last executing test programs: 2m32.393674571s ago: executing program 0 (id=2223): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10003, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x401, 0x6}, 0x10000, 0xf, 0x0, 0x0, 0x0, 0x3ff, 0x3, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2000000, 0x0, 0x1e, 0x0, 0x0, 0x2000000, 0x0, 0x7}, 0x50) 2m32.00124528s ago: executing program 0 (id=2224): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0x10, 0x2, 0x0) close(r1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x5, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) socketpair(0x1, 0x1, 0x0, &(0x7f0000000400)) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0xff, 0x0, 0xffffffffffffffff, 0x9010, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={0x0, 0xf50a43945a8ef38c}, 0xce6b9b20411c70f4, 0x800000000000ca, 0x0, 0x9, 0xffffffbffffffffc, 0x0, 0x0, 0x0, 0xf, 0x0, 0x3}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x104101, 0x4, 0x0, 0x1, 0x9, 0x10000000, 0x1}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x3) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20488, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x111d09, 0x4, 0x10000, 0x1, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x28, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f088a865e0080600123a00631177fbac14030a88a89f03fe800000ff01", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700}, 0x50) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[@ANYRES8=r1, @ANYBLOB="3eca", @ANYRES32=r4], 0x9a) 2m31.002121427s ago: executing program 0 (id=2228): r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000340)={&(0x7f0000000040)=@l2tp6={0xa, 0x80fe, 0x7, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x12, 0x2}, 0x80, &(0x7f0000000180)=[{&(0x7f00000004c0)="7f", 0x1}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000084000000070000007f000000000000000f"], 0xd0}, 0x480c4) 2m30.560651649s ago: executing program 0 (id=2230): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0xc00000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0700000004000000000900000500000028000000", @ANYRES32, @ANYBLOB="00000000000000000044fa45492ce259687a89d4", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x9, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000050000850000001b000000b700000018000000850000005000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000f80)={r1}, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x62}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x5, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r5, 0x18000000000002a0, 0x204, 0x0, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f110800", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@ifindex, 0x13, 0x1, 0x46cb, 0x0, 0x0, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300), 0x0}, 0x40) r7 = socket$kcm(0x29, 0x5, 0x0) sendmsg$inet(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000400)=[{}], 0x1}, 0x48014) sendmsg(r7, 0x0, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)={0x6, 0x0}, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000540)={@fallback=r7, r2, 0x22, 0x2b, r3, @void, @void, @void, @value=r8, r6}, 0x20) r9 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r9) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000c40)=ANY=[@ANYBLOB="18080000c0000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc0901"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b20d25a80648c2594f90124fc60100c031a02000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) 2m29.120709027s ago: executing program 3 (id=2237): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000400000000000000000000f195"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffcb7}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x3, 0x25, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b7040000000000004e4100000000000040000000000000009500000000000000e5d89e13ed55504b00f6ce3a0ec4ee0096bac28b4b1665445054762cf00b308722f5311f4d3560b6180149385e26fd78c3c828b048eca974af7929e074ca86acec5a720000"], &(0x7f0000003ff6)='GPL\x00', 0x9, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x0, 0x0}, 0x8) r2 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r1, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000200)={r2, r0, 0x4}, 0x10) 2m29.05083623s ago: executing program 0 (id=2238): r0 = perf_event_open$cgroup(&(0x7f0000000800)={0x1, 0x80, 0x3, 0x81, 0x6, 0xcf, 0x0, 0x5, 0x2408, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, @perf_config_ext={0x5, 0x5}, 0x2, 0x401, 0x200, 0x1, 0x6, 0xfffffffa, 0x1, 0x0, 0x1000}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x19) perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b85, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x1005, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x4, 0x0, 0x2029}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3efd7ab4c41335d9, @perf_config_ext={0x7, 0x4}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000080000000100030009008f39e3"], 0x50) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000700)="5c00000013006bec9e3be35c6e17aa210725876c0d000000ba090000160af3653c001ac004000202080002000a00e4002c000000ea2933afd81715daae69b556a705251e618294ff0051f60a84c9f4d4938037e786a6d00003000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4a046) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef) mkdir(&(0x7f0000000440)='./file0\x00', 0x22) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b40)=ANY=[@ANYBLOB="b702000009000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2e6405000000000065060400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000002c3f2cc2b7956244cef7baf48e6d2885a09a87507ebfc75b5b0f4e4309ebcdac5f7a860c008cbdd3b4c3b7f28754860c9c781f6410457253e89ad528d985636a86ec0f68f59cd1159a2c2e85d726859a919cc9548a349980d1ccdce27f94bc074c27f81078545c146a0857153b7b8f00034debae58a4ab415b0d7ff0575cc272cd3d7e8d974927676468ff2d86e0ffac94792ed9cf6b40b3cf252a47c05ae8a70d57cc3e067d1867b54d24e20000000000000020009ebf84d3b042d6e432cd080e3b57239f0127473e6ba922aff649609d40b47ec331ccba3cf96f9483ff19a6471bf5abc742d9cbcfb964b11b31034694a6aad86cf08a6c7b2235dc99de9aa3e6b77c7a2877261ed32da90864987f30926c9013eec3b86836ae50447aa5a79f40c235000000453302712c3d8fc4e2b61adb0695e800000000d4f4e91f0000002c33df424d1bafe5725c8a404724f8a4f1cda7997b65954f74097560b91da309b887af2485c2d9ab09b523000000000000000bf7b2ff4602aec1eea200000064881c5630521a08e051374cf05c921a06fb7818000000009dc8d95e0e5b365d10e1004dae58b3b5b89709b0ff47b200000000004000cbef88811dc8c1b27ac7d9a6bb70f60eb9c01dd2fc79b85e4d961498f3a80131d21d856177a2189f45d011ef1da5c6d57bb8fd387ccea9c3899a914e47e82f040000009d81003f927355408f87264797d3fa970949793b94329d580500d1f91c0d22587e05a61e3d8576ca168e88d7a9af95b04a37c27bfffab9abbb31fa8c0080258cfa6d3f166e695f3c56490aeef464d9965d70a50f1282619344f223548e750339643adac1322c87ca253ff2fb1882760d6feab16bacdf83c11816dbe959ebc5ec479c8319f73e2249eab0486b110702a481d3b51976a52303056e800b4ae5acc2dfae60ab958e9f3ef9b4aaa4e8d6166f636a65eb1d672bf2000000cda8462cc9b16624998be65683321e970000000009b8e20762c1bf4a3eb6769f2b23e842bacd9c685edea0ffa3e975424f8ede49e61a4de808a38ba3512d64dc71867df4eee3f1ff791cf7c9862f98b45852e4b2f78721b978a2df2f2a29a387c6f0576b36038f819286eca99a6a434811cf2a117d775fe986a49fb82cf5f15972d5ab18f1045384501adabb20f7b0e15ff47f1744e2341b59034959a1289ba6e243668e6735305707e3de7652bfc5b60c76deff43a1d6fd6a4180ab723735abbeffe7f2ec3a0bb86f9eddfc0f3d1d503d7a54b49e1ae6c5aa620d27e91aa0aa0ed6fcacfc91fbb4c256409e54daefbb107c381fa729ff5f3907d93430da178d685d7730f5e129438a5214f722096d2986334c2576bef69145d3fbd78a9059e454474f92e65828b018174a9f4738b8c71fbdeac26ab95e02f9a847182766964976b1fccdb9f35721e43e33883cf16ed1343fb7429eb395123b0a4262b7023c22039b9002589a378ed4c6267965af78b861bd025312538cec97966b8973d4e299d9802264d06e40ae118e1d242d1128dcedeb44030df12ef68f78215d65f96eb55db8cbcb060008000d988374f85451a694ffe38a1d03916ff10dc82b31c98d42e1a1bda1290de1a499a5a385b31112a48ba3e6d6849914c1788a7aca37177cc341fff44fec5c5e0abae01c439a1b0311e074e81ae9993b5b3459553e4ece78d4c1501c70f5d81e0725d5b273755c0000000000000000aa4234ff82182952a76233d18e7d49638aeb04e7a9e9e7eafb7c255372795d2d192a0a33cab0f5bf2e93e0544fcdf2df2bc6ce96e5a11993d54f97a23754ac828674dbb93c0ad345715be4a13678b01edf76d8a923655800a2c88cce004505ab45d8f5f88aa887bbce5c18970428516f6099bdbb2cd7a2356397f1a0a23e662e2a6c4834400cbaa41c3c574e6e6aefb7a68da5ec1ae49f968bbe0e0bf9878516f553639f5b4828e92019b61f5874be1c7cdd9482df50bc24a8a1fa10d291390eb84e26a2e8dbeaa45604b05a116c1210a7540bf81005044273f5a8ffc538db289350eb248e483bd8920efcf30a798c2b636243e0a37262ca47dfeefa753ba528f7ba77e825051ce69b4475d7d714ba0c636e6ae9f710411d30ef424aeaabe057c7df6ff8f767bcd9012e1047c686f5ccb76ab3a5df53cbc22ba7ea8f6a8e220bb4d83de1e4dc19d6c1be841503850803bc2c2d5e0e34270a7f1cca0c6c53a8e5f891f7a793a70da62d6d88fbb90d220acc687931b42d6be83ab870da3c0a567f5e65ec0457f4ad2a4ec0b671b36388afd5520a8483a4b11f7d02a409315f0f9e59f47668d68a74838d6976e12fd45200014041dffacbf60892ec8bd7560686f137a806d3dfaba900b47cac62f828342fff009adb5b2251461a1b9d6ba625b8fe04e69a1a4be2696f0000000086e172932e03000000000000005942e1b9d6dc28ab8e19e1111dd893e801015642faf21eef40d6e7de3ef62c4bc5ff17e7aeb2841098f845d1cc9ec4eee79c298fb0ba939b13707044e2e9cc0d350438c1c8c6bb9a38c6ac5ca0d9cf1f3d6915f25cb26edfc28b3079b97df32601240e454db103fb0c4a143673a3f160d3a7b83ecd0509ce9eba0c7bf7843799b1b56a234f9eaab8a3f14f1472bb6aaeb8ac9ee4054605558ab31f339f6a4caf2ee2fd01f34dca3300000000000000000000000000000000f59f8e6e00000000c44130098d833a24000000000095e6f945ba9a941cef5e70b8c152321e24b5b29bcf374dcf5a29a35d76e6e2bf8df95462690a4fc9ec8129e92b6ebb4b40a992a75d3c595426ae40d0bfc87db24d856359079b29b3c374d081c300b2cfaa596d24e800ef8e2201f2fb7a9946f89f9f31f7cbd603fd7f8898c70b5c65f2e28f22e1a79a6af3a54861b07f124642e98389557affbdede09b5566a4a1ee73b20846810030a754acddcdafe3ceeeebc0b5f2fedfe7d198e3067f3dbac9441a9ab8409cbbb7e15b9ae3944097de34de2001c8533a3766e6e4c4c4702ccb932a27a3962814cd6aa8fc684beeaa3932efae3a9052be8eec1e95f6ad8d41dd34829503ba4b66e27154cb6e34aa13450522df1723130b6fe347c93f00e40e293c98d849a33f773c743728992f40faccd5c23130a1c6bfd6fc661bca1598137ddd1090ded672f5a48a40cab3f640c8241a364cbdd3f188eec7da7bccafbd5bf28a46f0eecc6b550471b0b0770c6a5a411c0e0b19e15a461e7c6833ba936e214b013f2819ec6572a43b5cd32b11d7e4f8dcf8f7820a17b7b2ee6178a03351dd25091e46bfd82a3979b9cad109fd6217cd52aa81bdabd50826a674bd16b8f7e6aed12a305366599f5f029a7b24558c027518c669760500002f1c19d16a6f391906000000cc0bbbfb8c698ecc137d96711100e0108d3bd2afed0b279ebf0527552a9331e646c424b14ffbb815622bfd2f635855bed1b164d0a56bd104be069854111c5b26ec3c652b5f0a6b9676dae987ec23456ba05a4dfb15321ef6b76e7e547a688c67ab531cfc784c9f940d9fb0464a6cce635e14b80dc5c1c64e75e6bd5355d84f8df272f18f58c570e7afd83ee77f157c146aa747b728969aeb4aba1d8f9de1b3fb8ab6ea50e884c2ea98e6400bf0c5ae2887cd1da0e57ccfdf5eca2b455247efcc13102846c0a85f20c80007c0ce6efce627b95b8ad3003385de97101678fb2163ecea6e70a77a6fbc089e31a5ccece932229b8f79faa6863d6857c3d9a9710f9f8ad16eeb8342278f311cbc226498028234d21466892983378fe64acbb44f694cd78e43c74aa75505cb1c91b189f8f89f233a05f5cd4e173a373178557843dd705268f74a9e5429945503195aefd6706b584d8408c9652b3fe68500747f7ee8375fa559c3ad195d3795df1a8364cd13acc3256ee4634c73eeb6954d0fcf09ab84df0b8900e0c6fea2ccb600ae7a4b128cae19df160e7c207b89132d1d5bdc9ffc79f0549b82df521817651d5fead5128205b92ccdccc69407ab556217af277af911dbd456dfc43dd061b6c91485dcc208cf0b3d0bf851de413f5de5ec015e296914afab6411109355e027ce04990d9aae251b9deb11b7db45b9f15b7b55d8fdbedd9e6cf891205694f02be8b9ea8ecd41308a0e1b93ae3435bfa88b440b1f701b4d0fc49c82193f27f8023b630ea97edbf3bf421a0a1a2b4ac7bb30bcd1cdd172c0df37408fd6827bb03e8742fc1c7a2befd1299928c5f79e846a8dc7ca648d960a759e6711b69776896a9656d59af6d44bc5348229fa84ae78af8421a22c4b4c17a3d24a4a0104000000000000d77cc4eef51c2b417c8c7458ddd7dd9d1a863bf0a9e1a30a19020490038017a5c7e474c83302a2c2b5c976dacf3dda7191c757f208000000000000005f7ed983f65723fbb36b9b51abb0dbcd335700000000000000000000000000000086666201251aa4f139d0485ffcf89f01639fd1579a3802f720a0215c720a97071f5065a23642a58275dbca444b00e2e5835185d5d5b2796eb0fe32cf3b0633f58ecc7648c3c6efe82f93a3008052416512eea30ea9472e0b456a652883c0907323cf03be193a05008cdef7a98a1671a1918df310dc4bfd61c3db4819ab1c57b348a8ff1ed36364a20fe846f1cd086058d139ce528425b31c5d08b433562ffb318c1285011f9b78b2401989384311101e452f54661ecdb2514a6ae50dbdd422de0f0f8c670000000000390be79688f80c47314cb1b14afcaa5d23f9032e0ec51f45f447d6a7c798fcf7e60e2180e289410801e4f03a0e140f388f25b92da1025d8409e171a2336ed71cca86eb4658fe06df286e0e20276b0618eeffd05774f15686cd9d3182ca2fec863875f305fed6baf48a594db12582a38cfdffffffffffffff0cf8d920517835fe7d09cfcb624f6931f1cc6f6b71f58de9ddc38e0c43992f6bc57a718d0cfd197b5324b4e05ef1caa96db3ae1f2f2e5791faba2ebbe1a6faf21f2748fb1fb6743c3ca8af4e6b02518c9b7fdc1b5721eb1c3ed98db25536f74ac7861afc94544e52dcb5c60460a05802e3b437ac977bfa26b887a2443e8d559c58187f004eb82b07937df6e96f77ed551926bec4e0188fae10a35d1c5f1768ac6be829bea46f1babc3d74adc31ca71bdab9079e4288881b434484eadde9da6b81802842abd462d546c59d87acc014f81d3414759bda12d2a2c6bc1bfa807bd3101eb227184a61107b6d0618e2a3b842671e084ac3f0ff94dc48b51601247318ab4d1c5106458000000000008000000000000cfee0107e6c2fe8639d926829fdbbd86bf591a8c3c235d8939af9d923f648165881a6c29997234406400b3b1c321cc158dbe17123eace30000000000009ea77cb4d3ca892600000000796de6ae4ae40bdf9a6e8c5dc29562262af9cd54e8e3ecc7e3c8cba0ecc791683496c4e5c1a5729714d9f9031f49b400cd2667b4ea6df54809615a4f973f93e6ccec72f16ff998e29ed99df733680a9d5cea57f99cc139b6ea9014f3000000000000000000000000000000000000feeab45a4046a622b0dceb413e4e39b7317e92cbed46b41ab5115bfb542c933783d750852dfdc6656aaf15e10615a88821f2f1bc53969b52d6852755e7681ad5beda80b38ccd34116b99f50b4fdd967b3f20f260455412b67563e40e323bde9d673fceda0ad6981565c8a183d928903b4f4472dde41b6dcd75314c31e704dfcb222c8359fe88944f852242270c932abfaeece0843d708f5cd25b2a63ae1e79723c1c3c013836b47da0a35d0f34c070000000000000422ae2c148d444dd437a7d2f5e575009bc2d17a199802409329dae8baa58d3de63ad45328a9d4dc1ace543dfe11913c6c6413f8f7a15657d012fea460bb4656a20df1ba26932b0ef49f8ea88d7b4c1289314ba789661640f1b5d7cbae103fa95b0035f1e8e866307d4796eab0992704f9e00be4b1af8dfa9e94ad74e607ea9d7d7a95ed5a15429426abbed8d2c657018305c6f9e5159a5453f958991a908ff4cb2e8cbccb1d3c8daf754e4b01b2edd023e5bfdf293bd28fc1f8885f6edd5a715df4d180247feb08e9e2e5126c48be6098e711f0d86de5d76fdccae34eef9197c32ab4e6fcb52eb9ce18fdb621a75913a97254d783778203ec0bd1a8859683e1d01da4e81fb73bb3b358340a0310bf5ae17b917208da607fd7b125cf99fd3e9056f5184df7570ede94b736ae354b5b8ae2cc473b455f2f86d47c69027676bf1141f316b0f278f1692406572ee82766f8e5ff1cfec2a7a6cab7d0f2582a877c9bd4ca81089373f738d02e6bb4d3df30ac0f041e51ad36e1ff140812baf54b80635cc80963c8f69fa4506f7a30c99d3e538cc0aeafcad86ead38ed949aa3c204aea50e5e0039f01b82595b7dc921a8acc1f76340f060cc9a3acad3451c17dc9b5ca5d10a0cb1708592d1900a046f33761d50895febd9fd58cb132989766cf7c252daac259576ec218e3857e6fa97fe445d1fab51d87302a4bb28a4cfe462ee4849cc6832650188ca187d85509d8beccf9d9cf752368985804195b9fd2faf1aff8248f3981bd55cbbf514cd8365fee72cc7af053e5388ceadadb967ef735181df6a90cab13f58f6d563c9ab4ad37297aecffd8446cb2b14ec36a99af8393e3760d5970ba1debdcbccd54012c559ee2797ff962328aa6a252c0756e396ce4d52937546675203bdf1d6b120acac576523f8b1daa922188bf61536312f90dba92fb380c3c6fb5f9883a2c4dd99a1bac9b7cb25ff2ef9bd58ff97ddfdd2d4bcc371ee82245b57cd91a7fa3479cd339f54a5c422b753cd42d441ea881d46e419312db1f0cccce"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xff9d}, 0x48) perf_event_open(&(0x7f0000000ac0)={0x0, 0x80, 0x4, 0x1, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x3, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300), 0x4) r5 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r5, 0x84, 0x22, &(0x7f0000000000)=r7, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_lsm={0x1d, 0x8, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x973}, [@cb_func={0x18, 0x1, 0x4, 0x0, 0x8}, @ldst={0x1, 0x3, 0x2, 0x5, 0x9, 0xfffffffffffffffc, 0xfffffffffffffffc}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0xef}]}, &(0x7f0000000080)='syzkaller\x00', 0xb15, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x1b, r4, 0x8, &(0x7f0000000380)={0x8, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x0, 0xa, 0x2, 0x2}, 0x10, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000400)=[r7, r1, r1, r1, r1, r1], &(0x7f00000006c0)=[{0x3, 0x4, 0x9, 0x1}, {0x4, 0x4, 0xe}, {0x3, 0x1, 0x0, 0x5}, {0x0, 0x5, 0xa, 0x5}, {0x0, 0x1, 0x4, 0x2}], 0x10, 0xd}, 0x94) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000440)="2e0000002e00810804fb7fec598f866b0a9a5972130000005e140608000000007a0000a71802", 0x26}, {&(0x7f0000000100)="2afd354e67137a6d", 0x8}], 0x2}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r3, 0x20e, 0xe40, 0xfd000004, &(0x7f00000004c0)="b9180bb76003070c009e40f086dd1fff310000003c0020010010ac14142ee0080001c699da153f0ae0e6e380f60115f683317585d7472ce0ab4439f0f570ff155bc5f73ba3f8bb99a6e8ded1ce485cf058105cd981b42493481cd659416a2e10c9119664f36eb00b333c20c9ec0c222d644bdcb178c1cc53d6960fbb842d6a33dfcde3a1e1848135214baf139753866cadcbe3ce52505e992818cc452bee339d9ab076f484020eaa348a21d7911e4c44905256ec2cc54cca47a198b00c10aff62a4bed43a2ebcad92743fb22c593f28fd4bb7c703cde9cae0569d4c8d9a823f2c12863f7a6c0cf88ed22aae4f6f084508833b61429a25773eedf63dd9f33d430f2a0a30a7761db16fe0f743b95ded898c28aac1256ce2751b3d738899b8b19d9052b7f13ff94", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x42}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2m28.930060706s ago: executing program 3 (id=2239): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x4, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x5, 0x8, &(0x7f0000000300)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r0, 0x0, 0x0, 0x0, 0xd0ffffff}, @generic={0xb7, 0x3, 0x0, 0x0, 0x8}, @generic={0xbf, 0x4, 0xa}, @generic={0x7, 0x4, 0x0, 0x0, 0xfffffff8}, @generic={0xb7, 0x5}, @generic={0x85, 0x0, 0x0, 0x0, 0x19}, @generic={0x95}], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m28.8561567s ago: executing program 1 (id=2241): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000001f80)={&(0x7f0000000d00), 0x0, 0x0, 0x0, 0x3, r1}, 0x38) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x1f000801}, 0x40200d0) socket$kcm(0x10, 0x2, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000001f80)={&(0x7f0000000d00), 0x0, 0x0, 0x0, 0x3, r1}, 0x38) (async) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x1f000801}, 0x40200d0) (async) 2m28.684362758s ago: executing program 3 (id=2242): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10003, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x401, 0x6}, 0x10000, 0xf, 0x0, 0x0, 0x0, 0x3ff, 0x3, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2000000, 0x0, 0x1e, 0x0, 0x0, 0x2000000, 0x0, 0x7}, 0x50) 2m28.672447889s ago: executing program 1 (id=2244): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a"], 0x0, 0x46, 0x0, 0x9}, 0x28) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x122}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r6 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r6, &(0x7f0000000080)=ANY=[], 0xfdef) recvmsg(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000003940)=""/4101, 0x1005}], 0x1}, 0x40000040) close(r6) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffeffffffff}, 0xc001, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x2, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x88) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001640)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0307000000000000000000000a00000047000000893d9845db7661bd37294b2a572c7e5201b9d311e463614968ea4e83bd2734f1418ddca3ebf6b4facc46cb04570a4e062c753528c9c79619d5c51f36791ae77ca36616a47491b9164c370e423d3c28be10591a52dff78ab7e6554e75718494cdb3dea1684175107946c059f2fd8b796833f65b272034cce808a20ac9182bdc473c943dd00334cebd502aafea35c3073800a39a14", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0xf, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000bf0200000000000085000000cc000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001900)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x6, [@const={0x4, 0x0, 0x0, 0xa, 0x2}, @union={0x5, 0x6, 0x0, 0x5, 0x0, 0x4, [{0x10, 0x0, 0x80002}, {0x8, 0x5, 0xc31}, {0x2, 0x1, 0x80}, {0x10, 0x1, 0xdf0f}, {0x7, 0x5, 0x6}, {0xb, 0x3, 0xffffbd48}]}, @var={0x8, 0x0, 0x0, 0xe, 0x4}]}, {0x0, [0x30, 0x30, 0x61, 0x0]}}, &(0x7f00000019c0)=""/4096, 0x8e, 0x1000, 0x0, 0x2, 0x10000}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001940)={0x1b, 0x0, 0x0, 0x9, 0x0, r0, 0x7, '\x00', 0x0, r11, 0x2, 0x3, 0x3}, 0x50) 2m28.616983071s ago: executing program 3 (id=2245): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext, 0x0, 0x35, 0x43a1bd76, 0x7, 0x1, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000004000000000100"/20, @ANYRES32, @ANYBLOB="fdffffff00"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000780)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000611800000000000018110000", @ANYRES32=r0, @ANYBLOB="000000181127fd0000", @ANYRESOCT=r0, @ANYBLOB="0008000000000000bfa20000ffffff850000000300000395"], 0x0, 0x200000, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0700000004000000180000000300000000000000", @ANYRES32, @ANYBLOB="0000000042fde47b00000000ab79f7b680cf1c004e0066008000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b703000000070000850000001b"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x8270, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r4, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1c, 0x0, 0x0, &(0x7f0000000300)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000, 0x26, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, &(0x7f0000000080), &(0x7f0000000240)=r5}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r1, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r8 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x100000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r8, 0x0, 0x31) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000400)={0xffffffffffffffff, &(0x7f0000001380), &(0x7f0000000580)=""/17, 0x2}, 0x20) ioctl$SIOCSIFHWADDR(r7, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x1540, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m28.2403103s ago: executing program 1 (id=2247): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b81, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x9, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0}, 0x24000000) r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) (async) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) (async, rerun: 32) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000024000000080000000b"], 0x48) (rerun: 32) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a000000040000000700000009"], 0x48) (async) r6 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r6, 0x10d, 0x6, 0x0, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r5, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f00000004c0)=r4}, 0x20) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r7, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000380)=r8}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000740)={r9, &(0x7f00000006c0)}, 0x20) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1) 2m28.031273909s ago: executing program 3 (id=2249): ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000580)=0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000005c0)={r1, 0x20, &(0x7f00000004c0)={&(0x7f0000000340)=""/50, 0x32, 0x0, &(0x7f0000000480)=""/61, 0x3d}}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x0, 0xa, 0x0, 0x0) sendmsg$inet(r2, &(0x7f00000004c0)={&(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10, 0x0}, 0x40080) r3 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r3, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) sendmsg$inet(r3, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000240)="f9", 0x1}], 0x1}, 0x4000080) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) bpf$PROG_LOAD(0x1c, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0x20a, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb9d00180000000000000028060000280000000200000001"], 0x0, 0x42}, 0x20) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) recvmsg$kcm(r3, &(0x7f0000000840)={&(0x7f0000000400)=@nfc_llcp, 0x80, &(0x7f0000000740)=[{&(0x7f00000006c0)=""/68, 0x44}], 0x1, &(0x7f0000000780)=""/173, 0xad}, 0x40000000) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r4, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3d) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8946, &(0x7f0000000080)) socket$kcm(0x10, 0x3, 0x10) 2m27.960413543s ago: executing program 1 (id=2250): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0x10, 0x2, 0x0) close(r1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x5, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) socketpair(0x1, 0x1, 0x0, &(0x7f0000000400)) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0xff, 0x0, 0xffffffffffffffff, 0x9010, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={0x0, 0xf50a43945a8ef38c}, 0xce6b9b20411c70f4, 0x800000000000ca, 0x0, 0x9, 0xffffffbffffffffc, 0x0, 0x0, 0x0, 0xf, 0x0, 0x3}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x104101, 0x4, 0x0, 0x1, 0x9, 0x10000000, 0x1}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x3) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20488, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x111d09, 0x4, 0x10000, 0x1, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x28, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f088a865e0080600123a00631177fbac14030a88a89f03fe800000ff01", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700}, 0x50) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[@ANYRES8=r1, @ANYBLOB="3eca", @ANYRES32=r4], 0x9a) 2m27.883190916s ago: executing program 0 (id=2251): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x3ff, 0xff}, 0x100c, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$kcm(0xa, 0x2, 0x3a) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_config_ext={0x0, 0x20000003fff7ffe}, 0x1400, 0x32, 0x43a1bd76, 0x7, 0x9, 0xffff, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x4000, 0x0, @mcast2, 0x41}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x941}, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x1, 0x7, 0x3, 0xfa, 0x0, 0x5, 0x401, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5, 0x1, @perf_bp={&(0x7f0000000000), 0xa}, 0x1012b0, 0x101, 0x3, 0x4, 0x6, 0x3ff, 0x9, 0x0, 0x6b, 0x0, 0x6}, 0x0, 0xc, 0xffffffffffffffff, 0x1) sendmsg(r0, 0x0, 0x4000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0) r3 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x94) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(r3, 0x84, 0x64, 0x0, 0x0) sendmsg$inet(r3, 0x0, 0x80d1) close(r3) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x4024, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, 0x2, @perf_bp={0x0, 0x7}, 0x8000, 0x5, 0x47a1bd76, 0xf8b41de28833e869, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETVNETLE(r4, 0x40107447, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) 2m27.774727171s ago: executing program 1 (id=2253): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10003, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x401, 0x6}, 0x10000, 0xf, 0x0, 0x0, 0x0, 0x3ff, 0x3, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2000000, 0x0, 0x1e, 0x0, 0x0, 0x2000000, 0x0, 0x7}, 0x50) 2m27.637624488s ago: executing program 1 (id=2255): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x18, 0x12, &(0x7f0000000100)=ANY=[@ANYBLOB="85200000020000f318240000", @ANYRES32=r0, @ANYBLOB="000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000086000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000000000085000000860000004db0080010000000"], &(0x7f00000001c0)='syzkaller\x00', 0xa5b, 0x6c, &(0x7f0000000200)=""/108, 0x41100, 0x60, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x3, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4, &(0x7f00000002c0)=[0x1, r0], &(0x7f0000000300)=[{0x4, 0x5, 0x0, 0x5}, {0x1, 0x3, 0xa, 0x6}, {0x2, 0x1, 0x6, 0x7}, {0x0, 0x3, 0x7, 0xb}], 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x23, &(0x7f0000000800)=ANY=[@ANYBLOB="85200000030000001863000009000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[{0x18, 0x1, 0x1, "fd3d"}], 0x18}, 0x1) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x5, 0x1ff}, 0x0, 0x40, 0x6, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, @perf_bp={0x0, 0x4}, 0x8002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x4000}]}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x3, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) recvmsg$unix(r7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x20) setsockopt$sock_attach_bpf(r6, 0x84, 0x2, &(0x7f0000000000)=r9, 0x8) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000140)={'veth0_macvtap\x00', 0x200}) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') 2m26.913377523s ago: executing program 3 (id=2257): perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xae9, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000640), 0x1}, 0x0, 0x400008, 0x0, 0x0, 0x2010, 0x0, 0x0, 0x0, 0x40, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x5, 0x90, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, r0, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x5, 0x90, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, r0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000240)=@o_path={0x0}, 0x18) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, 0x0, 0x4008810) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="b400000000000000611484000000000005000000000000009500000000000000df6f529e26de12aeb6afc88dd97f69546c5effc7ce517f793d3fdc7e4a22f7bde5c56991c59aede6ea72ebde3ee47ed47e7bb3a578c4167332af53b32d85ef4b580a9c0bdf8f22f46179e8a746411f4f3f336fcdf8df134e884bba6332b7a49d28a1351fa970cb4c1e846f2b4c24f326399f42a04d65194c2a78d2a3960bf8721fd1be0bece3a073ecdebe"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="b400000000000000611484000000000005000000000000009500000000000000df6f529e26de12aeb6afc88dd97f69546c5effc7ce517f793d3fdc7e4a22f7bde5c56991c59aede6ea72ebde3ee47ed47e7bb3a578c4167332af53b32d85ef4b580a9c0bdf8f22f46179e8a746411f4f3f336fcdf8df134e884bba6332b7a49d28a1351fa970cb4c1e846f2b4c24f326399f42a04d65194c2a78d2a3960bf8721fd1be0bece3a073ecdebe"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) socket$kcm(0xa, 0x6, 0x0) (async) socket$kcm(0xa, 0x6, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100904, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) socketpair(0x27, 0x6, 0x401, &(0x7f0000000240)) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0xff00) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0xff00) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x23, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0xa28, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x100000000002, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400009"], 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400009"], 0x50) socket$kcm(0xa, 0x2, 0x0) (async) r2 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890b, &(0x7f0000000000)) (async) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890b, &(0x7f0000000000)) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x4f, 0x0, 0x0, 0x0, 0xfffffffffffffff6, 0x2663}, 0x8840) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000000c0), 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x0, 0x1800000000}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x2c, 0x0, 0x28) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890b, &(0x7f0000000000)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x80, 0x0}, 0x0) 2m10.892999947s ago: executing program 32 (id=2251): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x3ff, 0xff}, 0x100c, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$kcm(0xa, 0x2, 0x3a) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_config_ext={0x0, 0x20000003fff7ffe}, 0x1400, 0x32, 0x43a1bd76, 0x7, 0x9, 0xffff, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x4000, 0x0, @mcast2, 0x41}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x941}, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x1, 0x7, 0x3, 0xfa, 0x0, 0x5, 0x401, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5, 0x1, @perf_bp={&(0x7f0000000000), 0xa}, 0x1012b0, 0x101, 0x3, 0x4, 0x6, 0x3ff, 0x9, 0x0, 0x6b, 0x0, 0x6}, 0x0, 0xc, 0xffffffffffffffff, 0x1) sendmsg(r0, 0x0, 0x4000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0) r3 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x94) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(r3, 0x84, 0x64, 0x0, 0x0) sendmsg$inet(r3, 0x0, 0x80d1) close(r3) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x4024, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, 0x2, @perf_bp={0x0, 0x7}, 0x8000, 0x5, 0x47a1bd76, 0xf8b41de28833e869, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETVNETLE(r4, 0x40107447, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) 2m10.60451198s ago: executing program 33 (id=2255): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x18, 0x12, &(0x7f0000000100)=ANY=[@ANYBLOB="85200000020000f318240000", @ANYRES32=r0, @ANYBLOB="000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000086000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000000000085000000860000004db0080010000000"], &(0x7f00000001c0)='syzkaller\x00', 0xa5b, 0x6c, &(0x7f0000000200)=""/108, 0x41100, 0x60, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x3, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4, &(0x7f00000002c0)=[0x1, r0], &(0x7f0000000300)=[{0x4, 0x5, 0x0, 0x5}, {0x1, 0x3, 0xa, 0x6}, {0x2, 0x1, 0x6, 0x7}, {0x0, 0x3, 0x7, 0xb}], 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x23, &(0x7f0000000800)=ANY=[@ANYBLOB="85200000030000001863000009000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000820000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000200000085000000060000008510000004000000185100000f000000000000000000000018420000faffffff0000000000000000851000000500000018110000513e26c2f89ddfdac3656fea17b571e0ed03fab90d2373ed6f689a1080cf58548fe9fbd7186c3df8b49f5c06abc17ba2174212eb4c0f3c7f3ecdcf486bd57323d478dcaf7dcb349c78f4bfb116924893962b181f3e02008d62db83391c4d8f5fd4ea1a095d25ae18bbd8ce5fdb2b8104add6d6fc088100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[{0x18, 0x1, 0x1, "fd3d"}], 0x18}, 0x1) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x5, 0x1ff}, 0x0, 0x40, 0x6, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, @perf_bp={0x0, 0x4}, 0x8002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x4000}]}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x3, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) recvmsg$unix(r7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x20) setsockopt$sock_attach_bpf(r6, 0x84, 0x2, &(0x7f0000000000)=r9, 0x8) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000140)={'veth0_macvtap\x00', 0x200}) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') 2m10.318564274s ago: executing program 34 (id=2257): perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xae9, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000640), 0x1}, 0x0, 0x400008, 0x0, 0x0, 0x2010, 0x0, 0x0, 0x0, 0x40, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x5, 0x90, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, r0, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x5, 0x90, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, r0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000240)=@o_path={0x0}, 0x18) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, 0x0, 0x4008810) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="b400000000000000611484000000000005000000000000009500000000000000df6f529e26de12aeb6afc88dd97f69546c5effc7ce517f793d3fdc7e4a22f7bde5c56991c59aede6ea72ebde3ee47ed47e7bb3a578c4167332af53b32d85ef4b580a9c0bdf8f22f46179e8a746411f4f3f336fcdf8df134e884bba6332b7a49d28a1351fa970cb4c1e846f2b4c24f326399f42a04d65194c2a78d2a3960bf8721fd1be0bece3a073ecdebe"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="b400000000000000611484000000000005000000000000009500000000000000df6f529e26de12aeb6afc88dd97f69546c5effc7ce517f793d3fdc7e4a22f7bde5c56991c59aede6ea72ebde3ee47ed47e7bb3a578c4167332af53b32d85ef4b580a9c0bdf8f22f46179e8a746411f4f3f336fcdf8df134e884bba6332b7a49d28a1351fa970cb4c1e846f2b4c24f326399f42a04d65194c2a78d2a3960bf8721fd1be0bece3a073ecdebe"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) socket$kcm(0xa, 0x6, 0x0) (async) socket$kcm(0xa, 0x6, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100904, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) socketpair(0x27, 0x6, 0x401, &(0x7f0000000240)) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0xff00) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0xff00) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x23, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0xa28, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x100000000002, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400009"], 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400009"], 0x50) socket$kcm(0xa, 0x2, 0x0) (async) r2 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890b, &(0x7f0000000000)) (async) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890b, &(0x7f0000000000)) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x4f, 0x0, 0x0, 0x0, 0xfffffffffffffff6, 0x2663}, 0x8840) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000000c0), 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x0, 0x1800000000}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x2c, 0x0, 0x28) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890b, &(0x7f0000000000)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x80, 0x0}, 0x0) 56.771953183s ago: executing program 4 (id=2563): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x644b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x2}, 0x8004, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6, 0x4, 0x0, 0xfffffffe}]}) ioctl$TUNGETVNETLE(r2, 0x40107446, &(0x7f0000000180)) ioctl$TUNGETVNETLE(r1, 0x40107447, &(0x7f0000000180)) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x4004743d, 0x110e22fff6) write$cgroup_type(r4, &(0x7f0000000280), 0x9) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="050000000b000000008000000400000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000f0ffffff00"/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r5}, &(0x7f00000002c0), 0x0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000c40)}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$kcm(0x21, 0x2, 0xa) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000240)={0x0, 0x1, [@empty]}) sendmsg$kcm(r7, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x22}, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f0000000500)=[{0x18, 0x110, 0xc, "aa"}, {0x18, 0x110, 0x1, '\x00'}], 0x30}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0x21, 0x0, &(0x7f00000008c0)="f6f4e9a1000000000000000d0800c32a8bc678bbd404fcd535fdc8a75167efec52", 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000700)="0102", 0x0}, 0x50) socket$kcm(0x10, 0x3, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r9 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=@base={0x12, 0x2, 0x8, 0x2}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000580)=ANY=[@ANYRES32=r9, @ANYRES32=r8, @ANYBLOB='\a'], 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)=ANY=[@ANYRES32=r9, @ANYRES32=r8, @ANYBLOB='\a'], 0x10) 55.619356577s ago: executing program 4 (id=2568): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b0000000000"], 0xfdef) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000002dc0)={&(0x7f0000001580)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xfffffffffffffffd}, 0x1, 0x5c4}, 0x80, &(0x7f00000029c0)=[{&(0x7f0000001480)="89", 0x1}], 0x1}, 0xc9) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00'}, 0x94) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, 0x0, 0x20008000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4840) sendmsg$sock(r1, &(0x7f00000007c0)={&(0x7f00000001c0)=@phonet={0x23, 0x6, 0x4, 0xf8}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000280)="0254652b36dd63ef11b733dc82d03f3a0d1469de6dc81c0950286dd46b6791a223c28003a3ef64671d7d51327b189482fb681ead647748adacac7706c4575a658c85714ad10da68bcdf143d735a583d1587ef4b3f6a96d33cdf1f196b688ee3bb3b4d6e0d58db543586965fd0a287702ffb6b022544fe10ff3f391420e77dd8a76d67b8d1f46e0cd98e63f60a01de247995b2c17", 0x94}, {0x0}, {&(0x7f00000003c0)="3574dc29abe806ecb544a70727e1a1affaec7276c18dd0a3c7eb5078ed14dc632fcc", 0x22}], 0x3, &(0x7f0000000700)=[@mark={{0x14, 0x1, 0x24, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x1ff}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0xeef}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}], 0xc0}, 0x800) r4 = socket$kcm(0x10, 0x3, 0x10) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r7}, &(0x7f0000000280), &(0x7f0000000240)=r5}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f00000000c0)=r8, 0x4) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1, 0x0, 0x0, 0x1614}, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000780)="d80000001a0081044e81f782db4cb904021d0800fe007c05e8fe55a115001c000200142603600e12080005007a010401a800160020001d400d000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) socket$kcm(0x29, 0x2, 0x0) 52.698872177s ago: executing program 5 (id=2574): r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x104101, 0x4, 0x0, 0x1, 0x9, 0x10000000, 0x1}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x3) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000005c0)={r2, 0x20, &(0x7f00000004c0)={0x0, 0x0, 0x0, &(0x7f0000000480)=""/61, 0x3d}}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x0, 0xa, 0x0, 0x0) sendmsg$inet(r3, &(0x7f00000004c0)={&(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10, 0x0}, 0x40080) r4 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r4, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) sendmsg$inet(r4, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000240)="f9", 0x1}], 0x1}, 0x4000080) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) bpf$PROG_LOAD(0x1c, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0x20a, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb9d00180000000000000028060000280000000200000001"], 0x0, 0x42}, 0x20) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) recvmsg$kcm(r4, &(0x7f0000000840)={&(0x7f0000000400)=@nfc_llcp, 0x80, &(0x7f0000000740)=[{&(0x7f00000006c0)=""/68, 0x44}], 0x1, &(0x7f0000000780)=""/173, 0xad}, 0x40000000) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3d) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8946, &(0x7f0000000080)) socket$kcm(0x10, 0x3, 0x10) 52.472369107s ago: executing program 4 (id=2575): r0 = socket$kcm(0xa, 0x2, 0x3a) recvmsg(r0, &(0x7f0000003c80)={0x0, 0x0, &(0x7f0000003c40)=[{&(0x7f0000001ac0)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x40000000}, 0x40000000) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x4000, 0x0, @mcast2, 0x41}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0) 52.252539808s ago: executing program 6 (id=2577): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000040000000200000000000000004b0081000000000000000038de4264863d6e517a11ecb46b7a25da829ba23b547f3dd09672da7886de5dda9bca050c5d1f8c74a8313ff041a754d2e57f4cec0062e26ddc3bd580c14c520dee93125227f3a5a62f048d632084c20fa387dc42d9ec34ea0ae327e076ef41c136dfe88e5d55c654cf285f2127c05ca19b3c8f"], 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000500)={r0, 0x58, &(0x7f0000000480)}, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x100904, 0x0, 0x0, 0x4, 0x200000, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.dequeue\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800"/12], 0x0, 0x10000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$TUNSETDEBUG(r1, 0x400454c9, &(0x7f0000000380)=0x3) r3 = openat$cgroup_int(r2, &(0x7f0000000240)='cpuset.mem_exclusive\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000280)=0x9, 0x12) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110c230000) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r5, 0x1, 0x3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r6}, &(0x7f00000001c0), &(0x7f0000000280)}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1}, @ldst={0x2, 0x0, 0x3, 0x0, 0x0, 0x2}]}, &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000240)={r6, &(0x7f00000000c0), &(0x7f0000000100)=""/180, 0x4}, 0x20) 52.020305809s ago: executing program 4 (id=2578): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10003, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x401, 0x6}, 0x10000, 0xf, 0x0, 0x0, 0x0, 0x3ff, 0x3, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2000000, 0x0, 0x1e, 0x0, 0x0, 0x2000000, 0x0, 0x7}, 0x50) 51.970454081s ago: executing program 6 (id=2579): socket$kcm(0xa, 0x2, 0x3a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r0, 0x0, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x8040880) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000600)=[{}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8040880) socket$kcm(0x10, 0x4, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x5d31, 0x0, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10}, 0x0, 0x0, 0x0, 0x3, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r2, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xbc) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x2, 0x4, 0x6, 0xb, 0x0, 0xffffffffffffffff, 0x40}, 0x50) socket$kcm(0x10, 0x2, 0x10) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a1810039000000000bfffffffd00000e000a000f1f0000028002002d1f", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x400000002, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3542, 0x1ff, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xb, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000fdffffff850000007100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x1000000, 0xe, 0x0, &(0x7f0000000400)="e0b9547ed387c6e950a4e1f95bec", 0x0, 0xf, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x18) close(0x3) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0e000000040000000400000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xb, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x5, 0x0}, {0x18, 0x2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0x4, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 51.749786172s ago: executing program 4 (id=2580): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x10, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000280000000000000005000000911109000000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800003}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000001c0)=r1, 0x4) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x20) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r4 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000800030000009500009c20cfdd00"], 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r6) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000001040), 0xadc, r5}, 0x38) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8914, &(0x7f0000000080)) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x2400}, 0x4000814) 51.668604366s ago: executing program 5 (id=2581): r0 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x1, 0x23, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x24, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602}, 0x0, 0xb, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x7, 0x88) socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xa5, 0x1, 0x0, 0x0, 0x0, 0xd, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x40, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x25, 0x0, 0xf1) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xc, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000008000000000000000800000891113700000000009500000000"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) socketpair(0x18, 0x1, 0xfffff99f, &(0x7f00000000c0)) close(0x3) 51.480095795s ago: executing program 6 (id=2582): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0x10, 0x2, 0x0) close(r1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000fc0)={0x5, 0x80, 0xff, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x8000000000, 0x0, 0x0, 0x7, 0x4, 0xffff, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) syz_clone(0xc920000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x5, 0x0, 0x1, 0x0, 0xfffffffe, 0x1, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) socketpair(0x1, 0x1, 0x0, &(0x7f0000000400)) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r7}, 0x4) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x11, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r8, 0x0, 0xe, 0xfffffffffffffe6e, &(0x7f0000000100)="e0b9547e9f17dbe9abc89b6e0704", 0x0, 0x3696, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x104101, 0x4, 0x0, 0x1, 0x9, 0x10000000, 0x1}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x3) r9 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20488, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x111d09, 0x4, 0x10000, 0x1, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r10, &(0x7f0000000100)=ANY=[@ANYRES8=r1, @ANYBLOB="3eca", @ANYRES32=r9], 0x9a) 51.411000428s ago: executing program 2 (id=2583): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000018110000", @ANYRES8=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup, 0x11, 0x0, 0x5, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0]}, 0x40) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup, 0x11, 0x0, 0x5, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0], 0x0}, 0x40) r3 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r3, 0x84, 0x18, &(0x7f0000000000)=r5, 0x8) (async) setsockopt$sock_attach_bpf(r3, 0x84, 0x18, &(0x7f0000000000)=r5, 0x8) r6 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (async) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0x12, &(0x7f00000008c0)=r8, 0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)={@cgroup=r5, r1, 0x19, 0x49, r1, @void, @value=r8, @void, @void, r2}, 0x20) 50.483548032s ago: executing program 5 (id=2584): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x1800000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}, @printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000380)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close(r2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) close(r4) socket$kcm(0x2, 0x200000000000001, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8905, &(0x7f0000002280)={'bridge_slave_0\x00', @random="2b0100004ec6"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x105121, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1000000001, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x5, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000000c0)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef59510525ba56dcd79a36c23d3b9844e1571a86ea1698fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$kcm(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748fdb8021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4040004) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r9, &(0x7f0000000b40)={&(0x7f00000004c0)=@name={0x1e, 0x2, 0x2, {{0x42, 0x4}}}, 0x10, &(0x7f00000007c0)=[{&(0x7f00000005c0)="b247f92323806d1e483ba0d649aa9b55df8cf08c0ff657f169ba21be08dde25de7e1a74601ff01afe53b9c01a1aa90be8e5f5a0496e754b3d9f4a16afee2652139acb30a1904bb5d1ddd6d0c8b73be2d0011cc037d2a", 0x56}, {&(0x7f00000006c0)="9bcde138782cbed35a2efe41bc889ea847eeb53ba22d4a6fe5639e51fc51f5c1a8f149e2b7e13c34cdbd7caa79d942ff773da2afef74ac513ce30d018f0af4ac5b9d48060da929245e29bc513c3877a6c6d6f97cc53e2f962ca2b4adc9ccf9927560291b91d3db", 0x67}, {&(0x7f0000000740)="62794ed0d5038e0466177675d480b2e4faab70e313ffcbc9a215dad17dd16914dd8f55536969bd2adad67d05b088a302780771ce27aa61943f8a24167d71731cf7b296156867813531408f829099330a3a0080b676dc85caab62", 0x5a}], 0x3, &(0x7f0000000a40)="5a852b9380713978401d09daa3115a2f5fce3a5f317d0a64e8c53466e13ee28f56601c3d76f4c68b4ee84ef5c65280d4417ef48c624aab41361dfef5bc4c25a2c48a1fe8079f58af08d0799854fd40df8aa50150453fc24169202fdb6954bd6f34c3acbf9b9dd476873666e80ba5a3006e98197caadf15f7527bd288400457caaa2556609e1a919c5b7b93f11d58afb83200a3dd0bd22b3f3a304be706a585a237c00881d632e5477e8b639554e78e2375a2841d44b8a2a585b8a92b2cf597e7b9f8df28a49deee1b272b6956f88caf51b1f20ad350df380fe5f05a089ee6283a68652e683c378922403f932479f260a71a978006d3518", 0xf7, 0x20000080}, 0x800) getpid() sendmsg$unix(r5, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x24004000) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r10}, 0xc) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080b01000000e8fe55a1180015000600142603600e120800180000000401080016000a00014006001100036010fab94dcf5c0461c1d67f6f94f07134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 50.240385464s ago: executing program 2 (id=2585): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f00000003c0)="d80000001a00810a1d08007b490d4d1e81f8d829124b9aff05142603670e12080005007a01e300020016002000034004000000035c0461c9d67f6f940071342e8728a84942de4fe3aefb8000a003a290457f01e84460dd46302af989b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb9ee5350db798262f3d40fad95667e00681ed0bffece4b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b093a13b183376e181643370e00"/216, 0xffffffffffffffba}], 0x1}, 0x24000080) 47.732303083s ago: executing program 4 (id=2586): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x80040, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400200142603600e122f00160006000600a8000600200005400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40", 0x9c}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) sendmsg$sock(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000180)="8e3bc6d4215091816111a95a705f70d1dcb67b019116d21890892e7574486e5317bcb6cf29c6c951a086d04d44b0ab5638ff65d0e950526031cd51753557963bf4ac05c0131639d2e3c83d60c8e375635e8cbd4c3ac5abcd0df554457c6f4729e2b400fa762432fe1d8bfd6a4e4d03ee50eac1940de6d19aa20ab7c3608797edc6c0e5f373b489cacf60c0403455968b20bddd39f1b73d97053350c87e7b55857d7f60cb5a0ebf5106701ae4caa0", 0xae}, {&(0x7f0000000580)="80d0e3d562fe7434ca348b72f222678bd30f97d4e311b4f92d3c1f80226cb51b8d08d315a25160d66845a7a306a1abd70950b169b36fa12016382e1c391f331d0514544404827b10e663b64870d9a276e01bb3e1f201d543afcc24dd18a5a3f58c439cbdec8059a3e1bbac0a", 0x6c}], 0x2, &(0x7f0000000640)=[@timestamping={{0x14, 0x1, 0x25, 0xb05b}}, @mark={{0x14, 0x1, 0x24, 0x9}}], 0x30}, 0x4080810) sendmsg$kcm(r0, &(0x7f0000002080)={&(0x7f0000000080)=@hci={0x1f, 0x0, 0x2}, 0x80, &(0x7f0000000340)=[{0x0}], 0x1, &(0x7f0000000f00)=ANY=[@ANYBLOB="b00000000000000000000000070000000743f9181ff34ad57bde32222cac109c69cdcd22aecdbbfa927a727661063266f6faa662edf05551d42aa0543796b2c81e0720dd17d0c71e1a4b8e7501e749dc9d0239e7c0a14957b5083e47c3f2067f9e77699d9a59783e0363179965ef92e37c3efd106e787d8a8a3d90c5c162d90176f35c49c43c1d1496401dfeb0f7347ac2dce43deaac1413e023b9707c776e4f6a796b00c50b7745943ced000000000030000000000000000000000004000000b71cc98015701df1a14a06da101e38a395be39f28b1e5cccae9708d6000000001000000000000000070100000700000018000000000000000000000006000000f2d4827b9a79c3f76000000000000000080100008f7affff246308391969030da4711f76960c0607f912ceb8fdff35fa720f9c701289057311e7bf6d559a0c59565aefc28a8e67750106b0dbbb9ea7b29785d71140b9509974d40529993896071e4c5e6046702a0010000000000000003f0100000200000010000000000000003a00000002000000980000000000000029000000720e00003a2e9eeb98ec347da1bdd577dfd4ac25f4c4acc84ac11838d560054ed302ccd51b6326757c407162823c4d2bf36bfa3065b458791c80024aa896af5186a420b45d7bdc4e350aa38959ec5bb839515eec097b514d5014ac2a0a0da21500f9c848f5ce45006c30a09400a9e30a0e88eee0be7f0d843ce4d1c1e327f517f59e8fb1f00dbd913f0000f628000000000000000a0100000800000063c3edd93989dde3c226ee3916e811fc6efc4cc93db65fc9f5ca02336685104c04d490fb26db8fc843e5c2e9a094a942a5d4e168a86a80b2d7271710d37d6029aa3c3457705e4adfdcc7db050000000097116470ecbcfa59c34e7b2ab211ba740e76c1bbe9d90b036e054f2df88865ef4557284134b1aba41a7f27317c622d6cd76430d87f813b5745ddced0fc754c7b439ae35575bff6d1d2bc07350daa521532cf06564100c9c6003739a5c91431209e958183e4d87c"], 0x288}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x80104, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffff9, 0x3}, 0x0, 0x8, 0x0, 0x0, 0x7, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x21, 0x8, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@l2={0x1f, 0xfffd, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1000, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000083ff6e462000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1f, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x7e}}, {{0x6, 0x0, 0xb, 0x9, 0x0, 0x4}, {0x65, 0x0, 0x6, 0x9}}, [@printk={@ld, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x2, 0xa, 0x9}, {0x4, 0x0, 0x3, 0x9}, {}, {}, {0x15}}], {{0x5, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b000000000000000000000000000400"], 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5931, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20107b7f, 0x2, @perf_config_ext={0x7ff, 0x4}, 0x9080, 0x5, 0x43a1bd76, 0x4, 0x9, 0x1006, 0x2, 0x0, 0x80, 0x0, 0x2007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) close(r7) setsockopt$sock_attach_bpf(r5, 0x6, 0x1e, &(0x7f0000000500)=r8, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xa1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) 47.731265914s ago: executing program 2 (id=2587): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, r0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0xa, 0x300) r1 = socket$kcm(0x2, 0x2, 0x0) sendmsg$kcm(r1, 0x0, 0x20044000) openat$tun(0xffffffffffffff9c, 0x0, 0x4042, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r2 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r2, 0x0, 0x485, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000002940)="2000000020008107090f9becdb4cb96b0200000000fbff0100ff970000000000", 0x20}], 0x1, 0x0, 0x0, 0x81000000}, 0x80) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x6b772b5b, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x100924, 0x4, 0x4, 0x5, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x1) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) ioctl$SIOCSIFHWADDR(r3, 0x8b15, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}, 0x0) r7 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r7, 0x84, 0x9, &(0x7f0000000380), 0x98) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={r3, &(0x7f0000000140)="cb1a6268cf6d65ff3d5e2bdd482f7a850cc879f48f7bc84612dbc22b1262084ee39cc4a0d1a37a40a47b738ec9ac83", &(0x7f0000000200)=""/71}, 0x20) sendmsg$kcm(r7, &(0x7f00000003c0)={&(0x7f0000000740)=@l2tp={0x2, 0x0, @remote, 0x5}, 0x80, &(0x7f0000001bc0)=[{&(0x7f00000007c0)='\r', 0x1}], 0x1}, 0x40) 47.730790434s ago: executing program 6 (id=2588): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10003, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x401, 0x6}, 0x10000, 0xf, 0x0, 0x0, 0x0, 0x3ff, 0x3, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2000000, 0x0, 0x1e, 0x0, 0x0, 0x2000000, 0x0, 0x7}, 0x50) 47.614087309s ago: executing program 6 (id=2589): r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x104101, 0x4, 0x0, 0x1, 0x9, 0x10000000, 0x1}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x3) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000005c0)={r2, 0x20, &(0x7f00000004c0)={0x0, 0x0, 0x0, &(0x7f0000000480)=""/61, 0x3d}}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x0, 0xa, 0x0, 0x0) sendmsg$inet(r3, &(0x7f00000004c0)={&(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10, 0x0}, 0x40080) r4 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r4, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) sendmsg$inet(r4, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000240)="f9", 0x1}], 0x1}, 0x4000080) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) bpf$PROG_LOAD(0x1c, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0x20a, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb9d00180000000000000028060000280000000200000001"], 0x0, 0x42}, 0x20) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) recvmsg$kcm(r4, &(0x7f0000000840)={&(0x7f0000000400)=@nfc_llcp, 0x80, &(0x7f0000000740)=[{&(0x7f00000006c0)=""/68, 0x44}], 0x1, &(0x7f0000000780)=""/173, 0xad}, 0x40000000) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3d) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8946, &(0x7f0000000080)) socket$kcm(0x10, 0x3, 0x10) 47.452313967s ago: executing program 5 (id=2590): bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x1a, 0xb, &(0x7f0000000c40)=ANY=[@ANYBLOB="180000000000110000000000000000001801000020786c2500000000002020207b12f8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) 47.164999661s ago: executing program 5 (id=2591): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000005c0)="2e00000010008188e6b62aa73f72cc9f0ba1f848120000005e140602000000000e000a00100058000a8000001294", 0x2e}], 0x1}, 0x40400) 47.006696718s ago: executing program 2 (id=2592): r0 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x1, 0x23, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x24, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602}, 0x0, 0xb, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x7, 0x88) socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xa5, 0x1, 0x0, 0x0, 0x0, 0xd, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x40, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x25, 0x0, 0xf1) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xc, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000008000000000000000800000891113700000000009500000000"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) socketpair(0x18, 0x1, 0xfffff99f, &(0x7f00000000c0)) close(0x3) 46.044373204s ago: executing program 5 (id=2593): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) unlink(0x0) bpf$MAP_CREATE(0x300000000000000, 0x0, 0x0) r1 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r1, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x80040000, 0x49, 0x6, 0x0, 0x0, 0x2}, 0x50) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x6f1) 45.91450658s ago: executing program 2 (id=2594): perf_event_open(&(0x7f0000000000)={0x1, 0x33, 0x3, 0x0, 0x0, 0x0, 0x0, 0x24, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x2604, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1}, 0x1) r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000000e8ffffffffffff05000000", @ANYRES32=0x1], 0x48) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8916, &(0x7f0000000000)={r1}) r2 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x17, &(0x7f0000000000)=r4, 0x10) ioctl$PERF_EVENT_IOC_RESET(r4, 0x2403, 0x8) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000100)="d8000000140081044e81f782db44b9040a1d08bc01000000040000a118000200fc00000000000e1208000f0100810401a80016eaa40001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8936, &(0x7f0000000000)={r1}) 45.836679574s ago: executing program 6 (id=2595): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x10000000000009, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x8, 0x4, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x32, 0x43e1bd74, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x2000, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b9040200080211000000040000a118000200e000200114140e1208000f0100810401a80016ea1f000840032e5f54c92011144dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c01000000000000e2cb090000001fb79101015ee4bd31445a7ba9599763001b14620d9de656d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9e5e6d98031b68c76f9cefbbcbee5de6ccd40d", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x4009044) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x37) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x16, 0xd, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000040000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000800000095"], &(0x7f00000008c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4002000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100904, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$kcm(0xa, 0x2, 0x73) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x66, 0xc, 0x0, 0x0, 0x0, 0x9, 0x80, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x1, @perf_config_ext={0x382a, 0xffffffffffff0001}, 0x8000, 0x20000003, 0x43a1bd76, 0x7, 0x9, 0x658, 0x8, 0x0, 0x0, 0x0, 0x400000000200b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) sendmsg$sock(r7, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x4001) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000800000000000000000000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000614b5000000000009500000000000000bb9e3fe5cd4acf47"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 40.459112241s ago: executing program 2 (id=2596): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x10, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000280000000000000005000000911109000000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800003}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000001c0)=r1, 0x4) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x20) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r4 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000800030000009500009c20cfdd00"], 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r6) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000001040), 0xadc, r5}, 0x38) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8914, &(0x7f0000000080)) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x2400}, 0x4000814) 21.576979921s ago: executing program 35 (id=2586): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x80040, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400200142603600e122f00160006000600a8000600200005400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40", 0x9c}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) sendmsg$sock(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000180)="8e3bc6d4215091816111a95a705f70d1dcb67b019116d21890892e7574486e5317bcb6cf29c6c951a086d04d44b0ab5638ff65d0e950526031cd51753557963bf4ac05c0131639d2e3c83d60c8e375635e8cbd4c3ac5abcd0df554457c6f4729e2b400fa762432fe1d8bfd6a4e4d03ee50eac1940de6d19aa20ab7c3608797edc6c0e5f373b489cacf60c0403455968b20bddd39f1b73d97053350c87e7b55857d7f60cb5a0ebf5106701ae4caa0", 0xae}, {&(0x7f0000000580)="80d0e3d562fe7434ca348b72f222678bd30f97d4e311b4f92d3c1f80226cb51b8d08d315a25160d66845a7a306a1abd70950b169b36fa12016382e1c391f331d0514544404827b10e663b64870d9a276e01bb3e1f201d543afcc24dd18a5a3f58c439cbdec8059a3e1bbac0a", 0x6c}], 0x2, &(0x7f0000000640)=[@timestamping={{0x14, 0x1, 0x25, 0xb05b}}, @mark={{0x14, 0x1, 0x24, 0x9}}], 0x30}, 0x4080810) sendmsg$kcm(r0, &(0x7f0000002080)={&(0x7f0000000080)=@hci={0x1f, 0x0, 0x2}, 0x80, &(0x7f0000000340)=[{0x0}], 0x1, &(0x7f0000000f00)=ANY=[@ANYBLOB="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"], 0x288}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x80104, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffff9, 0x3}, 0x0, 0x8, 0x0, 0x0, 0x7, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x21, 0x8, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@l2={0x1f, 0xfffd, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1000, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000083ff6e462000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1f, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x7e}}, {{0x6, 0x0, 0xb, 0x9, 0x0, 0x4}, {0x65, 0x0, 0x6, 0x9}}, [@printk={@ld, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x2, 0xa, 0x9}, {0x4, 0x0, 0x3, 0x9}, {}, {}, {0x15}}], {{0x5, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b000000000000000000000000000400"], 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5931, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20107b7f, 0x2, @perf_config_ext={0x7ff, 0x4}, 0x9080, 0x5, 0x43a1bd76, 0x4, 0x9, 0x1006, 0x2, 0x0, 0x80, 0x0, 0x2007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) close(r7) setsockopt$sock_attach_bpf(r5, 0x6, 0x1e, &(0x7f0000000500)=r8, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xa1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) 18.007484952s ago: executing program 36 (id=2593): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) unlink(0x0) bpf$MAP_CREATE(0x300000000000000, 0x0, 0x0) r1 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r1, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61154c00000000006113300000000000bfa00000000000001503000008004e002d35010000000000950000bc000000006916000000000000bf67000000000000350605000fff07206706000005000000160302000ee60060bf500000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4501000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a81426104000000000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546ccd3f1d5ab2af27546e7c0700000000000000b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc2300000008ac86d8a297dff0445a15f21dce4de9f29eff65aadc841848c9b562a31e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4d08000000ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43000000207b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000bb0d0000000000000000b712c1e47be511fe32fbc90e2364a55e9bb609c64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd4722a11dc3c693962895496d4f6e9cc54db6c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c835d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fb9fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff5af657a67463d7dbf85ae9321fad16ee751cd7dde94ec97549c2b517dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce95798adc2dca871073f6bd61dc18402cde8bf377b2eaa45c940aabc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db059a6cffb92e2a0cfd81434e00000000000000000000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5c4d188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8b3f2d5454d127edab14ba61ba1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a5cbb8be3f7741b18007dff12eb95066cc6bc256f0a12282224bb031bbee6d23cef7074f6d718b06ca80b57aa183dd0c3eee45891441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf855689232f4fc5135790662dc1419a374be9d7b3e5be2886d23add90d862f1a682ff11c798e338af3e5bb0f9d3952b15bf3e0c618c89d20ca1e18a031397693bf3cfbd8417e5b55e641c898c280356f2da222d5d68919d98158578dcf18efa404e508bcbbb8cfcf70086821ebdf34c9a1dff45af873d0ecdf904c2bdbef81f246d26f4b40df949e12bdac18532f4e11c608cc31d60cb591c40a7b386fa1c753336d7220a35118d4919b45eff32aab684e62c6691de14e97aa7e9dc8ecf0cd50540246d2b746e41e5b4e2c095039dfe0f71db6265f7580d098be40ef36faee5d1695830d4242a23e541e6ce9fa1998d8961cf4fe3c8e8fbb566fffffffffc229614a4b7f80d237b8abc6fd0407de31d6e5532f360d379f20f054e5deb27f7922fe6c14eba96c9af409da03290e4009f872d5aaca63dbe239efb1e02dd4fc07f8c5b070e2ddeb4b5afa6df2e7e162962e334d8553cc56008ddc8277fa9e8f6684513bfa827686b6fb71259743f55f46fa7e6379312e93213faf275f0441d46bc5690181244c44bea45854ed4ccd99f3fd328110ae22ef1504ec0566652d742ed8a7e202539c6531824f7399b486fbb906a91b77f2a6ba27bf97ebc7482cea32278a7acd9f2210e6ed2defcbd112f29a92401c5a37c58835f870b056186ef3971d3d9effa5661cabc2a059689dcfb030dd4ac0fe54db67510d3e9a5d36b900000000000000000000000000000000c9e484cf5f8c0955c11b285de46871d62f9d986e73658d228225b21f694dd2dc80e96ce476496973ee14e3d4fd03507c6f7c0c8ae809ddc9a36b4f30d15d08cc8e72d750f5e529cf4cec823b923d382f3f2c42dcb4b316eba77e7f767ae17d4d3427c9379eadbd040fbbe0c6dd8100f1558354bdd35626052c2e66cc34f4e266cc04218764824533cac2736e236b50ae4d800565910200af9cb11002791a91d834ffcc65a6226ecafe0372e3ace29c2441eca24371857aa9eb9b3910a2eb"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x80040000, 0x49, 0x6, 0x0, 0x0, 0x2}, 0x50) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x6f1) 16.609691399s ago: executing program 37 (id=2595): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x10000000000009, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x8, 0x4, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x32, 0x43e1bd74, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x2000, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b9040200080211000000040000a118000200e000200114140e1208000f0100810401a80016ea1f000840032e5f54c92011144dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c01000000000000e2cb090000001fb79101015ee4bd31445a7ba9599763001b14620d9de656d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9e5e6d98031b68c76f9cefbbcbee5de6ccd40d", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x4009044) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x37) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x16, 0xd, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000040000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000800000095"], &(0x7f00000008c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4002000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100904, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$kcm(0xa, 0x2, 0x73) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x66, 0xc, 0x0, 0x0, 0x0, 0x9, 0x80, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x1, @perf_config_ext={0x382a, 0xffffffffffff0001}, 0x8000, 0x20000003, 0x43a1bd76, 0x7, 0x9, 0x658, 0x8, 0x0, 0x0, 0x0, 0x400000000200b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) sendmsg$sock(r7, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x4001) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000800000000000000000000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000614b5000000000009500000000000000bb9e3fe5cd4acf47"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 0s ago: executing program 38 (id=2596): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x10, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000280000000000000005000000911109000000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800003}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000001c0)=r1, 0x4) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x20) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r4 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000800030000009500009c20cfdd00"], 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r6) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000001040), 0xadc, r5}, 0x38) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8914, &(0x7f0000000080)) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x2400}, 0x4000814) kernel console output (not intermixed with test programs): T10262] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 335.028192][T10282] __nla_validate_parse: 1 callbacks suppressed [ 335.028211][T10282] netlink: 15999 bytes leftover after parsing attributes in process `syz.0.1343'. [ 335.054401][T10285] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1340'. [ 335.067504][T10285] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1340'. [ 335.097533][T10277] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1340'. [ 335.131697][T10278] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1340'. [ 335.243700][T10292] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1346'. [ 335.280063][T10292] openvswitch: netlink: IP tunnel attribute has 3040 unknown bytes. [ 335.308172][T10298] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1346'. [ 335.320162][T10298] openvswitch: netlink: IP tunnel attribute has 3040 unknown bytes. [ 335.932678][T10306] validate_nla: 2 callbacks suppressed [ 335.932742][T10306] netlink: 'syz.3.1349': attribute type 9 has an invalid length. [ 335.949578][T10306] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1349'. [ 335.951358][T10311] netlink: 'syz.3.1349': attribute type 28 has an invalid length. [ 336.162042][T10311] netlink: 'syz.3.1349': attribute type 29 has an invalid length. [ 336.428371][T10311] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1349'. [ 337.798577][T10337] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1359'. [ 339.714409][T10367] FAULT_INJECTION: forcing a failure. [ 339.714409][T10367] name failslab, interval 1, probability 0, space 0, times 0 [ 339.734197][T10367] CPU: 0 PID: 10367 Comm: syz.0.1368 Not tainted syzkaller #0 [ 339.741743][T10367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 339.751843][T10367] Call Trace: [ 339.755163][T10367] [ 339.758130][T10367] dump_stack_lvl+0x18c/0x250 [ 339.762857][T10367] ? sctp_sendmsg+0x1519/0x27b0 [ 339.767757][T10367] ? ___sys_sendmsg+0x2a6/0x360 [ 339.772653][T10367] ? show_regs_print_info+0x20/0x20 [ 339.777906][T10367] ? load_image+0x420/0x420 [ 339.782466][T10367] should_fail_ex+0x394/0x4c0 [ 339.787204][T10367] should_failslab+0x9/0x20 [ 339.791753][T10367] slab_pre_alloc_hook+0x59/0x300 [ 339.797435][T10367] ? sctp_add_bind_addr+0x8c/0x360 [ 339.802592][T10367] __kmem_cache_alloc_node+0x53/0x250 [ 339.808013][T10367] ? sctp_add_bind_addr+0x8c/0x360 [ 339.813174][T10367] kmalloc_trace+0x2a/0xe0 [ 339.817637][T10367] sctp_add_bind_addr+0x8c/0x360 [ 339.822626][T10367] sctp_copy_local_addr_list+0x31b/0x4e0 [ 339.828318][T10367] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 339.834083][T10367] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 339.840208][T10367] ? sctp_v4_is_any+0x35/0x60 [ 339.844932][T10367] ? sctp_copy_one_addr+0x8c/0x350 [ 339.850099][T10367] sctp_bind_addr_copy+0xb3/0x3c0 [ 339.855172][T10367] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 339.861555][T10367] sctp_connect_new_asoc+0x2f9/0x6a0 [ 339.866885][T10367] ? __sctp_connect+0xd80/0xd80 [ 339.871757][T10367] ? __local_bh_enable_ip+0x13a/0x1c0 [ 339.877241][T10367] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 339.882810][T10367] ? security_sctp_bind_connect+0x89/0xb0 [ 339.888562][T10367] sctp_sendmsg+0x1519/0x27b0 [ 339.893272][T10367] ? sctp_getsockopt+0xb60/0xb60 [ 339.898230][T10367] ? aa_af_perm+0x330/0x330 [ 339.902750][T10367] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 339.909179][T10367] ? sock_rps_record_flow+0x19/0x3f0 [ 339.914482][T10367] ? inet_sendmsg+0xce/0x2a0 [ 339.919085][T10367] ? inet_send_prepare+0x250/0x250 [ 339.924206][T10367] ____sys_sendmsg+0x61b/0x980 [ 339.928989][T10367] ? __asan_memset+0x22/0x40 [ 339.933600][T10367] ? __sys_sendmsg_sock+0x30/0x30 [ 339.938635][T10367] ? __import_iovec+0x5f2/0x850 [ 339.943507][T10367] ? import_iovec+0x73/0xa0 [ 339.948060][T10367] ___sys_sendmsg+0x2a6/0x360 [ 339.952749][T10367] ? get_pid_task+0x20/0x1e0 [ 339.958509][T10367] ? __sys_sendmsg+0x2b0/0x2b0 [ 339.963455][T10367] ? __lock_acquire+0x7d80/0x7d80 [ 339.968552][T10367] __se_sys_sendmsg+0x1d0/0x2c0 [ 339.973529][T10367] ? __x64_sys_sendmsg+0x80/0x80 [ 339.978517][T10367] ? lockdep_hardirqs_on+0x98/0x150 [ 339.983738][T10367] do_syscall_64+0x55/0xb0 [ 339.988173][T10367] ? clear_bhb_loop+0x40/0x90 [ 339.992866][T10367] ? clear_bhb_loop+0x40/0x90 [ 339.997565][T10367] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 340.003486][T10367] RIP: 0033:0x7f6bae99e159 [ 340.007953][T10367] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 340.027596][T10367] RSP: 002b:00007f6baf85c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 340.036033][T10367] RAX: ffffffffffffffda RBX: 00007f6baec25fa0 RCX: 00007f6bae99e159 [ 340.044013][T10367] RDX: 0000000000000040 RSI: 00002000000003c0 RDI: 0000000000000003 [ 340.051996][T10367] RBP: 00007f6baf85c090 R08: 0000000000000000 R09: 0000000000000000 [ 340.059973][T10367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 340.067952][T10367] R13: 00007f6baec26038 R14: 00007f6baec25fa0 R15: 00007ffd6d304a28 [ 340.075949][T10367] [ 340.422799][T10387] netlink: 'syz.0.1374': attribute type 21 has an invalid length. [ 340.753312][T10397] netlink: 'syz.2.1378': attribute type 11 has an invalid length. [ 341.126732][T10404] netlink: 'syz.1.1379': attribute type 28 has an invalid length. [ 341.127211][T10399] netlink: 'syz.1.1379': attribute type 9 has an invalid length. [ 341.166362][T10399] __nla_validate_parse: 1 callbacks suppressed [ 341.166954][T10399] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1379'. [ 341.172464][T10404] netlink: 'syz.1.1379': attribute type 29 has an invalid length. [ 341.220450][T10404] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1379'. [ 341.380126][T10411] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1383'. [ 341.598575][T10412] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.1383'. [ 341.674574][T10412] netlink: zone id is out of range [ 341.753565][T10412] netlink: zone id is out of range [ 341.761819][T10412] netlink: zone id is out of range [ 341.769115][T10412] netlink: zone id is out of range [ 341.781416][T10412] netlink: zone id is out of range [ 341.806982][T10412] netlink: zone id is out of range [ 341.833539][T10412] netlink: zone id is out of range [ 341.871216][T10412] netlink: zone id is out of range [ 341.901447][T10412] netlink: zone id is out of range [ 341.940761][T10412] netlink: zone id is out of range [ 342.539247][T10431] netlink: 'syz.0.1388': attribute type 10 has an invalid length. [ 342.563257][T10432] netlink: 'syz.0.1388': attribute type 10 has an invalid length. [ 344.517292][T10442] netlink: 'syz.3.1391': attribute type 2 has an invalid length. [ 344.531199][T10442] netlink: 'syz.3.1391': attribute type 8 has an invalid length. [ 344.538983][T10442] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1391'. [ 345.540159][T10466] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 345.546436][T10466] syzkaller1: linktype set to 769 [ 346.099428][T10491] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1403'. [ 346.818736][T10508] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1411'. [ 346.841450][T10508] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1411'. [ 346.853981][T10508] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1411'. [ 346.928203][T10512] syz.2.1413[10512] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 346.928392][T10512] syz.2.1413[10512] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 346.996365][T10516] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1411'. [ 347.903122][T10547] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1425'. [ 348.066567][T10555] net_ratelimit: 330 callbacks suppressed [ 348.066599][T10555] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 349.716071][T10588] netlink: 'syz.1.1437': attribute type 9 has an invalid length. [ 349.739825][T10592] netlink: 'syz.0.1439': attribute type 10 has an invalid length. [ 349.748587][T10588] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1437'. [ 349.768071][T10592] team0: Port device macvlan0 added [ 349.778050][T10593] netlink: 'syz.1.1437': attribute type 28 has an invalid length. [ 349.846293][T10593] netlink: 'syz.1.1437': attribute type 29 has an invalid length. [ 349.891342][T10593] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1437'. [ 350.061038][T10590] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1438'. [ 351.051775][T10619] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1447'. [ 351.072873][T10619] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1447'. [ 351.374955][T10625] FAULT_INJECTION: forcing a failure. [ 351.374955][T10625] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 351.411286][T10625] CPU: 0 PID: 10625 Comm: syz.3.1450 Not tainted syzkaller #0 [ 351.418842][T10625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 351.428944][T10625] Call Trace: [ 351.432264][T10625] [ 351.435227][T10625] dump_stack_lvl+0x18c/0x250 [ 351.440064][T10625] ? show_regs_print_info+0x20/0x20 [ 351.445306][T10625] ? load_image+0x420/0x420 [ 351.449876][T10625] ? __lock_acquire+0x7d80/0x7d80 [ 351.455012][T10625] should_fail_ex+0x394/0x4c0 [ 351.459867][T10625] prepare_alloc_pages+0x1e1/0x5b0 [ 351.465092][T10625] __alloc_pages+0x134/0x460 [ 351.469757][T10625] ? zone_statistics+0x170/0x170 [ 351.474761][T10625] ? alloc_pages+0x4e1/0x740 [ 351.479433][T10625] ? do_raw_spin_unlock+0x121/0x230 [ 351.484679][T10625] __get_free_pages+0xc/0x30 [ 351.489338][T10625] kasan_populate_vmalloc_pte+0x35/0x100 [ 351.495016][T10625] __apply_to_page_range+0x860/0xdd0 [ 351.500343][T10625] ? kasan_populate_vmalloc+0x70/0x70 [ 351.505754][T10625] ? apply_to_page_range+0x50/0x50 [ 351.510905][T10625] ? do_raw_spin_unlock+0x121/0x230 [ 351.516141][T10625] alloc_vmap_area+0x1d26/0x1e50 [ 351.521137][T10625] ? vm_map_ram+0xcf0/0xcf0 [ 351.525679][T10625] ? rcu_is_watching+0x15/0xb0 [ 351.530480][T10625] __get_vm_area_node+0x162/0x370 [ 351.535568][T10625] __vmalloc_node_range+0x36f/0x1320 [ 351.540887][T10625] ? sock_hash_alloc+0x25e/0x4e0 [ 351.546014][T10625] ? free_vm_area+0x50/0x50 [ 351.550554][T10625] ? bpf_map_area_alloc+0x5e/0x110 [ 351.555711][T10625] ? rcu_is_watching+0x15/0xb0 [ 351.560503][T10625] ? bpf_map_area_alloc+0x5e/0x110 [ 351.565653][T10625] bpf_map_area_alloc+0xf1/0x110 [ 351.570648][T10625] ? sock_hash_alloc+0x25e/0x4e0 [ 351.575617][T10625] sock_hash_alloc+0x25e/0x4e0 [ 351.580411][T10625] map_create+0x877/0x12f0 [ 351.584882][T10625] __sys_bpf+0x651/0x890 [ 351.589154][T10625] ? bpf_link_show_fdinfo+0x560/0x560 [ 351.594597][T10625] ? lock_chain_count+0x20/0x20 [ 351.599485][T10625] __x64_sys_bpf+0x7c/0x90 [ 351.603931][T10625] do_syscall_64+0x55/0xb0 [ 351.608375][T10625] ? clear_bhb_loop+0x40/0x90 [ 351.613178][T10625] ? clear_bhb_loop+0x40/0x90 [ 351.617893][T10625] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 351.623819][T10625] RIP: 0033:0x7fc6b759e159 [ 351.628261][T10625] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 351.647897][T10625] RSP: 002b:00007fc6b8412028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 351.656361][T10625] RAX: ffffffffffffffda RBX: 00007fc6b7825fa0 RCX: 00007fc6b759e159 [ 351.664373][T10625] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 0000000000000000 [ 351.672375][T10625] RBP: 00007fc6b8412090 R08: 0000000000000000 R09: 0000000000000000 [ 351.680395][T10625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 351.688411][T10625] R13: 00007fc6b7826038 R14: 00007fc6b7825fa0 R15: 00007ffc56d3c0a8 [ 351.696461][T10625] [ 352.114282][T10643] __nla_validate_parse: 2 callbacks suppressed [ 352.114365][T10643] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.1457'. [ 352.903186][ T51] Bluetooth: hci1: unexpected subevent 0x0a length: 150 > 30 [ 352.912315][ T51] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 353.331598][T10665] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1465'. [ 354.132517][ T5779] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30 [ 354.495242][T10700] netlink: 'syz.2.1479': attribute type 9 has an invalid length. [ 354.533310][T10703] FAULT_INJECTION: forcing a failure. [ 354.533310][T10703] name failslab, interval 1, probability 0, space 0, times 0 [ 354.571592][T10703] CPU: 1 PID: 10703 Comm: syz.1.1480 Not tainted syzkaller #0 [ 354.579238][T10703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 354.581113][T10700] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.1479'. [ 354.589317][T10703] Call Trace: [ 354.589332][T10703] [ 354.589343][T10703] dump_stack_lvl+0x18c/0x250 [ 354.609593][T10703] ? sctp_sendmsg+0x1519/0x27b0 [ 354.614701][T10703] ? ___sys_sendmsg+0x2a6/0x360 [ 354.619709][T10703] ? show_regs_print_info+0x20/0x20 [ 354.624964][T10703] ? load_image+0x420/0x420 [ 354.629541][T10703] should_fail_ex+0x394/0x4c0 [ 354.634278][T10703] should_failslab+0x9/0x20 [ 354.638822][T10703] slab_pre_alloc_hook+0x59/0x300 [ 354.643990][T10703] ? sctp_add_bind_addr+0x8c/0x360 [ 354.649148][T10703] __kmem_cache_alloc_node+0x53/0x250 [ 354.654566][T10703] ? sctp_add_bind_addr+0x8c/0x360 [ 354.659717][T10703] kmalloc_trace+0x2a/0xe0 [ 354.664211][T10703] sctp_add_bind_addr+0x8c/0x360 [ 354.669216][T10703] sctp_copy_local_addr_list+0x31b/0x4e0 [ 354.674976][T10703] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 354.680742][T10703] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 354.686864][T10703] ? sctp_v4_is_any+0x35/0x60 [ 354.691586][T10703] ? sctp_copy_one_addr+0x8c/0x350 [ 354.696747][T10703] sctp_bind_addr_copy+0xb3/0x3c0 [ 354.701868][T10703] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 354.708438][T10703] sctp_connect_new_asoc+0x2f9/0x6a0 [ 354.713806][T10703] ? __sctp_connect+0xd80/0xd80 [ 354.718704][T10703] ? __local_bh_enable_ip+0x13a/0x1c0 [ 354.724170][T10703] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 354.729756][T10703] ? security_sctp_bind_connect+0x89/0xb0 [ 354.735644][T10703] sctp_sendmsg+0x1519/0x27b0 [ 354.740379][T10703] ? sctp_getsockopt+0xb60/0xb60 [ 354.745408][T10703] ? aa_af_perm+0x330/0x330 [ 354.749997][T10703] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 354.756460][T10703] ? sock_rps_record_flow+0x19/0x3f0 [ 354.761818][T10703] ? inet_sendmsg+0xce/0x2a0 [ 354.766440][T10703] ? inet_send_prepare+0x250/0x250 [ 354.771595][T10703] ____sys_sendmsg+0x61b/0x980 [ 354.776406][T10703] ? __asan_memset+0x22/0x40 [ 354.781043][T10703] ? __sys_sendmsg_sock+0x30/0x30 [ 354.786113][T10703] ? __import_iovec+0x5f2/0x850 [ 354.791017][T10703] ? import_iovec+0x73/0xa0 [ 354.795652][T10703] ___sys_sendmsg+0x2a6/0x360 [ 354.800371][T10703] ? __sys_sendmsg+0x2b0/0x2b0 [ 354.805205][T10703] ? trace_call_bpf+0xc3/0x6c0 [ 354.810064][T10703] __se_sys_sendmsg+0x1d0/0x2c0 [ 354.814954][T10703] ? perf_trace_preemptirq_template+0x269/0x330 [ 354.821329][T10703] ? __x64_sys_sendmsg+0x80/0x80 [ 354.826324][T10703] ? lockdep_hardirqs_on+0x98/0x150 [ 354.831638][T10703] do_syscall_64+0x55/0xb0 [ 354.836092][T10703] ? clear_bhb_loop+0x40/0x90 [ 354.840811][T10703] ? clear_bhb_loop+0x40/0x90 [ 354.845558][T10703] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 354.851499][T10703] RIP: 0033:0x7f05a079e159 [ 354.855953][T10703] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 354.875687][T10703] RSP: 002b:00007f05a170d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 354.884147][T10703] RAX: ffffffffffffffda RBX: 00007f05a0a25fa0 RCX: 00007f05a079e159 [ 354.892157][T10703] RDX: 0000000000000040 RSI: 00002000000003c0 RDI: 0000000000000003 [ 354.900161][T10703] RBP: 00007f05a170d090 R08: 0000000000000000 R09: 0000000000000000 [ 354.908170][T10703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 354.916174][T10703] R13: 00007f05a0a26038 R14: 00007f05a0a25fa0 R15: 00007ffeaa5140c8 [ 354.924291][T10703] [ 355.440376][T10709] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1482'. [ 355.724664][T10718] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.1484'. [ 355.837580][T10722] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1486'. [ 355.892533][ T5779] Bluetooth: hci1: unexpected subevent 0x0a length: 150 > 30 [ 355.900207][ T5779] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 356.370839][T10735] netlink: 'syz.0.1491': attribute type 11 has an invalid length. [ 356.682872][T10746] netlink: 'syz.3.1494': attribute type 4 has an invalid length. [ 356.771189][T10746] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1494'. [ 357.062528][ T5779] Bluetooth: hci3: unexpected subevent 0x0c length: 150 > 5 [ 357.229276][T10765] netlink: 'syz.3.1503': attribute type 10 has an invalid length. [ 357.259826][T10763] pim6reg0: tun_chr_ioctl cmd 1074025672 [ 357.290573][T10763] pim6reg0: ignored: set checksum disabled [ 357.837935][T10775] sit0: left promiscuous mode [ 358.035769][T10777] netlink: 'syz.0.1507': attribute type 21 has an invalid length. [ 358.054744][T10777] IPv6: Can't replace route, no match found [ 358.359514][ T5779] Bluetooth: hci1: unexpected subevent 0x0c length: 150 > 5 [ 359.001259][T10803] netlink: 'syz.0.1515': attribute type 10 has an invalid length. [ 359.015849][T10803] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1515'. [ 359.036545][T10803] batman_adv: batadv0: Adding interface: virt_wifi0 [ 359.045398][T10803] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 359.078829][T10803] batman_adv: batadv0: Interface activated: virt_wifi0 [ 359.090187][T10804] netlink: 'syz.0.1515': attribute type 2 has an invalid length. [ 359.098746][T10804] netlink: 'syz.0.1515': attribute type 8 has an invalid length. [ 359.107029][T10804] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1515'. [ 359.210414][T10811] netlink: 209832 bytes leftover after parsing attributes in process `syz.2.1517'. [ 359.585749][T10821] netlink: 'syz.2.1519': attribute type 2 has an invalid length. [ 359.588307][T10823] netlink: 'syz.1.1520': attribute type 10 has an invalid length. [ 359.610785][T10823] macvlan0: left promiscuous mode [ 359.614724][T10821] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1519'. [ 359.616714][T10823] macvlan0: left allmulticast mode [ 359.642159][ T5779] Bluetooth: hci3: unexpected subevent 0x0c length: 150 > 5 [ 359.879387][T10832] netlink: 'syz.1.1522': attribute type 2 has an invalid length. [ 359.887352][T10832] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1522'. [ 359.902377][T10833] IPv6: Can't replace route, no match found [ 360.660074][T10846] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1527'. [ 361.140807][T10865] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1537'. [ 361.236969][T10867] Â: renamed from ip6gretap0 (while UP) [ 361.998019][T10890] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1547'. [ 362.017953][T10890] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1547'. [ 362.040249][T10890] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1547'. [ 363.524084][T10940] validate_nla: 6 callbacks suppressed [ 363.524104][T10940] netlink: 'syz.1.1562': attribute type 10 has an invalid length. [ 364.264700][T10959] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 366.635421][T11007] netlink: 'syz.1.1584': attribute type 9 has an invalid length. [ 366.722016][T11007] __nla_validate_parse: 1 callbacks suppressed [ 366.722156][T11007] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1584'. [ 366.777012][T11010] netlink: 'syz.1.1584': attribute type 28 has an invalid length. [ 366.785180][T11010] netlink: 'syz.1.1584': attribute type 29 has an invalid length. [ 366.822993][T11010] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1584'. [ 370.275752][T11001] netlink: 'syz.2.1580': attribute type 10 has an invalid length. [ 370.284112][T11001] macvlan0: left promiscuous mode [ 370.292386][T11001] macvlan0: entered promiscuous mode [ 370.297974][T11001] macvlan0: entered allmulticast mode [ 370.305902][T11001] veth1_vlan: entered allmulticast mode [ 370.312142][T11001] team0: Port device macvlan0 added [ 370.846277][T11037] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1591'. [ 370.862951][T11037] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1591'. [ 370.883606][T11029] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1591'. [ 370.905240][T11033] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1591'. [ 373.421996][T11080] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1608'. [ 373.461967][T11081] netlink: 'syz.3.1609': attribute type 12 has an invalid length. [ 373.491278][T11081] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1609'. [ 373.562718][T11081] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1609'. [ 375.271452][T11102] can: request_module (can-proto-3) failed. [ 376.848107][T11133] FAULT_INJECTION: forcing a failure. [ 376.848107][T11133] name failslab, interval 1, probability 0, space 0, times 0 [ 376.901059][T11133] CPU: 0 PID: 11133 Comm: syz.3.1626 Not tainted syzkaller #0 [ 376.908625][T11133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 376.918693][T11133] Call Trace: [ 376.921981][T11133] [ 376.924939][T11133] dump_stack_lvl+0x18c/0x250 [ 376.929639][T11133] ? sctp_sendmsg+0x1519/0x27b0 [ 376.934514][T11133] ? ___sys_sendmsg+0x2a6/0x360 [ 376.939379][T11133] ? show_regs_print_info+0x20/0x20 [ 376.944604][T11133] ? load_image+0x420/0x420 [ 376.949133][T11133] should_fail_ex+0x394/0x4c0 [ 376.953832][T11133] should_failslab+0x9/0x20 [ 376.958351][T11133] slab_pre_alloc_hook+0x59/0x300 [ 376.963400][T11133] ? sctp_add_bind_addr+0x8c/0x360 [ 376.968527][T11133] __kmem_cache_alloc_node+0x53/0x250 [ 376.973917][T11133] ? sctp_add_bind_addr+0x8c/0x360 [ 376.979043][T11133] kmalloc_trace+0x2a/0xe0 [ 376.983503][T11133] sctp_add_bind_addr+0x8c/0x360 [ 376.988460][T11133] sctp_copy_local_addr_list+0x31b/0x4e0 [ 376.994113][T11133] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 376.999850][T11133] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 377.005934][T11133] ? sctp_v4_is_any+0x35/0x60 [ 377.010625][T11133] ? sctp_copy_one_addr+0x8c/0x350 [ 377.015784][T11133] sctp_bind_addr_copy+0xb3/0x3c0 [ 377.020845][T11133] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 377.027190][T11133] sctp_connect_new_asoc+0x2f9/0x6a0 [ 377.032493][T11133] ? __sctp_connect+0xd80/0xd80 [ 377.037358][T11133] ? __local_bh_enable_ip+0x13a/0x1c0 [ 377.042745][T11133] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 377.048305][T11133] ? security_sctp_bind_connect+0x89/0xb0 [ 377.054049][T11133] sctp_sendmsg+0x1519/0x27b0 [ 377.058751][T11133] ? sctp_getsockopt+0xb60/0xb60 [ 377.063712][T11133] ? aa_af_perm+0x330/0x330 [ 377.068237][T11133] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 377.074666][T11133] ? sock_rps_record_flow+0x19/0x3f0 [ 377.079962][T11133] ? inet_sendmsg+0xce/0x2a0 [ 377.084563][T11133] ? inet_send_prepare+0x250/0x250 [ 377.089693][T11133] ____sys_sendmsg+0x61b/0x980 [ 377.094476][T11133] ? __asan_memset+0x22/0x40 [ 377.099089][T11133] ? __sys_sendmsg_sock+0x30/0x30 [ 377.104146][T11133] ? __import_iovec+0x5f2/0x850 [ 377.109026][T11133] ? import_iovec+0x73/0xa0 [ 377.113547][T11133] ___sys_sendmsg+0x2a6/0x360 [ 377.118233][T11133] ? get_pid_task+0x20/0x1e0 [ 377.122849][T11133] ? __sys_sendmsg+0x2b0/0x2b0 [ 377.127642][T11133] ? __lock_acquire+0x7d80/0x7d80 [ 377.132698][T11133] __se_sys_sendmsg+0x1d0/0x2c0 [ 377.137563][T11133] ? __x64_sys_sendmsg+0x80/0x80 [ 377.142535][T11133] ? lockdep_hardirqs_on+0x98/0x150 [ 377.147746][T11133] do_syscall_64+0x55/0xb0 [ 377.152186][T11133] ? clear_bhb_loop+0x40/0x90 [ 377.156879][T11133] ? clear_bhb_loop+0x40/0x90 [ 377.161570][T11133] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 377.167476][T11133] RIP: 0033:0x7fc6b759e159 [ 377.171904][T11133] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 377.191525][T11133] RSP: 002b:00007fc6b8412028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 377.199968][T11133] RAX: ffffffffffffffda RBX: 00007fc6b7825fa0 RCX: 00007fc6b759e159 [ 377.207955][T11133] RDX: 0000000000000040 RSI: 00002000000003c0 RDI: 0000000000000003 [ 377.215939][T11133] RBP: 00007fc6b8412090 R08: 0000000000000000 R09: 0000000000000000 [ 377.223915][T11133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 377.231908][T11133] R13: 00007fc6b7826038 R14: 00007fc6b7825fa0 R15: 00007ffc56d3c0a8 [ 377.239904][T11133] [ 377.380128][ T5779] Bluetooth: hci1: unexpected subevent 0x0a length: 150 > 30 [ 377.392175][ T5779] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:0' [ 377.401747][ T5779] CPU: 0 PID: 5779 Comm: kworker/u5:3 Not tainted syzkaller #0 [ 377.409335][ T5779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 377.419430][ T5779] Workqueue: hci1 hci_rx_work [ 377.424247][ T5779] Call Trace: [ 377.427560][ T5779] [ 377.430520][ T5779] dump_stack_lvl+0x18c/0x250 [ 377.435250][ T5779] ? show_regs_print_info+0x20/0x20 [ 377.440492][ T5779] ? load_image+0x420/0x420 [ 377.445104][ T5779] sysfs_create_dir_ns+0x26e/0x2a0 [ 377.450345][ T5779] ? __lock_acquire+0x7d80/0x7d80 [ 377.455442][ T5779] ? sysfs_warn_dup+0xa0/0xa0 [ 377.460185][ T5779] ? do_raw_spin_unlock+0x121/0x230 [ 377.465443][ T5779] kobject_add_internal+0x617/0xc90 [ 377.470716][ T5779] kobject_add+0x164/0x240 [ 377.475187][ T5779] ? kobject_init+0x1d0/0x1d0 [ 377.479920][ T5779] ? get_device_parent+0x366/0x390 [ 377.485130][ T5779] device_add+0x3fa/0xc40 [ 377.489509][ T5779] hci_conn_add_sysfs+0xd5/0x1e0 [ 377.494570][ T5779] le_conn_complete_evt+0xe9a/0x1480 [ 377.499961][ T5779] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 377.506246][ T5779] ? bt_info+0x180/0x180 [ 377.510532][ T5779] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 377.516285][ T5779] ? mutex_unlock+0x10/0x10 [ 377.520821][ T5779] ? skb_pull_data+0xf0/0x1f0 [ 377.525569][ T5779] hci_le_enh_conn_complete_evt+0x189/0x460 [ 377.531514][ T5779] ? hci_le_remote_conn_param_req_evt+0xcb0/0xcb0 [ 377.537982][ T5779] ? hci_remote_host_features_evt+0x150/0x150 [ 377.544083][ T5779] hci_event_packet+0x7b4/0x1280 [ 377.549070][ T5779] ? __lock_acquire+0x7d80/0x7d80 [ 377.554138][ T5779] ? lock_chain_count+0x20/0x20 [ 377.559049][ T5779] ? bis_list+0x290/0x290 [ 377.563559][ T5779] ? kcov_remote_start+0x513/0x810 [ 377.568716][ T5779] ? lockdep_hardirqs_on+0x98/0x150 [ 377.573995][ T5779] ? hci_send_to_monitor+0xd7/0x4f0 [ 377.579295][ T5779] hci_rx_work+0x43a/0xd60 [ 377.583797][ T5779] ? process_scheduled_works+0x975/0x1600 [ 377.589570][ T5779] process_scheduled_works+0xa60/0x1600 [ 377.595237][ T5779] ? worker_attach_to_pool+0x370/0x370 [ 377.600755][ T5779] ? assign_work+0x3cc/0x5d0 [ 377.605419][ T5779] worker_thread+0xa5e/0xfe0 [ 377.610099][ T5779] ? _raw_spin_unlock+0x40/0x40 [ 377.614987][ T5779] ? __kthread_parkme+0x71/0x1c0 [ 377.619995][ T5779] kthread+0x2fa/0x390 [ 377.624095][ T5779] ? pr_cont_work+0x550/0x550 [ 377.628819][ T5779] ? kthread_blkcg+0xd0/0xd0 [ 377.633447][ T5779] ret_from_fork+0x48/0x80 [ 377.637955][ T5779] ? kthread_blkcg+0xd0/0xd0 [ 377.642630][ T5779] ret_from_fork_asm+0x11/0x20 [ 377.647529][ T5779] [ 377.661202][ T5779] kobject: kobject_add_internal failed for hci1:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 377.675365][ T5779] Bluetooth: hci1: failed to register connection device [ 378.230139][T11149] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1631'. [ 378.564751][T11154] netlink: 'syz.0.1640': attribute type 19 has an invalid length. [ 378.577989][T11154] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1640'. [ 378.729835][T11161] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1635'. [ 378.882673][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.889103][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.741201][ T5779] Bluetooth: hci1: command 0x0406 tx timeout [ 380.416769][T11187] netlink: 'syz.0.1642': attribute type 10 has an invalid length. [ 380.441204][T11187] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1642'. [ 380.450770][T11187] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 384.613164][T11213] pim6reg0: tun_chr_ioctl cmd 1074025672 [ 384.618912][T11213] pim6reg0: ignored: set checksum disabled [ 385.192352][T11243] netlink: 'syz.0.1656': attribute type 10 has an invalid length. [ 386.838516][T11263] netlink: 'syz.3.1660': attribute type 10 has an invalid length. [ 387.161143][T11263] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1660'. [ 387.315712][T11263] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 387.534393][T11276] netlink: 'syz.2.1666': attribute type 21 has an invalid length. [ 387.570209][T11276] IPv6: Can't replace route, no match found [ 387.888467][T11283] netlink: 'syz.0.1669': attribute type 2 has an invalid length. [ 387.901642][T11283] netlink: 'syz.0.1669': attribute type 8 has an invalid length. [ 387.909479][T11283] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1669'. [ 388.102013][T11278] netlink: 'syz.1.1667': attribute type 5 has an invalid length. [ 388.377482][T11278] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1667'. [ 390.888660][T11319] netlink: 'syz.1.1677': attribute type 2 has an invalid length. [ 391.155797][T11324] netlink: 'syz.2.1679': attribute type 10 has an invalid length. [ 391.190035][T11324] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1679'. [ 391.241303][T11324] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 391.878587][T11348] netlink: 'syz.3.1689': attribute type 29 has an invalid length. [ 392.068175][T11348] netlink: 'syz.3.1689': attribute type 29 has an invalid length. [ 392.122344][T11355] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1689'. [ 392.145405][T11359] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1692'. [ 393.421901][T11385] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 393.429391][T11385] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 393.454856][T11385] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 393.466141][T11385] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 393.553658][T11390] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1702'. [ 393.580383][T11390] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1702'. [ 393.598037][T11390] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1702'. [ 393.727143][T11390] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1702'. [ 394.758973][T11421] netlink: 'syz.0.1714': attribute type 10 has an invalid length. [ 394.832094][T11421] team0: Port device macvlan0 removed [ 394.988385][ T5779] Bluetooth: hci3: unexpected subevent 0x0a length: 150 > 30 [ 394.996072][ T5779] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 395.940761][T11438] netlink: 209832 bytes leftover after parsing attributes in process `syz.1.1720'. [ 396.500319][T11443] netlink: 'syz.2.1721': attribute type 9 has an invalid length. [ 396.534713][T11443] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1721'. [ 396.789781][ T5779] Bluetooth: hci1: unexpected subevent 0x0a length: 150 > 30 [ 396.797972][ T5779] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 396.845400][T11458] netlink: 'syz.3.1726': attribute type 10 has an invalid length. [ 397.723052][T11485] lo: left promiscuous mode [ 397.739223][T11485] lo: entered allmulticast mode [ 397.783514][T11485] lo: entered promiscuous mode [ 397.800713][T11485] lo: left allmulticast mode [ 397.808290][ T51] Bluetooth: hci1: unexpected subevent 0x0a length: 150 > 30 [ 397.817045][ T51] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 398.738203][T11513] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 400.109434][T11538] netlink: 'syz.2.1750': attribute type 10 has an invalid length. [ 400.200439][T11538] veth1_vlan: left allmulticast mode [ 400.631680][T11538] team0: Port device macvlan0 removed [ 400.753036][T11538] veth1_vlan: entered allmulticast mode [ 400.808312][T11538] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 401.490352][T11573] IPv6: Can't replace route, no match found [ 402.795778][T11595] syzkaller0: entered promiscuous mode [ 402.801618][T11595] syzkaller0: entered allmulticast mode [ 404.278449][T11641] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1782'. [ 405.299330][T11641] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1782'. [ 405.439316][T11647] FAULT_INJECTION: forcing a failure. [ 405.439316][T11647] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 405.480215][T11647] CPU: 1 PID: 11647 Comm: syz.2.1785 Not tainted syzkaller #0 [ 405.487760][T11647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 405.497860][T11647] Call Trace: [ 405.501184][T11647] [ 405.504165][T11647] dump_stack_lvl+0x18c/0x250 [ 405.508901][T11647] ? show_regs_print_info+0x20/0x20 [ 405.514155][T11647] ? load_image+0x420/0x420 [ 405.518696][T11647] ? __lock_acquire+0x7d80/0x7d80 [ 405.523767][T11647] should_fail_ex+0x394/0x4c0 [ 405.528491][T11647] prepare_alloc_pages+0x1e1/0x5b0 [ 405.533657][T11647] __alloc_pages+0x134/0x460 [ 405.538288][T11647] ? zone_statistics+0x170/0x170 [ 405.543272][T11647] ? alloc_pages+0x4e1/0x740 [ 405.547902][T11647] ? do_raw_spin_unlock+0x121/0x230 [ 405.553158][T11647] __get_free_pages+0xc/0x30 [ 405.557787][T11647] kasan_populate_vmalloc_pte+0x35/0x100 [ 405.563464][T11647] __apply_to_page_range+0x860/0xdd0 [ 405.568792][T11647] ? kasan_populate_vmalloc+0x70/0x70 [ 405.574207][T11647] ? apply_to_page_range+0x50/0x50 [ 405.579354][T11647] ? do_raw_spin_unlock+0x121/0x230 [ 405.584598][T11647] alloc_vmap_area+0x1d26/0x1e50 [ 405.589596][T11647] ? vm_map_ram+0xcf0/0xcf0 [ 405.594135][T11647] ? rcu_is_watching+0x15/0xb0 [ 405.598948][T11647] __get_vm_area_node+0x162/0x370 [ 405.604021][T11647] __vmalloc_node_range+0x36f/0x1320 [ 405.609350][T11647] ? sock_hash_alloc+0x25e/0x4e0 [ 405.614351][T11647] ? free_vm_area+0x50/0x50 [ 405.618896][T11647] ? bpf_map_area_alloc+0x5e/0x110 [ 405.624050][T11647] ? rcu_is_watching+0x15/0xb0 [ 405.628855][T11647] ? bpf_map_area_alloc+0x5e/0x110 [ 405.634009][T11647] bpf_map_area_alloc+0xf1/0x110 [ 405.638987][T11647] ? sock_hash_alloc+0x25e/0x4e0 [ 405.643964][T11647] sock_hash_alloc+0x25e/0x4e0 [ 405.648769][T11647] map_create+0x877/0x12f0 [ 405.653233][T11647] __sys_bpf+0x651/0x890 [ 405.657517][T11647] ? bpf_link_show_fdinfo+0x560/0x560 [ 405.662941][T11647] ? lock_chain_count+0x20/0x20 [ 405.667852][T11647] __x64_sys_bpf+0x7c/0x90 [ 405.672305][T11647] do_syscall_64+0x55/0xb0 [ 405.676755][T11647] ? clear_bhb_loop+0x40/0x90 [ 405.681479][T11647] ? clear_bhb_loop+0x40/0x90 [ 405.686195][T11647] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 405.692124][T11647] RIP: 0033:0x7f303839e159 [ 405.696580][T11647] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 405.716221][T11647] RSP: 002b:00007f30392d0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 405.724666][T11647] RAX: ffffffffffffffda RBX: 00007f3038625fa0 RCX: 00007f303839e159 [ 405.732672][T11647] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 0000000000000000 [ 405.740672][T11647] RBP: 00007f30392d0090 R08: 0000000000000000 R09: 0000000000000000 [ 405.748675][T11647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 405.756705][T11647] R13: 00007f3038626038 R14: 00007f3038625fa0 R15: 00007ffd7da95338 [ 405.764723][T11647] [ 405.823845][T11654] netlink: 'syz.0.1787': attribute type 10 has an invalid length. [ 406.340515][T11670] netlink: 'syz.2.1794': attribute type 9 has an invalid length. [ 406.369566][T11670] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1794'. [ 406.394807][T11673] netlink: 'syz.2.1794': attribute type 28 has an invalid length. [ 406.472958][T11673] netlink: 'syz.2.1794': attribute type 29 has an invalid length. [ 406.504762][T11673] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1794'. [ 408.123478][T11721] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1808'. [ 408.348362][T11721] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1808'. [ 408.371986][T11715] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1808'. [ 408.384569][T11719] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1808'. [ 408.467284][T11726] netlink: 'syz.3.1810': attribute type 9 has an invalid length. [ 408.475441][T11726] netlink: 7679 bytes leftover after parsing attributes in process `syz.3.1810'. [ 409.269355][ T7465] tipc: Subscription rejected, illegal request [ 409.314636][T11754] C: renamed from team_slave_0 (while UP) [ 409.410838][T11754] netlink: 'syz.0.1819': attribute type 1 has an invalid length. [ 409.439689][T11754] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1819'. [ 409.469568][T11754] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 415.187194][T11817] netlink: 'syz.0.1838': attribute type 3 has an invalid length. [ 415.207535][T11817] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1838'. [ 415.716723][T11826] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1841'. [ 417.694854][T11879] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.1859'. [ 417.767661][T11879] netlink: 'syz.3.1859': attribute type 2 has an invalid length. [ 417.782863][T11879] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1859'. [ 418.189410][T11897] FAULT_INJECTION: forcing a failure. [ 418.189410][T11897] name failslab, interval 1, probability 0, space 0, times 0 [ 418.224377][T11897] CPU: 0 PID: 11897 Comm: syz.0.1864 Not tainted syzkaller #0 [ 418.231933][T11897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 418.242066][T11897] Call Trace: [ 418.245377][T11897] [ 418.248339][T11897] dump_stack_lvl+0x18c/0x250 [ 418.253073][T11897] ? sctp_sendmsg+0x1519/0x27b0 [ 418.258040][T11897] ? ___sys_sendmsg+0x2a6/0x360 [ 418.262940][T11897] ? show_regs_print_info+0x20/0x20 [ 418.268180][T11897] ? load_image+0x420/0x420 [ 418.272741][T11897] should_fail_ex+0x394/0x4c0 [ 418.277475][T11897] should_failslab+0x9/0x20 [ 418.282035][T11897] slab_pre_alloc_hook+0x59/0x300 [ 418.287110][T11897] ? sctp_add_bind_addr+0x8c/0x360 [ 418.292265][T11897] __kmem_cache_alloc_node+0x53/0x250 [ 418.297697][T11897] ? sctp_add_bind_addr+0x8c/0x360 [ 418.302863][T11897] kmalloc_trace+0x2a/0xe0 [ 418.307336][T11897] sctp_add_bind_addr+0x8c/0x360 [ 418.312333][T11897] sctp_copy_local_addr_list+0x31b/0x4e0 [ 418.318015][T11897] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 418.323789][T11897] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 418.329913][T11897] ? sctp_v4_is_any+0x35/0x60 [ 418.334642][T11897] ? sctp_copy_one_addr+0x8c/0x350 [ 418.339809][T11897] sctp_bind_addr_copy+0xb3/0x3c0 [ 418.344884][T11897] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 418.351261][T11897] sctp_connect_new_asoc+0x2f9/0x6a0 [ 418.356679][T11897] ? __sctp_connect+0xd80/0xd80 [ 418.361574][T11897] ? __local_bh_enable_ip+0x13a/0x1c0 [ 418.366995][T11897] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 418.372598][T11897] ? security_sctp_bind_connect+0x89/0xb0 [ 418.378364][T11897] sctp_sendmsg+0x1519/0x27b0 [ 418.383107][T11897] ? sctp_getsockopt+0xb60/0xb60 [ 418.388101][T11897] ? aa_af_perm+0x330/0x330 [ 418.392653][T11897] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 418.399090][T11897] ? sock_rps_record_flow+0x19/0x3f0 [ 418.404412][T11897] ? inet_sendmsg+0xce/0x2a0 [ 418.409049][T11897] ? inet_send_prepare+0x250/0x250 [ 418.414193][T11897] ____sys_sendmsg+0x61b/0x980 [ 418.419082][T11897] ? __asan_memset+0x22/0x40 [ 418.423695][T11897] ? __sys_sendmsg_sock+0x30/0x30 [ 418.428735][T11897] ? __import_iovec+0x5f2/0x850 [ 418.433615][T11897] ? import_iovec+0x73/0xa0 [ 418.438157][T11897] ___sys_sendmsg+0x2a6/0x360 [ 418.442848][T11897] ? get_pid_task+0x20/0x1e0 [ 418.447465][T11897] ? __sys_sendmsg+0x2b0/0x2b0 [ 418.452258][T11897] ? __lock_acquire+0x7d80/0x7d80 [ 418.457319][T11897] __se_sys_sendmsg+0x1d0/0x2c0 [ 418.462186][T11897] ? __x64_sys_sendmsg+0x80/0x80 [ 418.467193][T11897] ? lockdep_hardirqs_on+0x98/0x150 [ 418.472436][T11897] do_syscall_64+0x55/0xb0 [ 418.476882][T11897] ? clear_bhb_loop+0x40/0x90 [ 418.481581][T11897] ? clear_bhb_loop+0x40/0x90 [ 418.486274][T11897] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 418.492186][T11897] RIP: 0033:0x7f6bae99e159 [ 418.496613][T11897] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 418.516229][T11897] RSP: 002b:00007f6baf85c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 418.524654][T11897] RAX: ffffffffffffffda RBX: 00007f6baec25fa0 RCX: 00007f6bae99e159 [ 418.532637][T11897] RDX: 0000000000000040 RSI: 00002000000003c0 RDI: 0000000000000003 [ 418.540689][T11897] RBP: 00007f6baf85c090 R08: 0000000000000000 R09: 0000000000000000 [ 418.548755][T11897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 418.556738][T11897] R13: 00007f6baec26038 R14: 00007f6baec25fa0 R15: 00007ffd6d304a28 [ 418.564738][T11897] [ 419.551231][T11926] macvlan0: entered promiscuous mode [ 420.421345][T11946] netlink: 'syz.3.1880': attribute type 2 has an invalid length. [ 420.429967][T11946] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1880'. [ 420.507573][T11946] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1880'. [ 420.632237][T11953] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1883'. [ 420.938220][T11966] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1888'. [ 421.779377][ T5779] Bluetooth: hci2: unexpected subevent 0x0a length: 150 > 30 [ 421.787350][ T5779] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 422.179172][T11994] netlink: 'syz.3.1897': attribute type 49 has an invalid length. [ 422.639070][T11994] netlink: set zone limit has 8 unknown bytes [ 423.210025][ T51] Bluetooth: hci1: unexpected subevent 0x0a length: 150 > 30 [ 423.219617][ T51] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 423.676000][T12030] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.1909'. [ 424.117860][ T51] Bluetooth: hci2: unexpected subevent 0x0a length: 150 > 30 [ 424.125727][ T51] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 424.252603][T12051] netlink: 'syz.2.1916': attribute type 10 has an invalid length. [ 425.239885][T12070] netlink: 'syz.1.1922': attribute type 21 has an invalid length. [ 425.261205][T12070] IPv6: Can't replace route, no match found [ 425.485014][ T51] Bluetooth: hci3: unexpected subevent 0x0a length: 150 > 30 [ 425.493210][ T51] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 426.136458][T12099] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.1933'. [ 426.731894][ T51] Bluetooth: hci3: unexpected subevent 0x0a length: 150 > 30 [ 426.739515][ T51] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 426.854663][T12119] netlink: 'syz.1.1939': attribute type 10 has an invalid length. [ 427.700301][T12142] pim6reg1: entered promiscuous mode [ 427.706021][T12142] pim6reg1: entered allmulticast mode [ 427.807090][ T51] Bluetooth: hci2: unexpected subevent 0x0a length: 150 > 30 [ 427.817734][ T51] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 427.928022][T12156] netlink: 'syz.3.1951': attribute type 21 has an invalid length. [ 427.940904][T12156] IPv6: Can't replace route, no match found [ 429.656501][T12182] netlink: 'syz.3.1956': attribute type 2 has an invalid length. [ 429.791065][T12182] netlink: 'syz.3.1956': attribute type 8 has an invalid length. [ 429.835177][T12182] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1956'. [ 430.314062][T12198] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 430.541890][ T51] Bluetooth: hci2: unexpected subevent 0x0a length: 150 > 30 [ 430.549700][ T51] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 431.020123][T12216] dvmrp1: tun_chr_ioctl cmd 1074025675 [ 431.059024][T12216] dvmrp1: persist disabled [ 431.083430][T12213] dvmrp1: tun_chr_ioctl cmd 1074025675 [ 431.114527][T12213] dvmrp1: persist disabled [ 431.894583][ T51] Bluetooth: hci1: unexpected subevent 0x0a length: 150 > 30 [ 431.902401][ T51] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 432.898556][T12259] netlink: 'syz.3.1982': attribute type 29 has an invalid length. [ 432.913994][T12259] netlink: 'syz.3.1982': attribute type 29 has an invalid length. [ 432.970194][T12259] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1982'. [ 433.398083][T12257] syzkaller0: entered promiscuous mode [ 433.424720][T12257] syzkaller0: entered allmulticast mode [ 435.821436][T12288] netlink: 'syz.3.1988': attribute type 10 has an invalid length. [ 435.841644][T12288] veth0_vlan: entered allmulticast mode [ 435.929510][T12288] veth0_vlan: left promiscuous mode [ 435.953811][T12288] veth0_vlan: entered promiscuous mode [ 435.975619][T12288] team0: Device veth0_vlan failed to register rx_handler [ 436.055522][ T51] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30 [ 436.063264][ T51] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 436.225593][T12303] bond0: entered promiscuous mode [ 436.251467][T12303] bond0: entered allmulticast mode [ 438.974900][ T51] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30 [ 438.982686][ T51] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 439.289315][T12354] netlink: 'syz.1.2008': attribute type 10 has an invalid length. [ 439.316948][T12354] macvlan0: left promiscuous mode [ 439.419849][T12359] netlink: 209832 bytes leftover after parsing attributes in process `syz.0.2010'. [ 440.307960][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.314529][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.602805][T12382] netlink: 'syz.3.2019': attribute type 10 has an invalid length. [ 440.748517][ T51] Bluetooth: hci2: unexpected subevent 0x0a length: 150 > 30 [ 440.761061][ T51] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 440.863340][T12388] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.2020'. [ 440.890356][T12388] netlink: zone id is out of range [ 440.899986][T12388] netlink: zone id is out of range [ 440.906169][T12388] netlink: zone id is out of range [ 440.911955][T12388] netlink: zone id is out of range [ 440.916771][T12390] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2021'. [ 440.917091][T12388] netlink: zone id is out of range [ 440.931949][T12388] netlink: zone id is out of range [ 440.937524][T12388] netlink: zone id is out of range [ 440.944477][T12388] netlink: zone id is out of range [ 440.949647][T12388] netlink: zone id is out of range [ 440.955438][T12388] netlink: zone id is out of range [ 442.894625][ T51] Bluetooth: hci1: unexpected subevent 0x0a length: 150 > 30 [ 442.902738][ T51] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 445.395604][T12470] netlink: 'syz.3.2039': attribute type 10 has an invalid length. [ 445.421341][T12470] macvlan0: entered promiscuous mode [ 445.431065][T12470] macvlan0: entered allmulticast mode [ 445.437871][T12470] veth1_vlan: entered allmulticast mode [ 445.477983][T12470] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 445.925367][ T5779] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30 [ 445.933392][ T5779] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 446.170047][T12491] netlink: 'syz.3.2045': attribute type 6 has an invalid length. [ 446.221875][T12491] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2045'. [ 447.022838][T12515] netlink: 'syz.3.2052': attribute type 21 has an invalid length. [ 447.541843][ T51] Bluetooth: hci2: unexpected subevent 0x0a length: 150 > 30 [ 447.549394][ T51] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 447.822199][T12541] FAULT_INJECTION: forcing a failure. [ 447.822199][T12541] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 447.845711][T12541] CPU: 1 PID: 12541 Comm: syz.2.2064 Not tainted syzkaller #0 [ 447.853333][T12541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 447.863425][T12541] Call Trace: [ 447.866726][T12541] [ 447.869670][T12541] dump_stack_lvl+0x18c/0x250 [ 447.874383][T12541] ? show_regs_print_info+0x20/0x20 [ 447.879601][T12541] ? load_image+0x420/0x420 [ 447.884123][T12541] ? __lock_acquire+0x7d80/0x7d80 [ 447.889172][T12541] should_fail_ex+0x394/0x4c0 [ 447.893882][T12541] prepare_alloc_pages+0x1e1/0x5b0 [ 447.899016][T12541] __alloc_pages+0x134/0x460 [ 447.903619][T12541] ? zone_statistics+0x170/0x170 [ 447.908573][T12541] ? alloc_pages+0x4e1/0x740 [ 447.913196][T12541] ? do_raw_spin_unlock+0x121/0x230 [ 447.918420][T12541] __get_free_pages+0xc/0x30 [ 447.923021][T12541] kasan_populate_vmalloc_pte+0x35/0x100 [ 447.928671][T12541] __apply_to_page_range+0x860/0xdd0 [ 447.933976][T12541] ? kasan_populate_vmalloc+0x70/0x70 [ 447.939371][T12541] ? apply_to_page_range+0x50/0x50 [ 447.944499][T12541] ? do_raw_spin_unlock+0x121/0x230 [ 447.949714][T12541] alloc_vmap_area+0x1d26/0x1e50 [ 447.954687][T12541] ? vm_map_ram+0xcf0/0xcf0 [ 447.959206][T12541] ? rcu_is_watching+0x15/0xb0 [ 447.963997][T12541] __get_vm_area_node+0x162/0x370 [ 447.969041][T12541] __vmalloc_node_range+0x36f/0x1320 [ 447.974338][T12541] ? sock_hash_alloc+0x25e/0x4e0 [ 447.979309][T12541] ? free_vm_area+0x50/0x50 [ 447.983827][T12541] ? bpf_map_area_alloc+0x5e/0x110 [ 447.988951][T12541] ? rcu_is_watching+0x15/0xb0 [ 447.993732][T12541] ? bpf_map_area_alloc+0x5e/0x110 [ 447.999124][T12541] bpf_map_area_alloc+0xf1/0x110 [ 448.004081][T12541] ? sock_hash_alloc+0x25e/0x4e0 [ 448.009031][T12541] sock_hash_alloc+0x25e/0x4e0 [ 448.013828][T12541] map_create+0x877/0x12f0 [ 448.018263][T12541] __sys_bpf+0x651/0x890 [ 448.022519][T12541] ? bpf_link_show_fdinfo+0x560/0x560 [ 448.027910][T12541] ? lock_chain_count+0x20/0x20 [ 448.032782][T12541] __x64_sys_bpf+0x7c/0x90 [ 448.037211][T12541] do_syscall_64+0x55/0xb0 [ 448.041646][T12541] ? clear_bhb_loop+0x40/0x90 [ 448.046354][T12541] ? clear_bhb_loop+0x40/0x90 [ 448.051048][T12541] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 448.056953][T12541] RIP: 0033:0x7f303839e159 [ 448.061381][T12541] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 448.081001][T12541] RSP: 002b:00007f30392d0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 448.089430][T12541] RAX: ffffffffffffffda RBX: 00007f3038625fa0 RCX: 00007f303839e159 [ 448.097410][T12541] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 0000000000000000 [ 448.105389][T12541] RBP: 00007f30392d0090 R08: 0000000000000000 R09: 0000000000000000 [ 448.113367][T12541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 448.121347][T12541] R13: 00007f3038626038 R14: 00007f3038625fa0 R15: 00007ffd7da95338 [ 448.129343][T12541] [ 448.195051][T12544] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2062'. [ 448.214509][T12544] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2062'. [ 448.254565][T12537] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2062'. [ 448.281287][T12551] netlink: 'syz.2.2066': attribute type 10 has an invalid length. [ 448.291695][T12551] veth1_vlan: left allmulticast mode [ 448.335113][T12551] bond0: (slave macvlan0): Releasing backup interface [ 448.353482][T12551] macvlan0: left promiscuous mode [ 448.362930][T12551] macvlan0: left allmulticast mode [ 448.379692][T12542] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2062'. [ 448.965468][ T51] Bluetooth: hci1: unexpected subevent 0x0a length: 150 > 30 [ 448.973290][ T51] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 449.502248][T12573] netlink: 'syz.0.2073': attribute type 9 has an invalid length. [ 449.510751][T12573] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2073'. [ 449.557051][T12579] netlink: 'syz.0.2073': attribute type 28 has an invalid length. [ 449.647030][T12579] netlink: 'syz.0.2073': attribute type 29 has an invalid length. [ 449.711178][T12579] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2073'. [ 449.764735][T12577] mac80211_hwsim hwsim9 .3ãc¤±: renamed from wlan1 (while UP) [ 450.375571][ T51] Bluetooth: hci1: unexpected subevent 0x0a length: 150 > 30 [ 450.384082][ T51] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 450.422291][T12608] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2080'. [ 450.441512][T12608] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2080'. [ 450.470001][T12603] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2080'. [ 451.423857][T12633] __nla_validate_parse: 1 callbacks suppressed [ 451.423878][T12633] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.2090'. [ 451.698569][ T51] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30 [ 451.706346][ T51] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 452.201654][T12659] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2097'. [ 452.241510][T12659] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2097'. [ 452.271919][T12656] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2097'. [ 452.816705][T12679] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2106'. [ 453.087490][ T51] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30 [ 453.095196][ T51] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 453.484147][T12701] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2112'. [ 453.638053][T12707] netlink: 'syz.0.2115': attribute type 10 has an invalid length. [ 453.876277][ T51] Bluetooth: hci2: unexpected subevent 0x0a length: 150 > 30 [ 453.884785][ T51] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 454.656099][T12742] sctp: [Deprecated]: syz.2.2126 (pid 12742) Use of struct sctp_assoc_value in delayed_ack socket option. [ 454.656099][T12742] Use struct sctp_sack_info instead [ 454.905498][ T51] Bluetooth: hci3: unexpected subevent 0x0a length: 150 > 30 [ 454.913179][ T51] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 455.053940][T12756] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.2134'. [ 455.063274][T12754] FAULT_INJECTION: forcing a failure. [ 455.063274][T12754] name failslab, interval 1, probability 0, space 0, times 0 [ 455.063317][T12754] CPU: 0 PID: 12754 Comm: syz.0.2132 Not tainted syzkaller #0 [ 455.063342][T12754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 455.063358][T12754] Call Trace: [ 455.063371][T12754] [ 455.063386][T12754] dump_stack_lvl+0x18c/0x250 [ 455.063420][T12754] ? sctp_sendmsg+0x1519/0x27b0 [ 455.063456][T12754] ? ___sys_sendmsg+0x2a6/0x360 [ 455.063494][T12754] ? show_regs_print_info+0x20/0x20 [ 455.063531][T12754] ? load_image+0x420/0x420 [ 455.063621][T12754] should_fail_ex+0x394/0x4c0 [ 455.063678][T12754] should_failslab+0x9/0x20 [ 455.133399][T12754] slab_pre_alloc_hook+0x59/0x300 [ 455.138483][T12754] ? sctp_add_bind_addr+0x8c/0x360 [ 455.143659][T12754] __kmem_cache_alloc_node+0x53/0x250 [ 455.149087][T12754] ? sctp_add_bind_addr+0x8c/0x360 [ 455.154247][T12754] kmalloc_trace+0x2a/0xe0 [ 455.158718][T12754] sctp_add_bind_addr+0x8c/0x360 [ 455.163698][T12754] sctp_copy_local_addr_list+0x31b/0x4e0 [ 455.169447][T12754] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 455.175221][T12754] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 455.181345][T12754] ? sctp_v4_is_any+0x35/0x60 [ 455.186070][T12754] ? sctp_copy_one_addr+0x8c/0x350 [ 455.191243][T12754] sctp_bind_addr_copy+0xb3/0x3c0 [ 455.196322][T12754] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 455.202713][T12754] sctp_connect_new_asoc+0x2f9/0x6a0 [ 455.208048][T12754] ? __sctp_connect+0xd80/0xd80 [ 455.212936][T12754] ? __local_bh_enable_ip+0x13a/0x1c0 [ 455.218366][T12754] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 455.223960][T12754] ? security_sctp_bind_connect+0x89/0xb0 [ 455.229731][T12754] sctp_sendmsg+0x1519/0x27b0 [ 455.234454][T12754] ? sctp_getsockopt+0xb60/0xb60 [ 455.239427][T12754] ? perf_trace_run_bpf_submit+0x125/0x1c0 [ 455.245261][T12754] ? aa_af_perm+0x330/0x330 [ 455.249800][T12754] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 455.256235][T12754] ? sock_rps_record_flow+0x19/0x3f0 [ 455.261539][T12754] ? inet_sendmsg+0xce/0x2a0 [ 455.266142][T12754] ? inet_send_prepare+0x250/0x250 [ 455.271272][T12754] ____sys_sendmsg+0x61b/0x980 [ 455.276068][T12754] ? __asan_memset+0x22/0x40 [ 455.280675][T12754] ? __sys_sendmsg_sock+0x30/0x30 [ 455.285712][T12754] ? __import_iovec+0x5f2/0x850 [ 455.290590][T12754] ? import_iovec+0x73/0xa0 [ 455.295117][T12754] ___sys_sendmsg+0x2a6/0x360 [ 455.299814][T12754] ? __sys_sendmsg+0x2b0/0x2b0 [ 455.304614][T12754] ? __lock_acquire+0x7d80/0x7d80 [ 455.309764][T12754] __se_sys_sendmsg+0x1d0/0x2c0 [ 455.314633][T12754] ? __x64_sys_sendmsg+0x80/0x80 [ 455.319598][T12754] ? lockdep_hardirqs_on+0x98/0x150 [ 455.324813][T12754] do_syscall_64+0x55/0xb0 [ 455.329244][T12754] ? clear_bhb_loop+0x40/0x90 [ 455.333939][T12754] ? clear_bhb_loop+0x40/0x90 [ 455.338630][T12754] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 455.344535][T12754] RIP: 0033:0x7f6bae99e159 [ 455.348965][T12754] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 455.368621][T12754] RSP: 002b:00007f6baf85c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 455.377075][T12754] RAX: ffffffffffffffda RBX: 00007f6baec25fa0 RCX: 00007f6bae99e159 [ 455.385059][T12754] RDX: 0000000000000040 RSI: 00002000000003c0 RDI: 0000000000000003 [ 455.393041][T12754] RBP: 00007f6baf85c090 R08: 0000000000000000 R09: 0000000000000000 [ 455.401027][T12754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 455.409009][T12754] R13: 00007f6baec26038 R14: 00007f6baec25fa0 R15: 00007ffd6d304a28 [ 455.417027][T12754] [ 455.628810][T12772] macvlan0: entered promiscuous mode [ 456.163562][ T51] Bluetooth: hci3: unexpected subevent 0x0a length: 150 > 30 [ 456.174314][ T51] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 456.429821][T12785] netlink: 'syz.0.2144': attribute type 2 has an invalid length. [ 456.450815][T12785] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2144'. [ 456.526874][T12785] netlink: 'syz.0.2144': attribute type 17 has an invalid length. [ 456.571245][T12785] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2144'. [ 456.662184][T12792] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2146'. [ 457.042227][T12800] netlink: 'syz.1.2149': attribute type 10 has an invalid length. [ 457.101257][T12800] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2149'. [ 457.174453][T12803] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2150'. [ 457.439226][ T5779] Bluetooth: hci3: unexpected subevent 0x0a length: 150 > 30 [ 457.447379][ T5779] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 457.949198][T12829] netlink: 'syz.1.2159': attribute type 5 has an invalid length. [ 457.989633][T12829] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2159'. [ 458.164057][T12829] netlink: 'syz.1.2159': attribute type 5 has an invalid length. [ 458.221730][T12829] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2159'. [ 458.295395][T12829] netlink: 'syz.1.2159': attribute type 5 has an invalid length. [ 458.331131][T12829] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2159'. [ 458.340654][T12829] netlink: 'syz.1.2159': attribute type 5 has an invalid length. [ 458.348802][T12829] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2159'. [ 458.358320][T12829] netlink: 'syz.1.2159': attribute type 5 has an invalid length. [ 458.366243][T12829] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2159'. [ 458.376710][T12829] netlink: 'syz.1.2159': attribute type 5 has an invalid length. [ 458.607419][ T51] Bluetooth: hci2: unexpected subevent 0x0a length: 150 > 30 [ 458.616534][ T51] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 459.370488][T12865] validate_nla: 59 callbacks suppressed [ 459.370575][T12865] netlink: 'syz.0.2170': attribute type 29 has an invalid length. [ 459.399149][T12865] netlink: 'syz.0.2170': attribute type 29 has an invalid length. [ 459.417387][T12872] netlink: 'syz.1.2173': attribute type 10 has an invalid length. [ 459.430270][T12869] netlink: 'syz.0.2170': attribute type 29 has an invalid length. [ 459.445826][T12865] netlink: 'syz.0.2170': attribute type 29 has an invalid length. [ 459.503188][T12865] netlink: 'syz.0.2170': attribute type 29 has an invalid length. [ 459.575664][T12865] netlink: 'syz.0.2170': attribute type 29 has an invalid length. [ 459.620437][ T51] Bluetooth: hci2: unexpected subevent 0x0a length: 150 > 30 [ 459.628174][ T51] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 460.467781][T12906] netlink: 'syz.2.2182': attribute type 21 has an invalid length. [ 460.479194][T12906] IPv6: Can't replace route, no match found [ 460.884495][ T5779] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30 [ 460.893554][ T5779] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 461.405182][T12923] delete_channel: no stack [ 462.392712][T12950] netlink: 'syz.2.2195': attribute type 10 has an invalid length. [ 463.422601][T12954] syzkaller0: tun_chr_ioctl cmd 2147767517 [ 463.539553][ T51] Bluetooth: hci1: unexpected subevent 0x0a length: 150 > 30 [ 463.547469][ T51] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 464.371443][T12984] netlink: 'syz.0.2206': attribute type 21 has an invalid length. [ 464.406758][T12984] IPv6: Can't replace route, no match found [ 465.084021][ T51] Bluetooth: hci2: unexpected subevent 0x0a length: 150 > 30 [ 465.102454][ T51] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 467.602943][T13049] FAULT_INJECTION: forcing a failure. [ 467.602943][T13049] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 467.635927][T13049] CPU: 1 PID: 13049 Comm: syz.3.2229 Not tainted syzkaller #0 [ 467.643471][T13049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 467.653566][T13049] Call Trace: [ 467.656894][T13049] [ 467.659847][T13049] dump_stack_lvl+0x18c/0x250 [ 467.664564][T13049] ? show_regs_print_info+0x20/0x20 [ 467.669795][T13049] ? load_image+0x420/0x420 [ 467.674329][T13049] ? __might_fault+0xaa/0x120 [ 467.679038][T13049] ? __lock_acquire+0x7d80/0x7d80 [ 467.684098][T13049] should_fail_ex+0x394/0x4c0 [ 467.688897][T13049] _copy_from_user+0x2f/0xe0 [ 467.693527][T13049] __sys_bpf+0x23e/0x890 [ 467.697803][T13049] ? bpf_link_show_fdinfo+0x560/0x560 [ 467.703219][T13049] ? lock_chain_count+0x20/0x20 [ 467.708113][T13049] __x64_sys_bpf+0x7c/0x90 [ 467.712569][T13049] do_syscall_64+0x55/0xb0 [ 467.717024][T13049] ? clear_bhb_loop+0x40/0x90 [ 467.721735][T13049] ? clear_bhb_loop+0x40/0x90 [ 467.726441][T13049] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 467.732365][T13049] RIP: 0033:0x7fc6b759e159 [ 467.736826][T13049] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 467.756500][T13049] RSP: 002b:00007fc6b83f1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 467.764957][T13049] RAX: ffffffffffffffda RBX: 00007fc6b7826090 RCX: 00007fc6b759e159 [ 467.772986][T13049] RDX: 0000000000000010 RSI: 0000200000000200 RDI: 000000000000001d [ 467.780992][T13049] RBP: 00007fc6b83f1090 R08: 0000000000000000 R09: 0000000000000000 [ 467.788991][T13049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 467.796985][T13049] R13: 00007fc6b7826128 R14: 00007fc6b7826090 R15: 00007ffc56d3c0a8 [ 467.804999][T13049] [ 468.204409][T13059] netlink: 'syz.0.2230': attribute type 1 has an invalid length. [ 468.300352][T13059] __nla_validate_parse: 61 callbacks suppressed [ 468.300379][T13059] netlink: 144448 bytes leftover after parsing attributes in process `syz.0.2230'. [ 469.574875][T13083] netlink: 'syz.2.2240': attribute type 29 has an invalid length. [ 469.588791][T13083] netlink: 'syz.2.2240': attribute type 29 has an invalid length. [ 469.600731][T13083] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2240'. [ 469.679564][T13088] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2238'. [ 470.612248][T13121] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.2252'. [ 488.775700][T13161] netlink: 144308 bytes leftover after parsing attributes in process `syz.2.2262'. [ 489.629986][T13160] delete_channel: no stack [ 489.870658][ T5779] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 489.882439][ T5779] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 489.890754][ T5779] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 489.926770][ T5779] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 489.934810][ T5779] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 489.954489][ T5779] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 490.041538][ T5779] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 490.053540][ T5779] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 490.063503][ T5779] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 490.084616][ T5087] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 490.094880][ T5087] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 490.101591][ T5776] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 490.110304][ T5776] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 490.121443][ T5776] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 490.131471][ T51] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 490.146280][ T5087] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 490.155088][ T5087] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 490.162928][ T5087] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 490.573500][ T7453] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.730775][ T7453] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.767688][T13163] chnl_net:caif_netlink_parms(): no params data found [ 490.819465][ T7453] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.890998][ T7453] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.990174][T13163] bridge0: port 1(bridge_slave_0) entered blocking state [ 490.997643][T13163] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.005500][T13163] bridge_slave_0: entered allmulticast mode [ 491.012733][T13163] bridge_slave_0: entered promiscuous mode [ 491.025587][T13163] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.034682][T13163] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.042117][T13163] bridge_slave_1: entered allmulticast mode [ 491.050541][T13163] bridge_slave_1: entered promiscuous mode [ 491.086587][T13163] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 491.102676][T13163] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 491.176671][T13166] chnl_net:caif_netlink_parms(): no params data found [ 491.199511][T13163] team0: Port device team_slave_0 added [ 491.298648][T13163] team0: Port device team_slave_1 added [ 491.328657][T13168] chnl_net:caif_netlink_parms(): no params data found [ 491.348948][T13163] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 491.356269][T13163] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 491.382961][T13163] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 491.450244][T13163] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 491.489570][T13163] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 491.559239][T13163] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 491.938671][T13166] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.949591][T13166] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.964599][T13166] bridge_slave_0: entered allmulticast mode [ 491.980259][T13166] bridge_slave_0: entered promiscuous mode [ 491.997110][T13213] netlink: 'syz.2.2267': attribute type 10 has an invalid length. [ 492.062240][ T5779] Bluetooth: hci4: command tx timeout [ 492.131704][T13163] hsr_slave_0: entered promiscuous mode [ 492.139810][T13163] hsr_slave_1: entered promiscuous mode [ 492.145900][ T5779] Bluetooth: hci5: command tx timeout [ 492.154081][T13163] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 492.162046][T13163] Cannot create hsr debugfs directory [ 492.167854][T13166] bridge0: port 2(bridge_slave_1) entered blocking state [ 492.176943][T13166] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.184535][T13166] bridge_slave_1: entered allmulticast mode [ 492.192369][T13166] bridge_slave_1: entered promiscuous mode [ 492.301188][ T5779] Bluetooth: hci6: command tx timeout [ 492.324222][T13168] bridge0: port 1(bridge_slave_0) entered blocking state [ 492.333412][T13168] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.340688][T13168] bridge_slave_0: entered allmulticast mode [ 492.348469][T13168] bridge_slave_0: entered promiscuous mode [ 492.379499][T13166] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 492.393406][T13166] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 492.426056][T13168] bridge0: port 2(bridge_slave_1) entered blocking state [ 492.436442][T13168] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.444336][T13168] bridge_slave_1: entered allmulticast mode [ 492.451591][T13168] bridge_slave_1: entered promiscuous mode [ 492.520373][T13166] team0: Port device team_slave_0 added [ 492.616101][T13166] team0: Port device team_slave_1 added [ 492.684093][T13168] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 492.782192][T13166] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 492.789216][T13166] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 492.840570][T13166] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 492.855417][T13168] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 492.936994][T13166] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 492.961564][T13166] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 493.011170][T13166] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 493.203106][T13168] team0: Port device team_slave_0 added [ 493.246833][T13166] hsr_slave_0: entered promiscuous mode [ 493.258907][T13166] hsr_slave_1: entered promiscuous mode [ 493.273057][T13166] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 493.280782][T13166] Cannot create hsr debugfs directory [ 493.329003][T13168] team0: Port device team_slave_1 added [ 493.497187][T13168] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 493.504857][T13168] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 493.531967][T13168] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 493.589058][T13168] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 493.596235][T13168] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 493.624593][T13168] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 493.757674][T13163] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 493.776526][T13168] hsr_slave_0: entered promiscuous mode [ 493.785364][T13168] hsr_slave_1: entered promiscuous mode [ 493.792513][T13168] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 493.800288][T13168] Cannot create hsr debugfs directory [ 493.851301][T13163] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 493.863746][T13163] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 493.992780][T13163] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 494.141319][ T5779] Bluetooth: hci4: command tx timeout [ 494.187666][T13166] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 494.221144][ T5779] Bluetooth: hci5: command tx timeout [ 494.249896][T13166] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 494.271631][T13166] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 494.363189][ T7453] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 494.380430][ T7453] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 494.387698][ T5779] Bluetooth: hci6: command tx timeout [ 494.403599][ T7453] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 494.418877][ T7453] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 494.462832][ T7453] veth1_macvtap: left promiscuous mode [ 494.468968][ T7453] veth0_macvtap: left promiscuous mode [ 494.482163][ T7453] veth1_vlan: left promiscuous mode [ 494.487847][ T7453] veth0_vlan: left promiscuous mode [ 494.879571][T13273] netlink: 209832 bytes leftover after parsing attributes in process `syz.2.2273'. [ 495.377507][ T7453] team0 (unregistering): Port device team_slave_1 removed [ 495.425161][ T7453] team0 (unregistering): Port device team_slave_0 removed [ 495.868077][T13166] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 496.228719][ T5779] Bluetooth: hci4: command tx timeout [ 496.247499][T13163] 8021q: adding VLAN 0 to HW filter on device bond0 [ 496.301575][ T5779] Bluetooth: hci5: command tx timeout [ 496.437071][T13163] 8021q: adding VLAN 0 to HW filter on device team0 [ 496.461064][ T5779] Bluetooth: hci6: command tx timeout [ 496.496433][T13168] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 496.547842][T13166] 8021q: adding VLAN 0 to HW filter on device bond0 [ 496.592790][T13168] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 496.614753][T13168] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 496.653830][T13168] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 496.673206][ T4823] bridge0: port 1(bridge_slave_0) entered blocking state [ 496.680419][ T4823] bridge0: port 1(bridge_slave_0) entered forwarding state [ 496.728496][ T4823] bridge0: port 2(bridge_slave_1) entered blocking state [ 496.735830][ T4823] bridge0: port 2(bridge_slave_1) entered forwarding state [ 496.756196][T13166] 8021q: adding VLAN 0 to HW filter on device team0 [ 496.807525][ T7465] bridge0: port 1(bridge_slave_0) entered blocking state [ 496.814817][ T7465] bridge0: port 1(bridge_slave_0) entered forwarding state [ 496.838506][ T7449] bridge0: port 2(bridge_slave_1) entered blocking state [ 496.845809][ T7449] bridge0: port 2(bridge_slave_1) entered forwarding state [ 496.997554][T13163] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 497.077678][ T7453] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.180788][ T7453] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.319781][ T7453] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.410847][T13168] 8021q: adding VLAN 0 to HW filter on device bond0 [ 497.464834][ T7453] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.485012][T13163] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 497.526916][T13168] 8021q: adding VLAN 0 to HW filter on device team0 [ 497.573172][ T7465] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.580493][ T7465] bridge0: port 1(bridge_slave_0) entered forwarding state [ 497.651822][ T1098] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.659108][ T1098] bridge0: port 2(bridge_slave_1) entered forwarding state [ 497.957284][T13166] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 498.301402][ T5779] Bluetooth: hci4: command tx timeout [ 498.385864][ T5779] Bluetooth: hci5: command tx timeout [ 498.541956][ T5779] Bluetooth: hci6: command tx timeout [ 498.918484][T13168] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 499.089879][T13163] veth0_vlan: entered promiscuous mode [ 499.180196][T13163] veth1_vlan: entered promiscuous mode [ 499.400267][T13166] veth0_vlan: entered promiscuous mode [ 499.467747][T13166] veth1_vlan: entered promiscuous mode [ 499.541904][T13163] veth0_macvtap: entered promiscuous mode [ 499.629654][T13163] veth1_macvtap: entered promiscuous mode [ 499.688386][T13166] veth0_macvtap: entered promiscuous mode [ 499.718171][T13166] veth1_macvtap: entered promiscuous mode [ 499.758908][T13168] veth0_vlan: entered promiscuous mode [ 499.828259][T13163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 499.839167][T13163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.849823][T13163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 499.860574][T13163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.875954][T13163] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 499.886383][T13168] veth1_vlan: entered promiscuous mode [ 499.920161][T13163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 499.930842][T13163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.943829][T13163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 499.955665][T13163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.968133][T13163] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 500.057013][T13166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 500.069450][T13166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.079870][T13166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 500.097071][T13166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.107393][T13166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 500.121150][T13166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.139078][T13166] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 500.165479][T13163] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.176003][T13163] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.186169][T13163] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.196376][T13163] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.242438][T13166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 500.258445][T13166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.271122][T13166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 500.283917][T13166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.294310][T13166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 500.305673][T13166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.318717][T13166] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 500.356192][ T7453] veth1_macvtap: left allmulticast mode [ 500.364411][ T7453] veth1_macvtap: left promiscuous mode [ 500.370089][ T7453] veth0_macvtap: left promiscuous mode [ 500.376124][ T7453] veth1_vlan: left allmulticast mode [ 500.386347][ T7453] veth1_vlan: left promiscuous mode [ 500.641495][ T7453] geneve1 (unregistering): left promiscuous mode [ 500.648380][ T7453] geneve1 (unregistering): left allmulticast mode [ 500.659170][ T7453] team0 (unregistering): Port device geneve1 removed [ 500.816910][ T7453] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 501.092846][ T7453] team_slave_1 (unregistering): left promiscuous mode [ 501.099744][ T7453] team_slave_1 (unregistering): left allmulticast mode [ 501.113062][ T7453] team0 (unregistering): Port device team_slave_1 removed [ 501.158935][ T7453] C (unregistering): left promiscuous mode [ 501.170191][ T7453] C (unregistering): left allmulticast mode [ 501.178006][ T7453] team0 (unregistering): Port device C removed [ 501.226276][ T7453] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 501.236630][ T7453] bond_slave_1 (unregistering): left promiscuous mode [ 501.243851][ T7453] bond_slave_1 (unregistering): left allmulticast mode [ 501.329317][ T7453] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 501.339318][ T7453] bridge_slave_1 (unregistering): left promiscuous mode [ 501.347581][ T7453] bridge_slave_1 (unregistering): left allmulticast mode [ 501.586205][ T7453] bond0 (unregistering): left promiscuous mode [ 501.594472][ T7453] bond0 (unregistering): left allmulticast mode [ 501.603795][ T7453] team0 (unregistering): Port device bond0 removed [ 501.636555][ T7453] bond0 (unregistering): Released all slaves [ 501.681618][T13166] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.690390][T13166] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.699277][T13166] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.709297][T13166] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.746863][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.753511][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.964489][T13168] veth0_macvtap: entered promiscuous mode [ 502.020451][T13168] veth1_macvtap: entered promiscuous mode [ 502.074245][ T7451] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 502.100416][ T7451] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 502.150020][T13395] netlink: 'syz.2.2285': attribute type 10 has an invalid length. [ 502.184671][T10962] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 502.195290][T10962] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 502.208233][T13168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 502.221624][T13168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.232163][T13168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 502.242842][T13168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.252862][T13168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 502.263471][T13168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.273473][T13168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 502.284997][T13168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.297959][T13168] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 502.326132][T13168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 502.353191][T13168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.369221][T13168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 502.379809][T13168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.394418][T13168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 502.405082][T13168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.415170][T13168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 502.425841][T13168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.437940][T13398] netlink: 'syz.2.2286': attribute type 3 has an invalid length. [ 502.444853][T13397] netlink: 'syz.2.2286': attribute type 3 has an invalid length. [ 502.447769][T13168] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 502.461503][T13397] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.2286'. [ 502.481140][T13398] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.2286'. [ 502.488142][T13168] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.499457][T13168] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.510405][T13168] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.520687][T13168] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.603190][ T7465] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 502.616907][ T7465] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 502.716636][ T7453] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 502.751704][ T7453] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 502.940435][ T7451] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 502.960972][ T7451] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 503.081717][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 503.122024][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 503.196730][T13415] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2288'. [ 504.038937][T13441] net_ratelimit: 217 callbacks suppressed [ 504.038976][T13441] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 504.110224][T13439] netlink: 'syz.6.2293': attribute type 25 has an invalid length. [ 504.138417][T13439] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2293'. [ 504.409029][T13451] bridge0: port 2(bridge_slave_1) entered disabled state [ 504.425643][T13451] bridge0: port 1(bridge_slave_0) entered disabled state [ 504.545758][T13451] bridge0: entered allmulticast mode [ 504.754869][T13458] bridge_slave_1: left allmulticast mode [ 504.760617][T13458] bridge_slave_1: left promiscuous mode [ 504.825002][T13458] bridge0: port 2(bridge_slave_1) entered disabled state [ 504.868101][T13458] bridge_slave_0: left allmulticast mode [ 504.886414][T13458] bridge_slave_0: left promiscuous mode [ 504.921402][T13458] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.109705][T13461] netlink: 'syz.4.2299': attribute type 21 has an invalid length. [ 505.171327][T13465] bridge_slave_1: left allmulticast mode [ 505.191296][T13465] bridge_slave_1: left promiscuous mode [ 505.221438][T13465] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.326405][T13465] bridge_slave_0: left allmulticast mode [ 505.362338][T13465] bridge_slave_0: left promiscuous mode [ 505.375151][T13465] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.455837][T13473] netlink: 9286 bytes leftover after parsing attributes in process `syz.5.2304'. [ 505.571315][ T5087] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 505.582346][ T5087] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 505.591796][ T5087] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 505.616080][ T5087] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 505.634880][ T5087] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 505.644834][ T5087] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 505.755058][T13476] netlink: 'syz.6.2305': attribute type 10 has an invalid length. [ 505.822485][T13476] macvlan0: entered promiscuous mode [ 505.850675][T13476] macvlan0: entered allmulticast mode [ 506.159547][T13476] veth1_vlan: entered allmulticast mode [ 506.442633][T13476] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 507.381164][T13474] chnl_net:caif_netlink_parms(): no params data found [ 507.654601][T13508] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.669144][T13508] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.709936][T13508] bridge0: entered allmulticast mode [ 507.741739][ T5779] Bluetooth: hci0: command tx timeout [ 508.086420][T13513] bridge_slave_1: left allmulticast mode [ 508.093696][T13513] bridge_slave_1: left promiscuous mode [ 508.118985][T13513] bridge0: port 2(bridge_slave_1) entered disabled state [ 508.159903][T13513] bridge_slave_0: left allmulticast mode [ 508.180577][T13513] bridge_slave_0: left promiscuous mode [ 508.235904][T13513] bridge0: port 1(bridge_slave_0) entered disabled state [ 508.707183][T13474] bridge0: port 1(bridge_slave_0) entered blocking state [ 508.716725][T13474] bridge0: port 1(bridge_slave_0) entered disabled state [ 508.724445][T13474] bridge_slave_0: entered allmulticast mode [ 508.734016][T13474] bridge_slave_0: entered promiscuous mode [ 509.088957][T13474] bridge0: port 2(bridge_slave_1) entered blocking state [ 509.132639][T13474] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.168930][T13474] bridge_slave_1: entered allmulticast mode [ 509.211680][T13474] bridge_slave_1: entered promiscuous mode [ 509.309855][ T49] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.414687][T13474] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 509.536742][ T49] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.637066][T13474] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 509.708783][T13560] FAULT_INJECTION: forcing a failure. [ 509.708783][T13560] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 509.751486][T13560] CPU: 0 PID: 13560 Comm: syz.6.2325 Not tainted syzkaller #0 [ 509.759055][T13560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 509.769181][T13560] Call Trace: [ 509.772518][T13560] [ 509.775509][T13560] dump_stack_lvl+0x18c/0x250 [ 509.780286][T13560] ? show_regs_print_info+0x20/0x20 [ 509.785564][T13560] ? load_image+0x420/0x420 [ 509.790155][T13560] ? __lock_acquire+0x7d80/0x7d80 [ 509.795365][T13560] should_fail_ex+0x394/0x4c0 [ 509.800146][T13560] prepare_alloc_pages+0x1e1/0x5b0 [ 509.805350][T13560] __alloc_pages+0x134/0x460 [ 509.810030][T13560] ? zone_statistics+0x170/0x170 [ 509.815071][T13560] ? alloc_pages+0x4e1/0x740 [ 509.819727][T13560] ? do_raw_spin_unlock+0x121/0x230 [ 509.825010][T13560] __get_free_pages+0xc/0x30 [ 509.829662][T13560] kasan_populate_vmalloc_pte+0x35/0x100 [ 509.835373][T13560] __apply_to_page_range+0x860/0xdd0 [ 509.840770][T13560] ? kasan_populate_vmalloc+0x70/0x70 [ 509.846220][T13560] ? apply_to_page_range+0x50/0x50 [ 509.851424][T13560] ? do_raw_spin_unlock+0x121/0x230 [ 509.856794][T13560] alloc_vmap_area+0x1d26/0x1e50 [ 509.861875][T13560] ? vm_map_ram+0xcf0/0xcf0 [ 509.866466][T13560] ? rcu_is_watching+0x15/0xb0 [ 509.871318][T13560] __get_vm_area_node+0x162/0x370 [ 509.876449][T13560] __vmalloc_node_range+0x36f/0x1320 [ 509.881810][T13560] ? sock_hash_alloc+0x25e/0x4e0 [ 509.886915][T13560] ? free_vm_area+0x50/0x50 [ 509.891505][T13560] ? bpf_map_area_alloc+0x5e/0x110 [ 509.896691][T13560] ? rcu_is_watching+0x15/0xb0 [ 509.901528][T13560] ? bpf_map_area_alloc+0x5e/0x110 [ 509.906717][T13560] bpf_map_area_alloc+0xf1/0x110 [ 509.911725][T13560] ? sock_hash_alloc+0x25e/0x4e0 [ 509.916729][T13560] sock_hash_alloc+0x25e/0x4e0 [ 509.921570][T13560] map_create+0x877/0x12f0 [ 509.926075][T13560] __sys_bpf+0x651/0x890 [ 509.930391][T13560] ? bpf_link_show_fdinfo+0x560/0x560 [ 509.935888][T13560] ? lock_chain_count+0x20/0x20 [ 509.940831][T13560] __x64_sys_bpf+0x7c/0x90 [ 509.945312][T13560] do_syscall_64+0x55/0xb0 [ 509.949792][T13560] ? clear_bhb_loop+0x40/0x90 [ 509.954531][T13560] ? clear_bhb_loop+0x40/0x90 [ 509.959280][T13560] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 509.965248][T13560] RIP: 0033:0x7f629919e159 [ 509.969732][T13560] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 509.989400][T13560] RSP: 002b:00007f62973f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 509.997898][T13560] RAX: ffffffffffffffda RBX: 00007f6299425fa0 RCX: 00007f629919e159 [ 510.005929][T13560] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 0000000000000000 [ 510.013961][T13560] RBP: 00007f62973f6090 R08: 0000000000000000 R09: 0000000000000000 [ 510.021994][T13560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 510.030033][T13560] R13: 00007f6299426038 R14: 00007f6299425fa0 R15: 00007ffe94c34be8 [ 510.038205][T13560] [ 510.086640][ T5779] Bluetooth: hci0: command tx timeout [ 510.524313][ T49] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.612486][T13474] team0: Port device team_slave_0 added [ 510.657019][T13570] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.2326'. [ 510.724114][ T49] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.800097][T13570] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2326'. [ 510.854647][T13474] team0: Port device team_slave_1 added [ 510.860600][T13570] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2326'. [ 511.149689][T13579] netlink: 1047 bytes leftover after parsing attributes in process `syz.6.2327'. [ 511.159386][T13579] bridge_slave_1: entered promiscuous mode [ 511.165976][T13566] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2326'. [ 511.211902][T13569] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2326'. [ 511.229408][T13474] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 511.247974][T13474] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 511.311848][T13474] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 511.457991][T13474] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 511.475187][T13474] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 511.545355][T13474] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 511.626541][T13592] netlink: 'syz.4.2330': attribute type 10 has an invalid length. [ 512.211796][ T5779] Bluetooth: hci0: command tx timeout [ 512.227544][T13474] hsr_slave_0: entered promiscuous mode [ 512.237177][T13474] hsr_slave_1: entered promiscuous mode [ 512.256560][T13474] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 512.264929][T13474] Cannot create hsr debugfs directory [ 513.182026][T13627] netlink: 'syz.5.2340': attribute type 9 has an invalid length. [ 513.208785][T13627] netlink: 209836 bytes leftover after parsing attributes in process `syz.5.2340'. [ 513.222429][T13633] netlink: 'syz.5.2340': attribute type 28 has an invalid length. [ 513.230309][T13633] netlink: 'syz.5.2340': attribute type 29 has an invalid length. [ 513.240555][T13633] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2340'. [ 513.973735][T13645] netlink: 'syz.6.2343': attribute type 5 has an invalid length. [ 514.222105][ T5779] Bluetooth: hci0: command tx timeout [ 514.328907][T13661] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2345'. [ 514.539217][T13661] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2345'. [ 515.253386][T13474] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 515.348195][T13474] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 515.444775][T13474] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 515.526149][T13474] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 516.378748][T13474] 8021q: adding VLAN 0 to HW filter on device bond0 [ 516.547880][ T49] hsr_slave_0: left promiscuous mode [ 516.575058][ T49] hsr_slave_1: left promiscuous mode [ 516.593667][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 516.607057][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 516.644791][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 516.659376][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 516.716551][ T49] veth1_macvtap: left promiscuous mode [ 516.728475][ T49] veth0_macvtap: left promiscuous mode [ 516.737296][ T49] veth1_vlan: left promiscuous mode [ 516.748199][ T49] veth0_vlan: left promiscuous mode [ 518.515010][ T49] team_slave_1 (unregistering): left promiscuous mode [ 518.522764][ T49] team_slave_1 (unregistering): left allmulticast mode [ 518.533774][ T49] team0 (unregistering): Port device team_slave_1 removed [ 518.574843][ T49] team_slave_0 (unregistering): left promiscuous mode [ 518.581854][ T49] team_slave_0 (unregistering): left allmulticast mode [ 518.593187][ T49] team0 (unregistering): Port device team_slave_0 removed [ 518.642992][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 518.653614][ T49] bond_slave_1 (unregistering): left promiscuous mode [ 518.660405][ T49] bond_slave_1 (unregistering): left allmulticast mode [ 518.710645][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 518.719959][ T49] bond_slave_0 (unregistering): left promiscuous mode [ 518.727046][ T49] bond_slave_0 (unregistering): left allmulticast mode [ 518.999561][ T49] bond0 (unregistering): left promiscuous mode [ 519.007986][ T49] bond0 (unregistering): left allmulticast mode [ 519.019099][ T49] team0 (unregistering): Port device bond0 removed [ 519.060513][ T49] bond0 (unregistering): Released all slaves [ 519.138104][T13734] netlink: 'syz.6.2365': attribute type 10 has an invalid length. [ 519.166789][T13734] team0: Device ipvlan1 failed to register rx_handler [ 519.296918][T13474] 8021q: adding VLAN 0 to HW filter on device team0 [ 519.348614][ T7453] bridge0: port 1(bridge_slave_0) entered blocking state [ 519.355887][ T7453] bridge0: port 1(bridge_slave_0) entered forwarding state [ 519.437720][T13742] __nla_validate_parse: 2 callbacks suppressed [ 519.437736][T13742] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2370'. [ 519.479322][ T7453] bridge0: port 2(bridge_slave_1) entered blocking state [ 519.486619][ T7453] bridge0: port 2(bridge_slave_1) entered forwarding state [ 519.533682][T13747] netlink: 9286 bytes leftover after parsing attributes in process `syz.6.2368'. [ 520.629601][T13761] tun0: tun_chr_ioctl cmd 1074812118 [ 520.652815][T13761] tun0: tun_chr_ioctl cmd 35108 [ 520.688019][T13761] tun0: tun_chr_ioctl cmd 2147767521 [ 520.838471][T13474] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 521.034900][T13474] veth0_vlan: entered promiscuous mode [ 521.105654][T13474] veth1_vlan: entered promiscuous mode [ 521.223582][T13474] veth0_macvtap: entered promiscuous mode [ 521.261745][T13474] veth1_macvtap: entered promiscuous mode [ 521.333771][T13474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 521.400975][T13474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.441015][T13474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 521.459654][T13474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.485381][T13474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 521.505687][T13474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.526732][T13474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 521.551461][T13474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.576038][T13474] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 521.634471][T13474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 521.658172][T13474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.669199][T13474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 521.688043][T13474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.698669][T13474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 521.709630][T13474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.720036][T13474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 521.733518][T13474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.746662][T13474] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 521.759370][T13474] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.772027][T13474] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.782327][T13474] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.791636][T13474] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.125349][ T7449] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 522.181088][ T7449] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 522.322207][ T7449] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 522.344957][ T7449] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 522.789953][T13813] netlink: 154464 bytes leftover after parsing attributes in process `syz.2.2298'. [ 523.058337][ T5779] Bluetooth: hci6: unexpected subevent 0x0a length: 150 > 30 [ 523.937297][T13841] netlink: 'syz.4.2385': attribute type 1 has an invalid length. [ 524.038471][T13841] netlink: 144448 bytes leftover after parsing attributes in process `syz.4.2385'. [ 525.322707][T13871] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.330446][T13871] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.415263][T13871] bridge0: entered allmulticast mode [ 525.706364][T13867] bridge_slave_1: left allmulticast mode [ 525.721191][T13867] bridge_slave_1: left promiscuous mode [ 525.730465][T13867] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.807192][T13867] bridge_slave_0: left allmulticast mode [ 525.851330][T13867] bridge_slave_0: left promiscuous mode [ 525.880224][T13867] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.140483][ T5779] Bluetooth: hci4: unexpected subevent 0x0a length: 150 > 30 [ 526.498503][T13896] mac80211_hwsim hwsim31 .3ãc¤±: renamed from wlan1 (while UP) [ 528.350600][T13928] netlink: 129384 bytes leftover after parsing attributes in process `syz.5.2409'. [ 529.811368][ T5087] Bluetooth: hci4: unexpected subevent 0x0a length: 150 > 30 [ 529.819003][ T5087] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 530.735794][T13992] macvlan0: entered promiscuous mode [ 531.141069][T13997] netlink: 'syz.2.2415': attribute type 2 has an invalid length. [ 531.231439][T14001] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2415'. [ 531.555131][T13997] netlink: 'syz.2.2415': attribute type 17 has an invalid length. [ 531.573979][T13997] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2415'. [ 531.594250][T13997] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 531.630539][T14007] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2418'. [ 531.641621][T14005] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2417'. [ 534.153991][ T5779] Bluetooth: hci0: unexpected subevent 0x0e length: 150 > 15 [ 535.087267][T14093] netlink: 'syz.2.2437': attribute type 15 has an invalid length. [ 535.110780][T14093] netlink: 'syz.2.2437': attribute type 7 has an invalid length. [ 535.435505][T14108] netlink: 'syz.2.2440': attribute type 2 has an invalid length. [ 535.473289][T14108] netlink: 'syz.2.2440': attribute type 8 has an invalid length. [ 535.503299][T14108] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2440'. [ 536.369192][T14126] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.2445'. [ 536.369190][T14128] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.2445'. [ 536.369392][T14128] netlink: zone id is out of range [ 536.378839][T14126] netlink: zone id is out of range [ 536.378849][T14126] netlink: zone id is out of range [ 536.378857][T14126] netlink: zone id is out of range [ 536.461880][T14126] netlink: zone id is out of range [ 536.467118][T14126] netlink: zone id is out of range [ 536.488787][T14128] netlink: zone id is out of range [ 536.538938][T14126] netlink: zone id is out of range [ 536.574774][T14128] netlink: zone id is out of range [ 536.643840][T14126] net_ratelimit: 338 callbacks suppressed [ 536.643856][T14126] netlink: zone id is out of range [ 536.654941][T14126] netlink: zone id is out of range [ 536.660089][T14126] netlink: zone id is out of range [ 536.692851][T14126] netlink: zone id is out of range [ 536.698058][T14126] netlink: zone id is out of range [ 536.774860][T14126] netlink: zone id is out of range [ 536.780116][T14126] netlink: zone id is out of range [ 536.835958][T14126] netlink: zone id is out of range [ 536.892224][T14126] netlink: zone id is out of range [ 536.921577][T14126] netlink: zone id is out of range [ 536.929892][T14140] netlink: 'syz.4.2446': attribute type 3 has an invalid length. [ 536.983122][T14140] netlink: 197324 bytes leftover after parsing attributes in process `syz.4.2446'. [ 537.094360][T14140] netlink: 'syz.4.2446': attribute type 3 has an invalid length. [ 537.257932][T14140] netlink: 197324 bytes leftover after parsing attributes in process `syz.4.2446'. [ 537.390267][T14146] netlink: 'syz.2.2448': attribute type 3 has an invalid length. [ 537.417444][T14140] netlink: 'syz.4.2446': attribute type 3 has an invalid length. [ 537.479869][T14146] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.2448'. [ 537.504391][T14140] netlink: 197324 bytes leftover after parsing attributes in process `syz.4.2446'. [ 539.027142][T14167] syzkaller0: entered promiscuous mode [ 539.056933][T14167] syzkaller0: entered allmulticast mode [ 542.404166][T14223] netlink: 65047 bytes leftover after parsing attributes in process `syz.5.2466'. [ 542.518081][T14206] net_ratelimit: 325 callbacks suppressed [ 542.518101][T14206] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 542.844067][T14234] FAULT_INJECTION: forcing a failure. [ 542.844067][T14234] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 542.890319][T14234] CPU: 1 PID: 14234 Comm: syz.2.2469 Not tainted syzkaller #0 [ 542.898050][T14234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 542.908152][T14234] Call Trace: [ 542.911469][T14234] [ 542.914432][T14234] dump_stack_lvl+0x18c/0x250 [ 542.919152][T14234] ? show_regs_print_info+0x20/0x20 [ 542.924378][T14234] ? load_image+0x420/0x420 [ 542.928900][T14234] ? __lock_acquire+0x7d80/0x7d80 [ 542.933935][T14234] ? perf_trace_lock+0xfc/0x3b0 [ 542.938800][T14234] should_fail_ex+0x394/0x4c0 [ 542.943501][T14234] prepare_alloc_pages+0x1e1/0x5b0 [ 542.948630][T14234] __alloc_pages+0x134/0x460 [ 542.953232][T14234] ? zone_statistics+0x170/0x170 [ 542.958187][T14234] ? alloc_pages+0x4e1/0x740 [ 542.962788][T14234] ? do_raw_spin_unlock+0x121/0x230 [ 542.968038][T14234] __get_free_pages+0xc/0x30 [ 542.972640][T14234] kasan_populate_vmalloc_pte+0x35/0x100 [ 542.978290][T14234] __apply_to_page_range+0x860/0xdd0 [ 542.983602][T14234] ? kasan_populate_vmalloc+0x70/0x70 [ 542.988993][T14234] ? apply_to_page_range+0x50/0x50 [ 542.994131][T14234] ? do_raw_spin_unlock+0x121/0x230 [ 542.999348][T14234] alloc_vmap_area+0x1d26/0x1e50 [ 543.004404][T14234] ? vm_map_ram+0xcf0/0xcf0 [ 543.008923][T14234] ? rcu_is_watching+0x15/0xb0 [ 543.013799][T14234] __get_vm_area_node+0x162/0x370 [ 543.018858][T14234] __vmalloc_node_range+0x36f/0x1320 [ 543.024158][T14234] ? sock_hash_alloc+0x25e/0x4e0 [ 543.029127][T14234] ? free_vm_area+0x50/0x50 [ 543.033645][T14234] ? bpf_map_area_alloc+0x5e/0x110 [ 543.038786][T14234] ? rcu_is_watching+0x15/0xb0 [ 543.043566][T14234] ? bpf_map_area_alloc+0x5e/0x110 [ 543.048698][T14234] bpf_map_area_alloc+0xf1/0x110 [ 543.053652][T14234] ? sock_hash_alloc+0x25e/0x4e0 [ 543.058601][T14234] sock_hash_alloc+0x25e/0x4e0 [ 543.063403][T14234] map_create+0x877/0x12f0 [ 543.067848][T14234] __sys_bpf+0x651/0x890 [ 543.072105][T14234] ? bpf_link_show_fdinfo+0x560/0x560 [ 543.077500][T14234] ? lock_chain_count+0x20/0x20 [ 543.082370][T14234] __x64_sys_bpf+0x7c/0x90 [ 543.086797][T14234] do_syscall_64+0x55/0xb0 [ 543.091229][T14234] ? clear_bhb_loop+0x40/0x90 [ 543.095943][T14234] ? clear_bhb_loop+0x40/0x90 [ 543.100638][T14234] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 543.106551][T14234] RIP: 0033:0x7ff1add9e159 [ 543.110982][T14234] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 543.130608][T14234] RSP: 002b:00007ff1aebc6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 543.139045][T14234] RAX: ffffffffffffffda RBX: 00007ff1ae025fa0 RCX: 00007ff1add9e159 [ 543.147036][T14234] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 0000000000000000 [ 543.155024][T14234] RBP: 00007ff1aebc6090 R08: 0000000000000000 R09: 0000000000000000 [ 543.163003][T14234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 543.170996][T14234] R13: 00007ff1ae026038 R14: 00007ff1ae025fa0 R15: 00007ffe5f2acfb8 [ 543.178997][T14234] [ 544.188678][T14260] netlink: 'syz.5.2475': attribute type 9 has an invalid length. [ 544.219737][T14260] netlink: 209836 bytes leftover after parsing attributes in process `syz.5.2475'. [ 544.245606][T14266] netlink: 'syz.5.2475': attribute type 28 has an invalid length. [ 544.302732][T14266] netlink: 'syz.5.2475': attribute type 29 has an invalid length. [ 544.331105][T14266] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2475'. [ 546.443888][T14304] netlink: 180 bytes leftover after parsing attributes in process `syz.5.2487'. [ 546.534804][T14313] netlink: 'syz.2.2488': attribute type 28 has an invalid length. [ 546.581298][T14313] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2488'. [ 546.790623][T14313] netlink: 'syz.2.2488': attribute type 27 has an invalid length. [ 547.626204][T14349] netlink: 'syz.6.2495': attribute type 10 has an invalid length. [ 547.659538][T14349] netlink: 65015 bytes leftover after parsing attributes in process `syz.6.2495'. [ 547.765807][T14351] netlink: 'syz.5.2497': attribute type 10 has an invalid length. [ 547.810272][T14351] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 548.004484][T14363] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2499'. [ 548.559497][T14377] netlink: 'syz.6.2502': attribute type 2 has an invalid length. [ 548.602540][T14377] netlink: 14 bytes leftover after parsing attributes in process `syz.6.2502'. [ 548.789596][T14381] netlink: 'syz.6.2502': attribute type 17 has an invalid length. [ 548.843581][T14381] netlink: 152 bytes leftover after parsing attributes in process `syz.6.2502'. [ 548.885450][T14381] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 548.918532][ T5779] Bluetooth: hci4: unexpected subevent 0x0c length: 150 > 5 [ 548.942117][T14380] netlink: 'syz.4.2503': attribute type 28 has an invalid length. [ 548.993775][T14383] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2504'. [ 550.545589][T14421] netlink: 'syz.5.2515': attribute type 21 has an invalid length. [ 550.588995][T14421] IPv6: NLM_F_CREATE should be specified when creating new route [ 550.632839][T14421] IPv6: Can't replace route, no match found [ 550.926523][T14435] netlink: 'syz.5.2519': attribute type 28 has an invalid length. [ 550.942935][T14435] netlink: 2 bytes leftover after parsing attributes in process `syz.5.2519'. [ 551.231843][T14435] netlink: 'syz.5.2519': attribute type 27 has an invalid length. [ 552.219964][T14467] netlink: 'syz.5.2527': attribute type 29 has an invalid length. [ 552.242946][T14467] netlink: 'syz.5.2527': attribute type 29 has an invalid length. [ 552.265240][T14469] netlink: 'syz.5.2527': attribute type 29 has an invalid length. [ 553.779771][T14503] syzkaller0: entered promiscuous mode [ 553.811289][T14503] syzkaller0: entered allmulticast mode [ 555.175059][T14533] netlink: 'syz.6.2543': attribute type 29 has an invalid length. [ 558.073574][T14537] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2543'. [ 558.082790][T14533] netlink: 'syz.6.2543': attribute type 29 has an invalid length. [ 558.245175][T14535] veth1_macvtap: left promiscuous mode [ 558.389240][T14558] netlink: 209832 bytes leftover after parsing attributes in process `syz.5.2545'. [ 559.455258][T14593] netlink: 'syz.6.2551': attribute type 10 has an invalid length. [ 559.499280][ T5779] Bluetooth: hci4: unexpected subevent 0x0c length: 150 > 5 [ 559.763525][T14600] netlink: 'syz.5.2553': attribute type 3 has an invalid length. [ 559.778978][T14600] netlink: 199824 bytes leftover after parsing attributes in process `syz.5.2553'. [ 559.817080][T14597] netlink: 'syz.6.2552': attribute type 10 has an invalid length. [ 559.850807][T14597] veth1_vlan: left allmulticast mode [ 560.162510][T14613] FAULT_INJECTION: forcing a failure. [ 560.162510][T14613] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 560.197031][T14613] CPU: 0 PID: 14613 Comm: syz.6.2556 Not tainted syzkaller #0 [ 560.204582][T14613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 560.214671][T14613] Call Trace: [ 560.217964][T14613] [ 560.220929][T14613] dump_stack_lvl+0x18c/0x250 [ 560.225655][T14613] ? show_regs_print_info+0x20/0x20 [ 560.230923][T14613] ? load_image+0x420/0x420 [ 560.235478][T14613] ? __lock_acquire+0x7d80/0x7d80 [ 560.240695][T14613] should_fail_ex+0x394/0x4c0 [ 560.245415][T14613] prepare_alloc_pages+0x1e1/0x5b0 [ 560.250554][T14613] __alloc_pages+0x134/0x460 [ 560.255156][T14613] ? zone_statistics+0x170/0x170 [ 560.260108][T14613] ? alloc_pages+0x4e1/0x740 [ 560.264708][T14613] ? do_raw_spin_unlock+0x121/0x230 [ 560.269941][T14613] __get_free_pages+0xc/0x30 [ 560.274592][T14613] kasan_populate_vmalloc_pte+0x35/0x100 [ 560.280244][T14613] __apply_to_page_range+0x860/0xdd0 [ 560.285550][T14613] ? kasan_populate_vmalloc+0x70/0x70 [ 560.290943][T14613] ? apply_to_page_range+0x50/0x50 [ 560.296074][T14613] ? do_raw_spin_unlock+0x121/0x230 [ 560.301292][T14613] alloc_vmap_area+0x1d26/0x1e50 [ 560.306263][T14613] ? vm_map_ram+0xcf0/0xcf0 [ 560.310782][T14613] ? rcu_is_watching+0x15/0xb0 [ 560.315566][T14613] __get_vm_area_node+0x162/0x370 [ 560.320608][T14613] __vmalloc_node_range+0x36f/0x1320 [ 560.325912][T14613] ? sock_hash_alloc+0x25e/0x4e0 [ 560.330894][T14613] ? free_vm_area+0x50/0x50 [ 560.335472][T14613] ? bpf_map_area_alloc+0x5e/0x110 [ 560.340601][T14613] ? rcu_is_watching+0x15/0xb0 [ 560.345381][T14613] ? bpf_map_area_alloc+0x5e/0x110 [ 560.350511][T14613] bpf_map_area_alloc+0xf1/0x110 [ 560.355465][T14613] ? sock_hash_alloc+0x25e/0x4e0 [ 560.360411][T14613] sock_hash_alloc+0x25e/0x4e0 [ 560.365199][T14613] map_create+0x877/0x12f0 [ 560.369636][T14613] __sys_bpf+0x651/0x890 [ 560.373898][T14613] ? bpf_link_show_fdinfo+0x560/0x560 [ 560.379655][T14613] ? lock_chain_count+0x20/0x20 [ 560.384527][T14613] __x64_sys_bpf+0x7c/0x90 [ 560.388953][T14613] do_syscall_64+0x55/0xb0 [ 560.393478][T14613] ? clear_bhb_loop+0x40/0x90 [ 560.398172][T14613] ? clear_bhb_loop+0x40/0x90 [ 560.402951][T14613] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 560.408858][T14613] RIP: 0033:0x7f629919e159 [ 560.413292][T14613] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 560.433102][T14613] RSP: 002b:00007f62973f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 560.441531][T14613] RAX: ffffffffffffffda RBX: 00007f6299425fa0 RCX: 00007f629919e159 [ 560.449515][T14613] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 0000000000000000 [ 560.457597][T14613] RBP: 00007f62973f6090 R08: 0000000000000000 R09: 0000000000000000 [ 560.465578][T14613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 560.473738][T14613] R13: 00007f6299426038 R14: 00007f6299425fa0 R15: 00007ffe94c34be8 [ 560.481737][T14613] [ 561.251534][T14636] netlink: 'syz.4.2561': attribute type 2 has an invalid length. [ 561.280328][T14636] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2561'. [ 561.305038][T14637] netlink: 'syz.4.2561': attribute type 2 has an invalid length. [ 561.321620][T14637] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2561'. [ 562.135673][T14651] netlink: 'syz.6.2564': attribute type 3 has an invalid length. [ 562.164741][T14651] netlink: 199824 bytes leftover after parsing attributes in process `syz.6.2564'. [ 562.693256][T14658] netlink: 'syz.2.2565': attribute type 10 has an invalid length. [ 562.773118][T14658] macvlan0: entered promiscuous mode [ 562.812353][T14658] macvlan0: entered allmulticast mode [ 563.043545][T14658] veth1_vlan: entered allmulticast mode [ 563.132921][T14658] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 563.322457][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.330139][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.402118][T14678] netlink: 'syz.4.2568': attribute type 28 has an invalid length. [ 563.410018][T14678] netlink: 'syz.4.2568': attribute type 29 has an invalid length. [ 563.494272][T14671] netlink: 'syz.4.2568': attribute type 9 has an invalid length. [ 563.553099][T14671] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.2568'. [ 563.603931][T14678] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2568'. [ 565.613257][ T49] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.635062][T14676] veth1_macvtap: left promiscuous mode [ 565.692033][T14697] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2573'. [ 565.738231][T14701] netlink: 'syz.2.2573': attribute type 10 has an invalid length. [ 565.749981][T14701] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2573'. [ 565.786217][ T49] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.938155][ T49] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.192798][ T49] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.616968][T14725] netlink: 'syz.6.2579': attribute type 10 has an invalid length. [ 566.706630][T14725] bond0: (slave macvlan0): Releasing backup interface [ 568.138741][T14733] syzkaller0: entered promiscuous mode [ 568.146803][T14733] syzkaller0: entered allmulticast mode [ 570.584408][T14766] netlink: 'syz.5.2584': attribute type 2 has an invalid length. [ 570.607370][T14768] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2584'. [ 570.746922][T14771] netlink: 'syz.5.2584': attribute type 17 has an invalid length. [ 570.775405][T14771] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2584'. [ 570.791474][T14771] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 571.047272][T14777] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2587'. [ 572.018072][T14796] netlink: 'syz.5.2591': attribute type 10 has an invalid length. [ 572.964664][T14816] netlink: 'syz.6.2595': attribute type 2 has an invalid length. [ 573.555247][T14816] netlink: 'syz.6.2595': attribute type 8 has an invalid length. [ 590.846506][T14816] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2595'. [ 620.706034][T14832] Bluetooth: hci5: command 0x0406 tx timeout [ 620.714281][T14832] Bluetooth: hci6: command 0x0406 tx timeout [ 620.720411][T14832] Bluetooth: hci4: command 0x0406 tx timeout [ 629.191754][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.191882][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 653.972452][ T5776] Bluetooth: hci0: command 0x0406 tx timeout [ 694.261681][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 694.261764][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 696.850825][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 696.850914][ C1] rcu: 1-....: (10415 ticks this GP) idle=10a4/1/0x4000000000000000 softirq=50834/50840 fqs=144 [ 696.851460][ C1] rcu: hardirqs softirqs csw/system [ 696.851470][ C1] rcu: number: 1735993 332 0 [ 696.851485][ C1] rcu: cputime: 35313 7559 21 ==> 42880(ms) [ 696.851501][ C1] rcu: (t=10500 jiffies g=66457 q=1200 ncpus=2) [ 696.851516][ C1] rcu: rcu_preempt kthread starved for 203 jiffies! g66457 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 696.851538][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 696.851548][ C1] rcu: RCU grace-period kthread stack dump: [ 696.851555][ C1] task:rcu_preempt state:R running task stack:26920 pid:17 ppid:2 flags:0x00004000 [ 696.851601][ C1] Call Trace: [ 696.851609][ C1] [ 696.851622][ C1] __schedule+0x15ae/0x4660 [ 696.851668][ C1] ? __lock_acquire+0x7d80/0x7d80 [ 696.851697][ C1] ? lock_chain_count+0x20/0x20 [ 696.851727][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 696.851753][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 696.851777][ C1] ? asan.module_dtor+0x20/0x20 [ 696.851814][ C1] ? rcu_is_watching+0x15/0xb0 [ 696.851864][ C1] schedule+0xbd/0x170 [ 696.851892][ C1] schedule_timeout+0x188/0x2d0 [ 696.851915][ C1] ? console_conditional_schedule+0x40/0x40 [ 696.851936][ C1] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 696.851961][ C1] ? update_process_times+0x1b0/0x1b0 [ 696.851991][ C1] ? prepare_to_swait_event+0x344/0x360 [ 696.852023][ C1] rcu_gp_fqs_loop+0x30d/0x1590 [ 696.852061][ C1] ? dyntick_save_progress_counter+0x2b0/0x2b0 [ 696.852085][ C1] ? __lock_acquire+0x7d80/0x7d80 [ 696.852110][ C1] ? rcu_gp_init+0x1530/0x1530 [ 696.852129][ C1] ? rcu_gp_cleanup+0xade/0xc30 [ 696.852156][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 696.852179][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 696.852203][ C1] rcu_gp_kthread+0x9d/0x3b0 [ 696.852228][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 696.852251][ C1] ? __kthread_parkme+0x71/0x1c0 [ 696.852275][ C1] ? __kthread_parkme+0x15b/0x1c0 [ 696.852302][ C1] kthread+0x2fa/0x390 [ 696.852322][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 696.852346][ C1] ? kthread_blkcg+0xd0/0xd0 [ 696.852367][ C1] ret_from_fork+0x48/0x80 [ 696.852391][ C1] ? kthread_blkcg+0xd0/0xd0 [ 696.852413][ C1] ret_from_fork_asm+0x11/0x20 [ 696.852457][ C1] [ 696.852465][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 696.852475][ C1] Sending NMI from CPU 1 to CPUs 0: [ 696.852500][ C0] NMI backtrace for cpu 0 [ 696.852510][ C0] CPU: 0 PID: 14780 Comm: syz.4.2586 Not tainted syzkaller #0 [ 696.852525][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 696.852533][ C0] RIP: 0010:check_preemption_disabled+0x42/0x110 [ 696.852552][ C0] Code: 65 8b 05 fd 57 72 75 65 8b 0d f2 57 72 75 f7 c1 ff ff ff 7f 74 1f 65 48 8b 0c 25 28 00 00 00 48 3b 4c 24 08 0f 85 c4 00 00 00 <48> 83 c4 10 5b 41 5e 41 5f 5d c3 48 c7 04 24 00 00 00 00 9c 8f 04 [ 696.852564][ C0] RSP: 0018:ffffc900000078b0 EFLAGS: 00000046 [ 696.852578][ C0] RAX: 0000000000000000 RBX: ffffc90000007918 RCX: fa63ea14044f3300 [ 696.852589][ C0] RDX: 0000000000000000 RSI: ffffffff8ac9c540 RDI: ffffffff8b1d3ba0 [ 696.852599][ C0] RBP: 0000000000000000 R08: ffffffff8e8c316f R09: 1ffffffff1d1862d [ 696.852609][ C0] R10: dffffc0000000000 R11: fffffbfff1d1862e R12: 0000000000000000 [ 696.852619][ C0] R13: 0000000000000000 R14: dffffc0000000000 R15: 0000000000000000 [ 696.852629][ C0] FS: 00007eff4146c6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 696.852643][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 696.852653][ C0] CR2: 00007fed95c5933d CR3: 00000000773c1000 CR4: 00000000003506f0 [ 696.852669][ C0] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000200000000300 [ 696.852679][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 696.852689][ C0] Call Trace: [ 696.852694][ C0] [ 696.852698][ C0] ? rcu_is_watching+0x15/0xb0 [ 696.852720][ C0] irq_enter_rcu+0x27/0xf0 [ 696.852735][ C0] sysvec_apic_timer_interrupt+0x49/0xc0 [ 696.852751][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 696.852773][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xc0/0x120 [ 696.852792][ C0] Code: c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 41 c6 04 07 f8 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 3b f7 c1 f6 65 8b 05 ec b4 68 75 85 c0 74 3c 48 c7 04 24 0e 36 [ 696.852804][ C0] RSP: 0018:ffffc900000079c0 EFLAGS: 00000206 [ 696.852817][ C0] RAX: dffffc0000000004 RBX: 0000000000000a02 RCX: fa63ea14044f3300 [ 696.852828][ C0] RDX: dffffc0000000000 RSI: ffffffff8acacce0 RDI: 0000000000000001 [ 696.852838][ C0] RBP: ffffc90000007a40 R08: ffffffff911eb52f R09: 1ffffffff223d6a5 [ 696.852849][ C0] R10: dffffc0000000000 R11: fffffbfff223d6a6 R12: dffffc0000000000 [ 696.852860][ C0] R13: ffff8880612ffc30 R14: ffffffff97505f98 R15: 1ffff92000000f38 [ 696.852884][ C0] ? _raw_spin_unlock+0x40/0x40 [ 696.852907][ C0] debug_check_no_obj_freed+0x47b/0x520 [ 696.852931][ C0] ? __kmem_cache_free+0xba/0x1f0 [ 696.852958][ C0] slab_free_freelist_hook+0xd2/0x1a0 [ 696.852978][ C0] ? mac80211_hwsim_beacon_tx+0x3df/0x770 [ 696.853034][ C0] kmem_cache_free+0xf8/0x290 [ 696.853058][ C0] mac80211_hwsim_beacon_tx+0x3df/0x770 [ 696.853082][ C0] __iterate_interfaces+0x225/0x4c0 [ 696.853149][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 696.853168][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 696.853189][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 696.853208][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 696.853230][ C0] mac80211_hwsim_beacon+0xbb/0x1b0 [ 696.853249][ C0] ? hw_scan_work+0xf10/0xf10 [ 696.853266][ C0] __hrtimer_run_queues+0x525/0xc10 [ 696.853303][ C0] ? hrtimer_interrupt+0x980/0x980 [ 696.853318][ C0] ? read_tsc+0x9/0x20 [ 696.853340][ C0] hrtimer_run_softirq+0x177/0x290 [ 696.853361][ C0] handle_softirqs+0x27d/0x820 [ 696.853375][ C0] ? read_tsc+0x9/0x20 [ 696.853390][ C0] ? ktime_get+0x24b/0x280 [ 696.853409][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 696.853427][ C0] ? do_softirq+0x1a0/0x1a0 [ 696.853446][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 696.853468][ C0] __irq_exit_rcu+0xd3/0x190 [ 696.853483][ C0] ? irq_exit_rcu+0x20/0x20 [ 696.853504][ C0] irq_exit_rcu+0x9/0x20 [ 696.853518][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 696.853533][ C0] [ 696.853537][ C0] [ 696.853542][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 696.853561][ C0] RIP: 0010:unwind_next_frame+0x1b2/0x2990 [ 696.853578][ C0] Code: 48 89 6c 24 10 4c 89 a4 24 88 00 00 00 75 1b e8 e4 d5 4b 00 48 c7 c3 c0 4e c8 8a 49 bf 00 00 00 00 00 fc ff df e9 5e 04 00 00 <48> c7 c3 00 00 00 81 4c 89 f7 48 c7 c6 00 00 00 81 e8 c8 d7 4b 00 [ 696.853590][ C0] RSP: 0018:ffffc90003617118 EFLAGS: 00000286 [ 696.853602][ C0] RAX: ffffffff813bb551 RBX: dffffc0000000000 RCX: ffff88807e6f1e00 [ 696.853613][ C0] RDX: 0000000000000002 RSI: 0000000000000001 RDI: ffffffff81332028 [ 696.853623][ C0] RBP: ffffc90003617298 R08: ffff88807e6f1e00 R09: 0000000000000003 [ 696.853633][ C0] R10: 0000000000000004 R11: 0000000000000002 R12: ffffc90003617248 [ 696.853643][ C0] R13: ffffc90003617248 R14: ffffffff81332027 R15: 0000000000000001 [ 696.853654][ C0] ? arch_stack_walk+0xf7/0x190 [ 696.853673][ C0] ? unwind_next_frame+0x181/0x2990 [ 696.853689][ C0] ? arch_stack_walk+0xf8/0x190 [ 696.853706][ C0] ? unwind_next_frame+0x181/0x2990 [ 696.853727][ C0] ? arch_stack_walk+0xf8/0x190 [ 696.853746][ C0] __unwind_start+0x5bb/0x730 [ 696.853764][ C0] ? stack_trace_save+0x100/0x100 [ 696.853782][ C0] arch_stack_walk+0xf8/0x190 [ 696.853801][ C0] ? arch_stack_walk+0xf8/0x190 [ 696.853819][ C0] stack_trace_save+0xaa/0x100 [ 696.853837][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 696.853863][ C0] save_stack+0x125/0x230 [ 696.853880][ C0] ? __reset_page_owner+0x190/0x190 [ 696.853905][ C0] ? page_ext_get+0x22/0x2b0 [ 696.853923][ C0] ? page_ext_get+0x1e2/0x2b0 [ 696.853944][ C0] __reset_page_owner+0x4e/0x190 [ 696.853962][ C0] free_unref_page_prepare+0x7d7/0x8f0 [ 696.853982][ C0] free_unref_page+0x32/0x2e0 [ 696.853999][ C0] __slab_free+0x35a/0x400 [ 696.854021][ C0] qlist_free_all+0x75/0xd0 [ 696.854043][ C0] kasan_quarantine_reduce+0x143/0x160 [ 696.854065][ C0] __kasan_slab_alloc+0x22/0x80 [ 696.854084][ C0] slab_post_alloc_hook+0x6a/0x4d0 [ 696.854110][ C0] __kmem_cache_alloc_node+0x194/0x250 [ 696.854131][ C0] ? ops_init+0x8b/0x640 [ 696.854177][ C0] ? ops_init+0x8b/0x640 [ 696.854192][ C0] __kmalloc+0xa7/0x240 [ 696.854211][ C0] ? ife_init_net+0x15a/0x190 [ 696.854268][ C0] ops_init+0x8b/0x640 [ 696.854298][ C0] setup_net+0x3b6/0xa20 [ 696.854316][ C0] ? copy_net_ns+0x530/0x530 [ 696.854337][ C0] ? down_read_killable+0x1d0/0x340 [ 696.854356][ C0] copy_net_ns+0x361/0x530 [ 696.854375][ C0] create_new_namespaces+0x3ce/0x700 [ 696.854400][ C0] ? copy_namespaces+0x5c/0x4a0 [ 696.854417][ C0] copy_namespaces+0x42a/0x4a0 [ 696.854437][ C0] copy_process+0x16f6/0x3da0 [ 696.854463][ C0] ? copy_process+0x98e/0x3da0 [ 696.854483][ C0] ? perf_trace_lock+0xfc/0x3b0 [ 696.854501][ C0] ? __pidfd_prepare+0x140/0x140 [ 696.854526][ C0] kernel_clone+0x24b/0x8a0 [ 696.854546][ C0] ? create_io_thread+0x190/0x190 [ 696.854561][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 696.854588][ C0] __x64_sys_clone+0x1b7/0x230 [ 696.854607][ C0] ? __ia32_sys_vfork+0x140/0x140 [ 696.854642][ C0] do_syscall_64+0x55/0xb0 [ 696.854659][ C0] ? clear_bhb_loop+0x40/0x90 [ 696.854677][ C0] ? clear_bhb_loop+0x40/0x90 [ 696.854696][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 696.854714][ C0] RIP: 0033:0x7eff4059e159 [ 696.854727][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 696.854738][ C0] RSP: 002b:00007eff4146bfd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 696.854753][ C0] RAX: ffffffffffffffda RBX: 00007eff40825fa0 RCX: 00007eff4059e159 [ 696.854763][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000041064400 [ 696.854773][ C0] RBP: 00007eff4063506b R08: 0000000000000000 R09: 0000000000000000 [ 696.854781][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 696.854790][ C0] R13: 00007eff40826038 R14: 00007eff40825fa0 R15: 00007ffc6fbd1cc8 [ 696.854811][ C0] [ 696.855499][ C1] CPU: 1 PID: 14816 Comm: syz.6.2595 Not tainted syzkaller #0 [ 696.855517][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 696.855528][ C1] RIP: 0010:kcov_remote_start+0x1b7/0x810 [ 696.855553][ C1] Code: 68 06 00 48 c7 04 24 00 00 00 00 9c 8f 04 24 f7 04 24 00 02 00 00 0f 85 96 03 00 00 41 f7 c5 00 02 00 00 74 05 fb eb 02 0f 0b <48> 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d c3 0f 1f 44 00 00 4d 8b [ 696.855567][ C1] RSP: 0018:ffffc900001f0968 EFLAGS: 00000206 [ 696.855585][ C1] RAX: c3564a20b380d300 RBX: ffffffff818793ab RCX: c3564a20b380d300 [ 696.855600][ C1] RDX: dffffc0000000000 RSI: ffffffff8acacce0 RDI: ffffffff8b1d3ba0 [ 696.855613][ C1] RBP: ffffc900001f0c10 R08: ffffffff911eb507 R09: 1ffffffff223d6a0 [ 696.855627][ C1] R10: dffffc0000000000 R11: fffffbfff223d6a1 R12: 0000000000000000 [ 696.855641][ C1] R13: 0000000000000246 R14: ffff88802b4a8000 R15: 0000000000000000 [ 696.855654][ C1] FS: 00007f62973f66c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 696.855670][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 696.855685][ C1] CR2: 00005555809919f8 CR3: 0000000060170000 CR4: 00000000003506e0 [ 696.855704][ C1] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 696.855716][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 696.855729][ C1] Call Trace: [ 696.855737][ C1] [ 696.855754][ C1] ieee80211_rx_list+0x5a6/0x3240 [ 696.855826][ C1] ? perf_trace_run_bpf_submit+0x125/0x1c0 [ 696.855855][ C1] ? ieee80211_check_fast_rx_iface+0x210/0x210 [ 696.855883][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 696.855924][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 696.855945][ C1] ? read_lock_is_recursive+0x20/0x20 [ 696.855981][ C1] ? ieee80211_rx_napi+0xd2/0x3c0 [ 696.856005][ C1] ieee80211_rx_napi+0x1ae/0x3c0 [ 696.856034][ C1] ? ieee80211_rx_list+0x3240/0x3240 [ 696.856066][ C1] ? skb_dequeue+0x124/0x160 [ 696.856096][ C1] ieee80211_handle_queued_frames+0x105/0x190 [ 696.856160][ C1] ? ieee80211_reconfig_filter+0x20/0x20 [ 696.856185][ C1] tasklet_action_common+0x2d4/0x460 [ 696.856207][ C1] ? net_tx_action+0x950/0x950 [ 696.856245][ C1] ? trace_raw_output_tasklet+0xc0/0xc0 [ 696.856268][ C1] ? lock_chain_count+0x20/0x20 [ 696.856303][ C1] handle_softirqs+0x27d/0x820 [ 696.856322][ C1] ? read_tsc+0x9/0x20 [ 696.856341][ C1] ? ktime_get+0x24b/0x280 [ 696.856368][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 696.856394][ C1] ? do_softirq+0x1a0/0x1a0 [ 696.856420][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 696.856449][ C1] __irq_exit_rcu+0xd3/0x190 [ 696.856468][ C1] ? irq_exit_rcu+0x20/0x20 [ 696.856499][ C1] irq_exit_rcu+0x9/0x20 [ 696.856517][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 696.856537][ C1] [ 696.856544][ C1] [ 696.856553][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 696.856577][ C1] RIP: 0010:skip_atoi+0x1/0xe0 [ 696.856597][ C1] Code: c3 44 89 e1 80 e1 07 38 c1 0f 8c a8 db ff ff 4c 89 e7 e8 32 af 5d f7 e9 9b db ff ff e8 f8 e1 0e 00 0f 1f 84 00 00 00 00 00 55 <41> 57 41 56 41 55 41 54 53 50 48 89 fb 49 bc 00 00 00 00 00 fc ff [ 696.856613][ C1] RSP: 0018:ffffc900036464a8 EFLAGS: 00000287 [ 696.856631][ C1] RAX: ffffffff8a81e45a RBX: dffffc0000000000 RCX: 0000000000080000 [ 696.856644][ C1] RDX: ffffc9001a024000 RSI: 000000000000fc62 RDI: ffffc900036464f0 [ 696.856658][ C1] RBP: 00000000000000fc R08: ffff88802b4a8000 R09: 0000000000000005 [ 696.856672][ C1] R10: 0000000000000030 R11: 0000000000000002 R12: 0000000000000036 [ 696.856684][ C1] R13: 1ffffffff15971d0 R14: ffffffff8acb8e82 R15: 0000000000000000 [ 696.856707][ C1] ? format_decode+0x8ba/0x1400 [ 696.856738][ C1] format_decode+0x8c4/0x1400 [ 696.856771][ C1] vsnprintf+0xeb/0x1ba0 [ 696.856812][ C1] sprintf+0xe8/0x140 [ 696.856832][ C1] ? trace_event_raw_event_lock+0x240/0x240 [ 696.856857][ C1] ? vsprintf+0x30/0x30 [ 696.856894][ C1] info_print_prefix+0x210/0x360 [ 696.856922][ C1] ? msg_add_dict_text+0x3d0/0x3d0 [ 696.856960][ C1] record_print_text+0x182/0x4a0 [ 696.856989][ C1] ? trace_call_bpf+0xc3/0x6c0 [ 696.857012][ C1] ? kmsg_dump_get_line+0x3e0/0x3e0 [ 696.857042][ C1] ? trace_call_bpf+0x5e9/0x6c0 [ 696.857061][ C1] ? trace_call_bpf+0xc3/0x6c0 [ 696.857087][ C1] printk_get_next_message+0x2ab/0x980 [ 696.857124][ C1] ? trace_raw_output_console+0xd0/0xd0 [ 696.857149][ C1] ? lock_chain_count+0x20/0x20 [ 696.857186][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 696.857218][ C1] ? console_flush_all+0x33a/0xcf0 [ 696.857249][ C1] console_flush_all+0x38d/0xcf0 [ 696.857277][ C1] ? console_flush_all+0x10b/0xcf0 [ 696.857310][ C1] ? is_console_locked+0x20/0x20 [ 696.857351][ C1] console_unlock+0xad/0x350 [ 696.857377][ C1] ? other_cpu_in_panic+0xf0/0xf0 [ 696.857402][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 696.857424][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 696.857455][ C1] vprintk_emit+0x497/0x610 [ 696.857481][ C1] ? printk_sprint+0x460/0x460 [ 696.857502][ C1] ? _raw_spin_unlock_irqrestore+0xc0/0x120 [ 696.857525][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 696.857547][ C1] ? _raw_spin_unlock+0x40/0x40 [ 696.857582][ C1] _printk+0xde/0x130 [ 696.857610][ C1] ? load_image+0x420/0x420 [ 696.857634][ C1] ? __nla_validate_parse+0x62f/0x2fd0 [ 696.857662][ C1] ? __sanitizer_cov_trace_switch+0x6d/0xe0 [ 696.857693][ C1] __nla_validate_parse+0x2746/0x2fd0 [ 696.857739][ C1] ? mark_lock+0x94/0x320 [ 696.857760][ C1] ? __nla_validate+0x50/0x50 [ 696.857788][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 696.857829][ C1] ? lock_chain_count+0x20/0x20 [ 696.857858][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 696.857882][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 696.857917][ C1] __nla_parse+0x40/0x50 [ 696.857950][ C1] inet_rtm_newaddr+0x1ce/0x1a20 [ 696.857988][ C1] ? __mutex_lock+0x923/0xc80 [ 696.858012][ C1] ? __mutex_lock+0x4d2/0xc80 [ 696.858035][ C1] ? inet_netconf_fill_devconf+0x8f0/0x8f0 [ 696.858082][ C1] ? inet_netconf_fill_devconf+0x8f0/0x8f0 [ 696.858108][ C1] rtnetlink_rcv_msg+0x843/0xf90 [ 696.858155][ C1] ? rtnetlink_rcv_msg+0x220/0xf90 [ 696.858185][ C1] ? rtnetlink_bind+0x80/0x80 [ 696.858213][ C1] ? perf_trace_preemptirq_template+0x269/0x330 [ 696.858242][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 696.858265][ C1] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 696.858293][ C1] ? lock_chain_count+0x20/0x20 [ 696.858322][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 696.858347][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 696.858368][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 696.858407][ C1] ? _raw_spin_unlock_irqrestore+0xc0/0x120 [ 696.858430][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 696.858453][ C1] ? _raw_spin_unlock+0x40/0x40 [ 696.858472][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 696.858504][ C1] ? rcu_preempt_deferred_qs_irqrestore+0x83b/0xc30 [ 696.858549][ C1] netlink_rcv_skb+0x235/0x4c0 [ 696.858605][ C1] ? rtnetlink_bind+0x80/0x80 [ 696.858633][ C1] ? netlink_ack+0x1160/0x1160 [ 696.858670][ C1] ? __lock_acquire+0x7d80/0x7d80 [ 696.858700][ C1] ? __rcu_read_unlock+0x7c/0xd0 [ 696.858717][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 696.858744][ C1] netlink_unicast+0x7b1/0x930 [ 696.858780][ C1] netlink_sendmsg+0x8d0/0xbf0 [ 696.858821][ C1] ? netlink_getsockopt+0x590/0x590 [ 696.858848][ C1] ? apparmor_socket_sendmsg+0x8e/0x330 [ 696.858876][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 696.858899][ C1] ? security_socket_sendmsg+0x80/0xa0 [ 696.858919][ C1] ? netlink_getsockopt+0x590/0x590 [ 696.858944][ C1] ____sys_sendmsg+0x61b/0x980 [ 696.858977][ C1] ? __asan_memset+0x22/0x40 [ 696.859003][ C1] ? __sys_sendmsg_sock+0x30/0x30 [ 696.859024][ C1] ? __import_iovec+0x5f2/0x850 [ 696.859062][ C1] ? import_iovec+0x73/0xa0 [ 696.859094][ C1] ___sys_sendmsg+0x2a6/0x360 [ 696.859118][ C1] ? __fget_files+0x28/0x460 [ 696.859156][ C1] ? __sys_sendmsg+0x2b0/0x2b0 [ 696.859206][ C1] ? trace_call_bpf+0xc3/0x6c0 [ 696.859223][ C1] ? trace_call_bpf+0xc3/0x6c0 [ 696.859240][ C1] ? trace_call_bpf+0xc3/0x6c0 [ 696.859290][ C1] __se_sys_sendmsg+0x1d0/0x2c0 [ 696.859318][ C1] ? __x64_sys_sendmsg+0x80/0x80 [ 696.859361][ C1] ? syscall_enter_from_user_mode+0x2e/0x80 [ 696.859386][ C1] do_syscall_64+0x55/0xb0 [ 696.859410][ C1] ? clear_bhb_loop+0x40/0x90 [ 696.859433][ C1] ? clear_bhb_loop+0x40/0x90 [ 696.859460][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 696.859484][ C1] RIP: 0033:0x7f629919e159 [ 696.859503][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 696.859519][ C1] RSP: 002b:00007f62973f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 696.859541][ C1] RAX: ffffffffffffffda RBX: 00007f6299425fa0 RCX: 00007f629919e159 [ 696.859556][ C1] RDX: 0000000004009044 RSI: 0000200000000080 RDI: 0000000000000007 [ 696.859569][ C1] RBP: 00007f629923506b R08: 0000000000000000 R09: 0000000000000000 [ 696.859582][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 696.859594][ C1] R13: 00007f6299426038 R14: 00007f6299425fa0 R15: 00007ffe94c34be8 [ 696.859629][ C1] [ 730.852297][ T28] INFO: task kworker/u4:3:49 blocked for more than 140 seconds. [ 730.852330][ T28] Not tainted syzkaller #0 [ 730.852347][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 730.852363][ T28] task:kworker/u4:3 state:D stack:21488 pid:49 ppid:2 flags:0x00004000 [ 730.852417][ T28] Workqueue: netns cleanup_net [ 730.852468][ T28] Call Trace: [ 730.852482][ T28] [ 730.852503][ T28] __schedule+0x15ae/0x4660 [ 730.852550][ T28] ? sync_rcu_exp_done_unlocked+0x140/0x140 [ 730.852602][ T28] ? asan.module_dtor+0x20/0x20 [ 730.852638][ T28] ? __mutex_lock+0x66e/0xc80 [ 730.852667][ T28] ? __mutex_trylock_common+0x8a/0x270 [ 730.852699][ T28] ? kthread_data+0x4f/0xc0 [ 730.852727][ T28] ? wq_worker_sleeping+0x63/0x240 [ 730.852759][ T28] schedule+0xbd/0x170 [ 730.852794][ T28] schedule_preempt_disabled+0x13/0x20 [ 730.852827][ T28] __mutex_lock+0x673/0xc80 [ 730.852853][ T28] ? lock_chain_count+0x20/0x20 [ 730.852882][ T28] ? __mutex_lock+0x4d2/0xc80 [ 730.852913][ T28] ? ieee80211_unregister_hw+0x55/0x2a0 [ 730.852948][ T28] ? mutex_lock_nested+0x20/0x20 [ 730.852973][ T28] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 730.853012][ T28] ? rcu_is_watching+0x15/0xb0 [ 730.853054][ T28] ieee80211_unregister_hw+0x55/0x2a0 [ 730.853091][ T28] mac80211_hwsim_del_radio+0x289/0x480 [ 730.853128][ T28] ? rhashtable_remove_fast+0xc00/0xc00 [ 730.853171][ T28] hwsim_exit_net+0x58d/0x650 [ 730.853207][ T28] ? hwsim_init_net+0x90/0x90 [ 730.853246][ T28] ? __ip_vs_dev_cleanup_batch+0x238/0x250 [ 730.853376][ T28] cleanup_net+0x6f7/0xb00 [ 730.853410][ T28] ? ops_free_list+0x3b0/0x3b0 [ 730.853446][ T28] ? _raw_spin_unlock_irq+0x23/0x50 [ 730.853483][ T28] ? process_scheduled_works+0x975/0x1600 [ 730.853514][ T28] ? process_scheduled_works+0x975/0x1600 [ 730.853548][ T28] process_scheduled_works+0xa60/0x1600 [ 730.853615][ T28] ? worker_attach_to_pool+0x370/0x370 [ 730.853656][ T28] ? assign_work+0x3cc/0x5d0 [ 730.853695][ T28] worker_thread+0xa5e/0xfe0 [ 730.853761][ T28] kthread+0x2fa/0x390 [ 730.853786][ T28] ? pr_cont_work+0x550/0x550 [ 730.853818][ T28] ? kthread_blkcg+0xd0/0xd0 [ 730.853846][ T28] ret_from_fork+0x48/0x80 [ 730.853874][ T28] ? kthread_blkcg+0xd0/0xd0 [ 730.853902][ T28] ret_from_fork_asm+0x11/0x20 [ 730.853952][ T28] [ 730.854037][ T28] INFO: task kworker/u4:30:10962 blocked for more than 140 seconds. [ 730.854058][ T28] Not tainted syzkaller #0 [ 730.854075][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 730.854089][ T28] task:kworker/u4:30 state:D stack:24552 pid:10962 ppid:2 flags:0x00004000 [ 730.854137][ T28] Workqueue: ipv6_addrconf addrconf_dad_work [ 730.854193][ T28] Call Trace: [ 730.854206][ T28] [ 730.854226][ T28] __schedule+0x15ae/0x4660 [ 730.854276][ T28] ? lock_chain_count+0x20/0x20 [ 730.854323][ T28] ? asan.module_dtor+0x20/0x20 [ 730.854361][ T28] ? __mutex_lock+0x66e/0xc80 [ 730.854392][ T28] ? __mutex_trylock_common+0x8a/0x270 [ 730.854423][ T28] ? kthread_data+0x4f/0xc0 [ 730.854460][ T28] ? wq_worker_sleeping+0x63/0x240 [ 730.854494][ T28] schedule+0xbd/0x170 [ 730.854531][ T28] schedule_preempt_disabled+0x13/0x20 [ 730.854566][ T28] __mutex_lock+0x673/0xc80 [ 730.854597][ T28] ? __mutex_lock+0x4d2/0xc80 [ 730.854628][ T28] ? addrconf_dad_work+0xce/0x1550 [ 730.854660][ T28] ? mutex_lock_nested+0x20/0x20 [ 730.854709][ T28] addrconf_dad_work+0xce/0x1550 [ 730.854753][ T28] ? ipv6_get_saddr_eval+0xee0/0xee0 [ 730.854784][ T28] ? read_lock_is_recursive+0x20/0x20 [ 730.854824][ T28] ? _raw_spin_unlock_irq+0x23/0x50 [ 730.854853][ T28] ? process_scheduled_works+0x975/0x1600 [ 730.854886][ T28] ? process_scheduled_works+0x975/0x1600 [ 730.854923][ T28] process_scheduled_works+0xa60/0x1600 [ 730.854992][ T28] ? worker_attach_to_pool+0x370/0x370 [ 730.855034][ T28] ? assign_work+0x3cc/0x5d0 [ 730.855073][ T28] worker_thread+0xa5e/0xfe0 [ 730.855122][ T28] ? _raw_spin_unlock+0x40/0x40 [ 730.855151][ T28] ? __kthread_parkme+0x71/0x1c0 [ 730.855191][ T28] kthread+0x2fa/0x390 [ 730.855218][ T28] ? pr_cont_work+0x550/0x550 [ 730.855252][ T28] ? kthread_blkcg+0xd0/0xd0 [ 730.855280][ T28] ret_from_fork+0x48/0x80 [ 730.855310][ T28] ? kthread_blkcg+0xd0/0xd0 [ 730.855339][ T28] ret_from_fork_asm+0x11/0x20 [ 730.855391][ T28] [ 730.855421][ T28] [ 730.855421][ T28] Showing all locks held in the system: [ 730.855439][ T28] 1 lock held by khungtaskd/28: [ 730.855464][ T28] #0: ffffffff8d1320e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 730.855565][ T28] 4 locks held by kworker/u4:3/49: [ 730.855584][ T28] #0: ffff888140045138 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 730.855682][ T28] #1: ffffc90000b9fd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 730.855779][ T28] #2: ffffffff8e3c3950 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x140/0xb00 [ 730.855873][ T28] #3: ffffffff8e3d0988 (rtnl_mutex){+.+.}-{3:3}, at: ieee80211_unregister_hw+0x55/0x2a0 [ 730.855972][ T28] 7 locks held by kworker/u5:0/51: [ 730.855990][ T28] #0: ffff88805fd91d38 ((wq_completion)hci5){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 730.856086][ T28] #1: ffffc90000bbfd00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 730.856184][ T28] #2: ffff8880566ace70 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1cc/0x380 [ 730.856302][ T28] #3: ffff8880566ac0b8 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x864/0xe60 [ 730.856417][ T28] #4: ffffffff8e53eb68 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x17b/0x330 [ 730.856522][ T28] #5: ffff88807e8ec338 (&conn->lock#2){+.+.}-{3:3}, at: l2cap_conn_del+0x7b/0x630 [ 730.856628][ T28] #6: ffffffff8d137ab8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3da/0x880 [ 730.856731][ T28] 2 locks held by kworker/0:2/172: [ 730.856750][ T28] 4 locks held by kworker/u4:5/702: [ 730.856783][ T28] 2 locks held by kworker/u4:10/4807: [ 730.856802][ T28] 3 locks held by kworker/u4:11/4823: [ 730.856821][ T28] 5 locks held by kworker/u5:1/5087: [ 730.856838][ T28] #0: ffff88805f011d38 ((wq_completion)hci6){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 730.856935][ T28] #1: ffffc9001035fd00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 730.857033][ T28] #2: ffff88805cc88e70 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1cc/0x380 [ 730.857122][ T28] #3: ffff88805cc880b8 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x864/0xe60 [ 730.857215][ T28] #4: ffffffff8e53eb68 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x17b/0x330 [ 730.857312][ T28] 1 lock held by dhcpcd/5437: [ 730.857330][ T28] #0: ffffffff8e3d0988 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ed/0xf90 [ 730.857428][ T28] 2 locks held by getty/5533: [ 730.857446][ T28] #0: ffff8880313ca0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 730.857567][ T28] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x428/0x1370 [ 730.857667][ T28] 5 locks held by kworker/u5:3/5779: [ 730.857686][ T28] #0: ffff88805ff6ed38 ((wq_completion)hci4){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 730.857783][ T28] #1: ffffc900047cfd00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 730.857880][ T28] #2: ffff88805fc6ce70 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1cc/0x380 [ 730.857970][ T28] #3: ffff88805fc6c0b8 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x864/0xe60 [ 730.858064][ T28] #4: ffffffff8e53eb68 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x17b/0x330 [ 730.858162][ T28] 3 locks held by kworker/0:6/5812: [ 730.858181][ T28] #0: ffff888017c72538 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 730.858278][ T28] #1: ffffc9000495fd00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 730.858374][ T28] #2: ffffffff8e3d0988 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x92/0xd90 [ 730.858498][ T28] 3 locks held by kworker/1:5/5847: [ 730.858517][ T28] 3 locks held by kworker/u4:14/6847: [ 730.858537][ T28] 4 locks held by kworker/u4:25/7465: [ 730.858555][ T28] 3 locks held by kworker/u4:30/10962: [ 730.858573][ T28] #0: ffff88802c3ab538 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 730.858670][ T28] #1: ffffc9000c4ffd00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 730.858766][ T28] #2: ffffffff8e3d0988 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xce/0x1550 [ 730.858864][ T28] 1 lock held by syz.4.2586/14780: [ 730.858883][ T28] 1 lock held by syz.5.2593/14808: [ 730.858902][ T28] #0: ffffffff8d1883c8 (event_mutex){+.+.}-{3:3}, at: perf_trace_destroy+0x2e/0x140 [ 730.858997][ T28] 2 locks held by syz.6.2595/14815: [ 730.859016][ T28] #0: ffffffff8d1883c8 (event_mutex){+.+.}-{3:3}, at: perf_trace_destroy+0x2e/0x140 [ 730.859109][ T28] #1: ffffffff8d137ab8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3da/0x880 [ 730.859209][ T28] 5 locks held by syz.6.2595/14816: [ 730.859227][ T28] 3 locks held by syz.6.2595/14821: [ 730.859245][ T28] 1 lock held by syz-executor/14829: [ 730.859264][ T28] 2 locks held by syz-executor/14831: [ 730.859283][ T28] 2 locks held by syz-executor/14833: [ 730.859302][ T28] 5 locks held by kworker/u5:5/14834: [ 730.859320][ T28] #0: ffff88806842fd38 ((wq_completion)hci0){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 730.859418][ T28] #1: ffffc90003117d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 730.859523][ T28] #2: ffff88802d7a8e70 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1cc/0x380 [ 730.859614][ T28] #3: ffff88802d7a80b8 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x864/0xe60 [ 730.859707][ T28] #4: ffffffff8e53eb68 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x17b/0x330 [ 730.859804][ T28] [ 730.859814][ T28] ============================================= [ 730.859814][ T28] [ 730.859829][ T28] NMI backtrace for cpu 0 [ 730.859839][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 730.859859][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 730.859870][ T28] Call Trace: [ 730.859879][ T28] [ 730.859887][ T28] dump_stack_lvl+0x18c/0x250 [ 730.859914][ T28] ? nmi_cpu_backtrace+0x1b6/0x3e0 [ 730.859944][ T28] ? show_regs_print_info+0x20/0x20 [ 730.859971][ T28] ? load_image+0x420/0x420 [ 730.860008][ T28] nmi_cpu_backtrace+0x3a6/0x3e0 [ 730.860039][ T28] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 730.860073][ T28] ? load_image+0x420/0x420 [ 730.860094][ T28] ? wq_watchdog_touch+0xef/0x170 [ 730.860122][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 730.860154][ T28] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 730.860186][ T28] watchdog+0xf59/0xfa0 [ 730.860215][ T28] ? watchdog+0x1e1/0xfa0 [ 730.860248][ T28] kthread+0x2fa/0x390 [ 730.860267][ T28] ? hungtask_pm_notify+0x50/0x50 [ 730.860294][ T28] ? kthread_blkcg+0xd0/0xd0 [ 730.860315][ T28] ret_from_fork+0x48/0x80 [ 730.860338][ T28] ? kthread_blkcg+0xd0/0xd0 [ 730.860360][ T28] ret_from_fork_asm+0x11/0x20 [ 730.860403][ T28] [ 730.860413][ T28] Sending NMI from CPU 0 to CPUs 1: [ 730.860447][ C1] NMI backtrace for cpu 1 [ 730.860458][ C1] CPU: 1 PID: 14816 Comm: syz.6.2595 Not tainted syzkaller #0 [ 730.860473][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 730.860480][ C1] RIP: 0010:hrtimer_interrupt+0x791/0x980 [ 730.860502][ C1] Code: e8 54 a3 68 00 4c 89 ff e9 77 fc ff ff e8 47 17 10 00 48 8b 44 24 10 0f b6 04 28 84 c0 48 8b 1c 24 0f 85 56 01 00 00 80 23 fb be 00 00 00 4c 8d 7b 56 4c 89 f8 48 c1 e8 03 0f b6 04 28 84 c0 [ 730.860514][ C1] RSP: 0018:ffffc900001f0500 EFLAGS: 00000002 [ 730.860527][ C1] RAX: 0000000000000000 RBX: ffff8880b8f2b78c RCX: ffff88802b4a8000 [ 730.860538][ C1] RDX: 0000000000010100 RSI: 0000000000000000 RDI: 0000000000000000 [ 730.860548][ C1] RBP: dffffc0000000000 R08: ffffffff8e8c316f R09: 1ffffffff1d1862d [ 730.860558][ C1] R10: dffffc0000000000 R11: fffffbfff1d1862e R12: ffff8880b8f2b794 [ 730.860568][ C1] R13: 000000aa28d76a69 R14: ffff8880b8f2b8a8 R15: 0000000000000000 [ 730.860579][ C1] FS: 00007f62973f66c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 730.860593][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 730.860603][ C1] CR2: 00005555809919f8 CR3: 0000000060170000 CR4: 00000000003506e0 [ 730.860619][ C1] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 730.860628][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 730.860638][ C1] Call Trace: [ 730.860644][ C1] [ 730.860666][ C1] __sysvec_apic_timer_interrupt+0xfb/0x3b0 [ 730.860688][ C1] sysvec_apic_timer_interrupt+0x51/0xc0 [ 730.860703][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 730.860724][ C1] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x0/0x90 [ 730.860742][ C1] Code: c0 4c 89 01 48 c7 44 11 08 03 00 00 00 48 89 7c 11 10 48 89 74 11 18 48 89 44 11 20 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 0f 1e fa 48 8b 04 24 65 48 8b 15 f0 28 7c 7e 65 8b 0d f1 28 7c [ 730.860754][ C1] RSP: 0018:ffffc900001f06f8 EFLAGS: 00000246 [ 730.860766][ C1] RAX: 0000000000000000 RBX: ffffc900001f0728 RCX: ffff88802b4a8000 [ 730.860776][ C1] RDX: 0000000000000100 RSI: 0000000000000002 RDI: 0000000000000000 [ 730.860785][ C1] RBP: 0000000000000002 R08: ffff88802b4a8000 R09: 0000000000000003 [ 730.860794][ C1] R10: 0000000000000004 R11: 0000000000000100 R12: ffffffff81dfee96 [ 730.860803][ C1] R13: ffffc900001f0b38 R14: dffffc0000000000 R15: ffffc900001f0728 [ 730.860815][ C1] ? ____kasan_slab_free+0x126/0x1f0 [ 730.860843][ C1] unwind_get_return_address+0x37/0xc0 [ 730.860859][ C1] ? stack_trace_save+0x100/0x100 [ 730.860876][ C1] arch_stack_walk+0x11d/0x190 [ 730.860896][ C1] ? slab_free_freelist_hook+0x130/0x1a0 [ 730.860914][ C1] stack_trace_save+0xaa/0x100 [ 730.860931][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 730.860957][ C1] ? mark_lock+0x94/0x320 [ 730.860977][ C1] kasan_set_track+0x4e/0x70 [ 730.860992][ C1] ? kasan_set_track+0x4e/0x70 [ 730.861007][ C1] ? kasan_save_free_info+0x28/0x40 [ 730.861024][ C1] ? ____kasan_slab_free+0x126/0x1f0 [ 730.861073][ C1] ? kmem_cache_free+0xf8/0x290 [ 730.861092][ C1] kasan_save_free_info+0x28/0x40 [ 730.861111][ C1] ____kasan_slab_free+0x126/0x1f0 [ 730.861130][ C1] slab_free_freelist_hook+0x130/0x1a0 [ 730.861148][ C1] ? mac80211_hwsim_beacon_tx+0x3df/0x770 [ 730.861167][ C1] kmem_cache_free+0xf8/0x290 [ 730.861190][ C1] mac80211_hwsim_beacon_tx+0x3df/0x770 [ 730.861214][ C1] __iterate_interfaces+0x225/0x4c0 [ 730.861233][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 730.861251][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 730.861271][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 730.861290][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 730.861311][ C1] mac80211_hwsim_beacon+0xbb/0x1b0 [ 730.861328][ C1] ? hw_scan_work+0xf10/0xf10 [ 730.861344][ C1] __hrtimer_run_queues+0x525/0xc10 [ 730.861373][ C1] ? hrtimer_interrupt+0x980/0x980 [ 730.861388][ C1] ? read_tsc+0x9/0x20 [ 730.861410][ C1] hrtimer_run_softirq+0x177/0x290 [ 730.861430][ C1] handle_softirqs+0x27d/0x820 [ 730.861445][ C1] ? read_tsc+0x9/0x20 [ 730.861460][ C1] ? ktime_get+0x24b/0x280 [ 730.861479][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 730.861497][ C1] ? do_softirq+0x1a0/0x1a0 [ 730.861514][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 730.861536][ C1] __irq_exit_rcu+0xd3/0x190 [ 730.861551][ C1] ? irq_exit_rcu+0x20/0x20 [ 730.861572][ C1] irq_exit_rcu+0x9/0x20 [ 730.861585][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 730.861600][ C1] [ 730.861604][ C1] [ 730.861610][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 730.861629][ C1] RIP: 0010:_prb_read_valid+0x13d/0x9a0 [ 730.861648][ C1] Code: 79 67 73 00 49 8b 07 48 89 44 24 10 48 8b 84 24 90 00 00 00 42 80 3c 30 00 74 0a 49 8d 7c 24 10 e8 58 67 73 00 49 8b 44 24 10 <48> 89 44 24 20 48 8b 44 24 70 42 0f b6 04 30 84 c0 0f 85 a8 06 00 [ 730.861660][ C1] RSP: 0018:ffffc900036466e0 EFLAGS: 00000246 [ 730.861672][ C1] RAX: ffffffff8d04a200 RBX: ffffc90003646a00 RCX: 1ffff920006c8d12 [ 730.861682][ C1] RDX: ffffc9001a024000 RSI: 00000000000115ea RDI: 00000000000115eb [ 730.861692][ C1] RBP: ffffc90003646880 R08: ffffc900036469d7 R09: 0000000000000000 [ 730.861702][ C1] R10: ffffc90003646980 R11: fffff520006c8d3b R12: ffffffff8d04a180 [ 730.861712][ C1] R13: ffffffff8d04a188 R14: dffffc0000000000 R15: ffffc90003646890 [ 730.861736][ C1] ? __lock_acquire+0x1262/0x7d80 [ 730.861761][ C1] ? prb_read_valid+0x60/0x60 [ 730.861786][ C1] ? __bpf_trace_bpf_trace_printk+0x100/0x100 [ 730.861800][ C1] ? trace_call_bpf+0xc3/0x6c0 [ 730.861813][ C1] ? verify_lock_unused+0x140/0x140 [ 730.861829][ C1] ? trace_call_bpf+0x5e9/0x6c0 [ 730.861845][ C1] prb_read_valid+0x3d/0x60 [ 730.861866][ C1] printk_get_next_message+0x190/0x980 [ 730.861885][ C1] ? trace_event_raw_event_lock+0x240/0x240 [ 730.861898][ C1] ? mark_lock+0x94/0x320 [ 730.861918][ C1] ? trace_raw_output_console+0xd0/0xd0 [ 730.861955][ C1] ? read_lock_is_recursive+0x20/0x20 [ 730.861976][ C1] ? console_flush_all+0x33a/0xcf0 [ 730.861997][ C1] console_flush_all+0x38d/0xcf0 [ 730.862016][ C1] ? console_flush_all+0x10b/0xcf0 [ 730.862040][ C1] ? is_console_locked+0x20/0x20 [ 730.862066][ C1] console_unlock+0xad/0x350 [ 730.862086][ C1] ? other_cpu_in_panic+0xf0/0xf0 [ 730.862105][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 730.862121][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 730.862143][ C1] vprintk_emit+0x497/0x610 [ 730.862162][ C1] ? printk_sprint+0x460/0x460 [ 730.862177][ C1] ? _raw_spin_unlock_irqrestore+0xc0/0x120 [ 730.862194][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 730.862211][ C1] ? _raw_spin_unlock+0x40/0x40 [ 730.862233][ C1] _printk+0xde/0x130 [ 730.862253][ C1] ? load_image+0x420/0x420 [ 730.862269][ C1] ? __nla_validate_parse+0x62f/0x2fd0 [ 730.862292][ C1] ? __sanitizer_cov_trace_switch+0x6d/0xe0 [ 730.862313][ C1] __nla_validate_parse+0x2746/0x2fd0 [ 730.862344][ C1] ? mark_lock+0x94/0x320 [ 730.862361][ C1] ? __nla_validate+0x50/0x50 [ 730.862380][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 730.862399][ C1] ? lock_chain_count+0x20/0x20 [ 730.862419][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 730.862438][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 730.862461][ C1] __nla_parse+0x40/0x50 [ 730.862484][ C1] inet_rtm_newaddr+0x1ce/0x1a20 [ 730.862505][ C1] ? __mutex_lock+0x923/0xc80 [ 730.862521][ C1] ? __mutex_lock+0x4d2/0xc80 [ 730.862537][ C1] ? inet_netconf_fill_devconf+0x8f0/0x8f0 [ 730.862569][ C1] ? inet_netconf_fill_devconf+0x8f0/0x8f0 [ 730.862589][ C1] rtnetlink_rcv_msg+0x843/0xf90 [ 730.862608][ C1] ? rtnetlink_rcv_msg+0x220/0xf90 [ 730.862631][ C1] ? rtnetlink_bind+0x80/0x80 [ 730.862651][ C1] ? perf_trace_preemptirq_template+0x269/0x330 [ 730.862674][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 730.862691][ C1] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 730.862713][ C1] ? lock_chain_count+0x20/0x20 [ 730.862733][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 730.862752][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 730.862768][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 730.862794][ C1] ? _raw_spin_unlock_irqrestore+0xc0/0x120 [ 730.862812][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 730.862828][ C1] ? _raw_spin_unlock+0x40/0x40 [ 730.862843][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 730.862864][ C1] ? rcu_preempt_deferred_qs_irqrestore+0x83b/0xc30 [ 730.862893][ C1] netlink_rcv_skb+0x235/0x4c0 [ 730.862911][ C1] ? rtnetlink_bind+0x80/0x80 [ 730.862930][ C1] ? netlink_ack+0x1160/0x1160 [ 730.862961][ C1] ? __lock_acquire+0x7d80/0x7d80 [ 730.862982][ C1] ? __rcu_read_unlock+0x7c/0xd0 [ 730.862994][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 730.863014][ C1] netlink_unicast+0x7b1/0x930 [ 730.863038][ C1] netlink_sendmsg+0x8d0/0xbf0 [ 730.863061][ C1] ? netlink_getsockopt+0x590/0x590 [ 730.863079][ C1] ? apparmor_socket_sendmsg+0x8e/0x330 [ 730.863098][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 730.863116][ C1] ? security_socket_sendmsg+0x80/0xa0 [ 730.863131][ C1] ? netlink_getsockopt+0x590/0x590 [ 730.863149][ C1] ____sys_sendmsg+0x61b/0x980 [ 730.863171][ C1] ? __asan_memset+0x22/0x40 [ 730.863190][ C1] ? __sys_sendmsg_sock+0x30/0x30 [ 730.863206][ C1] ? __import_iovec+0x5f2/0x850 [ 730.863231][ C1] ? import_iovec+0x73/0xa0 [ 730.863254][ C1] ___sys_sendmsg+0x2a6/0x360 [ 730.863271][ C1] ? __fget_files+0x28/0x460 [ 730.863293][ C1] ? __sys_sendmsg+0x2b0/0x2b0 [ 730.863324][ C1] ? trace_call_bpf+0xc3/0x6c0 [ 730.863336][ C1] ? trace_call_bpf+0xc3/0x6c0 [ 730.863348][ C1] ? trace_call_bpf+0xc3/0x6c0 [ 730.863378][ C1] __se_sys_sendmsg+0x1d0/0x2c0 [ 730.863398][ C1] ? __x64_sys_sendmsg+0x80/0x80 [ 730.863425][ C1] ? syscall_enter_from_user_mode+0x2e/0x80 [ 730.863443][ C1] do_syscall_64+0x55/0xb0 [ 730.863461][ C1] ? clear_bhb_loop+0x40/0x90 [ 730.863478][ C1] ? clear_bhb_loop+0x40/0x90 [ 730.863497][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 730.863516][ C1] RIP: 0033:0x7f629919e159 [ 730.863530][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 730.863541][ C1] RSP: 002b:00007f62973f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 730.863556][ C1] RAX: ffffffffffffffda RBX: 00007f6299425fa0 RCX: 00007f629919e159 [ 730.863566][ C1] RDX: 0000000004009044 RSI: 0000200000000080 RDI: 0000000000000007 [ 730.863576][ C1] RBP: 00007f629923506b R08: 0000000000000000 R09: 0000000000000000 [ 730.863585][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 730.863595][ C1] R13: 00007f6299426038 R14: 00007f6299425fa0 R15: 00007ffe94c34be8 [ 730.863616][ C1] [ 736.611091][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 736.611107][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 736.611127][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 736.611138][ T28] Call Trace: [ 736.611145][ T28] [ 736.611154][ T28] dump_stack_lvl+0x18c/0x250 [ 736.611190][ T28] ? show_regs_print_info+0x20/0x20 [ 736.611215][ T28] ? load_image+0x420/0x420 [ 736.611253][ T28] panic+0x2ca/0x720 [ 736.611279][ T28] ? bpf_jit_dump+0xd0/0xd0 [ 736.611299][ T28] ? __irq_work_queue_local+0x13a/0x3b0 [ 736.611324][ T28] ? preempt_schedule_thunk+0x1a/0x30 [ 736.611352][ T28] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 736.611387][ T28] watchdog+0xf98/0xfa0 [ 736.611414][ T28] ? watchdog+0x1e1/0xfa0 [ 736.611445][ T28] kthread+0x2fa/0x390 [ 736.611464][ T28] ? hungtask_pm_notify+0x50/0x50 [ 736.611489][ T28] ? kthread_blkcg+0xd0/0xd0 [ 736.611508][ T28] ret_from_fork+0x48/0x80 [ 736.611530][ T28] ? kthread_blkcg+0xd0/0xd0 [ 736.611550][ T28] ret_from_fork_asm+0x11/0x20 [ 736.611590][ T28] [ 736.611852][ T28] Kernel Offset: disabled