last executing test programs: 28.366656161s ago: executing program 0 (id=511): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b7020000b96871dfbfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe0000004f850000001a000000b7000000000000009500000000000000455781a5feee5e1ce784909b849d5550adf200000000000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d62de53a9a53608c10556e5734eb84049761451ce2e2d9f8004e26f7fcc059c06220002595f6dba87b81d1106fb026cce67a66afd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd6fee53f5b2e7b91c61ced1ebad000000000000e8122a793c080a882add4e1179bd4a44f2fcb6d753a78845d8363e0401861abebe428ba953df4aece69311687f4122073a236c3ad198e3f3a532efa04137d452ff47d2638da3261c8362bb7c7824be6195a66d2e17e122040e11e3bd4a69fc6e8d9f7043e09b9e10dc7777bfae58e99e30810400000000000000d63d716c0975e1ce4a655362e7062ff6ab3934555c01840219829472ad529cefa06d3482c7b2711b98eabdca89b77efd13e6dba4a431ce47911834118093b6cabaa17a57727474e1785ee234835088445aa4a9b677d3d342640e328504aea02a2d727e62b7f097a02dbf8fe1d704765de7482040b2fc3000000000000000008947baeaaf954aff687deaa2f804924600273ee26d8115cbca081a14cba24788779291745083fccdddc979ddca066da478c197d4a550470557bc99cca336bd88cd28a5ee651627e3a6fbf6ea53b95ddb64c69c7d8d2f4baddc239828760459564124bad68209d2a1d16ad085886c017679cfcda8b10700ac1e2bcc5ede5b5687aa418abfa09acd7339e73b2cd185c9eb5fb34fccd20ffa155b16c0c309ed6f6663677df37de0ec0d0f548b183940be5d1fe0bae14d1a76bf741330dacd9cc19c0163bcc93059e8d2d1bfa928e2ba458ecd989cb3581a3f270ad48255ac0dad4923e3e357e4e90583ce8d43ec65ed491d87a51d7c13f665dcf772e3ead71112008b16b0ea821f70aee1ccbd71c5a1c21e87d5b7b73d356337d15b9dcae4d0d750ffa07909c955e718585b2456308beda2fa03bb9bcf03cdff31ee4b1665b987829c0f0872c006c6e4ed666fe23b343aae943923eedbdb0e7abee90e3da7b98b7d07d2d4816201ad1737798635b0a3ebd3aed120e4500c16e6c9dc729f009db49c6b8b19613e4d792cb4ff5106419291d4222980b49ddb9527ce785822d8f4e2"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000280)="61df718305a35997984d4763fcac", 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 28.23982502s ago: executing program 0 (id=513): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000001a00000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="f6ffffff0300974dee96f718f8124f7adb5ce83e", @ANYRESHEX=r3, @ANYRES64, @ANYRES8=r3, @ANYRES32=r1, @ANYBLOB="0000000049d797"], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r3, 0x18000000000002a0, 0x16, 0x0, &(0x7f0000000100)="76389e6a65585578f830e900000058c54feb682e25d3", 0x0, 0x10001, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000438d8de4ebbf5d8c311a77"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x40042409, 0x1) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1a00000005000000", @ANYRES32, @ANYBLOB="0931ad0b53de7989e52fe8e3a690da2c18b3b210b9fee5e632ec430276570d14cdfcaa38802872f13bb4c777842a4bec3b391b1201162f76fd752ee5de145bd7f89f56053007f6114f79a55bd7486e974a104595e7a9296b023e62fe61f8d901138f905e7e7ea68dd77c493f5c583432806f94f3d0ae09a832b1ba25cd5e7be18ea9d7e04a1ad76ca5c3", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES16], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r6, 0x40047459, &(0x7f0000000180)) ioctl$TUNGETVNETLE(r6, 0x40047459, &(0x7f0000001200)) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1}, 0x1090da, 0x0, 0x0, 0x0, 0x0, 0x4, 0x749}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x4) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$kcm(0x2c, 0x3, 0x0) socket$kcm(0x2c, 0x3, 0x0) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000014006b030231a6080c000af32c00009d31fc0000f800250f02000f00e5aa000017d34460bc24eab556bd05251e6182949a2756f475ce36c2d13b48df000000000000ecb8f6ec63c9f4d4938037e786a6d1bdd700e6657594", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r8, &(0x7f0000003580)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0xd, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000800000000000000617edd28500000089147d69d39c000000f00200"], &(0x7f0000000000)='GPL\x00'}, 0x90) 27.829405132s ago: executing program 0 (id=514): socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x400000002, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180200002020702500000000002020207b0af8ff00000000bda100000000000026010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x400000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x80000, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x200400, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = socket$kcm(0x22, 0x3, 0x0) r5 = perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x374, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0xfffffffc, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0xa) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="140000002a000b", 0x7}], 0x1}, 0x0) r6 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0xfe33) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r0) close(r4) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="2e00000011008188040f80ec59acbc0413a181003f00000001010000000200000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2000000000000, 0x30385, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0xfffffd96, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="28010000000000000100000001", @ANYRES16=r4], 0x128}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="180200000a00000000000000030000008500000041000000180100008a6c6c250000000000000000000000bfa1000000000000e3010000f8ffffffb702000008040000b70300000095000000000000000000001d7a1adf26c1de6cf044ca60c08ff94c5eb2117a08eafb2f60f0b84a31b7c1700076e73b5e3092088d6f7329e3bcd6d278c718ef09fe07d27944075627e8a57ec5e24dfd4c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x212}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0xa12003, 0x0) close(r9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f086dd", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50) write$cgroup_subtree(r8, &(0x7f0000000100)=ANY=[], 0x36) 26.612916802s ago: executing program 0 (id=520): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d083910000000000000a1180015000600142603600e1209002100ff000401a80016000400144006000300036010fab94dcf5c0461c1d67f6f94007134c76ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccbb0dd6e4edef3d93452a92954b43370e9701", 0xd8}, {&(0x7f00000001c0)="c3f629bf9ca611f7aae4d2f31a53ff182f1fbc24850db07fb3e53ed293bbceac68c364c454e006ccf8588a97cefbb3d40c5673ba9561a53e81287ff1efbc7145a5b064b08d6dde2e949d8ad6f13b981acaa0392562788c48f5cfd5fd2250300ceba7a4080890bcb351403472afcd3896623e78edaac63a60058be041bfde499f2b315492a2a5fbd49e6727e09a1325f933bc1f5771d50b1db0b74e79e2f155de", 0xa0}, {&(0x7f0000000380)="e3ec43bc9f8544a0d9227e8f8c0bf3c314a4e6f90107f07d9bfbd67206b429f9e6566eaa1f0bdd06e7faa76d1c9dc8a90249b35ee0c8a4fe63bdccd607ebd51d2430ac350b52d4013a959808f195fd11546a8e8d93ca5758fe48b0b128a584927b5076c827cfa7dfab0caf20ce046f2a7b5faf6e72f264c06f", 0x79}], 0x3}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x7, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xa, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r5 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="130300007800911fdabcf8b3077fa54a07"], 0xfe33) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x3, 0x4, 0x86e, &(0x7f00000003c0)) socketpair(0x1e, 0x1, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0xc) perf_event_open(0x0, 0xffffffffffffffff, 0x5, r0, 0x3) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008000000"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_clone(0x100000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x44001840) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89a1, &(0x7f0000000080)) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000140)) 26.118841001s ago: executing program 0 (id=524): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r0, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, 0x0}, 0x94) close(0xffffffffffffffff) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r1, 0x0, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) gettid() syz_clone(0x400c0000, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000000), 0x8) r3 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002ec0)={0x10, 0xf, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xe24d, 0x0, 0x0, 0x0, 0xde04}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000500)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x6, &(0x7f0000002e00)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, r2, r3, 0xffffffffffffffff], &(0x7f0000000940)=[{0x1, 0x3, 0xf, 0x6}, {0x5, 0x5, 0x7, 0x9}, {0x5, 0x4, 0x2, 0xb}, {0x3, 0x2, 0x0, 0xb}, {0x5, 0x3, 0x3}, {0x2, 0x3, 0xf, 0x5}], 0x10, 0x9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000c000000638af8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r5, 0x0, 0x0}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 26.0486451s ago: executing program 2 (id=526): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x24, 0xc, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x3, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, 0x0, 0x0) 25.724873066s ago: executing program 2 (id=529): socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x400000002, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180200002020702500000000002020207b0af8ff00000000bda100000000000026010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x400000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x80000, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x200400, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = socket$kcm(0x22, 0x3, 0x0) r5 = perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x374, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0xfffffffc, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0xa) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="140000002a000b", 0x7}], 0x1}, 0x0) r6 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0xfe33) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r0) close(r4) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="2e00000011008188040f80ec59acbc0413a181003f00000001010000000200000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2000000000000, 0x30385, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0xfffffd96, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="28010000000000000100000001", @ANYRES16=r4], 0x128}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="180200000a00000000000000030000008500000041000000180100008a6c6c250000000000000000000000bfa1000000000000e3010000f8ffffffb702000008040000b70300000095000000000000000000001d7a1adf26c1de6cf044ca60c08ff94c5eb2117a08eafb2f60f0b84a31b7c1700076e73b5e3092088d6f7329e3bcd6d278c718ef09fe07d27944075627e8a57ec5e24dfd4c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x212}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0xa12003, 0x0) close(r9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f086dd", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50) write$cgroup_subtree(r8, &(0x7f0000000100)=ANY=[], 0x36) 25.085005901s ago: executing program 1 (id=530): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d083910000000000000a1180015000600142603600e1209002100ff000401a80016000400144006000300036010fab94dcf5c0461c1d67f6f94007134c76ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccbb0dd6e4edef3d93452a92954b43370e9701", 0xd8}, {&(0x7f00000001c0)="c3f629bf9ca611f7aae4d2f31a53ff182f1fbc24850db07fb3e53ed293bbceac68c364c454e006ccf8588a97cefbb3d40c5673ba9561a53e81287ff1efbc7145a5b064b08d6dde2e949d8ad6f13b981acaa0392562788c48f5cfd5fd2250300ceba7a4080890bcb351403472afcd3896623e78edaac63a60058be041bfde499f2b315492a2a5fbd49e6727e09a1325f933bc1f5771d50b1db0b74e79e2f155de", 0xa0}, {&(0x7f0000000380)="e3ec43bc9f8544a0d9227e8f8c0bf3c314a4e6f90107f07d9bfbd67206b429f9e6566eaa1f0bdd06e7faa76d1c9dc8a90249b35ee0c8a4fe63bdccd607ebd51d2430ac350b52d4013a959808f195fd11546a8e8d93ca5758fe48b0b128a584927b5076c827cfa7dfab0caf20ce046f2a7b5faf6e72f264c06f", 0x79}], 0x3}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x7, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xa, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r5 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="130300007800911fdabcf8b3077fa54a07"], 0xfe33) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x3, 0x4, 0x86e, &(0x7f00000003c0)) socketpair(0x1e, 0x1, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0xc) perf_event_open(0x0, 0xffffffffffffffff, 0x5, r0, 0x3) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008000000"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_clone(0x100000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x44001840) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89a0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89a1, &(0x7f0000000080)) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000140)) 24.643769608s ago: executing program 3 (id=531): bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff23, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socket$kcm(0xa, 0x1, 0x106) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000001004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00034002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54}, 0x42) 24.386591415s ago: executing program 3 (id=532): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d083910000000000000a1180015000600142603600e1209002100ff000401a80016000400144006000300036010fab94dcf5c0461c1d67f6f94007134c76ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccbb0dd6e4edef3d93452a92954b43370e9701", 0xd8}, {&(0x7f00000001c0)="c3f629bf9ca611f7aae4d2f31a53ff182f1fbc24850db07fb3e53ed293bbceac68c364c454e006ccf8588a97cefbb3d40c5673ba9561a53e81287ff1efbc7145a5b064b08d6dde2e949d8ad6f13b981acaa0392562788c48f5cfd5fd2250300ceba7a4080890bcb351403472afcd3896623e78edaac63a60058be041bfde499f2b315492a2a5fbd49e6727e09a1325f933bc1f5771d50b1db0b74e79e2f155de", 0xa0}, {&(0x7f0000000380)="e3ec43bc9f8544a0d9227e8f8c0bf3c314a4e6f90107f07d9bfbd67206b429f9e6566eaa1f0bdd06e7faa76d1c9dc8a90249b35ee0c8a4fe63bdccd607ebd51d2430ac350b52d4013a959808f195fd11546a8e8d93ca5758fe48b0b128a584927b5076c827cfa7dfab0caf20ce046f2a7b5faf6e72f264c06f", 0x79}], 0x3}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x7, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xa, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r5 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="130300007800911fdabcf8b3077fa54a07"], 0xfe33) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x3, 0x4, 0x86e, &(0x7f00000003c0)) socketpair(0x1e, 0x1, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0xc) perf_event_open(0x0, 0xffffffffffffffff, 0x5, r0, 0x3) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008000000"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_clone(0x100000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x44001840) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89a1, &(0x7f0000000080)) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000140)) 24.333286177s ago: executing program 2 (id=533): r0 = socket$kcm(0x10, 0x400000002, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000002c0)=@generic={&(0x7f0000000280)='./file0\x00', 0x0, 0x8}, 0x18) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)=ANY=[@ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32], 0x50) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)={@ifindex, r3, 0x2f, 0x34}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x3eb4}, 0x94) r4 = socket$kcm(0xa, 0x2, 0x73) sendmsg$kcm(r4, &(0x7f0000001280)={&(0x7f00000010c0)=@in6={0xa, 0x0, 0x0, @local, 0x5}, 0x80, &(0x7f0000002bc0)=[{0x0}], 0x1}, 0x4c810) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x2, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@struct={0x5, 0x1, 0x0, 0xf, 0x0, 0x3, [{0x7, 0x4, 0x5}]}]}, {0x0, [0x30, 0xe, 0x0, 0x61, 0x61]}}, 0x0, 0x37, 0x0, 0x9}, 0x28) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r7 = socket$kcm(0x23, 0x5, 0x0) sendmsg$kcm(r7, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x10004000) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1b0000001a007f029e", 0x9}, {&(0x7f0000000200)="68cabf2dfb58fc0a01008888ffff0200258f", 0x12}], 0x2}, 0x4000000) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x2003) 24.278301118s ago: executing program 1 (id=534): r0 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x6, &(0x7f0000000100), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x3, @remote, 0x5, 0x3}, 0x18, 0x0}, 0x2600c055) 24.085017886s ago: executing program 1 (id=535): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x3efd7ab4c41335d9, @perf_config_ext={0x2, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x8, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xd, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @sock_ops}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x2, 0xb6, 0xd, 0xf2, 0x0, 0x7fffffff, 0x2000, 0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x6, 0x81}, 0x102000, 0x7fffffffffffffff, 0x3, 0x2, 0xf, 0x5, 0x7, 0x0, 0x1, 0x0, 0x6}, r2, 0x4, r1, 0x2) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000140)={0x6}, 0x8) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x35, &(0x7f00000005c0), 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[], 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{}], 0x1}, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x0, 0x37, 0x0, 0x0, 0x1}, 0x28) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89a0, &(0x7f0000000080)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89a2, &(0x7f0000000080)) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="d8000000140081044e81f782db44b9040a1d080201000000040000a118000200ff020000000000000000000000000001a80016ea1f000840032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f722f054f55153c6f94007134cf6ee08000a09108e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e0060000000000000580bb9ad809d5e1cace81b341139fe3cd4032e8edb12d", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x4040c04) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8914, &(0x7f0000000080)) 23.898536185s ago: executing program 2 (id=536): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e", 0x2e}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000700)=""/156, 0x9c}, {&(0x7f0000000d80)=""/4042, 0xfca}, {&(0x7f0000001d80)=""/4111, 0x100f}, {&(0x7f0000000640)=""/146, 0x92}, {&(0x7f00000001c0)=""/128, 0x80}], 0x5}, 0x120) 23.847458517s ago: executing program 3 (id=537): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x24, 0xc, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x3, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, 0x0, 0x0) 23.617411569s ago: executing program 3 (id=538): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8982, &(0x7f0000000080)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xf, 0x3, 0x2) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x4, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2405, 0x3) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="021200090200", 0x6}], 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa88"], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 23.567489131s ago: executing program 1 (id=539): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1f, 0x1e, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@btf_id={0x18, 0x1, 0x3, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000480)='GPL\x00', 0x10dd, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000a80)="d80000001d0081044e81f777db44b904021d080201000000040000a1bc0001000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c16fb4007134cf6ee08000a0e408e8d8ef075c11503c6bbace801bcb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322107c9fd6", 0x81}, {&(0x7f00000006c0)="54f6d4d87eb3f140c5", 0x9}, {&(0x7f0000000980)="027a64c0072ebbb1512b328dda11b4efd4ba07fc642b7e012bea071dbbdea51e41958755533ccce04d3e635cbe848495e723490d8e93db224d82d4fbfe76bd22fd358cd467795ad7febfc220d72f", 0x4e}], 0x3, 0x0, 0x0, 0x7400}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000740), 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$kcm(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8003}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20403, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x2, @perf_config_ext={0x9}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r7, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x4e1f, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast2}}}, @ip_retopts={{0x10}}], 0x30}, 0x844) sendmsg$kcm(r4, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000440)="a6", 0xffffff58}], 0x1}, 0x40001) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r3, r2}, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a40)={&(0x7f0000000b40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x62, 0x62, 0x6, [@datasec={0xd, 0x7, 0x0, 0xf, 0x2, [{0x5, 0x3, 0x5}, {0x3, 0x0, 0x9}, {0x5, 0x1, 0x25f}, {0x2, 0x1, 0x7}, {0x4, 0xfffffffe, 0x3}, {0x1, 0x677}, {0x2, 0x3, 0x8}], "0568"}]}, {0x0, [0x2e, 0x0, 0x5f, 0x2e]}}, &(0x7f0000000c00)=""/127, 0x82, 0x7f, 0x0, 0x1, 0x10000}, 0x28) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000d00)={0x0, 0x5, 0x8}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000e00)={{}, &(0x7f0000000d80), &(0x7f0000000dc0)=r1}, 0x20) 22.867044285s ago: executing program 2 (id=540): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x10801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b87, 0x2, @perf_bp={0x0, 0x8}, 0x8000, 0x5, 0x43a1bd76, 0x1, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7f}, 0x100904, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x5}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080)) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0x85, &(0x7f0000000ac0), 0x90) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b81, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x9, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa33"], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000"], 0xfdef) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x5, 0xd50, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 22.647726639s ago: executing program 3 (id=541): socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x400000002, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180200002020702500000000002020207b0af8ff00000000bda100000000000026010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x400000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x80000, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x200400, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = socket$kcm(0x22, 0x3, 0x0) r5 = perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x374, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0xfffffffc, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0xa) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="140000002a000b", 0x7}], 0x1}, 0x0) r6 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0xfe33) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r0) close(r4) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="2e00000011008188040f80ec59acbc0413a181003f00000001010000000200000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2000000000000, 0x30385, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0xfffffd96, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="28010000000000000100000001", @ANYRES16=r4], 0x128}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="180200000a00000000000000030000008500000041000000180100008a6c6c250000000000000000000000bfa1000000000000e3010000f8ffffffb702000008040000b70300000095000000000000000000001d7a1adf26c1de6cf044ca60c08ff94c5eb2117a08eafb2f60f0b84a31b7c1700076e73b5e3092088d6f7329e3bcd6d278c718ef09fe07d27944075627e8a57ec5e24dfd4c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x212}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0xa12003, 0x0) close(r9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f086dd", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50) write$cgroup_subtree(r8, &(0x7f0000000100)=ANY=[], 0x36) 21.042648355s ago: executing program 1 (id=542): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) close(r0) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) write$cgroup_devices(r0, 0x0, 0xffdd) (fail_nth: 2) 20.993620257s ago: executing program 3 (id=543): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d083910000000000000a1180015000600142603600e1209002100ff000401a80016000400144006000300036010fab94dcf5c0461c1d67f6f94007134c76ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccbb0dd6e4edef3d93452a92954b43370e9701", 0xd8}, {&(0x7f00000001c0)="c3f629bf9ca611f7aae4d2f31a53ff182f1fbc24850db07fb3e53ed293bbceac68c364c454e006ccf8588a97cefbb3d40c5673ba9561a53e81287ff1efbc7145a5b064b08d6dde2e949d8ad6f13b981acaa0392562788c48f5cfd5fd2250300ceba7a4080890bcb351403472afcd3896623e78edaac63a60058be041bfde499f2b315492a2a5fbd49e6727e09a1325f933bc1f5771d50b1db0b74e79e2f155de", 0xa0}, {&(0x7f0000000380)="e3ec43bc9f8544a0d9227e8f8c0bf3c314a4e6f90107f07d9bfbd67206b429f9e6566eaa1f0bdd06e7faa76d1c9dc8a90249b35ee0c8a4fe63bdccd607ebd51d2430ac350b52d4013a959808f195fd11546a8e8d93ca5758fe48b0b128a584927b5076c827cfa7dfab0caf20ce046f2a7b5faf6e72f264c06f", 0x79}], 0x3}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x7, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xa, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r5 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="130300007800911fdabcf8b3077fa54a07"], 0xfe33) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x3, 0x4, 0x86e, &(0x7f00000003c0)) socketpair(0x1e, 0x1, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0xc) perf_event_open(0x0, 0xffffffffffffffff, 0x5, r0, 0x3) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008000000"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_clone(0x100000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x44001840) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89a0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89a1, &(0x7f0000000080)) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000140)) 20.992421107s ago: executing program 0 (id=551): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1f, 0x1e, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@btf_id={0x18, 0x1, 0x3, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000480)='GPL\x00', 0x10dd, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000a80)="d80000001d0081044e81f777db44b904021d080201000000040000a1bc0001000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c16fb4007134cf6ee08000a0e408e8d8ef075c11503c6bbace801bcb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322107c9fd6", 0x81}, {&(0x7f00000006c0)="54f6d4d87eb3f140c5", 0x9}, {&(0x7f0000000980)="027a64c0072ebbb1512b328dda11b4efd4ba07fc642b7e012bea071dbbdea51e41958755533ccce04d3e635cbe848495e723490d8e93db224d82d4fbfe76bd22fd358cd467795ad7febfc220d72f", 0x4e}], 0x3, 0x0, 0x0, 0x7400}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000740), 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$kcm(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8003}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20403, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x2, @perf_config_ext={0x9}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r7, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x4e1f, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast2}}}, @ip_retopts={{0x10}}], 0x30}, 0x844) sendmsg$kcm(r4, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000440)="a6", 0xffffff58}], 0x1}, 0x40001) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r3, r2}, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a40)={&(0x7f0000000b40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6d, 0x6d, 0x6, [@datasec={0xd, 0x8, 0x0, 0xf, 0x1, [{0x1, 0x7, 0x5}, {0x5, 0x3, 0x5}, {0x3, 0x0, 0x9}, {0x5, 0x1, 0x25f}, {0x2, 0x1, 0x7}, {0x4, 0xfffffffe, 0x3}, {0x1, 0x677}, {0x2, 0x3, 0x8}], "05"}]}, {0x0, [0x2e, 0x0, 0x5f, 0x2e]}}, &(0x7f0000000c00)=""/127, 0x8e, 0x7f, 0x0, 0x1, 0x10000}, 0x28) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000d00)={0x0, 0x5, 0x8}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000e00)={{}, &(0x7f0000000d80), &(0x7f0000000dc0)=r1}, 0x20) 20.930425737s ago: executing program 2 (id=544): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0x2321, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x2, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1242, 0x0) r1 = socket$kcm(0xa, 0x1, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x4, 0xffffffff}, @const={0x0, 0x0, 0x0, 0x2}, @func_proto={0x2, 0x0, 0x0, 0x12, 0x2}, @var={0x2, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x54}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x200, '\x00', 0x0, r2, 0x1, 0x3}, 0x50) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='./file0\x00'}, 0x18) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000100)=r3) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) r5 = socket$kcm(0x10, 0x400000002, 0x0) r6 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r6, &(0x7f00000006c0)={&(0x7f0000000040)={0x2, 0x4e23, @private=0xa010101}, 0x10, 0x0}, 0xc000) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="02000000040000000100000027bf008000050000", @ANYRESDEC=r1, @ANYBLOB="0000002f8900000000000000000000000000004063acdb9b004baf3b7647728e64a2fdfd230800000022c94eacbe0172d21a51378e5f3f93d70dc4b895acce8a87a79f1c26075b08cb5669d0b37c863bebc46245cd33576910ab576c23db7deb1ceb4c9cbb4d6117d12341cfd3d267ad52f33597894d85254b9715915f7f2086d6af4855c838e18c428eabbe0952d9c0", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x7, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x10, 0x5, 0x0) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002a80)=[{&(0x7f00000002c0)=""/210, 0xd2}, {&(0x7f0000000800)=""/4090, 0xffa}, {&(0x7f0000001800)=""/217, 0xd9}, {&(0x7f0000000440)=""/31, 0x1f}, {&(0x7f00000019c0)=""/4096, 0x1000}, {&(0x7f0000000600)=""/67, 0x43}, {&(0x7f0000000680)=""/58, 0x3a}, {&(0x7f0000000700)=""/87, 0x57}, {&(0x7f0000001900)=""/86, 0x56}, {&(0x7f00000029c0)=""/181, 0xb5}], 0xa}, 0x12002) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000240), 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1e000000ffcbffff0d0000006f0c000000010000", @ANYRES32=r8, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32=r8, @ANYBLOB="0400000005000000010000000300"/24, @ANYRES32=r8, @ANYBLOB], 0x50) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a7401", 0x17}], 0x1, 0x0, 0x27}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="934300004300338b4ab502000000000002", @ANYRES32, @ANYRES8=r5], 0xfe33) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000500000000001e0939468c11e9ba000075000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000100000685020000000000000000001000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12}, 0x94) setsockopt$sock_attach_bpf(r4, 0x29, 0x35, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) write$cgroup_devices(r0, 0x0, 0xffdd) 19.697569774s ago: executing program 1 (id=545): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d083910000000000000a1180015000600142603600e1209002100ff000401a80016000400144006000300036010fab94dcf5c0461c1d67f6f94007134c76ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccbb0dd6e4edef3d93452a92954b43370e9701", 0xd8}, {&(0x7f00000001c0)="c3f629bf9ca611f7aae4d2f31a53ff182f1fbc24850db07fb3e53ed293bbceac68c364c454e006ccf8588a97cefbb3d40c5673ba9561a53e81287ff1efbc7145a5b064b08d6dde2e949d8ad6f13b981acaa0392562788c48f5cfd5fd2250300ceba7a4080890bcb351403472afcd3896623e78edaac63a60058be041bfde499f2b315492a2a5fbd49e6727e09a1325f933bc1f5771d50b1db0b74e79e2f155de", 0xa0}, {&(0x7f0000000380)="e3ec43bc9f8544a0d9227e8f8c0bf3c314a4e6f90107f07d9bfbd67206b429f9e6566eaa1f0bdd06e7faa76d1c9dc8a90249b35ee0c8a4fe63bdccd607ebd51d2430ac350b52d4013a959808f195fd11546a8e8d93ca5758fe48b0b128a584927b5076c827cfa7dfab0caf20ce046f2a7b5faf6e72f264c06f", 0x79}], 0x3}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x7, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xa, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r5 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="130300007800911fdabcf8b3077fa54a07"], 0xfe33) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x3, 0x4, 0x86e, &(0x7f00000003c0)) socketpair(0x1e, 0x1, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0xc) perf_event_open(0x0, 0xffffffffffffffff, 0x5, r0, 0x3) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008000000"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_clone(0x100000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x44001840) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89a1, &(0x7f0000000080)) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000140)) 5.597878152s ago: executing program 32 (id=551): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1f, 0x1e, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@btf_id={0x18, 0x1, 0x3, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000480)='GPL\x00', 0x10dd, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000a80)="d80000001d0081044e81f777db44b904021d080201000000040000a1bc0001000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c16fb4007134cf6ee08000a0e408e8d8ef075c11503c6bbace801bcb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322107c9fd6", 0x81}, {&(0x7f00000006c0)="54f6d4d87eb3f140c5", 0x9}, {&(0x7f0000000980)="027a64c0072ebbb1512b328dda11b4efd4ba07fc642b7e012bea071dbbdea51e41958755533ccce04d3e635cbe848495e723490d8e93db224d82d4fbfe76bd22fd358cd467795ad7febfc220d72f", 0x4e}], 0x3, 0x0, 0x0, 0x7400}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000740), 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$kcm(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8003}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20403, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x2, @perf_config_ext={0x9}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r7, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x4e1f, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast2}}}, @ip_retopts={{0x10}}], 0x30}, 0x844) sendmsg$kcm(r4, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000440)="a6", 0xffffff58}], 0x1}, 0x40001) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r3, r2}, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a40)={&(0x7f0000000b40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6d, 0x6d, 0x6, [@datasec={0xd, 0x8, 0x0, 0xf, 0x1, [{0x1, 0x7, 0x5}, {0x5, 0x3, 0x5}, {0x3, 0x0, 0x9}, {0x5, 0x1, 0x25f}, {0x2, 0x1, 0x7}, {0x4, 0xfffffffe, 0x3}, {0x1, 0x677}, {0x2, 0x3, 0x8}], "05"}]}, {0x0, [0x2e, 0x0, 0x5f, 0x2e]}}, &(0x7f0000000c00)=""/127, 0x8e, 0x7f, 0x0, 0x1, 0x10000}, 0x28) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000d00)={0x0, 0x5, 0x8}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000e00)={{}, &(0x7f0000000d80), &(0x7f0000000dc0)=r1}, 0x20) 5.385748677s ago: executing program 33 (id=544): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0x2321, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x2, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1242, 0x0) r1 = socket$kcm(0xa, 0x1, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x4, 0xffffffff}, @const={0x0, 0x0, 0x0, 0x2}, @func_proto={0x2, 0x0, 0x0, 0x12, 0x2}, @var={0x2, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x54}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x200, '\x00', 0x0, r2, 0x1, 0x3}, 0x50) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='./file0\x00'}, 0x18) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000100)=r3) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) r5 = socket$kcm(0x10, 0x400000002, 0x0) r6 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r6, &(0x7f00000006c0)={&(0x7f0000000040)={0x2, 0x4e23, @private=0xa010101}, 0x10, 0x0}, 0xc000) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="02000000040000000100000027bf008000050000", @ANYRESDEC=r1, @ANYBLOB="0000002f8900000000000000000000000000004063acdb9b004baf3b7647728e64a2fdfd230800000022c94eacbe0172d21a51378e5f3f93d70dc4b895acce8a87a79f1c26075b08cb5669d0b37c863bebc46245cd33576910ab576c23db7deb1ceb4c9cbb4d6117d12341cfd3d267ad52f33597894d85254b9715915f7f2086d6af4855c838e18c428eabbe0952d9c0", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x7, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x10, 0x5, 0x0) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002a80)=[{&(0x7f00000002c0)=""/210, 0xd2}, {&(0x7f0000000800)=""/4090, 0xffa}, {&(0x7f0000001800)=""/217, 0xd9}, {&(0x7f0000000440)=""/31, 0x1f}, {&(0x7f00000019c0)=""/4096, 0x1000}, {&(0x7f0000000600)=""/67, 0x43}, {&(0x7f0000000680)=""/58, 0x3a}, {&(0x7f0000000700)=""/87, 0x57}, {&(0x7f0000001900)=""/86, 0x56}, {&(0x7f00000029c0)=""/181, 0xb5}], 0xa}, 0x12002) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000240), 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1e000000ffcbffff0d0000006f0c000000010000", @ANYRES32=r8, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32=r8, @ANYBLOB="0400000005000000010000000300"/24, @ANYRES32=r8, @ANYBLOB], 0x50) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a7401", 0x17}], 0x1, 0x0, 0x27}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="934300004300338b4ab502000000000002", @ANYRES32, @ANYRES8=r5], 0xfe33) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000500000000001e0939468c11e9ba000075000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000100000685020000000000000000001000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12}, 0x94) setsockopt$sock_attach_bpf(r4, 0x29, 0x35, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) write$cgroup_devices(r0, 0x0, 0xffdd) 137.76µs ago: executing program 34 (id=543): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d083910000000000000a1180015000600142603600e1209002100ff000401a80016000400144006000300036010fab94dcf5c0461c1d67f6f94007134c76ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccbb0dd6e4edef3d93452a92954b43370e9701", 0xd8}, {&(0x7f00000001c0)="c3f629bf9ca611f7aae4d2f31a53ff182f1fbc24850db07fb3e53ed293bbceac68c364c454e006ccf8588a97cefbb3d40c5673ba9561a53e81287ff1efbc7145a5b064b08d6dde2e949d8ad6f13b981acaa0392562788c48f5cfd5fd2250300ceba7a4080890bcb351403472afcd3896623e78edaac63a60058be041bfde499f2b315492a2a5fbd49e6727e09a1325f933bc1f5771d50b1db0b74e79e2f155de", 0xa0}, {&(0x7f0000000380)="e3ec43bc9f8544a0d9227e8f8c0bf3c314a4e6f90107f07d9bfbd67206b429f9e6566eaa1f0bdd06e7faa76d1c9dc8a90249b35ee0c8a4fe63bdccd607ebd51d2430ac350b52d4013a959808f195fd11546a8e8d93ca5758fe48b0b128a584927b5076c827cfa7dfab0caf20ce046f2a7b5faf6e72f264c06f", 0x79}], 0x3}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x7, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xa, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r5 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="130300007800911fdabcf8b3077fa54a07"], 0xfe33) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x3, 0x4, 0x86e, &(0x7f00000003c0)) socketpair(0x1e, 0x1, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0xc) perf_event_open(0x0, 0xffffffffffffffff, 0x5, r0, 0x3) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008000000"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_clone(0x100000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x44001840) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89a0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89a1, &(0x7f0000000080)) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000140)) 0s ago: executing program 35 (id=545): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d083910000000000000a1180015000600142603600e1209002100ff000401a80016000400144006000300036010fab94dcf5c0461c1d67f6f94007134c76ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccbb0dd6e4edef3d93452a92954b43370e9701", 0xd8}, {&(0x7f00000001c0)="c3f629bf9ca611f7aae4d2f31a53ff182f1fbc24850db07fb3e53ed293bbceac68c364c454e006ccf8588a97cefbb3d40c5673ba9561a53e81287ff1efbc7145a5b064b08d6dde2e949d8ad6f13b981acaa0392562788c48f5cfd5fd2250300ceba7a4080890bcb351403472afcd3896623e78edaac63a60058be041bfde499f2b315492a2a5fbd49e6727e09a1325f933bc1f5771d50b1db0b74e79e2f155de", 0xa0}, {&(0x7f0000000380)="e3ec43bc9f8544a0d9227e8f8c0bf3c314a4e6f90107f07d9bfbd67206b429f9e6566eaa1f0bdd06e7faa76d1c9dc8a90249b35ee0c8a4fe63bdccd607ebd51d2430ac350b52d4013a959808f195fd11546a8e8d93ca5758fe48b0b128a584927b5076c827cfa7dfab0caf20ce046f2a7b5faf6e72f264c06f", 0x79}], 0x3}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x7, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xa, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r5 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="130300007800911fdabcf8b3077fa54a07"], 0xfe33) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x3, 0x4, 0x86e, &(0x7f00000003c0)) socketpair(0x1e, 0x1, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0xc) perf_event_open(0x0, 0xffffffffffffffff, 0x5, r0, 0x3) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008000000"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_clone(0x100000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x44001840) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89a1, &(0x7f0000000080)) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000140)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.136' (ED25519) to the list of known hosts. [ 63.465490][ T5752] cgroup: Unknown subsys name 'net' [ 63.596815][ T5752] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 64.966758][ T5752] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 66.369226][ T5774] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 66.389306][ T5774] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 66.399296][ T5775] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 66.407744][ T5775] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 66.415455][ T5774] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 66.423593][ T5775] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 66.425234][ T5776] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 66.438632][ T5775] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 66.446863][ T5776] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 66.449744][ T5775] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 66.462348][ T5775] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 66.466048][ T5778] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 66.469778][ T5775] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 66.484313][ T5776] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 66.495372][ T5778] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 66.502855][ T5776] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 66.510251][ T5776] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 66.518817][ T5776] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 66.527264][ T5778] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 66.527773][ T5775] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 66.535019][ T5778] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 66.542171][ T5775] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 66.550101][ T5778] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 66.568740][ T5083] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 66.921327][ T5766] chnl_net:caif_netlink_parms(): no params data found [ 66.969651][ T5765] chnl_net:caif_netlink_parms(): no params data found [ 67.030160][ T5763] chnl_net:caif_netlink_parms(): no params data found [ 67.142922][ T5766] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.152214][ T5766] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.159686][ T5766] bridge_slave_0: entered allmulticast mode [ 67.166499][ T5766] bridge_slave_0: entered promiscuous mode [ 67.202867][ T5766] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.211755][ T5766] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.219421][ T5766] bridge_slave_1: entered allmulticast mode [ 67.226113][ T5766] bridge_slave_1: entered promiscuous mode [ 67.262714][ T5765] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.270034][ T5765] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.277187][ T5765] bridge_slave_0: entered allmulticast mode [ 67.284118][ T5765] bridge_slave_0: entered promiscuous mode [ 67.304020][ T5766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.313615][ T5764] chnl_net:caif_netlink_parms(): no params data found [ 67.331493][ T5765] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.340480][ T5765] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.347749][ T5765] bridge_slave_1: entered allmulticast mode [ 67.354788][ T5765] bridge_slave_1: entered promiscuous mode [ 67.371408][ T5763] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.378656][ T5763] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.385832][ T5763] bridge_slave_0: entered allmulticast mode [ 67.393303][ T5763] bridge_slave_0: entered promiscuous mode [ 67.402792][ T5766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.442858][ T5766] team0: Port device team_slave_0 added [ 67.460865][ T5766] team0: Port device team_slave_1 added [ 67.466994][ T5763] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.474904][ T5763] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.482279][ T5763] bridge_slave_1: entered allmulticast mode [ 67.489279][ T5763] bridge_slave_1: entered promiscuous mode [ 67.521620][ T5765] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.568759][ T5765] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.582165][ T5763] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.592310][ T5766] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.599728][ T5766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.625793][ T5766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.665913][ T5763] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.675775][ T5766] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.682878][ T5766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.709131][ T5766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.730577][ T5764] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.737770][ T5764] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.747330][ T5764] bridge_slave_0: entered allmulticast mode [ 67.754227][ T5764] bridge_slave_0: entered promiscuous mode [ 67.763233][ T5764] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.770554][ T5764] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.777868][ T5764] bridge_slave_1: entered allmulticast mode [ 67.784783][ T5764] bridge_slave_1: entered promiscuous mode [ 67.809882][ T5765] team0: Port device team_slave_0 added [ 67.855497][ T5765] team0: Port device team_slave_1 added [ 67.863687][ T5764] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.879679][ T5763] team0: Port device team_slave_0 added [ 67.899233][ T5763] team0: Port device team_slave_1 added [ 67.925609][ T5764] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.956429][ T5766] hsr_slave_0: entered promiscuous mode [ 67.962995][ T5766] hsr_slave_1: entered promiscuous mode [ 68.011464][ T5765] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.018633][ T5765] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.045245][ T5765] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.061575][ T5764] team0: Port device team_slave_0 added [ 68.068289][ T5763] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.075508][ T5763] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.101955][ T5763] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.131143][ T5765] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.138223][ T5765] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.165018][ T5765] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.180325][ T5764] team0: Port device team_slave_1 added [ 68.186676][ T5763] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.193740][ T5763] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.220067][ T5763] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.288271][ T5763] hsr_slave_0: entered promiscuous mode [ 68.294684][ T5763] hsr_slave_1: entered promiscuous mode [ 68.301365][ T5763] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.310085][ T5763] Cannot create hsr debugfs directory [ 68.352907][ T5765] hsr_slave_0: entered promiscuous mode [ 68.359196][ T5765] hsr_slave_1: entered promiscuous mode [ 68.365960][ T5765] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.374162][ T5765] Cannot create hsr debugfs directory [ 68.389695][ T5764] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.396672][ T5764] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.423438][ T5764] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.463829][ T5764] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.470973][ T5764] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.498035][ T5764] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.518635][ T5775] Bluetooth: hci2: command tx timeout [ 68.588530][ T5775] Bluetooth: hci3: command tx timeout [ 68.594284][ T5775] Bluetooth: hci1: command tx timeout [ 68.600364][ T5778] Bluetooth: hci0: command tx timeout [ 68.644741][ T5764] hsr_slave_0: entered promiscuous mode [ 68.651164][ T5764] hsr_slave_1: entered promiscuous mode [ 68.657278][ T5764] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.665222][ T5764] Cannot create hsr debugfs directory [ 68.870109][ T5766] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 68.902793][ T5766] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 68.912758][ T5766] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 68.948016][ T5766] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 68.977984][ T5763] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 69.000369][ T5763] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 69.040912][ T5763] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 69.052651][ T5763] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 69.083497][ T5765] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 69.096856][ T5765] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 69.120006][ T5765] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 69.130863][ T5765] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 69.203644][ T5764] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 69.220902][ T5764] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 69.231993][ T5764] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 69.254206][ T5764] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 69.354188][ T5766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.368330][ T5763] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.414041][ T5766] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.451457][ T2960] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.458908][ T2960] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.469215][ T2960] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.476292][ T2960] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.491881][ T5763] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.538047][ T2960] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.545316][ T2960] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.570234][ T5765] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.590880][ T159] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.597976][ T159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.633727][ T5764] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.661516][ T5765] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.697746][ T2960] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.704949][ T2960] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.727093][ T5764] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.754230][ T5763] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.779910][ T2960] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.787026][ T2960] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.805302][ T2960] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.812519][ T2960] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.836537][ T159] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.844188][ T159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.066238][ T5766] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.235647][ T5766] veth0_vlan: entered promiscuous mode [ 70.262489][ T5763] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.284684][ T5766] veth1_vlan: entered promiscuous mode [ 70.373615][ T5763] veth0_vlan: entered promiscuous mode [ 70.412214][ T5765] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.450316][ T5766] veth0_macvtap: entered promiscuous mode [ 70.458079][ T5763] veth1_vlan: entered promiscuous mode [ 70.487186][ T5766] veth1_macvtap: entered promiscuous mode [ 70.515250][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.531013][ T5764] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.548122][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.565048][ T5763] veth0_macvtap: entered promiscuous mode [ 70.582159][ T5766] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.592420][ T5766] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.599495][ T5775] Bluetooth: hci2: command tx timeout [ 70.601918][ T5766] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.615813][ T5766] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.634769][ T5763] veth1_macvtap: entered promiscuous mode [ 70.669044][ T5775] Bluetooth: hci1: command tx timeout [ 70.674493][ T5775] Bluetooth: hci0: command tx timeout [ 70.680033][ T5778] Bluetooth: hci3: command tx timeout [ 70.680067][ T5763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.703065][ T5763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.716246][ T5763] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.731415][ T5763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.741935][ T5763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.753504][ T5763] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.789127][ T5763] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.798042][ T5763] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.807423][ T5763] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.816678][ T5763] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.857894][ T5765] veth0_vlan: entered promiscuous mode [ 70.928307][ T5765] veth1_vlan: entered promiscuous mode [ 70.992933][ T5764] veth0_vlan: entered promiscuous mode [ 70.995216][ T2986] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.011727][ T2960] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.024002][ T2960] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.038638][ T2986] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.064898][ T5764] veth1_vlan: entered promiscuous mode [ 71.103962][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.107057][ T5765] veth0_macvtap: entered promiscuous mode [ 71.132562][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.173394][ T5765] veth1_macvtap: entered promiscuous mode [ 71.178643][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.183766][ T5764] veth0_macvtap: entered promiscuous mode [ 71.186936][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.225892][ T5764] veth1_macvtap: entered promiscuous mode [ 71.263116][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.276729][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.287993][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.301636][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.315446][ T5765] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.326247][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.337112][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.347258][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.357748][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.370455][ T5765] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.396606][ T5765] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.406587][ T5765] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.420663][ T5765] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.432481][ T5765] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.453626][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.464701][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.475165][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.486251][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.496590][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.507444][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.534060][ T5764] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.558011][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.585352][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.600760][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.613561][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.625873][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.642338][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.645532][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.655054][ T5764] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.665589][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.694929][ T5764] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.703982][ T5764] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.713634][ T5764] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.722650][ T5764] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.900096][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.923687][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.980362][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.992276][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.151764][ T2986] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.161464][ T2986] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.175758][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.209000][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.658389][ C1] hrtimer: interrupt took 67959 ns [ 72.678900][ T5775] Bluetooth: hci2: command tx timeout [ 72.749038][ T5771] Bluetooth: hci3: command tx timeout [ 72.755172][ T5778] Bluetooth: hci1: command tx timeout [ 72.761052][ T5775] Bluetooth: hci0: command tx timeout [ 73.589063][ T5852] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8'. [ 74.029903][ T5861] syzkaller0: entered promiscuous mode [ 74.035434][ T5861] syzkaller0: entered allmulticast mode [ 74.773525][ T5775] Bluetooth: hci2: command tx timeout [ 74.841032][ T5778] Bluetooth: hci1: command tx timeout [ 74.847113][ T5778] Bluetooth: hci3: command tx timeout [ 74.853068][ T5775] Bluetooth: hci0: command tx timeout [ 74.975217][ T5876] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 75.001002][ T5878] netlink: 'syz.3.16': attribute type 9 has an invalid length. [ 75.017749][ T5878] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.16'. [ 75.060004][ T5879] warning: `syz.1.15' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 75.266001][ T5884] À: port 1(vlan0) entered blocking state [ 75.329593][ T5884] À: port 1(vlan0) entered disabled state [ 75.371890][ T5884] vlan0: entered allmulticast mode [ 75.407326][ T5884] veth0_vlan: entered allmulticast mode [ 75.423956][ T5884] vlan0: entered promiscuous mode [ 75.581881][ T5883] netlink: 132 bytes leftover after parsing attributes in process `syz.2.17'. [ 75.612510][ T5893] À: port 1(vlan0) entered blocking state [ 75.618540][ T5893] À: port 1(vlan0) entered disabled state [ 75.629000][ T5893] vlan0: entered allmulticast mode [ 75.634167][ T5893] veth0_vlan: entered allmulticast mode [ 75.659685][ T5893] vlan0: entered promiscuous mode [ 75.731479][ T5888] netlink: 132 bytes leftover after parsing attributes in process `syz.1.19'. [ 76.013751][ T5902] netlink: 'syz.2.22': attribute type 10 has an invalid length. [ 76.023907][ T5902] veth0_macvtap: left promiscuous mode [ 77.513306][ T5922] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.28'. [ 77.523059][ T5922] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.28'. [ 77.532666][ T5920] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.28'. [ 77.569261][ T5922] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.28'. [ 78.604311][ T5938] netlink: 132 bytes leftover after parsing attributes in process `syz.2.34'. [ 79.461939][ T5956] netlink: 132 bytes leftover after parsing attributes in process `syz.0.39'. [ 80.097776][ T5972] À: port 1(vlan0) entered blocking state [ 80.107503][ T5972] À: port 1(vlan0) entered disabled state [ 80.122916][ T5972] vlan0: entered allmulticast mode [ 80.137255][ T5972] veth0_vlan: entered allmulticast mode [ 80.183943][ T5972] vlan0: entered promiscuous mode [ 80.205610][ T5973] netlink: 132 bytes leftover after parsing attributes in process `syz.3.45'. [ 81.359655][ T5997] netlink: 132 bytes leftover after parsing attributes in process `syz.2.52'. [ 81.754509][ T6007] À: port 1(vlan0) entered blocking state [ 81.763658][ T6007] À: port 1(vlan0) entered disabled state [ 81.774408][ T6007] vlan0: entered allmulticast mode [ 81.788653][ T6007] veth0_vlan: entered allmulticast mode [ 81.797452][ T6007] vlan0: entered promiscuous mode [ 81.839176][ T6012] netlink: 132 bytes leftover after parsing attributes in process `syz.0.57'. [ 81.873667][ T787] cfg80211: failed to load regulatory.db [ 82.130381][ T6025] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.61'. [ 82.140102][ T6025] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.61'. [ 82.149861][ T6022] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.61'. [ 82.162435][ T6025] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.61'. [ 83.663844][ T6046] netlink: 'syz.3.78': attribute type 10 has an invalid length. [ 83.689601][ T6046] veth0_macvtap: left promiscuous mode [ 84.672060][ T6055] netlink: 'syz.0.83': attribute type 10 has an invalid length. [ 84.700086][ T6055] veth0_macvtap: left promiscuous mode [ 84.869376][ T6052] netlink: 132 bytes leftover after parsing attributes in process `syz.1.71'. [ 85.267332][ T6069] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.73'. [ 85.292534][ T6069] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.73'. [ 85.306896][ T6068] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.73'. [ 85.334770][ T6072] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.73'. [ 86.305104][ T6085] netlink: 132 bytes leftover after parsing attributes in process `syz.3.81'. [ 86.553920][ T6092] netlink: 132 bytes leftover after parsing attributes in process `syz.3.84'. [ 86.760301][ T6095] netlink: 132 bytes leftover after parsing attributes in process `syz.0.86'. [ 87.246155][ T6107] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.88'. [ 87.261479][ T6107] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.88'. [ 87.370786][ T6113] netlink: 'syz.1.89': attribute type 10 has an invalid length. [ 87.381472][ T6113] veth0_macvtap: left promiscuous mode [ 88.487564][ T6126] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 89.957568][ T6154] __nla_validate_parse: 4 callbacks suppressed [ 89.957583][ T6154] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.101'. [ 90.109127][ T6158] syzkaller0: entered promiscuous mode [ 90.114746][ T6158] syzkaller0: entered allmulticast mode [ 90.369931][ T6166] netlink: 'syz.2.105': attribute type 9 has an invalid length. [ 90.377754][ T6166] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.105'. [ 90.649732][ T6175] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 92.446274][ T6192] netlink: 132 bytes leftover after parsing attributes in process `syz.3.111'. [ 92.858032][ T6209] syzkaller0: entered promiscuous mode [ 92.863809][ T6209] syzkaller0: entered allmulticast mode [ 93.223977][ T6219] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.119'. [ 94.969507][ T6247] netlink: 'syz.0.129': attribute type 10 has an invalid length. [ 95.120395][ T6247] team0: Device veth0_vlan failed to register rx_handler [ 95.271772][ T6250] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.130'. [ 95.405412][ T6253] sit0: entered promiscuous mode [ 95.432301][ T6253] sit0: entered allmulticast mode [ 95.513933][ T6255] netlink: 132 bytes leftover after parsing attributes in process `syz.1.133'. [ 95.620629][ T6257] netlink: 'syz.0.134': attribute type 10 has an invalid length. [ 95.670593][ T6257] bridge0: port 3(macsec0) entered blocking state [ 95.680085][ T6257] bridge0: port 3(macsec0) entered disabled state [ 95.689809][ T6257] macsec0: entered allmulticast mode [ 95.703095][ T6257] veth1_macvtap: entered allmulticast mode [ 95.720885][ T6257] macsec0: entered promiscuous mode [ 95.727217][ T6257] bridge0: port 3(macsec0) entered blocking state [ 95.734166][ T6257] bridge0: port 3(macsec0) entered forwarding state [ 95.795680][ T6264] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.135'. [ 96.006006][ T6267] netlink: 'syz.2.145': attribute type 2 has an invalid length. [ 96.023300][ T6267] netlink: 'syz.2.145': attribute type 8 has an invalid length. [ 96.043830][ T6267] netlink: 132 bytes leftover after parsing attributes in process `syz.2.145'. [ 96.063073][ T5778] Bluetooth: hci0: ISO packet for unknown connection handle 28 [ 96.789452][ T6277] netlink: 'syz.0.147': attribute type 10 has an invalid length. [ 96.825790][ T6277] netlink: 55 bytes leftover after parsing attributes in process `syz.0.147'. [ 97.019993][ T6277] vlan0 (unregistering): left allmulticast mode [ 97.051951][ T6277] veth0_vlan: left allmulticast mode [ 97.085644][ T6277] vlan0 (unregistering): left promiscuous mode [ 97.115284][ T6277] À: port 1(vlan0) entered disabled state [ 98.624791][ T6298] netlink: 'syz.1.142': attribute type 10 has an invalid length. [ 98.657933][ T6298] bridge0: port 3(macsec0) entered blocking state [ 98.679451][ T6298] bridge0: port 3(macsec0) entered disabled state [ 98.705480][ T6298] macsec0: entered allmulticast mode [ 98.722097][ T6298] veth1_macvtap: entered allmulticast mode [ 98.747743][ T6298] macsec0: entered promiscuous mode [ 98.764892][ T6298] bridge0: port 3(macsec0) entered blocking state [ 98.771544][ T6298] bridge0: port 3(macsec0) entered forwarding state [ 99.180726][ T6310] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.148'. [ 99.241131][ T6311] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.150'. [ 99.276784][ T6310] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.148'. [ 99.326899][ T6306] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.148'. [ 99.702696][ T5778] Bluetooth: hci2: ISO packet for unknown connection handle 28 [ 99.973533][ T6323] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.153'. [ 100.185483][ T6327] sit0: entered promiscuous mode [ 100.191536][ T6327] sit0: entered allmulticast mode [ 100.251094][ T6334] netlink: 'syz.2.156': attribute type 10 has an invalid length. [ 100.615583][ T6343] netlink: 'syz.0.159': attribute type 8 has an invalid length. [ 100.624590][ T6343] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.159'. [ 100.789991][ T6346] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.160'. [ 100.799600][ T6346] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.160'. [ 100.809411][ T6345] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.160'. [ 101.227260][ T5778] Bluetooth: hci3: ISO packet for unknown connection handle 28 [ 101.391204][ T6359] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.164'. [ 102.005456][ T6368] netlink: 'syz.3.167': attribute type 10 has an invalid length. [ 102.014170][ T6368] netlink: 55 bytes leftover after parsing attributes in process `syz.3.167'. [ 102.134765][ T6368] vlan0 (unregistering): left allmulticast mode [ 102.155725][ T6375] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.166'. [ 102.165335][ T6368] veth0_vlan: left allmulticast mode [ 102.171467][ T6368] vlan0 (unregistering): left promiscuous mode [ 102.197502][ T6368] À: port 1(vlan0) entered disabled state [ 102.464573][ T6380] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.169'. [ 102.562277][ T6380] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.169'. [ 102.632880][ T6378] sit0: entered promiscuous mode [ 102.678034][ T6378] sit0: entered allmulticast mode [ 102.818479][ T6377] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.169'. [ 103.061569][ T6393] netlink: 'syz.2.172': attribute type 10 has an invalid length. [ 103.797759][ T6398] netlink: 'syz.1.182': attribute type 10 has an invalid length. [ 103.914013][ T6398] vlan0 (unregistering): left allmulticast mode [ 103.928081][ T6398] veth0_vlan: left allmulticast mode [ 103.940524][ T6398] vlan0 (unregistering): left promiscuous mode [ 103.952227][ T6398] À: port 1(vlan0) entered disabled state [ 104.370897][ T5778] Bluetooth: hci1: ISO packet for unknown connection handle 28 [ 105.046072][ T6418] syz.2.178 uses obsolete (PF_INET,SOCK_PACKET) [ 107.254896][ T6414] netlink: 'syz.0.177': attribute type 2 has an invalid length. [ 107.264141][ T6414] netlink: 'syz.0.177': attribute type 8 has an invalid length. [ 107.275402][ T6414] __nla_validate_parse: 1 callbacks suppressed [ 107.275418][ T6414] netlink: 132 bytes leftover after parsing attributes in process `syz.0.177'. [ 107.421951][ T6420] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.430956][ T6420] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.446296][ T6420] bridge0: entered allmulticast mode [ 107.617340][ T6428] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.183'. [ 107.655242][ T6430] netlink: 'syz.2.184': attribute type 10 has an invalid length. [ 107.759069][ T6431] sit0: entered promiscuous mode [ 107.774982][ T6431] sit0: entered allmulticast mode [ 107.858232][ T6433] netlink: 'syz.1.185': attribute type 8 has an invalid length. [ 107.892767][ T6433] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.185'. [ 108.066835][ T6447] netlink: 'syz.1.189': attribute type 10 has an invalid length. [ 108.247143][ T6453] bridge0: port 3(macsec0) entered disabled state [ 108.254089][ T6453] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.262076][ T6453] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.272812][ T6453] bridge0: entered allmulticast mode [ 108.911146][ T6461] netlink: 'syz.3.192': attribute type 2 has an invalid length. [ 108.926878][ T6461] netlink: 'syz.3.192': attribute type 8 has an invalid length. [ 108.936966][ T6461] netlink: 132 bytes leftover after parsing attributes in process `syz.3.192'. [ 109.189676][ T6466] netlink: 'syz.2.194': attribute type 10 has an invalid length. [ 109.229187][ T6466] netlink: 40 bytes leftover after parsing attributes in process `syz.2.194'. [ 109.261216][ T6466] bridge0: port 3(ipvlan1) entered blocking state [ 109.279865][ T6466] bridge0: port 3(ipvlan1) entered disabled state [ 109.289384][ T6466] ipvlan1: entered allmulticast mode [ 109.296858][ T6466] ipvlan1: left allmulticast mode [ 109.302882][ T6466] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 109.319354][ T6472] netlink: 'syz.0.196': attribute type 10 has an invalid length. [ 109.327158][ T6472] netlink: 40 bytes leftover after parsing attributes in process `syz.0.196'. [ 109.357348][ T6472] bridge0: port 4(ipvlan1) entered blocking state [ 109.374350][ T6472] bridge0: port 4(ipvlan1) entered disabled state [ 109.396183][ T6472] ipvlan1: entered allmulticast mode [ 109.408693][ T6472] veth0_vlan: entered allmulticast mode [ 109.437274][ T6472] ipvlan1: left allmulticast mode [ 109.467495][ T6472] veth0_vlan: left allmulticast mode [ 109.486629][ T6472] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 109.516649][ T6471] netlink: 'syz.1.197': attribute type 21 has an invalid length. [ 109.524943][ T6471] IPv6: NLM_F_CREATE should be specified when creating new route [ 110.846304][ T6489] FAULT_INJECTION: forcing a failure. [ 110.846304][ T6489] name failslab, interval 1, probability 0, space 0, times 0 [ 110.872675][ T6489] CPU: 0 PID: 6489 Comm: syz.2.204 Not tainted syzkaller #0 [ 110.880112][ T6489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 110.890211][ T6489] Call Trace: [ 110.893516][ T6489] [ 110.896463][ T6489] dump_stack_lvl+0x18c/0x250 [ 110.901256][ T6489] ? show_regs_print_info+0x20/0x20 [ 110.906473][ T6489] ? load_image+0x400/0x400 [ 110.910992][ T6489] ? __might_sleep+0xe0/0xe0 [ 110.915677][ T6489] ? __lock_acquire+0x7d40/0x7d40 [ 110.920732][ T6489] should_fail_ex+0x39d/0x4d0 [ 110.925443][ T6489] should_failslab+0x9/0x20 [ 110.929974][ T6489] slab_pre_alloc_hook+0x59/0x310 [ 110.935042][ T6489] ? __lock_acquire+0x7d40/0x7d40 [ 110.940066][ T6489] kmem_cache_alloc_node+0x60/0x320 [ 110.945267][ T6489] ? __alloc_skb+0x103/0x2c0 [ 110.949971][ T6489] __alloc_skb+0x103/0x2c0 [ 110.954412][ T6489] netlink_sendmsg+0x66a/0xbf0 [ 110.959209][ T6489] ? netlink_getsockopt+0x590/0x590 [ 110.964425][ T6489] ? aa_sock_msg_perm+0x94/0x150 [ 110.969368][ T6489] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 110.974655][ T6489] ? security_socket_sendmsg+0x80/0xa0 [ 110.980103][ T6489] ? netlink_getsockopt+0x590/0x590 [ 110.985303][ T6489] ____sys_sendmsg+0x5ba/0x960 [ 110.990077][ T6489] ? __asan_memset+0x22/0x40 [ 110.994680][ T6489] ? __sys_sendmsg_sock+0x30/0x30 [ 110.994702][ T6489] ? __import_iovec+0x5f2/0x850 [ 111.004696][ T6489] ? import_iovec+0x73/0xa0 [ 111.009254][ T6489] ___sys_sendmsg+0x2a6/0x360 [ 111.013943][ T6489] ? get_pid_task+0x20/0x1e0 [ 111.018550][ T6489] ? __sys_sendmsg+0x2a0/0x2a0 [ 111.023319][ T6489] ? __lock_acquire+0x7d40/0x7d40 [ 111.028372][ T6489] __se_sys_sendmsg+0x1c2/0x2b0 [ 111.033272][ T6489] ? __x64_sys_sendmsg+0x80/0x80 [ 111.038248][ T6489] ? lockdep_hardirqs_on+0x98/0x150 [ 111.043451][ T6489] do_syscall_64+0x55/0xa0 [ 111.047869][ T6489] ? clear_bhb_loop+0x40/0x90 [ 111.052562][ T6489] ? clear_bhb_loop+0x40/0x90 [ 111.057269][ T6489] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 111.063190][ T6489] RIP: 0033:0x7f571099c629 [ 111.067648][ T6489] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.087344][ T6489] RSP: 002b:00007f57118cb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 111.095788][ T6489] RAX: ffffffffffffffda RBX: 00007f5710c15fa0 RCX: 00007f571099c629 [ 111.103874][ T6489] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 111.111842][ T6489] RBP: 00007f57118cb090 R08: 0000000000000000 R09: 0000000000000000 [ 111.119819][ T6489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 111.127802][ T6489] R13: 00007f5710c16038 R14: 00007f5710c15fa0 R15: 00007ffcea908668 [ 111.135876][ T6489] [ 112.068054][ T6506] syz.0.211 (6506) used greatest stack depth: 20008 bytes left [ 112.195129][ T6515] delete_channel: no stack [ 112.315595][ T6522] validate_nla: 6 callbacks suppressed [ 112.315608][ T6522] netlink: 'syz.0.216': attribute type 10 has an invalid length. [ 112.406903][ T6524] netlink: 'syz.2.217': attribute type 10 has an invalid length. [ 112.414924][ T6524] netlink: 55 bytes leftover after parsing attributes in process `syz.2.217'. [ 112.458108][ T6524] vlan0 (unregistering): left allmulticast mode [ 112.464774][ T6524] veth0_vlan: left allmulticast mode [ 112.473964][ T6524] vlan0 (unregistering): left promiscuous mode [ 112.481239][ T6524] À: port 1(vlan0) entered disabled state [ 112.752914][ T6533] netlink: 'syz.1.219': attribute type 9 has an invalid length. [ 112.761133][ T6533] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.219'. [ 113.271256][ T6535] netlink: 'syz.0.221': attribute type 10 has an invalid length. [ 113.295860][ T6539] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.305741][ T6539] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.318666][ T6539] bridge0: entered allmulticast mode [ 113.394918][ T6537] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.222'. [ 116.667050][ T6555] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 116.674913][ T6555] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 116.856264][ T6560] netlink: 'syz.3.227': attribute type 10 has an invalid length. [ 116.873601][ T6560] netlink: 55 bytes leftover after parsing attributes in process `syz.3.227'. [ 116.907605][ T6563] netlink: 60 bytes leftover after parsing attributes in process `syz.2.228'. [ 116.917601][ T6563] netlink: 60 bytes leftover after parsing attributes in process `syz.2.228'. [ 116.958169][ T6563] netlink: 60 bytes leftover after parsing attributes in process `syz.2.228'. [ 117.248610][ T6574] netlink: 'syz.2.232': attribute type 10 has an invalid length. [ 118.136973][ T6584] FAULT_INJECTION: forcing a failure. [ 118.136973][ T6584] name failslab, interval 1, probability 0, space 0, times 0 [ 118.170136][ T6584] CPU: 1 PID: 6584 Comm: syz.3.234 Not tainted syzkaller #0 [ 118.177478][ T6584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 118.187562][ T6584] Call Trace: [ 118.190862][ T6584] [ 118.193894][ T6584] dump_stack_lvl+0x18c/0x250 [ 118.198618][ T6584] ? show_regs_print_info+0x20/0x20 [ 118.203863][ T6584] ? load_image+0x400/0x400 [ 118.208381][ T6584] ? __might_sleep+0xe0/0xe0 [ 118.212990][ T6584] ? __lock_acquire+0x7d40/0x7d40 [ 118.218029][ T6584] ? rcu_is_watching+0x15/0xb0 [ 118.222823][ T6584] should_fail_ex+0x39d/0x4d0 [ 118.227533][ T6584] should_failslab+0x9/0x20 [ 118.232052][ T6584] slab_pre_alloc_hook+0x59/0x310 [ 118.237134][ T6584] ? sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 118.243037][ T6584] __kmem_cache_alloc_node+0x53/0x250 [ 118.248418][ T6584] ? sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 118.254404][ T6584] kmalloc_trace+0x2a/0xe0 [ 118.258824][ T6584] sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 118.264564][ T6584] sctp_association_new+0x15d3/0x25c0 [ 118.270125][ T6584] sctp_connect_new_asoc+0x2de/0x6a0 [ 118.275410][ T6584] ? __sctp_connect+0xd80/0xd80 [ 118.280257][ T6584] ? __local_bh_enable_ip+0x13a/0x1c0 [ 118.285628][ T6584] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 118.291170][ T6584] ? security_sctp_bind_connect+0x89/0xb0 [ 118.296886][ T6584] sctp_sendmsg+0x1575/0x28c0 [ 118.301567][ T6584] ? sctp_getsockopt+0xb60/0xb60 [ 118.306498][ T6584] ? aa_sk_perm+0x83c/0x970 [ 118.311042][ T6584] ? aa_af_perm+0x330/0x330 [ 118.315565][ T6584] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 118.322002][ T6584] ? sock_rps_record_flow+0x19/0x3f0 [ 118.327299][ T6584] ? inet_sendmsg+0xe9/0x2f0 [ 118.331886][ T6584] ? inet_send_prepare+0x260/0x260 [ 118.337014][ T6584] ____sys_sendmsg+0x5ba/0x960 [ 118.341773][ T6584] ? __lock_acquire+0x7d40/0x7d40 [ 118.346880][ T6584] ? __asan_memset+0x22/0x40 [ 118.351465][ T6584] ? __sys_sendmsg_sock+0x30/0x30 [ 118.356487][ T6584] ? __import_iovec+0x5f2/0x850 [ 118.361431][ T6584] ? import_iovec+0x73/0xa0 [ 118.365937][ T6584] ___sys_sendmsg+0x2a6/0x360 [ 118.370619][ T6584] ? get_pid_task+0x20/0x1e0 [ 118.375244][ T6584] ? __sys_sendmsg+0x2a0/0x2a0 [ 118.380091][ T6584] ? __lock_acquire+0x7d40/0x7d40 [ 118.385129][ T6584] __se_sys_sendmsg+0x1c2/0x2b0 [ 118.389975][ T6584] ? __x64_sys_sendmsg+0x80/0x80 [ 118.394917][ T6584] ? lockdep_hardirqs_on+0x98/0x150 [ 118.400121][ T6584] do_syscall_64+0x55/0xa0 [ 118.404538][ T6584] ? clear_bhb_loop+0x40/0x90 [ 118.409210][ T6584] ? clear_bhb_loop+0x40/0x90 [ 118.413888][ T6584] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 118.419773][ T6584] RIP: 0033:0x7febf9b9c629 [ 118.424192][ T6584] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.443884][ T6584] RSP: 002b:00007febfaad3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 118.452296][ T6584] RAX: ffffffffffffffda RBX: 00007febf9e15fa0 RCX: 00007febf9b9c629 [ 118.460260][ T6584] RDX: 00000000000003e8 RSI: 00002000000004c0 RDI: 0000000000000004 [ 118.468222][ T6584] RBP: 00007febfaad3090 R08: 0000000000000000 R09: 0000000000000000 [ 118.476186][ T6584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 118.484166][ T6584] R13: 00007febf9e16038 R14: 00007febf9e15fa0 R15: 00007ffc7f2bef08 [ 118.492159][ T6584] [ 118.583477][ T6586] netlink: 'syz.2.235': attribute type 39 has an invalid length. [ 119.023351][ T6598] netlink: 'syz.2.239': attribute type 10 has an invalid length. [ 119.042012][ T6598] netlink: 55 bytes leftover after parsing attributes in process `syz.2.239'. [ 119.137188][ T6600] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.240'. [ 119.362124][ T6606] netlink: 'syz.0.244': attribute type 10 has an invalid length. [ 119.467408][ T6609] netlink: 196 bytes leftover after parsing attributes in process `syz.2.245'. [ 119.697244][ T6619] netlink: 'syz.1.249': attribute type 39 has an invalid length. [ 120.022645][ T6625] netlink: 'syz.1.250': attribute type 10 has an invalid length. [ 120.030747][ T6625] netlink: 55 bytes leftover after parsing attributes in process `syz.1.250'. [ 120.584010][ T6634] netlink: 132 bytes leftover after parsing attributes in process `syz.0.252'. [ 121.201023][ T6645] netlink: 132 bytes leftover after parsing attributes in process `syz.0.264'. [ 121.346891][ T6652] netlink: 'syz.2.257': attribute type 2 has an invalid length. [ 121.349043][ T6647] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.256'. [ 121.373767][ T6652] netlink: 'syz.2.257': attribute type 3 has an invalid length. [ 121.382735][ T6652] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.257'. [ 121.616964][ T6656] netlink: 60 bytes leftover after parsing attributes in process `syz.1.258'. [ 121.678552][ T6656] netlink: 60 bytes leftover after parsing attributes in process `syz.1.258'. [ 121.809525][ T6659] netlink: 'syz.3.259': attribute type 10 has an invalid length. [ 121.834691][ T6660] netlink: 'syz.0.260': attribute type 10 has an invalid length. [ 124.338257][ T6698] netlink: 'syz.3.273': attribute type 10 has an invalid length. [ 124.353245][ T6698] __nla_validate_parse: 3 callbacks suppressed [ 124.353265][ T6698] netlink: 55 bytes leftover after parsing attributes in process `syz.3.273'. [ 125.395818][ T6703] netlink: 'syz.2.275': attribute type 10 has an invalid length. [ 125.612262][ T6704] delete_channel: no stack [ 126.189852][ T6703] team0: Device hsr_slave_0 failed to register rx_handler [ 126.225598][ T6703] syz.2.275 (6703) used greatest stack depth: 19592 bytes left [ 126.252189][ T6718] netlink: 'syz.3.279': attribute type 10 has an invalid length. [ 126.731776][ T6718] team0: Device hsr_slave_0 failed to register rx_handler [ 126.762277][ T6718] syz.3.279 (6718) used greatest stack depth: 17864 bytes left [ 126.861923][ T6730] netlink: 132 bytes leftover after parsing attributes in process `syz.2.281'. [ 126.997128][ T6733] netlink: 'syz.0.283': attribute type 10 has an invalid length. [ 127.018135][ T6733] netlink: 55 bytes leftover after parsing attributes in process `syz.0.283'. [ 127.719929][ T6750] netlink: 'syz.2.289': attribute type 33 has an invalid length. [ 127.800432][ T6750] netlink: 152 bytes leftover after parsing attributes in process `syz.2.289'. [ 127.848648][ T6750] `: renamed from team0 (while UP) [ 128.391224][ T6761] netlink: 'syz.1.292': attribute type 2 has an invalid length. [ 128.415611][ T6761] netlink: 'syz.1.292': attribute type 8 has an invalid length. [ 128.425428][ T6761] netlink: 132 bytes leftover after parsing attributes in process `syz.1.292'. [ 128.546435][ T6765] netlink: 'syz.0.293': attribute type 2 has an invalid length. [ 128.567324][ T6765] netlink: 'syz.0.293': attribute type 8 has an invalid length. [ 128.579099][ T6765] netlink: 132 bytes leftover after parsing attributes in process `syz.0.293'. [ 128.705358][ T6770] netlink: 'syz.2.295': attribute type 10 has an invalid length. [ 128.715342][ T6770] netlink: 55 bytes leftover after parsing attributes in process `syz.2.295'. [ 129.452437][ T6776] netlink: 196 bytes leftover after parsing attributes in process `syz.3.296'. [ 129.563351][ T6778] netlink: 132 bytes leftover after parsing attributes in process `syz.2.297'. [ 130.656123][ T6801] netlink: 'syz.3.305': attribute type 10 has an invalid length. [ 130.683156][ T6801] netlink: 55 bytes leftover after parsing attributes in process `syz.3.305'. [ 130.821709][ T6806] netlink: 'syz.2.307': attribute type 2 has an invalid length. [ 130.838693][ T6806] netlink: 'syz.2.307': attribute type 8 has an invalid length. [ 130.863231][ T6806] netlink: 132 bytes leftover after parsing attributes in process `syz.2.307'. [ 130.898091][ T6809] netlink: 209592 bytes leftover after parsing attributes in process `syz.3.309'. [ 131.005167][ T6815] netlink: 196 bytes leftover after parsing attributes in process `syz.0.311'. [ 132.005712][ T6832] netlink: 'syz.2.317': attribute type 10 has an invalid length. [ 132.017336][ T6832] netlink: 55 bytes leftover after parsing attributes in process `syz.2.317'. [ 132.156370][ T6834] netlink: 132 bytes leftover after parsing attributes in process `syz.0.318'. [ 132.475609][ T6848] netlink: 'syz.1.324': attribute type 2 has an invalid length. [ 132.518991][ T6848] netlink: 'syz.1.324': attribute type 8 has an invalid length. [ 132.538628][ T6848] netlink: 132 bytes leftover after parsing attributes in process `syz.1.324'. [ 132.816961][ T6860] netlink: 'syz.2.328': attribute type 10 has an invalid length. [ 132.857768][ T6860] netlink: 55 bytes leftover after parsing attributes in process `syz.2.328'. [ 133.030426][ T6868] netlink: 'syz.2.331': attribute type 10 has an invalid length. [ 133.073219][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.080692][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.526147][ T6873] FAULT_INJECTION: forcing a failure. [ 133.526147][ T6873] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 133.541423][ T6873] CPU: 1 PID: 6873 Comm: syz.3.333 Not tainted syzkaller #0 [ 133.548826][ T6873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 133.558897][ T6873] Call Trace: [ 133.562192][ T6873] [ 133.565116][ T6873] dump_stack_lvl+0x18c/0x250 [ 133.569794][ T6873] ? show_regs_print_info+0x20/0x20 [ 133.574986][ T6873] ? load_image+0x400/0x400 [ 133.579484][ T6873] ? __might_fault+0xaa/0x120 [ 133.584150][ T6873] ? __lock_acquire+0x7d40/0x7d40 [ 133.589168][ T6873] should_fail_ex+0x39d/0x4d0 [ 133.593877][ T6873] _copy_from_user+0x2f/0xe0 [ 133.598499][ T6873] bpf_prog_test_run_skb+0x266/0x12b0 [ 133.603866][ T6873] ? __fget_files+0x28/0x4b0 [ 133.608447][ T6873] ? __fget_files+0x28/0x4b0 [ 133.613031][ T6873] ? __fget_files+0x43d/0x4b0 [ 133.617719][ T6873] ? cpu_online+0x60/0x60 [ 133.622047][ T6873] bpf_prog_test_run+0x321/0x390 [ 133.626989][ T6873] __sys_bpf+0x49d/0x890 [ 133.631224][ T6873] ? bpf_link_show_fdinfo+0x390/0x390 [ 133.636596][ T6873] ? lock_chain_count+0x20/0x20 [ 133.641445][ T6873] __x64_sys_bpf+0x7c/0x90 [ 133.645862][ T6873] do_syscall_64+0x55/0xa0 [ 133.650270][ T6873] ? clear_bhb_loop+0x40/0x90 [ 133.654935][ T6873] ? clear_bhb_loop+0x40/0x90 [ 133.659952][ T6873] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 133.665832][ T6873] RIP: 0033:0x7febf9b9c629 [ 133.670240][ T6873] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 133.689924][ T6873] RSP: 002b:00007febfaad3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 133.698504][ T6873] RAX: ffffffffffffffda RBX: 00007febf9e15fa0 RCX: 00007febf9b9c629 [ 133.706471][ T6873] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 133.714447][ T6873] RBP: 00007febfaad3090 R08: 0000000000000000 R09: 0000000000000000 [ 133.722435][ T6873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 133.730403][ T6873] R13: 00007febf9e16038 R14: 00007febf9e15fa0 R15: 00007ffc7f2bef08 [ 133.738389][ T6873] [ 134.107703][ T6884] netlink: 'syz.0.337': attribute type 33 has an invalid length. [ 134.117270][ T6884] `: renamed from team0 (while UP) [ 134.272835][ T6888] netlink: 'syz.3.339': attribute type 10 has an invalid length. [ 134.532914][ T6893] __nla_validate_parse: 4 callbacks suppressed [ 134.532958][ T6893] netlink: 132 bytes leftover after parsing attributes in process `syz.3.340'. [ 134.687823][ T6895] netlink: 132 bytes leftover after parsing attributes in process `syz.1.341'. [ 134.931820][ T6900] netlink: 132 bytes leftover after parsing attributes in process `syz.0.342'. [ 139.340610][ T6922] validate_nla: 5 callbacks suppressed [ 139.340626][ T6922] netlink: 'syz.0.348': attribute type 10 has an invalid length. [ 139.363027][ T6922] netlink: 55 bytes leftover after parsing attributes in process `syz.0.348'. [ 139.787162][ T6931] netlink: 'syz.0.359': attribute type 10 has an invalid length. [ 139.816597][ T6931] netlink: 55 bytes leftover after parsing attributes in process `syz.0.359'. [ 142.513228][ T6937] netlink: 'syz.0.352': attribute type 2 has an invalid length. [ 142.557119][ T6937] netlink: 'syz.0.352': attribute type 8 has an invalid length. [ 142.584234][ T6937] netlink: 132 bytes leftover after parsing attributes in process `syz.0.352'. [ 143.478137][ T6956] ref_ctr_offset mismatch. inode: 0x7a offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xfe [ 143.513305][ T6958] netlink: 'syz.0.358': attribute type 10 has an invalid length. [ 143.767116][ T6963] netlink: 'syz.1.361': attribute type 10 has an invalid length. [ 143.778456][ T6963] netlink: 55 bytes leftover after parsing attributes in process `syz.1.361'. [ 144.396547][ T6980] netlink: 'syz.3.367': attribute type 2 has an invalid length. [ 144.404904][ T6980] netlink: 'syz.3.367': attribute type 8 has an invalid length. [ 144.413054][ T6980] netlink: 132 bytes leftover after parsing attributes in process `syz.3.367'. [ 145.337405][ T6992] netlink: 'syz.2.371': attribute type 10 has an invalid length. [ 145.350736][ T6992] netlink: 55 bytes leftover after parsing attributes in process `syz.2.371'. [ 145.702511][ T7003] netlink: 'syz.1.375': attribute type 33 has an invalid length. [ 145.728510][ T7003] netlink: 152 bytes leftover after parsing attributes in process `syz.1.375'. [ 145.737762][ T7003] `: renamed from team0 (while UP) [ 145.835518][ T7006] netlink: 'syz.2.376': attribute type 10 has an invalid length. [ 146.793963][ T7020] netlink: 180 bytes leftover after parsing attributes in process `syz.3.381'. [ 147.070054][ T7024] netlink: 'syz.2.382': attribute type 10 has an invalid length. [ 147.100686][ T7024] netlink: 55 bytes leftover after parsing attributes in process `syz.2.382'. [ 147.970279][ T7042] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 148.348257][ T7046] netlink: 'syz.0.390': attribute type 10 has an invalid length. [ 148.484613][ T7049] Zero length message leads to an empty skb [ 149.343259][ T7058] netlink: 'syz.3.394': attribute type 10 has an invalid length. [ 149.380093][ T7058] netlink: 55 bytes leftover after parsing attributes in process `syz.3.394'. [ 149.572360][ T7060] FAULT_INJECTION: forcing a failure. [ 149.572360][ T7060] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 149.599630][ T7060] CPU: 0 PID: 7060 Comm: syz.0.396 Not tainted syzkaller #0 [ 149.607059][ T7060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 149.617133][ T7060] Call Trace: [ 149.620435][ T7060] [ 149.623384][ T7060] dump_stack_lvl+0x18c/0x250 [ 149.628096][ T7060] ? show_regs_print_info+0x20/0x20 [ 149.633414][ T7060] ? load_image+0x400/0x400 [ 149.637960][ T7060] ? __might_fault+0xaa/0x120 [ 149.638680][ T7066] netlink: 'syz.2.398': attribute type 21 has an invalid length. [ 149.642642][ T7060] ? __lock_acquire+0x7d40/0x7d40 [ 149.642696][ T7060] should_fail_ex+0x39d/0x4d0 [ 149.642729][ T7060] _copy_from_user+0x2f/0xe0 [ 149.650841][ T7066] netlink: 'syz.2.398': attribute type 6 has an invalid length. [ 149.655543][ T7060] kstrtouint_from_user+0xde/0x170 [ 149.655577][ T7060] ? kstrtol_from_user+0x190/0x190 [ 149.655619][ T7060] proc_fail_nth_write+0x8f/0x250 [ 149.687760][ T7060] ? proc_fail_nth_read+0x260/0x260 [ 149.692965][ T7060] ? proc_fail_nth_read+0x260/0x260 [ 149.698154][ T7060] vfs_write+0x296/0x990 [ 149.702403][ T7060] ? file_end_write+0x250/0x250 [ 149.707256][ T7060] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 149.713504][ T7060] ? __fdget_pos+0x2a3/0x330 [ 149.718093][ T7060] ? __fdget_pos+0x241/0x330 [ 149.722685][ T7060] ? __fdget_pos+0x2a3/0x330 [ 149.727428][ T7060] ? ksys_write+0x75/0x260 [ 149.731849][ T7060] ksys_write+0x150/0x260 [ 149.736182][ T7060] ? __ia32_sys_read+0x90/0x90 [ 149.740971][ T7060] ? lockdep_hardirqs_on+0x98/0x150 [ 149.746195][ T7060] do_syscall_64+0x55/0xa0 [ 149.750603][ T7060] ? clear_bhb_loop+0x40/0x90 [ 149.755359][ T7060] ? clear_bhb_loop+0x40/0x90 [ 149.760030][ T7060] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 149.765917][ T7060] RIP: 0033:0x7f060295cece [ 149.770329][ T7060] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 149.790014][ T7060] RSP: 002b:00007f06038defe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 149.798439][ T7060] RAX: ffffffffffffffda RBX: 00007f06038df6c0 RCX: 00007f060295cece [ 149.806411][ T7060] RDX: 0000000000000001 RSI: 00007f06038df0a0 RDI: 0000000000000008 [ 149.814377][ T7060] RBP: 00007f06038df090 R08: 0000000000000000 R09: 0000000000000000 [ 149.822428][ T7060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 149.830474][ T7060] R13: 00007f0602c16038 R14: 00007f0602c15fa0 R15: 00007ffc915baf18 [ 149.838563][ T7060] [ 149.862898][ T7066] netlink: 132 bytes leftover after parsing attributes in process `syz.2.398'. [ 149.939130][ T7066] netlink: 'syz.2.398': attribute type 10 has an invalid length. [ 149.947242][ T7066] netlink: 156 bytes leftover after parsing attributes in process `syz.2.398'. [ 150.134757][ T7069] netlink: 'syz.3.400': attribute type 1 has an invalid length. [ 150.144212][ T7069] netlink: 'syz.3.400': attribute type 2 has an invalid length. [ 150.152808][ T7069] netlink: 'syz.3.400': attribute type 2 has an invalid length. [ 150.161551][ T7069] netlink: 'syz.3.400': attribute type 3 has an invalid length. [ 150.170595][ T7069] netlink: 'syz.3.400': attribute type 4 has an invalid length. [ 150.190147][ T7069] netlink: 'syz.3.400': attribute type 5 has an invalid length. [ 150.197968][ T7069] netlink: 'syz.3.400': attribute type 6 has an invalid length. [ 150.238033][ T7069] netlink: 126304 bytes leftover after parsing attributes in process `syz.3.400'. [ 150.777724][ T7079] netlink: 48 bytes leftover after parsing attributes in process `syz.2.402'. [ 150.792464][ T7079] netlink: 4 bytes leftover after parsing attributes in process `syz.2.402'. [ 152.200486][ T7104] netlink: 152 bytes leftover after parsing attributes in process `syz.3.414'. [ 152.210083][ T7104] `: renamed from team0 (while UP) [ 152.232734][ T7108] netlink: 152 bytes leftover after parsing attributes in process `syz.1.415'. [ 152.674898][ T7116] netlink: 60 bytes leftover after parsing attributes in process `syz.2.417'. [ 152.841015][ T7118] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.418'. [ 154.212047][ T7147] FAULT_INJECTION: forcing a failure. [ 154.212047][ T7147] name failslab, interval 1, probability 0, space 0, times 0 [ 154.225534][ T7147] CPU: 0 PID: 7147 Comm: syz.3.429 Not tainted syzkaller #0 [ 154.232941][ T7147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 154.243181][ T7147] Call Trace: [ 154.246564][ T7147] [ 154.249589][ T7147] dump_stack_lvl+0x18c/0x250 [ 154.254409][ T7147] ? show_regs_print_info+0x20/0x20 [ 154.259696][ T7147] ? load_image+0x400/0x400 [ 154.264307][ T7147] ? __might_sleep+0xe0/0xe0 [ 154.268999][ T7147] ? __lock_acquire+0x7d40/0x7d40 [ 154.274123][ T7147] should_fail_ex+0x39d/0x4d0 [ 154.278980][ T7147] should_failslab+0x9/0x20 [ 154.283532][ T7147] slab_pre_alloc_hook+0x59/0x310 [ 154.288619][ T7147] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 154.294397][ T7147] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 154.300160][ T7147] __kmem_cache_alloc_node+0x53/0x250 [ 154.305613][ T7147] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 154.311466][ T7147] __kmalloc+0xa4/0x230 [ 154.315702][ T7147] tomoyo_realpath_from_path+0xe3/0x5d0 [ 154.321370][ T7147] tomoyo_path_number_perm+0x248/0x620 [ 154.326879][ T7147] ? tomoyo_path_number_perm+0x217/0x620 [ 154.332567][ T7147] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 154.338095][ T7147] ? ksys_write+0x1c4/0x260 [ 154.342914][ T7147] ? __fget_files+0x28/0x4b0 [ 154.347731][ T7147] ? __fget_files+0x28/0x4b0 [ 154.352477][ T7147] security_file_ioctl+0x70/0xa0 [ 154.357501][ T7147] __se_sys_ioctl+0x48/0x170 [ 154.362168][ T7147] do_syscall_64+0x55/0xa0 [ 154.366634][ T7147] ? clear_bhb_loop+0x40/0x90 [ 154.371363][ T7147] ? clear_bhb_loop+0x40/0x90 [ 154.376098][ T7147] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 154.382048][ T7147] RIP: 0033:0x7febf9b9c629 [ 154.386511][ T7147] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 154.406281][ T7147] RSP: 002b:00007febfaad3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 154.414769][ T7147] RAX: ffffffffffffffda RBX: 00007febf9e15fa0 RCX: 00007febf9b9c629 [ 154.422788][ T7147] RDX: 0000200000000080 RSI: 00000000000089f1 RDI: 0000000000000006 [ 154.430810][ T7147] RBP: 00007febfaad3090 R08: 0000000000000000 R09: 0000000000000000 [ 154.438821][ T7147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.446927][ T7147] R13: 00007febf9e16038 R14: 00007febf9e15fa0 R15: 00007ffc7f2bef08 [ 154.455075][ T7147] [ 154.462164][ T7145] netlink: 152 bytes leftover after parsing attributes in process `syz.0.428'. [ 154.462264][ T7147] ERROR: Out of memory at tomoyo_realpath_from_path. [ 155.137452][ T7159] validate_nla: 11 callbacks suppressed [ 155.137483][ T7159] netlink: 'syz.0.432': attribute type 33 has an invalid length. [ 155.158505][ T7159] netlink: 152 bytes leftover after parsing attributes in process `syz.0.432'. [ 155.307522][ T7164] netlink: 'syz.3.435': attribute type 1 has an invalid length. [ 155.350819][ T7164] netlink: 154788 bytes leftover after parsing attributes in process `syz.3.435'. [ 158.998742][ T7174] netlink: 132 bytes leftover after parsing attributes in process `syz.0.439'. [ 159.062472][ T7180] netlink: 'syz.2.442': attribute type 33 has an invalid length. [ 159.079846][ T7180] netlink: 152 bytes leftover after parsing attributes in process `syz.2.442'. [ 163.047222][ T7216] netlink: 'syz.2.453': attribute type 33 has an invalid length. [ 163.068580][ T7216] netlink: 152 bytes leftover after parsing attributes in process `syz.2.453'. [ 163.156436][ T7212] netlink: 132 bytes leftover after parsing attributes in process `syz.1.454'. [ 163.242771][ T7218] netlink: 'syz.0.455': attribute type 10 has an invalid length. [ 163.559623][ T7225] FAULT_INJECTION: forcing a failure. [ 163.559623][ T7225] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 163.579321][ T7225] CPU: 0 PID: 7225 Comm: syz.1.456 Not tainted syzkaller #0 [ 163.586760][ T7225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 163.596916][ T7225] Call Trace: [ 163.600213][ T7225] [ 163.603153][ T7225] dump_stack_lvl+0x18c/0x250 [ 163.607846][ T7225] ? show_regs_print_info+0x20/0x20 [ 163.613097][ T7225] ? load_image+0x400/0x400 [ 163.617596][ T7225] ? __might_fault+0xaa/0x120 [ 163.622268][ T7225] ? __lock_acquire+0x7d40/0x7d40 [ 163.627295][ T7225] should_fail_ex+0x39d/0x4d0 [ 163.631979][ T7225] _copy_from_user+0x2f/0xe0 [ 163.636608][ T7225] bpf_prog_test_run_skb+0x266/0x12b0 [ 163.642060][ T7225] ? __fget_files+0x28/0x4b0 [ 163.646649][ T7225] ? __fget_files+0x28/0x4b0 [ 163.651235][ T7225] ? __fget_files+0x43d/0x4b0 [ 163.655924][ T7225] ? cpu_online+0x60/0x60 [ 163.660268][ T7225] bpf_prog_test_run+0x321/0x390 [ 163.665203][ T7225] __sys_bpf+0x49d/0x890 [ 163.669441][ T7225] ? bpf_link_show_fdinfo+0x390/0x390 [ 163.674815][ T7225] ? lock_chain_count+0x20/0x20 [ 163.679655][ T7225] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 163.685634][ T7225] __x64_sys_bpf+0x7c/0x90 [ 163.690054][ T7225] do_syscall_64+0x55/0xa0 [ 163.694462][ T7225] ? clear_bhb_loop+0x40/0x90 [ 163.699131][ T7225] ? clear_bhb_loop+0x40/0x90 [ 163.703811][ T7225] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 163.709701][ T7225] RIP: 0033:0x7fb271b9c629 [ 163.714110][ T7225] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 163.733720][ T7225] RSP: 002b:00007fb272b4a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 163.742132][ T7225] RAX: ffffffffffffffda RBX: 00007fb271e15fa0 RCX: 00007fb271b9c629 [ 163.750101][ T7225] RDX: 0000000000000050 RSI: 00002000000000c0 RDI: 000000000000000a [ 163.758066][ T7225] RBP: 00007fb272b4a090 R08: 0000000000000000 R09: 0000000000000000 [ 163.766039][ T7225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 163.774089][ T7225] R13: 00007fb271e16038 R14: 00007fb271e15fa0 R15: 00007ffe92135e38 [ 163.782067][ T7225] [ 164.192380][ T7238] netlink: 'syz.1.468': attribute type 33 has an invalid length. [ 164.207757][ T7238] netlink: 152 bytes leftover after parsing attributes in process `syz.1.468'. [ 164.324688][ T7241] netlink: 'syz.0.460': attribute type 33 has an invalid length. [ 164.332965][ T7241] netlink: 152 bytes leftover after parsing attributes in process `syz.0.460'. [ 168.153897][ T7264] netlink: 'syz.0.466': attribute type 33 has an invalid length. [ 168.172854][ T7264] netlink: 152 bytes leftover after parsing attributes in process `syz.0.466'. [ 168.247135][ T7266] netlink: 132 bytes leftover after parsing attributes in process `syz.2.467'. [ 168.263526][ T7268] netlink: 'syz.1.476': attribute type 33 has an invalid length. [ 168.276013][ T7268] netlink: 152 bytes leftover after parsing attributes in process `syz.1.476'. [ 168.720199][ T7279] netlink: 'syz.0.470': attribute type 10 has an invalid length. [ 173.092812][ T7305] delete_channel: no stack [ 173.121758][ T7305] delete_channel: no stack [ 173.764972][ T7308] netlink: 'syz.1.480': attribute type 33 has an invalid length. [ 173.788726][ T7308] netlink: 152 bytes leftover after parsing attributes in process `syz.1.480'. [ 174.113722][ T7318] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.485'. [ 174.123360][ T7318] openvswitch: netlink: Flow key attribute not present in set flow. [ 174.272415][ T7319] netlink: 132 bytes leftover after parsing attributes in process `syz.0.484'. [ 174.597493][ T7324] netlink: 'syz.3.488': attribute type 10 has an invalid length. [ 178.343054][ T7347] netlink: 'syz.0.495': attribute type 33 has an invalid length. [ 178.355702][ T7347] netlink: 152 bytes leftover after parsing attributes in process `syz.0.495'. [ 178.414018][ T7344] netlink: 132 bytes leftover after parsing attributes in process `syz.3.494'. [ 179.255160][ T7367] FAULT_INJECTION: forcing a failure. [ 179.255160][ T7367] name failslab, interval 1, probability 0, space 0, times 0 [ 179.269871][ T7367] CPU: 0 PID: 7367 Comm: syz.0.502 Not tainted syzkaller #0 [ 179.273510][ T7365] netlink: 'syz.3.501': attribute type 10 has an invalid length. [ 179.277256][ T7367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 179.295173][ T7367] Call Trace: [ 179.298474][ T7367] [ 179.301427][ T7367] dump_stack_lvl+0x18c/0x250 [ 179.306150][ T7367] ? verify_lock_unused+0x140/0x140 [ 179.311373][ T7367] ? show_regs_print_info+0x20/0x20 [ 179.316577][ T7367] ? load_image+0x400/0x400 [ 179.321086][ T7367] ? mark_lock+0x94/0x320 [ 179.325417][ T7367] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 179.331408][ T7367] should_fail_ex+0x39d/0x4d0 [ 179.336091][ T7367] should_failslab+0x9/0x20 [ 179.340597][ T7367] slab_pre_alloc_hook+0x59/0x310 [ 179.345635][ T7367] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 179.351792][ T7367] ? sctp_add_bind_addr+0x8c/0x360 [ 179.356905][ T7367] __kmem_cache_alloc_node+0x53/0x250 [ 179.362295][ T7367] ? sctp_add_bind_addr+0x8c/0x360 [ 179.367411][ T7367] kmalloc_trace+0x2a/0xe0 [ 179.371835][ T7367] sctp_add_bind_addr+0x8c/0x360 [ 179.376795][ T7367] sctp_copy_local_addr_list+0x315/0x4f0 [ 179.382434][ T7367] ? sctp_copy_local_addr_list+0xa5/0x4f0 [ 179.388700][ T7367] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 179.394801][ T7367] ? sctp_v4_is_any+0x35/0x60 [ 179.399495][ T7367] ? sctp_copy_one_addr+0x8c/0x350 [ 179.404651][ T7367] sctp_bind_addr_copy+0xb3/0x3c0 [ 179.409698][ T7367] ? sctp_assoc_set_bind_addr_from_ep+0x43/0x1a0 [ 179.416026][ T7367] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 179.422352][ T7367] sctp_connect_new_asoc+0x2f9/0x6a0 [ 179.427651][ T7367] ? __sctp_connect+0xd80/0xd80 [ 179.432586][ T7367] ? sctp_sendmsg+0xbc7/0x28c0 [ 179.437344][ T7367] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 179.442912][ T7367] ? security_sctp_bind_connect+0x89/0xb0 [ 179.448635][ T7367] sctp_sendmsg+0x1575/0x28c0 [ 179.453318][ T7367] ? sctp_getsockopt+0xb60/0xb60 [ 179.458248][ T7367] ? lock_chain_count+0x20/0x20 [ 179.463091][ T7367] ? aa_sk_perm+0x83c/0x970 [ 179.467605][ T7367] ? lockdep_hardirqs_on+0x98/0x150 [ 179.472823][ T7367] ? sock_rps_record_flow+0x19/0x3f0 [ 179.478136][ T7367] ? inet_sendmsg+0xe9/0x2f0 [ 179.482735][ T7367] ? inet_send_prepare+0x260/0x260 [ 179.487846][ T7367] ____sys_sendmsg+0x5ba/0x960 [ 179.492634][ T7367] ? lockdep_hardirqs_on+0x98/0x150 [ 179.497857][ T7367] ? __sys_sendmsg_sock+0x30/0x30 [ 179.502902][ T7367] ? ___sys_sendmsg+0x28b/0x360 [ 179.507755][ T7367] ___sys_sendmsg+0x2a6/0x360 [ 179.512520][ T7367] ? __sys_sendmsg+0x2a0/0x2a0 [ 179.517296][ T7367] ? seqcount_lockdep_reader_access+0x17b/0x1d0 [ 179.523554][ T7367] __se_sys_sendmsg+0x1c2/0x2b0 [ 179.528492][ T7367] ? __x64_sys_sendmsg+0x80/0x80 [ 179.533445][ T7367] ? syscall_enter_from_user_mode+0x2e/0x80 [ 179.539336][ T7367] do_syscall_64+0x55/0xa0 [ 179.543748][ T7367] ? clear_bhb_loop+0x40/0x90 [ 179.548414][ T7367] ? clear_bhb_loop+0x40/0x90 [ 179.553082][ T7367] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 179.558977][ T7367] RIP: 0033:0x7f060299c629 [ 179.563386][ T7367] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 179.582988][ T7367] RSP: 002b:00007f06038df028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 179.591397][ T7367] RAX: ffffffffffffffda RBX: 00007f0602c15fa0 RCX: 00007f060299c629 [ 179.599371][ T7367] RDX: 0000000000008040 RSI: 0000200000002700 RDI: 0000000000000006 [ 179.607449][ T7367] RBP: 00007f06038df090 R08: 0000000000000000 R09: 0000000000000000 [ 179.615425][ T7367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 179.623399][ T7367] R13: 00007f0602c16038 R14: 00007f0602c15fa0 R15: 00007ffc915baf18 [ 179.631470][ T7367] [ 180.175274][ T7380] netlink: 132 bytes leftover after parsing attributes in process `syz.0.505'. [ 180.478243][ T7390] netlink: 'syz.2.509': attribute type 33 has an invalid length. [ 180.496981][ T7390] netlink: 152 bytes leftover after parsing attributes in process `syz.2.509'. [ 181.155145][ T7408] netlink: 'syz.0.514': attribute type 10 has an invalid length. [ 181.551794][ T7416] netlink: 'syz.2.516': attribute type 21 has an invalid length. [ 181.578714][ T7416] netlink: 'syz.2.516': attribute type 6 has an invalid length. [ 181.607746][ T7416] netlink: 132 bytes leftover after parsing attributes in process `syz.2.516'. [ 181.676220][ C0] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 181.803923][ T7413] FAULT_INJECTION: forcing a failure. [ 181.803923][ T7413] name failslab, interval 1, probability 0, space 0, times 0 [ 181.848973][ T7413] CPU: 1 PID: 7413 Comm: syz.2.516 Not tainted syzkaller #0 [ 181.856346][ T7413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 181.866502][ T7413] Call Trace: [ 181.869804][ T7413] [ 181.872753][ T7413] dump_stack_lvl+0x18c/0x250 [ 181.877575][ T7413] ? show_regs_print_info+0x20/0x20 [ 181.882802][ T7413] ? load_image+0x400/0x400 [ 181.887333][ T7413] ? __might_sleep+0xe0/0xe0 [ 181.891951][ T7413] ? __lock_acquire+0x7d40/0x7d40 [ 181.897011][ T7413] should_fail_ex+0x39d/0x4d0 [ 181.901764][ T7413] should_failslab+0x9/0x20 [ 181.906296][ T7413] slab_pre_alloc_hook+0x59/0x310 [ 181.911356][ T7413] kmem_cache_alloc_lru+0x4d/0x2d0 [ 181.916496][ T7413] ? sock_alloc_inode+0x28/0xc0 [ 181.921374][ T7413] sock_alloc_inode+0x28/0xc0 [ 181.926163][ T7413] ? sockfs_init_fs_context+0xb0/0xb0 [ 181.931552][ T7413] new_inode_pseudo+0x63/0x1d0 [ 181.936346][ T7413] __sock_create+0x12d/0x940 [ 181.940973][ T7413] mptcp_subflow_create_socket+0x10b/0xac0 [ 181.946807][ T7413] ? perf_trace_run_bpf_submit+0x125/0x1c0 [ 181.952644][ T7413] ? __mptcp_subflow_connect+0x1450/0x1450 [ 181.958473][ T7413] ? mark_lock+0x94/0x320 [ 181.962828][ T7413] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 181.968873][ T7413] __mptcp_nmpc_sk+0x157/0x740 [ 181.973680][ T7413] ? __bpf_trace_subflow_check_data_avail+0x160/0x160 [ 181.980471][ T7413] ? __local_bh_enable_ip+0x13a/0x1c0 [ 181.985867][ T7413] ? lockdep_hardirqs_on+0x98/0x150 [ 181.991097][ T7413] ? __local_bh_enable_ip+0x13a/0x1c0 [ 181.996502][ T7413] mptcp_sendmsg_fastopen+0x7f/0x4d0 [ 182.001820][ T7413] mptcp_sendmsg+0x14b2/0x16d0 [ 182.006620][ T7413] ? aa_sk_perm+0x83c/0x970 [ 182.011165][ T7413] ? aa_af_perm+0x330/0x330 [ 182.015682][ T7413] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 182.022095][ T7413] ? mptcp_shutdown+0x80/0x80 [ 182.026776][ T7413] ? inet6_sendmsg+0x5f/0xd0 [ 182.031384][ T7413] ? inet6_compat_ioctl+0x3c0/0x3c0 [ 182.036577][ T7413] ____sys_sendmsg+0x5ba/0x960 [ 182.041344][ T7413] ? __lock_acquire+0x7d40/0x7d40 [ 182.046366][ T7413] ? __asan_memset+0x22/0x40 [ 182.050952][ T7413] ? __sys_sendmsg_sock+0x30/0x30 [ 182.055967][ T7413] ? __import_iovec+0x3fa/0x850 [ 182.060919][ T7413] ? import_iovec+0x73/0xa0 [ 182.065426][ T7413] ___sys_sendmsg+0x2a6/0x360 [ 182.070130][ T7413] ? __sys_sendmsg+0x2a0/0x2a0 [ 182.074904][ T7413] ? trace_call_bpf+0xc3/0x6c0 [ 182.079691][ T7413] __se_sys_sendmsg+0x1c2/0x2b0 [ 182.084534][ T7413] ? __x64_sys_sendmsg+0x80/0x80 [ 182.089649][ T7413] ? lockdep_hardirqs_on+0x98/0x150 [ 182.094844][ T7413] do_syscall_64+0x55/0xa0 [ 182.099254][ T7413] ? clear_bhb_loop+0x40/0x90 [ 182.103925][ T7413] ? clear_bhb_loop+0x40/0x90 [ 182.108625][ T7413] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 182.114513][ T7413] RIP: 0033:0x7f571099c629 [ 182.118928][ T7413] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 182.138558][ T7413] RSP: 002b:00007f57118cb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 182.147137][ T7413] RAX: ffffffffffffffda RBX: 00007f5710c15fa0 RCX: 00007f571099c629 [ 182.155099][ T7413] RDX: 000000002400c091 RSI: 0000200000000400 RDI: 000000000000000d [ 182.163064][ T7413] RBP: 00007f57118cb090 R08: 0000000000000000 R09: 0000000000000000 [ 182.171116][ T7413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 182.179093][ T7413] R13: 00007f5710c16038 R14: 00007f5710c15fa0 R15: 00007ffcea908668 [ 182.187085][ T7413] [ 182.228779][ T7413] socket: no more sockets [ 182.456657][ T7425] netlink: 'syz.0.520': attribute type 33 has an invalid length. [ 182.475101][ T7425] netlink: 152 bytes leftover after parsing attributes in process `syz.0.520'. [ 182.521125][ T7424] netlink: 132 bytes leftover after parsing attributes in process `syz.3.519'. [ 182.763061][ T7434] delete_channel: no stack [ 182.787056][ T7434] delete_channel: no stack [ 182.932719][ T7437] netlink: 'syz.1.525': attribute type 33 has an invalid length. [ 182.960290][ T7437] netlink: 152 bytes leftover after parsing attributes in process `syz.1.525'. [ 183.665394][ T7452] netlink: 'syz.2.529': attribute type 10 has an invalid length. [ 183.984530][ T7457] netlink: 'syz.1.530': attribute type 33 has an invalid length. [ 183.997344][ T7457] netlink: 152 bytes leftover after parsing attributes in process `syz.1.530'. [ 184.682593][ T7464] netlink: 'syz.3.532': attribute type 33 has an invalid length. [ 184.706280][ T7464] netlink: 152 bytes leftover after parsing attributes in process `syz.3.532'. [ 185.056649][ T7471] netlink: 132 bytes leftover after parsing attributes in process `syz.1.535'. [ 186.455634][ T7492] netlink: 'syz.3.541': attribute type 10 has an invalid length. [ 188.057070][ T7501] netlink: 'syz.3.543': attribute type 33 has an invalid length. [ 188.067988][ T7501] netlink: 152 bytes leftover after parsing attributes in process `syz.3.543'. [ 188.369353][ T7509] netlink: 14975 bytes leftover after parsing attributes in process `syz.2.544'. [ 191.473530][ T5776] Bluetooth: hci3: command 0x0406 tx timeout [ 191.480555][ T5770] Bluetooth: hci2: command 0x0406 tx timeout [ 191.486594][ T5770] Bluetooth: hci0: command 0x0406 tx timeout [ 192.348645][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 195.336135][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.347262][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 204.511051][ T5770] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 204.521013][ T5770] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 204.529726][ T5770] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 204.539488][ T5770] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 204.558622][ T5770] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 204.566154][ T5770] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 204.662875][ T5776] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 204.678865][ T5776] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 204.691211][ T5776] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 204.699432][ T5776] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 204.707534][ T5776] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 204.715076][ T5776] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 204.869825][ T5774] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 204.879285][ T5774] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 204.887371][ T5774] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 204.897012][ T5774] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 204.905049][ T5774] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 204.913369][ T5774] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 205.297181][ T7531] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 205.309995][ T7531] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 205.323230][ T7531] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 205.331848][ T7531] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 205.340150][ T7531] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 205.348725][ T7531] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 255.969089][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.975428][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 267.203332][ T7547] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 267.212505][ T7547] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 267.220917][ T7547] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 267.229261][ T7547] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 267.240428][ T7547] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 267.253324][ T7547] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 267.413258][ T7551] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 267.427228][ T7551] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 267.444179][ T7551] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 267.452573][ T7551] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 267.468973][ T7551] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 267.476416][ T7551] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 267.609224][ T7553] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 267.618517][ T7553] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 267.627537][ T7553] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 267.658589][ T7553] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 267.667530][ T7553] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 267.675196][ T7553] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 268.545527][ T7556] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 268.576343][ T7556] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 268.619478][ T7556] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 268.629066][ T7556] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 268.637078][ T7556] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 268.644886][ T7556] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 317.395995][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.408431][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.338379][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 318.345111][ C1] rcu: 1-....: (10461 ticks this GP) idle=2c64/1/0x4000000000000000 softirq=19820/19871 fqs=4585 [ 318.356722][ C1] rcu: hardirqs softirqs csw/system [ 318.363143][ C1] rcu: number: 1120963 0 0 [ 318.369562][ C1] rcu: cputime: 20306 32183 36 ==> 52490(ms) [ 318.377370][ C1] rcu: (t=10500 jiffies g=21653 q=1256 ncpus=2) [ 318.383737][ C1] CPU: 1 PID: 7503 Comm: syz.2.544 Not tainted syzkaller #0 [ 318.391026][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 318.401088][ C1] RIP: 0010:kcov_remote_stop+0x28/0x6e0 [ 318.406641][ C1] Code: eb 8c f3 0f 1e fa 55 41 57 41 56 41 55 41 54 53 48 83 ec 38 65 4c 8b 35 b6 8f 7c 7e 65 8b 05 b7 8f 7c 7e a9 00 00 ff 00 74 0f <48> 83 c4 38 5b 41 5c 41 5d 41 5e 41 5f 5d c3 48 c7 04 24 00 00 00 [ 318.426244][ C1] RSP: 0018:ffffc900001f0970 EFLAGS: 00000206 [ 318.432307][ C1] RAX: c95ee4ab15172c00 RBX: dffffc0000000000 RCX: c95ee4ab15172c00 [ 318.440257][ C1] RDX: dffffc0000000000 RSI: ffffffff8acac900 RDI: ffffffff8b1c82e0 [ 318.448209][ C1] RBP: ffffc900001f0c30 R08: ffffffff8e8adeaf R09: 1ffffffff1d15bd5 [ 318.456157][ C1] R10: dffffc0000000000 R11: fffffbfff1d15bd6 R12: 0000000000000246 [ 318.464286][ C1] R13: ffffffff81872663 R14: ffff888023c80000 R15: ffff8880b8f2c2f8 [ 318.472351][ C1] FS: 00007f57118cb6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 318.481273][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 318.487882][ C1] CR2: 00007f11870c1b55 CR3: 000000007f1bd000 CR4: 00000000003506e0 [ 318.495847][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 318.503801][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 318.511753][ C1] Call Trace: [ 318.515048][ C1] [ 318.517886][ C1] ? ieee80211_rx_data_set_sta+0x20f/0x410 [ 318.523693][ C1] ieee80211_rx_list+0x29ac/0x32d0 [ 318.528804][ C1] ? ieee80211_check_fast_rx_iface+0x210/0x210 [ 318.534987][ C1] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 318.540957][ C1] ? read_lock_is_recursive+0x20/0x20 [ 318.546402][ C1] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 318.552298][ C1] ? ieee80211_rx_napi+0xd4/0x3d0 [ 318.557328][ C1] ieee80211_rx_napi+0x1b2/0x3d0 [ 318.562271][ C1] ? ieee80211_rx_list+0x32d0/0x32d0 [ 318.567629][ C1] ? skb_dequeue+0x124/0x160 [ 318.572199][ C1] ieee80211_handle_queued_frames+0x106/0x1a0 [ 318.578618][ C1] tasklet_action_common+0x302/0x4d0 [ 318.583891][ C1] ? detach_timer+0x2b0/0x2b0 [ 318.588549][ C1] ? trace_raw_output_tasklet+0xc0/0xc0 [ 318.594082][ C1] handle_softirqs+0x280/0x820 [ 318.598900][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 318.603660][ C1] ? do_softirq+0x1a0/0x1a0 [ 318.608150][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 318.613338][ C1] __irq_exit_rcu+0xd3/0x190 [ 318.617957][ C1] ? irq_exit_rcu+0x20/0x20 [ 318.623005][ C1] irq_exit_rcu+0x9/0x20 [ 318.627244][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 318.632976][ C1] [ 318.635905][ C1] [ 318.638826][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 318.644794][ C1] RIP: 0010:preempt_schedule_irq+0xba/0x150 [ 318.650672][ C1] Code: 00 00 43 c6 44 37 04 f8 74 0b 0f 0b 48 f7 03 08 00 00 00 74 6f bf 01 00 00 00 e8 61 cb cf f6 e8 ec d2 00 f7 fb bf 01 00 00 00 f1 b4 ff ff 43 c6 44 37 08 00 48 c7 44 24 40 00 00 00 00 9c 8f [ 318.670259][ C1] RSP: 0018:ffffc90004a0f840 EFLAGS: 00000286 [ 318.676302][ C1] RAX: c95ee4ab15172c00 RBX: 0000000000000000 RCX: c95ee4ab15172c00 [ 318.684341][ C1] RDX: dffffc0000000000 RSI: ffffffff8acac900 RDI: 0000000000000001 [ 318.692293][ C1] RBP: ffffc90004a0f8e0 R08: ffffffff8e8adeaf R09: 1ffffffff1d15bd5 [ 318.700263][ C1] R10: dffffc0000000000 R11: fffffbfff1d15bd6 R12: 0000000000000000 [ 318.708214][ C1] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff92000941f08 [ 318.716205][ C1] ? preempt_schedule_notrace+0x110/0x110 [ 318.721950][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 318.727795][ C1] irqentry_exit+0x67/0x70 [ 318.732223][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 318.738209][ C1] RIP: 0010:lock_acquire+0x208/0x420 [ 318.743494][ C1] Code: f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 3c 04 f8 0f 85 f0 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 04 3c 00 00 00 00 43 c7 44 3c 08 00 00 00 00 65 48 8b 04 25 [ 318.763181][ C1] RSP: 0018:ffffc90004a0f9a0 EFLAGS: 00000206 [ 318.769236][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: c95ee4ab15172c00 [ 318.777189][ C1] RDX: 0000000000000000 RSI: ffffffff8acada80 RDI: ffffffff8b1c82e0 [ 318.785162][ C1] RBP: ffffc90004a0faa8 R08: dffffc0000000000 R09: 1ffffffff2237ea0 [ 318.793133][ C1] R10: dffffc0000000000 R11: fffffbfff2237ea1 R12: 1ffff92000941f40 [ 318.801110][ C1] R13: ffffffff8d131fa0 R14: 0000000000000246 R15: dffffc0000000000 [ 318.809088][ C1] ? perf_trace_preemptirq_template+0x269/0x330 [ 318.815326][ C1] ? read_lock_is_recursive+0x20/0x20 [ 318.820685][ C1] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 318.826646][ C1] ? lock_chain_count+0x20/0x20 [ 318.831477][ C1] ? task_mm_cid_work+0x31d/0x770 [ 318.836483][ C1] task_mm_cid_work+0x33a/0x770 [ 318.841318][ C1] ? task_mm_cid_work+0x31d/0x770 [ 318.846322][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 318.852459][ C1] ? init_sched_mm_cid+0x130/0x130 [ 318.857595][ C1] task_work_run+0x1d4/0x260 [ 318.862172][ C1] ? task_work_cancel+0x220/0x220 [ 318.867185][ C1] get_signal+0x1235/0x13f0 [ 318.871679][ C1] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 318.877382][ C1] ? perf_trace_preemptirq_template+0x269/0x330 [ 318.883613][ C1] arch_do_signal_or_restart+0xc2/0x800 [ 318.889144][ C1] ? lock_chain_count+0x20/0x20 [ 318.894035][ C1] ? get_sigframe_size+0x20/0x20 [ 318.899053][ C1] exit_to_user_mode_loop+0x70/0x110 [ 318.904322][ C1] exit_to_user_mode_prepare+0xee/0x180 [ 318.909938][ C1] syscall_exit_to_user_mode+0x1a/0x50 [ 318.915415][ C1] do_syscall_64+0x61/0xa0 [ 318.919824][ C1] ? clear_bhb_loop+0x40/0x90 [ 318.924480][ C1] ? clear_bhb_loop+0x40/0x90 [ 318.929398][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 318.935270][ C1] RIP: 0033:0x7f571099c629 [ 318.939664][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 318.959340][ C1] RSP: 002b:00007f57118cb028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 318.967838][ C1] RAX: 000000000000000a RBX: 00007f5710c15fa0 RCX: 00007f571099c629 [ 318.975793][ C1] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000480 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 318.983817][ C1] RBP: 00007f5710a32b39 R08: 0000000000000000 R09: 0000000000000000 [ 318.991769][ C1] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 318.999754][ C1] R13: 00007f5710c16038 R14: 00007f5710c15fa0 R15: 00007ffcea908668 [ 319.007714][ C1]