last executing test programs: 2m34.281714165s ago: executing program 3 (id=4137): r0 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x3, @remote, 0x5, 0x3}, 0x80, 0x0}, 0x2600c055) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xc, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8004}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x6f}, [@ldst={0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000500)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac00800020007000200060006c00364683b9dad7aa21240d69a6a818cf6c551ae60fc91b169edb1b175732b9f597fe3b6c5a3d77cc766307de2", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0xfffc, @local}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYRES32], 0x10b8}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xd}, 0x338bd4001d9e672f) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x69}, [@ldst={0x7, 0x3, 0x0, 0x1c10a1}]}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES8=r3, @ANYRES16=r0], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000180)=0x20000, &(0x7f00000001c0)}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000), 0x31) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000600)={r5, 0x0, &(0x7f00000005c0)=""/32}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000480)={0xffffffffffffffff, &(0x7f00000005c0)}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r6, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0) socketpair(0x1e, 0x4, 0x9, &(0x7f0000000000)) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000000), 0x40) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)}], 0x1}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x1}, 0x28) 2m33.809533427s ago: executing program 3 (id=4140): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000080)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], 0x0, 0xbf, &(0x7f0000000200), 0x0, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x8d, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x5fa9, 0x0, r0, 0x7fffffff, '\x00', r1, r2, 0x0, 0x3, 0x2}, 0x50) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x15, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x14250220b924e135}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x6d}}]}, &(0x7f0000000600)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xe, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="1802000004000000000000000000000085000000bc000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8203dbb69e5ffffffb70a000000850000001700ff009500"/94], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000000)="b9150ef78437e79364d6ef21aa00", 0x0, 0xcb, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m33.434637596s ago: executing program 3 (id=4141): socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$kcm(0x2, 0x5, 0x84) perf_event_open(0x0, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x6}, 0xc001, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x817a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x80000000, 0x3fff8000}, 0x110, 0x32, 0x43a1bd77, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) gettid() r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xef, 0x7, 0x0, 0x0, 0x0, 0x0, 0xc9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_config_ext={0x9, 0x7}, 0x800, 0x2000000000, 0x0, 0x5, 0x0, 0x8, 0xfffd, 0x0, 0x9, 0x0, 0x3f}, 0x0, 0x400010, 0xffffffffffffffff, 0x3) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b03d25a806f8c6394f90524fc60040f03", 0x17}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xa, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="611289000000000061134c0000000000bf2000000000000007000000080000002d0301"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r2 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe000058"], 0xfe33) r3 = socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r4 = perf_event_open(&(0x7f00000008c0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x0, 0x9, 0x10006, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="d8000000120081414e81f782db010000001d080b01008100e8fe55a1010115000600142603600e1208002e0040001101a8001200a400014006000d30514d3afab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef6aa98516277ce06bba020017cbec040000000000000000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4688df216265e5dbf66f282ac027812cfbd3f1aeb4edbb57a7025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40d", 0xd8}], 0x1}, 0xc000) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000010000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x136e54520700452d, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000000000008500000059"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x28}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r7}, 0xc) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r8) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="1400000016000b63d25a80648c25940121", 0x11}, {&(0x7f0000000280)="e26248", 0x3}], 0x2}, 0x40050) 2m32.881142729s ago: executing program 3 (id=4148): r0 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x3, @remote, 0x5, 0x3}, 0x80, 0x0}, 0x2600c055) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xc, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8004}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x6f}, [@ldst={0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000500)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac00800020007000200060006c00364683b9dad7aa21240d69a6a818cf6c551ae60fc91b169edb1b175732b9f597fe3b6c5a3d77cc766307de2", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0xfffc, @local}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYRES32], 0x10b8}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xd}, 0x338bd4001d9e672f) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x69}, [@ldst={0x7, 0x3, 0x0, 0x1c10a1}]}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES8=r3, @ANYRES16=r0], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000180)=0x20000, &(0x7f00000001c0)}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000), 0x31) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000600)={r5, 0x0, &(0x7f00000005c0)=""/32}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000480)={0xffffffffffffffff, &(0x7f00000005c0)}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r6, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0) socketpair(0x1e, 0x4, 0x9, &(0x7f0000000000)) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000000), 0x40) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)}], 0x1}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x1}, 0x28) 2m32.211193834s ago: executing program 3 (id=4150): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000061040000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r1) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$ITER_CREATE(0xb, 0x0, 0x0) socket$kcm(0x11, 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000a00)={0x4, 0x80, 0x7, 0x7, 0x0, 0x0, 0x0, 0x8, 0x1, 0xe, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x448, 0x4, 0x3, 0x8, 0x8000000000000000, 0x1ff, 0x5, 0x0, 0xfffffff9, 0x0, 0x1}, r2, 0xf, 0xffffffffffffffff, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)="89000140120081ae08060cdc030000017f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010005080c00bdad01409bbc7a46e39a8285dcdf12176679df069163ce947ee2b49e33538afaeb2713f450ebd010a20ff27fff0000000000000000", 0x89}], 0x1}, 0xff0f000000000000) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000300)=0x1) 2m32.008989689s ago: executing program 3 (id=4153): perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x10001, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x120, 0x8, 0xb9, 0x0, 0x0, 0xf, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x5) (async) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x24, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) socket$kcm(0xa, 0x7, 0x88) close(0x3) (async) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 32) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4804, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (rerun: 32) socketpair$unix(0x1, 0x1, 0x0, 0x0) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[], 0x128}, 0x8000) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) (async, rerun: 64) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) (rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r1, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x1002, &(0x7f00000014c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe65}, 0x23) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x14, 0x4, 0x4, 0x10002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff}, 0x48) (rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000007000000711060000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 2m16.689638512s ago: executing program 32 (id=4153): perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x10001, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x120, 0x8, 0xb9, 0x0, 0x0, 0xf, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x5) (async) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x24, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) socket$kcm(0xa, 0x7, 0x88) close(0x3) (async) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 32) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4804, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (rerun: 32) socketpair$unix(0x1, 0x1, 0x0, 0x0) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[], 0x128}, 0x8000) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) (async, rerun: 64) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) (rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r1, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x1002, &(0x7f00000014c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe65}, 0x23) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x14, 0x4, 0x4, 0x10002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff}, 0x48) (rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000007000000711060000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 15.066693183s ago: executing program 0 (id=4813): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000001"], 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x10801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=[0x0, 0x0], 0x0, 0xc2, &(0x7f0000000200)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000240), &(0x7f00000002c0), 0x8, 0x80, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) close(r0) socketpair(0x1, 0x801, 0x0, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x5452, &(0x7f0000000400)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdf\x85\xaac{\x8c\x8ffp`-\xcd\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\t\xed\x13q2\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\xcb\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca\x04\x00\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x03\x00\x00\x00\x00\x00\x00\x00\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\xf3\xcf\x17\xf5\x86%\x7f\xec\xb2\xc5E\x00\xb2e\xa8\xf1<\xb2\xc82\xbf=o\x00\x00\x00\x00E\x00\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x922A\x95\x8e\xbc\xc80xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x13, &(0x7f0000000800), 0x4) 14.430185608s ago: executing program 0 (id=4816): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x4}, 0x104101, 0x4, 0x2000000, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x75, &(0x7f0000000000)=r3, 0x8) r4 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r4, &(0x7f0000000040)={&(0x7f0000000280)=@caif=@dgm={0x25, 0x9, 0x29}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000580)="62042700590200000000002f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee", 0x23}], 0x1}, 0x8001) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x6) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000000000"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x200000000000003, 0x106) close(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100a7829952faca5250e16332000000000007010000f8ffffffb702000008000000b70300000700003e8500000006"], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x55, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x24}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000840}, 0x20040089) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b000000070000000100010009000000010000", @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'}) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r7}, 0x8) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d80000002000811f4e81f782db44b90402000000e8fe55a1180015000600142603600e1209000a0000000401a80016000a00114006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0808856e408e8d8ef52b49816277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006d8df969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970100040000", 0xd8}], 0x1}, 0x0) 13.954269359s ago: executing program 0 (id=4820): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd72, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x15, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x18, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1ff}, {}, {}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f00000002c0)=[{0x4, 0x3, 0xb, 0x6}, {0x5, 0x2, 0x7, 0x8}, {0x1, 0x2, 0x6, 0xa}], 0x10, 0x7}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000580)={@cgroup, 0x2e, 0x1, 0x7, 0x0, 0x0, 0x0, &(0x7f0000000400)=[0x0, 0x0], 0x0, &(0x7f0000000540), 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000005c0)={@fallback=r1, r2, 0x33, 0x4, 0x0, @void, @value, @void, @void, r3}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x58, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000100)={@ifindex=r4, r0, 0xd117700904e4098a, 0x1, r0, @void, @value, @void, @void, r3}, 0x20) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x10000000000, 0x2003, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3a}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%\xf8\xff\xff\xff\xff\xff\xff\xff=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r5) 13.712208985s ago: executing program 0 (id=4822): r0 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x3, @remote, 0x5, 0x3}, 0x80, 0x0}, 0x2600c055) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xc, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8004}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000500)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac00800020007000200060006c00364683b9dad7aa21240d69a6a818cf6c551ae60fc91b169edb1b175732b9f597fe3b6c5a3d77cc766307de2", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0xfffc, @local}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYRES32], 0x10b8}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xd}, 0x338bd4001d9e672f) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES8=r3, @ANYRES16=r0], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{}, &(0x7f0000000180)=0x20000, &(0x7f00000001c0)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000480)={0xffffffffffffffff, &(0x7f00000005c0)}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r6 = openat$cgroup_devices(r5, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r6, &(0x7f0000000000)=ANY=[@ANYBLOB='b 75:*\tmm'], 0xa) socketpair(0x1e, 0x4, 0x9, &(0x7f0000000000)) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000000), 0x40) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)}], 0x1}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x1}, 0x28) 13.247788936s ago: executing program 0 (id=4826): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000001"], 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x10801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=[0x0, 0x0], 0x0, 0xc2, &(0x7f0000000200)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000240), &(0x7f00000002c0), 0x8, 0x80, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) close(r0) socketpair(0x1, 0x801, 0x0, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x5452, &(0x7f0000000400)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdf\x85\xaac{\x8c\x8ffp`-\xcd\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\t\xed\x13q2\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\xcb\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca\x04\x00\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x03\x00\x00\x00\x00\x00\x00\x00\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\xf3\xcf\x17\xf5\x86%\x7f\xec\xb2\xc5E\x00\xb2e\xa8\xf1<\xb2\xc82\xbf=o\x00\x00\x00\x00E\x00\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x922A\x95\x8e\xbc\xc80xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x13, &(0x7f0000000800), 0x4) 12.602149581s ago: executing program 0 (id=4831): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, 0x0, 0x4040001) recvmsg$unix(r3, 0x0, 0x4003) close(r2) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x4, 0x7, 0xfd, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x80000, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x800}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x114905, 0x4, 0xfffffffc, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x2) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xe, 0x2, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x56d}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006067c09e8fe55a10a0015400500142603600e120800060000001001a8001600a40001", 0x37}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000)=r9, 0x8) ioctl$TUNATTACHFILTER(r9, 0x401054d5, &(0x7f0000000880)={0x4, &(0x7f0000000840)=[{0x5, 0x1a, 0x0, 0x6}, {0x6, 0x2, 0x4, 0xb33}, {0x7f, 0x6, 0x0, 0x5}, {0x3, 0x5, 0x1, 0xfffffff8}]}) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d006a10000000e8fe55a118001500060014b9c3600e1209000a0044000000a80016000a", 0x35}], 0x1}, 0x4) write$cgroup_subtree(r10, &(0x7f0000000000)=ANY=[], 0xfe33) ioctl$PERF_EVENT_IOC_QUERY_BPF(r5, 0xc008240a, &(0x7f0000000040)=ANY=[@ANYBLOB="0300000000008100000000000003ca65ebe7cac4caf666340465e04e7e602c8d1915645551a9c100000000000000000000000000000073861a39089c"]) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85feff0fc9"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={r7, 0x58, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000006c0)={0xd, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1d, 0x8, &(0x7f0000000140)=@raw=[@call={0x85, 0x0, 0x0, 0x17}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}, @ldst={0x3, 0x1, 0x6, 0xb, 0x1, 0xfffffffffffffffc, 0xfffffffffffffff0}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x1}], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x79, &(0x7f0000000300)=""/121, 0x41000, 0x75, '\x00', r11, @lsm=0x2b, r10, 0x8, &(0x7f0000000640)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0xa, 0x3, 0xfffffffd}, 0x10, r12, 0xffffffffffffffff, 0x3, &(0x7f0000000700)=[r7, r7, r7, r7], &(0x7f0000000740)=[{0x5, 0x1, 0xf, 0x3}, {0x3, 0x1, 0x5, 0xb}, {0x1, 0x4, 0x7, 0xa}], 0x10, 0x9}, 0x94) socket$kcm(0x2a, 0x2, 0x0) r13 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(r7, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r13], 0x12) 11.078569977s ago: executing program 1 (id=4841): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x8, 0x9d, 0xee, 0x80, 0x0, 0x5, 0x1804, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext={0xfff, 0x2}, 0x80, 0xffffffffffffffff, 0x0, 0x3, 0x8, 0x2, 0x1, 0x0, 0x9, 0x0, 0x100000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x9) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84c21, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x7000000}, 0x0, 0x0, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x4110, 0x0, 0x0, 0x5, 0x0, 0x9}, 0x0, 0x0, r2, 0x0) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) (async) syz_clone(0x44063400, 0x0, 0x3, 0x0, 0x0, 0x0) (async) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0xffffffffffffffff) r3 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r3, &(0x7f0000000300)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x20000015) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000180)={0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000200)='R', 0x1}], 0x1}, 0x0) (async) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r3}) (async) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000100)={r3}) 4.317845217s ago: executing program 2 (id=4856): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x81) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000007d00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f00000006c0), 0x0}, 0x20) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b67d25a806f8c6394f96724fc60040f0300470000000535", 0x1e}], 0x1}, 0x0) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x1001a8, 0x0, 0x0, 0x4, 0x0, 0xffff0000, 0x9, 0x0, 0xffffbffe, 0x0, 0xfffffffffffffff1}, 0x0, 0x20000000000, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0x9, 0x4022, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x54b, 0x5, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) r4 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r4, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x14, 0x48, &(0x7f0000000f00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r5) r6 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r6, &(0x7f0000000400)=ANY=[@ANYBLOB="33fe00005e00", @ANYRES64, @ANYRESHEX], 0xfe33) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f1, &(0x7f0000000080)) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000007c0)="0e77", 0x2}], 0x1}, 0x4050003) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0xb, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socket$kcm(0x10, 0x2, 0x10) 4.22338441s ago: executing program 1 (id=4857): r0 = socket$kcm(0x10, 0x400000002, 0x0) recvmsg$kcm(r0, &(0x7f0000002440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002380)=""/169, 0xa9}, 0x40) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x10, 0x0, 0x4, 0x6, 0x0, 0xfffffffe, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610408000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1c0000001e007f10", 0x8}, {0x0}], 0x2}, 0x4000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r2) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f00000007c0)=@pppoe={0x18, 0x0, {0x0, @multicast, 'caif0\x00'}}, 0x80, 0x0}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) close(0x3) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x85, 0x1, 0x0, 0x0, 0x0, 0x2, 0x20022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x25}, 0x0, 0x0, 0x0, 0x9, 0xd, 0xd, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg(r2, &(0x7f0000000780)={&(0x7f00000001c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000600)=""/186, 0xba}], 0x1, &(0x7f0000000700)=""/82, 0x52}, 0x10022) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="b49f9cfa5bc2974bf91700", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000500)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af3653c001ac00800020007000200060001c00364683b9dad7aa21240d69a6a818cf6c551ae60fc91b169edb1b175732b9f597fe3b6c5a3d77cc766307de2", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000000) 3.674231742s ago: executing program 2 (id=4860): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)='u', 0x1}], 0x1}, 0x4040001) recvmsg$unix(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000b80)=""/161, 0xa1}], 0x1}, 0x4003) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x4, 0x7, 0xfd, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x80000, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x800}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x114905, 0x4, 0xfffffffc, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x2) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xe, 0x2, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x56d}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006067c09e8fe55a10a0015400500142603600e120800060000001001a8001600a40001", 0x37}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000), 0x8) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000880)={0x4, &(0x7f0000000840)=[{0x5, 0x1a, 0x0, 0x6}, {0x6, 0x2, 0x4, 0xb33}, {0x7f, 0x6, 0x0, 0x5}, {0x3, 0x5, 0x1, 0xfffffff8}]}) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d006a10000000e8fe55a118001500060014b9c3600e1209000a0044000000a80016000a", 0x35}], 0x1}, 0x4) ioctl$PERF_EVENT_IOC_QUERY_BPF(r4, 0xc008240a, &(0x7f0000000040)=ANY=[@ANYBLOB="0300000000008100000000000003ca65ebe7cac4caf666340465e04e7e602c8d1915645551a9c100000000000000000000000000000073861a39089c"]) socket$kcm(0x2a, 0x2, 0x0) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(r6, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r7], 0x12) 3.184673004s ago: executing program 1 (id=4861): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)='u', 0x1}], 0x1}, 0x4040001) recvmsg$unix(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000b80)=""/161, 0xa1}], 0x1}, 0x4003) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x4, 0x7, 0xfd, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x80000, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x800}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x114905, 0x4, 0xfffffffc, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x2) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xe, 0x2, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x56d}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006067c09e8fe55a10a0015400500142603600e120800060000001001a8001600a40001", 0x37}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$TUNATTACHFILTER(r8, 0x401054d5, &(0x7f0000000880)={0x4, &(0x7f0000000840)=[{0x5, 0x1a, 0x0, 0x6}, {0x6, 0x2, 0x4, 0xb33}, {0x7f, 0x6, 0x0, 0x5}, {0x3, 0x5, 0x1, 0xfffffff8}]}) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d006a10000000e8fe55a118001500060014b9c3600e1209000a0044000000a80016000a", 0x35}], 0x1}, 0x4) ioctl$PERF_EVENT_IOC_QUERY_BPF(r4, 0xc008240a, &(0x7f0000000040)=ANY=[@ANYBLOB="0300000000008100000000000003ca65ebe7cac4caf666340465e04e7e602c8d1915645551a9c100000000000000000000000000000073861a39089c"]) socket$kcm(0x2a, 0x2, 0x0) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(r6, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r9], 0x12) 3.184225024s ago: executing program 2 (id=4862): bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f91824fc60100005000a000200053582c137153e37000c0680050003000300", 0x33fe0}], 0x1}, 0x0) socket$kcm(0x2a, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000200000000000076a200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000010100007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r6}, &(0x7f0000000280), &(0x7f00000001c0)=r4}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYRES32=r3, @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000000c0)=r7, 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r8 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000001f80)={&(0x7f0000001d00)=@ll={0x11, 0x3, 0x0, 0x1, 0x7}, 0x80, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x10, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={0xffffffffffffffff}, 0x4) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@fallback=0xffffffffffffffff, 0x34, 0x0, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)}, 0x40) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000580)=ANY=[@ANYBLOB="922ada71ec1a58c9e7e932d21657c30334812f60ee6722642fadf57a65e5c6fa5a6cd6d26e40284af4d2f6ec754397ee2c6854db8f1a1b68d38f4741981d44cf2bd2a5cd2374cb0d397c41ff51287016e93aaa08d6d288f7c6ad4eb66ff0e89a5b311f67949577ac1e5a46094fdf369a883fba564793c246cd28a4fe016fb91927af85ac7e6b642e33555119f291afea98e44afe6adc4d3575d851404462ed354590ac693464028265ca74a1c5bbde7e7d7073500a0073", @ANYRESOCT=r9, @ANYBLOB="1c00000002000000", @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="cd0d5459bd9d1f5448f97903332405615122ce9045"], 0x20) 3.183868944s ago: executing program 4 (id=4863): r0 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6c69f68dc1cf3e78, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r3 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.91713255s ago: executing program 4 (id=4864): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) unlink(&(0x7f0000000080)='./cgroup/cgroup.procs\x00') perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x8cffffffffffffff}, 0x3b35, 0x0, 0xfffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 7) 2.185734498s ago: executing program 4 (id=4865): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1, 0xc, &(0x7f00000004c0)=ANY=[@ANYRESHEX=r0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=@bloom_filter={0x1e, 0x19ea, 0xfffffff7, 0x81, 0x10400, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x2, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x2, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000020000000000000db09880bffff0000186a00000000000000000000020000003528f0f7ffffffff9500244800000000"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x9b, &(0x7f0000000840)=""/155, 0x41100, 0x40, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000a00)={0x0, 0xb, 0x62d07282, 0x6ba1}, 0x10, 0x0, r1, 0x0, &(0x7f0000000dc0)=[r2], &(0x7f0000000e40), 0x10, 0xebab}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={r3, 0x58, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xf, 0x0, 0x2, 0x6, 0x0, 0x1, 0x9, '\x00', r4, 0xffffffffffffffff, 0x4, 0x2, 0x2}, 0x50) write$cgroup_devices(r3, &(0x7f00000005c0)=ANY=[], 0xfffffeff) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071100000000000001d400500000000004704000001ed00000f030000000000007f440000000000006b0ab0fe000000007303000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cde538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82684d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x7, 0xc, 0x0, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xc}, 0x0, 0x400000, 0x3, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r5) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x1000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) r7 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000e00)="39000000140081ae00002c000500015601618575e285af01800000000d1300883795c04a31ba377a1b2cc37fffffffffffffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x2000c814) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000000c0)='cpu<-0||!') bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) 2.07747022s ago: executing program 1 (id=4866): r0 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x3, @remote, 0x5, 0x3}, 0x80, 0x0}, 0x2600c055) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xc, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8004}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x6f}, [@ldst={0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000500)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac00800020007000200060006c00364683b9dad7aa21240d69a6a818cf6c551ae60fc91b169edb1b175732b9f597fe3b6c5a3d77cc766307de2", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0xfffc, @local}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYRES32], 0x10b8}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xd}, 0x338bd4001d9e672f) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES8=r3, @ANYRES16=r0], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{}, &(0x7f0000000180)=0x20000, &(0x7f00000001c0)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000480)={0xffffffffffffffff, &(0x7f00000005c0)}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r6 = openat$cgroup_devices(r5, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r6, &(0x7f0000000000)=ANY=[@ANYBLOB='b 75:*\tmm'], 0xa) socketpair(0x1e, 0x4, 0x9, &(0x7f0000000000)) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000000), 0x40) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)}], 0x1}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x1}, 0x28) 1.467615924s ago: executing program 4 (id=4867): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x81) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000007d00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f00000006c0), 0x0}, 0x20) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b67d25a806f8c6394f96724fc60040f0300470000000535", 0x1e}], 0x1}, 0x0) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x1001a8, 0x0, 0x0, 0x4, 0x0, 0xffff0000, 0x9, 0x0, 0xffffbffe, 0x0, 0xfffffffffffffff1}, 0x0, 0x20000000000, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0x9, 0x4022, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x54b, 0x5, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) r4 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r4, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x14, 0x48, &(0x7f0000000f00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r5) r6 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r6, &(0x7f0000000400)=ANY=[@ANYBLOB="33fe00005e00", @ANYRES64, @ANYRESHEX], 0xfe33) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f1, &(0x7f0000000080)) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000007c0)="0e77", 0x2}], 0x1}, 0x4050003) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0xb, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socket$kcm(0x10, 0x2, 0x10) 470.385688ms ago: executing program 1 (id=4868): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd72, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x15, 0x5, 0x0, &(0x7f0000000500)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x18, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1ff}, {}, {}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f00000002c0)=[{0x4, 0x3, 0xb, 0x6}, {0x5, 0x2, 0x7, 0x8}, {0x1, 0x2, 0x6, 0xa}], 0x10, 0x7}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000580)={@cgroup, 0x2e, 0x1, 0x7, 0x0, 0x0, 0x0, &(0x7f0000000400)=[0x0, 0x0], 0x0, &(0x7f0000000540)=[0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x58, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000100)={@ifindex=r2, r0, 0xd117700904e4098a, 0x1, r0, @void, @value, @void, @void, r1}, 0x20) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x10000000000, 0x2003, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3a}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%\xf8\xff\xff\xff\xff\xff\xff\xff=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r3) 440.497669ms ago: executing program 2 (id=4869): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)='u', 0x1}], 0x1}, 0x4040001) recvmsg$unix(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000b80)=""/161, 0xa1}], 0x1}, 0x4003) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x4, 0x7, 0xfd, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x80000, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x800}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x114905, 0x4, 0xfffffffc, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x2) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xe, 0x2, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x56d}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006067c09e8fe55a10a0015400500142603600e120800060000001001a8001600a40001", 0x37}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000), 0x8) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000880)={0x4, &(0x7f0000000840)=[{0x5, 0x1a, 0x0, 0x6}, {0x6, 0x2, 0x4, 0xb33}, {0x7f, 0x6, 0x0, 0x5}, {0x3, 0x5, 0x1, 0xfffffff8}]}) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d006a10000000e8fe55a118001500060014b9c3600e1209000a0044000000a80016000a", 0x35}], 0x1}, 0x4) ioctl$PERF_EVENT_IOC_QUERY_BPF(r4, 0xc008240a, &(0x7f0000000040)=ANY=[@ANYBLOB="0300000000008100000000000003ca65ebe7cac4caf666340465e04e7e602c8d1915645551a9c100000000000000000000000000000073861a39089c"]) socket$kcm(0x2a, 0x2, 0x0) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(r6, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r7], 0x12) 379.12431ms ago: executing program 4 (id=4870): r0 = socket$kcm(0x10, 0x400000002, 0x0) recvmsg$kcm(r0, &(0x7f0000002440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002380)=""/169, 0xa9}, 0x40) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x10, 0x0, 0x4, 0x6, 0x0, 0xfffffffe, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610408000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1c0000001e007f10", 0x8}, {0x0}], 0x2}, 0x4000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r2) sendmsg$kcm(r0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) close(0x3) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x85, 0x1, 0x0, 0x0, 0x0, 0x2, 0x20022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x25}, 0x0, 0x0, 0x0, 0x9, 0xd, 0xd, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg(r2, &(0x7f0000000780)={&(0x7f00000001c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000600)=""/186, 0xba}], 0x1, &(0x7f0000000700)=""/82, 0x52}, 0x10022) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="b49f9cfa5bc2974bf91700", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000500)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af3653c001ac00800020007000200060001c00364683b9dad7aa21240d69a6a818cf6c551ae60fc91b169edb1b175732b9f597fe3b6c5a3d77cc766307de2", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000000) 175.401595ms ago: executing program 2 (id=4871): r0 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6c69f68dc1cf3e78, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r3 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 174.344335ms ago: executing program 1 (id=4872): perf_event_open(&(0x7f0000000c80)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x10000, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)}], 0x1, 0x0, 0x0, 0x7400}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001180)=[{&(0x7f00000000c0)="1400000027000bff001b052900000000000000", 0x13}], 0x1}, 0x4080) socket$kcm(0x10, 0x2, 0x4) r3 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r3, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) bpf$PROG_LOAD(0x5, 0x0, 0xfd69) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x125e43b43359a16, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="120000000c00000004e0ffffb37c0000000000c4da7ba0dd2767cc7a00", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000300000200"/28], 0x50) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x0, 0x0}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a8001600a400014020000b00ffffff7fb94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000140)=r6, 0x4) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1e01b9dc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000440)="a6", 0xffffff58}], 0x1}, 0x40001) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0500000004000000050000007c00000014000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00f393f0ffffffffffffff000000000700000000"], 0x50) 77.377438ms ago: executing program 4 (id=4873): perf_event_open(&(0x7f0000000c80)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x10000, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)}], 0x1, 0x0, 0x0, 0x7400}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001180)=[{&(0x7f00000000c0)="1400000027000bff001b052900000000000000", 0x13}], 0x1}, 0x4080) socket$kcm(0x10, 0x2, 0x4) r3 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r3, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) bpf$PROG_LOAD(0x5, 0x0, 0xfd69) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c9f4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75055df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83766b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b556381768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225c380fac12f8205d182f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42ddd5f393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05bea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d96ee1b84bb64b14aebc6b5194c55dd6890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b07838a3ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8dc0d472672286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8455029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a82a6ef09d0ed9829dec16ab67a4f59a504e09f55ab82bbd405087a17a229a149c53ee9145500db213cb36489a10957739e481a756e65bde579bbbfb404213f661eeaaffacbcfbfd60b1a715c366da2b37ac7e9e3033f8ec04db1c2412e02ccd0617d9fb646c4897750d068c936c3558a94b05d7c65c0d458c0d70d0aa864bc1e324d3f69b1b4061627da875a4b5c2668ab0990623fe6f3b54cd1c79da4baf256f88750c18486330589473e267fa44e220cf40db662b570c2a2fbba9a34a3dd7bbd8368fe506daa62b45797d4b397905a69e58eb436c08cc78963197adb1b16ad83a1a9b420e74c6bcdf1ed0b306141a83bf1268e954ad069257fbfaa1a7ea582badc1a7f2a5b0965f3535872d85c0bc3a233a3ea85df6a8ed76f0f803d54b7bef77d8ea71621f8a78dd17c3b58c5c7476ed6191acbb949e77f7cac81c543f7751e5e1000"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x125e43b43359a16, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="120000000c00000004e0ffffb37c0000000000c4da7ba0dd2767cc7a00", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000300000200"/28], 0x50) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x0, 0x0}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a8001600a400014020000b00ffffff7fb94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000140)=r6, 0x4) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1e01b9dc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000440)="a6", 0xffffff58}], 0x1}, 0x40001) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0500000004000000050000007c00000014000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00f393f0ffffffffffffff000000000700000000"], 0x50) 0s ago: executing program 2 (id=4874): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1, 0xc, &(0x7f00000004c0)=ANY=[@ANYRESHEX=r0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=@bloom_filter={0x1e, 0x19ea, 0xfffffff7, 0x81, 0x10400, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x2, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x2, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000020000000000000db09880bffff0000186a00000000000000000000020000003528f0f7ffffffff9500244800000000"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x9b, &(0x7f0000000840)=""/155, 0x41100, 0x40, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000a00)={0x0, 0xb, 0x62d07282, 0x6ba1}, 0x10, 0x0, r1, 0x0, &(0x7f0000000dc0)=[r2], &(0x7f0000000e40), 0x10, 0xebab}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={r3, 0x58, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xf, 0x0, 0x2, 0x6, 0x0, 0x1, 0x9, '\x00', r4, 0xffffffffffffffff, 0x4, 0x2, 0x2}, 0x50) write$cgroup_devices(r3, &(0x7f00000005c0)=ANY=[], 0xfffffeff) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x7, 0xc, 0x0, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xc}, 0x0, 0x400000, 0x3, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r5) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x1000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) r7 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000e00)="39000000140081ae00002c000500015601618575e285af01800000000d1300883795c04a31ba377a1b2cc37fffffffffffffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x2000c814) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000000c0)='cpu<-0||!') bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) kernel console output (not intermixed with test programs): ibute type 10 has an invalid length. [ 679.375136][T16505] netlink: 140 bytes leftover after parsing attributes in process `syz.2.3767'. [ 679.464029][T16504] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3766'. [ 679.514216][T16504] A link change request failed with some changes committed already. Interface 26±ÿ may have been left with an inconsistent configuration, please check. [ 679.781621][T16513] netlink: 'syz.3.3769': attribute type 10 has an invalid length. [ 679.828253][T16513] hsr0: entered promiscuous mode [ 679.897117][T16513] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 679.981896][T16513] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 680.066890][T16513] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 680.126702][T16513] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 682.872605][T16524] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.3774'. [ 683.075710][T16535] netlink: 112 bytes leftover after parsing attributes in process `syz.3.3778'. [ 683.089735][T16535] netlink: 'syz.3.3778': attribute type 10 has an invalid length. [ 683.130472][T16535] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3778'. [ 683.311612][T16542] netlink: 'syz.2.3780': attribute type 10 has an invalid length. [ 683.339277][ T5083] Bluetooth: hci2: unexpected event for opcode 0x00c9 [ 683.609475][T16549] __nla_validate_parse: 3 callbacks suppressed [ 683.609493][T16549] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3783'. [ 683.650966][T16549] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 683.820407][T16552] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.3785'. [ 683.915065][T16554] netlink: 'syz.0.3786': attribute type 21 has an invalid length. [ 683.923447][T16554] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3786'. [ 684.375413][T16559] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3788'. [ 684.391084][T16559] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3788'. [ 684.401999][T16559] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3788'. [ 684.425112][T16560] netlink: 112 bytes leftover after parsing attributes in process `syz.2.3789'. [ 684.445816][T16559] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3788'. [ 684.477599][T16560] netlink: 'syz.2.3789': attribute type 10 has an invalid length. [ 684.501476][T16560] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3789'. [ 684.548544][T16564] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3791'. [ 684.724460][T16568] netlink: 'syz.2.3801': attribute type 10 has an invalid length. [ 684.987920][T16579] netlink: 'syz.1.3797': attribute type 10 has an invalid length. [ 685.027521][ T5083] Bluetooth: hci1: unexpected event for opcode 0x00c9 [ 685.813395][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.821162][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.930007][T16601] netlink: 'syz.3.3806': attribute type 10 has an invalid length. [ 686.235922][T16609] syzkaller0: entered promiscuous mode [ 686.242836][T16609] syzkaller0: entered allmulticast mode [ 686.276597][T16609] syzkaller0: tun_net_xmit 1280 [ 686.296339][T16609] syzkaller0: create flow: hash 4016561987 index 1 [ 686.478780][T16616] netlink: 'syz.1.3813': attribute type 3 has an invalid length. [ 686.504384][T16607] syzkaller0: delete flow: hash 4016561987 index 1 [ 686.753340][ T5083] Bluetooth: hci4: unexpected event for opcode 0x00c9 [ 688.212105][T16621] netlink: 'syz.3.3815': attribute type 10 has an invalid length. [ 688.389749][T16632] netlink: 'syz.3.3818': attribute type 10 has an invalid length. [ 688.859133][T16655] netlink: 'syz.1.3826': attribute type 10 has an invalid length. [ 688.886608][T16655] __nla_validate_parse: 15 callbacks suppressed [ 688.886625][T16655] netlink: 140 bytes leftover after parsing attributes in process `syz.1.3826'. [ 688.973425][T16660] netlink: 112 bytes leftover after parsing attributes in process `syz.3.3830'. [ 688.992506][T16660] netlink: 'syz.3.3830': attribute type 10 has an invalid length. [ 689.001850][T16660] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3830'. [ 689.101764][T16654] FAULT_INJECTION: forcing a failure. [ 689.101764][T16654] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 689.114996][T16654] CPU: 1 PID: 16654 Comm: syz.2.3828 Not tainted syzkaller #0 [ 689.122500][T16654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 689.132586][T16654] Call Trace: [ 689.135912][T16654] [ 689.138869][T16654] dump_stack_lvl+0x18c/0x250 [ 689.143590][T16654] ? show_regs_print_info+0x20/0x20 [ 689.148824][T16654] ? load_image+0x420/0x420 [ 689.153382][T16654] ? __might_fault+0xaa/0x120 [ 689.158085][T16654] ? __lock_acquire+0x7d80/0x7d80 [ 689.163138][T16654] should_fail_ex+0x394/0x4c0 [ 689.167863][T16654] fpu__restore_sig+0x221/0x1210 [ 689.172863][T16654] ? copy_fpstate_to_sigframe+0xce0/0xce0 [ 689.178632][T16654] ? __lock_acquire+0x7d80/0x7d80 [ 689.183688][T16654] ? __might_fault+0xc6/0x120 [ 689.188418][T16654] ? __might_fault+0xaa/0x120 [ 689.193143][T16654] __ia32_sys_rt_sigreturn+0x6d1/0x850 [ 689.198677][T16654] ? x64_setup_rt_frame+0xc30/0xc30 [ 689.203928][T16654] ? lock_chain_count+0x20/0x20 [ 689.208804][T16654] ? lockdep_hardirqs_on+0x98/0x150 [ 689.214031][T16654] do_syscall_64+0x55/0xb0 [ 689.218488][T16654] ? clear_bhb_loop+0x40/0x90 [ 689.223190][T16654] ? clear_bhb_loop+0x40/0x90 [ 689.227981][T16654] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 689.233918][T16654] RIP: 0033:0x7fd1ca79de99 [ 689.238360][T16654] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 689.258015][T16654] RSP: 002b:00007fd1cb653028 EFLAGS: 00000246 [ 689.264112][T16654] RAX: fffffffffffffffc RBX: 00007fd1caa25fa0 RCX: 00007fd1ca79de99 [ 689.272115][T16654] RDX: 0000000040000100 RSI: 0000200000000200 RDI: 0000000000000003 [ 689.280110][T16654] RBP: 00007fd1cb653090 R08: 0000000000000000 R09: 0000000000000000 [ 689.288096][T16654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 689.296084][T16654] R13: 00007fd1caa26038 R14: 00007fd1caa25fa0 R15: 00007ffdfbcabc48 [ 689.304165][T16654] [ 689.460025][T16670] netlink: 'syz.2.3834': attribute type 2 has an invalid length. [ 689.467892][T16670] netlink: 'syz.2.3834': attribute type 1 has an invalid length. [ 689.475621][T16670] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3834'. [ 689.503189][T16671] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3836'. [ 689.799496][T16683] netlink: 112 bytes leftover after parsing attributes in process `syz.3.3841'. [ 689.817144][T16683] netlink: 'syz.3.3841': attribute type 10 has an invalid length. [ 689.825191][T16683] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3841'. [ 690.057751][T16693] netlink: 'syz.1.3842': attribute type 10 has an invalid length. [ 690.065771][T16693] hsr0: entered promiscuous mode [ 690.075960][T16693] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 690.440580][T16711] netlink: 'syz.3.3848': attribute type 10 has an invalid length. [ 690.459476][T16711] netlink: 140 bytes leftover after parsing attributes in process `syz.3.3848'. [ 691.101618][T16721] netlink: 112 bytes leftover after parsing attributes in process `syz.1.3854'. [ 691.122725][T16721] netlink: 'syz.1.3854': attribute type 10 has an invalid length. [ 691.130899][T16721] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3854'. [ 691.560839][T16736] FAULT_INJECTION: forcing a failure. [ 691.560839][T16736] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 691.607620][T16736] CPU: 1 PID: 16736 Comm: syz.0.3858 Not tainted syzkaller #0 [ 691.615165][T16736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 691.625273][T16736] Call Trace: [ 691.628637][T16736] [ 691.631604][T16736] dump_stack_lvl+0x18c/0x250 [ 691.636335][T16736] ? show_regs_print_info+0x20/0x20 [ 691.641581][T16736] ? load_image+0x420/0x420 [ 691.646132][T16736] ? __might_fault+0xaa/0x120 [ 691.650839][T16736] ? __lock_acquire+0x7d80/0x7d80 [ 691.655906][T16736] should_fail_ex+0x394/0x4c0 [ 691.660625][T16736] _copy_from_user+0x2f/0xe0 [ 691.665284][T16736] ___sys_sendmsg+0x1c7/0x360 [ 691.670014][T16736] ? get_pid_task+0x20/0x1e0 [ 691.674663][T16736] ? __sys_sendmsg+0x2b0/0x2b0 [ 691.679499][T16736] ? __lock_acquire+0x7d80/0x7d80 [ 691.684590][T16736] __se_sys_sendmsg+0x1d0/0x2c0 [ 691.688063][T16739] netlink: 'syz.2.3863': attribute type 10 has an invalid length. [ 691.689513][T16736] ? __x64_sys_sendmsg+0x80/0x80 [ 691.702382][T16736] ? lockdep_hardirqs_on+0x98/0x150 [ 691.707619][T16736] do_syscall_64+0x55/0xb0 [ 691.712068][T16736] ? clear_bhb_loop+0x40/0x90 [ 691.716766][T16736] ? clear_bhb_loop+0x40/0x90 [ 691.721459][T16736] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 691.727384][T16736] RIP: 0033:0x7f315d59de99 [ 691.731822][T16736] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 691.751457][T16736] RSP: 002b:00007f315e393028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 691.759899][T16736] RAX: ffffffffffffffda RBX: 00007f315d826090 RCX: 00007f315d59de99 [ 691.767884][T16736] RDX: 0000000000000000 RSI: 0000200000002080 RDI: 0000000000000005 [ 691.775870][T16736] RBP: 00007f315e393090 R08: 0000000000000000 R09: 0000000000000000 [ 691.783873][T16736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 691.791955][T16736] R13: 00007f315d826128 R14: 00007f315d826090 R15: 00007ffec99cc428 [ 691.799967][T16736] [ 691.989971][T16752] netlink: 'syz.2.3864': attribute type 10 has an invalid length. [ 692.401109][T16764] netlink: 'syz.0.3872': attribute type 10 has an invalid length. [ 693.276579][T16793] FAULT_INJECTION: forcing a failure. [ 693.276579][T16793] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 693.290659][T16793] CPU: 1 PID: 16793 Comm: syz.3.3886 Not tainted syzkaller #0 [ 693.298213][T16793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 693.308380][T16793] Call Trace: [ 693.311848][T16793] [ 693.314846][T16793] dump_stack_lvl+0x18c/0x250 [ 693.319617][T16793] ? show_regs_print_info+0x20/0x20 [ 693.324896][T16793] ? load_image+0x420/0x420 [ 693.329493][T16793] ? __lock_acquire+0x7d80/0x7d80 [ 693.334622][T16793] ? snprintf+0xe9/0x140 [ 693.338945][T16793] should_fail_ex+0x394/0x4c0 [ 693.343739][T16793] _copy_to_user+0x2f/0xa0 [ 693.348255][T16793] simple_read_from_buffer+0xe7/0x150 [ 693.353735][T16793] proc_fail_nth_read+0x1e8/0x260 [ 693.358870][T16793] ? proc_fault_inject_write+0x360/0x360 [ 693.364619][T16793] ? fsnotify_perm+0x271/0x5e0 [ 693.369502][T16793] ? proc_fault_inject_write+0x360/0x360 [ 693.375221][T16793] vfs_read+0x298/0x990 [ 693.379478][T16793] ? kernel_read+0x1e0/0x1e0 [ 693.384167][T16793] ? __fget_files+0x28/0x460 [ 693.388843][T16793] ? __fget_files+0x3fc/0x460 [ 693.393636][T16793] ? __fdget_pos+0x2a3/0x330 [ 693.398307][T16793] ? ksys_read+0x74/0x260 [ 693.402755][T16793] ksys_read+0x151/0x260 [ 693.407121][T16793] ? vfs_write+0x9a0/0x9a0 [ 693.411643][T16793] ? lockdep_hardirqs_on+0x98/0x150 [ 693.416971][T16793] do_syscall_64+0x55/0xb0 [ 693.421470][T16793] ? clear_bhb_loop+0x40/0x90 [ 693.426247][T16793] ? clear_bhb_loop+0x40/0x90 [ 693.431007][T16793] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 693.436997][T16793] RIP: 0033:0x7ff25d35e6ce [ 693.441472][T16793] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 693.461146][T16793] RSP: 002b:00007ff25e21ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 693.469652][T16793] RAX: ffffffffffffffda RBX: 00007ff25e2206c0 RCX: 00007ff25d35e6ce [ 693.477902][T16793] RDX: 000000000000000f RSI: 00007ff25e2200a0 RDI: 0000000000000006 [ 693.486025][T16793] RBP: 00007ff25e220090 R08: 0000000000000000 R09: 0000000000000000 [ 693.494076][T16793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 693.502118][T16793] R13: 00007ff25d626038 R14: 00007ff25d625fa0 R15: 00007ffd35890bb8 [ 693.510236][T16793] [ 693.689767][T16796] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 693.756585][T16796] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 693.796622][T16796] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 693.893811][T16796] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 693.924258][T16801] __nla_validate_parse: 12 callbacks suppressed [ 693.924277][T16801] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3888'. [ 693.947966][T16802] netlink: 140 bytes leftover after parsing attributes in process `syz.2.3887'. [ 693.979543][T16803] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3888'. [ 696.709376][T16815] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3892'. [ 696.746497][T16815] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3892'. [ 696.785900][T16815] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3892'. [ 696.824865][T16815] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3892'. [ 696.895868][T16815] FAULT_INJECTION: forcing a failure. [ 696.895868][T16815] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 696.912592][T16815] CPU: 0 PID: 16815 Comm: syz.2.3892 Not tainted syzkaller #0 [ 696.920120][T16815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 696.930190][T16815] Call Trace: [ 696.933489][T16815] [ 696.936460][T16815] dump_stack_lvl+0x18c/0x250 [ 696.941183][T16815] ? show_regs_print_info+0x20/0x20 [ 696.946415][T16815] ? load_image+0x420/0x420 [ 696.950947][T16815] ? __lock_acquire+0x7d80/0x7d80 [ 696.955994][T16815] ? snprintf+0xe9/0x140 [ 696.960264][T16815] should_fail_ex+0x394/0x4c0 [ 696.965062][T16815] _copy_to_user+0x2f/0xa0 [ 696.969507][T16815] simple_read_from_buffer+0xe7/0x150 [ 696.974908][T16815] proc_fail_nth_read+0x1e8/0x260 [ 696.979957][T16815] ? proc_fault_inject_write+0x360/0x360 [ 696.985620][T16815] ? fsnotify_perm+0x271/0x5e0 [ 696.990406][T16815] ? proc_fault_inject_write+0x360/0x360 [ 696.996079][T16815] vfs_read+0x298/0x990 [ 697.000363][T16815] ? kernel_read+0x1e0/0x1e0 [ 697.004981][T16815] ? __fget_files+0x28/0x460 [ 697.009600][T16815] ? __fget_files+0x3fc/0x460 [ 697.014331][T16815] ? __fdget_pos+0x2a3/0x330 [ 697.018948][T16815] ? ksys_read+0x74/0x260 [ 697.023339][T16815] ksys_read+0x151/0x260 [ 697.027629][T16815] ? vfs_write+0x9a0/0x9a0 [ 697.032104][T16815] ? lockdep_hardirqs_on+0x98/0x150 [ 697.037343][T16815] do_syscall_64+0x55/0xb0 [ 697.041789][T16815] ? clear_bhb_loop+0x40/0x90 [ 697.046487][T16815] ? clear_bhb_loop+0x40/0x90 [ 697.051176][T16815] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 697.057092][T16815] RIP: 0033:0x7fd1ca75e6ce [ 697.061523][T16815] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 697.081255][T16815] RSP: 002b:00007fd1cb652fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 697.089707][T16815] RAX: ffffffffffffffda RBX: 00007fd1cb6536c0 RCX: 00007fd1ca75e6ce [ 697.097709][T16815] RDX: 000000000000000f RSI: 00007fd1cb6530a0 RDI: 0000000000000004 [ 697.105714][T16815] RBP: 00007fd1cb653090 R08: 0000000000000000 R09: 0000000000000000 [ 697.113708][T16815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 697.121792][T16815] R13: 00007fd1caa26038 R14: 00007fd1caa25fa0 R15: 00007ffdfbcabc48 [ 697.129902][T16815] [ 697.150856][T16819] netlink: 112 bytes leftover after parsing attributes in process `syz.3.3893'. [ 697.171697][T16819] validate_nla: 4 callbacks suppressed [ 697.171715][T16819] netlink: 'syz.3.3893': attribute type 10 has an invalid length. [ 697.190115][T16819] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3893'. [ 697.838801][ T5083] Bluetooth: hci1: unexpected event 0x2c length: 151 > 17 [ 698.281142][T16846] netlink: 'syz.1.3900': attribute type 29 has an invalid length. [ 698.317255][T16846] netlink: 'syz.1.3900': attribute type 29 has an invalid length. [ 698.327642][T16847] netlink: 'syz.1.3900': attribute type 29 has an invalid length. [ 698.337839][T16847] netlink: 'syz.1.3900': attribute type 29 has an invalid length. [ 700.060838][T16852] netlink: 'syz.1.3900': attribute type 29 has an invalid length. [ 700.072437][T16853] netlink: 112 bytes leftover after parsing attributes in process `syz.2.3903'. [ 700.082365][T16857] netlink: 'syz.2.3903': attribute type 10 has an invalid length. [ 700.098767][T16857] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3903'. [ 700.335512][T16867] netlink: 'syz.3.3908': attribute type 10 has an invalid length. [ 700.396171][T16867] netlink: 55 bytes leftover after parsing attributes in process `syz.3.3908'. [ 700.712862][T16882] netlink: 112 bytes leftover after parsing attributes in process `syz.0.3913'. [ 700.771523][T16879] mac80211_hwsim hwsim25 wlan0: left promiscuous mode [ 700.793303][T16879] mac80211_hwsim hwsim25 wlan0: left allmulticast mode [ 700.830076][T16884] mac80211_hwsim hwsim25 wlan0: entered promiscuous mode [ 700.838793][T16884] mac80211_hwsim hwsim25 wlan0: entered allmulticast mode [ 700.875224][T16882] netlink: 'syz.0.3913': attribute type 10 has an invalid length. [ 700.884679][T16882] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3913'. [ 701.089317][T16891] netlink: 'syz.0.3915': attribute type 10 has an invalid length. [ 701.114511][T16891] nla_validate_range_unsigned: 95 callbacks suppressed [ 701.114527][T16891] netlink: 'syz.0.3915': attribute type 11 has an invalid length. [ 701.164794][T16891] netlink: 'syz.0.3915': attribute type 11 has an invalid length. [ 701.184393][T16891] netlink: 'syz.0.3915': attribute type 11 has an invalid length. [ 701.203488][T16891] netlink: 'syz.0.3915': attribute type 11 has an invalid length. [ 701.226074][T16891] netlink: 'syz.0.3915': attribute type 11 has an invalid length. [ 701.258404][T16891] netlink: 'syz.0.3915': attribute type 11 has an invalid length. [ 701.288448][T16891] netlink: 'syz.0.3915': attribute type 11 has an invalid length. [ 701.333165][T16891] netlink: 'syz.0.3915': attribute type 11 has an invalid length. [ 701.352141][T16891] netlink: 'syz.0.3915': attribute type 11 has an invalid length. [ 701.364701][T16891] netlink: 'syz.0.3915': attribute type 11 has an invalid length. [ 701.385112][T16891] netlink: 208544 bytes leftover after parsing attributes in process `syz.0.3915'. [ 701.585715][T16897] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3917'. [ 704.150211][T16913] netlink: 112 bytes leftover after parsing attributes in process `syz.0.3923'. [ 704.165782][T16913] validate_nla: 2 callbacks suppressed [ 704.165799][T16913] netlink: 'syz.0.3923': attribute type 10 has an invalid length. [ 704.180814][T16913] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3923'. [ 704.353618][T16918] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3926'. [ 704.371910][T16918] openvswitch: netlink: Tunnel attr 0 has unexpected len 1788 expected 8 [ 704.515338][T16923] mac80211_hwsim hwsim24 wlan1: entered allmulticast mode [ 704.605491][T16920] mac80211_hwsim hwsim27 wlan0: left promiscuous mode [ 704.616678][T16920] mac80211_hwsim hwsim27 wlan0: left allmulticast mode [ 704.697150][T16920] mac80211_hwsim hwsim27 wlan0: entered promiscuous mode [ 704.747620][T16920] mac80211_hwsim hwsim27 wlan0: entered allmulticast mode [ 704.803373][T16928] netdevsim netdevsim0 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 707.277711][T16945] __nla_validate_parse: 2 callbacks suppressed [ 707.277728][T16945] netlink: 112 bytes leftover after parsing attributes in process `syz.0.3935'. [ 707.341882][T16945] netlink: 'syz.0.3935': attribute type 10 has an invalid length. [ 707.359738][T16945] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3935'. [ 707.378099][T16951] raw_sendmsg: syz.2.3938 forgot to set AF_INET. Fix it! [ 707.407953][T16951] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3938'. [ 707.615938][T16958] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3940'. [ 707.626574][T16958] openvswitch: netlink: Tunnel attr 0 has unexpected len 1788 expected 8 [ 707.727681][T16958] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3940'. [ 707.845797][ T5083] Bluetooth: hci4: unexpected subevent 0x0e length: 150 > 15 [ 708.875124][T16978] netlink: 112 bytes leftover after parsing attributes in process `syz.3.3948'. [ 708.894491][T16978] netlink: 'syz.3.3948': attribute type 10 has an invalid length. [ 708.904814][T16978] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3948'. [ 709.231394][T16983] mac80211_hwsim hwsim30 wlan0: left promiscuous mode [ 709.249768][T16983] mac80211_hwsim hwsim30 wlan0: left allmulticast mode [ 709.277897][T16994] mac80211_hwsim hwsim30 wlan0: entered promiscuous mode [ 709.285293][T16994] mac80211_hwsim hwsim30 wlan0: entered allmulticast mode [ 712.148984][T17011] netlink: 112 bytes leftover after parsing attributes in process `syz.0.3960'. [ 712.162339][T17011] netlink: 'syz.0.3960': attribute type 10 has an invalid length. [ 712.170526][T17011] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3960'. [ 712.268715][T17016] FAULT_INJECTION: forcing a failure. [ 712.268715][T17016] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 712.303560][T17016] CPU: 1 PID: 17016 Comm: syz.3.3962 Not tainted syzkaller #0 [ 712.311101][T17016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 712.321196][T17016] Call Trace: [ 712.324517][T17016] [ 712.327492][T17016] dump_stack_lvl+0x18c/0x250 [ 712.332239][T17016] ? show_regs_print_info+0x20/0x20 [ 712.337498][T17016] ? load_image+0x420/0x420 [ 712.342049][T17016] ? __might_fault+0xaa/0x120 [ 712.346771][T17016] ? __lock_acquire+0x7d80/0x7d80 [ 712.351831][T17016] should_fail_ex+0x394/0x4c0 [ 712.356565][T17016] _copy_from_user+0x2f/0xe0 [ 712.361187][T17016] kstrtouint_from_user+0xde/0x170 [ 712.366338][T17016] ? kstrtol_from_user+0x190/0x190 [ 712.371518][T17016] proc_fail_nth_write+0x8f/0x250 [ 712.376585][T17016] ? proc_fail_nth_read+0x260/0x260 [ 712.381830][T17016] ? proc_fail_nth_read+0x260/0x260 [ 712.387090][T17016] vfs_write+0x299/0x9a0 [ 712.391385][T17016] ? file_end_write+0x250/0x250 [ 712.396297][T17016] ? __fget_files+0x28/0x460 [ 712.400956][T17016] ? __fget_files+0x3fc/0x460 [ 712.405655][T17016] ? __fdget_pos+0x2a3/0x330 [ 712.410267][T17016] ? ksys_write+0x74/0x260 [ 712.414703][T17016] ksys_write+0x151/0x260 [ 712.419053][T17016] ? __ia32_sys_read+0x90/0x90 [ 712.423844][T17016] ? lockdep_hardirqs_on+0x98/0x150 [ 712.429087][T17016] do_syscall_64+0x55/0xb0 [ 712.433540][T17016] ? clear_bhb_loop+0x40/0x90 [ 712.438237][T17016] ? clear_bhb_loop+0x40/0x90 [ 712.442933][T17016] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 712.448854][T17016] RIP: 0033:0x7ff25d35e6ce [ 712.453291][T17016] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 712.472917][T17016] RSP: 002b:00007ff25e21ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 712.481358][T17016] RAX: ffffffffffffffda RBX: 00007ff25e2206c0 RCX: 00007ff25d35e6ce [ 712.489347][T17016] RDX: 0000000000000001 RSI: 00007ff25e2200a0 RDI: 0000000000000004 [ 712.497365][T17016] RBP: 00007ff25e220090 R08: 0000000000000000 R09: 0000000000000000 [ 712.505352][T17016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 712.513340][T17016] R13: 00007ff25d626038 R14: 00007ff25d625fa0 R15: 00007ffd35890bb8 [ 712.521344][T17016] [ 712.717588][T17030] netlink: 10 bytes leftover after parsing attributes in process `syz.1.3968'. [ 712.827819][T17032] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3970'. [ 712.869842][T17036] netlink: 112 bytes leftover after parsing attributes in process `syz.1.3972'. [ 712.883596][T17036] netlink: 'syz.1.3972': attribute type 10 has an invalid length. [ 712.891719][T17036] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3972'. [ 713.172541][T17049] FAULT_INJECTION: forcing a failure. [ 713.172541][T17049] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 713.190022][T17049] CPU: 0 PID: 17049 Comm: syz.1.3979 Not tainted syzkaller #0 [ 713.197624][T17049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 713.207803][T17049] Call Trace: [ 713.211152][T17049] [ 713.214117][T17049] dump_stack_lvl+0x18c/0x250 [ 713.218849][T17049] ? show_regs_print_info+0x20/0x20 [ 713.224107][T17049] ? load_image+0x420/0x420 [ 713.228665][T17049] ? __might_fault+0xaa/0x120 [ 713.233391][T17049] ? __lock_acquire+0x7d80/0x7d80 [ 713.238485][T17049] should_fail_ex+0x394/0x4c0 [ 713.243375][T17049] _copy_from_user+0x2f/0xe0 [ 713.247989][T17049] __sys_bpf+0x23e/0x890 [ 713.252274][T17049] ? bpf_link_show_fdinfo+0x390/0x390 [ 713.257667][T17049] ? lock_chain_count+0x20/0x20 [ 713.262545][T17049] __x64_sys_bpf+0x7c/0x90 [ 713.266993][T17049] do_syscall_64+0x55/0xb0 [ 713.271433][T17049] ? clear_bhb_loop+0x40/0x90 [ 713.276122][T17049] ? clear_bhb_loop+0x40/0x90 [ 713.280816][T17049] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 713.286733][T17049] RIP: 0033:0x7f521f59de99 [ 713.291159][T17049] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 713.310790][T17049] RSP: 002b:00007f522042f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 713.319228][T17049] RAX: ffffffffffffffda RBX: 00007f521f825fa0 RCX: 00007f521f59de99 [ 713.327245][T17049] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 713.335235][T17049] RBP: 00007f522042f090 R08: 0000000000000000 R09: 0000000000000000 [ 713.343221][T17049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 713.351380][T17049] R13: 00007f521f826038 R14: 00007f521f825fa0 R15: 00007ffe0dd32e48 [ 713.359379][T17049] [ 713.428846][T17054] syzkaller0: entered promiscuous mode [ 713.439537][T17054] syzkaller0: entered allmulticast mode [ 713.449356][T17054] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 65487 [ 713.615498][T17057] cgroup: fork rejected by pids controller in /syz1 [ 713.794762][T17163] netlink: 112 bytes leftover after parsing attributes in process `syz.2.3984'. [ 713.840414][T17163] netlink: 'syz.2.3984': attribute type 10 has an invalid length. [ 713.850453][T17163] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3984'. [ 714.007660][T17168] FAULT_INJECTION: forcing a failure. [ 714.007660][T17168] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 714.068936][T17168] CPU: 0 PID: 17168 Comm: syz.0.3987 Not tainted syzkaller #0 [ 714.076508][T17168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 714.086596][T17168] Call Trace: [ 714.089910][T17168] [ 714.092883][T17168] dump_stack_lvl+0x18c/0x250 [ 714.097656][T17168] ? show_regs_print_info+0x20/0x20 [ 714.102901][T17168] ? load_image+0x420/0x420 [ 714.107459][T17168] ? __might_fault+0xaa/0x120 [ 714.112187][T17168] ? __lock_acquire+0x7d80/0x7d80 [ 714.117256][T17168] ? bpf_get_current_cgroup_id+0x1d/0x340 [ 714.123025][T17168] should_fail_ex+0x394/0x4c0 [ 714.127758][T17168] _copy_to_user+0x2f/0xa0 [ 714.132206][T17168] bpf_prog_test_run_syscall+0x33f/0x4b0 [ 714.137899][T17168] ? sock_gen_cookie+0x60/0x60 [ 714.142716][T17168] ? sock_gen_cookie+0x60/0x60 [ 714.147537][T17168] bpf_prog_test_run+0x31f/0x390 [ 714.152532][T17168] __sys_bpf+0x49d/0x890 [ 714.156826][T17168] ? bpf_link_show_fdinfo+0x390/0x390 [ 714.162274][T17168] ? lock_chain_count+0x20/0x20 [ 714.167171][T17168] __x64_sys_bpf+0x7c/0x90 [ 714.171705][T17168] do_syscall_64+0x55/0xb0 [ 714.176158][T17168] ? clear_bhb_loop+0x40/0x90 [ 714.180867][T17168] ? clear_bhb_loop+0x40/0x90 [ 714.185589][T17168] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 714.191564][T17168] RIP: 0033:0x7f315d59de99 [ 714.196010][T17168] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 714.215740][T17168] RSP: 002b:00007f315e3b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 714.224187][T17168] RAX: ffffffffffffffda RBX: 00007f315d825fa0 RCX: 00007f315d59de99 [ 714.232173][T17168] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 000000000000000a [ 714.240160][T17168] RBP: 00007f315e3b4090 R08: 0000000000000000 R09: 0000000000000000 [ 714.248143][T17168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 714.256141][T17168] R13: 00007f315d826038 R14: 00007f315d825fa0 R15: 00007ffec99cc428 [ 714.264158][T17168] [ 714.278829][T17164] delete_channel: no stack [ 714.392803][ T7730] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 715.012791][ T5780] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 715.021063][ T5780] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 715.042626][ T5780] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 715.053266][ T7730] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 715.074742][ T5780] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 715.091411][ T5780] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 715.099078][ T5780] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 715.252746][ T7730] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 715.312264][T17185] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3992'. [ 715.381840][ T7730] bond0: (slave netdevsim0): Releasing backup interface [ 715.394574][ T7730] netdevsim netdevsim1 netdevsim0 (unregistering): left promiscuous mode [ 715.409645][ T7730] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 715.714517][T17197] netlink: 112 bytes leftover after parsing attributes in process `syz.2.3996'. [ 715.728044][T17197] netlink: 'syz.2.3996': attribute type 10 has an invalid length. [ 715.736043][T17197] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3996'. [ 715.927837][ T7730] ip6gretap0 (unregistering): left allmulticast mode [ 715.934607][ T7730] ip6gretap0 (unregistering): left promiscuous mode [ 715.947156][ T7730] : port 1(ip6gretap0) entered disabled state [ 715.988067][T17180] chnl_net:caif_netlink_parms(): no params data found [ 716.112304][T17203] syzkaller0: entered promiscuous mode [ 716.131973][T17203] syzkaller0: entered allmulticast mode [ 716.190199][ T5083] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 716.282520][T17203] syzkaller0: mtu less than device minimum [ 716.449888][T17180] bridge0: port 1(bridge_slave_0) entered blocking state [ 716.458319][T17180] bridge0: port 1(bridge_slave_0) entered disabled state [ 716.466843][T17180] bridge_slave_0: entered allmulticast mode [ 716.474173][T17180] bridge_slave_0: entered promiscuous mode [ 716.504984][T17180] bridge0: port 2(bridge_slave_1) entered blocking state [ 716.519778][T17180] bridge0: port 2(bridge_slave_1) entered disabled state [ 716.532118][T17180] bridge_slave_1: entered allmulticast mode [ 716.552608][T17180] bridge_slave_1: entered promiscuous mode [ 716.731422][T17180] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 716.815495][T17180] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 717.019372][T17180] team0: Port device team_slave_0 added [ 717.094223][T17180] team0: Port device team_slave_1 added [ 717.101197][T17242] netlink: 112 bytes leftover after parsing attributes in process `syz.0.4006'. [ 717.156702][ T5083] Bluetooth: hci1: command tx timeout [ 717.185971][T17242] netlink: 'syz.0.4006': attribute type 10 has an invalid length. [ 717.300269][T17180] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 717.307722][T17180] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 717.345410][T17180] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 717.367557][T17248] netlink: 'syz.3.4009': attribute type 46 has an invalid length. [ 717.381614][T17180] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 717.389394][T17180] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 717.420147][T17180] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 717.511054][T17180] hsr_slave_0: entered promiscuous mode [ 717.520213][T17180] hsr_slave_1: entered promiscuous mode [ 717.532033][T17180] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 717.542108][T17180] Cannot create hsr debugfs directory [ 717.688565][ T7730] hsr_slave_0: left promiscuous mode [ 717.725192][ T7730] veth1_macvtap: left promiscuous mode [ 717.733183][ T7730] veth0_macvtap: left promiscuous mode [ 717.742422][ T7730] veth1_vlan: left promiscuous mode [ 717.752994][ T7730] veth0_vlan: left promiscuous mode [ 718.291049][ T5083] Bluetooth: hci2: command 0x0406 tx timeout [ 718.421089][ T7730] team_slave_1 (unregistering): left promiscuous mode [ 718.428181][ T7730] team_slave_1 (unregistering): left allmulticast mode [ 718.438683][ T7730] team0 (unregistering): Port device team_slave_1 removed [ 718.489826][ T7730] team_slave_0 (unregistering): left promiscuous mode [ 718.496734][ T7730] team_slave_0 (unregistering): left allmulticast mode [ 718.504659][ T7730] team0 (unregistering): Port device team_slave_0 removed [ 718.548017][ T7730] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 718.558906][ T7730] bond_slave_1 (unregistering): left promiscuous mode [ 718.599470][ T7730] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 718.610729][ T7730] bond_slave_0 (unregistering): left promiscuous mode [ 718.891405][ T7730] bond0 (unregistering): Released all slaves [ 719.236654][ T5083] Bluetooth: hci1: command tx timeout [ 719.601716][T17180] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 719.612969][T17180] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 719.629405][T17180] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 719.646864][T17180] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 719.764995][T17180] 8021q: adding VLAN 0 to HW filter on device bond0 [ 719.790559][T17180] 8021q: adding VLAN 0 to HW filter on device team0 [ 719.803811][ T7730] bridge0: port 1(bridge_slave_0) entered blocking state [ 719.811116][ T7730] bridge0: port 1(bridge_slave_0) entered forwarding state [ 719.842442][ T9384] bridge0: port 2(bridge_slave_1) entered blocking state [ 719.849637][ T9384] bridge0: port 2(bridge_slave_1) entered forwarding state [ 719.893091][T17180] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 719.905274][T17180] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 720.142635][T17180] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 720.213096][T17180] veth0_vlan: entered promiscuous mode [ 720.235500][T17180] veth1_vlan: entered promiscuous mode [ 720.297641][T17180] veth0_macvtap: entered promiscuous mode [ 720.318935][T17180] veth1_macvtap: entered promiscuous mode [ 720.344605][T17180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 720.356073][T17180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 720.370850][T17180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 720.384643][T17180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 720.399273][T17180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 720.412445][T17180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 720.431302][T17180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 720.442469][T17180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 720.459503][T17180] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 720.475717][T17180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 720.487736][T17180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 720.500605][T17180] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 720.523409][T17180] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 720.539208][T17180] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 720.548581][T17180] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 720.557650][T17180] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 720.666561][ T9384] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 720.674457][ T9384] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 720.726751][ T9384] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 720.734606][ T9384] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 721.328029][ T5083] Bluetooth: hci1: command tx timeout [ 721.957623][T17330] netlink: 'syz.0.4018': attribute type 10 has an invalid length. [ 721.965542][T17330] __nla_validate_parse: 1 callbacks suppressed [ 721.965555][T17330] netlink: 140 bytes leftover after parsing attributes in process `syz.0.4018'. [ 722.162263][ T5083] Bluetooth: hci0: unexpected event 0x0f length: 15 > 4 [ 722.162326][ T5083] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 722.283309][T17327] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4010'. [ 723.160419][T17357] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.4019'. [ 723.407168][ T5083] Bluetooth: hci1: command tx timeout [ 723.896805][T17382] netlink: 'syz.2.4024': attribute type 3 has an invalid length. [ 723.904682][T17382] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4024'. [ 724.098074][T17387] netlink: 'syz.3.4027': attribute type 10 has an invalid length. [ 724.118644][T17387] netlink: 140 bytes leftover after parsing attributes in process `syz.3.4027'. [ 724.186717][ T5083] Bluetooth: hci4: unexpected event 0x0f length: 15 > 4 [ 724.186779][ T5083] Bluetooth: hci4: unexpected event for opcode 0x0000 [ 724.472095][T17393] netlink: 'syz.2.4028': attribute type 10 has an invalid length. [ 724.492546][T17393] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4028'. [ 724.577889][T17395] netlink: 112 bytes leftover after parsing attributes in process `syz.0.4029'. [ 724.635371][T17395] netlink: 'syz.0.4029': attribute type 10 has an invalid length. [ 724.676365][T17395] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4029'. [ 725.078557][T17408] FAULT_INJECTION: forcing a failure. [ 725.078557][T17408] name failslab, interval 1, probability 0, space 0, times 0 [ 725.126411][T17408] CPU: 1 PID: 17408 Comm: syz.3.4033 Not tainted syzkaller #0 [ 725.133962][T17408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 725.144055][T17408] Call Trace: [ 725.147369][T17408] [ 725.150335][T17408] dump_stack_lvl+0x18c/0x250 [ 725.155093][T17408] ? show_regs_print_info+0x20/0x20 [ 725.160350][T17408] ? load_image+0x420/0x420 [ 725.164923][T17408] ? __lock_acquire+0x7d80/0x7d80 [ 725.170007][T17408] ? number+0xc9d/0xf00 [ 725.174222][T17408] should_fail_ex+0x394/0x4c0 [ 725.178958][T17408] should_failslab+0x9/0x20 [ 725.183522][T17408] slab_pre_alloc_hook+0x59/0x300 [ 725.188610][T17408] ? __kthread_create_on_node+0x1b4/0x3d0 [ 725.194388][T17408] ? __kthread_create_on_node+0x1b4/0x3d0 [ 725.200159][T17408] __kmem_cache_alloc_node+0x53/0x250 [ 725.205597][T17408] ? __kthread_create_on_node+0x1b4/0x3d0 [ 725.211361][T17408] __kmalloc_node_track_caller+0xa4/0x230 [ 725.217151][T17408] kvasprintf+0xec/0x1a0 [ 725.221505][T17408] ? bust_spinlocks+0xd0/0xd0 [ 725.226247][T17408] __kthread_create_on_node+0x1b4/0x3d0 [ 725.231852][T17408] ? kthread_create_on_node+0x140/0x140 [ 725.232965][T17410] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4032'. [ 725.237444][T17408] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 725.237504][T17408] ? rxrpc_direct_abort+0x330/0x330 [ 725.257955][T17408] ? rxrpc_direct_abort+0x330/0x330 [ 725.263213][T17408] kthread_create_on_node+0xec/0x140 [ 725.268552][T17408] ? __local_bh_enable_ip+0x13a/0x1c0 [ 725.273993][T17408] ? tsk_fork_get_node+0x70/0x70 [ 725.278970][T17408] ? __local_bh_enable_ip+0x13a/0x1c0 [ 725.284401][T17408] rxrpc_lookup_local+0x1041/0x1700 [ 725.289714][T17408] ? rxrpc_local_dont_fragment+0x70/0x70 [ 725.295397][T17408] ? none_clear+0x10/0x10 [ 725.299771][T17408] ? rxrpc_client_conn_reap_timeout+0xd0/0xd0 [ 725.305875][T17408] ? __local_bh_enable_ip+0x13a/0x1c0 [ 725.311288][T17408] ? __local_bh_enable_ip+0x13a/0x1c0 [ 725.316689][T17408] ? do_raw_spin_unlock+0x121/0x230 [ 725.321934][T17408] rxrpc_sendmsg+0x2f3/0x5b0 [ 725.326642][T17408] ? rxrpc_getsockopt+0x150/0x150 [ 725.331713][T17408] ____sys_sendmsg+0x61b/0x980 [ 725.336523][T17408] ? __sys_sendmsg_sock+0x30/0x30 [ 725.341578][T17408] ? __import_iovec+0x5f2/0x850 [ 725.346467][T17408] ? import_iovec+0x73/0xa0 [ 725.351009][T17408] ___sys_sendmsg+0x2a6/0x360 [ 725.355718][T17408] ? get_pid_task+0x20/0x1e0 [ 725.360421][T17408] ? __sys_sendmsg+0x2b0/0x2b0 [ 725.365229][T17408] ? __lock_acquire+0x7d80/0x7d80 [ 725.370318][T17408] __se_sys_sendmsg+0x1d0/0x2c0 [ 725.375204][T17408] ? __x64_sys_sendmsg+0x80/0x80 [ 725.380180][T17408] ? lockdep_hardirqs_on+0x98/0x150 [ 725.385413][T17408] do_syscall_64+0x55/0xb0 [ 725.389860][T17408] ? clear_bhb_loop+0x40/0x90 [ 725.394557][T17408] ? clear_bhb_loop+0x40/0x90 [ 725.399258][T17408] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 725.405187][T17408] RIP: 0033:0x7ff25d39de99 [ 725.409642][T17408] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 725.429269][T17408] RSP: 002b:00007ff25e220028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 725.437701][T17408] RAX: ffffffffffffffda RBX: 00007ff25d625fa0 RCX: 00007ff25d39de99 [ 725.445742][T17408] RDX: 000000000000ff00 RSI: 0000200000000000 RDI: 0000000000000003 [ 725.453762][T17408] RBP: 00007ff25e220090 R08: 0000000000000000 R09: 0000000000000000 [ 725.461760][T17408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 725.469753][T17408] R13: 00007ff25d626038 R14: 00007ff25d625fa0 R15: 00007ffd35890bb8 [ 725.477786][T17408] [ 725.510187][T17410] A link change request failed with some changes committed already. Interface 26±ÿÿÿÿa–ïD may have been left with an inconsistent configuration, please check. [ 725.782896][T17420] FAULT_INJECTION: forcing a failure. [ 725.782896][T17420] name failslab, interval 1, probability 0, space 0, times 0 [ 725.837344][T17420] CPU: 1 PID: 17420 Comm: syz.2.4036 Not tainted syzkaller #0 [ 725.844915][T17420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 725.855029][T17420] Call Trace: [ 725.858373][T17420] [ 725.861390][T17420] dump_stack_lvl+0x18c/0x250 [ 725.866171][T17420] ? show_regs_print_info+0x20/0x20 [ 725.871436][T17420] ? load_image+0x420/0x420 [ 725.876012][T17420] ? __might_sleep+0xe0/0xe0 [ 725.880671][T17420] ? __lock_acquire+0x7d80/0x7d80 [ 725.885779][T17420] should_fail_ex+0x394/0x4c0 [ 725.890558][T17420] should_failslab+0x9/0x20 [ 725.895130][T17420] slab_pre_alloc_hook+0x59/0x300 [ 725.900231][T17420] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 725.906036][T17420] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 725.911845][T17420] __kmem_cache_alloc_node+0x53/0x250 [ 725.917324][T17420] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 725.923112][T17420] __kmalloc+0xa7/0x240 [ 725.927360][T17420] tomoyo_realpath_from_path+0xe6/0x5c0 [ 725.932994][T17420] ? tomoyo_domain+0xd6/0x120 [ 725.937758][T17420] tomoyo_path_number_perm+0x248/0x5e0 [ 725.943279][T17420] ? tomoyo_path_number_perm+0x217/0x5e0 [ 725.948987][T17420] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 725.954520][T17420] ? ksys_write+0x1d2/0x260 [ 725.959180][T17420] ? __fget_files+0x28/0x460 [ 725.963875][T17420] security_file_ioctl+0x70/0xa0 [ 725.968897][T17420] __se_sys_ioctl+0x48/0x170 [ 725.973566][T17420] do_syscall_64+0x55/0xb0 [ 725.978059][T17420] ? clear_bhb_loop+0x40/0x90 [ 725.982802][T17420] ? clear_bhb_loop+0x40/0x90 [ 725.987541][T17420] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 725.993496][T17420] RIP: 0033:0x7fd1ca79de99 [ 725.998050][T17420] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 726.017718][T17420] RSP: 002b:00007fd1cb653028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 726.026214][T17420] RAX: ffffffffffffffda RBX: 00007fd1caa25fa0 RCX: 00007fd1ca79de99 [ 726.034239][T17420] RDX: 0000200000000080 RSI: 00000000000089f0 RDI: 0000000000000006 [ 726.042280][T17420] RBP: 00007fd1cb653090 R08: 0000000000000000 R09: 0000000000000000 [ 726.050395][T17420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 726.058462][T17420] R13: 00007fd1caa26038 R14: 00007fd1caa25fa0 R15: 00007ffdfbcabc48 [ 726.066619][T17420] [ 726.144557][T17420] ERROR: Out of memory at tomoyo_realpath_from_path. [ 726.754361][T17437] netlink: 112 bytes leftover after parsing attributes in process `syz.0.4040'. [ 726.847151][T17437] netlink: 'syz.0.4040': attribute type 10 has an invalid length. [ 727.018151][T17440] netlink: 'syz.2.4041': attribute type 9 has an invalid length. [ 727.033609][T17440] __nla_validate_parse: 1 callbacks suppressed [ 727.033627][T17440] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.4041'. [ 727.710292][T17455] delete_channel: no stack [ 727.868164][T17458] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4047'. [ 727.939707][T17458] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 728.007926][T17466] netlink: 112 bytes leftover after parsing attributes in process `syz.2.4051'. [ 728.051318][T17466] netlink: 'syz.2.4051': attribute type 10 has an invalid length. [ 728.081450][T17466] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4051'. [ 728.307509][T17473] netlink: 'syz.3.4054': attribute type 21 has an invalid length. [ 728.321903][T17473] syzkaller0: entered promiscuous mode [ 728.328574][T17473] syzkaller0: entered allmulticast mode [ 728.938260][T17492] netlink: 112 bytes leftover after parsing attributes in process `syz.3.4061'. [ 728.959984][T17490] delete_channel: no stack [ 728.979371][T17493] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4059'. [ 728.993711][T17492] netlink: 'syz.3.4061': attribute type 10 has an invalid length. [ 729.023840][T17492] netlink: 2 bytes leftover after parsing attributes in process `syz.3.4061'. [ 729.076644][T17493] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4059'. [ 729.086039][T17494] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4059'. [ 729.111836][T17493] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4059'. [ 729.853523][T17509] netlink: 'syz.2.4065': attribute type 10 has an invalid length. [ 729.921847][ T5083] Bluetooth: hci2: unexpected event for opcode 0x00c9 [ 730.847221][T17533] netlink: 'syz.0.4072': attribute type 10 has an invalid length. [ 730.868687][T17528] delete_channel: no stack [ 731.041064][T17541] netlink: 'syz.0.4075': attribute type 3 has an invalid length. [ 731.056445][T17538] netlink: 'syz.2.4076': attribute type 29 has an invalid length. [ 731.058576][T17538] netlink: 'syz.2.4076': attribute type 29 has an invalid length. [ 731.063449][T17538] netlink: 'syz.2.4076': attribute type 29 has an invalid length. [ 731.096861][T17541] netlink: 'syz.0.4075': attribute type 1 has an invalid length. [ 731.435651][T17550] netlink: 'syz.0.4079': attribute type 10 has an invalid length. [ 731.547057][ T5083] Bluetooth: hci0: unexpected event for opcode 0x00c9 [ 732.203135][T17562] netlink: 'syz.1.4084': attribute type 10 has an invalid length. [ 732.226305][T17562] __nla_validate_parse: 6 callbacks suppressed [ 732.226319][T17562] netlink: 2 bytes leftover after parsing attributes in process `syz.1.4084'. [ 732.262155][T17562] batadv_slave_1: entered promiscuous mode [ 732.272436][T17562] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 732.290445][T17562] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 732.538780][T17569] delete_channel: no stack [ 732.782832][T17587] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4090'. [ 732.817636][T17587] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 732.998923][T17593] netlink: 140 bytes leftover after parsing attributes in process `syz.0.4093'. [ 733.033231][ T5083] Bluetooth: hci0: unexpected event for opcode 0x00c9 [ 733.829281][T17598] netlink: 2 bytes leftover after parsing attributes in process `syz.1.4095'. [ 734.134968][T17608] delete_channel: no stack [ 734.407985][T17622] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4104'. [ 734.454245][T17622] A link change request failed with some changes committed already. Interface 26±ÿÿÿÿa–ïD may have been left with an inconsistent configuration, please check. [ 735.336187][T17628] validate_nla: 2 callbacks suppressed [ 735.348469][T17628] netlink: 'syz.2.4107': attribute type 10 has an invalid length. [ 735.360592][T17628] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4107'. [ 735.645254][T17630] netlink: 'syz.2.4108': attribute type 10 has an invalid length. [ 735.673752][T17630] netlink: 144 bytes leftover after parsing attributes in process `syz.2.4108'. [ 736.009572][T17642] FAULT_INJECTION: forcing a failure. [ 736.009572][T17642] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 736.046658][T17642] CPU: 1 PID: 17642 Comm: syz.3.4112 Not tainted syzkaller #0 [ 736.054229][T17642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 736.064374][T17642] Call Trace: [ 736.067729][T17642] [ 736.070734][T17642] dump_stack_lvl+0x18c/0x250 [ 736.075518][T17642] ? show_regs_print_info+0x20/0x20 [ 736.080816][T17642] ? load_image+0x420/0x420 [ 736.085424][T17642] ? __might_fault+0xaa/0x120 [ 736.090189][T17642] ? __lock_acquire+0x7d80/0x7d80 [ 736.095311][T17642] should_fail_ex+0x394/0x4c0 [ 736.100093][T17642] _copy_from_iter+0x1cd/0x1290 [ 736.105081][T17642] ? rcu_is_watching+0x15/0xb0 [ 736.109952][T17642] ? copyout_mc+0x70/0x70 [ 736.114341][T17642] ? __virt_addr_valid+0x10c/0x380 [ 736.119516][T17642] ? __virt_addr_valid+0x10c/0x380 [ 736.124685][T17642] ? __virt_addr_valid+0x10c/0x380 [ 736.129860][T17642] ? __check_object_size+0x4fc/0xa40 [ 736.135224][T17642] kcm_sendmsg+0xddc/0x27b0 [ 736.139938][T17642] ? kcm_getsockopt+0x280/0x280 [ 736.144873][T17642] ? apparmor_socket_sendmsg+0x8e/0x330 [ 736.150487][T17642] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 736.155820][T17642] ? security_socket_sendmsg+0x80/0xa0 [ 736.161341][T17642] ? kcm_getsockopt+0x280/0x280 [ 736.166269][T17642] ____sys_sendmsg+0x61b/0x980 [ 736.171122][T17642] ? __asan_memset+0x22/0x40 [ 736.175815][T17642] ? __sys_sendmsg_sock+0x30/0x30 [ 736.180912][T17642] ? __import_iovec+0x5f2/0x850 [ 736.185866][T17642] ? import_iovec+0x73/0xa0 [ 736.190478][T17642] ___sys_sendmsg+0x2a6/0x360 [ 736.195244][T17642] ? __sys_sendmsg+0x2b0/0x2b0 [ 736.200148][T17642] ? __lock_acquire+0x7d80/0x7d80 [ 736.205340][T17642] __se_sys_sendmsg+0x1d0/0x2c0 [ 736.210280][T17642] ? __x64_sys_sendmsg+0x80/0x80 [ 736.215348][T17642] ? lockdep_hardirqs_on+0x98/0x150 [ 736.220625][T17642] do_syscall_64+0x55/0xb0 [ 736.225104][T17642] ? clear_bhb_loop+0x40/0x90 [ 736.229838][T17642] ? clear_bhb_loop+0x40/0x90 [ 736.234553][T17642] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 736.240506][T17642] RIP: 0033:0x7ff25d39de99 [ 736.244978][T17642] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 736.264620][T17642] RSP: 002b:00007ff25e1ff028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 736.273110][T17642] RAX: ffffffffffffffda RBX: 00007ff25d626090 RCX: 00007ff25d39de99 [ 736.281145][T17642] RDX: 0000000000000000 RSI: 0000200000002080 RDI: 0000000000000003 [ 736.289165][T17642] RBP: 00007ff25e1ff090 R08: 0000000000000000 R09: 0000000000000000 [ 736.297182][T17642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 736.305214][T17642] R13: 00007ff25d626128 R14: 00007ff25d626090 R15: 00007ffd35890bb8 [ 736.313292][T17642] [ 736.524698][T17646] netlink: 'syz.2.4115': attribute type 3 has an invalid length. [ 736.551559][T17646] netlink: 'syz.2.4115': attribute type 1 has an invalid length. [ 736.560417][T17646] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.4115'. [ 736.658735][T17648] netlink: 'syz.1.4116': attribute type 1 has an invalid length. [ 736.673959][T17648] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.4116'. [ 736.713952][T17650] netlink: 'syz.0.4117': attribute type 10 has an invalid length. [ 736.723580][T17650] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4117'. [ 738.212626][T17663] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4120'. [ 738.235399][T17663] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 738.276575][T17664] netlink: 'syz.2.4123': attribute type 10 has an invalid length. [ 738.299120][T17664] netlink: 144 bytes leftover after parsing attributes in process `syz.2.4123'. [ 738.615279][T17676] netlink: 'syz.2.4127': attribute type 10 has an invalid length. [ 738.640966][T17676] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4127'. [ 738.807192][T17683] netlink: 'syz.1.4130': attribute type 3 has an invalid length. [ 738.819682][T17683] netlink: 'syz.1.4130': attribute type 1 has an invalid length. [ 738.829432][T17683] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.4130'. [ 740.135857][T17697] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4135'. [ 740.154706][T17697] A link change request failed with some changes committed already. Interface 26±ÿÿÿÿa–ïD may have been left with an inconsistent configuration, please check. [ 740.390261][T17704] netlink: 'syz.2.4136': attribute type 10 has an invalid length. [ 740.398638][T17704] netlink: 144 bytes leftover after parsing attributes in process `syz.2.4136'. [ 741.193464][T17718] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.4142'. [ 741.236910][T17714] netlink: 'syz.3.4141': attribute type 3 has an invalid length. [ 741.265393][T17714] netlink: 'syz.3.4141': attribute type 1 has an invalid length. [ 741.284324][T17714] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.4141'. [ 741.588423][T17728] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 741.595733][T17728] IPv6: NLM_F_CREATE should be set when creating new route [ 741.603267][T17728] IPv6: NLM_F_CREATE should be set when creating new route [ 741.610641][T17728] IPv6: NLM_F_CREATE should be set when creating new route [ 741.879116][T17732] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4147'. [ 741.929606][T17732] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 742.595616][T17744] netlink: 'syz.0.4152': attribute type 10 has an invalid length. [ 742.627720][T17744] netlink: 140 bytes leftover after parsing attributes in process `syz.0.4152'. [ 743.385544][T17761] __nla_validate_parse: 1 callbacks suppressed [ 743.385556][T17761] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4156'. [ 743.435922][T17761] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 743.934363][T17770] netlink: 'syz.1.4161': attribute type 29 has an invalid length. [ 743.953208][T17770] netlink: 'syz.1.4161': attribute type 29 has an invalid length. [ 743.967134][T17771] netlink: 'syz.1.4161': attribute type 29 has an invalid length. [ 743.980849][T17770] netlink: 'syz.1.4161': attribute type 29 has an invalid length. [ 744.903954][T17776] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4162'. [ 744.925583][T17778] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4164'. [ 744.935384][T17776] A link change request failed with some changes committed already. Interface 26±ÿÿÿÿa–ïD may have been left with an inconsistent configuration, please check. [ 745.167584][T17789] netlink: 'syz.1.4166': attribute type 10 has an invalid length. [ 745.175544][T17789] netlink: 140 bytes leftover after parsing attributes in process `syz.1.4166'. [ 745.805692][T17794] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4169'. [ 745.818154][T17794] netlink: 3 bytes leftover after parsing attributes in process `syz.0.4169'. [ 745.845371][T17794] netlink: 3 bytes leftover after parsing attributes in process `syz.0.4169'. [ 747.240131][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.252478][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.325047][T17801] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4172'. [ 747.343831][T17801] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4172'. [ 747.390711][T17801] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 747.406699][T17801] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 747.572927][T17807] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4174'. [ 747.990378][T17818] A link change request failed with some changes committed already. Interface 26±ÿÿÿÿa–ïD may have been left with an inconsistent configuration, please check. [ 748.987476][T17819] delete_channel: no stack [ 749.189299][T17824] netlink: 'syz.2.4181': attribute type 10 has an invalid length. [ 749.207149][T17824] __nla_validate_parse: 1 callbacks suppressed [ 749.207175][T17824] netlink: 140 bytes leftover after parsing attributes in process `syz.2.4181'. [ 749.800443][T17833] netlink: 'syz.0.4184': attribute type 10 has an invalid length. [ 750.115962][T17837] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.4185'. [ 750.464880][T17851] netlink: 'syz.0.4196': attribute type 2 has an invalid length. [ 750.477532][T17851] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.4196'. [ 750.640917][T17857] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4190'. [ 750.686041][T17857] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 750.736540][T17856] delete_channel: no stack [ 750.969255][T17868] netlink: 'syz.1.4194': attribute type 10 has an invalid length. [ 750.977638][T17868] netlink: 140 bytes leftover after parsing attributes in process `syz.1.4194'. [ 751.582923][T17870] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4195'. [ 751.664040][T17870] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4195'. [ 751.735526][T17870] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 751.744473][T17870] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 751.773043][T17870] batman_adv: batadv0: Interface deactivated: veth0_vlan [ 751.780776][T17870] batman_adv: batadv0: Removing interface: veth0_vlan [ 751.894567][T17874] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4204'. [ 751.919845][T17874] A link change request failed with some changes committed already. Interface 26±ÿÿÿÿa–ïD may have been left with an inconsistent configuration, please check. [ 751.972123][T17878] TCP: TCP_TX_DELAY enabled [ 752.697224][T17888] delete_channel: no stack [ 753.960930][T17902] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 753.968402][T17902] IPv6: NLM_F_CREATE should be set when creating new route [ 754.926164][T17910] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4211'. [ 754.964921][T17910] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4211'. [ 754.982145][T17911] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4210'. [ 755.005711][T17911] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 755.064361][T17910] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 755.072534][T17910] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 755.191668][T17915] bridge0: port 3(team0) entered disabled state [ 755.198585][T17915] bridge0: port 2(bridge_slave_1) entered disabled state [ 755.205947][T17915] bridge0: port 1(bridge_slave_0) entered disabled state [ 755.214089][T17915] bridge0: entered allmulticast mode [ 755.235416][T17915] netlink: 'syz.0.4214': attribute type 21 has an invalid length. [ 755.243816][T17915] netlink: 'syz.0.4214': attribute type 7 has an invalid length. [ 755.415097][T17922] netlink: 'syz.0.4216': attribute type 21 has an invalid length. [ 755.425736][T17922] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4216'. [ 755.435580][T17922] netlink: 'syz.0.4216': attribute type 4 has an invalid length. [ 755.444697][T17922] netlink: 3 bytes leftover after parsing attributes in process `syz.0.4216'. [ 755.544620][T17923] delete_channel: no stack [ 755.670553][T17926] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.4218'. [ 757.037739][T17939] delete_channel: no stack [ 757.069473][T17943] netlink: 'syz.2.4223': attribute type 10 has an invalid length. [ 757.120670][T17943] netlink: 140 bytes leftover after parsing attributes in process `syz.2.4223'. [ 757.174643][ T5083] Bluetooth: hci2: unexpected event 0x0f length: 15 > 4 [ 757.174705][ T5083] Bluetooth: hci2: unexpected event for opcode 0x0000 [ 757.638497][T17948] delete_channel: no stack [ 757.759382][T17947] delete_channel: no stack [ 757.988111][T17958] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4227'. [ 758.019587][T17958] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 758.250962][T17963] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.4231'. [ 758.662741][ T5780] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 758.674436][ T5780] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 758.686098][ T5780] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 758.695052][ T5780] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 758.703840][ T5780] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 758.714481][ T5780] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 758.875433][ T9384] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 759.095048][ T9384] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 759.145433][T17978] delete_channel: no stack [ 759.191081][T17987] netlink: 'syz.1.4239': attribute type 10 has an invalid length. [ 759.199664][T17987] netlink: 140 bytes leftover after parsing attributes in process `syz.1.4239'. [ 759.224200][ T5780] Bluetooth: hci1: unexpected event 0x0f length: 15 > 4 [ 759.295562][ T9384] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 759.548442][ T9384] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 760.212659][T17969] chnl_net:caif_netlink_parms(): no params data found [ 760.500125][T18011] netlink: 'syz.2.4242': attribute type 29 has an invalid length. [ 760.532261][T18005] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4243'. [ 760.552182][T18005] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 760.650877][T18011] netlink: 'syz.2.4242': attribute type 29 has an invalid length. [ 760.730019][T18013] netlink: 'syz.2.4242': attribute type 29 has an invalid length. [ 760.767208][ T5780] Bluetooth: hci3: command tx timeout [ 760.825550][T18026] netlink: 'syz.0.4245': attribute type 9 has an invalid length. [ 760.897978][T18026] netlink: 154020 bytes leftover after parsing attributes in process `syz.0.4245'. [ 760.978832][T17969] bridge0: port 1(bridge_slave_0) entered blocking state [ 761.002401][T17969] bridge0: port 1(bridge_slave_0) entered disabled state [ 761.013010][T17969] bridge_slave_0: entered allmulticast mode [ 761.027561][T17969] bridge_slave_0: entered promiscuous mode [ 761.082892][T17969] bridge0: port 2(bridge_slave_1) entered blocking state [ 761.110572][T17969] bridge0: port 2(bridge_slave_1) entered disabled state [ 761.137627][T17969] bridge_slave_1: entered allmulticast mode [ 761.158108][T17969] bridge_slave_1: entered promiscuous mode [ 761.333055][T17969] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 761.420699][T18035] netlink: 'syz.1.4247': attribute type 10 has an invalid length. [ 761.429088][T18035] netlink: 2 bytes leftover after parsing attributes in process `syz.1.4247'. [ 761.467650][T17969] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 761.735563][ T5780] Bluetooth: hci2: unexpected event 0x0f length: 15 > 4 [ 761.756136][T17969] team0: Port device team_slave_0 added [ 761.807105][T18045] netlink: 'syz.2.4250': attribute type 10 has an invalid length. [ 761.825520][T18045] netlink: 140 bytes leftover after parsing attributes in process `syz.2.4250'. [ 761.863528][T17969] team0: Port device team_slave_1 added [ 762.084263][T17969] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 762.115016][T17969] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 762.167505][T17969] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 762.215217][T17969] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 762.256359][T17969] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 762.346609][T17969] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 762.670423][T17969] hsr_slave_0: entered promiscuous mode [ 762.707286][T17969] hsr_slave_1: entered promiscuous mode [ 762.722607][T17969] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 762.742806][T17969] Cannot create hsr debugfs directory [ 762.836489][ T5780] Bluetooth: hci3: command tx timeout [ 763.158464][T18059] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4255'. [ 763.190310][T18059] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 763.240843][T18075] netlink: 'syz.0.4258': attribute type 10 has an invalid length. [ 763.259764][T18075] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4258'. [ 763.431212][ T9384] hsr_slave_0: left promiscuous mode [ 763.440712][ T9384] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 763.454838][ T9384] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 763.478447][ T9384] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi [ 763.496320][ T9384] batman_adv: batadv0: Removing interface: veth1_virt_wifi [ 763.513463][ T9384] team0: left allmulticast mode [ 763.521833][ T9384] team_slave_0: left allmulticast mode [ 763.536312][ T9384] team_slave_1: left allmulticast mode [ 763.554290][ T9384] team0: left promiscuous mode [ 763.587760][ T9384] team_slave_0: left promiscuous mode [ 763.593473][ T9384] team_slave_1: left promiscuous mode [ 763.605672][ T9384] bridge0: port 4(team0) entered disabled state [ 763.615234][ T9384] bond0: left allmulticast mode [ 763.620399][ T9384] bond_slave_0: left allmulticast mode [ 763.625906][ T9384] bond_slave_1: left allmulticast mode [ 763.632384][ T9384] dummy0: left allmulticast mode [ 763.641060][ T9384] geneve0: left allmulticast mode [ 763.646768][ T9384] bridge0: port 3(bond0) entered disabled state [ 763.656145][ T9384] bridge_slave_1: left allmulticast mode [ 763.676427][ T9384] bridge0: port 2(bridge_slave_1) entered disabled state [ 763.689406][ T9384] bridge_slave_0: left allmulticast mode [ 763.695120][ T9384] bridge_slave_0: left promiscuous mode [ 763.716080][ T9384] bridge0: port 1(bridge_slave_0) entered disabled state [ 763.810797][ T9384] veth1_macvtap: left promiscuous mode [ 763.817378][ T9384] veth0_macvtap: left promiscuous mode [ 763.941883][ T5780] Bluetooth: hci2: unexpected event 0x0f length: 15 > 4 [ 764.235842][ T9384] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 764.780134][ T9384] team0 (unregistering): Port device team_slave_1 removed [ 764.824056][ T9384] team0 (unregistering): Port device team_slave_0 removed [ 764.866080][ T9384] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 764.874906][ T9384] bond_slave_1 (unregistering): left promiscuous mode [ 764.916370][ T5780] Bluetooth: hci3: command tx timeout [ 764.923110][ T9384] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 764.932087][ T9384] bond_slave_0 (unregistering): left promiscuous mode [ 765.193526][ T9384] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 765.202608][ T9384] dummy0 (unregistering): left promiscuous mode [ 765.252435][ T9384] bond0 (unregistering): Released all slaves [ 765.344799][T18086] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4267'. [ 765.375175][T18086] A link change request failed with some changes committed already. Interface 26±ÿÿÿÿa–ïD may have been left with an inconsistent configuration, please check. [ 765.397097][T18089] netlink: 'syz.2.4261': attribute type 10 has an invalid length. [ 765.404966][T18089] netlink: 140 bytes leftover after parsing attributes in process `syz.2.4261'. [ 765.774429][T18102] netlink: 'syz.2.4263': attribute type 9 has an invalid length. [ 765.806526][ T5780] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 765.815442][ T5780] Bluetooth: hci2: Injecting HCI hardware error event [ 765.823548][ T5083] Bluetooth: hci2: hardware error 0x00 [ 765.844234][T18102] netlink: 154020 bytes leftover after parsing attributes in process `syz.2.4263'. [ 765.863392][T17969] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 765.934622][T17969] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 766.011628][T17969] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 766.087862][T17969] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 766.465157][T17969] 8021q: adding VLAN 0 to HW filter on device bond0 [ 766.541692][T17969] 8021q: adding VLAN 0 to HW filter on device team0 [ 766.581627][ T7738] bridge0: port 1(bridge_slave_0) entered blocking state [ 766.588896][ T7738] bridge0: port 1(bridge_slave_0) entered forwarding state [ 766.620660][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 766.627851][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 766.991240][T18134] netlink: 'syz.0.4271': attribute type 10 has an invalid length. [ 767.006482][ T5780] Bluetooth: hci3: command tx timeout [ 767.041166][T18134] netlink: 140 bytes leftover after parsing attributes in process `syz.0.4271'. [ 767.119178][ T5780] Bluetooth: hci0: unexpected event 0x0f length: 15 > 4 [ 767.135875][T18135] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4270'. [ 767.212954][T18135] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 767.728876][T17969] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 767.966986][ T5083] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 768.129645][T18163] netlink: 'syz.0.4275': attribute type 10 has an invalid length. [ 768.156334][T18163] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4275'. [ 768.473408][T18174] netlink: 'syz.0.4276': attribute type 10 has an invalid length. [ 768.504534][T18174] bridge_slave_1: left allmulticast mode [ 768.538796][T18174] bridge0: port 2(bridge_slave_1) entered disabled state [ 768.571286][T18174] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 768.837521][T17969] veth0_vlan: entered promiscuous mode [ 768.894069][T18183] FAULT_INJECTION: forcing a failure. [ 768.894069][T18183] name failslab, interval 1, probability 0, space 0, times 0 [ 768.929510][T18183] CPU: 1 PID: 18183 Comm: syz.1.4279 Not tainted syzkaller #0 [ 768.937048][T18183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 768.947150][T18183] Call Trace: [ 768.950495][T18183] [ 768.953731][T18183] dump_stack_lvl+0x18c/0x250 [ 768.958469][T18183] ? show_regs_print_info+0x20/0x20 [ 768.963735][T18183] ? load_image+0x420/0x420 [ 768.968314][T18183] ? __might_sleep+0xe0/0xe0 [ 768.972941][T18183] ? __lock_acquire+0x7d80/0x7d80 [ 768.978019][T18183] should_fail_ex+0x394/0x4c0 [ 768.982759][T18183] should_failslab+0x9/0x20 [ 768.987310][T18183] slab_pre_alloc_hook+0x59/0x300 [ 768.992366][T18183] ? sctp_association_new+0x89/0x25b0 [ 768.997772][T18183] __kmem_cache_alloc_node+0x53/0x250 [ 769.003218][T18183] ? sctp_association_new+0x89/0x25b0 [ 769.008637][T18183] kmalloc_trace+0x2a/0xe0 [ 769.013098][T18183] sctp_association_new+0x89/0x25b0 [ 769.018374][T18183] sctp_connect_new_asoc+0x2de/0x6a0 [ 769.023708][T18183] ? __sctp_connect+0xd80/0xd80 [ 769.028599][T18183] ? __local_bh_enable_ip+0x13a/0x1c0 [ 769.034033][T18183] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 769.039666][T18183] ? security_sctp_bind_connect+0x89/0xb0 [ 769.045438][T18183] sctp_sendmsg+0x1519/0x27b0 [ 769.050179][T18183] ? sctp_getsockopt+0xb60/0xb60 [ 769.055169][T18183] ? aa_af_perm+0x330/0x330 [ 769.059718][T18183] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 769.066175][T18183] ? sock_rps_record_flow+0x19/0x3f0 [ 769.071501][T18183] ? inet_sendmsg+0xce/0x2a0 [ 769.076143][T18183] ? inet_send_prepare+0x250/0x250 [ 769.081312][T18183] ____sys_sendmsg+0x61b/0x980 [ 769.086171][T18183] ? __asan_memset+0x22/0x40 [ 769.090803][T18183] ? __sys_sendmsg_sock+0x30/0x30 [ 769.095877][T18183] ? __import_iovec+0x5f2/0x850 [ 769.100776][T18183] ? import_iovec+0x73/0xa0 [ 769.105324][T18183] ___sys_sendmsg+0x2a6/0x360 [ 769.110041][T18183] ? get_pid_task+0x20/0x1e0 [ 769.114694][T18183] ? __sys_sendmsg+0x2b0/0x2b0 [ 769.119545][T18183] ? __lock_acquire+0x7d80/0x7d80 [ 769.124640][T18183] __se_sys_sendmsg+0x1d0/0x2c0 [ 769.129546][T18183] ? perf_trace_preemptirq_template+0x269/0x330 [ 769.135839][T18183] ? __x64_sys_sendmsg+0x80/0x80 [ 769.140843][T18183] ? lockdep_hardirqs_on+0x98/0x150 [ 769.146086][T18183] do_syscall_64+0x55/0xb0 [ 769.150541][T18183] ? clear_bhb_loop+0x40/0x90 [ 769.155250][T18183] ? clear_bhb_loop+0x40/0x90 [ 769.160054][T18183] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 769.165996][T18183] RIP: 0033:0x7f657759de99 [ 769.170443][T18183] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 769.190082][T18183] RSP: 002b:00007f65784e1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 769.198547][T18183] RAX: ffffffffffffffda RBX: 00007f6577825fa0 RCX: 00007f657759de99 [ 769.206552][T18183] RDX: 00000000000040f0 RSI: 0000200000000240 RDI: 0000000000000003 [ 769.214561][T18183] RBP: 00007f65784e1090 R08: 0000000000000000 R09: 0000000000000000 [ 769.222572][T18183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 769.230578][T18183] R13: 00007f6577826038 R14: 00007f6577825fa0 R15: 00007ffcbf74f3b8 [ 769.238600][T18183] [ 769.248735][T17969] veth1_vlan: entered promiscuous mode [ 769.354829][T17969] veth0_macvtap: entered promiscuous mode [ 769.379374][T17969] veth1_macvtap: entered promiscuous mode [ 769.439262][T18188] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.4282'. [ 769.461808][T18190] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4281'. [ 769.484532][T17969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 769.498091][T17969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 769.517658][T17969] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 769.529448][T17969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 769.540221][T17969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 769.554215][T17969] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 769.629849][T18188] syzkaller0: entered promiscuous mode [ 769.646374][T18188] syzkaller0: entered allmulticast mode [ 769.691419][T17969] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 769.719161][T17969] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 769.729927][T17969] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 769.739578][T17969] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 769.764075][ T7732] syzkaller0: tun_net_xmit 48 [ 769.777677][T18188] netlink: 'syz.0.4282': attribute type 10 has an invalid length. [ 769.797841][T18188] macvlan1: entered allmulticast mode [ 771.161559][ T5083] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 771.170325][ T5083] Bluetooth: hci0: Injecting HCI hardware error event [ 771.179985][ T5780] Bluetooth: hci0: hardware error 0x00 [ 771.699636][T18207] netlink: 'syz.2.4284': attribute type 10 has an invalid length. [ 771.707680][T18207] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4284'. [ 771.813157][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 771.848215][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 771.927517][T18220] netlink: 'syz.0.4288': attribute type 3 has an invalid length. [ 771.939659][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 771.943068][T18220] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4288'. [ 771.973133][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 772.564167][T18241] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4291'. [ 773.182102][T18255] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4293'. [ 773.233093][T18259] netlink: 'syz.1.4294': attribute type 10 has an invalid length. [ 773.245296][T18259] netlink: 2 bytes leftover after parsing attributes in process `syz.1.4294'. [ 773.254443][ T5780] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 774.000669][T18268] syzkaller0: entered promiscuous mode [ 774.018176][T18268] syzkaller0: entered allmulticast mode [ 774.190931][T18285] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4301'. [ 776.082009][T18298] netlink: 'syz.4.4303': attribute type 10 has an invalid length. [ 776.148777][T18298] veth0_vlan: left promiscuous mode [ 776.168415][T18298] veth0_vlan: entered promiscuous mode [ 776.179408][T18298] team0: Device veth0_vlan failed to register rx_handler [ 776.225412][T18302] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4304'. [ 776.309266][T18304] netlink: 'syz.2.4305': attribute type 10 has an invalid length. [ 776.332485][T18304] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4305'. [ 776.454887][T18312] netlink: 'syz.2.4309': attribute type 2 has an invalid length. [ 776.473290][T18312] netlink: 17267 bytes leftover after parsing attributes in process `syz.2.4309'. [ 776.836763][T18329] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4311'. [ 776.848383][T18330] FAULT_INJECTION: forcing a failure. [ 776.848383][T18330] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 776.870558][T18329] A link change request failed with some changes committed already. Interface 26±ÿÿÿÿa–ïD may have been left with an inconsistent configuration, please check. [ 776.960995][T18330] CPU: 0 PID: 18330 Comm: syz.2.4312 Not tainted syzkaller #0 [ 776.968645][T18330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 776.978764][T18330] Call Trace: [ 776.982111][T18330] [ 776.985115][T18330] dump_stack_lvl+0x18c/0x250 [ 776.989891][T18330] ? show_regs_print_info+0x20/0x20 [ 776.995164][T18330] ? load_image+0x420/0x420 [ 776.999766][T18330] ? __lock_acquire+0x7d80/0x7d80 [ 777.004846][T18330] ? snprintf+0xe9/0x140 [ 777.009157][T18330] should_fail_ex+0x394/0x4c0 [ 777.013924][T18330] _copy_to_user+0x2f/0xa0 [ 777.018395][T18330] simple_read_from_buffer+0xe7/0x150 [ 777.023843][T18330] proc_fail_nth_read+0x1e8/0x260 [ 777.028929][T18330] ? proc_fault_inject_write+0x360/0x360 [ 777.034623][T18330] ? fsnotify_perm+0x271/0x5e0 [ 777.039443][T18330] ? proc_fault_inject_write+0x360/0x360 [ 777.045147][T18330] vfs_read+0x298/0x990 [ 777.049393][T18330] ? kernel_read+0x1e0/0x1e0 [ 777.054175][T18330] ? __fget_files+0x28/0x460 [ 777.058860][T18330] ? __fget_files+0x3fc/0x460 [ 777.063638][T18330] ? __fdget_pos+0x2a3/0x330 [ 777.068284][T18330] ? ksys_read+0x74/0x260 [ 777.072685][T18330] ksys_read+0x151/0x260 [ 777.077038][T18330] ? vfs_write+0x9a0/0x9a0 [ 777.081555][T18330] ? lockdep_hardirqs_on+0x98/0x150 [ 777.086875][T18330] do_syscall_64+0x55/0xb0 [ 777.091386][T18330] ? clear_bhb_loop+0x40/0x90 [ 777.096126][T18330] ? clear_bhb_loop+0x40/0x90 [ 777.100859][T18330] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 777.106823][T18330] RIP: 0033:0x7fd1ca75e6ce [ 777.111297][T18330] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 777.130968][T18330] RSP: 002b:00007fd1cb610fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 777.139458][T18330] RAX: ffffffffffffffda RBX: 00007fd1cb6116c0 RCX: 00007fd1ca75e6ce [ 777.147480][T18330] RDX: 000000000000000f RSI: 00007fd1cb6110a0 RDI: 000000000000000a [ 777.155498][T18330] RBP: 00007fd1cb611090 R08: 0000000000000000 R09: 0000000000000000 [ 777.163518][T18330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 777.171527][T18330] R13: 00007fd1caa26218 R14: 00007fd1caa26180 R15: 00007ffdfbcabc48 [ 777.179615][T18330] [ 777.940145][T18344] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.4315'. [ 778.173244][T18352] netlink: 'syz.0.4318': attribute type 10 has an invalid length. [ 778.198939][T18352] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4318'. [ 779.009857][T18379] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4324'. [ 779.116728][T18379] A link change request failed with some changes committed already. Interface 26±ÿÿÿÿa–ïD may have been left with an inconsistent configuration, please check. [ 782.094878][T18397] netlink: 'syz.0.4328': attribute type 10 has an invalid length. [ 782.110760][T18397] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4328'. [ 782.264360][T18404] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.4329'. [ 782.554107][T18408] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4332'. [ 783.064530][T18412] delete_channel: no stack [ 783.081868][T18412] delete_channel: no stack [ 783.810503][T18441] mac80211_hwsim hwsim40 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 785.282072][T18493] syzkaller0: entered promiscuous mode [ 785.288705][T18493] syzkaller0: entered allmulticast mode [ 785.381795][T18497] syzkaller0: entered promiscuous mode [ 785.388418][T18497] syzkaller0: entered allmulticast mode [ 785.878607][ T34] wlan1: Trigger new scan to find an IBSS to join [ 788.838935][T18528] wlan1: Trigger new scan to find an IBSS to join [ 791.887075][ T12] wlan1: Trigger new scan to find an IBSS to join [ 792.878757][ T9384] wlan1: Creating new IBSS network, BSSID e2:e9:5f:7f:47:88 [ 798.889979][T18706] bridge0: port 2(bridge_slave_1) entered disabled state [ 798.897721][T18706] bridge0: port 1(bridge_slave_0) entered disabled state [ 798.926568][T18706] bridge0: entered allmulticast mode [ 798.988553][T18706] bridge0: port 2(bridge_slave_1) entered blocking state [ 798.996278][T18706] bridge0: port 2(bridge_slave_1) entered forwarding state [ 799.004936][T18706] bridge0: port 1(bridge_slave_0) entered blocking state [ 799.012670][T18706] bridge0: port 1(bridge_slave_0) entered forwarding state [ 799.050415][T18706] bridge0: entered promiscuous mode [ 807.179300][T18851] tap0: tun_chr_ioctl cmd 1074025677 [ 807.192638][T18851] tap0: linktype set to 6 [ 808.246818][T18892] mac80211_hwsim hwsim28 wlan1: left promiscuous mode [ 808.699886][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.707646][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.302033][T18910] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 809.376572][T18910] syzkaller0: entered promiscuous mode [ 809.382437][T18910] syzkaller0: entered allmulticast mode [ 811.381751][T18930] sit0: entered promiscuous mode [ 811.387577][T18930] sit0: entered allmulticast mode [ 811.807552][T18939] syzkaller0: entered promiscuous mode [ 811.835771][T18939] syzkaller0: entered allmulticast mode [ 814.223883][T18953] mac80211_hwsim hwsim28 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 816.819809][T19029] netlink: 'syz.0.4520': attribute type 10 has an invalid length. [ 816.866913][T19029] netlink: 140 bytes leftover after parsing attributes in process `syz.0.4520'. [ 817.741207][T19041] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4523'. [ 818.155887][T19045] syzkaller0: entered promiscuous mode [ 818.166147][T19045] syzkaller0: entered allmulticast mode [ 820.529601][T19059] netlink: 'syz.4.4529': attribute type 10 has an invalid length. [ 820.537641][T19059] netlink: 140 bytes leftover after parsing attributes in process `syz.4.4529'. [ 820.957861][T19071] netlink: 'syz.4.4533': attribute type 10 has an invalid length. [ 820.977096][T19071] netlink: 140 bytes leftover after parsing attributes in process `syz.4.4533'. [ 821.786753][T19075] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4535'. [ 821.917036][T19076] delete_channel: no stack [ 822.094716][T19081] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4538'. [ 822.132452][T19081] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 822.197920][ T5780] Bluetooth: hci3: unexpected event 0x0f length: 15 > 4 [ 822.892256][ T7732] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 823.494392][T19093] syzkaller0: entered promiscuous mode [ 823.505042][T19093] syzkaller0: entered allmulticast mode [ 823.963857][T19103] netlink: 'syz.0.4545': attribute type 10 has an invalid length. [ 823.996316][T19103] netlink: 140 bytes leftover after parsing attributes in process `syz.0.4545'. [ 825.776963][T19110] delete_channel: no stack [ 826.888383][T19121] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4550'. [ 826.906824][T19121] A link change request failed with some changes committed already. Interface 26±ÿÿÿÿa–ïD may have been left with an inconsistent configuration, please check. [ 828.219789][T19133] netlink: 'syz.1.4555': attribute type 10 has an invalid length. [ 828.243695][T19133] netlink: 140 bytes leftover after parsing attributes in process `syz.1.4555'. [ 828.905170][T19138] delete_channel: no stack [ 829.375118][T19158] netlink: 'syz.0.4564': attribute type 10 has an invalid length. [ 829.432155][T19158] netlink: 140 bytes leftover after parsing attributes in process `syz.0.4564'. [ 830.373743][T19174] FAULT_INJECTION: forcing a failure. [ 830.373743][T19174] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 830.397376][T19174] CPU: 0 PID: 19174 Comm: syz.0.4570 Not tainted syzkaller #0 [ 830.404931][T19174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 830.415042][T19174] Call Trace: [ 830.418345][T19174] [ 830.421298][T19174] dump_stack_lvl+0x18c/0x250 [ 830.426023][T19174] ? show_regs_print_info+0x20/0x20 [ 830.431277][T19174] ? load_image+0x420/0x420 [ 830.435837][T19174] ? __might_fault+0xaa/0x120 [ 830.440562][T19174] ? __lock_acquire+0x7d80/0x7d80 [ 830.445640][T19174] should_fail_ex+0x394/0x4c0 [ 830.450376][T19174] _copy_from_user+0x2f/0xe0 [ 830.455023][T19174] ___sys_sendmsg+0x1c7/0x360 [ 830.459765][T19174] ? get_pid_task+0x20/0x1e0 [ 830.464408][T19174] ? __sys_sendmsg+0x2b0/0x2b0 [ 830.469267][T19174] ? __lock_acquire+0x7d80/0x7d80 [ 830.474359][T19174] __se_sys_sendmsg+0x1d0/0x2c0 [ 830.479266][T19174] ? __x64_sys_sendmsg+0x80/0x80 [ 830.484244][T19174] ? lockdep_hardirqs_on+0x98/0x150 [ 830.489478][T19174] do_syscall_64+0x55/0xb0 [ 830.493936][T19174] ? clear_bhb_loop+0x40/0x90 [ 830.498634][T19174] ? clear_bhb_loop+0x40/0x90 [ 830.503341][T19174] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 830.509256][T19174] RIP: 0033:0x7f315d59de99 [ 830.513688][T19174] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 830.533407][T19174] RSP: 002b:00007f315e3b4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 830.541847][T19174] RAX: ffffffffffffffda RBX: 00007f315d825fa0 RCX: 00007f315d59de99 [ 830.549833][T19174] RDX: 3500000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 830.557818][T19174] RBP: 00007f315e3b4090 R08: 0000000000000000 R09: 0000000000000000 [ 830.565806][T19174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 830.573792][T19174] R13: 00007f315d826038 R14: 00007f315d825fa0 R15: 00007ffec99cc428 [ 830.581800][T19174] [ 830.646805][T19178] netlink: 'syz.4.4572': attribute type 10 has an invalid length. [ 830.654673][T19178] netlink: 140 bytes leftover after parsing attributes in process `syz.4.4572'. [ 830.883510][T19189] netlink: 'syz.0.4576': attribute type 10 has an invalid length. [ 830.892828][T19189] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4576'. [ 831.139844][T19196] netlink: 'syz.1.4578': attribute type 10 has an invalid length. [ 831.180910][T19196] netlink: 140 bytes leftover after parsing attributes in process `syz.1.4578'. [ 832.307791][T19211] syzkaller0: entered promiscuous mode [ 832.313367][T19211] syzkaller0: entered allmulticast mode [ 832.328211][T19214] netlink: 'syz.0.4587': attribute type 10 has an invalid length. [ 832.343236][T19214] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4587'. [ 835.316397][ T5780] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 835.325058][ T5780] Bluetooth: hci1: Injecting HCI hardware error event [ 835.333631][ T5780] Bluetooth: hci1: hardware error 0x00 [ 835.343236][T19223] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4589'. [ 835.367827][T19223] A link change request failed with some changes committed already. Interface 26±ÿÿÿÿa–ïD may have been left with an inconsistent configuration, please check. [ 835.385652][T19224] netlink: 'syz.2.4590': attribute type 10 has an invalid length. [ 835.393841][T19224] netlink: 140 bytes leftover after parsing attributes in process `syz.2.4590'. [ 835.618730][T19238] netlink: 'syz.0.4595': attribute type 10 has an invalid length. [ 835.675752][T19238] netlink: 140 bytes leftover after parsing attributes in process `syz.0.4595'. [ 836.138885][T19248] netlink: 'syz.2.4599': attribute type 10 has an invalid length. [ 836.149409][T19248] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4599'. [ 837.251218][T19264] syzkaller0: entered promiscuous mode [ 837.269989][T19264] syzkaller0: entered allmulticast mode [ 837.311748][T19265] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4604'. [ 837.348356][T19265] A link change request failed with some changes committed already. Interface 26±ÿÿÿÿa–ïD may have been left with an inconsistent configuration, please check. [ 837.371923][T19267] netlink: 'syz.2.4605': attribute type 10 has an invalid length. [ 837.384264][T19267] netlink: 140 bytes leftover after parsing attributes in process `syz.2.4605'. [ 837.399836][ T5780] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 839.512809][T19282] netlink: 'syz.0.4609': attribute type 10 has an invalid length. [ 839.536290][T19282] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4609'. [ 839.984129][T19299] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4616'. [ 840.387677][T19301] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4617'. [ 840.488110][T19301] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 840.787672][T19315] netlink: 'syz.1.4620': attribute type 10 has an invalid length. [ 840.795600][T19315] netlink: 2 bytes leftover after parsing attributes in process `syz.1.4620'. [ 842.738390][T19345] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4631'. [ 843.007935][T19345] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 843.241932][T19349] netlink: 'syz.4.4630': attribute type 153 has an invalid length. [ 843.254155][T19349] netlink: 128124 bytes leftover after parsing attributes in process `syz.4.4630'. [ 843.654386][T19353] syzkaller0: entered promiscuous mode [ 843.660599][T19353] syzkaller0: entered allmulticast mode [ 843.670279][T19357] FAULT_INJECTION: forcing a failure. [ 843.670279][T19357] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 843.709349][T19357] CPU: 0 PID: 19357 Comm: syz.2.4636 Not tainted syzkaller #0 [ 843.716936][T19357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 843.727098][T19357] Call Trace: [ 843.730485][T19357] [ 843.733521][T19357] dump_stack_lvl+0x18c/0x250 [ 843.738344][T19357] ? show_regs_print_info+0x20/0x20 [ 843.743689][T19357] ? load_image+0x420/0x420 [ 843.748416][T19357] ? __might_fault+0xaa/0x120 [ 843.753209][T19357] ? __lock_acquire+0x7d80/0x7d80 [ 843.758350][T19357] ? __virt_addr_valid+0x10c/0x380 [ 843.763603][T19357] should_fail_ex+0x394/0x4c0 [ 843.768441][T19357] _copy_from_user+0x2f/0xe0 [ 843.773146][T19357] ____sys_sendmsg+0x329/0x980 [ 843.778094][T19357] ? __sys_sendmsg_sock+0x30/0x30 [ 843.783675][T19357] ? __import_iovec+0x3fa/0x850 [ 843.788689][T19357] ? import_iovec+0x73/0xa0 [ 843.793329][T19357] ___sys_sendmsg+0x2a6/0x360 [ 843.798165][T19357] ? __sys_sendmsg+0x2b0/0x2b0 [ 843.803234][T19357] ? __lock_acquire+0x7d80/0x7d80 [ 843.808548][T19357] __se_sys_sendmsg+0x1d0/0x2c0 [ 843.813548][T19357] ? __x64_sys_sendmsg+0x80/0x80 [ 843.818725][T19357] ? lockdep_hardirqs_on+0x98/0x150 [ 843.824056][T19357] do_syscall_64+0x55/0xb0 [ 843.828584][T19357] ? clear_bhb_loop+0x40/0x90 [ 843.833366][T19357] ? clear_bhb_loop+0x40/0x90 [ 843.838157][T19357] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 843.844131][T19357] RIP: 0033:0x7fd1ca79de99 [ 843.848597][T19357] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 843.868287][T19357] RSP: 002b:00007fd1cb653028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 843.876842][T19357] RAX: ffffffffffffffda RBX: 00007fd1caa25fa0 RCX: 00007fd1ca79de99 [ 843.884899][T19357] RDX: 0000000000000000 RSI: 0000200000001180 RDI: 0000000000000004 [ 843.892967][T19357] RBP: 00007fd1cb653090 R08: 0000000000000000 R09: 0000000000000000 [ 843.901029][T19357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 843.909080][T19357] R13: 00007fd1caa26038 R14: 00007fd1caa25fa0 R15: 00007ffdfbcabc48 [ 843.917258][T19357] [ 846.462561][T19386] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4646'. [ 846.490076][T19386] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 846.975376][T19397] netlink: 'syz.0.4647': attribute type 10 has an invalid length. [ 847.039114][T19397] netlink: 140 bytes leftover after parsing attributes in process `syz.0.4647'. [ 847.990072][T19415] netlink: 'syz.1.4656': attribute type 10 has an invalid length. [ 848.024295][T19415] netlink: 55 bytes leftover after parsing attributes in process `syz.1.4656'. [ 848.368328][T19430] netlink: 'syz.0.4659': attribute type 10 has an invalid length. [ 848.382960][T19430] netlink: 140 bytes leftover after parsing attributes in process `syz.0.4659'. [ 848.480462][T19431] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4660'. [ 848.501988][T19431] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 849.015912][T19444] netlink: 172 bytes leftover after parsing attributes in process `syz.1.4665'. [ 849.028896][T19444] netlink: 172 bytes leftover after parsing attributes in process `syz.1.4665'. [ 850.074422][T19466] syzkaller0: entered promiscuous mode [ 850.084282][T19466] syzkaller0: entered allmulticast mode [ 852.639024][T19476] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4676'. [ 852.654035][T19476] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 853.450121][T19510] mac80211_hwsim hwsim40 wlan1: entered promiscuous mode [ 853.548668][T19510] mac80211_hwsim hwsim40 wlan1: entered allmulticast mode [ 854.004537][T18803] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 854.253740][T19517] syzkaller0: entered promiscuous mode [ 854.300445][T19517] syzkaller0: entered allmulticast mode [ 854.328425][T19519] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4689'. [ 854.377098][T19519] A link change request failed with some changes committed already. Interface 26±ÿÿÿÿa–ïD may have been left with an inconsistent configuration, please check. [ 856.823419][T19528] netlink: 'syz.2.4694': attribute type 21 has an invalid length. [ 856.831470][T19528] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4694'. [ 856.841384][T19531] netlink: 'syz.1.4695': attribute type 22 has an invalid length. [ 856.849756][T19531] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4695'. [ 856.859394][T19538] netlink: 'syz.0.4698': attribute type 10 has an invalid length. [ 856.880777][T19538] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4698'. [ 857.226769][T19550] mac80211_hwsim hwsim28 wlan1: entered promiscuous mode [ 858.219624][T19563] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4704'. [ 858.365732][T19563] A link change request failed with some changes committed already. Interface 26±ÿÿÿÿa–ïD may have been left with an inconsistent configuration, please check. [ 858.603271][T19564] netlink: 'syz.2.4708': attribute type 9 has an invalid length. [ 858.651791][T19564] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.4708'. [ 859.355002][T19568] netlink: 'syz.4.4709': attribute type 10 has an invalid length. [ 859.366255][T19568] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4709'. [ 859.375434][T19568] dummy0: entered allmulticast mode [ 859.388923][T19568] bridge0: port 3(dummy0) entered blocking state [ 859.395468][T19568] bridge0: port 3(dummy0) entered disabled state [ 859.414774][T19568] dummy0: entered promiscuous mode [ 859.427066][T19568] bridge0: port 3(dummy0) entered blocking state [ 859.433595][T19568] bridge0: port 3(dummy0) entered forwarding state [ 859.589355][T19570] syzkaller0: entered promiscuous mode [ 859.594908][T19570] syzkaller0: entered allmulticast mode [ 859.604444][T19572] netlink: 'syz.0.4711': attribute type 10 has an invalid length. [ 859.612527][T19572] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4711'. [ 861.250309][ T5780] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 861.260050][ T5780] Bluetooth: hci3: Injecting HCI hardware error event [ 861.268381][T19233] Bluetooth: hci3: hardware error 0x00 [ 862.898041][T19585] mac80211_hwsim hwsim44 wlan1: entered promiscuous mode [ 862.905780][T19585] mac80211_hwsim hwsim44 wlan1: entered allmulticast mode [ 862.914942][T19596] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4719'. [ 862.948105][T19596] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 863.171311][T19605] netlink: 'syz.2.4722': attribute type 10 has an invalid length. [ 863.208410][T19600] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4720'. [ 863.211063][T19605] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4722'. [ 863.274748][T19600] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4720'. [ 863.299069][T19608] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4720'. [ 863.317268][T19233] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 864.315726][T19629] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4734'. [ 864.354896][T19626] syzkaller0: entered promiscuous mode [ 864.361677][T19626] syzkaller0: entered allmulticast mode [ 864.374607][T19629] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4734'. [ 864.604579][T19634] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4733'. [ 864.639622][T19634] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 865.505164][T19635] delete_channel: no stack [ 866.816429][T19652] FAULT_INJECTION: forcing a failure. [ 866.816429][T19652] name failslab, interval 1, probability 0, space 0, times 0 [ 866.846337][T19652] CPU: 1 PID: 19652 Comm: syz.4.4740 Not tainted syzkaller #0 [ 866.853874][T19652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 866.863993][T19652] Call Trace: [ 866.867313][T19652] [ 866.870283][T19652] dump_stack_lvl+0x18c/0x250 [ 866.875025][T19652] ? show_regs_print_info+0x20/0x20 [ 866.880276][T19652] ? load_image+0x420/0x420 [ 866.884826][T19652] ? br_get_link_af_size_filtered+0x91/0xca0 [ 866.890933][T19652] ? __lock_acquire+0x7d80/0x7d80 [ 866.896006][T19652] should_fail_ex+0x394/0x4c0 [ 866.900735][T19652] should_failslab+0x9/0x20 [ 866.905294][T19652] slab_pre_alloc_hook+0x59/0x300 [ 866.910381][T19652] kmem_cache_alloc_node+0x5e/0x310 [ 866.915631][T19652] ? __alloc_skb+0x103/0x2c0 [ 866.920316][T19652] __alloc_skb+0x103/0x2c0 [ 866.924793][T19652] br_info_notify+0x105/0x240 [ 866.929550][T19652] br_setlink+0x387/0x860 [ 866.933955][T19652] ? br_vlan_info+0x460/0x460 [ 866.938695][T19652] ? __mutex_lock+0x923/0xc80 [ 866.943388][T19652] ? __mutex_lock+0x4d2/0xc80 [ 866.948095][T19652] ? nla_find+0x131/0x150 [ 866.952439][T19652] rtnl_bridge_setlink+0x637/0x7d0 [ 866.957574][T19652] ? mutex_lock_nested+0x20/0x20 [ 866.962556][T19652] ? rtnl_bridge_dellink+0x6f0/0x6f0 [ 866.967903][T19652] ? rtnl_bridge_dellink+0x6f0/0x6f0 [ 866.973229][T19652] rtnetlink_rcv_msg+0x843/0xf90 [ 866.978186][T19652] ? rtnetlink_rcv_msg+0x220/0xf90 [ 866.983320][T19652] ? rtnetlink_bind+0x80/0x80 [ 866.988019][T19652] ? perf_trace_preemptirq_template+0xac/0x330 [ 866.994209][T19652] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 867.000221][T19652] ? lock_chain_count+0x20/0x20 [ 867.005138][T19652] ? __local_bh_enable_ip+0x13a/0x1c0 [ 867.010558][T19652] ? lockdep_hardirqs_on+0x98/0x150 [ 867.015788][T19652] ? __local_bh_enable_ip+0x13a/0x1c0 [ 867.021181][T19652] ? _local_bh_enable+0xa0/0xa0 [ 867.026055][T19652] ? __dev_queue_xmit+0x275/0x3630 [ 867.031206][T19652] ? __dev_queue_xmit+0x1bc2/0x3630 [ 867.036453][T19652] ? __dev_queue_xmit+0x275/0x3630 [ 867.041619][T19652] ? ref_tracker_free+0x686/0x830 [ 867.046695][T19652] netlink_rcv_skb+0x235/0x4c0 [ 867.051588][T19652] ? rtnetlink_bind+0x80/0x80 [ 867.056316][T19652] ? netlink_ack+0x1160/0x1160 [ 867.061129][T19652] ? __lock_acquire+0x7d80/0x7d80 [ 867.066225][T19652] ? netlink_deliver_tap+0x2e/0x1b0 [ 867.071483][T19652] netlink_unicast+0x7b1/0x930 [ 867.076283][T19652] netlink_sendmsg+0x8d0/0xbf0 [ 867.081090][T19652] ? netlink_getsockopt+0x590/0x590 [ 867.086326][T19652] ? apparmor_socket_sendmsg+0x170/0x330 [ 867.091988][T19652] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 867.097312][T19652] ? security_socket_sendmsg+0x80/0xa0 [ 867.102826][T19652] ? netlink_getsockopt+0x590/0x590 [ 867.108102][T19652] ____sys_sendmsg+0x61b/0x980 [ 867.112924][T19652] ? __asan_memset+0x22/0x40 [ 867.117547][T19652] ? __sys_sendmsg_sock+0x30/0x30 [ 867.122599][T19652] ? __import_iovec+0x5f2/0x850 [ 867.127486][T19652] ? import_iovec+0x73/0xa0 [ 867.132087][T19652] ___sys_sendmsg+0x2a6/0x360 [ 867.136806][T19652] ? get_pid_task+0x20/0x1e0 [ 867.141431][T19652] ? __sys_sendmsg+0x2b0/0x2b0 [ 867.146248][T19652] ? __lock_acquire+0x7d80/0x7d80 [ 867.151332][T19652] __se_sys_sendmsg+0x1d0/0x2c0 [ 867.156234][T19652] ? __x64_sys_sendmsg+0x80/0x80 [ 867.161239][T19652] ? lockdep_hardirqs_on+0x98/0x150 [ 867.166479][T19652] do_syscall_64+0x55/0xb0 [ 867.170929][T19652] ? clear_bhb_loop+0x40/0x90 [ 867.175638][T19652] ? clear_bhb_loop+0x40/0x90 [ 867.180333][T19652] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 867.186248][T19652] RIP: 0033:0x7f096f59de99 [ 867.190764][T19652] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 867.210392][T19652] RSP: 002b:00007f097047b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 867.218835][T19652] RAX: ffffffffffffffda RBX: 00007f096f826090 RCX: 00007f096f59de99 [ 867.226835][T19652] RDX: 000000002000c090 RSI: 0000200000000040 RDI: 0000000000000007 [ 867.234828][T19652] RBP: 00007f097047b090 R08: 0000000000000000 R09: 0000000000000000 [ 867.242855][T19652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 867.250850][T19652] R13: 00007f096f826128 R14: 00007f096f826090 R15: 00007ffc0c4e4ef8 [ 867.258879][T19652] [ 868.014454][T19668] netlink: 'syz.4.4745': attribute type 1 has an invalid length. [ 869.090415][T19679] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4747'. [ 869.171337][T19679] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 869.753408][T19690] syzkaller0: entered promiscuous mode [ 869.759481][T19690] syzkaller0: entered allmulticast mode [ 870.127594][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.139666][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 873.036685][T19723] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4762'. [ 873.057431][T19723] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 873.670102][T19733] netlink: 'syz.4.4767': attribute type 19 has an invalid length. [ 873.686429][T19733] netlink: 156 bytes leftover after parsing attributes in process `syz.4.4767'. [ 873.724146][T19733] netlink: 'syz.4.4767': attribute type 3 has an invalid length. [ 873.751313][T19733] netlink: 'syz.4.4767': attribute type 6 has an invalid length. [ 873.788639][T19733] netlink: 144448 bytes leftover after parsing attributes in process `syz.4.4767'. [ 874.058810][T19738] netlink: 'syz.2.4769': attribute type 10 has an invalid length. [ 874.111175][T19738] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4769'. [ 874.563637][T19751] netlink: 'syz.1.4775': attribute type 10 has an invalid length. [ 874.589116][T19751] netlink: 2 bytes leftover after parsing attributes in process `syz.1.4775'. [ 874.962324][T19757] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4777'. [ 874.992449][T19757] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 875.074189][T19760] netlink: 144 bytes leftover after parsing attributes in process `syz.2.4779'. [ 875.115327][T19760] team_slave_0: left promiscuous mode [ 875.143141][T19760] team_slave_0: left allmulticast mode [ 875.224553][T19760] team0: Port device team_slave_0 removed [ 875.257139][T19760] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 875.567249][T19770] netlink: 'syz.1.4783': attribute type 10 has an invalid length. [ 875.629340][T19770] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 875.650908][T19771] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4783'. [ 875.820528][T19771] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 875.930926][T19771] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 875.963666][T19771] bond0 (unregistering): (slave netdevsim0): Releasing backup interface [ 876.000207][T19771] bond0 (unregistering): Released all slaves [ 876.049912][T19770] netlink: 'syz.1.4783': attribute type 39 has an invalid length. [ 876.250765][T19770] hsr_slave_1 (unregistering): left promiscuous mode [ 876.661029][T19792] netlink: 'syz.0.4789': attribute type 10 has an invalid length. [ 876.724026][T19792] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4789'. [ 877.014193][T19797] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.4793'. [ 877.088543][T19797] netlink: del zone limit has 8 unknown bytes [ 877.235585][T19802] netlink: 'syz.4.4794': attribute type 10 has an invalid length. [ 877.245454][T19802] netlink: 2 bytes leftover after parsing attributes in process `syz.4.4794'. [ 877.259727][T19802] batadv_slave_1: entered promiscuous mode [ 877.268727][T19802] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 877.286794][T19802] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 877.847410][T19815] netlink: 'syz.2.4800': attribute type 10 has an invalid length. [ 877.865438][T19815] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4800'. [ 878.283591][T19818] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4801'. [ 879.584608][T19848] FAULT_INJECTION: forcing a failure. [ 879.584608][T19848] name failslab, interval 1, probability 0, space 0, times 0 [ 879.606507][T19848] CPU: 0 PID: 19848 Comm: syz.4.4814 Not tainted syzkaller #0 [ 879.614034][T19848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 879.624123][T19848] Call Trace: [ 879.627441][T19848] [ 879.630420][T19848] dump_stack_lvl+0x18c/0x250 [ 879.635152][T19848] ? show_regs_print_info+0x20/0x20 [ 879.640436][T19848] ? load_image+0x420/0x420 [ 879.644987][T19848] ? __might_sleep+0xe0/0xe0 [ 879.649641][T19848] ? __lock_acquire+0x7d80/0x7d80 [ 879.654714][T19848] ? trace_contention_end+0x39/0xe0 [ 879.659957][T19848] should_fail_ex+0x394/0x4c0 [ 879.664685][T19848] should_failslab+0x9/0x20 [ 879.669233][T19848] slab_pre_alloc_hook+0x59/0x300 [ 879.674322][T19848] ? mutex_lock_nested+0x20/0x20 [ 879.679299][T19848] ? tcx_link_attach+0x165/0x960 [ 879.684256][T19848] __kmem_cache_alloc_node+0x53/0x250 [ 879.689678][T19848] ? tcx_link_attach+0x165/0x960 [ 879.694630][T19848] kmalloc_trace+0x2a/0xe0 [ 879.699072][T19848] tcx_link_attach+0x165/0x960 [ 879.703894][T19848] ? __fget_files+0x28/0x460 [ 879.708526][T19848] ? tcx_prog_query+0x140/0x140 [ 879.713403][T19848] ? __fget_files+0x3fc/0x460 [ 879.718120][T19848] ? bpf_prog_attach_check_attach_type+0x188/0x440 [ 879.724638][T19848] link_create+0x390/0x720 [ 879.729076][T19848] __sys_bpf+0x4d7/0x890 [ 879.733344][T19848] ? bpf_link_show_fdinfo+0x390/0x390 [ 879.738759][T19848] ? lock_chain_count+0x20/0x20 [ 879.743731][T19848] __x64_sys_bpf+0x7c/0x90 [ 879.748173][T19848] do_syscall_64+0x55/0xb0 [ 879.752718][T19848] ? clear_bhb_loop+0x40/0x90 [ 879.757439][T19848] ? clear_bhb_loop+0x40/0x90 [ 879.762134][T19848] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 879.768069][T19848] RIP: 0033:0x7f096f59de99 [ 879.772506][T19848] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 879.792329][T19848] RSP: 002b:00007f097049c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 879.800756][T19848] RAX: ffffffffffffffda RBX: 00007f096f825fa0 RCX: 00007f096f59de99 [ 879.808751][T19848] RDX: 0000000000000020 RSI: 0000200000000580 RDI: 000000000000001c [ 879.816763][T19848] RBP: 00007f097049c090 R08: 0000000000000000 R09: 0000000000000000 [ 879.824750][T19848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 879.832831][T19848] R13: 00007f096f826038 R14: 00007f096f825fa0 R15: 00007ffc0c4e4ef8 [ 879.840839][T19848] [ 880.319178][T19857] validate_nla: 1 callbacks suppressed [ 880.319214][T19857] netlink: 'syz.0.4816': attribute type 10 has an invalid length. [ 880.347049][T19857] __nla_validate_parse: 1 callbacks suppressed [ 880.348135][T19857] netlink: 156 bytes leftover after parsing attributes in process `syz.0.4816'. [ 881.040076][T19875] netlink: 'syz.4.4825': attribute type 10 has an invalid length. [ 881.049530][T19875] netlink: 2 bytes leftover after parsing attributes in process `syz.4.4825'. [ 881.162359][T19873] netlink: 'syz.1.4824': attribute type 2 has an invalid length. [ 881.187016][T19873] netlink: 'syz.1.4824': attribute type 8 has an invalid length. [ 881.194899][T19873] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4824'. [ 881.499073][T19879] netlink: 'syz.4.4827': attribute type 39 has an invalid length. [ 881.781628][T19885] netlink: 'syz.2.4828': attribute type 2 has an invalid length. [ 881.806641][T19885] netlink: 'syz.2.4828': attribute type 8 has an invalid length. [ 881.836574][T19885] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4828'. [ 882.087444][T19893] netlink: 'syz.0.4831': attribute type 10 has an invalid length. [ 882.128672][T19893] netlink: 140 bytes leftover after parsing attributes in process `syz.0.4831'. [ 882.228715][T19897] netlink: 'syz.1.4835': attribute type 10 has an invalid length. [ 882.245699][T19897] netlink: 2 bytes leftover after parsing attributes in process `syz.1.4835'. [ 884.332089][ T5780] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 884.341927][ T5780] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 884.368420][ T5780] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 884.387531][ T5780] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 884.396130][ T5780] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 884.403721][ T5780] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 884.688755][ T9386] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 884.722487][T19927] netlink: 'syz.2.4844': attribute type 10 has an invalid length. [ 884.741884][T19927] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4844'. [ 886.516834][ T5780] Bluetooth: hci0: command tx timeout [ 887.599877][ T9386] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 887.706040][ T9386] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 887.828677][ T9386] netdevsim netdevsim0 ÿÿÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 888.281896][T19924] chnl_net:caif_netlink_parms(): no params data found [ 888.615822][ T5780] Bluetooth: hci0: command tx timeout [ 889.134732][T19962] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.4852'. [ 889.167549][T19924] bridge0: port 1(bridge_slave_0) entered blocking state [ 889.175557][T19924] bridge0: port 1(bridge_slave_0) entered disabled state [ 889.210645][T19924] bridge_slave_0: entered allmulticast mode [ 889.230128][T19924] bridge_slave_0: entered promiscuous mode [ 889.254598][T19924] bridge0: port 2(bridge_slave_1) entered blocking state [ 889.262997][T19924] bridge0: port 2(bridge_slave_1) entered disabled state [ 889.277013][T19924] bridge_slave_1: entered allmulticast mode [ 889.284586][T19924] bridge_slave_1: entered promiscuous mode [ 889.463237][T19924] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 889.760043][T19924] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 889.826954][T19974] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4854'. [ 889.859911][T19974] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 890.088908][T19924] team0: Port device team_slave_0 added [ 890.239836][T19924] team0: Port device team_slave_1 added [ 890.407455][T19924] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 890.414478][T19924] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 890.508197][T19924] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 890.598371][T19924] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 890.617961][T19924] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 890.653712][T19924] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 890.676405][ T5780] Bluetooth: hci0: command tx timeout [ 890.880899][T19924] hsr_slave_0: entered promiscuous mode [ 890.901058][T19924] hsr_slave_1: entered promiscuous mode [ 890.908218][T19924] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 890.915878][T19924] Cannot create hsr debugfs directory [ 891.382333][ T9386] hsr_slave_0: left promiscuous mode [ 891.416497][ T9386] bridge0: port 3(team0) entered disabled state [ 891.429157][T20006] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4862'. [ 891.458392][ T9386] bridge_slave_0: left promiscuous mode [ 891.475016][ T9386] bridge0: port 1(bridge_slave_0) entered disabled state [ 891.588995][ T9386] veth1_macvtap: left promiscuous mode [ 891.605434][ T9386] veth0_macvtap: left promiscuous mode [ 891.611691][ T9386] veth1_vlan: left promiscuous mode [ 891.618281][ T9386] veth0_vlan: left promiscuous mode [ 891.846106][T20015] FAULT_INJECTION: forcing a failure. [ 891.846106][T20015] name failslab, interval 1, probability 0, space 0, times 0 [ 891.880188][T20015] CPU: 0 PID: 20015 Comm: syz.4.4864 Not tainted syzkaller #0 [ 891.888012][T20015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 891.898132][T20015] Call Trace: [ 891.901505][T20015] [ 891.904515][T20015] dump_stack_lvl+0x18c/0x250 [ 891.909323][T20015] ? show_regs_print_info+0x20/0x20 [ 891.914635][T20015] ? load_image+0x420/0x420 [ 891.919249][T20015] ? __might_sleep+0xe0/0xe0 [ 891.923946][T20015] ? __lock_acquire+0x7d80/0x7d80 [ 891.929173][T20015] should_fail_ex+0x394/0x4c0 [ 891.933975][T20015] should_failslab+0x9/0x20 [ 891.938569][T20015] slab_pre_alloc_hook+0x59/0x300 [ 891.943682][T20015] ? trace_probe_init+0x66/0x400 [ 891.948676][T20015] ? trace_probe_init+0x66/0x400 [ 891.953688][T20015] __kmem_cache_alloc_node+0x53/0x250 [ 891.959132][T20015] ? trace_probe_init+0x66/0x400 [ 891.964116][T20015] __kmalloc+0xa7/0x240 [ 891.968340][T20015] trace_probe_init+0x66/0x400 [ 891.973176][T20015] create_local_trace_uprobe+0x186/0x660 [ 891.978880][T20015] ? bpf_get_uprobe_info+0x520/0x520 [ 891.984234][T20015] ? _copy_from_user+0xa5/0xe0 [ 891.989059][T20015] perf_uprobe_init+0xf3/0x190 [ 891.993885][T20015] perf_uprobe_event_init+0xe6/0x180 [ 891.999246][T20015] perf_try_init_event+0x12b/0x3c0 [ 892.004411][T20015] ? perf_event_alloc+0xb23/0x2150 [ 892.009567][T20015] perf_event_alloc+0xed4/0x2150 [ 892.014574][T20015] ? find_lively_task_by_vpid+0x19/0x290 [ 892.020264][T20015] ? find_lively_task_by_vpid+0x19/0x290 [ 892.026013][T20015] __se_sys_perf_event_open+0x740/0x1c60 [ 892.031908][T20015] ? mutex_unlock+0x10/0x10 [ 892.036491][T20015] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 892.042211][T20015] ? lock_chain_count+0x20/0x20 [ 892.047137][T20015] ? lockdep_hardirqs_on+0x98/0x150 [ 892.052417][T20015] ? __x64_sys_perf_event_open+0x20/0xc0 [ 892.058142][T20015] do_syscall_64+0x55/0xb0 [ 892.062639][T20015] ? clear_bhb_loop+0x40/0x90 [ 892.067385][T20015] ? clear_bhb_loop+0x40/0x90 [ 892.072169][T20015] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 892.078143][T20015] RIP: 0033:0x7f096f59de99 [ 892.082617][T20015] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 892.102306][T20015] RSP: 002b:00007f097049c028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 892.110882][T20015] RAX: ffffffffffffffda RBX: 00007f096f825fa0 RCX: 00007f096f59de99 [ 892.119027][T20015] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 892.127169][T20015] RBP: 00007f097049c090 R08: 0000000000000000 R09: 0000000000000000 [ 892.135185][T20015] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 892.143209][T20015] R13: 00007f096f826038 R14: 00007f096f825fa0 R15: 00007ffc0c4e4ef8 [ 892.151291][T20015] [ 892.179442][T20015] trace_uprobe: Failed to allocate trace_uprobe.(-12) [ 892.756350][ T5780] Bluetooth: hci0: command tx timeout [ 893.290289][ T9386] team_slave_1 (unregistering): left promiscuous mode [ 893.298875][ T9386] team_slave_1 (unregistering): left allmulticast mode [ 893.314822][ T9386] team0 (unregistering): Port device team_slave_1 removed [ 893.364058][ T9386] team_slave_0 (unregistering): left promiscuous mode [ 893.371293][ T9386] team_slave_0 (unregistering): left allmulticast mode [ 893.379632][ T9386] team0 (unregistering): Port device team_slave_0 removed [ 893.428608][ T9386] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 893.475373][ T9386] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 893.534461][ T9386] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 893.782675][ T9386] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 893.842452][ T9386] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 893.853373][ T9386] bond0 (unregistering): Released all slaves [ 894.878618][T20047] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4872'. [ 894.940692][T20047] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 895.006611][T20056] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4873'. [ 895.060972][T20056] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 895.086883][ T29] INFO: task syz.3.4153:17747 blocked for more than 143 seconds. [ 895.094716][ T29] Not tainted syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 895.118609][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 895.166426][ T29] task:syz.3.4153 state:D stack:25704 pid:17747 ppid:12477 flags:0x00004002 [ 895.196354][ T29] Call Trace: [ 895.202203][ T29] [ 895.211491][ T29] __schedule+0x15ae/0x4660 [ 895.228852][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 895.243451][ T29] ? asan.module_dtor+0x20/0x20 [ 895.259394][ T29] ? trace_contention_end+0x39/0xe0 [ 895.278454][ T29] ? task_work_cancel+0xa5/0x220 [ 895.292722][ T29] ? task_work_cancel_func+0x210/0x210 [ 895.308668][ T29] schedule+0xbd/0x170 [ 895.319674][ T29] ? _free_event+0x10d/0xfb0 [ 895.334548][ T29] _free_event+0x176/0xfb0 [ 895.349438][ T29] perf_event_release_kernel+0x7c8/0x850 [ 895.367730][ T29] ? __might_sleep+0xe0/0xe0 [ 895.384959][ T29] ? calc_timer_values+0x400/0x400 [ 895.398542][ T29] ? perf_mmap+0x15e0/0x15e0 [ 895.414050][ T29] perf_release+0x3b/0x40 [ 895.423110][ T29] __fput+0x221/0x940 [ 895.436229][ T29] task_work_run+0x1d4/0x260 [ 895.441034][ T29] ? task_work_cancel+0x220/0x220 [ 895.451181][ T29] do_exit+0x986/0x2530 [ 895.455422][ T29] ? put_task_struct+0xc0/0xc0 [ 895.470546][ T29] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 895.481150][ T29] ? get_signal+0x100e/0x1390 [ 895.485923][ T29] ? lock_chain_count+0x20/0x20 [ 895.511485][ T29] ? _raw_spin_lock_irq+0xbb/0xf0 [ 895.521612][ T29] do_group_exit+0x22d/0x2f0 [ 895.527609][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 895.543218][ T29] get_signal+0x12a6/0x1390 [ 895.548065][ T29] arch_do_signal_or_restart+0xc2/0x7b0 [ 895.564025][ T29] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 895.569953][ T29] ? get_sigframe_size+0x20/0x20 [ 895.585492][ T29] ? exit_to_user_mode_loop+0x3b/0x110 [ 895.595457][ T29] exit_to_user_mode_loop+0x70/0x110 [ 895.606435][ T29] exit_to_user_mode_prepare+0xee/0x180 [ 895.616246][ T29] syscall_exit_to_user_mode+0x1a/0x50 [ 895.626261][ T29] do_syscall_64+0x61/0xb0 [ 895.630749][ T29] ? clear_bhb_loop+0x40/0x90 [ 895.645757][ T29] ? clear_bhb_loop+0x40/0x90 [ 895.655930][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 895.671495][ T29] RIP: 0033:0x7ff25d39de99 [ 895.690710][ T29] RSP: 002b:00007ff25e220028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 895.709531][ T29] RAX: 000000000000005c RBX: 00007ff25d625fa0 RCX: 00007ff25d39de99 [ 895.747817][ T29] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000500 [ 895.755871][ T29] RBP: 00007ff25d433eaf R08: 0000000000000000 R09: 0000000000000000 [ 895.794572][ T29] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 895.816175][ T29] R13: 00007ff25d626038 R14: 00007ff25d625fa0 R15: 00007ffd35890bb8 [ 895.824273][ T29] [ 895.851629][ T29] [ 895.851629][ T29] Showing all locks held in the system: [ 895.894468][ T29] 1 lock held by rcu_tasks_trace/15: [ 895.922392][ T29] #0: ffff8880b8f3c298 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x29/0x130 [ 895.974187][ T29] 1 lock held by khungtaskd/29: [ 895.999684][ T29] #0: ffffffff8d131da0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 896.036247][ T29] 3 locks held by kworker/0:2/55: [ 896.041351][ T29] #0: ffff888017c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 896.091742][ T29] #1: ffffc9000130fd00 (fqdir_free_work){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 896.108304][ T29] #2: ffffffff8d137640 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x4c/0x530 [ 896.126113][ T29] 2 locks held by getty/5527: [ 896.131067][ T29] #0: ffff88814cc840a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 896.141075][ T29] #1: ffffc9000325e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x428/0x1370 [ 896.160718][ T29] 2 locks held by kworker/0:3/5810: [ 896.165991][ T29] #0: ffff888017c72538 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 896.181261][ T29] #1: ffffc90004a5fd00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 896.194102][ T29] 4 locks held by kworker/u4:35/9386: [ 896.204054][ T29] #0: ffff88801a25c938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 896.215323][ T29] #1: ffffc9000be77d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 896.226381][ T29] #2: ffffffff8e3c8b10 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x14c/0xbb0 [ 896.235872][ T29] #3: ffffffff8d137778 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x306/0x880 [ 896.251785][ T29] 2 locks held by syz.4.4873/20045: [ 896.257304][ T29] #0: ffffffff8d187ee8 (event_mutex){+.+.}-{3:3}, at: perf_trace_destroy+0x2e/0x140 [ 896.271221][ T29] #1: ffffffff8d137778 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3da/0x880 [ 896.282566][ T29] 1 lock held by syz.2.4874/20049: [ 896.292330][ T29] #0: ffffffff8d187ee8 (event_mutex){+.+.}-{3:3}, at: perf_trace_destroy+0x2e/0x140 [ 896.302581][ T29] 1 lock held by rm/20068: [ 896.311331][ T29] [ 896.313849][ T29] ============================================= [ 896.313849][ T29] [ 896.340897][ T29] NMI backtrace for cpu 1 [ 896.345382][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 896.352611][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 896.362702][ T29] Call Trace: [ 896.366053][ T29] [ 896.369020][ T29] dump_stack_lvl+0x18c/0x250 [ 896.373759][ T29] ? nmi_cpu_backtrace+0x1b6/0x3e0 [ 896.378923][ T29] ? show_regs_print_info+0x20/0x20 [ 896.384189][ T29] ? load_image+0x420/0x420 [ 896.388772][ T29] nmi_cpu_backtrace+0x3a6/0x3e0 [ 896.393777][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 896.399977][ T29] ? load_image+0x420/0x420 [ 896.404527][ T29] ? wq_watchdog_touch+0xef/0x170 [ 896.409616][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 896.415733][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 896.421769][ T29] watchdog+0xf59/0xfa0 [ 896.425986][ T29] ? watchdog+0x1e1/0xfa0 [ 896.430384][ T29] kthread+0x2fa/0x390 [ 896.434511][ T29] ? hungtask_pm_notify+0x50/0x50 [ 896.439682][ T29] ? kthread_blkcg+0xd0/0xd0 [ 896.444315][ T29] ret_from_fork+0x48/0x80 [ 896.448812][ T29] ? kthread_blkcg+0xd0/0xd0 [ 896.453464][ T29] ret_from_fork_asm+0x11/0x20 [ 896.458506][ T29] [ 896.462592][ T29] Sending NMI from CPU 1 to CPUs 0: [ 896.468054][ C0] NMI backtrace for cpu 0 [ 896.468064][ C0] CPU: 0 PID: 17180 Comm: syz-executor Not tainted syzkaller #0 [ 896.468079][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 896.468089][ C0] RIP: 0010:__lock_acquire+0x2592/0x7d80 [ 896.468110][ C0] Code: 00 00 fc ff df 85 db 4c 8b 7c 24 18 4c 8b a4 24 e0 00 00 00 0f 85 55 04 00 00 48 c7 c0 dc 9f 8c 8e 48 c1 e8 03 42 0f b6 04 00 <84> c0 0f 85 3b 4c 00 00 83 3d 2b 72 24 0d 00 0f 84 37 eb ff ff 48 [ 896.468124][ C0] RSP: 0018:ffffc9000c80f4e0 EFLAGS: 00000803 [ 896.468137][ C0] RAX: 0000000000000000 RBX: ffffffff90b51480 RCX: 0000000000048000 [ 896.468148][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff911e7500 [ 896.468176][ C0] RBP: ffffc9000c80f728 R08: dffffc0000000000 R09: 1ffffffff223cea0 [ 896.468189][ C0] R10: dffffc0000000000 R11: fffffbfff223cea1 R12: 28a5115b21b9eb17 [ 896.468202][ C0] R13: ffff88802b9e5a00 R14: 0000000021b9eb17 R15: ffff88802b9e6500 [ 896.468214][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 896.468228][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 896.468240][ C0] CR2: 000055f0bd777138 CR3: 000000002e7f6000 CR4: 00000000003506f0 [ 896.468266][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 896.468276][ C0] DR3: 0000200000000300 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 896.468286][ C0] Call Trace: [ 896.468291][ C0] [ 896.468333][ C0] ? debug_check_no_obj_freed+0x47b/0x520 [ 896.468356][ C0] ? verify_lock_unused+0x140/0x140 [ 896.468376][ C0] ? perf_trace_preemptirq_template+0xac/0x330 [ 896.468402][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 896.468421][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 896.468440][ C0] ? lock_chain_count+0x20/0x20 [ 896.468460][ C0] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 896.468485][ C0] lock_acquire+0x19e/0x420 [ 896.468503][ C0] ? free_unref_page+0x15f/0x2e0 [ 896.468533][ C0] ? read_lock_is_recursive+0x20/0x20 [ 896.468552][ C0] ? do_raw_spin_trylock+0xb2/0x190 [ 896.468574][ C0] ? do_raw_spin_lock+0x2b0/0x2b0 [ 896.468600][ C0] _raw_spin_trylock+0x47/0x80 [ 896.468621][ C0] ? free_unref_page+0x15f/0x2e0 [ 896.468645][ C0] free_unref_page+0x15f/0x2e0 [ 896.468672][ C0] vfree+0x1a7/0x340 [ 896.468695][ C0] ? kcov_open+0x90/0x90 [ 896.468714][ C0] kcov_close+0x2b/0x50 [ 896.468733][ C0] __fput+0x221/0x940 [ 896.468755][ C0] task_work_run+0x1d4/0x260 [ 896.468780][ C0] ? task_work_cancel+0x220/0x220 [ 896.468803][ C0] ? do_exit+0x981/0x2530 [ 896.468827][ C0] ? kmem_cache_free+0xf8/0x290 [ 896.468854][ C0] do_exit+0x986/0x2530 [ 896.468885][ C0] ? put_task_struct+0xc0/0xc0 [ 896.468911][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 896.468930][ C0] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 896.468956][ C0] ? lock_chain_count+0x20/0x20 [ 896.468975][ C0] ? _raw_spin_lock_irq+0xbb/0xf0 [ 896.468998][ C0] do_group_exit+0x22d/0x2f0 [ 896.469022][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 896.469043][ C0] get_signal+0x12a6/0x1390 [ 896.469070][ C0] arch_do_signal_or_restart+0xc2/0x7b0 [ 896.469098][ C0] ? get_sigframe_size+0x20/0x20 [ 896.469120][ C0] ? perf_trace_preemptirq_template+0xac/0x330 [ 896.469151][ C0] ? __se_sys_clock_nanosleep+0x30f/0x3a0 [ 896.469169][ C0] ? exit_to_user_mode_loop+0x3b/0x110 [ 896.469194][ C0] exit_to_user_mode_loop+0x70/0x110 [ 896.469217][ C0] exit_to_user_mode_prepare+0xee/0x180 [ 896.469240][ C0] syscall_exit_to_user_mode+0x1a/0x50 [ 896.469259][ C0] do_syscall_64+0x61/0xb0 [ 896.469283][ C0] ? clear_bhb_loop+0x40/0x90 [ 896.469297][ C0] ? clear_bhb_loop+0x40/0x90 [ 896.469313][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 896.469341][ C0] RIP: 0033:0x7f657755e6ce [ 896.469354][ C0] Code: Unable to access opcode bytes at 0x7f657755e6a4. [ 896.469362][ C0] RSP: 002b:00007ffcbf74f698 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 896.469378][ C0] RAX: 0000000000000000 RBX: 000055558af8b500 RCX: 00007f657755e6ce [ 896.469389][ C0] RDX: 00007ffcbf74f6f0 RSI: 0000000000000000 RDI: 0000000000000000 [ 896.469399][ C0] RBP: 00007ffcbf74f75c R08: 0000000000000000 R09: 0000000000000000 [ 896.469408][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388 [ 896.469418][ C0] R13: 00000000000927c0 R14: 00000000000da8ed R15: 00007ffcbf74f7b0 [ 896.469438][ C0] [ 896.826839][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 896.826891][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 896.826963][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 896.827027][ T29] Call Trace: [ 896.827066][ T29] [ 896.827114][ T29] dump_stack_lvl+0x18c/0x250 [ 896.827216][ T29] ? show_regs_print_info+0x20/0x20 [ 896.827310][ T29] ? load_image+0x420/0x420 [ 896.827404][ T29] panic+0x2ca/0x720 [ 896.827475][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 896.827537][ T29] ? __irq_work_queue_local+0x13a/0x3b0 [ 896.827621][ T29] ? preempt_schedule_thunk+0x1a/0x30 [ 896.827709][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 896.827778][ T29] watchdog+0xf98/0xfa0 [ 896.827842][ T29] ? watchdog+0x1e1/0xfa0 [ 896.827934][ T29] kthread+0x2fa/0x390 [ 896.827987][ T29] ? hungtask_pm_notify+0x50/0x50 [ 896.828065][ T29] ? kthread_blkcg+0xd0/0xd0 [ 896.828104][ T29] ret_from_fork+0x48/0x80 [ 896.828174][ T29] ? kthread_blkcg+0xd0/0xd0 [ 896.828229][ T29] ret_from_fork_asm+0x11/0x20 [ 896.828366][ T29] [ 896.829352][ T29] Kernel Offset: disabled [ 897.015966][ T29] Rebooting in 86400 seconds..