24ba70fc30c2e2e93a1e675f180a748a65eef72577c7638431978dbbdada61e0ef124be47ac2db57ef45433f7ce84a2b496f0b7664859b14c21326d8b62336d86bbc48c175f63035f3851a320bf8be4440661f3f135cd1ccd229ecb64", 0x6c}, {&(0x7f0000000600)="585c76bc8aa00dc779b453f63ada51835e3bea1ceecf738881eb", 0x1a}], 0x2, &(0x7f00000010c0)=ANY=[@ANYBLOB="680000000000000088000000ff0f0000e002d0772e56a8e4cd9c582bfaae864330e2be552bed853451e60354582284a6421d94df49213ed9ce909618cf146519fa1166e264c1abd16665c0895873b2d9b6da6212c1e9f0a794b3908ce2af35f64a2a330000000000fe3265c85992c50cfe30b00ccb33f602fa0d46a1006ea88919a2d89939d5f6a40903c42aba96fc270b8c2afbf3e5accfdb238f6935e10f0e4c2926cc080a44"], 0x68}, 0x20040018) r8 = socket$kcm(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="6112a8000000000061134c0000000000bf20000000000000160005003f1b48013d030100000000009500000000000000bc26000000000000bf67000000000000070200000fff07006702000003000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000008100d591d568253e9988431ec068e3a83683d58719d721839a447f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) sendmsg$inet(r8, &(0x7f0000000380)={&(0x7f0000000200)={0x2, 0x4e22, @remote}, 0x10, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000700000001008606000000031400000000000000000000000700000094040100000000001400000000000000010000000100"], 0x48}, 0x840) sendmsg$kcm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)="c8fec1123a0b09cc7e0dc3f5a9429f67002f742e5bede8832b0b7f1f4eed5e3f01ceb7ace2806a3f4d63282bdb3fe486b407e80f9295666de3f31e9cecc5ee7cf654e0e3279fe27f1e540d16901b4071c3793624", 0x54}, {0x0, 0x11}], 0x2}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e00000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m56.894501768s ago: executing program 4 (id=5): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="1802000003000000000000000000000085000000a0000000850000007d00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x200, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x100}) ioctl$TUNSETLINK(r1, 0x400454cc, 0x2) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={'macvlan1\x00', 0x8000}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000001340)=@hci={0x1f, 0xd00, 0xe}, 0x80, &(0x7f0000002540)=[{&(0x7f00000006c0)='v', 0x1}], 0x1}, 0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc///\x00\x82q\xee\x00!\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000880)={r4, &(0x7f0000000700)="f5799b3fad89bde038aadc7cdd625774aacc16da4157f47b7c0e03d3018579452552e189ac25d424e38bf99891a4dca74edf8311073450fb361dac66137e1dcdaa04bc3d4cc2a6a28f47581b6a7875e3eba8a4c304716f5395e14e20ce9ca52aa27315e4db473c0f83a92e77d9dcd9de04f3128d31b8b05d44d71c2088256a56e92c3581e6b598eb24450edd459dc05f8b02d6f014baf1f335586cf3ee", &(0x7f00000007c0)=""/92}, 0x20) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r5, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x200000000000014f, 0x1000000, &(0x7f0000001680)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000000400000004000000"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r6], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r7}, 0xc) socket$kcm(0xa, 0x5, 0x0) r8 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r8, 0x29, 0x7, &(0x7f0000000000), 0x4) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="d800000010008104687da3aa7143a0b8c81f080b21000000e8fe55a19c9d8714060014000000001208000a0043000040a80012000400054006000d000360107134cf6ee08000a0e408e8d8ef52a9d765dd11683296b7947968c7c0b7a196e6f66100000000000000000000003a17b259b640cce85107000014bbba2379bdbb26887321ace48051f2373a24cbd99f0c59b23c28b7be", 0x95}, {&(0x7f0000000140)="aa581ff83dac4a519b67538bfa897e210c31e1446808358248cf2d795634b12c4ce81c3876aff89235b78ea0e5c5badfa122797d62c09ada7441b4f31cd5e6fc4b2a32", 0x43}], 0x2}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x630c0700, 0x0, 0x0, 0x0, 0x0, 0x0) 2m56.649229703s ago: executing program 0 (id=12): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="e4000000040092ee903d", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000070000850000001b"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000000fd24000000000000000085000000"], 0x0}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r1, 0x80047441, &(0x7f0000001200)) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$kcm(0xa, 0x6, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) gettid() bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000f00)=@bpf_lsm={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="660a000000000000611109000000000085000000a00000009500"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffdd2}, 0x94) r2 = perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r4, 0x0, 0x60) 2m56.022910999s ago: executing program 0 (id=15): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="02000000040800000800000100000080004cc5007b7b9938456022cfa1e4965048362f6e26ffa02d7d4126aca6af3d085ddf26720c820d68164c924cbb1866844bfa920bef9bae077e165ac5f4a8fc4597052accfc2652cf9c6c4db468e5f663a1ca20bfd861f0275a16cd3b39cf46d114270c18caeca16b63b74c92f4e1a3723f5ddc16540a3ca7fdef41ad5e", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES16=r1, @ANYBLOB='\x00'/28], 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000000), 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x1c, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000002000000000000000000000218110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000000000000850000001700000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000120000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f00000008c0), 0x43) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xd, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x41100, 0x1e, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r8, 0x10f, 0x87, &(0x7f00000008c0), 0x43) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r11) setsockopt$sock_attach_bpf(r12, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\v'], 0x48) setsockopt$sock_attach_bpf(r10, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) sendmsg$kcm(r8, &(0x7f0000000100)={&(0x7f0000001540)=@tipc=@name={0x1e, 0x2, 0x3, {{0x40, 0xffffff0b}, 0x1}}, 0x80, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0xfca804a0, 0xe, 0x0, &(0x7f00000002c0)="b8000005000000005baf2312bbc2", 0x0, 0x12000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000900)="27030200590200000100002f1eafaef706e1050000008847000f110186cee84400000008000000001900000000000200000000000000000000000000266c9356927e7c8b73ee7f717395a0296526bfa63147", 0x52}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada302c9e37eed5653ecb716cdb8981cd819af0b33254465cc904be0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55", 0x76}, {&(0x7f0000000280)="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", 0x19c}], 0x3}, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r13 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="1400000022000b0fd25a806c8c6f94f90124fc60", 0x14}], 0x1}, 0x4000010) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfa, r2}, 0x38) ioctl$SIOCSIFHWADDR(r0, 0x8946, &(0x7f0000000040)={'ipvlan1\x00', @random='\x00\x00\x00\x00\x00 '}) 2m54.453898435s ago: executing program 0 (id=19): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x1f00) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000022003505d25a806f8c6394f97e24fc60", 0x14}], 0x1, 0x0, 0x0, 0x74000000}, 0x10) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={&(0x7f0000000900)=ANY=[@ANYBLOB="9feb010018000000000000009c0000009c000000050000000800000003000013040000000f00000000000000010000800700000001000000050000000200000010010000050000000000000003000084010000000800000001000000060000000c00000001000000000000000e00000003000000010000000300000000000011030000000100000001000000110200000005000000070000000000001101000000070000000f0000000000001201000000"], 0x0, 0xb9, 0x0, 0x1, 0x4}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000700000000000000d8ece2e5b0bb524b60fca5ed0818d409ec0c3e17a28676488c3622c63fd5d4cdecce0ec6d180d5d1f4b0fb09ab3e1c920c26dac49ebc01d36a2cd1723cca826c5c5786547ff757ff3fdfb67b6fed66d82434620eba07353aaeadc8439112f2b6227b7631ec74ae77ae3ce7c18900c7aaa0e87f60176204fd8b3563a23041806a2ed531e31d407fc0", @ANYRES32=0x1, @ANYRES32=0x0, @ANYBLOB="01000000000000000200"/27], 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) recvmsg$unix(r3, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000880)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xc378554, '\x00', 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x5}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) socket$kcm(0x21, 0x2, 0x2) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000021000b12d25a805bb98222f90224fc60", 0x14}], 0x8}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200"/15], 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) openat$tun(0xffffffffffffff9c, 0x0, 0x4000, 0x0) 2m53.75266162s ago: executing program 0 (id=23): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) close(0x3) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x10506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000801, 0x1}, 0x7402, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000700)={&(0x7f0000000000)=@abs={0x1, 0x0, 0x4e23}, 0x6e, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="9022044c000000000100000001000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00'], 0x18, 0x14}, 0x4000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f00000002c0)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) r2 = perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1008, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f00000014c0)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r3, 0x0, 0x0}, 0x10) close(r2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)='.', 0x1}], 0x1}, 0x80) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f0000001380), &(0x7f0000000000)=""/10, 0x2}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f00000038c0)={0x0, 0x0, 0x0}, 0x40012141) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000880)="f2", &(0x7f0000000000)=""/7, 0x2}, 0x20) 2m41.421508006s ago: executing program 32 (id=5): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="1802000003000000000000000000000085000000a0000000850000007d00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x200, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x100}) ioctl$TUNSETLINK(r1, 0x400454cc, 0x2) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={'macvlan1\x00', 0x8000}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000001340)=@hci={0x1f, 0xd00, 0xe}, 0x80, &(0x7f0000002540)=[{&(0x7f00000006c0)='v', 0x1}], 0x1}, 0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc///\x00\x82q\xee\x00!\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000880)={r4, &(0x7f0000000700)="f5799b3fad89bde038aadc7cdd625774aacc16da4157f47b7c0e03d3018579452552e189ac25d424e38bf99891a4dca74edf8311073450fb361dac66137e1dcdaa04bc3d4cc2a6a28f47581b6a7875e3eba8a4c304716f5395e14e20ce9ca52aa27315e4db473c0f83a92e77d9dcd9de04f3128d31b8b05d44d71c2088256a56e92c3581e6b598eb24450edd459dc05f8b02d6f014baf1f335586cf3ee", &(0x7f00000007c0)=""/92}, 0x20) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r5, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x200000000000014f, 0x1000000, &(0x7f0000001680)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000000400000004000000"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r6], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r7}, 0xc) socket$kcm(0xa, 0x5, 0x0) r8 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r8, 0x29, 0x7, &(0x7f0000000000), 0x4) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="d800000010008104687da3aa7143a0b8c81f080b21000000e8fe55a19c9d8714060014000000001208000a0043000040a80012000400054006000d000360107134cf6ee08000a0e408e8d8ef52a9d765dd11683296b7947968c7c0b7a196e6f66100000000000000000000003a17b259b640cce85107000014bbba2379bdbb26887321ace48051f2373a24cbd99f0c59b23c28b7be", 0x95}, {&(0x7f0000000140)="aa581ff83dac4a519b67538bfa897e210c31e1446808358248cf2d795634b12c4ce81c3876aff89235b78ea0e5c5badfa122797d62c09ada7441b4f31cd5e6fc4b2a32", 0x43}], 0x2}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x630c0700, 0x0, 0x0, 0x0, 0x0, 0x0) 2m38.486092113s ago: executing program 33 (id=23): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) close(0x3) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x10506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000801, 0x1}, 0x7402, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000700)={&(0x7f0000000000)=@abs={0x1, 0x0, 0x4e23}, 0x6e, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="9022044c000000000100000001000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00'], 0x18, 0x14}, 0x4000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f00000002c0)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) r2 = perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1008, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f00000014c0)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r3, 0x0, 0x0}, 0x10) close(r2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)='.', 0x1}], 0x1}, 0x80) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f0000001380), &(0x7f0000000000)=""/10, 0x2}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f00000038c0)={0x0, 0x0, 0x0}, 0x40012141) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000880)="f2", &(0x7f0000000000)=""/7, 0x2}, 0x20) 7.389487564s ago: executing program 2 (id=683): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0a00000006000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000080000000000000004a0008000000000010cc4302000000000e266e"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d0100000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x10, 0x400000002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r2 = socket$kcm(0x15, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x114, 0x1d, 0x0, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x17, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000002181100", @ANYRESDEC=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000", @ANYRES32=r3, @ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000940), 0x0, 0xa7c}, 0x38) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r5) socket$kcm(0xa, 0x5, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0xd80c2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xd, 0xf, &(0x7f0000000740)=ANY=[@ANYBLOB="183378e269d22d4a2f8db5fdc84c114000832176a35f8ad6795ec50855849a39a5b0e0d1c1ba068bfb3f3222aa93530449edf9046633bbe203eda09cae3b321e64847891cde06f19df0557ab5d331fb4284bbc210f52996ce2e5e4cfd99037967b1effe5b5c22f94f048aa7f4633a3bad66144fc98729da72fb215718f676f0a9c21f06f3b003f47be473b31cd69ed06d62721b017e18c7a355f602df57fc77c824b", @ANYRES32=r3, @ANYBLOB="0000000000000000b70200000000000085000000860000003816f8ff1000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000010000808500000006000000185700000a00"/112], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x3b7a3e3b2c1633b1, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xe}, 0x10}, 0x94) ioctl$SIOCSIFHWADDR(r4, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="020000000300"}) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xffdd) recvmsg(r1, 0x0, 0x10100) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7.234145335s ago: executing program 6 (id=684): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0xd, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x8d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0x6f5f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x10, 0x2, 0x0) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002e000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff9085000000730000009500"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0x4, 0x0, &(0x7f0000000000)="e0b9547e", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="05000000ff000000ff7f0000cc"], 0x50) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x11c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0500000003000000003800000700000011", @ANYRES32=0x0], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000000000000000000a00"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a80)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000dc0)={r2, 0xe0, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0), ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, &(0x7f0000000b00)=[0x0], &(0x7f0000000b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x56, 0x0, 0x0, 0x10, &(0x7f0000000c00), &(0x7f0000000c40), 0x8, 0xc, 0x8, 0x8, &(0x7f0000000c80)}}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=r5, @ANYBLOB='\b\x00'/19, @ANYRES32=r6, @ANYRES32, @ANYBLOB="4a4c7fa105000000010000"], 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbca313a181002c000000000400000010001f0e0027000f00000000800200121f", 0x2e}], 0x1}, 0x20008040) 7.094027622s ago: executing program 2 (id=687): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x115046, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd4242"], 0xfdef) openat$tun(0xffffffffffffff9c, 0x0, 0x501001, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r2 = perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x14, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000080)='(())') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r3, &(0x7f0000000000), 0x2a979d) write$cgroup_pid(r3, &(0x7f0000000100), 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="05000000ff000000ff7f0000cc"], 0x50) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0xa, 0x7, 0x200, 0x2000, r4, 0x3, '\x00', 0x0, r3, 0x1, 0x5, 0x3, 0xf}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={r3, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000380)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0], 0x0, 0xc8, &(0x7f0000000540)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f00000005c0), &(0x7f00000006c0), 0x8, 0x19, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)={0x2, 0x4, 0x8, 0x1, 0x80, r6, 0x6, '\x00', r7, r3, 0x2, 0x1, 0x1}, 0x50) r8 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x11c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0500000003000000003800000700000011", @ANYRES32=0x0], 0x48) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYRESOCT=r8, @ANYRESHEX=r5], &(0x7f0000001440)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 6.630430385s ago: executing program 3 (id=691): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x7, 0x22004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x1f00) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000022003505d25a806f8c6394f97e24fc60", 0x14}], 0x1, 0x0, 0x0, 0x74000000}, 0x10) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYRES32=0x0], 0x50) socketpair$unix(0x1, 0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) socket$kcm(0x21, 0x2, 0x2) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200"/15], 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) openat$tun(0xffffffffffffff9c, 0x0, 0x4000, 0x0) 6.625485006s ago: executing program 6 (id=692): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000004000000080000000a"], 0x48) r1 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x6, 0x9, &(0x7f00000001c0), 0x4) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000e00000001000000000000010400000020000001000000000000000d01000000050000000000000c020000000a0000000100000c0200000000696e74006d61696e0073"], 0x0, 0x5a}, 0x28) r3 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r3, 0x6, 0xd, &(0x7f0000000040), 0x3) sendmsg$kcm(r3, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20000004) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f0000000608)="0900000004", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18110000", @ANYRES32=r0, @ANYBLOB="000000000000000018420000060000000000000000000000b703000000000000b70400000000000085000000a4000000b7000000000000009500000000000000b7000000000000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x1, 0x100000, &(0x7f0000000700)=""/1048576, 0x0, 0x0, '\x00', 0x0, @fallback, r2, 0x8, &(0x7f0000000600)={0x0, 0x3}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) 5.85444585s ago: executing program 6 (id=694): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x8847, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb90402200800fd007c05e8fe55a10a0007000140020203600e4109000800ac00060311000000160012000a00fc000000035c3b61c1d67f6f94007134cf6e8c0000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) syz_clone(0x400000, &(0x7f0000000280)="4c6c8bd9ec295d4f60695675db845bacf92aea4eb94af7eb1202bb335678d37eedbe4048b0d8d1cd0cc77030c2a46e3f67077081c298e21b422268fa207bf87778edfaf7bbce4780659fc593cf07e6932002c3d7783e47b66aaa77a495416464edea6bac33d98514bdbdae7864d5dd691c1600bf0ea3e85f88292e7a84a785cb1e857533f826f11fd1cd4a79b3176fef63686aa0999a1c5bbafbc7ab7de63ac270da0746c471526f492b7d2fcc750db68d920eb4333d0f0dc2304c8783", 0xbd, &(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0)="bbbb5cf52c676332e9c15e9169f27da345daa1816be7d387607dc51ab9a5bad8d8183d4ca50fc568d57ab70e3a205863830e4306df0f9ced7f8000f77d1810f1820f09e7") 5.85367475s ago: executing program 1 (id=695): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff}, [@call={0x85, 0x0, 0x0, 0xae}, @printk={@i, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x20000, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007b"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff07000000000000000000008500000023"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000dbee000000000000d300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000900008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r3, &(0x7f0000001000)={&(0x7f0000000ac0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000100)="41fb74e1feaaf0c5fe17eda707b6077e", 0x10}], 0x1, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x26}, @loopback}}}], 0x20}, 0x800) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB='b *:4\tmw'], 0xa) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@func={0x3, 0x2}]}, {0x0, [0x0, 0x0, 0x61]}}, 0x0, 0x29}, 0x20) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000240)={r0, r4}, 0xc) write$cgroup_pid(r4, &(0x7f0000000400), 0x12) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) 5.802260374s ago: executing program 3 (id=696): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.swap.events\x00', 0x26e1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="9feb01001800000000000000bc000000bc00000003000000060000000000000700000000070000000000000e01000000010000f40b00000000000008030000000a00000001cc04"], 0x0, 0xd7, 0x0, 0x0, 0x7, 0x10000}, 0x28) r2 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000001340)=@hci={0x1f, 0xc00, 0xe}, 0x80, &(0x7f0000002540)=[{&(0x7f00000006c0)='b', 0x10}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x2e, &(0x7f0000000040)=r1, 0xffa8) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'vlan1\x00', 0x1}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000140)={0x2, &(0x7f0000000200)=[{0x6c}, {0x6}]}) r4 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r4, &(0x7f0000001d80)={&(0x7f0000000100)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000001880)=[{&(0x7f0000000300)="a0", 0x1}], 0x1}, 0x24000008) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000ac0)={r1, &(0x7f00000009c0)="43cc3bb5ada274c4650b71bafc9e60321edfdc8e92afce4f1328dd2f377e47836579251857f56eefc3831e11a94df9ff48df9dd57b46a9e172f3fe384e85ee1d6970f18193fc8e5802a40a8d1ed52c60bb7d0648c0d95238906def71d6c1a50ff7ee4c655204e1afca0d5182f8c29a4b6b827e5b491f7d6d905277483d5db2c51260413cf3410e14573cddf44c5ef5e07a316e7b36307f15865c5f261b042218581c6bde09eb43d4a8fdea1b0a10d1d1af00131f159ba8978179496d6cc8f5a6bd7c73"}, 0x20) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d) socket$kcm(0x2, 0x5, 0x84) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r6, 0x12c, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc4, 0x0, 0x5, 0x10, &(0x7f00000015c0), 0x0, 0x0, 0x25, 0x8, 0x0, 0x0}}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) sendmsg$sock(r4, &(0x7f0000000380)={&(0x7f0000000080)=@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000140)="07c0", 0x2}], 0x1}, 0x4004010) setsockopt$sock_attach_bpf(r4, 0x84, 0x14, &(0x7f0000000000)=r8, 0x8) r9 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400", 0x2}], 0x1}, 0x0) sendmsg$kcm(r9, &(0x7f0000000d40)={&(0x7f0000000280)=@nl=@kern={0x10, 0x0, 0x0, 0x20}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000d80)="05c3a56392bd", 0x6}], 0x1, &(0x7f0000000900)=[{0x10, 0x89, 0x9f}], 0x10}, 0xc4) ioctl$TUNGETFILTER(r8, 0x801054db, &(0x7f0000000240)=""/144) 5.198518294s ago: executing program 1 (id=697): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0a00000006000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000080000000000000004a0008000000000010cc4302000000000e266e"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d0100000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x10, 0x400000002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r2 = socket$kcm(0x15, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x114, 0x1d, 0x0, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x17, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000002181100", @ANYRESDEC=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018", @ANYRES32=r3, @ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000940), 0x0, 0xa7c}, 0x38) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r5) socket$kcm(0xa, 0x5, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0xd80c2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xd, 0xf, &(0x7f0000000740)=ANY=[@ANYBLOB="183378e269d22d4a2f8db5fdc84c114000832176a35f8ad6795ec50855849a39a5b0e0d1c1ba068bfb3f3222aa93530449edf9046633bbe203eda09cae3b321e64847891cde06f19df0557ab5d331fb4284bbc210f52996ce2e5e4cfd99037967b1effe5b5c22f94f048aa7f4633a3bad66144fc98729da72fb215718f676f0a9c21f06f3b003f47be473b31cd69ed06d62721b017e18c7a355f602df57fc77c824b", @ANYRES32=r3, @ANYBLOB="0000000000000000b70200000000000085000000860000003816f8ff1000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000010000808500000006000000185700000a00"/112], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x3b7a3e3b2c1633b1, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xe}, 0x10}, 0x94) ioctl$SIOCSIFHWADDR(r4, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="020000000300"}) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xffdd) recvmsg(r1, 0x0, 0x10100) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.854287655s ago: executing program 6 (id=698): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) close(r1) ioctl$SIOCSIFHWADDR(r1, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'veth1_virt_wifi\x00', 0x8000}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x604, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="180200000000000000000000000000008500000028000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) close(0x3) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)='.', 0x1}], 0x1}, 0x80) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r4, &(0x7f0000001380), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r4, &(0x7f0000000880)="f2", &(0x7f0000000000)=""/7, 0x2}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x7, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r5, 0x2000012, 0x5ee, 0x600, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x40008, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080b01000000e8fe55a1180015000600142603600e120800180000000401080016000a00014006001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 4.820937394s ago: executing program 5 (id=699): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0400000004000000040000001000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000011cbf3be85858d85d9b73fb18418000000000000000743b69c7b7846"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x7, 0x8, &(0x7f0000000300)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r0}, @generic={0xb7, 0x3, 0x0, 0x0, 0x8}, @generic={0xbf, 0x4, 0xa}, @generic={0x7, 0x4, 0x0, 0x0, 0xfffffff8}, @generic={0xb7, 0x5}, @generic={0x85, 0x0, 0x0, 0x0, 0x19}, @generic={0x95}], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.599106273s ago: executing program 2 (id=700): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1844c1d7dc1700000000f8393d00000000000000000000006119680000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x80) 4.278458808s ago: executing program 3 (id=701): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x42000, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) ioctl$SIOCSIFHWADDR(r1, 0x8b1b, &(0x7f0000000000)={'wlan1\x00', @broadcast}) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) close(r0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x42000, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x4010744d, 0x0) 4.164249488s ago: executing program 1 (id=702): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x14, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) recvmsg$unix(r1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff00000085000000a800000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r4}, 0xc) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x0, 0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffc}, 0x50) (async, rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) (rerun: 32) 4.126982068s ago: executing program 5 (id=703): r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x4, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x7, 0x4, 0x900, 0x1, 0x28}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0xf3}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x108ea5, 0xc78, 0x0, 0x0, 0x0, 0x0, 0xae7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1b, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f0000001300)={0x5, 0x80, 0x3, 0x0, 0x2, 0x5d, 0x0, 0x2, 0x0, 0xc, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xc, 0x1, @perf_config_ext={0xd, 0x5}, 0x2501, 0xfffffffffffffffc, 0x4823c6a5, 0x7, 0xfff, 0xe000000, 0x5, 0x0, 0x2, 0x0, 0x8}, 0x0, 0x6, r4, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x9, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x3}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r7}, 0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000002040)={r1, 0x58, &(0x7f0000001fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000030000000000000000400000850000000500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r9}, 0xc) r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002080)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000021c0)=@bpf_tracing={0x1a, 0x2, &(0x7f0000000400)=@raw=[@call={0x85, 0x0, 0x0, 0x71}, @alu={0x7, 0x1, 0xa, 0x9, 0x0, 0x80, 0xfffffffffffffffc}], &(0x7f0000000140)='syzkaller\x00', 0x4, 0x100f, &(0x7f0000002280)=""/4111, 0x41100, 0x40, '\x00', r8, 0x1a, r10, 0x8, &(0x7f00000020c0)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000002100)={0x5, 0x6, 0x6, 0x101}, 0x10, 0xa88a, r7, 0x1, &(0x7f0000002140), &(0x7f0000002180)=[{0x8000000, 0x4, 0x6, 0xa}], 0x10, 0x8}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r12 = openat$cgroup_devices(r11, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r12, &(0x7f00000000c0)={'c', ' *:* ', 'r\x00'}, 0x8) socket$kcm(0xa, 0x3, 0x73) 3.866284067s ago: executing program 2 (id=704): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, r0, 0x8) socket$kcm(0x10, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], 0x0}, 0x94) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003d000b08d25a80648c7494f90224fc60580002400c000400030082c137153e3719ac018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) recvmsg$unix(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x40}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000080)) 3.330564239s ago: executing program 1 (id=705): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000000eeffb704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x29, 0xa, 0x1, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000febfffff0000000003000000850000004100000018010000696c6c2500000000002020207b1ae8ff00000000bfa100000000000007010000f805ffffb702000008000006b703000003000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x15, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x114, 0x1d, 0x0, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xb, 0x17, &(0x7f00000005c0)=ANY=[@ANYBLOB="0200000000000000000000000000000218110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000001000000850000008600000018", @ANYRES8], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0xfca804a0, 0x3, 0x8, &(0x7f00000002c0)="b80000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, &(0x7f00000002c0)=""/251, &(0x7f0000000940), &(0x7f0000000200), 0xa7c}, 0x38) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r6) socket$kcm(0xa, 0x5, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0xd80c2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xfffffffff7ffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004001000440000000900000001000000", @ANYRES32=0x1, @ANYBLOB="00a9cf0ba91e98c6c8", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r7}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000007c0)={r7, &(0x7f00000006c0)="a5fbdc58b0d119bc8754984f8dfb9009645f519f1aa2ec7b3a2dc1a4b01ee7cb4db94a4a8e312e04731a3a5ceddfc2092e086f86f2ce287646f50e59734d8100e203fe80bafd1921e78eaa6affcf9a18154345e4a4699de290e14206f81a6a0bc3349bcd980afc1084ed829d2e7f9263500d69df2adbe29af361139442fa8a76a026081920099c032b7b74f2544971", &(0x7f0000000780)=""/30}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x12, 0xe, &(0x7f0000000540)=ANY=[@ANYRES64=r5, @ANYRESDEC=r1, @ANYRESHEX=r1], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r8 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r8, 0x0, 0xc, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) 2.724428879s ago: executing program 6 (id=706): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x7, 0x22004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x1f00) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000022003505d25a806f8c6394f97e24fc60", 0x14}], 0x1, 0x0, 0x0, 0x74000000}, 0x10) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYRES32=0x0], 0x50) socketpair$unix(0x1, 0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) socket$kcm(0x21, 0x2, 0x2) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200"/15], 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) openat$tun(0xffffffffffffff9c, 0x0, 0x4000, 0x0) 2.678087022s ago: executing program 5 (id=707): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff}, [@call={0x85, 0x0, 0x0, 0xae}, @printk={@i, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x20000, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007b"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff07000000000000000000008500000023"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000dbee000000000000d300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000900008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r3, &(0x7f0000001000)={&(0x7f0000000ac0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000100)="41fb74e1feaaf0c5fe17eda707b6077e", 0x10}], 0x1, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x26}, @loopback}}}], 0x20}, 0x800) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB='b *:4\tmw'], 0xa) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@func={0x3, 0x2}]}, {0x0, [0x0, 0x0, 0x61]}}, 0x0, 0x29}, 0x20) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000240)={r0, r4}, 0xc) write$cgroup_pid(r4, &(0x7f0000000400), 0x12) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) 2.602824201s ago: executing program 3 (id=708): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x8, 0x0, 0x0, 0x0, 0x0, 0x4010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x0, 0xf1}, 0x10c002, 0xac61, 0x0, 0x8, 0x0, 0x0, 0x8}, 0x0, 0xffffdfffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0xb1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x8) r0 = socket$kcm(0x11, 0x2, 0x0) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_config_ext={0x1, 0x5d}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1efbfff4640000000a0000000900003395000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r2, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001100)={r2, 0x0, &(0x7f0000001700)=""/53}, 0x20) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000100000007"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x3, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="006806a5c5ddad6252ea6642bade8a306c757476574e5ea1902ae93360d33307abdeff039d8bd49e9b3de877e0256c9fd61e7daa08183c818dd7be8cccacb880217428b248e1ce2e7668a46e3bab102cad4687158c821efbc227f3099cee3eb83c768d846faa06f2c48f0b7e49abde93c169fcdc9e7692"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdfd}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xb, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000007008500000073"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1}, 0x1) r4 = socket$kcm(0xa, 0x5, 0x0) r5 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000000e8ffffffffffff05000000", @ANYRES32=0x1], 0x48) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x8916, &(0x7f0000000000)={r5}) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000100)="d8000000140081044e81f782db44b9040a1d08bc01000000040000a118000200fc00000000000e1208000f0100810401a80016eaa40001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x8936, &(0x7f0000000000)={r5}) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000000c0)=r0, 0x8) close(r0) r7 = socket$kcm(0x11, 0x2, 0x0) r8 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r8, 0x107, 0x12, &(0x7f00000000c0)=r7, 0x8) 2.599706942s ago: executing program 1 (id=709): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x24080, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc006, 0xac5d, 0xffffffff, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, r1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="140000003f000b12d25a80648c2594f90124fc60", 0x14}], 0x1}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000500)={r0, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xb, 0xff, 0x24932, 0x7f, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x2000, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r4) r5 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r5, &(0x7f0000000340)={&(0x7f00000000c0)=@in6={0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x7}, 0x80, 0x0}, 0x2008e000) write$cgroup_subtree(r4, &(0x7f0000000300)=ANY=[], 0xfe33) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x7f, 0x0, 0x0, 0xffffffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}, 0x0, 0x2, 0x0, 0x0, 0x2, 0x1000000, 0x4}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c012, 0xac5d}, 0x0, 0xfffffffffffff7ff, 0xffffffffffffffff, 0x1) socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="ceaa00000000000071101b000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r7, 0x0, 0x36, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888847", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000}, 0x50) 2.474378435s ago: executing program 2 (id=710): socketpair(0x5, 0x1, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000008c0)={0x1, 0x80, 0x80, 0x0, 0x8, 0x0, 0x0, 0x5c31, 0xc0026, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x94c, 0x0, @perf_bp={0x0}, 0x100c, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x3}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x4, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x2, @perf_bp={&(0x7f0000000140)}, 0x0, 0x0, 0x0, 0x0, 0x100000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000b0441e360000000000000000000000ac773fd5eee69c2dd33cc94a31e8b8a4bd5abedda3d11feace1d0b8f35c24883675b91e27f2736132405086c31000f276ba512701eb3a038634c981f6937fd059566ed00c70f26f900aa"], 0x50) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x440}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x28, 0x1, 0xc, 0x0, 0x0, 0x8, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={&(0x7f0000000880), 0xf}, 0x0, 0x2000000000000000, 0x43a1bd76, 0x8, 0xd, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0xfffffffeffffffff, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0x9, 0x8000, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x3ff, 0x35}, 0x80c, 0x1, 0xb, 0x8, 0x7fffffff, 0xf, 0x0, 0x0, 0x400003, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x1, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x6, &(0x7f0000000040), 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x8, 0x1, 0x0, 0x80000}, 0x0, 0x1, r3, 0x2) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa067707"], 0xfdef) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="1b00000000000000000000000100000000000000", @ANYRES32=r2, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="050000000500000000000000e44cdeb5f30cdd6b7600ff00000000000000"], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040033, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa0}, 0x40000000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000280), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8946, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000080)) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000240)="d80000001c0081044e81f782db443ecd297f065d5e6094347879cca2b904021d08020700000081000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef21f4fffffffffca19750aa2297bce08affff8017cb090000001fb791643a5ee4001b146218a0d68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060009000000000080bb9ad809d5e1cace81ed0bffece0acd8002aaf30eeb62063c0a4c210539ecbee5de6ccd40dd68adbef3d9345", 0xd8}, {&(0x7f0000000a40)="19cffd3aea82d67d480fa0d158", 0xd}], 0x10000244, 0x0, 0x0, 0x7400}, 0x20004080) sendmsg$sock(r4, &(0x7f0000000840)={&(0x7f0000000340)=@pppoe={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}, 'wlan0\x00'}}, 0x80, &(0x7f0000000780)=[{&(0x7f00000003c0)="09eb61182518dec410579c0d2dd3", 0xe}, {&(0x7f0000000400)="2fc014067df4fe10ad31c2a854509219702072a0ec5a17a41eb89dc993b3de8356a8ae75e4b0b0ff53823cf42fb72e16b8", 0x31}, {&(0x7f0000000440)="3c513488f4981fb0a39aeff9f442fccedd74c8abb3647ac50de787762e938551652394f28939cb", 0x27}, {&(0x7f0000000580)="029f275d2df3b7d6523e5b39d1a2ceef309729f543eb0147317edc77ff43d358674c0571f204756c7175cb1817da09820ecb248aa29684222a0c6e31d8a3880ddf7fbf7682a7eae954a02889c899edb15bde427fae913e900b2f85f3fdd5c7555044fc77a1d6438f4c750067b9b2317627313993d9cbe91196528720952c", 0x7e}, {&(0x7f0000000600)="c12544c43b9192670fac43b507a1fa511ed6ae5a6d3c24bb073d590e4ba62fec2d7fdf053078486419f17268d957bf2d19cff83833b56ef968f84e9159feac7e0012b515b4686d994cf56d1ca68c815d44dc7ca0c36cb9d9eb767b0277572c169012781a9909f11a519e4a6ce231b56c6dbf364b5633d80a72fbb1698d", 0x7d}], 0x5, &(0x7f0000000800)=[@mark={{0x14, 0x1, 0x24, 0x83}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}], 0x30}, 0x0) 1.895889608s ago: executing program 5 (id=711): socket$kcm(0x21, 0x2, 0x2) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2004, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}, 0x108ea5, 0xc78, 0x0, 0x1, 0x0, 0x0, 0xae7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d}, 0x94) socket$kcm(0x10, 0x2, 0x10) 1.232059754s ago: executing program 5 (id=712): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0a00000006000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000080000000000000004a0008000000000010cc4302000000000e266e"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d0100000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x10, 0x400000002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r2 = socket$kcm(0x15, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x114, 0x1d, 0x0, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x17, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000002181100", @ANYRESDEC=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018", @ANYRES32=r3, @ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000940), 0x0, 0xa7c}, 0x38) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r5) socket$kcm(0xa, 0x5, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0xd80c2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xd, 0xf, &(0x7f0000000740)=ANY=[@ANYBLOB="183378e269d22d4a2f8db5fdc84c114000832176a35f8ad6795ec50855849a39a5b0e0d1c1ba068bfb3f3222aa93530449edf9046633bbe203eda09cae3b321e64847891cde06f19df0557ab5d331fb4284bbc210f52996ce2e5e4cfd99037967b1effe5b5c22f94f048aa7f4633a3bad66144fc98729da72fb215718f676f0a9c21f06f3b003f47be473b31cd69ed06d62721b017e18c7a355f602df57fc77c824b", @ANYRES32=r3, @ANYBLOB="0000000000000000b70200000000000085000000860000003816f8ff1000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000010000808500000006000000185700000a00"/112], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x3b7a3e3b2c1633b1, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xe}, 0x10}, 0x94) ioctl$SIOCSIFHWADDR(r4, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="020000000300"}) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xffdd) recvmsg(r1, 0x0, 0x10100) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.02288728s ago: executing program 1 (id=713): r0 = socket$kcm(0x10, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0xc0189436, &(0x7f00000005c0)=0x400000001) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b9040a1d080220000000041296a1180002000000030000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x8000, 0x200}, 0x10002a, 0x5, 0x100, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x1, 0x4, 0x8}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="0000000000000000b7080000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="d80000001e0081064e81f782db44b904020208a606007c09e8fe08a10a0015c00200142603600e120d000d0024000000a8000e0011000140034788000360", 0x3e}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0x4, 0x0, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb790700368df3757f0086dd6317ce8000377ac9b0e0865a6596aff57b0000000000000000"], 0xffffffffffffffc7) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="850200000000000018100000", @ANYRES32, @ANYBLOB="00008cff07887e7cf83500000000000045"], 0x0, 0x0, 0xfffffffffffffdce}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000e1e, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000b000000080000000000000f050001"], 0x0, 0x2f, 0x0, 0x6}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000002000000a00300000500000000000000", @ANYRES32, @ANYBLOB="0000000000000000405d86327c"], 0x48) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB='V?\x00\x00-\x00Y'], 0xfe33) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, &(0x7f0000000080)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x11c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x50) 946.32264ms ago: executing program 3 (id=714): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x1, 0x5, 0x10000}, 0x28) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0x41, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa) (async) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) (async) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x372d, 0x131cc, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x2, 0x7}, 0x1001a8, 0x0, 0xfffffffc, 0x4, 0x0, 0xffff0000, 0x5, 0x0, 0xffffbffe, 0x0, 0xfffffffffffffff1}, 0x0, 0x0, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={0x0}, 0x50d8, 0x2, 0x7, 0x0, 0x0, 0x7, 0x469c, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x140, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x0, @perf_config_ext, 0x5601, 0x0, 0xffff, 0x1, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x800000004136}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="100000000400000008000000020000000000", @ANYRES32=0x1, @ANYBLOB="000000000000000000000000000000000000000082c34eda9bc3cc139be447997d8ba268d5eb9d3e6a805a564c2a05000000638d3bc03b027e0cf05cc3c045ead2dafd01649b95179b612654eb811d7584e08d38220e42104a17dafddbc431de4295ce75c5a71dfc07f978daa28f4000e34165168daf1800000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="180000006a00f96b", 0x8}], 0x1}, 0x4080) (async) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x12, &(0x7f0000000300), 0x4) (async) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000400)="1a24dc2afedfcdc0abf966265fd687787f51a5c071b09d8dc2be0ec1a17fe4cdbcf20069082d36025b2e34f94775dd5ad2b1c47634171d75d29ed0b59cc8d6f85b43541e796857e38bc5", 0x4a}], 0x1, 0x0, 0x0, 0x7400}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001c40), 0x1e, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32, @ANYBLOB="0d00ff0000000000830000000000000045"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) (async) recvmsg$unix(r5, 0x0, 0x20) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x401c5820, &(0x7f0000000000)=0x90) (async) ioctl$TUNSETOFFLOAD(r6, 0x80086601, 0x110e22fff8) 821.446593ms ago: executing program 2 (id=715): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x2, 0x0, 0x8, 0x0, 0x4000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 64) socket$kcm(0xa, 0x5, 0x0) (async, rerun: 64) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x18, 0x1, 0x0, 0x0, 0x0, 0x0, 0x60800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) close(r0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0xa, 0x2, 0x0) (async, rerun: 32) socketpair(0x2, 0x6, 0x5, &(0x7f0000000040)={0xffffffffffffffff}) (rerun: 32) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x3, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0xfffffff7, 0x0, 0xffffffffffffffff, 0xffff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x3}, 0x50) (async, rerun: 32) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000700)={0x1, 0x58, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (rerun: 32) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.self_freezing\x00', 0x26e1, 0x0) ioctl$SIOCSIFHWADDR(r5, 0xc0045878, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={0xffffffffffffffff, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000540)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x5d, &(0x7f0000000600)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x7b, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000f80)=@bpf_tracing={0x1a, 0x17, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffffff7f}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000d80)='syzkaller\x00', 0x7, 0xc4, &(0x7f0000000dc0)=""/196, 0x40f00, 0x29, '\x00', r6, 0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000ec0)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000f00)={0x4, 0xa, 0x5, 0x3}, 0x10, 0x1475, 0xffffffffffffffff, 0x0, &(0x7f0000000f40)=[r3, r5, r5, r3, r5], 0x0, 0x10, 0x1}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000880)={r1, 0xffffffffffffffff}, 0x4) (async) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="1b00000000000000000000000400000000000000", @ANYRES32, @ANYBLOB="ff7f00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="020000000200000002000000000000000000000000000000000000007175d946fed96007b61fdf26c4b3eba3a01b7967e571dcd50c1eb5b5eb311aca"], 0x50) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xd, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x97}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x1}, 0x50) (async) r13 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000009c0)={0x0, 0x3, 0x18}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x2, 0x18, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x39aa, 0x0, 0x0, 0x0, 0x101}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000600)='syzkaller\x00', 0x100, 0x37, &(0x7f0000000640)=""/55, 0x40f00, 0x54, '\x00', r4, @fallback=0x8, r5, 0x8, &(0x7f0000000740)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000840)={0x4, 0x2, 0x1, 0xf4}, 0x10, r7, r1, 0x6, &(0x7f0000000a00)=[0x1, r8, r9, r10, r12, r13], &(0x7f0000000a40)=[{0x2, 0x2, 0xe, 0x3}, {0x3, 0xfffffff8, 0x8, 0x8}, {0x1, 0x5, 0x5, 0x4}, {0x3, 0x4, 0x6, 0xb}, {0x4, 0x1, 0x2}, {0x4, 0x4, 0x4, 0x1}], 0x10, 0x2}, 0x94) (async, rerun: 64) socket$kcm(0xa, 0x922000000003, 0x11) (async, rerun: 64) r14 = socket$kcm(0x10, 0x2, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.empty_time\x00', 0x26e1, 0x0) (async) close(r2) (async, rerun: 64) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f0000000100)=r11, 0x4) (async, rerun: 64) sendmsg$kcm(r14, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x4) 485.886602ms ago: executing program 6 (id=716): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)}, 0x20004) 371.777482ms ago: executing program 5 (id=717): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x604, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0xd}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x8108, 0x2, 0xfffffffe, 0x3, 0x0, 0x4, 0x6980, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x5, 0x84) r1 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000280)={[{0x2b, 'io'}, {0x2d, 'freezer'}, {0x2b, 'cpuacct'}, {0x2d, 'net_cls'}]}, 0x1f) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0xfffffffffffffe72, &(0x7f0000000000)=[{&(0x7f0000000300)="d800000018008105e00212ba0d8105040a020200020f100b067c55a1bc000900b80006990200000015000500fc038178a80015000338004002000c0901ac040000d67f6f947a7100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e970300000000000000000000000000000000000000008dc5fb510162", 0xd8}], 0x1}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={0xffffffffffffffff}, 0x4) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x101602, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110c230000) ioctl$TUNSETOFFLOAD(r3, 0x8010743f, 0xf0ff1f0000000a) openat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz1\x00', 0x200002, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x40000) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40182, 0x0) ioctl$TUNDETACHFILTER(r6, 0x401054d6, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xa, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b509000000000000639af0ff00000000b509000000000000db9af0ff41000000bf8200000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000e80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 3 (id=718): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x42000, 0x0) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2a}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1}, 0x0, &(0x7f0000000040)}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000001c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000200)=[0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0], 0x0, 0xb7, &(0x7f00000002c0)=[{}], 0x8, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0xa9, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000540)={0x0, 0x0, 0x0, 0xfffffffffffffd4d, &(0x7f00000003c0)}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x3, 0x4ea, 0x1, 0x1000, 0xffffffffffffffff, 0x9d4b, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x0, 0x1}, 0x50) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYRES8=r3, @ANYRES8=r4], 0x12) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000580)={0x0, 0x6, 0x10}, 0xc) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x44) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x4, 0x3}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) r6 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r6, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r6, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b8825fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000220000000400000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r7}, &(0x7f0000000200), &(0x7f0000000140)=r5}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r7, &(0x7f0000000040)}, 0x20) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000005c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x4, 0x18, &(0x7f00000005c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)={0x1b, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5205, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5}, 0x50) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.32' (ED25519) to the list of known hosts. [ 76.418964][ T4260] cgroup: Unknown subsys name 'net' [ 76.525421][ T4260] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 78.064550][ T4260] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 79.402409][ T4274] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.411034][ T4274] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.419379][ T4274] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.427428][ T4274] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.435161][ T4274] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 79.442643][ T4274] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.479228][ T4274] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 79.488066][ T4274] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 79.496628][ T4274] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 79.504674][ T4274] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 79.513019][ T4274] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 79.521138][ T4274] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 79.573170][ T4274] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 79.581814][ T4274] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 79.589530][ T4274] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 79.599091][ T4274] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 79.606650][ T4274] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 79.615420][ T4274] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 79.665859][ T4276] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 79.674513][ T4276] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 79.682926][ T4276] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 79.691424][ T4276] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 79.699970][ T4276] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 79.710472][ T4276] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 79.718198][ T4276] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 79.750273][ T4283] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 79.758080][ T4283] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 79.768396][ T4283] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 79.786781][ T4287] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 79.794782][ T4287] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 80.070541][ T4273] chnl_net:caif_netlink_parms(): no params data found [ 80.117774][ T4279] chnl_net:caif_netlink_parms(): no params data found [ 80.226842][ T4277] chnl_net:caif_netlink_parms(): no params data found [ 80.276732][ T4282] chnl_net:caif_netlink_parms(): no params data found [ 80.363375][ T4273] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.371278][ T4273] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.380171][ T4273] device bridge_slave_0 entered promiscuous mode [ 80.397962][ T4279] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.405322][ T4279] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.414131][ T4279] device bridge_slave_0 entered promiscuous mode [ 80.429118][ T4273] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.436353][ T4273] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.445040][ T4273] device bridge_slave_1 entered promiscuous mode [ 80.453023][ T4281] chnl_net:caif_netlink_parms(): no params data found [ 80.468494][ T4279] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.475801][ T4279] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.484175][ T4279] device bridge_slave_1 entered promiscuous mode [ 80.548395][ T4273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.566056][ T4273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.605544][ T4279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.635466][ T4277] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.643801][ T4277] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.652566][ T4277] device bridge_slave_0 entered promiscuous mode [ 80.661996][ T4279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.681721][ T4273] team0: Port device team_slave_0 added [ 80.688030][ T4282] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.698183][ T4282] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.706950][ T4282] device bridge_slave_0 entered promiscuous mode [ 80.717624][ T4277] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.725161][ T4277] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.734033][ T4277] device bridge_slave_1 entered promiscuous mode [ 80.754820][ T4273] team0: Port device team_slave_1 added [ 80.764482][ T4282] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.771755][ T4282] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.780575][ T4282] device bridge_slave_1 entered promiscuous mode [ 80.832660][ T4281] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.840167][ T4281] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.848124][ T4281] device bridge_slave_0 entered promiscuous mode [ 80.864343][ T4281] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.871989][ T4281] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.880408][ T4281] device bridge_slave_1 entered promiscuous mode [ 80.891676][ T4279] team0: Port device team_slave_0 added [ 80.906808][ T4279] team0: Port device team_slave_1 added [ 80.925778][ T4277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.948874][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.955885][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.982741][ T4273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.996491][ T4282] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.009189][ T4282] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.023020][ T4277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.046094][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.053357][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.083342][ T4273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.126096][ T4279] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.133203][ T4279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.159410][ T4279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.174362][ T4281] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.186629][ T4281] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.213674][ T4282] team0: Port device team_slave_0 added [ 81.222019][ T4282] team0: Port device team_slave_1 added [ 81.228276][ T4279] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.235426][ T4279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.265830][ T4279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.301237][ T4277] team0: Port device team_slave_0 added [ 81.339603][ T4277] team0: Port device team_slave_1 added [ 81.358512][ T4273] device hsr_slave_0 entered promiscuous mode [ 81.365476][ T4273] device hsr_slave_1 entered promiscuous mode [ 81.375151][ T4281] team0: Port device team_slave_0 added [ 81.383592][ T4281] team0: Port device team_slave_1 added [ 81.389939][ T4282] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.396925][ T4282] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.423268][ T4282] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.459833][ T4279] device hsr_slave_0 entered promiscuous mode [ 81.466620][ T4279] device hsr_slave_1 entered promiscuous mode [ 81.474869][ T4279] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.482962][ T4279] Cannot create hsr debugfs directory [ 81.489445][ T4287] Bluetooth: hci0: command 0x0409 tx timeout [ 81.502848][ T4282] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.509933][ T4282] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.536412][ T4282] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.549024][ T4277] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.556016][ T4277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.582299][ T4277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.592949][ T4287] Bluetooth: hci1: command 0x0409 tx timeout [ 81.607848][ T4277] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.614999][ T4277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.640968][ T4277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.658748][ T4287] Bluetooth: hci2: command 0x0409 tx timeout [ 81.697661][ T4281] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.705122][ T4281] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.731480][ T4281] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.773438][ T4281] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.785592][ T4281] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.812404][ T4287] Bluetooth: hci4: command 0x0409 tx timeout [ 81.820037][ T4281] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.855274][ T4282] device hsr_slave_0 entered promiscuous mode [ 81.862377][ T4282] device hsr_slave_1 entered promiscuous mode [ 81.869298][ T4282] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.876867][ T4282] Cannot create hsr debugfs directory [ 81.888849][ T4274] Bluetooth: hci3: command 0x0409 tx timeout [ 81.953264][ T4277] device hsr_slave_0 entered promiscuous mode [ 81.960604][ T4277] device hsr_slave_1 entered promiscuous mode [ 81.967198][ T4277] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.975431][ T4277] Cannot create hsr debugfs directory [ 82.014733][ T4281] device hsr_slave_0 entered promiscuous mode [ 82.022397][ T4281] device hsr_slave_1 entered promiscuous mode [ 82.029520][ T4281] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.037135][ T4281] Cannot create hsr debugfs directory [ 82.285030][ T4279] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 82.324231][ T4279] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 82.355824][ T4279] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 82.385297][ T4279] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 82.423355][ T4273] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 82.434121][ T4273] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 82.449325][ T4273] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 82.461115][ T4273] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 82.544497][ T4277] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 82.555678][ T4277] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 82.565266][ T4277] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 82.588370][ T4279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.603731][ T4277] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 82.654122][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 82.664487][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 82.678969][ T4279] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.722518][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 82.735432][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 82.746819][ T29] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.754246][ T29] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.768566][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 82.778511][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.787829][ T29] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.794983][ T29] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.804056][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 82.823622][ T4281] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 82.862985][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 82.879678][ T4281] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 82.896921][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 82.915204][ T4273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.923687][ T4281] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.951673][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 82.961440][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 82.971131][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 82.980704][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 82.990121][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 83.000189][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 83.008896][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 83.017314][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 83.029784][ T4281] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 83.045176][ T4282] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 83.059616][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 83.068842][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 83.092084][ T4282] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 83.103993][ T4282] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 83.113344][ T4282] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 83.143273][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 83.152123][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 83.173657][ T4273] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.235954][ T4277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.256764][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 83.267391][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.277350][ T2950] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.284544][ T2950] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.296136][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 83.355531][ T4277] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.363832][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 83.373555][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 83.388242][ T2950] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.395460][ T2950] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.412579][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 83.422880][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 83.464474][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 83.492365][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 83.501835][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.519236][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.526368][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.536619][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 83.550026][ T4281] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.566322][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 83.574454][ T4274] Bluetooth: hci0: command 0x041b tx timeout [ 83.635561][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 83.649218][ T4274] Bluetooth: hci1: command 0x041b tx timeout [ 83.655863][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 83.670321][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.677505][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.686021][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 83.695981][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 83.705153][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 83.715331][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 83.724477][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 83.732695][ T4274] Bluetooth: hci2: command 0x041b tx timeout [ 83.740539][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 83.749321][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 83.758228][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 83.777532][ T4273] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 83.789806][ T4273] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 83.814323][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 83.823371][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 83.837315][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 83.857185][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 83.866527][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 83.881951][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 83.889982][ T4274] Bluetooth: hci4: command 0x041b tx timeout [ 83.904983][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 83.916284][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 83.925460][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 83.939588][ T4281] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.965679][ T4282] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.972511][ T4287] Bluetooth: hci3: command 0x041b tx timeout [ 84.003942][ T4277] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 84.015208][ T4277] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.029406][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 84.040578][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 84.055126][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 84.065269][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 84.080714][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 84.089531][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 84.097101][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 84.106578][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 84.136334][ T4279] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.159908][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 84.173298][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 84.183371][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 84.194319][ T2950] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.201518][ T2950] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.230825][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 84.241762][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 84.252139][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 84.262075][ T2950] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.269301][ T2950] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.289412][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 84.309763][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 84.329036][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 84.339439][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 84.351908][ T4282] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.435052][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 84.458116][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 84.471814][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 84.495054][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 84.504191][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 84.521046][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 84.536135][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 84.545255][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 84.554111][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 84.582633][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 84.591908][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 84.600853][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 84.610943][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 84.634192][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 84.642645][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 84.651042][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 84.663756][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 84.673298][ T2950] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.680496][ T2950] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.688471][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 84.699746][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 84.709334][ T2950] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.716594][ T2950] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.725797][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 84.735346][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 84.747457][ T4279] device veth0_vlan entered promiscuous mode [ 84.761532][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 84.786779][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 84.803229][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 84.815802][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 84.837725][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 84.895540][ T4279] device veth1_vlan entered promiscuous mode [ 84.918394][ T4282] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 84.936612][ T4282] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.955626][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 84.965646][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 84.984379][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 84.994859][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 85.007303][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 85.016941][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 85.033720][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 85.044209][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 85.057488][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 85.068082][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 85.088307][ T4273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.155286][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 85.168375][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 85.187296][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 85.202178][ T4277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.224372][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 85.241351][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 85.272408][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 85.289851][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 85.331864][ T4279] device veth0_macvtap entered promiscuous mode [ 85.359510][ T4279] device veth1_macvtap entered promiscuous mode [ 85.394800][ T4273] device veth0_vlan entered promiscuous mode [ 85.435471][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 85.459745][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 85.480151][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 85.509681][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 85.537539][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.559127][ T4273] device veth1_vlan entered promiscuous mode [ 85.579460][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 85.599482][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 85.607529][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 85.617743][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 85.633896][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 85.650209][ T4274] Bluetooth: hci0: command 0x040f tx timeout [ 85.663524][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.709775][ T4281] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.724665][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 85.739044][ T4274] Bluetooth: hci1: command 0x040f tx timeout [ 85.755317][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 85.774217][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 85.784874][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 85.800098][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 85.809176][ T4274] Bluetooth: hci2: command 0x040f tx timeout [ 85.823159][ T4279] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.833512][ T4279] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.850798][ T4279] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.863985][ T4279] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.915811][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 85.929554][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 85.949524][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 85.958403][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 85.969030][ T4287] Bluetooth: hci4: command 0x040f tx timeout [ 85.982300][ T4273] device veth0_macvtap entered promiscuous mode [ 86.042745][ T4281] device veth0_vlan entered promiscuous mode [ 86.049405][ T4287] Bluetooth: hci3: command 0x040f tx timeout [ 86.085855][ T4273] device veth1_macvtap entered promiscuous mode [ 86.101770][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 86.116281][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 86.126645][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 86.143357][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 86.155548][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 86.165966][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 86.202416][ T4282] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.237697][ T4281] device veth1_vlan entered promiscuous mode [ 86.250617][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 86.259804][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 86.267948][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 86.310194][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.328329][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.342169][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.373380][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 86.384245][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 86.394103][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 86.403120][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 86.415902][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.430282][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.442772][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.455953][ T4273] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.466648][ T4273] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.476295][ T4273] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.485303][ T4273] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.514201][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 86.524823][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 86.561344][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.566768][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 86.581262][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 86.590981][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.597348][ T4281] device veth0_macvtap entered promiscuous mode [ 86.633357][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 86.642122][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 86.655377][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 86.666246][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 86.706128][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 86.720430][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 86.732656][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 86.740677][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 86.754750][ T4281] device veth1_macvtap entered promiscuous mode [ 86.763744][ T4282] device veth0_vlan entered promiscuous mode [ 86.787402][ T33] cfg80211: failed to load regulatory.db [ 86.816479][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.843894][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.856910][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.869915][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.884266][ T4281] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.893751][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.920088][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.925835][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.948695][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.959955][ T4282] device veth1_vlan entered promiscuous mode [ 86.981979][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 86.998392][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 87.007057][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 87.021041][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 87.030540][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 87.041168][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 87.057111][ T4277] device veth0_vlan entered promiscuous mode [ 87.065466][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.076876][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.086995][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.103171][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.137596][ T4281] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.167216][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 87.184498][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 87.208075][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 87.230531][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 87.245699][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 87.268134][ T4281] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.277820][ T4281] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.287001][ T4281] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.297794][ T4281] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.313001][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.327656][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 87.336355][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 87.361049][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 87.371405][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.420793][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 87.459172][ T4282] device veth0_macvtap entered promiscuous mode [ 87.467196][ T4277] device veth1_vlan entered promiscuous mode [ 87.487758][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 87.507876][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 87.528007][ T4282] device veth1_macvtap entered promiscuous mode [ 87.627957][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.642964][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.654596][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.665152][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.678200][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.689432][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.716008][ T4282] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.729669][ T4287] Bluetooth: hci0: command 0x0419 tx timeout [ 87.758419][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 87.774719][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 87.788934][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.796816][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.809059][ T4287] Bluetooth: hci1: command 0x0419 tx timeout [ 87.818419][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.858628][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.872330][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.889920][ T4287] Bluetooth: hci2: command 0x0419 tx timeout [ 87.899167][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.911549][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.922472][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.937344][ T4282] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.960658][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 88.006536][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 88.023689][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 88.048944][ T4274] Bluetooth: hci4: command 0x0419 tx timeout [ 88.062452][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 88.076574][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 88.087714][ T4277] device veth0_macvtap entered promiscuous mode [ 88.108624][ C1] hrtimer: interrupt took 47667 ns [ 88.123388][ T4282] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.132699][ T4287] Bluetooth: hci3: command 0x0419 tx timeout [ 88.149634][ T4282] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.163793][ T4282] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.172801][ T4282] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.186778][ T4277] device veth1_macvtap entered promiscuous mode [ 88.251833][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.266365][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.286154][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.308561][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.324833][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.335726][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.351741][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.393275][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.442579][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.464585][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.496377][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.518947][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 88.551385][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 88.564925][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 88.573738][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 88.593241][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 88.628487][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.649764][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.667459][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.685703][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.697560][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.742931][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.755354][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.766333][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.781238][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.830059][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 88.845544][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 88.868870][ T4277] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.878168][ T4277] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.892532][ T4277] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.901691][ T4277] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.070868][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.103524][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.124523][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 89.157751][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.176674][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.211635][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.219916][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 89.279359][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.326878][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 89.387315][ T2950] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.406029][ T2950] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.476834][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 90.383958][ T4386] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5'. [ 90.463500][ T4386] bond0: (slave bond_slave_0): Releasing backup interface [ 90.605981][ T4386] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 90.663168][ T4394] netlink: 'syz.2.13': attribute type 8 has an invalid length. [ 90.704259][ T4394] netlink: 156 bytes leftover after parsing attributes in process `syz.2.13'. [ 90.825996][ T4394] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.13'. [ 91.580655][ T4394] syz.2.13 (4394) used greatest stack depth: 20688 bytes left [ 91.803232][ T4413] netlink: 'syz.2.17': attribute type 1 has an invalid length. [ 92.450617][ T4413] netlink: 'syz.2.17': attribute type 28 has an invalid length. [ 92.737760][ T4424] Zero length message leads to an empty skb [ 93.064284][ T4420] syz.0.19 (4420) used greatest stack depth: 16640 bytes left [ 107.133950][ T4287] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 107.143901][ T4287] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 107.152427][ T4287] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 107.163043][ T4287] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 107.171796][ T4287] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 107.190469][ T4287] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 107.485085][ T2927] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.642548][ T2927] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.771776][ T2927] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.884911][ T4464] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.34'. [ 107.934299][ T2927] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.968072][ T4456] chnl_net:caif_netlink_parms(): no params data found [ 108.443523][ T4456] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.462887][ T4456] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.536842][ T4456] device bridge_slave_0 entered promiscuous mode [ 108.631072][ T4456] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.638338][ T4456] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.664801][ T4456] device bridge_slave_1 entered promiscuous mode [ 109.048415][ T4456] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.101711][ T4456] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.248790][ T4274] Bluetooth: hci5: command 0x0409 tx timeout [ 109.362504][ T4495] netlink: 152 bytes leftover after parsing attributes in process `syz.1.41'. [ 109.393920][ T4495] bond0: (slave bond_slave_0): Releasing backup interface [ 109.556671][ T4287] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 109.568729][ T4287] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 109.577135][ T4283] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 109.585494][ T4283] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 109.593372][ T4283] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 109.601197][ T4283] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 109.675775][ T4495] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 109.912912][ T4509] syz.1.43 uses obsolete (PF_INET,SOCK_PACKET) [ 110.137045][ T4456] team0: Port device team_slave_0 added [ 110.496635][ T4456] team0: Port device team_slave_1 added [ 110.523967][ T4524] netlink: 128 bytes leftover after parsing attributes in process `syz.3.44'. [ 110.564452][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 110.600324][ T4524] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 110.777571][ T4456] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.790482][ T4456] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.864690][ T4456] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.888212][ T4456] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.932632][ T4456] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.024801][ T4456] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.325783][ T4456] device hsr_slave_0 entered promiscuous mode [ 111.332250][ T4274] Bluetooth: hci5: command 0x041b tx timeout [ 111.367852][ T4456] device hsr_slave_1 entered promiscuous mode [ 111.385884][ T4456] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 111.395092][ T4456] Cannot create hsr debugfs directory [ 111.649174][ T4274] Bluetooth: hci1: command 0x0409 tx timeout [ 111.981220][ T4503] chnl_net:caif_netlink_parms(): no params data found [ 112.449222][ T4562] netlink: 5427 bytes leftover after parsing attributes in process `syz.1.55'. [ 112.490577][ T4562] netlink: 52477 bytes leftover after parsing attributes in process `syz.1.55'. [ 112.509447][ T4562] netlink: 71676 bytes leftover after parsing attributes in process `syz.1.55'. [ 112.527097][ T4559] netlink: 'syz.3.54': attribute type 29 has an invalid length. [ 112.557482][ T4561] delete_channel: no stack [ 112.609145][ T2927] device hsr_slave_0 left promiscuous mode [ 112.626567][ T2927] device hsr_slave_1 left promiscuous mode [ 112.677129][ T2927] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.689269][ T2927] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 112.710863][ T2927] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.727651][ T2927] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 112.746885][ T2927] device bridge_slave_1 left promiscuous mode [ 112.764878][ T4564] netlink: 'syz.3.54': attribute type 3 has an invalid length. [ 112.775211][ T2927] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.797312][ T2927] device bridge_slave_0 left promiscuous mode [ 112.804995][ T4564] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.54'. [ 112.814987][ T2927] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.874267][ T2927] device veth1_macvtap left promiscuous mode [ 112.885475][ T2927] device veth0_macvtap left promiscuous mode [ 112.897851][ T2927] device veth1_vlan left promiscuous mode [ 112.913860][ T2927] device veth0_vlan left promiscuous mode [ 113.415195][ T4274] Bluetooth: hci5: command 0x040f tx timeout [ 113.728797][ T4274] Bluetooth: hci1: command 0x041b tx timeout [ 113.991681][ T2927] team0 (unregistering): Port device team_slave_1 removed [ 114.069800][ T2927] team0 (unregistering): Port device team_slave_0 removed [ 114.109724][ T2927] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 114.628961][ T2927] bond0 (unregistering): Released all slaves [ 114.741649][ T4559] netlink: 'syz.3.54': attribute type 29 has an invalid length. [ 114.899901][ T4503] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.907148][ T4503] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.949791][ T4503] device bridge_slave_0 entered promiscuous mode [ 115.012234][ T4503] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.052836][ T4503] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.075819][ T4503] device bridge_slave_1 entered promiscuous mode [ 115.200019][ T4503] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 115.227081][ T4456] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 115.263475][ T4503] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 115.320143][ T4456] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 115.383755][ T4456] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 115.442982][ T4456] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 115.464746][ T4503] team0: Port device team_slave_0 added [ 115.489237][ T4274] Bluetooth: hci5: command 0x0419 tx timeout [ 115.541146][ T4503] team0: Port device team_slave_1 added [ 115.624807][ T4503] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 115.641360][ T4503] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.742634][ T4503] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 115.803358][ T4503] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 115.811268][ T4274] Bluetooth: hci1: command 0x040f tx timeout [ 115.831312][ T4503] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.968787][ T4503] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 116.224363][ T4503] device hsr_slave_0 entered promiscuous mode [ 116.260874][ T4503] device hsr_slave_1 entered promiscuous mode [ 116.308040][ T4503] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 116.319942][ T4503] Cannot create hsr debugfs directory [ 116.412933][ T2927] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.701471][ T2927] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.907298][ T2927] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.977222][ T4456] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.138265][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 117.156826][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 117.353209][ T2927] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.370587][ T4456] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.434879][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 117.451964][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 117.493978][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.501237][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.567963][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 117.665871][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 117.711702][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 117.721157][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.728334][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.824927][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 117.854359][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 117.880177][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 117.889346][ T4274] Bluetooth: hci1: command 0x0419 tx timeout [ 117.950724][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 118.084809][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 118.102498][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 118.119560][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 118.128526][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 118.159498][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 118.196485][ T4456] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 118.237219][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 118.272271][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 118.296623][ T4642] netlink: 'syz.1.68': attribute type 29 has an invalid length. [ 118.305300][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 118.404569][ T4642] netlink: 'syz.1.68': attribute type 29 has an invalid length. [ 118.547770][ T4503] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 118.608245][ T4642] netlink: 'syz.1.68': attribute type 3 has an invalid length. [ 118.618616][ T4503] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 118.659111][ T4642] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.68'. [ 118.798776][ T4503] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 118.817625][ T4503] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 119.052724][ T4664] FAULT_INJECTION: forcing a failure. [ 119.052724][ T4664] name failslab, interval 1, probability 0, space 0, times 1 [ 119.178922][ T4664] CPU: 0 PID: 4664 Comm: syz.3.79 Not tainted syzkaller #0 [ 119.186312][ T4664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 119.196436][ T4664] Call Trace: [ 119.199769][ T4664] [ 119.202778][ T4664] dump_stack_lvl+0x188/0x24e [ 119.207579][ T4664] ? show_regs_print_info+0x12/0x12 [ 119.212868][ T4664] ? load_image+0x410/0x410 [ 119.217949][ T4664] ? __might_sleep+0xd0/0xd0 [ 119.222587][ T4664] ? __lock_acquire+0x7c40/0x7c40 [ 119.227667][ T4664] should_fail_ex+0x390/0x4c0 [ 119.232409][ T4664] should_failslab+0x5/0x20 [ 119.236964][ T4664] slab_pre_alloc_hook+0x59/0x300 [ 119.242039][ T4664] ? tomoyo_encode+0x28a/0x550 [ 119.246855][ T4664] __kmem_cache_alloc_node+0x4f/0x270 [ 119.252255][ T4664] ? tomoyo_encode+0x28a/0x550 [ 119.257044][ T4664] __kmalloc+0xa3/0x240 [ 119.261269][ T4664] tomoyo_encode+0x28a/0x550 [ 119.265892][ T4664] tomoyo_realpath_from_path+0x578/0x5c0 [ 119.271560][ T4664] ? tomoyo_domain+0xd2/0x120 [ 119.276287][ T4664] ? tomoyo_path_number_perm+0x205/0x650 [ 119.282486][ T4664] tomoyo_path_number_perm+0x22f/0x650 [ 119.287985][ T4664] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 119.293484][ T4664] ? ksys_write+0x1ce/0x260 [ 119.298029][ T4664] ? common_file_perm+0x171/0x1c0 [ 119.303126][ T4664] ? __fget_files+0x28/0x460 [ 119.307763][ T4664] security_file_ioctl+0x6c/0xa0 [ 119.312736][ T4664] __se_sys_ioctl+0x48/0x170 [ 119.317360][ T4664] do_syscall_64+0x4c/0xa0 [ 119.321816][ T4664] ? clear_bhb_loop+0x60/0xb0 [ 119.326522][ T4664] ? clear_bhb_loop+0x60/0xb0 [ 119.331314][ T4664] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 119.337260][ T4664] RIP: 0033:0x7f91e619e159 [ 119.341708][ T4664] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 119.361377][ T4664] RSP: 002b:00007f91e70a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 119.369824][ T4664] RAX: ffffffffffffffda RBX: 00007f91e6426090 RCX: 00007f91e619e159 [ 119.378020][ T4664] RDX: 0000200000001200 RSI: 0000000080047441 RDI: 0000000000000004 [ 119.386023][ T4664] RBP: 00007f91e70a7090 R08: 0000000000000000 R09: 0000000000000000 [ 119.394019][ T4664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 119.402022][ T4664] R13: 00007f91e6426128 R14: 00007f91e6426090 R15: 00007ffe95e4b178 [ 119.410033][ T4664] [ 119.662970][ T4664] ERROR: Out of memory at tomoyo_realpath_from_path. [ 119.802117][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 119.822162][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 119.891532][ T4456] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.983351][ T4503] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.217476][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 120.251268][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 120.333076][ T4503] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.389641][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 120.409881][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 120.440838][ T4505] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.448028][ T4505] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.499773][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 120.525272][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 120.549839][ T4505] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.557034][ T4505] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.668230][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 120.685469][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 120.723076][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 121.013338][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 121.039922][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 121.077724][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 121.152249][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 121.202820][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 121.223471][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 121.242491][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 121.423665][ T4503] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 121.469107][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 121.498736][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 121.517411][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 121.642834][ T2927] device hsr_slave_0 left promiscuous mode [ 121.696287][ T2927] device hsr_slave_1 left promiscuous mode [ 121.714611][ T2927] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 121.758837][ T2927] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 121.795189][ T2927] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 121.817634][ T2927] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 121.873897][ T2927] device bridge_slave_1 left promiscuous mode [ 121.889239][ T2927] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.905544][ T2927] device bridge_slave_0 left promiscuous mode [ 121.911959][ T2927] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.079702][ T2927] device veth1_macvtap left promiscuous mode [ 122.085839][ T2927] device veth0_macvtap left promiscuous mode [ 122.114676][ T2927] device veth1_vlan left promiscuous mode [ 122.143275][ T2927] device veth0_vlan left promiscuous mode [ 122.392547][ T4723] netlink: 'syz.2.80': attribute type 29 has an invalid length. [ 122.657065][ T4725] netlink: 'syz.2.80': attribute type 3 has an invalid length. [ 122.675541][ T4725] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.80'. [ 123.592308][ T2927] team0 (unregistering): Port device team_slave_1 removed [ 123.669378][ T2927] team0 (unregistering): Port device team_slave_0 removed [ 123.708891][ T2927] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 123.755519][ T2927] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 124.205049][ T2927] bond0 (unregistering): Released all slaves [ 124.349281][ T4723] netlink: 'syz.2.80': attribute type 29 has an invalid length. [ 124.443653][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 124.475422][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 124.570046][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 124.585235][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 124.643064][ T4456] device veth0_vlan entered promiscuous mode [ 124.682118][ T4456] device veth1_vlan entered promiscuous mode [ 124.738345][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 124.755923][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 124.800247][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 124.910061][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 124.929451][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 124.947200][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 124.993410][ T4456] device veth0_macvtap entered promiscuous mode [ 125.004975][ T4456] device veth1_macvtap entered promiscuous mode [ 125.063527][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 125.090346][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 125.119103][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 125.126982][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 125.179214][ T4456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.218741][ T4456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.248739][ T4456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.278707][ T4456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.318719][ T4456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.348645][ T4456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.380608][ T4456] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.394112][ T4503] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.436059][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 125.455808][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 125.499495][ T4456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.539480][ T4456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.574529][ T4456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.614549][ T4456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.648919][ T4456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.678607][ T4456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.726869][ T4456] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.929378][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 125.964024][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 126.045303][ T4456] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.061146][ T4756] FAULT_INJECTION: forcing a failure. [ 126.061146][ T4756] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 126.081962][ T4456] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.136689][ T4456] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.169115][ T4456] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.219199][ T4756] CPU: 0 PID: 4756 Comm: syz.2.84 Not tainted syzkaller #0 [ 126.226841][ T4756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 126.236923][ T4756] Call Trace: [ 126.240235][ T4756] [ 126.243194][ T4756] dump_stack_lvl+0x188/0x24e [ 126.247913][ T4756] ? show_regs_print_info+0x12/0x12 [ 126.253136][ T4756] ? load_image+0x410/0x410 [ 126.257708][ T4756] ? __lock_acquire+0x7c40/0x7c40 [ 126.262806][ T4756] should_fail_ex+0x390/0x4c0 [ 126.267797][ T4756] prepare_alloc_pages+0x1e1/0x5b0 [ 126.272978][ T4756] __alloc_pages+0x130/0x4f0 [ 126.277624][ T4756] ? zone_statistics+0x170/0x170 [ 126.282808][ T4756] ? verify_lock_unused+0x140/0x140 [ 126.288049][ T4756] ? __lock_acquire+0x138a/0x7c40 [ 126.293108][ T4756] ? verify_lock_unused+0x140/0x140 [ 126.298375][ T4756] __folio_alloc+0xe/0x30 [ 126.302742][ T4756] vma_alloc_folio+0x499/0x900 [ 126.307545][ T4756] wp_page_copy+0x24b/0x1660 [ 126.312170][ T4756] ? __lock_acquire+0x7c40/0x7c40 [ 126.317230][ T4756] ? fault_dirty_shared_page+0x3c0/0x3c0 [ 126.322889][ T4756] ? do_raw_spin_unlock+0x11d/0x230 [ 126.328118][ T4756] ? _raw_spin_unlock+0x24/0x40 [ 126.333003][ T4756] ? do_wp_page+0x678/0x16b0 [ 126.337656][ T4756] handle_mm_fault+0x1b1b/0x3d40 [ 126.342657][ T4756] ? numa_migrate_prep+0x250/0x250 [ 126.347812][ T4756] ? lock_chain_count+0x20/0x20 [ 126.352721][ T4756] ? lock_mm_and_find_vma+0xae/0x2f0 [ 126.358034][ T4756] do_user_addr_fault+0x58e/0xb20 [ 126.363102][ T4756] exc_page_fault+0x60/0x100 [ 126.367717][ T4756] ? __might_fault+0xa6/0x120 [ 126.372422][ T4756] asm_exc_page_fault+0x22/0x30 [ 126.377302][ T4756] RIP: 0010:__put_user_nocheck_4+0x3/0x11 [ 126.383052][ T4756] Code: 00 00 48 39 d9 73 54 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 90 90 90 90 90 48 bb fd ef ff ff ff 7f 00 00 48 39 d9 73 34 0f 01 cb <89> 01 31 c9 0f 01 ca c3 90 90 90 90 90 90 48 bb f9 ef ff ff ff 7f [ 126.402706][ T4756] RSP: 0018:ffffc900040ffd98 EFLAGS: 00050297 [ 126.408817][ T4756] RAX: 0000000000000000 RBX: 00007fffffffeffd RCX: 0000200000001200 [ 126.416812][ T4756] RDX: 0000000000000001 RSI: ffffffff8a8c2a20 RDI: ffffffff8adf68a0 [ 126.424805][ T4756] RBP: ffffc900040ffed8 R08: ffffffff8e20b46f R09: 1ffffffff1c4168d [ 126.432822][ T4756] R10: dffffc0000000000 R11: fffffbfff1c4168e R12: 0000000080047441 [ 126.440851][ T4756] R13: dffffc0000000000 R14: 0000000000000001 R15: 1ffff1100fbe76b5 [ 126.448869][ T4756] ppp_ioctl+0xf07/0x1b20 [ 126.453242][ T4756] ? ppp_poll+0x250/0x250 [ 126.457596][ T4756] ? __fget_files+0x28/0x460 [ 126.462227][ T4756] ? bpf_lsm_file_ioctl+0x5/0x10 [ 126.467194][ T4756] ? security_file_ioctl+0x7c/0xa0 [ 126.472440][ T4756] ? ppp_poll+0x250/0x250 [ 126.476794][ T4756] __se_sys_ioctl+0xfa/0x170 [ 126.481416][ T4756] do_syscall_64+0x4c/0xa0 [ 126.485861][ T4756] ? clear_bhb_loop+0x60/0xb0 [ 126.490555][ T4756] ? clear_bhb_loop+0x60/0xb0 [ 126.495348][ T4756] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 126.501272][ T4756] RIP: 0033:0x7fb2bd79e159 [ 126.505718][ T4756] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.525342][ T4756] RSP: 002b:00007fb2be649028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 126.533779][ T4756] RAX: ffffffffffffffda RBX: 00007fb2bda26180 RCX: 00007fb2bd79e159 [ 126.541780][ T4756] RDX: 0000200000001200 RSI: 0000000080047441 RDI: 0000000000000004 [ 126.549791][ T4756] RBP: 00007fb2be649090 R08: 0000000000000000 R09: 0000000000000000 [ 126.557783][ T4756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 126.565777][ T4756] R13: 00007fb2bda26218 R14: 00007fb2bda26180 R15: 00007fff0373f978 [ 126.573806][ T4756] [ 126.981846][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.013064][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.047482][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 127.085986][ T2950] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.099331][ T2950] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.107526][ T2927] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 127.516366][ T4780] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.90'. [ 128.121793][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 128.163381][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 128.241670][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 128.262891][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 128.337181][ T4503] device veth0_vlan entered promiscuous mode [ 128.369469][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 128.404733][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 128.433122][ T4503] device veth1_vlan entered promiscuous mode [ 128.473868][ T4274] Bluetooth: hci3: ISO packet for unknown connection handle 2622 [ 128.569639][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 128.583744][ T4799] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.92'. [ 128.631265][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 128.670804][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 128.713677][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 128.744121][ T4503] device veth0_macvtap entered promiscuous mode [ 128.788508][ T4503] device veth1_macvtap entered promiscuous mode [ 128.907703][ T4503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.971572][ T4503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.046123][ T4503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.096483][ T4503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.134257][ T4503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.190667][ T4826] netlink: 'syz.3.98': attribute type 3 has an invalid length. [ 129.198304][ T4826] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.98'. [ 129.225070][ T4503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.305455][ T4503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.350020][ T4503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.371160][ T4824] netlink: 'syz.2.97': attribute type 8 has an invalid length. [ 129.397515][ T4503] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 129.427937][ T4821] netlink: 'syz.3.98': attribute type 21 has an invalid length. [ 129.477864][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 129.519913][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 129.561386][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 129.615628][ T4824] netlink: 'syz.2.97': attribute type 2 has an invalid length. [ 129.628727][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 129.659141][ T4824] netlink: 199848 bytes leftover after parsing attributes in process `syz.2.97'. [ 129.697251][ T4503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.759732][ T4503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.798718][ T4503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.848678][ T4503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.886360][ T4503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.914989][ T4503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.937740][ T4503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.955846][ T4503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.997466][ T4503] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 130.065269][ T4503] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.103985][ T4503] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.169014][ T4503] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.231067][ T4503] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.316129][ T2927] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 130.342549][ T2927] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 131.934209][ T29] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.948864][ T29] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.012829][ T2927] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 132.067566][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.087854][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.223238][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 132.420043][ T4858] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 132.452471][ T4858] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 132.852989][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.859828][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.378482][ T4882] netlink: 'syz.2.109': attribute type 3 has an invalid length. [ 133.429334][ T4882] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.109'. [ 136.443141][ T4914] netlink: 'syz.3.110': attribute type 21 has an invalid length. [ 136.532404][ T4914] netlink: 16154 bytes leftover after parsing attributes in process `syz.3.110'. [ 136.602468][ T4922] netlink: 'syz.5.112': attribute type 8 has an invalid length. [ 136.770541][ T4922] netlink: 'syz.5.112': attribute type 2 has an invalid length. [ 136.849138][ T4922] netlink: 198692 bytes leftover after parsing attributes in process `syz.5.112'. [ 136.922883][ T4933] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.115'. [ 137.046714][ T4936] delete_channel: no stack [ 137.054264][ T4935] netlink: 'syz.1.115': attribute type 2 has an invalid length. [ 137.396416][ T4941] delete_channel: no stack [ 137.411183][ T4941] delete_channel: no stack [ 138.416678][ T4969] netlink: 'syz.5.126': attribute type 25 has an invalid length. [ 138.628451][ T4969] netlink: 'syz.5.126': attribute type 28 has an invalid length. [ 139.677376][ T5005] netlink: 'syz.2.132': attribute type 3 has an invalid length. [ 139.783611][ T5005] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.132'. [ 139.975402][ T5007] netlink: 'syz.2.132': attribute type 21 has an invalid length. [ 140.024575][ T5007] netlink: 128 bytes leftover after parsing attributes in process `syz.2.132'. [ 140.101705][ T5007] netlink: 'syz.2.132': attribute type 4 has an invalid length. [ 140.135340][ T5007] netlink: 3 bytes leftover after parsing attributes in process `syz.2.132'. [ 143.013707][ T5050] netlink: 60 bytes leftover after parsing attributes in process `syz.3.140'. [ 143.066823][ T5050] netlink: 60 bytes leftover after parsing attributes in process `syz.3.140'. [ 143.978680][ T5051] netlink: 60 bytes leftover after parsing attributes in process `syz.3.140'. [ 147.959048][ T5154] netlink: 'syz.5.157': attribute type 10 has an invalid length. [ 147.970692][ T5153] Driver unsupported XDP return value 0 on prog (id 106) dev N/A, expect packet loss! [ 148.030607][ T5154] netlink: 40 bytes leftover after parsing attributes in process `syz.5.157'. [ 148.116568][ T5154] batman_adv: batadv0: Adding interface: virt_wifi0 [ 148.161862][ T5154] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.286048][ T5154] batman_adv: batadv0: Interface activated: virt_wifi0 [ 148.328177][ T5158] netlink: 'syz.3.159': attribute type 6 has an invalid length. [ 149.218889][ T5185] netlink: 132 bytes leftover after parsing attributes in process `syz.6.162'. [ 150.092863][ T4274] Bluetooth: hci2: ISO packet for unknown connection handle 3843 [ 150.441094][ T5216] netlink: 128 bytes leftover after parsing attributes in process `syz.5.171'. [ 150.457154][ T5216] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 150.505139][ T5220] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 150.546738][ T5215] netlink: 128 bytes leftover after parsing attributes in process `syz.5.171'. [ 150.579587][ T5215] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 151.551511][ T5256] netlink: 14 bytes leftover after parsing attributes in process `syz.1.179'. [ 152.124567][ T5256] device hsr_slave_0 left promiscuous mode [ 152.541586][ T5256] device hsr_slave_1 left promiscuous mode [ 152.767141][ T5255] netlink: 14 bytes leftover after parsing attributes in process `syz.1.179'. [ 153.225699][ T5288] netlink: 'syz.3.186': attribute type 10 has an invalid length. [ 153.266009][ T5288] netlink: 55 bytes leftover after parsing attributes in process `syz.3.186'. [ 153.850476][ T5301] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 157.773205][ T5387] netlink: 10 bytes leftover after parsing attributes in process `syz.6.201'. [ 157.854723][ T5388] netlink: 'syz.6.201': attribute type 7 has an invalid length. [ 161.454194][ T5401] netlink: 'syz.1.205': attribute type 12 has an invalid length. [ 161.464522][ T5401] netlink: 132 bytes leftover after parsing attributes in process `syz.1.205'. [ 162.611015][ T5438] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.213'. [ 163.060509][ T5434] netlink: 'syz.6.214': attribute type 21 has an invalid length. [ 163.109840][ T5441] netlink: 'syz.3.215': attribute type 11 has an invalid length. [ 163.110215][ T5434] netlink: 156 bytes leftover after parsing attributes in process `syz.6.214'. [ 163.176328][ T5444] netlink: 'syz.3.215': attribute type 2 has an invalid length. [ 163.218683][ T5444] netlink: 'syz.3.215': attribute type 8 has an invalid length. [ 163.257238][ T5444] netlink: 132 bytes leftover after parsing attributes in process `syz.3.215'. [ 163.342272][ T5449] netlink: 'syz.3.215': attribute type 2 has an invalid length. [ 163.391476][ T5449] netlink: 'syz.3.215': attribute type 8 has an invalid length. [ 163.428608][ T5449] netlink: 132 bytes leftover after parsing attributes in process `syz.3.215'. [ 163.683599][ T5461] netlink: 'syz.2.217': attribute type 28 has an invalid length. [ 164.000576][ T5465] tipc: Started in network mode [ 164.005902][ T5465] tipc: Node identity 9215a268, cluster identity 4711 [ 164.032689][ T5465] tipc: Node number set to 2450891368 [ 167.029256][ T5481] netlink: 'syz.5.222': attribute type 21 has an invalid length. [ 167.536350][ T5502] netlink: 'syz.5.229': attribute type 10 has an invalid length. [ 167.810561][ T5502] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 169.769113][ T5559] netlink: 'syz.2.235': attribute type 1 has an invalid length. [ 169.798782][ T5559] netlink: 4 bytes leftover after parsing attributes in process `syz.2.235'. [ 170.204782][ T5583] netlink: 'syz.5.241': attribute type 28 has an invalid length. [ 171.086231][ T5605] netlink: 'syz.6.245': attribute type 3 has an invalid length. [ 171.161330][ T5605] netlink: 132 bytes leftover after parsing attributes in process `syz.6.245'. [ 171.187387][ T5609] netlink: 'syz.3.247': attribute type 21 has an invalid length. [ 172.242019][ T5637] netlink: 'syz.3.255': attribute type 9 has an invalid length. [ 172.395828][ T5637] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.255'. [ 174.577486][ T5698] netlink: 'syz.6.268': attribute type 1 has an invalid length. [ 174.630117][ T5698] netlink: 60387 bytes leftover after parsing attributes in process `syz.6.268'. [ 174.736846][ T5704] netlink: 202920 bytes leftover after parsing attributes in process `syz.5.270'. [ 174.943916][ T5707] device syzkaller0 entered promiscuous mode [ 174.969682][ T5708] netlink: 'syz.3.273': attribute type 2 has an invalid length. [ 174.977540][ T5708] netlink: 119 bytes leftover after parsing attributes in process `syz.3.273'. [ 175.883837][ T5719] delete_channel: no stack [ 178.704679][ T5723] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 178.720138][ T5723] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 178.738691][ T5723] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 179.341682][ T5770] netlink: 8 bytes leftover after parsing attributes in process `syz.5.287'. [ 179.367493][ T5770] netlink: 4 bytes leftover after parsing attributes in process `syz.5.287'. [ 179.436880][ T5770] netlink: 33 bytes leftover after parsing attributes in process `syz.5.287'. [ 179.513469][ T5770] netlink: 4 bytes leftover after parsing attributes in process `syz.5.287'. [ 179.537556][ T5770] netlink: 33 bytes leftover after parsing attributes in process `syz.5.287'. [ 179.555370][ T5773] netlink: 'syz.6.288': attribute type 2 has an invalid length. [ 179.573354][ T5770] netlink: 4 bytes leftover after parsing attributes in process `syz.5.287'. [ 179.599233][ T5770] netlink: 33 bytes leftover after parsing attributes in process `syz.5.287'. [ 181.848991][ T5803] netlink: 168864 bytes leftover after parsing attributes in process `syz.5.293'. [ 181.905302][ T5806] netlink: 'syz.1.294': attribute type 21 has an invalid length. [ 181.928077][ T5803] netlink: zone id is out of range [ 181.956658][ T5803] netlink: zone id is out of range [ 182.033710][ T5806] netlink: 128 bytes leftover after parsing attributes in process `syz.1.294'. [ 182.246575][ T5806] netlink: 3 bytes leftover after parsing attributes in process `syz.1.294'. [ 182.276548][ T5803] netlink: del zone limit has 4 unknown bytes [ 182.792864][ T5831] netlink: 'syz.1.297': attribute type 29 has an invalid length. [ 182.861264][ T5831] netlink: 'syz.1.297': attribute type 29 has an invalid length. [ 182.964746][ T5830] netlink: 'syz.1.297': attribute type 29 has an invalid length. [ 183.003332][ T5832] netlink: 'syz.1.297': attribute type 29 has an invalid length. [ 183.192110][ T5861] netlink: 'syz.3.301': attribute type 2 has an invalid length. [ 183.229856][ T5857] netlink: 'syz.2.302': attribute type 39 has an invalid length. [ 184.393449][ T5891] netlink: 'syz.3.308': attribute type 10 has an invalid length. [ 184.677355][ T5891] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 185.220754][ T5903] netlink: 'syz.2.311': attribute type 10 has an invalid length. [ 185.823643][ T5903] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 185.884798][ T5905] netlink: 14 bytes leftover after parsing attributes in process `syz.2.311'. [ 186.079907][ T5905] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 186.126265][ T5905] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 186.167984][ T5905] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 186.205015][ T5905] bond0 (unregistering): Released all slaves [ 186.239135][ T5913] netlink: 'syz.3.313': attribute type 10 has an invalid length. [ 186.265386][ T5913] device veth0_macvtap left promiscuous mode [ 186.866434][ T5931] syzkaller1: tun_chr_ioctl cmd 21731 [ 187.235694][ T5942] netlink: 'syz.3.319': attribute type 25 has an invalid length. [ 187.270868][ T5942] netlink: 'syz.3.319': attribute type 29 has an invalid length. [ 189.480289][ T5977] netlink: 'syz.5.327': attribute type 29 has an invalid length. [ 189.536013][ T5977] netlink: 'syz.5.327': attribute type 29 has an invalid length. [ 189.600019][ T5977] netlink: 'syz.5.327': attribute type 29 has an invalid length. [ 191.515175][ T6037] netlink: 'syz.1.341': attribute type 10 has an invalid length. [ 191.558064][ T6037] device veth0_macvtap left promiscuous mode [ 191.921318][ T6050] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.343'. [ 193.031688][ T6080] netlink: 'syz.2.351': attribute type 25 has an invalid length. [ 193.054055][ T6080] netlink: 'syz.2.351': attribute type 29 has an invalid length. [ 194.293865][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.300352][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.546754][ T6161] netlink: 128 bytes leftover after parsing attributes in process `syz.2.365'. [ 196.586705][ T6161] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 196.654608][ T6167] delete_channel: no stack [ 196.679548][ T6161] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 196.728933][ T6167] delete_channel: no stack [ 196.744619][ T6155] netlink: 'syz.6.360': attribute type 10 has an invalid length. [ 196.763704][ T6155] device veth0_macvtap left promiscuous mode [ 196.901071][ T6167] delete_channel: no stack [ 196.905873][ T6167] delete_channel: no stack [ 196.981474][ T6171] netlink: 'syz.2.365': attribute type 25 has an invalid length. [ 196.990352][ T6171] netlink: 'syz.2.365': attribute type 9 has an invalid length. [ 196.998457][ T6171] netlink: 40 bytes leftover after parsing attributes in process `syz.2.365'. [ 197.014846][ T6173] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 197.025001][ T6173] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 197.038428][ T6173] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 197.065624][ T6173] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 197.271098][ T6180] netlink: 'syz.2.365': attribute type 25 has an invalid length. [ 197.294437][ T6180] netlink: 'syz.2.365': attribute type 9 has an invalid length. [ 197.310787][ T6180] netlink: 40 bytes leftover after parsing attributes in process `syz.2.365'. [ 197.579591][ T6200] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.587760][ T6200] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.466073][ T6212] netlink: 'syz.1.372': attribute type 25 has an invalid length. [ 198.482342][ T6212] netlink: 'syz.1.372': attribute type 29 has an invalid length. [ 198.525713][ T6218] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 198.535376][ T6218] syzkaller1: linktype set to 773 [ 198.551947][ T6219] Q6\bY4: renamed from lo [ 198.811800][ T6229] device syzkaller0 entered promiscuous mode [ 202.427749][ T6245] netlink: 'syz.2.379': attribute type 10 has an invalid length. [ 202.436490][ T6245] device veth0_macvtap left promiscuous mode [ 202.531440][ T6281] netlink: 'syz.1.385': attribute type 10 has an invalid length. [ 202.583404][ T6281] team0: Port device hsr_slave_0 added [ 202.636070][ T6285] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.386'. [ 202.817173][ T6293] FAULT_INJECTION: forcing a failure. [ 202.817173][ T6293] name failslab, interval 1, probability 0, space 0, times 0 [ 202.912305][ T6293] CPU: 0 PID: 6293 Comm: syz.6.389 Not tainted syzkaller #0 [ 202.919722][ T6293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 202.929856][ T6293] Call Trace: [ 202.933234][ T6293] [ 202.936236][ T6293] dump_stack_lvl+0x188/0x24e [ 202.941048][ T6293] ? show_regs_print_info+0x12/0x12 [ 202.946430][ T6293] ? load_image+0x410/0x410 [ 202.951044][ T6293] ? __might_sleep+0xd0/0xd0 [ 202.955721][ T6293] ? __lock_acquire+0x7c40/0x7c40 [ 202.960862][ T6293] should_fail_ex+0x390/0x4c0 [ 202.965667][ T6293] should_failslab+0x5/0x20 [ 202.970246][ T6293] slab_pre_alloc_hook+0x59/0x300 [ 202.975440][ T6293] ? __lock_acquire+0x138a/0x7c40 [ 202.980591][ T6293] ? tomoyo_realpath_from_path+0xe2/0x5c0 [ 202.986432][ T6293] __kmem_cache_alloc_node+0x4f/0x270 [ 202.991918][ T6293] ? tomoyo_realpath_from_path+0xe2/0x5c0 [ 202.997720][ T6293] __kmalloc+0xa3/0x240 [ 203.001996][ T6293] tomoyo_realpath_from_path+0xe2/0x5c0 [ 203.007654][ T6293] ? tomoyo_domain+0xd2/0x120 [ 203.012440][ T6293] ? tomoyo_path_number_perm+0x205/0x650 [ 203.018167][ T6293] tomoyo_path_number_perm+0x22f/0x650 [ 203.023728][ T6293] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 203.029284][ T6293] ? ksys_write+0x1ce/0x260 [ 203.033885][ T6293] ? common_file_perm+0x171/0x1c0 [ 203.039181][ T6293] ? __fget_files+0x28/0x460 [ 203.043951][ T6293] security_file_ioctl+0x6c/0xa0 [ 203.048992][ T6293] __se_sys_ioctl+0x48/0x170 [ 203.053706][ T6293] do_syscall_64+0x4c/0xa0 [ 203.058201][ T6293] ? clear_bhb_loop+0x60/0xb0 [ 203.062947][ T6293] ? clear_bhb_loop+0x60/0xb0 [ 203.067710][ T6293] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 203.073684][ T6293] RIP: 0033:0x7f9fa159e159 [ 203.078172][ T6293] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 203.097851][ T6293] RSP: 002b:00007f9fa2517028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 203.106350][ T6293] RAX: ffffffffffffffda RBX: 00007f9fa1825fa0 RCX: 00007f9fa159e159 [ 203.114395][ T6293] RDX: 0000000000000000 RSI: 000000004010744d RDI: 0000000000000003 [ 203.122478][ T6293] RBP: 00007f9fa2517090 R08: 0000000000000000 R09: 0000000000000000 [ 203.130530][ T6293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 203.138576][ T6293] R13: 00007f9fa1826038 R14: 00007f9fa1825fa0 R15: 00007ffe27d1e2a8 [ 203.146693][ T6293] [ 203.561058][ T6293] ERROR: Out of memory at tomoyo_realpath_from_path. [ 204.220011][ T6311] netlink: 188 bytes leftover after parsing attributes in process `syz.3.394'. [ 206.616003][ T4283] Bluetooth: hci0: command 0x0406 tx timeout [ 206.622331][ T4274] Bluetooth: hci2: command 0x0406 tx timeout [ 206.622367][ T4287] Bluetooth: hci3: command 0x0406 tx timeout [ 207.911022][ T6363] netlink: 14463 bytes leftover after parsing attributes in process `syz.1.405'. [ 208.597487][ T6387] netlink: 64859 bytes leftover after parsing attributes in process `syz.5.412'. [ 209.226637][ T6401] FAULT_INJECTION: forcing a failure. [ 209.226637][ T6401] name failslab, interval 1, probability 0, space 0, times 0 [ 209.343280][ T6401] CPU: 1 PID: 6401 Comm: syz.6.415 Not tainted syzkaller #0 [ 209.350667][ T6401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 209.360813][ T6401] Call Trace: [ 209.364132][ T6401] [ 209.367107][ T6401] dump_stack_lvl+0x188/0x24e [ 209.371881][ T6401] ? show_regs_print_info+0x12/0x12 [ 209.377132][ T6401] ? load_image+0x410/0x410 [ 209.381736][ T6401] ? __might_sleep+0xd0/0xd0 [ 209.386382][ T6401] ? __lock_acquire+0x7c40/0x7c40 [ 209.391498][ T6401] should_fail_ex+0x390/0x4c0 [ 209.396282][ T6401] should_failslab+0x5/0x20 [ 209.400833][ T6401] slab_pre_alloc_hook+0x59/0x300 [ 209.405914][ T6401] ? tomoyo_encode+0x28a/0x550 [ 209.410740][ T6401] __kmem_cache_alloc_node+0x4f/0x270 [ 209.416176][ T6401] ? tomoyo_encode+0x28a/0x550 [ 209.421080][ T6401] __kmalloc+0xa3/0x240 [ 209.425294][ T6401] tomoyo_encode+0x28a/0x550 [ 209.429941][ T6401] tomoyo_realpath_from_path+0x578/0x5c0 [ 209.435634][ T6401] ? tomoyo_domain+0xd2/0x120 [ 209.440367][ T6401] ? tomoyo_path_number_perm+0x205/0x650 [ 209.446048][ T6401] tomoyo_path_number_perm+0x22f/0x650 [ 209.451658][ T6401] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 209.457167][ T6401] ? ksys_write+0x1ce/0x260 [ 209.461730][ T6401] ? common_file_perm+0x171/0x1c0 [ 209.466843][ T6401] ? __fget_files+0x28/0x460 [ 209.471503][ T6401] security_file_ioctl+0x6c/0xa0 [ 209.476503][ T6401] __se_sys_ioctl+0x48/0x170 [ 209.481152][ T6401] do_syscall_64+0x4c/0xa0 [ 209.485605][ T6401] ? clear_bhb_loop+0x60/0xb0 [ 209.490321][ T6401] ? clear_bhb_loop+0x60/0xb0 [ 209.495045][ T6401] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 209.501079][ T6401] RIP: 0033:0x7f9fa159e159 [ 209.505548][ T6401] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 209.525202][ T6401] RSP: 002b:00007f9fa2517028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 209.534100][ T6401] RAX: ffffffffffffffda RBX: 00007f9fa1825fa0 RCX: 00007f9fa159e159 [ 209.542129][ T6401] RDX: 0000000000000000 RSI: 000000004010744d RDI: 0000000000000003 [ 209.550422][ T6401] RBP: 00007f9fa2517090 R08: 0000000000000000 R09: 0000000000000000 [ 209.558448][ T6401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 209.566514][ T6401] R13: 00007f9fa1826038 R14: 00007f9fa1825fa0 R15: 00007ffe27d1e2a8 [ 209.574593][ T6401] [ 209.962550][ T6401] ERROR: Out of memory at tomoyo_realpath_from_path. [ 211.839388][ T6484] FAULT_INJECTION: forcing a failure. [ 211.839388][ T6484] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 211.895703][ T6484] CPU: 0 PID: 6484 Comm: syz.1.434 Not tainted syzkaller #0 [ 211.903096][ T6484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 211.913227][ T6484] Call Trace: [ 211.916555][ T6484] [ 211.919538][ T6484] dump_stack_lvl+0x188/0x24e [ 211.924286][ T6484] ? show_regs_print_info+0x12/0x12 [ 211.929537][ T6484] ? load_image+0x410/0x410 [ 211.934099][ T6484] ? __lock_acquire+0x7c40/0x7c40 [ 211.939188][ T6484] ? mutex_lock_nested+0x10/0x10 [ 211.944270][ T6484] should_fail_ex+0x390/0x4c0 [ 211.949033][ T6484] _copy_from_user+0x2c/0x170 [ 211.953759][ T6484] ppp_ioctl+0x76d/0x1b20 [ 211.958178][ T6484] ? ppp_poll+0x250/0x250 [ 211.962553][ T6484] ? __fget_files+0x28/0x460 [ 211.967218][ T6484] ? bpf_lsm_file_ioctl+0x5/0x10 [ 211.972197][ T6484] ? security_file_ioctl+0x7c/0xa0 [ 211.977341][ T6484] ? ppp_poll+0x250/0x250 [ 211.981697][ T6484] __se_sys_ioctl+0xfa/0x170 [ 211.986325][ T6484] do_syscall_64+0x4c/0xa0 [ 211.990784][ T6484] ? clear_bhb_loop+0x60/0xb0 [ 211.996188][ T6484] ? clear_bhb_loop+0x60/0xb0 [ 212.000919][ T6484] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 212.006872][ T6484] RIP: 0033:0x7f155899e159 [ 212.011325][ T6484] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 212.030962][ T6484] RSP: 002b:00007f1556bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 212.039432][ T6484] RAX: ffffffffffffffda RBX: 00007f1558c25fa0 RCX: 00007f155899e159 [ 212.047435][ T6484] RDX: 0000000000000000 RSI: 000000004010744d RDI: 0000000000000003 [ 212.055451][ T6484] RBP: 00007f1556bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 212.063451][ T6484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 212.071453][ T6484] R13: 00007f1558c26038 R14: 00007f1558c25fa0 R15: 00007ffff56d8e48 [ 212.079470][ T6484] [ 212.745806][ T6505] netlink: 132 bytes leftover after parsing attributes in process `syz.6.440'. [ 212.768245][ T6504] nr0: port 1(hsr0) entered blocking state [ 212.828915][ T6504] nr0: port 1(hsr0) entered disabled state [ 212.897340][ T6504] device hsr0 entered promiscuous mode [ 213.032968][ T6505] netlink: 'syz.6.440': attribute type 10 has an invalid length. [ 213.065223][ T6505] netlink: 40 bytes leftover after parsing attributes in process `syz.6.440'. [ 213.108889][ T6505] device team0 entered promiscuous mode [ 213.139663][ T6505] device team_slave_0 entered promiscuous mode [ 213.183348][ T6505] device team_slave_1 entered promiscuous mode [ 213.234202][ T6505] bridge0: port 3(team0) entered blocking state [ 213.287708][ T6505] bridge0: port 3(team0) entered disabled state [ 213.366285][ T6505] bridge0: port 3(team0) entered blocking state [ 213.372836][ T6505] bridge0: port 3(team0) entered forwarding state [ 213.396883][ T6510] device syzkaller0 entered promiscuous mode [ 213.848874][ T6533] syz.5.445 (6533) used obsolete PPPIOCDETACH ioctl [ 213.998097][ T6537] netlink: 'syz.6.448': attribute type 21 has an invalid length. [ 214.018244][ T6537] netlink: 'syz.6.448': attribute type 1 has an invalid length. [ 214.044217][ T6537] netlink: 132 bytes leftover after parsing attributes in process `syz.6.448'. [ 214.059902][ T6539] netlink: 44 bytes leftover after parsing attributes in process `syz.1.446'. [ 214.452538][ T6550] device syzkaller0 entered promiscuous mode [ 214.497942][ T6556] FAULT_INJECTION: forcing a failure. [ 214.497942][ T6556] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 214.569365][ T6556] CPU: 0 PID: 6556 Comm: syz.1.451 Not tainted syzkaller #0 [ 214.576792][ T6556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 214.586993][ T6556] Call Trace: [ 214.590318][ T6556] [ 214.593295][ T6556] dump_stack_lvl+0x188/0x24e [ 214.598028][ T6556] ? show_regs_print_info+0x12/0x12 [ 214.603279][ T6556] ? load_image+0x410/0x410 [ 214.607849][ T6556] ? __lock_acquire+0x7c40/0x7c40 [ 214.613026][ T6556] ? snprintf+0xe5/0x140 [ 214.617334][ T6556] should_fail_ex+0x390/0x4c0 [ 214.622083][ T6556] _copy_to_user+0x2c/0x130 [ 214.626645][ T6556] simple_read_from_buffer+0xe3/0x150 [ 214.632066][ T6556] proc_fail_nth_read+0x1a6/0x220 [ 214.637132][ T6556] ? proc_fault_inject_write+0x310/0x310 [ 214.642798][ T6556] ? fsnotify_perm+0x248/0x550 [ 214.647593][ T6556] ? proc_fault_inject_write+0x310/0x310 [ 214.653254][ T6556] vfs_read+0x2db/0x960 [ 214.657452][ T6556] ? kernel_read+0x1e0/0x1e0 [ 214.662088][ T6556] ? __fget_files+0x28/0x460 [ 214.666712][ T6556] ? __fget_files+0x3fc/0x460 [ 214.671429][ T6556] ? __fdget_pos+0x2ae/0x360 [ 214.676066][ T6556] ? ksys_read+0x70/0x260 [ 214.680434][ T6556] ksys_read+0x14d/0x260 [ 214.684712][ T6556] ? vfs_write+0x9a0/0x9a0 [ 214.689165][ T6556] ? lockdep_hardirqs_on+0x94/0x140 [ 214.694404][ T6556] do_syscall_64+0x4c/0xa0 [ 214.698852][ T6556] ? clear_bhb_loop+0x60/0xb0 [ 214.703560][ T6556] ? clear_bhb_loop+0x60/0xb0 [ 214.708261][ T6556] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 214.714186][ T6556] RIP: 0033:0x7f155895e98e [ 214.718629][ T6556] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 214.738365][ T6556] RSP: 002b:00007f1556bd4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 214.746810][ T6556] RAX: ffffffffffffffda RBX: 00007f1556bd56c0 RCX: 00007f155895e98e [ 214.754893][ T6556] RDX: 000000000000000f RSI: 00007f1556bd50a0 RDI: 0000000000000004 [ 214.762894][ T6556] RBP: 00007f1556bd5090 R08: 0000000000000000 R09: 0000000000000000 [ 214.770890][ T6556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 214.778905][ T6556] R13: 00007f1558c26128 R14: 00007f1558c26090 R15: 00007ffff56d8e48 [ 214.786965][ T6556] [ 217.799182][ T6584] netlink: 'syz.1.457': attribute type 2 has an invalid length. [ 217.807006][ T6584] netlink: 'syz.1.457': attribute type 8 has an invalid length. [ 217.814975][ T6584] netlink: 132 bytes leftover after parsing attributes in process `syz.1.457'. [ 217.825640][ T6588] netlink: 'syz.1.457': attribute type 2 has an invalid length. [ 217.834065][ T6588] netlink: 'syz.1.457': attribute type 8 has an invalid length. [ 217.842019][ T6588] netlink: 132 bytes leftover after parsing attributes in process `syz.1.457'. [ 217.868979][ T6596] netlink: 'syz.3.459': attribute type 17 has an invalid length. [ 217.887211][ T6596] netlink: 148 bytes leftover after parsing attributes in process `syz.3.459'. [ 218.474620][ T6626] netlink: 134056 bytes leftover after parsing attributes in process `syz.6.467'. [ 218.783946][ T6635] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 218.842180][ T6635] dvmrp1: linktype set to 768 [ 221.856898][ T6663] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 222.520577][ T6679] netlink: 14 bytes leftover after parsing attributes in process `syz.3.477'. [ 222.662598][ T6679] netlink: 14 bytes leftover after parsing attributes in process `syz.3.477'. [ 223.761012][ T6713] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.483'. [ 223.790297][ T6717] netlink: 164 bytes leftover after parsing attributes in process `syz.1.485'. [ 225.283436][ T6750] netlink: 'syz.6.494': attribute type 9 has an invalid length. [ 225.370186][ T6750] netlink: 126588 bytes leftover after parsing attributes in process `syz.6.494'. [ 227.626103][ T6785] netlink: 14 bytes leftover after parsing attributes in process `syz.1.503'. [ 228.713895][ T6816] netlink: 176 bytes leftover after parsing attributes in process `syz.2.509'. [ 229.117339][ T6813] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.512'. [ 229.137627][ T6821] netlink: 'syz.6.511': attribute type 20 has an invalid length. [ 229.317830][ T6830] netlink: 'syz.1.516': attribute type 10 has an invalid length. [ 229.395920][ T6830] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.403719][ T6830] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.518925][ T6830] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.526448][ T6830] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.535408][ T6830] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.542641][ T6830] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.679928][ T6830] team0: Port device bridge0 added [ 232.209012][ T4283] Bluetooth: hci5: command 0x0406 tx timeout [ 232.220275][ T4287] Bluetooth: hci1: command 0x0406 tx timeout [ 233.969393][ T6929] netlink: 'syz.5.540': attribute type 2 has an invalid length. [ 233.988952][ T6929] netlink: 'syz.5.540': attribute type 8 has an invalid length. [ 234.016811][ T6929] netlink: 132 bytes leftover after parsing attributes in process `syz.5.540'. [ 234.209599][ T6931] netlink: 'syz.5.540': attribute type 3 has an invalid length. [ 234.214959][ T6930] netlink: 'syz.5.540': attribute type 2 has an invalid length. [ 234.217329][ T6931] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.540'. [ 234.237697][ T6930] netlink: 'syz.5.540': attribute type 8 has an invalid length. [ 234.246537][ T6930] netlink: 132 bytes leftover after parsing attributes in process `syz.5.540'. [ 234.771825][ T6935] netlink: 'syz.2.544': attribute type 7 has an invalid length. [ 234.851146][ T6935] netlink: 191184 bytes leftover after parsing attributes in process `syz.2.544'. [ 235.506419][ T6970] netlink: 'syz.5.550': attribute type 10 has an invalid length. [ 235.652394][ T6970] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 235.692747][ T6972] netlink: 'syz.2.548': attribute type 2 has an invalid length. [ 236.180622][ T6981] netlink: 'syz.1.552': attribute type 16 has an invalid length. [ 236.188465][ T6981] netlink: 132 bytes leftover after parsing attributes in process `syz.1.552'. [ 236.820125][ T7008] netlink: 'syz.1.555': attribute type 3 has an invalid length. [ 236.857121][ T7008] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.555'. [ 237.008403][ T7003] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.555'. [ 237.072007][ T7006] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.555'. [ 237.106979][ T7006] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.555'. [ 237.133435][ T7006] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.555'. [ 237.160494][ T7006] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.555'. [ 237.691243][ T7025] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 237.770237][ T4283] Bluetooth: hci5: Malformed LE Event: 0x0b [ 238.425147][ T7052] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 238.797821][ T7030] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 238.898784][ T7030] CPU: 1 PID: 7030 Comm: syz.3.562 Not tainted syzkaller #0 [ 238.906172][ T7030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 238.916294][ T7030] Call Trace: [ 238.919599][ T7030] [ 238.922552][ T7030] dump_stack_lvl+0x188/0x24e [ 238.927260][ T7030] ? lockdep_hardirqs_on+0x94/0x140 [ 238.932493][ T7030] ? show_regs_print_info+0x12/0x12 [ 238.937730][ T7030] ? audit_tree_destroy_watch+0x20/0x20 [ 238.943310][ T7030] sysfs_warn_dup+0x8a/0xa0 [ 238.947932][ T7030] sysfs_do_create_link_sd+0xc0/0x110 [ 238.953340][ T7030] device_add+0x83b/0x1050 [ 238.957968][ T7030] wiphy_register+0x1d8b/0x2aa0 [ 238.962881][ T7030] ? cfg80211_event_work+0x40/0x40 [ 238.968022][ T7030] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 238.974213][ T7030] ? ieee80211_register_hw+0x28d5/0x39f0 [ 238.979878][ T7030] ieee80211_register_hw+0x2d48/0x39f0 [ 238.985366][ T7030] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 238.991558][ T7030] ? ieee80211_register_hw+0xf41/0x39f0 [ 238.997139][ T7030] ? ieee80211_register_hw+0xf41/0x39f0 [ 239.002719][ T7030] ? ieee80211_tasklet_handler+0x20/0x20 [ 239.008466][ T7030] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 239.014489][ T7030] ? __debug_object_init+0xed/0x440 [ 239.019720][ T7030] ? memset+0x1e/0x40 [ 239.023729][ T7030] ? __hrtimer_init+0x189/0x270 [ 239.028623][ T7030] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 239.034390][ T7030] ? memcpy+0x3c/0x60 [ 239.038403][ T7030] hwsim_new_radio_nl+0xab7/0xc90 [ 239.043500][ T7030] genl_family_rcv_msg_doit+0x22f/0x350 [ 239.049080][ T7030] ? end_current_label_crit_section+0x170/0x170 [ 239.055380][ T7030] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 239.061398][ T7030] ? bpf_lsm_capable+0x5/0x10 [ 239.066104][ T7030] ? security_capable+0x85/0xb0 [ 239.070999][ T7030] genl_rcv_msg+0x601/0x790 [ 239.075537][ T7030] ? genl_bind+0x360/0x360 [ 239.079975][ T7030] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 239.086359][ T7030] netlink_rcv_skb+0x1ef/0x440 [ 239.091155][ T7030] ? genl_bind+0x360/0x360 [ 239.095599][ T7030] ? netlink_ack+0x1160/0x1160 [ 239.100402][ T7030] ? down_read+0x1a8/0x2d0 [ 239.104847][ T7030] genl_rcv+0x24/0x40 [ 239.108858][ T7030] netlink_unicast+0x7ad/0x920 [ 239.113657][ T7030] netlink_sendmsg+0x8ad/0xbd0 [ 239.118445][ T7030] ? lockdep_hardirqs_on+0x94/0x140 [ 239.123678][ T7030] ? netlink_getsockopt+0x550/0x550 [ 239.128909][ T7030] ? bpf_lsm_socket_accept+0x10/0x10 [ 239.134220][ T7030] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 239.139530][ T7030] ? security_socket_sendmsg+0x7c/0xa0 [ 239.145021][ T7030] ? netlink_getsockopt+0x550/0x550 [ 239.150247][ T7030] ____sys_sendmsg+0x5ed/0x9a0 [ 239.155039][ T7030] ? __import_iovec+0x1b3/0x510 [ 239.159920][ T7030] ? __sys_sendmsg_sock+0x30/0x30 [ 239.164974][ T7030] ? __import_iovec+0x306/0x510 [ 239.169886][ T7030] ? import_iovec+0x6f/0xa0 [ 239.174425][ T7030] ___sys_sendmsg+0x2a2/0x360 [ 239.179139][ T7030] ? __sys_sendmsg+0x2a0/0x2a0 [ 239.183963][ T7030] __se_sys_sendmsg+0x1c3/0x2b0 [ 239.188843][ T7030] ? __x64_sys_sendmsg+0x80/0x80 [ 239.193818][ T7030] ? syscall_enter_from_user_mode+0x2a/0x80 [ 239.199874][ T7030] do_syscall_64+0x4c/0xa0 [ 239.204322][ T7030] ? clear_bhb_loop+0x60/0xb0 [ 239.209025][ T7030] ? clear_bhb_loop+0x60/0xb0 [ 239.213733][ T7030] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 239.219663][ T7030] RIP: 0033:0x7f91e619e159 [ 239.224099][ T7030] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 239.243732][ T7030] RSP: 002b:00007f91e70c8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 239.252177][ T7030] RAX: ffffffffffffffda RBX: 00007f91e6425fa0 RCX: 00007f91e619e159 [ 239.260185][ T7030] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 239.268176][ T7030] RBP: 00007f91e623506b R08: 0000000000000000 R09: 0000000000000000 [ 239.276214][ T7030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 239.284223][ T7030] R13: 00007f91e6426038 R14: 00007f91e6425fa0 R15: 00007ffe95e4b178 [ 239.292245][ T7030] [ 239.353527][ T7052] __nla_validate_parse: 26 callbacks suppressed [ 239.353544][ T7052] netlink: 60 bytes leftover after parsing attributes in process `syz.3.562'. [ 239.509911][ T7066] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.562'. [ 239.612065][ T7062] netlink: 3529 bytes leftover after parsing attributes in process `syz.5.570'. [ 239.644005][ T7062] netlink: 52477 bytes leftover after parsing attributes in process `syz.5.570'. [ 239.662222][ T7062] netlink: 71676 bytes leftover after parsing attributes in process `syz.5.570'. [ 239.701372][ T7068] validate_nla: 30 callbacks suppressed [ 239.701435][ T7068] netlink: 'syz.2.572': attribute type 21 has an invalid length. [ 239.799272][ T7068] netlink: 164 bytes leftover after parsing attributes in process `syz.2.572'. [ 240.205948][ T7078] netlink: 184 bytes leftover after parsing attributes in process `syz.6.574'. [ 241.050199][ T7103] netlink: 'syz.5.583': attribute type 21 has an invalid length. [ 241.058200][ T7103] netlink: 132 bytes leftover after parsing attributes in process `syz.5.583'. [ 241.595284][ T7106] IPv6: NLM_F_CREATE should be specified when creating new route [ 241.659443][ T7106] netlink: 1 bytes leftover after parsing attributes in process `syz.5.583'. [ 242.904756][ T7138] netlink: 1010 bytes leftover after parsing attributes in process `syz.3.588'. [ 242.978351][ T7138] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 243.960937][ T7149] netlink: 'syz.3.593': attribute type 10 has an invalid length. [ 245.407609][ T7164] netlink: 'syz.6.599': attribute type 3 has an invalid length. [ 245.436849][ T7164] netlink: 105116 bytes leftover after parsing attributes in process `syz.6.599'. [ 246.822759][ T7193] : port 1(team0) entered blocking state [ 246.837237][ T7193] : port 1(team0) entered disabled state [ 246.862471][ T7193] device team0 entered promiscuous mode [ 246.876105][ T7193] device team_slave_0 entered promiscuous mode [ 246.890007][ T7193] device team_slave_1 entered promiscuous mode [ 246.924150][ T7196] device team0 left promiscuous mode [ 246.970821][ T7196] device team_slave_0 left promiscuous mode [ 247.011633][ T7196] device team_slave_1 left promiscuous mode [ 247.022999][ T7196] : port 1(team0) entered disabled state [ 248.904505][ T7240] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.619'. [ 249.730055][ T7265] netlink: 'syz.1.624': attribute type 10 has an invalid length. [ 249.779445][ T7270] sctp: [Deprecated]: syz.3.621 (pid 7270) Use of struct sctp_assoc_value in delayed_ack socket option. [ 249.779445][ T7270] Use struct sctp_sack_info instead [ 249.869955][ T7265] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 249.911962][ T7267] netlink: 'syz.2.627': attribute type 10 has an invalid length. [ 249.947301][ T7267] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.955088][ T7267] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.080354][ T7267] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.087812][ T7267] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.096805][ T7267] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.104529][ T7267] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.153625][ T7267] team0: Port device bridge0 added [ 251.019735][ T7287] can: request_module (can-proto-0) failed. [ 251.647398][ T7312] netlink: 'syz.2.639': attribute type 2 has an invalid length. [ 251.715181][ T7312] netlink: 10 bytes leftover after parsing attributes in process `syz.2.639'. [ 251.908024][ T7321] netlink: 'syz.1.641': attribute type 1 has an invalid length. [ 251.991031][ T7321] netlink: 'syz.1.641': attribute type 1 has an invalid length. [ 252.147532][ T7321] netlink: 116376 bytes leftover after parsing attributes in process `syz.1.641'. [ 254.301059][ T7353] netlink: 'syz.1.647': attribute type 10 has an invalid length. [ 254.326909][ T7353] device syz_tun entered promiscuous mode [ 254.531132][ T7353] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 255.626393][ T7376] netlink: 1057 bytes leftover after parsing attributes in process `syz.1.655'. [ 255.741481][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.747889][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.449887][ T7400] netlink: 'syz.3.663': attribute type 3 has an invalid length. [ 256.490583][ T7400] netlink: 132 bytes leftover after parsing attributes in process `syz.3.663'. [ 257.619540][ T7427] netlink: 16278 bytes leftover after parsing attributes in process `syz.5.670'. [ 258.487991][ T7449] netlink: 58351 bytes leftover after parsing attributes in process `syz.2.675'. [ 258.597557][ T7449] netlink: 3 bytes leftover after parsing attributes in process `syz.2.675'. [ 259.072927][ T7460] device veth1_macvtap left promiscuous mode [ 259.711611][ T7472] netlink: 'syz.5.681': attribute type 1 has an invalid length. [ 259.912575][ T7478] netlink: 'syz.6.684': attribute type 39 has an invalid length. [ 260.012586][ T7482] netlink: 'syz.3.685': attribute type 3 has an invalid length. [ 260.045385][ T7482] netlink: 'syz.3.685': attribute type 4 has an invalid length. [ 260.056545][ T7482] netlink: 132 bytes leftover after parsing attributes in process `syz.3.685'. [ 260.513074][ T7507] netlink: 14556 bytes leftover after parsing attributes in process `syz.1.690'. [ 260.606239][ T7501] netlink: 3529 bytes leftover after parsing attributes in process `syz.1.690'. [ 260.709240][ T7501] netlink: 52477 bytes leftover after parsing attributes in process `syz.1.690'. [ 260.801088][ T7501] netlink: 71676 bytes leftover after parsing attributes in process `syz.1.690'. [ 260.965450][ T7512] netlink: 'syz.1.690': attribute type 21 has an invalid length. [ 261.260491][ T7523] netlink: 'syz.6.694': attribute type 7 has an invalid length. [ 262.809386][ T7544] netlink: 'syz.6.698': attribute type 17 has an invalid length. [ 262.817324][ T7544] netlink: 152 bytes leftover after parsing attributes in process `syz.6.698'. [ 262.958867][ T7544] A link change request failed with some changes committed already. Interface Q6\bY4 may have been left with an inconsistent configuration, please check. [ 264.031680][ T7555] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.704'. [ 264.088630][ T7555] netlink: zone id is out of range [ 264.101037][ T7555] netlink: zone id is out of range [ 264.182757][ T7555] netlink: del zone limit has 4 unknown bytes [ 266.279167][ T7592] netlink: 132 bytes leftover after parsing attributes in process `syz.1.713'. [ 266.461672][ T7595] netlink: 16046 bytes leftover after parsing attributes in process `syz.1.713'. [ 267.249907][ T27] INFO: task syz.0.23:4436 blocked for more than 143 seconds. [ 267.257637][ T27] Not tainted syzkaller #0 [ 267.300025][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 267.321247][ T7612] netlink: 'syz.5.717': attribute type 39 has an invalid length. [ 267.346045][ T27] task:syz.0.23 state:D stack:26256 pid:4436 ppid:4281 flags:0x00004006 [ 267.391209][ T27] Call Trace: [ 267.405387][ T27] [ 267.419466][ T27] __schedule+0x107f/0x4030 [ 267.441564][ T27] ? __lock_acquire+0x7c40/0x7c40 [ 267.465836][ T27] ? release_firmware_map_entry+0x187/0x187 [ 267.497737][ T27] ? task_work_cancel+0xa1/0x220 [ 267.533012][ T27] ? task_work_cancel_func+0x210/0x210 [ 267.565478][ T27] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 267.616961][ T27] schedule+0xb9/0x180 [ 267.633491][ T27] ? _free_event+0x10d/0x1050 [ 267.654967][ T27] _free_event+0x176/0x1050 [ 267.672573][ T27] perf_event_release_kernel+0x7c4/0x850 [ 267.695951][ T27] ? __might_sleep+0xd0/0xd0 [ 267.724506][ T27] ? calc_timer_values+0x410/0x410 [ 267.746506][ T27] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 267.776227][ T27] ? __lock_acquire+0x7c40/0x7c40 [ 267.803845][ T27] ? perf_mmap+0x1470/0x1470 [ 267.826275][ T27] perf_release+0x37/0x40 [ 267.849671][ T27] __fput+0x20a/0x8b0 [ 267.868423][ T27] task_work_run+0x1d0/0x260 [ 267.901260][ T27] ? task_work_cancel+0x220/0x220 [ 267.931176][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 267.960825][ T27] do_exit+0x9d5/0x2570 [ 267.987269][ T27] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 268.037598][ T27] ? put_task_struct+0x80/0x80 [ 268.089080][ T27] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 268.095361][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 268.121579][ T27] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 268.127885][ T27] do_group_exit+0x229/0x2e0 [ 268.148858][ T27] ? do_group_exit+0x1/0x2e0 [ 268.153602][ T27] get_signal+0x1259/0x1340 [ 268.158281][ T27] arch_do_signal_or_restart+0xc4/0x1310 [ 268.178766][ T27] ? perf_trace_preemptirq_template+0x268/0x320 [ 268.185358][ T27] ? irqentry_enter+0x33/0x50 [ 268.204813][ T27] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 268.218774][ T27] ? get_sigframe_size+0x10/0x10 [ 268.223848][ T27] ? lock_chain_count+0x20/0x20 [ 268.238681][ T27] ? rcu_is_watching+0x11/0xa0 [ 268.243671][ T27] exit_to_user_mode_loop+0x70/0x110 [ 268.264955][ T27] exit_to_user_mode_prepare+0xee/0x180 [ 268.281297][ T27] irqentry_exit_to_user_mode+0x5/0x30 [ 268.287055][ T27] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 268.308010][ T27] RIP: 0033:0x7f0772e64264 [ 268.316970][ T27] RSP: 002b:00007f0773e06050 EFLAGS: 00000206 [ 268.328726][ T27] RAX: 0000000000000006 RBX: 00007f0773225fa0 RCX: 00007f077303506b [ 268.336796][ T27] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 268.361608][ T27] RBP: 00007f077303506b R08: 0000000000000000 R09: 0000000000000000 [ 268.380768][ T27] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 268.398648][ T27] R13: 00007f0773226038 R14: 00007f0773225fa0 R15: 00007ffcd857a258 [ 268.406794][ T27] [ 268.426120][ T27] [ 268.426120][ T27] Showing all locks held in the system: [ 268.434234][ T27] 1 lock held by rcu_tasks_kthre/12: [ 268.458812][ T27] #0: ffffffff8cb2e170 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xef0 [ 268.498663][ T27] 1 lock held by rcu_tasks_trace/13: [ 268.504072][ T27] #0: ffffffff8cb2e990 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xef0 [ 268.538862][ T27] 1 lock held by khungtaskd/27: [ 268.543827][ T27] #0: ffffffff8cb2d7e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 268.568639][ T27] 2 locks held by getty/4029: [ 268.573436][ T27] #0: ffff88814d79d098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 268.599900][ T27] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x41e/0x1360 [ 268.618614][ T27] 2 locks held by kworker/1:5/4315: [ 268.623918][ T27] #0: ffff888017472138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 268.652642][ T27] #1: ffffc90003ec7d00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 268.678672][ T27] 4 locks held by syz.6.694/7534: [ 268.683809][ T27] 1 lock held by syz.5.717/7607: [ 268.698686][ T27] #0: ffffffff8dd550a8 (rtnl_mutex){+.+.}-{3:3}, at: ppp_release+0x86/0x1f0 [ 268.707657][ T27] 1 lock held by syz.5.717/7611: [ 268.728606][ T27] #0: ffffffff8dd550a8 (rtnl_mutex){+.+.}-{3:3}, at: __tun_chr_ioctl+0x3f3/0x1ed0 [ 268.738114][ T27] 2 locks held by syz.5.717/7612: [ 268.758682][ T27] #0: ffffffff8dd550a8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x80d/0xfb0 [ 268.768271][ T27] #1: ffffffff8cb334b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3c0/0x890 [ 268.791842][ T27] 1 lock held by syz.3.718/7616: [ 268.797145][ T27] #0: ffffffff8dd550a8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3d/0x1b0 [ 268.818787][ T27] 2 locks held by dhcpcd/7618: [ 268.823646][ T27] #0: ffff888075e5c130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xd40 [ 268.849066][ T27] #1: ffffffff8cb334b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3c0/0x890 [ 268.868635][ T27] [ 268.871060][ T27] ============================================= [ 268.871060][ T27] [ 268.888633][ T27] NMI backtrace for cpu 0 [ 268.893154][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 268.900427][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 268.910552][ T27] Call Trace: [ 268.913894][ T27] [ 268.916888][ T27] dump_stack_lvl+0x188/0x24e [ 268.921640][ T27] ? ct_irq_enter_irqson+0x170/0x170 [ 268.927005][ T27] ? show_regs_print_info+0x12/0x12 [ 268.932296][ T27] ? load_image+0x410/0x410 [ 268.936981][ T27] ? vprintk_emit+0x59f/0x6a0 [ 268.941965][ T27] ? nmi_cpu_backtrace+0x1cb/0x460 [ 268.947197][ T27] nmi_cpu_backtrace+0x3e6/0x460 [ 268.952257][ T27] ? nmi_trigger_cpumask_backtrace+0x450/0x450 [ 268.958621][ T27] ? _printk+0xda/0x130 [ 268.962880][ T27] ? load_image+0x410/0x410 [ 268.967502][ T27] ? load_image+0x410/0x410 [ 268.972119][ T27] ? nmi_trigger_cpumask_backtrace+0xf3/0x450 [ 268.978272][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 268.984435][ T27] nmi_trigger_cpumask_backtrace+0x1d4/0x450 [ 268.990481][ T27] watchdog+0xf0e/0xf50 [ 268.994718][ T27] ? watchdog+0x1ed/0xf50 [ 268.999121][ T27] kthread+0x29d/0x330 [ 269.003243][ T27] ? hungtask_pm_notify+0x40/0x40 [ 269.008328][ T27] ? kthread_blkcg+0xd0/0xd0 [ 269.012981][ T27] ret_from_fork+0x1f/0x30 [ 269.017491][ T27] [ 269.021991][ T27] Sending NMI from CPU 0 to CPUs 1: [ 269.027308][ C1] NMI backtrace for cpu 1 [ 269.027320][ C1] CPU: 1 PID: 4260 Comm: syz-executor Not tainted syzkaller #0 [ 269.027339][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 269.027349][ C1] RIP: 0010:perf_trace_lock+0x19c/0x390 [ 269.027377][ C1] Code: 8f 01 00 00 48 8d 74 24 60 48 8d 94 24 80 00 00 00 48 8b 44 24 08 44 8d 70 24 41 83 e6 f8 41 83 c6 fc 44 89 f7 e8 d4 15 27 00 <48> 85 c0 0f 84 60 01 00 00 49 89 c4 48 8b 5c 24 60 48 8b 4d 08 48 [ 269.027393][ C1] RSP: 0018:ffffc90003bb77e0 EFLAGS: 00000282 [ 269.027409][ C1] RAX: 0000000000000000 RBX: ffffffff8c9f9820 RCX: ffff888078ca3c00 [ 269.027423][ C1] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 269.027435][ C1] RBP: ffffc90003bb78d0 R08: ffffffff8e20b46f R09: 1ffffffff1c4168d [ 269.027449][ C1] R10: dffffc0000000000 R11: fffffbfff1c4168e R12: ffffe8ffffd48868 [ 269.027462][ C1] R13: 1ffff92000776f04 R14: 000000000000002c R15: dffffc0000000000 [ 269.027476][ C1] FS: 000055556de30500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 269.027493][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 269.027505][ C1] CR2: 000055d458187660 CR3: 000000002ddff000 CR4: 00000000003506e0 [ 269.027522][ C1] DR0: 0000000000000000 DR1: 0000200000000300 DR2: 0000200000000300 [ 269.027534][ C1] DR3: 0000200000000300 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 269.027547][ C1] Call Trace: [ 269.027552][ C1] [ 269.027568][ C1] ? trace_event_raw_event_lock+0x230/0x230 [ 269.027598][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 269.027634][ C1] lock_release+0x8ad/0x920 [ 269.027664][ C1] ? trace_call_bpf+0xbf/0x6b0 [ 269.027695][ C1] ? __lock_acquire+0x7c40/0x7c40 [ 269.027724][ C1] ? mark_lock+0x94/0x320 [ 269.027753][ C1] ? migrate_enable+0x148/0x220 [ 269.027777][ C1] ? trace_call_bpf+0xbf/0x6b0 [ 269.027806][ C1] trace_call_bpf+0x5ca/0x6b0 [ 269.027833][ C1] ? trace_call_bpf+0xbf/0x6b0 [ 269.027873][ C1] ? __bpf_trace_bpf_trace_printk+0x20/0x20 [ 269.027915][ C1] perf_trace_run_bpf_submit+0x79/0x1c0 [ 269.027952][ C1] perf_trace_lock+0x301/0x390 [ 269.027983][ C1] ? trace_event_raw_event_lock+0x230/0x230 [ 269.028022][ C1] lock_release+0x8ad/0x920 [ 269.028052][ C1] ? __might_fault+0xa6/0x120 [ 269.028076][ C1] ? __lock_acquire+0x7c40/0x7c40 [ 269.028105][ C1] ? vfs_read+0x573/0x960 [ 269.028136][ C1] ? __might_fault+0xa6/0x120 [ 269.028156][ C1] ? __might_fault+0xc2/0x120 [ 269.028173][ C1] ? __might_fault+0xa6/0x120 [ 269.028196][ C1] _copy_from_user+0x27/0x170 [ 269.028221][ C1] get_timespec64+0x93/0x1b0 [ 269.028249][ C1] ? timespec64_add_safe+0x1f0/0x1f0 [ 269.028278][ C1] ? perf_trace_preemptirq_template+0xa8/0x320 [ 269.028314][ C1] __se_sys_clock_nanosleep+0x1c3/0x3a0 [ 269.028338][ C1] ? __x64_sys_clock_nanosleep+0xa0/0xa0 [ 269.028363][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 269.028395][ C1] do_syscall_64+0x4c/0xa0 [ 269.028413][ C1] ? clear_bhb_loop+0x60/0xb0 [ 269.028432][ C1] ? clear_bhb_loop+0x60/0xb0 [ 269.028453][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 269.028483][ C1] RIP: 0033:0x7f964f1592d7 [ 269.028501][ C1] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 269.028518][ C1] RSP: 002b:00007ffc9013e950 EFLAGS: 00000202 ORIG_RAX: 00000000000000e6 [ 269.028538][ C1] RAX: ffffffffffffffda RBX: 000055556de30500 RCX: 00007f964f1592d7 [ 269.028553][ C1] RDX: 00007ffc9013e990 RSI: 0000000000000000 RDI: 0000000000000000 [ 269.028565][ C1] RBP: 00007ffc9013ee70 R08: 0000000000000000 R09: 0000000000000000 [ 269.028578][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000004 [ 269.028591][ C1] R13: 00007ffc9013e9cc R14: 00007ffc9013ea60 R15: 0000000000000000 [ 269.028623][ C1] [ 269.547986][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 269.554932][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 269.562191][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 269.572301][ T27] Call Trace: [ 269.575629][ T27] [ 269.578620][ T27] dump_stack_lvl+0x188/0x24e [ 269.583359][ T27] ? memcpy+0x3c/0x60 [ 269.587406][ T27] ? show_regs_print_info+0x12/0x12 [ 269.592678][ T27] ? load_image+0x410/0x410 [ 269.597259][ T27] panic+0x2d3/0x710 [ 269.601196][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 269.606868][ T27] ? bpf_jit_dump+0xd0/0xd0 [ 269.611407][ T27] ? __irq_work_queue_local+0x12c/0x190 [ 269.617033][ T27] ? nmi_trigger_cpumask_backtrace+0x35b/0x450 [ 269.623236][ T27] ? nmi_trigger_cpumask_backtrace+0x360/0x450 [ 269.629435][ T27] watchdog+0xf4d/0xf50 [ 269.633640][ T27] ? watchdog+0x1ed/0xf50 [ 269.638022][ T27] kthread+0x29d/0x330 [ 269.642119][ T27] ? hungtask_pm_notify+0x40/0x40 [ 269.647190][ T27] ? kthread_blkcg+0xd0/0xd0 [ 269.651819][ T27] ret_from_fork+0x1f/0x30 [ 269.656335][ T27] [ 269.659957][ T27] Kernel Offset: disabled [ 269.664317][ T27] Rebooting in 86400 seconds..