last executing test programs: 2m49.91447833s ago: executing program 2 (id=8685): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xb, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000838500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="1802000040000000000000000000000085100000010000009500000000000000180100002020732500000000002020207b1af8ff00000000bea100000000000007010000f8ffffffb702000008000000b703000000000028850000000f00000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0xfc7f, &(0x7f0000000100)=""/152, 0x41000, 0xa}, 0x94) 2m49.507954929s ago: executing program 2 (id=8688): r0 = socket$kcm(0x2b, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.kill\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x6, 0x12, &(0x7f0000000200)=r1, 0x4) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0x20, 0x61, 0x11, 0x6c}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0xd}, 0x94) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000860000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000e00850000008200000095"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000002c0)=r3, 0x4) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0xffffffff, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r7}, &(0x7f0000000280), &(0x7f0000000240)=r4}, 0x20) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000000c0)=r8, 0x4) sendmsg$inet(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4000) 2m49.158277678s ago: executing program 2 (id=8689): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) r3 = perf_event_open$cgroup(&(0x7f00000006c0)={0x2, 0x80, 0x2, 0x66, 0x8, 0x80, 0x0, 0x80000000, 0x10541, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x5, 0x1, @perf_bp={&(0x7f0000000200), 0x5}, 0x1090, 0x2, 0x0, 0x4, 0x7fffffff, 0x7, 0x9, 0x0, 0x2, 0x0, 0x1}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0xd) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x14, &(0x7f0000000440)=[{&(0x7f0000000280)="d8000000140081054e81f782db44b9040a1d08020a000000040000a118000200fe80000000000e1208000f0100a10401a80016eaa4000640feffffffffffffffb94dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c817bd6c496ddffaa2795edb1e61e0100000000000000cb090000001fb791643a5ee4001b14547df36745d6d930dfe1d9d322fe7c9fd68775730d96a4683f5aeb4edbb57a5025ccca9e00158c89ed6cb4d1ac95e7765e04c2360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b4", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/244, 0xf4}, {&(0x7f0000000b00)=""/184, 0xb8}], 0x3, &(0x7f0000000c00)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd8}, 0x10000) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0xffffffffffffffff, 0xb0df, 0x18}, 0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0], 0x0, 0xd5, &(0x7f0000000100)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0xd6, 0x8, 0x0, 0x0}}, 0x10) r7 = perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x79, 0x26, 0x2, 0x5, 0x0, 0x4, 0x20c0, 0x6, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000240), 0x1}, 0x14000, 0x8, 0xffff, 0x2, 0x9dbc, 0x3, 0xbf, 0x0, 0x7fffffff, 0x0, 0x101}, 0xffffffffffffffff, 0xd, r3, 0xa) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r7, 0x4008240b, &(0x7f00000008c0)={0x5, 0x80, 0x40, 0x40, 0xf, 0xfa, 0x0, 0x0, 0x10000, 0xb, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000880), 0x7}, 0xc00, 0xd62, 0x5, 0x4, 0x0, 0x58a, 0x4, 0x0, 0xdb, 0x0, 0x3}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f00000005c0)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000000000000000000390000000000009500000000000000cd1a00000000000095000000f7b548b858676d9a994fa3a08086729bc0f672d1dfc6abc11a9060304d4e7f5004eb10fa757df9d17cb8d9cd777b8ebc6a23bb48ab2b78d1730f1248d8fb8b2627d6a1a551ae8b131ec9adcaca2a9a8a9c1780b5ea7146921820ebaeccaea1737cf15b8f3bfd4fe87e7aa2836900000000000062596cf83352a8246a7d0bf6d141225af71dbdc5823bfa0838cfba7f0217b5796e09a5d33c275cd69adc5641a56253a8174de9431c149f54bc"], &(0x7f0000000000)='GPL\x00', 0x4, 0xec, &(0x7f00000004c0)=""/236, 0x0, 0x0, '\x00', r6}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0x7, '\x00', r6, 0xffffffffffffffff, 0x4, 0x0, 0x2}, 0x50) 2m46.806395693s ago: executing program 2 (id=8706): socket$kcm(0x29, 0x2, 0x0) (async, rerun: 64) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) r0 = socket$kcm(0x29, 0x5, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xffffffffffff0001, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x7, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async, rerun: 64) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x9, 0x4, 0x8, 0xb}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000ff80850000002d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) r3 = socket$kcm(0x10, 0x2, 0x4) (rerun: 32) sendmsg$kcm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000300)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f3317000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400a0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4008814) (async, rerun: 32) r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x2d1}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x19, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r7) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r2}, 0xc) (async, rerun: 64) setsockopt$sock_attach_bpf(r0, 0x1, 0x34, &(0x7f00000000c0), 0x54) (rerun: 64) syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, 0x0) 2m45.595930621s ago: executing program 2 (id=8721): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000440)=@l2={0x1f, 0xfe01, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xaa2, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8146) recvmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x100) r3 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0xa, 0x0, @empty}}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000001001000001000000dc00000000000000edf8b94e5b510056aa0cae89788c1f82aefe0433df4de56a905c3f5e46e8e4aab714c77be3a35865ec3b5dcb3db9543b9922252ef22e932e7aaf2e"], 0x18}, 0x0) socket$kcm(0x10, 0x2, 0x4) close(r1) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000740)="5c00000013006bcc9e3be35c6e17aa33074b876c1d0000007ea60864160af36514000cc0080019000300000006001dc00200bc24eab5008000001e618294ff4051f60a84c9f4d4938037e786a6d00010000400000000000000c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4004004) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af3653c001ac004000202080002000600", 0x2e}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 2m44.847115039s ago: executing program 2 (id=8724): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open$cgroup(&(0x7f0000000340)={0x2, 0x80, 0x55, 0x4, 0x40, 0x5, 0x0, 0xb5, 0x8002, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xc49, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x40e5, 0x9, 0x1, 0x2, 0x0, 0x4, 0x5800, 0x0, 0x7, 0x0, 0x98e}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x1) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x5}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, r1, 0x8) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0x68}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000400)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000280)='syzkaller\x00', 0xffffffff}, 0x94) socket$kcm(0x2, 0x200000000000004, 0x106) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0x58, &(0x7f0000000700)}, 0x10) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x120, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa1d, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000001, 0x8}, 0x7602, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00'}, 0x80) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r5}, 0x8) setsockopt$sock_attach_bpf(r4, 0x1, 0x14, &(0x7f0000000040)=r6, 0x3b) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000840), 0x8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000880)={0x0, 0x1, 0x18}, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x10c002, 0xac5d, 0x3, 0x0, 0x0, 0xdf65}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 2m29.404947459s ago: executing program 32 (id=8724): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open$cgroup(&(0x7f0000000340)={0x2, 0x80, 0x55, 0x4, 0x40, 0x5, 0x0, 0xb5, 0x8002, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xc49, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x40e5, 0x9, 0x1, 0x2, 0x0, 0x4, 0x5800, 0x0, 0x7, 0x0, 0x98e}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x1) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x5}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, r1, 0x8) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0x68}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000400)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000280)='syzkaller\x00', 0xffffffff}, 0x94) socket$kcm(0x2, 0x200000000000004, 0x106) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0x58, &(0x7f0000000700)}, 0x10) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x120, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa1d, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000001, 0x8}, 0x7602, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00'}, 0x80) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r5}, 0x8) setsockopt$sock_attach_bpf(r4, 0x1, 0x14, &(0x7f0000000040)=r6, 0x3b) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000840), 0x8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000880)={0x0, 0x1, 0x18}, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x10c002, 0xac5d, 0x3, 0x0, 0x0, 0xdf65}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 20.579963159s ago: executing program 1 (id=9510): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x1b}, 0x107412, 0x0, 0x0, 0x3d603c7d87ed2789, 0x22c000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2, 0x40000000}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff99, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x13}, 0x78) 20.169843999s ago: executing program 1 (id=9514): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f89974785ae0619b77c6585f678ac92a3b6b4148f56b43c3dd75d75f97c8f92f60a2def458df05e2fbfb3e849b2b3cffd4f29446ae60dd76654b2639b2bc14350706214a6ab7a712d4317fbc3ca01d0d3ed6110b3775903141a5091a4d3db8eb335414fbdb288aba73aaf6d18000a3a2a069cf7f9402e1425bb6bc370576aa1faea0fe222671ecf99038fce8dba53dcb11f87cca"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0xa) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000840)=ANY=[@ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="110000000000000000000000272ada80676c0463656604a25f75098c6d8539b9db27f840fc2f95e95245b1f7cc8b536781e348277f5c4573996e2faf0ded7663b55d5037d37763200dc25fbee96fbffe5e3cce33e181f2ee60f53230a3c0d5d67b9fe2c179f8763e48d9b2fa3c67d010965a777ac8d74d716f6d288b95fa4b47ba6ebe2c3f8f897488c858359b85af2e4e3b2a67c79ff40dd3da22c6ec79d63d481f21872dc2a72d519d25d3b6daff17c36eda70db0a788c6a90e4017d0ea07279be6ee3b6000000000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES64=0x0], 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000e80)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffdffffe}, [@call={0x85, 0x0, 0x0, 0xc4}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r2, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000000c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x21, &(0x7f0000000200)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0xa8, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x10a194, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000001080)=ANY=[@ANYBLOB="180000000000000000000000feffffff180100002000732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000050000008500000006000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r4}, 0xc) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='freezer.self_freezing\x00', 0x0, 0x0) ioctl$TUNSETVNETBE(r5, 0x400454de, &(0x7f0000000540)=0x1) r6 = socket$kcm(0x10, 0x2, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(r6, &(0x7f0000000180)={0x0, 0x7b64, &(0x7f0000000280)=[{&(0x7f0000000100)="5c00000012006bab9e3fe3d8fd8978f45225d9ee000000007ea60860160af36504000100080ec000000002009ee517c356a7b0251e61e659ad3af435cf01c937e786a6d0bdd7fcf50e4509c5cc68b7ed9c232d786c35fe0000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r7 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r7, &(0x7f00000010c0)={&(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000480)='\\', 0x1}], 0x1}, 0x4000040) socket$kcm(0x10, 0x2, 0x0) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x90) socket$kcm(0xa, 0x2, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r8, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 18.38187993s ago: executing program 1 (id=9519): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3fb, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0xf}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000b00)={0x0, 0xf22fff7f, &(0x7f0000000180)=[{&(0x7f0000000080)="31de76fb398bc62d058b8a96924594f5476a0824be53f7a5949f80614c42391e4b80412938c955d34d37eb96ba7849c3eb823bb36724bd6f6d0219cfe5c884afcd2bdea5acf9c877c03dcdbbb3e47417b6707c27d4c5c1db1924071f6b6f23c7d199c799c9b0c41101e625fcdb7bbfd12a3eeeef4540a5698f058aaf6a141e5d333929b92a7f64e925bf0ef424c3ef29fcd5fd4721c547fde6abe4d47048b64511693624b0d786711abe4a66e250fcbfe95ac9037e58f331b26b6ed0d08e5c73ba4c49", 0xc00e}], 0x9, &(0x7f00000001c0)=ANY=[@ANYBLOB="000026d4f47f000000000002010000000000000000000000140000000000000000000000020000000000000000000000140000000000000000080000023e8000000000000000000011000000000000000000000000110000000000000002000000010000000000000000000000000000000000000000000000070000008300000000960000206a77bdd1a004129054e7704a000000"], 0xf}, 0x0) r1 = bpf$ITER_CREATE(0xb, 0x0, 0x0) close(r1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x8, 0xfd, 0x6, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x90, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9, 0x0, 0x2, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) syz_open_procfs$namespace(0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x40000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="02000000040000000800000001000000800000", @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="a189c0a9ed9ef03b8b64de8558d16a60640607a4e5ebc8bc9aa8891bf0767a396dda36b39455b565434b2fe80f0f2ebd40a140a17990ed27eb72", @ANYBLOB], 0x50) socket$kcm(0x29, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="18070000feffffff000a000000000000851000000200000026000000ffffff8585000000130000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x2, 0x92, &(0x7f0000000240)=""/146}, 0x94) 18.068571868s ago: executing program 1 (id=9524): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x1, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a000000080000000000000604000000080000000100000ff7ffffff0100000000030000fffffff70030615f5f002e305f"], &(0x7f0000000200)=""/138, 0x46, 0x8a, 0x1}, 0x28) 17.862832933s ago: executing program 1 (id=9528): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="282000000000000071114f00000000008510000002000000850000000000000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x604, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="180200000000000000000000000000008500000028000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000000)='syzkaller\x00', 0x40000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x40008, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 17.55643799s ago: executing program 1 (id=9532): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f93924fc60040011000a7403004800000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) sendmsg$inet(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)='m', 0x1}], 0x1}, 0x45811) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffc, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r3, 0xffffffffffffffff}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020267b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fffffff8850000002d000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r5}, 0xc) r6 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xd000000000000000}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff) r7 = perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffb, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x7, 0x20000000be}, 0x0, 0x0, 0x4082c5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r7, 0x2402, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1, 0x0, 0x0, 0x74000000}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xc4dc0, 0x0) 5.98446745s ago: executing program 5 (id=9590): perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x8020, 0x0, 0x1780, 0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x10506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000801, 0x1}, 0x7402, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x55}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000100)='syzkaller\x00'}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b26, &(0x7f0000000000)={'ipvlan1\x00', @random="0202000400"}) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c0000000a000000000000000000000b02000000000000000300000d0000000003000ff903000000000000000300000004000000030000000300000000000005000000000000005f2e"], &(0x7f0000000b80)=""/4090, 0x5e, 0xffa, 0x1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 5.159020359s ago: executing program 4 (id=9593): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f89974785ae0619b77c6585f678ac92a3b6b4148f56b43c3dd75d75f97c8f92f60a2def458df05e2fbfb3e849b2b3cffd4f29446ae60dd76654b2639b2bc14350706214a6ab7a712d4317fbc3ca01d0d3ed6110b3775903141a5091a4d3db8eb335414fbdb288aba73aaf6d18000a3a2a069cf7f9402e1425bb6bc370576aa1faea0fe222671ecf99038fce8dba53dcb11f87cca"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0xa) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000840)=ANY=[@ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="110000000000000000000000272ada80676c0463656604a25f75098c6d8539b9db27f840fc2f95e95245b1f7cc8b536781e348277f5c4573996e2faf0ded7663b55d5037d37763200dc25fbee96fbffe5e3cce33e181f2ee60f53230a3c0d5d67b9fe2c179f8763e48d9b2fa3c67d010965a777ac8d74d716f6d288b95fa4b47ba6ebe2c3f8f897488c858359b85af2e4e3b2a67c79ff40dd3da22c6ec79d63d481f21872dc2a72d519d25d3b6daff17c36eda70db0a788c6a90e4017d0ea07279be6ee3b6000000000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES64=0x0], 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000e80)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffdffffe}, [@call={0x85, 0x0, 0x0, 0xc4}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r2, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000000c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x21, &(0x7f0000000200)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0xa8, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x10a194, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000001080)=ANY=[@ANYBLOB="180000000000000000000000feffffff180100002000732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000050000008500000006000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r4}, 0xc) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='freezer.self_freezing\x00', 0x0, 0x0) ioctl$TUNSETVNETBE(r5, 0x400454de, &(0x7f0000000540)=0x1) r6 = socket$kcm(0x10, 0x2, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(r6, &(0x7f0000000180)={0x0, 0x7b64, &(0x7f0000000280)=[{&(0x7f0000000100)="5c00000012006bab9e3fe3d8fd8978f45225d9ee000000007ea60860160af36504000100080ec000000002009ee517c356a7b0251e61e659ad3af435cf01c937e786a6d0bdd7fcf50e4509c5cc68b7ed9c232d786c35fe0000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r7 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r7, &(0x7f00000010c0)={&(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000480)='\\', 0x1}], 0x1}, 0x4000040) socket$kcm(0x10, 0x2, 0x0) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x90) socket$kcm(0xa, 0x2, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r8, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 3.935754878s ago: executing program 5 (id=9594): socket$kcm(0x10, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000009b000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a000000095000000000000002f81c4"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs$namespace(0x0, &(0x7f0000000700)='ns/cgroup\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000440)='ns/cgroup\x00') socket$kcm(0x29, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f2, 0x0) socketpair(0x2a, 0x80000, 0xe9a6, &(0x7f0000000040)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140), 0x2}, 0x4080) 3.719324613s ago: executing program 4 (id=9597): socketpair$unix(0x1, 0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="0500"/12, @ANYRES32, @ANYBLOB="fc595ccccef83712d85e10e0a35cc9a80d94f1f1f2b52d98d2e0e7a0ec1730", @ANYRES64=0x0], 0x10) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x100, 0x0) ioctl$TUNSETLINK(r7, 0x400454cd, 0x30b) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20) sendmsg$inet(r3, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1, 0x0, 0x0, 0x6000}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0fb19f54c5452000000004000000000000109c0858942c6f", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r9, @ANYRES32=r8, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r9}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) r10 = socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x770f3639, 0x7}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r10, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) sendmsg$unix(0xffffffffffffffff, 0x0, 0x8800) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xfffffd26) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='devices.list\x00', 0x100002, 0x0) 3.139824766s ago: executing program 3 (id=9598): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000001440)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7, 0x7}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x15, 0x5, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) write$cgroup_subtree(r3, 0x0, 0xfe33) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000380)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x18, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2}, 0x94) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000780)=@generic={0x0, r5}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={r5, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x9, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xd9, &(0x7f00000005c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0xcf, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) sendmsg$inet(r4, &(0x7f0000000980)={&(0x7f0000000080)={0x2, 0x4e20, @private=0xa010102}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000140)="2a4ed93ddf851a6f7a2b1014a68442a40b90f5a5c731a6c254460df3e0cf401425ba92adb0020778058d6894ffb9431e791c6e1e3760163959860e85f0", 0x3d}], 0x1, &(0x7f0000000900)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x2f}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @remote, @local}}}], 0x80}, 0x8044885) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000340)={r2, 0x0, 0x0}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) perf_event_open(&(0x7f0000001440)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7, 0x7}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socket$kcm(0x15, 0x5, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, 0x0) (async) write$cgroup_subtree(r3, 0x0, 0xfe33) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000380)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x18, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2}, 0x94) (async) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000780)=@generic={0x0, r5}, 0x18) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={r5, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x9, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xd9, &(0x7f00000005c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0xcf, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) (async) sendmsg$inet(r4, &(0x7f0000000980)={&(0x7f0000000080)={0x2, 0x4e20, @private=0xa010102}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000140)="2a4ed93ddf851a6f7a2b1014a68442a40b90f5a5c731a6c254460df3e0cf401425ba92adb0020778058d6894ffb9431e791c6e1e3760163959860e85f0", 0x3d}], 0x1, &(0x7f0000000900)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x2f}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @remote, @local}}}], 0x80}, 0x8044885) (async) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000340)={r2, 0x0, 0x0}, 0x10) (async) 2.767717435s ago: executing program 3 (id=9599): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000012020000000000000000000001050000018000000000000000010000850200000000000000040000000000000400000000da"], 0x0, 0x52}, 0x20) 2.644712198s ago: executing program 3 (id=9600): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="d8000000160081044e81f782db44b9040a1d080206000000040000a118002000fe050000fffd0e1208000f0100810401a80016ea1f00010000005f54c92011148ed08734843cb12b00000803", 0x4c}, {&(0x7f0000000500)="383d180ced167f4e20efe387e9f655200e9ef57059e65fda2a46ea72b507f849a24f8bd9dd8ae89a3816c910a61c28d2fa089f96b9807a8f55a832c4f11e448538ffcee0c6b822436a53c33c12f3a69d81efd66f3affa37aaa31c99041171824f069f392273bd5ce1ab2b2b6f2dcd0b5b5935c360149c52fd45fec45f0cf2728205888adff194e4191575a40", 0x8c}], 0x2, 0x0, 0x0, 0x7400}, 0x40) 2.642811738s ago: executing program 5 (id=9601): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848030000005e140602000000000e000a001000fffd028000001294", 0x2e}], 0x1, 0x0, 0x0, 0x20}, 0x24088054) 2.58971888s ago: executing program 0 (id=9602): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1808000000000000000000000002000000100000feffffff180000000000000000000000000000009500000000000000cd1a0000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xec, &(0x7f00000004c0)=""/236}, 0x94) socketpair(0x29, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$kcm(r0, &(0x7f0000001800)={&(0x7f0000000080)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f00000016c0)=[{&(0x7f0000000100)=""/36, 0x24}, {&(0x7f0000000140)=""/139, 0x8b}, {&(0x7f0000000300)=""/232, 0xe8}, {&(0x7f0000000400)=""/4, 0x4}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/88, 0x58}, {&(0x7f0000001640)=""/71, 0x47}], 0x7, &(0x7f0000001740)=""/148, 0x94}, 0x2000) 2.395768264s ago: executing program 0 (id=9603): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000090ff000000000000000000850000002f00000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x14, 0xe80, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 2.387547614s ago: executing program 3 (id=9604): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x2, 0x200000000000001, 0x106) syz_clone(0x1000, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x4c, 0x0, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000440)={{0x1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000100)='%-5lx \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x0, 0x3}, {0x10040002, 0x0, 0x7, 0x5}], 0x10, 0x80}, 0x94) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0x12, &(0x7f00000008c0)=r6, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.295957516s ago: executing program 5 (id=9605): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x1d, 0xa, 0xa, 0x0, 0x0, 0x61, 0x10, 0x10}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8000000}, 0x80) 2.235085538s ago: executing program 4 (id=9606): socket$kcm(0x21, 0x2, 0x2) r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[{0x10, 0x110, 0x18}], 0x10}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0xf3}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x5, 0x3, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x108ea5, 0xc78, 0x0, 0x0, 0x0, 0x0, 0xae7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18006daaed13ff00000000000000000028"], 0x0}, 0x90) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="98eb000014006bcd9e", 0xeb98}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x3, 0x14, &(0x7f0000000580)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x2, 0x5, 0x84) r4 = bpf$ITER_CREATE(0xb, 0x0, 0x0) close(r4) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x42) setsockopt$sock_attach_bpf(r3, 0x84, 0x19, &(0x7f0000000000)=r5, 0x8) openat$cgroup_type(r5, 0x0, 0x2, 0x0) 1.956880794s ago: executing program 0 (id=9607): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f93924fc60040011000a7403004800000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) sendmsg$inet(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)='m', 0x1}], 0x1}, 0x45811) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffc, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r3}, 0x4) r4 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xd000000000000000}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21bef5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f94306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a835701bea8240399c56ce8f58df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b262341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261e58fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f9ac2f7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe8799fe266e2ccac80fefe750151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa796ea7b156d19612297c63bb20e1e0469f7615f67a9218cbace38f5236821314f76302b98afa93044b83989339ca10e6ae30e70e17a82f03e915b8425e8e7a91614306d2ae0bc3550d856f2d7293672b5673d264fc886b0c8bdf436a0fcd21bf9da7bdca98e34cd6e59b0a7ce4ba1b466561aaa35448dff47bb1d7df23d467689a6669e4300d5acf12e4d0b35abf91569f605b2f6df0d861"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffb, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x7, 0x20000000be}, 0x0, 0x0, 0x4082c5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r6, 0x2402, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1, 0x0, 0x0, 0x74000000}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xc4dc0, 0x0) 1.956382354s ago: executing program 5 (id=9608): perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x605, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xa5ba, 0x1, @perf_bp={0x0, 0x1}, 0x100410, 0x200, 0x6, 0x1, 0x9, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ced4fbd44e24eb0d34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3a06d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796efea77aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72e7ead0509d380578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece72f2090000f44a3210223fdae7ed04935c3c90941576aebc8619d73415cda2130f5011e4845505000001000000004f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c040035cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bf463261135e24d154114df1381b02a0dcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f884cc4806f40300966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e1700000000000000000000000000000000000000000000000000000520500002952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9a33c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a62415f78000000005f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c81c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b40824095135861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac00000b0000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e5dd921a5eadd4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293d5c833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e602c28ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f257aac5af18d8c6b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e29b10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe8e4cd14dc5c1eb98b63198f6f830745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b51c34a5384f2cf51180c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af243b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380ecf1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb79f558982d57c556ca1427b5960b79990565ca2a20996fcba472213744d3a156979651596afde2b0089f023fcfccd072bd6ea8445fc787390d71ec61d5b7b0f05f6931914bf49aa0d66eff294271a93e32f54f281068514a4cd2d0700a43df59e9924e4affdbd22405e675e9d7cdc10546571131831d4dc8c8363077a908d9ae4f27ff095f5b07667f93a3573d3fabfca58ee0a6b6a691102bb3c7be4dc5b816853275e7ae8c13ec341bad15353fad794b46c4fd73e1b4cc78de2156cb158870d5b8446dae9ba5f7f244e6cf8f6791671057347208a313ebbcb72b04706005670f2b0055e440d72c7c3316982c6ebe8675458cf6bb393b007f5cedb7bc411834600000000000000000000000000a20071b07d568a8150ed646b4978d0226d9651647a5999ae7c7c85322a215fcdb1adbad63499518fe0d10145d430422c78367dfa941f74b63f3884565ac89c673da2c2b1172be5f2cd1f3f453ebddd432bd24c73fa773b739e20fcec16a821230654a383ac1868495f67d942c772ca75e09073dbe9307ff5cac7c2c411149a4d989a8a019e068da218d4bc34e4102fd2f97397331e4cd70b4915582b635f07ca87f00dc929f902540f565c20add8675b79e005cf0277d954697317b907b77fa5d6b7feaebaf676a2a37de8aa70748fee4bc198ffd3e2de11eb0eff896fd94de0805ba6b1054a7b3e300d4581e9af62a1ecaee96d2819b3d192e5b9561eb622da25450f586be14017a1cf74f89a1dd18af004decfe266134c3d036ae7996931fe6008a73ed34c35f0da4ffee1fe63bc1af6ef1b4731d50b8ceb582a1e9c6e8d97f8290cc105754f592d16ccdb1df8636d7ca5e372cea97dd0f005cc7092b126dd46758917fb0d94b8483d403bd451429cc1660f0b5a529d8134dc2702f6d8e2f943d98fbe50a3ba653f13f98a00fcbf311f9758ade8e4eb87b4b9fb2d387f5d8c4bdcab2fff9ed8c9de961fd831a070381c8020352fea7c334b2959ddd956701a7ea415e224a81c9fa1ebbabe74f7743e09b6c8b72650b51d5c2000ef3679c039b3604374fc1af7ab354204afbd24f0e701bc08a98452ce2668617e85e0d876f5a8b6d9b777f1c384d8a9883e4262defb6b9aab8d5b76bc91ca50f87966797da2499ca0ac76707c0408a7b6d8708fe7714988babdc11f"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) setsockopt$sock_attach_bpf(r0, 0x88, 0x67, &(0x7f00000000c0)=r1, 0x4) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e22, @multicast1=0xe000004f}, 0x10, &(0x7f0000000040)=[{&(0x7f00000017c0)="8100108cdb5c324a61d879c750cfae230631823241b82a15643746dd2683c940c3985bfa1e54be80872a526669bd387550e5ed602c3ef9df15598ca7309c936dca998ebcbd73e82c4b958dd091d2a02bff625e467d63199c3279b5a02d5bc69c3ec7cb1500c663e24b", 0x69}], 0x1, &(0x7f0000000180)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x44}, @remote}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4c}}], 0x38}, 0x4840) r2 = socket$kcm(0xa, 0x2, 0x0) r3 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41) setsockopt$sock_attach_bpf(r3, 0x84, 0x1e, &(0x7f0000000000), 0x4) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) setsockopt$sock_attach_bpf(r3, 0x84, 0x1e, &(0x7f0000000040)=r4, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f00000002c0)=r1}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={r1, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000005c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6, &(0x7f0000000600)=[0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xa6, &(0x7f0000000680)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000700), &(0x7f0000000740), 0x8, 0x75, 0x8, 0x8, &(0x7f0000000780)}}, 0x10) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a00)={&(0x7f0000000900)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x98, 0x98, 0x8, [@volatile={0x1, 0x0, 0x0, 0x9, 0x3}, @float={0x8, 0x0, 0x0, 0x10, 0x10}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0x2, 0x2}, {0xa, 0x1}, {0x2, 0x5}, {0x2}, {0x6, 0x3}]}, @func={0xb, 0x0, 0x0, 0xc, 0x2}, @func={0x3, 0x0, 0x0, 0xc, 0x5}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0x3, 0x5}, {0x9, 0x4}, {0x0, 0x1}, {0x3ff, 0x2}, {0x10, 0x1}]}]}, {0x0, [0x0, 0x30, 0xbb1da707be53e992, 0x5f, 0x2e, 0x2e]}}, &(0x7f00000009c0)=""/25, 0xb8, 0x19, 0x1, 0x9, 0x10000}, 0x28) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r9 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x59, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r10, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r11, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r12) ioctl$PERF_EVENT_IOC_PERIOD(r8, 0x401c5820, &(0x7f0000000000)=0x818) r13 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000b00)=@generic={&(0x7f0000000ac0)='./file0\x00', 0x0, 0x10}, 0x18) r14 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001840)=ANY=[@ANYBLOB="1b00000000000000007a0000ce00000000000004", @ANYRES32, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000030000000100"/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001940)={0x6, 0x14, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0xa2}, [@map_idx={0x18, 0x7, 0x5, 0x0, 0x7}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ldst={0x0, 0x0, 0x2, 0xa, 0xa, 0xffffffffffffffc0, 0xffffffffffffffff}]}, &(0x7f0000000500)='GPL\x00', 0x10, 0x72, &(0x7f0000000540)=""/114, 0x41000, 0x2, '\x00', r6, 0x25, r7, 0x8, &(0x7f0000000a40)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000a80)={0x1, 0xc, 0x1, 0x1}, 0x10, 0x0, 0x0, 0x3, &(0x7f00000018c0)=[0xffffffffffffffff, r8, r2, r13, r14], &(0x7f0000001900)=[{0x5, 0x3, 0x7, 0x3}, {0x2, 0x3, 0x7, 0x4}, {0x5, 0x3, 0x4}], 0x10, 0x6}, 0x94) setsockopt$sock_attach_bpf(r2, 0x29, 0x3c, &(0x7f0000000040), 0xcf) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800000000000000000000000000000062010c00000000089500000000000000eb0d4d49c243ad087de623d0cac9594ec820d10a34aef02accba268c93f55a5942d1cd9c78ad9095602e49f1d56331dd3191d2bc5cb09a45d616d67cc1303088c62c7c"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) 1.513122604s ago: executing program 4 (id=9609): r0 = socket$kcm(0xa, 0x1, 0x0) (async) socket$kcm(0x11, 0x6, 0x300) (async) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f00000005c0), 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) r2 = perf_event_open(&(0x7f00000003c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x3, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x1}, 0x50) bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)=@o_path={&(0x7f0000000080)='./file0\x00', 0x0, 0x10, r3}, 0x18) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, 0x0) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) (async) r4 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x8000) (async, rerun: 64) sendmsg$kcm(r4, 0x0, 0x0) (rerun: 64) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) (async) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x541b, &(0x7f0000000240)) 1.190974942s ago: executing program 0 (id=9610): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3fb, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0xf}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000b00)={0x0, 0xf22fff7f, &(0x7f0000000180)=[{&(0x7f0000000080)="31de76fb398bc62d058b8a96924594f5476a0824be53f7a5949f80614c42391e4b80412938c955d34d37eb96ba7849c3eb823bb36724bd6f6d0219cfe5c884afcd2bdea5acf9c877c03dcdbbb3e47417b6707c27d4c5c1db1924071f6b6f23c7d199c799c9b0c41101e625fcdb7bbfd12a3eeeef4540a5698f058aaf6a141e5d333929b92a7f64e925bf0ef424c3ef29fcd5fd4721c547fde6abe4d47048b64511693624b0d786711abe4a66e250fcbfe95ac9037e58f331b26b6ed0d08e5c73ba4c49", 0xc00e}], 0x9, &(0x7f00000001c0)=ANY=[@ANYBLOB="000026d4f47f00000000000201000000000000000000000014000000000000000000000002000000000000000000000014000000000000000008000002000000010000000000000011000000000000000000000000110000000000000002000000010000000000000000000000000000000000000000000000070000008300000000960000206a77bdd1a004129054e7704a000000"], 0xf}, 0x0) r1 = bpf$ITER_CREATE(0xb, 0x0, 0x0) close(r1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x8, 0xfd, 0x6, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x90, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9, 0x0, 0x2, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) syz_open_procfs$namespace(0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x40000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="02000000040000000800000001000000800000", @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="a189c0a9ed9ef03b8b64de8558d16a60640607a4e5ebc8bc9aa8891bf0767a396dda36b39455b565434b2fe80f0f2ebd40a140a17990ed27eb72", @ANYBLOB], 0x50) socket$kcm(0x29, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="18070000feffffff000a000000000000851000000200000026000000ffffff8585000000130000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x2, 0x92, &(0x7f0000000240)=""/146}, 0x94) 1.096962144s ago: executing program 3 (id=9611): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000500)="5c00000013006bcd9e3fe3dc6e48aa31086b8703060000000000000000000000040014000d000a000d0000009ee517a705251e6182949a3651f60a84c9f4d1938037e786a6d0bdd7fcf50e4509c5bb5a00f698530000000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000804) 691.339624ms ago: executing program 5 (id=9612): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000001000000000000000000000085000000870000001801000020786c2500000000002020207b1af8ff00000000bfa10000000000000701"], 0x0}, 0x94) bpf$MAP_CREATE(0x1400000000000000, &(0x7f0000000000)=ANY=[@ANYBLOB="0f00000004000000020000000000000001020000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 ', @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000ff"], 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a9b80"], 0xfe33) r1 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x2, 0x3a) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000040)={r1}) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r3, 0x84, 0x4, &(0x7f0000000040)=r3, 0x4) sendmsg$inet(0xffffffffffffffff, 0x0, 0x3000c085) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[], 0x0, 0xfffffffe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x20102, 0x0) close(r4) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000010000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') openat$cgroup(r4, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup, 0x15, 0x0, 0x10001, &(0x7f0000000000)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) r6 = socket$kcm(0xa, 0x5, 0x0) ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x1) setsockopt$sock_attach_bpf(r6, 0x0, 0x10, 0x0, 0x11) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x60, &(0x7f0000000000)=[{&(0x7f0000000300)="2000000011008188040f80ec59acbc0413a181000d0000004001000000000000", 0x20}], 0x1}, 0x40000) 689.852894ms ago: executing program 3 (id=9613): socket$kcm(0x10, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000, 0x0, 0xbd, 0x0, 0x0, 0x0, 0x1000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x1c, 0x1, 0x2, 0x58, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, 0x1, @perf_config_ext={0x100000005}, 0x10c002, 0x400, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000050000000000000080000000850000007b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000018000007b8af8ff00000000bfa200000000000007020000f8ffffffb703dc0008000000b70400000200000085000000a60000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={0xffffffffffffffff, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000400), &(0x7f0000000440)=[0x0], 0x0, 0x5a, 0x0, 0x0, 0x10, &(0x7f0000000100), &(0x7f0000000680), 0x8, 0x10d8, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x101ea8, 0x2f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x3, 0x10) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0xfede, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848420000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r4, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[], 0x0, 0x51}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000002200)={&(0x7f00000004c0)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4000010}, 0x891) r6 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(r6, 0x88, 0x67, 0x0, 0x0) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8947, &(0x7f00000002c0)={'bond0\x00', @random="d8b301000100"}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x6) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 683.213894ms ago: executing program 0 (id=9621): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x5}, 0x400, 0xd05, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xe, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xffef, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000890) (async) r2 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x80, 0x0}, 0x20000000) (async) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x32}, @loopback}}}], 0x20}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x100000001}, 0x4000, 0x2, 0xff7fffff}, 0x0, 0xffffffffffffffff, r0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) (async) socket$kcm(0xa, 0x3, 0x3a) r6 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r6, &(0x7f0000000000)={&(0x7f0000001340)={0x2, 0x6, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x41}, @multicast1}}}], 0x20}, 0x8000) sendmsg$kcm(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="d7eab112856b60b6a3e0e2dbde6c3d5e7680491920639d480b6b5b0e6328733b2a118af085970758b35b8eb69a86eb1e67bce340dd99e45bcdcadc74f805a09abbf42c5735c0c0bfeb02c6eba50461c506405541b1d81412f4d6e0409c8ed01a24a00c19c619b8189c043fcbfcf7e0dae6fa040957389be6376784", 0x7b}, {&(0x7f0000001b40)="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", 0x4ed}], 0x2}, 0x8000) (async) socketpair(0x2, 0x0, 0x9, &(0x7f0000000bc0)) (async) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)="c8fec1123a0b09cc7e0dc3f5a9429f67002f742e5bede8832b0b7f1f4eed5e3f01ceb7ace2806a3f4d63282bdb3fe486b407e80f9295666de3f31e9cecc5ee7cf654e0e3279fe27f1e540d16901b4071c379362435ed245423", 0x59}], 0x1}, 0x0) (async) socket$kcm(0xa, 0x5, 0x0) (async) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x2400, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xb8}, [@ldst={0x4}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)={0x2, 0x4001, @broadcast}, 0x10, 0x0}, 0x30000064) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000340)={r5}) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f0000000100)=r7, 0x4) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x24, &(0x7f00000005c0)=@raw=[@map_idx_val={0x18, 0xb, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xaa}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x5}, @func, @btf_id={0x18, 0x1, 0x3, 0x0, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x5}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffb}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4b}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}], &(0x7f0000000700)='GPL\x00', 0x2, 0xae, &(0x7f0000000740)=""/174, 0x40f00, 0x8, '\x00', 0x0, 0x25, r7, 0x8, &(0x7f0000000800)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000900)={0x0, 0xc, 0x9, 0xf}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f00000009c0)=[{0x2, 0x1, 0xf, 0x1}, {0x2, 0x5, 0x0, 0x4}, {0x1, 0x2, 0xf, 0xb}, {0x2, 0x5, 0x6, 0x7}, {0x4, 0x3, 0x9, 0x9}, {0x2, 0x1, 0x7, 0x7}], 0x10, 0xe2}, 0x94) (async) socket$kcm(0x2, 0x5, 0x84) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r9) recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) 623.821265ms ago: executing program 4 (id=9614): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)}, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x100) r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0xa, 0x0, @empty}}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000fffffffe001001000001000000dc00000000000000edf8b94e5b510056aa0cae89788c1f82aefe0433df4de56a905c3f5e46e8e4aab714c77be3a3"], 0x18}, 0x0) 350.229002ms ago: executing program 4 (id=9615): r0 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_type(r0, &(0x7f0000000040), 0x9) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80802, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x13) socketpair(0x15, 0x5, 0xf, &(0x7f00000000c0)) ioctl$TUNGETVNETLE(r1, 0x800454dd, &(0x7f0000000100)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x181801, 0x0) r3 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r4 = getpid() write$cgroup_pid(r3, &(0x7f00000001c0)=r4, 0x12) r5 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000200)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r5, &(0x7f0000000240)='io.pressure\x00', 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0) ioctl$TUNGETDEVNETNS(r6, 0x54e3, 0x0) r7 = openat$cgroup_procs(r5, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000300)=r4, 0x12) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000340)={'tunl0\x00', 0x800}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r5, 0x8, 0x1, 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0]}, 0x40) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000500)={0x4, &(0x7f00000004c0)=[{0x6, 0x97, 0x8, 0x2}, {0x4, 0x4, 0x40, 0x2}, {0x8, 0x2, 0x4, 0xe}, {0x4, 0x7, 0x4, 0xfffffffc}]}) socketpair(0x26, 0x2, 0x79, &(0x7f0000000540)) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000016c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x4}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000001740)={&(0x7f0000000580)="4b44b436edc046dc479d624827a4ed194b9bced4edf7117c1d6a1d43a247664d98c7e16666f95289d13f6e0d33dcc9ecaff2b1a2988a38c5c26fd6fda5c2f964f9d8a545050f28ec1893d4ca333de9e1a7cdb8f9f18cbc08f50a533e060f221dc2bef0b2408acd45eb7875be3263411b34eb251ccd87f77fecf0f81776fc0a3d2974dde61428b11452f043a3f7deddcc843e799b63c0ae9cd777c5557013c7a2afc26b1509f5df6e", &(0x7f0000000640), &(0x7f0000000680)="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", &(0x7f0000001680), 0x9a9, r8, 0x4}, 0x38) socket$kcm(0x29, 0x7, 0x0) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001780)={0x1b, 0x0, 0x0, 0x10, 0x0, r8, 0xfffffc01, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x5}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001a80)={r8, 0x58, &(0x7f0000001a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001b00)={0x1b, 0x0, 0x0, 0x96, 0x0, 0xffffffffffffffff, 0xe, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x4}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001b80)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001c40)={0x6, 0x13, &(0x7f0000001800)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x262a, 0x0, 0x0, 0x0, 0x7925}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000018c0)='syzkaller\x00', 0xfffffff9, 0xf8, &(0x7f0000001900)=""/248, 0x41100, 0x0, '\x00', r10, 0x25, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001ac0)={0x1, 0x1, 0x117e, 0x5}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000001bc0)=[r8, r8, r8, r11, r12, r8, r8, 0xffffffffffffffff], &(0x7f0000001c00)=[{0x5, 0x5, 0x9}], 0x10, 0x6}, 0x94) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001d80)={r11, &(0x7f0000001d00)="07876e8f7cf103113799b4caf61e06e6f69742f420c45bb90d377b8c14b669ce9ba6381f8f7ee71fba8e3f79485669f6b6477f298fb34f5984f837f8ed81a0fa505bdf3736d9521df583814686e065d0e0ce65188c94fe"}, 0x20) openat$tun(0xffffffffffffff9c, &(0x7f0000001dc0), 0x80400, 0x0) 0s ago: executing program 0 (id=9616): socket$kcm(0x10, 0x400000002, 0x0) socket$kcm(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=ANY=[@ANYBLOB="12000000020000000800000002"], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open$cgroup(&(0x7f00000003c0)={0x1, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x10, 0x0, 0x6, 0x0, 0x3, 0x1, 0xfffd}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x91c, 0x4156, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffff8, 0x1}, 0x10aec4, 0x7f, 0xfffffffe, 0x6, 0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac59}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000300000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000540)=ANY=[@ANYRESHEX, @ANYRES32=r0, @ANYRESDEC=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000200)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r3, 0xffffffffffffffff}, &(0x7f0000000180)=0x20000, &(0x7f00000001c0)=r2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES16=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff) syz_open_procfs$namespace(0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x810000a6, 0x0, 0x0, 0x0, 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = socket$kcm(0xa, 0x1, 0x0) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) sendmsg$kcm(r6, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) recvmsg$kcm(r6, &(0x7f0000005140)={0x0, 0x0, 0x0}, 0x40010194) kernel console output (not intermixed with test programs): etlink: 132 bytes leftover after parsing attributes in process `syz.4.8484'. [ 1743.945991][T30785] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.8485'. [ 1743.987224][T30785] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.8485'. [ 1744.170009][T30800] netlink: 'syz.2.8488': attribute type 13 has an invalid length. [ 1744.231684][T30800] netlink: 152 bytes leftover after parsing attributes in process `syz.2.8488'. [ 1744.391072][T30800] syz_tun: refused to change device tx_queue_len [ 1744.486172][T30800] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1744.715929][T30805] netlink: 'syz.2.8488': attribute type 13 has an invalid length. [ 1744.763679][T30805] netlink: 152 bytes leftover after parsing attributes in process `syz.2.8488'. [ 1744.881970][T30805] syz_tun: refused to change device tx_queue_len [ 1744.920324][T30805] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1745.350636][T30820] netlink: 'syz.1.8495': attribute type 10 has an invalid length. [ 1745.602208][T30832] netlink: 56 bytes leftover after parsing attributes in process `syz.2.8498'. [ 1746.330281][T30849] netlink: 'syz.4.8505': attribute type 11 has an invalid length. [ 1746.373995][T30841] netlink: 'syz.2.8501': attribute type 2 has an invalid length. [ 1746.393883][T30849] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.8505'. [ 1746.403941][T30841] netlink: 10 bytes leftover after parsing attributes in process `syz.2.8501'. [ 1746.493222][T30844] bond0: (slave netdevsim0): Error: Slave device does not support XDP [ 1746.573557][T30854] netlink: 'syz.4.8505': attribute type 11 has an invalid length. [ 1746.598834][T30854] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.8505'. [ 1746.905378][T30848] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1747.197964][T30865] netlink: 14 bytes leftover after parsing attributes in process `syz.3.8507'. [ 1747.267361][T30864] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1747.436511][T30865] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1747.520687][T30865] bond0 (unregistering): Released all slaves [ 1747.606892][T30876] netlink: 'syz.4.8513': attribute type 3 has an invalid length. [ 1747.627627][T30876] netlink: 'syz.4.8513': attribute type 1 has an invalid length. [ 1747.684135][T30876] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8513'. [ 1747.910903][T30885] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8516'. [ 1748.590822][T30890] netlink: 'syz.3.8517': attribute type 2 has an invalid length. [ 1748.617255][T30890] netlink: 10 bytes leftover after parsing attributes in process `syz.3.8517'. [ 1749.310214][T30907] bond0: (slave netdevsim0): Error: Slave device does not support XDP [ 1749.648392][T30912] netlink: 'syz.3.8525': attribute type 27 has an invalid length. [ 1749.656615][T30912] netlink: 'syz.3.8525': attribute type 4 has an invalid length. [ 1749.677911][T30912] netlink: 152 bytes leftover after parsing attributes in process `syz.3.8525'. [ 1749.946830][T30917] netlink: 'syz.4.8526': attribute type 10 has an invalid length. [ 1751.498542][T30981] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8550'. [ 1751.555705][T30983] netlink: 12030 bytes leftover after parsing attributes in process `syz.3.8551'. [ 1752.365946][T30997] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8557'. [ 1754.071752][T31027] netlink: 'syz.0.8567': attribute type 10 has an invalid length. [ 1754.119467][T31025] netlink: 'syz.1.8565': attribute type 3 has an invalid length. [ 1754.134895][T31025] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.8565'. [ 1754.274749][T31025] netlink: 'syz.1.8565': attribute type 1 has an invalid length. [ 1754.285921][T31025] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8565'. [ 1755.352706][T31057] netlink: 'syz.1.8578': attribute type 21 has an invalid length. [ 1755.366522][T31057] netlink: 156 bytes leftover after parsing attributes in process `syz.1.8578'. [ 1756.418509][T31086] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8584'. [ 1756.468695][T31091] netlink: 152 bytes leftover after parsing attributes in process `syz.2.8585'. [ 1756.813475][T31103] netlink: 'syz.1.8589': attribute type 29 has an invalid length. [ 1756.839919][T31103] netlink: 'syz.1.8589': attribute type 29 has an invalid length. [ 1756.900323][T31104] netlink: 'syz.1.8589': attribute type 29 has an invalid length. [ 1756.945135][T31103] netlink: 'syz.1.8589': attribute type 29 has an invalid length. [ 1756.967901][T31104] netlink: 'syz.1.8589': attribute type 29 has an invalid length. [ 1757.049658][T31103] netlink: 'syz.1.8589': attribute type 29 has an invalid length. [ 1757.114504][T31105] netlink: 'syz.1.8589': attribute type 29 has an invalid length. [ 1757.158822][T31104] netlink: 'syz.1.8589': attribute type 29 has an invalid length. [ 1757.203949][T31106] netlink: 'syz.1.8589': attribute type 29 has an invalid length. [ 1757.594191][T31121] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1762.346266][T31174] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8615'. [ 1762.969946][T31184] validate_nla: 1 callbacks suppressed [ 1762.969968][T31184] netlink: 'syz.0.8620': attribute type 10 has an invalid length. [ 1763.027973][T31184] team0: Port device geneve1 added [ 1763.904896][T31208] netlink: 'syz.1.8631': attribute type 21 has an invalid length. [ 1763.962858][T31208] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8631'. [ 1763.994020][T31209] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.8631'. [ 1764.042268][T31209] device bridge_slave_1 entered promiscuous mode [ 1764.068610][T31219] netlink: 'syz.0.8633': attribute type 10 has an invalid length. [ 1764.387774][T31231] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1765.376187][T31262] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.8646'. [ 1768.101113][T31343] netlink: 'syz.2.8675': attribute type 10 has an invalid length. [ 1768.468101][T31351] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1768.957993][T31367] netlink: 15487 bytes leftover after parsing attributes in process `syz.1.8682'. [ 1769.343901][T31374] netlink: 'syz.4.8686': attribute type 10 has an invalid length. [ 1770.767335][T31409] netlink: 'syz.3.8697': attribute type 10 has an invalid length. [ 1771.102577][T31419] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8700'. [ 1771.236853][T31422] netlink: 'syz.3.8701': attribute type 10 has an invalid length. [ 1773.177803][T31464] netlink: 'syz.1.8715': attribute type 10 has an invalid length. [ 1773.235219][T31464] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8715'. [ 1773.269091][T31464] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 1773.904781][T31484] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1774.031472][T31488] netlink: 'syz.2.8721': attribute type 25 has an invalid length. [ 1774.060272][T31488] netlink: 'syz.2.8721': attribute type 29 has an invalid length. [ 1775.585421][T31515] netlink: 15487 bytes leftover after parsing attributes in process `syz.3.8731'. [ 1775.769826][T31524] netlink: 'syz.1.8736': attribute type 10 has an invalid length. [ 1776.937652][T31542] netlink: 763 bytes leftover after parsing attributes in process `syz.4.8742'. [ 1777.781040][T31561] netlink: 'syz.4.8750': attribute type 10 has an invalid length. [ 1777.805748][T31561] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8750'. [ 1777.836986][T31561] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 1780.687946][T31588] FAULT_INJECTION: forcing a failure. [ 1780.687946][T31588] name failslab, interval 1, probability 0, space 0, times 0 [ 1780.700891][T31588] CPU: 1 PID: 31588 Comm: syz.1.8761 Not tainted syzkaller #0 [ 1780.708417][T31588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1780.718507][T31588] Call Trace: [ 1780.721810][T31588] [ 1780.724764][T31588] dump_stack_lvl+0x188/0x24e [ 1780.729484][T31588] ? show_regs_print_info+0x12/0x12 [ 1780.734719][T31588] ? load_image+0x410/0x410 [ 1780.739262][T31588] ? __lock_acquire+0x7c40/0x7c40 [ 1780.744322][T31588] should_fail_ex+0x390/0x4c0 [ 1780.749045][T31588] should_failslab+0x5/0x20 [ 1780.753576][T31588] slab_pre_alloc_hook+0x59/0x300 [ 1780.758629][T31588] ? bpf_prog_test_run_skb+0x23e/0x18e0 [ 1780.764203][T31588] __kmem_cache_alloc_node+0x4f/0x270 [ 1780.769612][T31588] ? bpf_prog_test_run_skb+0x23e/0x18e0 [ 1780.775189][T31588] __kmalloc+0xa3/0x240 [ 1780.779408][T31588] bpf_prog_test_run_skb+0x23e/0x18e0 [ 1780.784818][T31588] ? __fget_files+0x28/0x460 [ 1780.789440][T31588] ? __fget_files+0x3fc/0x460 [ 1780.794162][T31588] ? cpu_online+0xa0/0xa0 [ 1780.798522][T31588] bpf_prog_test_run+0x31c/0x390 [ 1780.803493][T31588] __sys_bpf+0x62b/0x780 [ 1780.807799][T31588] ? bpf_link_show_fdinfo+0x380/0x380 [ 1780.813221][T31588] ? lock_chain_count+0x20/0x20 [ 1780.818111][T31588] __x64_sys_bpf+0x78/0x90 [ 1780.822557][T31588] do_syscall_64+0x4c/0xa0 [ 1780.827017][T31588] ? clear_bhb_loop+0x60/0xb0 [ 1780.831730][T31588] ? clear_bhb_loop+0x60/0xb0 [ 1780.836448][T31588] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1780.842378][T31588] RIP: 0033:0x7f1ef379e159 [ 1780.846823][T31588] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1780.866466][T31588] RSP: 002b:00007f1ef46d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1780.874922][T31588] RAX: ffffffffffffffda RBX: 00007f1ef3a25fa0 RCX: 00007f1ef379e159 [ 1780.882941][T31588] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 1780.890956][T31588] RBP: 00007f1ef46d5090 R08: 0000000000000000 R09: 0000000000000000 [ 1780.898955][T31588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1780.906957][T31588] R13: 00007f1ef3a26038 R14: 00007f1ef3a25fa0 R15: 00007ffd9904c418 [ 1780.914986][T31588] [ 1781.051323][T31592] delete_channel: no stack [ 1781.395004][T31605] netlink: 'syz.4.8765': attribute type 10 has an invalid length. [ 1781.553850][T31611] device wlan1 entered promiscuous mode [ 1781.558904][T31610] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8767'. [ 1781.799563][T31623] netlink: 'syz.3.8771': attribute type 5 has an invalid length. [ 1781.814174][T31623] netlink: 168 bytes leftover after parsing attributes in process `syz.3.8771'. [ 1781.864902][T31628] netlink: 'syz.0.8772': attribute type 2 has an invalid length. [ 1784.162226][T31677] tun0: tun_chr_ioctl cmd 2148553947 [ 1784.174115][T31675] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.8783'. [ 1785.273733][T31712] netlink: 'syz.1.8795': attribute type 10 has an invalid length. [ 1785.441229][T31716] netlink: 'syz.1.8797': attribute type 4 has an invalid length. [ 1785.454872][T31716] netlink: 178200 bytes leftover after parsing attributes in process `syz.1.8797'. [ 1785.806122][T31725] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8801'. [ 1786.774034][T31760] netlink: 'syz.3.8815': attribute type 10 has an invalid length. [ 1786.796623][T31760] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8815'. [ 1786.813876][T31760] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 1787.550442][T31793] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1788.731130][T31827] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8837'. [ 1789.211097][T31840] FAULT_INJECTION: forcing a failure. [ 1789.211097][T31840] name failslab, interval 1, probability 0, space 0, times 0 [ 1789.286675][T31840] CPU: 0 PID: 31840 Comm: syz.0.8842 Not tainted syzkaller #0 [ 1789.294264][T31840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1789.304368][T31840] Call Trace: [ 1789.307691][T31840] [ 1789.310666][T31840] dump_stack_lvl+0x188/0x24e [ 1789.315461][T31840] ? show_regs_print_info+0x12/0x12 [ 1789.320727][T31840] ? load_image+0x410/0x410 [ 1789.325283][T31840] ? __might_sleep+0xd0/0xd0 [ 1789.329925][T31840] ? __lock_acquire+0x7c40/0x7c40 [ 1789.335017][T31840] should_fail_ex+0x390/0x4c0 [ 1789.339759][T31840] should_failslab+0x5/0x20 [ 1789.344312][T31840] slab_pre_alloc_hook+0x59/0x300 [ 1789.349384][T31840] ? bpf_ctx_init+0xb2/0x190 [ 1789.354030][T31840] __kmem_cache_alloc_node+0x4f/0x270 [ 1789.359461][T31840] ? bpf_ctx_init+0xb2/0x190 [ 1789.364118][T31840] __kmalloc+0xa3/0x240 [ 1789.368328][T31840] ? __might_fault+0xc2/0x120 [ 1789.373055][T31840] ? __might_fault+0xa6/0x120 [ 1789.377779][T31840] bpf_ctx_init+0xb2/0x190 [ 1789.382337][T31840] bpf_prog_test_run_skb+0x2bf/0x18e0 [ 1789.387767][T31840] ? __fget_files+0x28/0x460 [ 1789.392409][T31840] ? __fget_files+0x3fc/0x460 [ 1789.397151][T31840] ? cpu_online+0xa0/0xa0 [ 1789.401525][T31840] bpf_prog_test_run+0x31c/0x390 [ 1789.406537][T31840] __sys_bpf+0x62b/0x780 [ 1789.410834][T31840] ? bpf_link_show_fdinfo+0x380/0x380 [ 1789.416274][T31840] ? lock_chain_count+0x20/0x20 [ 1789.421187][T31840] __x64_sys_bpf+0x78/0x90 [ 1789.425660][T31840] do_syscall_64+0x4c/0xa0 [ 1789.430160][T31840] ? clear_bhb_loop+0x60/0xb0 [ 1789.434889][T31840] ? clear_bhb_loop+0x60/0xb0 [ 1789.439621][T31840] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1789.445568][T31840] RIP: 0033:0x7fa3ebf9e159 [ 1789.450027][T31840] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1789.469687][T31840] RSP: 002b:00007fa3ece5e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1789.478158][T31840] RAX: ffffffffffffffda RBX: 00007fa3ec225fa0 RCX: 00007fa3ebf9e159 [ 1789.486170][T31840] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 1789.494180][T31840] RBP: 00007fa3ece5e090 R08: 0000000000000000 R09: 0000000000000000 [ 1789.502176][T31840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1789.510170][T31840] R13: 00007fa3ec226038 R14: 00007fa3ec225fa0 R15: 00007fff01956ee8 [ 1789.518189][T31840] [ 1790.452226][T31850] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1790.463219][T31850] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1790.475058][T31850] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1790.483819][T31850] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1790.500343][T31850] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1790.520425][T31850] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1791.435551][T31866] netlink: 'syz.1.8850': attribute type 10 has an invalid length. [ 1791.468370][T31866] device wlan1 left promiscuous mode [ 1791.557765][T31866] team0: Port device wlan1 removed [ 1791.565356][T31866] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1791.677949][T31874] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1791.685916][T31874] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1791.740513][T31874] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1791.758448][T31874] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1791.814885][T31874] bridge0: port 3(batadv0) entered disabled state [ 1792.025131][T31874] device batadv0 left promiscuous mode [ 1792.032487][T31874] bridge0: port 3(batadv0) entered disabled state [ 1792.102393][T31849] chnl_net:caif_netlink_parms(): no params data found [ 1792.325099][T31849] bridge0: port 1(bridge_slave_0) entered blocking state [ 1792.356479][T31849] bridge0: port 1(bridge_slave_0) entered disabled state [ 1792.391841][T31849] device bridge_slave_0 entered promiscuous mode [ 1792.447960][T31849] bridge0: port 2(bridge_slave_1) entered blocking state [ 1792.466245][T31849] bridge0: port 2(bridge_slave_1) entered disabled state [ 1792.509235][T31905] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1792.536374][T31849] device bridge_slave_1 entered promiscuous mode [ 1792.578118][ T4292] Bluetooth: hci0: command 0x0409 tx timeout [ 1792.653856][T31849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1792.697139][T31849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1792.752267][T31849] team0: Port device team_slave_0 added [ 1792.761280][T31849] team0: Port device team_slave_1 added [ 1792.805645][T31849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1792.861205][T31849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1792.970996][T31849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1793.004504][T31849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1793.032801][T31849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1793.132122][T31849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1793.279411][T31849] device hsr_slave_0 entered promiscuous mode [ 1793.287224][T31849] device hsr_slave_1 entered promiscuous mode [ 1793.470637][T31921] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8866'. [ 1793.631050][T31930] FAULT_INJECTION: forcing a failure. [ 1793.631050][T31930] name failslab, interval 1, probability 0, space 0, times 0 [ 1793.645024][T31930] CPU: 1 PID: 31930 Comm: syz.0.8870 Not tainted syzkaller #0 [ 1793.652556][T31930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1793.662846][T31930] Call Trace: [ 1793.666181][T31930] [ 1793.669161][T31930] dump_stack_lvl+0x188/0x24e [ 1793.674692][T31930] ? show_regs_print_info+0x12/0x12 [ 1793.680157][T31930] ? load_image+0x410/0x410 [ 1793.684732][T31930] ? __might_sleep+0xd0/0xd0 [ 1793.689376][T31930] ? __lock_acquire+0x7c40/0x7c40 [ 1793.694473][T31930] should_fail_ex+0x390/0x4c0 [ 1793.699309][T31930] should_failslab+0x5/0x20 [ 1793.703867][T31930] slab_pre_alloc_hook+0x59/0x300 [ 1793.708961][T31930] ? sk_prot_alloc+0xe7/0x210 [ 1793.713697][T31930] __kmem_cache_alloc_node+0x4f/0x270 [ 1793.719183][T31930] ? sk_prot_alloc+0xe7/0x210 [ 1793.723926][T31930] __kmalloc+0xa3/0x240 [ 1793.728152][T31930] sk_prot_alloc+0xe7/0x210 [ 1793.732715][T31930] ? sk_alloc+0x20/0x330 [ 1793.737012][T31930] sk_alloc+0x36/0x330 [ 1793.741126][T31930] ? bpf_ctx_init+0x103/0x190 [ 1793.745843][T31930] bpf_prog_test_run_skb+0x36d/0x18e0 [ 1793.751276][T31930] ? __fget_files+0x28/0x460 [ 1793.755929][T31930] ? __fget_files+0x3fc/0x460 [ 1793.760660][T31930] ? cpu_online+0xa0/0xa0 [ 1793.765037][T31930] bpf_prog_test_run+0x31c/0x390 [ 1793.770031][T31930] __sys_bpf+0x62b/0x780 [ 1793.774336][T31930] ? bpf_link_show_fdinfo+0x380/0x380 [ 1793.779816][T31930] ? lock_chain_count+0x20/0x20 [ 1793.784732][T31930] __x64_sys_bpf+0x78/0x90 [ 1793.789201][T31930] do_syscall_64+0x4c/0xa0 [ 1793.793756][T31930] ? clear_bhb_loop+0x60/0xb0 [ 1793.798495][T31930] ? clear_bhb_loop+0x60/0xb0 [ 1793.803229][T31930] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1793.809174][T31930] RIP: 0033:0x7fa3ebf9e159 [ 1793.813635][T31930] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1793.833295][T31930] RSP: 002b:00007fa3ece5e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1793.841784][T31930] RAX: ffffffffffffffda RBX: 00007fa3ec225fa0 RCX: 00007fa3ebf9e159 [ 1793.849803][T31930] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 1793.857811][T31930] RBP: 00007fa3ece5e090 R08: 0000000000000000 R09: 0000000000000000 [ 1793.865832][T31930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1793.873850][T31930] R13: 00007fa3ec226038 R14: 00007fa3ec225fa0 R15: 00007fff01956ee8 [ 1793.881915][T31930] [ 1793.908366][T31933] tap0: tun_chr_ioctl cmd 1074025673 [ 1793.925170][T31925] tap0: tun_chr_ioctl cmd 1074025688 [ 1793.958124][T31925] netlink: 'syz.4.8869': attribute type 29 has an invalid length. [ 1793.966461][T31925] netlink: 'syz.4.8869': attribute type 29 has an invalid length. [ 1793.992793][T31926] netlink: 'syz.4.8869': attribute type 29 has an invalid length. [ 1794.016305][T31925] netlink: 'syz.4.8869': attribute type 29 has an invalid length. [ 1794.028698][T31849] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1794.040949][T31931] bond0: (slave wlan1): Error: Slave device does not support XDP [ 1794.052183][T31932] netlink: 'syz.4.8869': attribute type 29 has an invalid length. [ 1794.070275][T31849] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1794.092003][T31926] netlink: 'syz.4.8869': attribute type 29 has an invalid length. [ 1794.133785][T31849] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1794.149693][T31849] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1794.416957][T31849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1794.447159][T19250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1794.461758][T19250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1794.493810][T31849] 8021q: adding VLAN 0 to HW filter on device team0 [ 1794.519978][T31948] netlink: 'syz.0.8876': attribute type 21 has an invalid length. [ 1794.528416][T31948] netlink: 128 bytes leftover after parsing attributes in process `syz.0.8876'. [ 1794.557686][T31948] netlink: 'syz.0.8876': attribute type 4 has an invalid length. [ 1794.565588][T31948] netlink: 3 bytes leftover after parsing attributes in process `syz.0.8876'. [ 1794.624159][T19250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1794.633850][T19250] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1794.657630][ T4292] Bluetooth: hci0: command 0x041b tx timeout [ 1794.671882][T19250] bridge0: port 1(bridge_slave_0) entered blocking state [ 1794.679121][T19250] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1794.691788][T19250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1794.707295][T19250] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1794.716271][T19250] bridge0: port 2(bridge_slave_1) entered blocking state [ 1794.723492][T19250] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1794.732324][T19250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1794.777232][T19250] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1794.796212][T19250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1794.819608][T19250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1794.871227][T19250] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1794.904354][T19250] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1794.945638][T19250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1794.959329][T19250] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1794.976184][T31849] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1795.007754][T31849] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1795.032987][T19250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1795.052349][T19250] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1795.075037][T19250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1795.104416][T19250] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1795.135695][T19250] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1795.516523][T18758] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1795.543196][T18758] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1795.610476][T31849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1796.069812][T31992] netlink: 'syz.4.8889': attribute type 6 has an invalid length. [ 1796.091980][T31992] netlink: 168 bytes leftover after parsing attributes in process `syz.4.8889'. [ 1796.129283][T31993] netlink: 'syz.4.8889': attribute type 6 has an invalid length. [ 1796.137124][T31993] netlink: 168 bytes leftover after parsing attributes in process `syz.4.8889'. [ 1796.737647][ T4292] Bluetooth: hci0: command 0x040f tx timeout [ 1796.818407][T18758] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1796.861245][T18758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1796.934517][T18772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1796.968670][T18772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1797.003597][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1797.010083][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1797.049874][T18772] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1797.091874][T18772] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1797.131698][T31849] device veth0_vlan entered promiscuous mode [ 1797.209814][T31849] device veth1_vlan entered promiscuous mode [ 1797.221252][T32028] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8901'. [ 1797.364649][T18772] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1797.384226][T18772] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1797.401652][T18772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1797.438483][T18772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1797.453391][T31849] device veth0_macvtap entered promiscuous mode [ 1797.503922][T31849] device veth1_macvtap entered promiscuous mode [ 1797.594466][T31849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1797.627432][T31849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1797.645584][T31849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1797.656619][T31849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1797.685893][T31849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1797.709778][T19250] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1797.723794][T19250] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1797.744117][T32034] FAULT_INJECTION: forcing a failure. [ 1797.744117][T32034] name failslab, interval 1, probability 0, space 0, times 0 [ 1797.778697][T19250] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1797.792884][T19250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1797.804131][T31849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1797.815624][T32034] CPU: 0 PID: 32034 Comm: syz.4.8904 Not tainted syzkaller #0 [ 1797.823162][T32034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1797.833293][T32034] Call Trace: [ 1797.836615][T32034] [ 1797.839578][T32034] dump_stack_lvl+0x188/0x24e [ 1797.844305][T32034] ? show_regs_print_info+0x12/0x12 [ 1797.849545][T32034] ? load_image+0x410/0x410 [ 1797.854099][T32034] ? __lock_acquire+0x7c40/0x7c40 [ 1797.859177][T32034] should_fail_ex+0x390/0x4c0 [ 1797.863898][T32034] should_failslab+0x5/0x20 [ 1797.868437][T32034] slab_pre_alloc_hook+0x59/0x300 [ 1797.873573][T32034] ? security_sk_alloc+0x47/0x130 [ 1797.878678][T32034] __kmem_cache_alloc_node+0x4f/0x270 [ 1797.884104][T32034] ? security_sk_alloc+0x47/0x130 [ 1797.889176][T32034] __kmalloc+0xa3/0x240 [ 1797.893373][T32034] ? sk_prot_alloc+0xe7/0x210 [ 1797.898092][T32034] security_sk_alloc+0x47/0x130 [ 1797.902987][T32034] sk_prot_alloc+0x101/0x210 [ 1797.907614][T32034] ? sk_alloc+0x20/0x330 [ 1797.911897][T32034] sk_alloc+0x36/0x330 [ 1797.916014][T32034] ? bpf_ctx_init+0x103/0x190 [ 1797.920917][T32034] bpf_prog_test_run_skb+0x36d/0x18e0 [ 1797.926332][T32034] ? __fget_files+0x28/0x460 [ 1797.930971][T32034] ? __fget_files+0x3fc/0x460 [ 1797.935730][T32034] ? cpu_online+0xa0/0xa0 [ 1797.940092][T32034] bpf_prog_test_run+0x31c/0x390 [ 1797.945082][T32034] __sys_bpf+0x62b/0x780 [ 1797.949367][T32034] ? bpf_link_show_fdinfo+0x380/0x380 [ 1797.954794][T32034] ? lock_chain_count+0x20/0x20 [ 1797.959688][T32034] __x64_sys_bpf+0x78/0x90 [ 1797.964143][T32034] do_syscall_64+0x4c/0xa0 [ 1797.968615][T32034] ? clear_bhb_loop+0x60/0xb0 [ 1797.973357][T32034] ? clear_bhb_loop+0x60/0xb0 [ 1797.978084][T32034] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1797.984118][T32034] RIP: 0033:0x7fe74079e159 [ 1797.988566][T32034] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1798.008206][T32034] RSP: 002b:00007fe7416be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1798.016781][T32034] RAX: ffffffffffffffda RBX: 00007fe740a25fa0 RCX: 00007fe74079e159 [ 1798.025503][T32034] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 1798.033531][T32034] RBP: 00007fe7416be090 R08: 0000000000000000 R09: 0000000000000000 [ 1798.041560][T32034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1798.049577][T32034] R13: 00007fe740a26038 R14: 00007fe740a25fa0 R15: 00007fff95e2cd38 [ 1798.057598][T32034] [ 1798.077523][T31849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1798.117598][T31849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1798.147445][T31849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1798.176701][T31849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1798.237426][T31849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1798.286918][T31849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1798.308294][T18758] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1798.339028][T18758] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1798.396976][T31849] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1798.445459][T31849] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1798.474848][T31849] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1798.495348][T31849] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1798.610076][T32048] bond0: (slave wlan1): Error: Slave device does not support XDP [ 1798.806348][T19250] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1798.814294][T32056] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8911'. [ 1798.824221][T31850] Bluetooth: hci0: command 0x0419 tx timeout [ 1798.927949][T19250] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1798.938183][T18757] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1798.972341][T19250] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1798.983951][T19250] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1798.997704][T18757] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1799.580833][T32075] validate_nla: 2 callbacks suppressed [ 1799.580855][T32075] netlink: 'syz.5.8918': attribute type 3 has an invalid length. [ 1799.670916][T32075] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.8918'. [ 1800.649935][T31850] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1800.668278][T31850] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1800.681474][T31850] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1800.701528][T31850] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1800.717726][T31850] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1800.739750][T31850] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1801.377814][T32102] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.8926'. [ 1801.414717][T32102] bridge_slave_1: default FDB implementation only supports local addresses [ 1801.872698][T32116] netlink: 15487 bytes leftover after parsing attributes in process `syz.5.8931'. [ 1801.911081][T32117] netlink: 15487 bytes leftover after parsing attributes in process `syz.5.8931'. [ 1802.466283][T32112] netlink: 'syz.1.8929': attribute type 10 has an invalid length. [ 1802.477771][T32112] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8929'. [ 1802.511609][T32112] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 1802.636571][T18757] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1802.694295][T32124] netlink: 'syz.1.8934': attribute type 3 has an invalid length. [ 1802.702642][T32124] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.8934'. [ 1802.728385][T32125] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1802.798559][T18757] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1802.817982][ T4292] Bluetooth: hci2: command 0x0409 tx timeout [ 1802.947908][T18757] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1803.072815][T18757] bond0: (slave netdevsim0): Releasing backup interface [ 1803.120983][T18757] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1803.369334][T32099] chnl_net:caif_netlink_parms(): no params data found [ 1803.850341][T32152] FAULT_INJECTION: forcing a failure. [ 1803.850341][T32152] name failslab, interval 1, probability 0, space 0, times 0 [ 1803.887939][T32152] CPU: 0 PID: 32152 Comm: syz.4.8940 Not tainted syzkaller #0 [ 1803.895501][T32152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1803.905609][T32152] Call Trace: [ 1803.908935][T32152] [ 1803.911906][T32152] dump_stack_lvl+0x188/0x24e [ 1803.916646][T32152] ? show_regs_print_info+0x12/0x12 [ 1803.921903][T32152] ? load_image+0x410/0x410 [ 1803.926455][T32152] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1803.932504][T32152] ? __lock_acquire+0x7c40/0x7c40 [ 1803.937593][T32152] should_fail_ex+0x390/0x4c0 [ 1803.942346][T32152] should_failslab+0x5/0x20 [ 1803.946902][T32152] slab_pre_alloc_hook+0x59/0x300 [ 1803.951995][T32152] kmem_cache_alloc+0x56/0x2f0 [ 1803.956828][T32152] ? __build_skb+0x27/0x3b0 [ 1803.961398][T32152] __build_skb+0x27/0x3b0 [ 1803.965786][T32152] ? build_skb+0x14/0x230 [ 1803.970180][T32152] build_skb+0x1e/0x230 [ 1803.974393][T32152] bpf_prog_test_run_skb+0x38d/0x18e0 [ 1803.979843][T32152] ? __fget_files+0x28/0x460 [ 1803.984501][T32152] ? __fget_files+0x3fc/0x460 [ 1803.989253][T32152] ? cpu_online+0xa0/0xa0 [ 1803.993670][T32152] bpf_prog_test_run+0x31c/0x390 [ 1803.998709][T32152] __sys_bpf+0x62b/0x780 [ 1804.003020][T32152] ? bpf_link_show_fdinfo+0x380/0x380 [ 1804.008458][T32152] ? lock_chain_count+0x20/0x20 [ 1804.013350][T32152] __x64_sys_bpf+0x78/0x90 [ 1804.017803][T32152] do_syscall_64+0x4c/0xa0 [ 1804.022264][T32152] ? clear_bhb_loop+0x60/0xb0 [ 1804.026978][T32152] ? clear_bhb_loop+0x60/0xb0 [ 1804.031789][T32152] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1804.037725][T32152] RIP: 0033:0x7fe74079e159 [ 1804.042173][T32152] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1804.061827][T32152] RSP: 002b:00007fe7416be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1804.070284][T32152] RAX: ffffffffffffffda RBX: 00007fe740a25fa0 RCX: 00007fe74079e159 [ 1804.078288][T32152] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 1804.086299][T32152] RBP: 00007fe7416be090 R08: 0000000000000000 R09: 0000000000000000 [ 1804.094299][T32152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1804.102301][T32152] R13: 00007fe740a26038 R14: 00007fe740a25fa0 R15: 00007fff95e2cd38 [ 1804.110317][T32152] [ 1804.173457][T32099] bridge0: port 1(bridge_slave_0) entered blocking state [ 1804.187864][T32099] bridge0: port 1(bridge_slave_0) entered disabled state [ 1804.206775][T32099] device bridge_slave_0 entered promiscuous mode [ 1804.229085][T32099] bridge0: port 2(bridge_slave_1) entered blocking state [ 1804.244344][T32099] bridge0: port 2(bridge_slave_1) entered disabled state [ 1804.262443][T32099] device bridge_slave_1 entered promiscuous mode [ 1804.277653][T32158] netlink: 'syz.4.8942': attribute type 10 has an invalid length. [ 1804.341602][T32099] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1804.370850][T32099] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1804.690930][T32099] team0: Port device team_slave_0 added [ 1804.897878][ T4292] Bluetooth: hci2: command 0x041b tx timeout [ 1805.016887][T32099] team0: Port device team_slave_1 added [ 1805.044817][T32179] netlink: 'syz.3.8945': attribute type 21 has an invalid length. [ 1805.067550][T32179] netlink: 'syz.3.8945': attribute type 20 has an invalid length. [ 1805.680415][T32099] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1805.708768][T32099] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1805.788577][T32099] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1805.841931][T32099] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1805.897531][T32099] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1805.987513][T32099] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1806.574713][T32211] netlink: 'syz.5.8954': attribute type 10 has an invalid length. [ 1806.616156][T32211] device netdevsim0 entered promiscuous mode [ 1806.719592][T32099] device hsr_slave_0 entered promiscuous mode [ 1806.748065][T32099] device hsr_slave_1 entered promiscuous mode [ 1806.764965][T32099] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1806.787320][T32099] Cannot create hsr debugfs directory [ 1806.987897][ T4292] Bluetooth: hci2: command 0x040f tx timeout [ 1807.354474][T32238] netlink: 'syz.4.8962': attribute type 29 has an invalid length. [ 1807.437802][T32238] netlink: 'syz.4.8962': attribute type 29 has an invalid length. [ 1807.495157][T32240] netlink: 'syz.4.8962': attribute type 29 has an invalid length. [ 1808.265101][T32255] netlink: 156 bytes leftover after parsing attributes in process `syz.5.8967'. [ 1808.909042][T32269] netlink: 'syz.3.8968': attribute type 10 has an invalid length. [ 1808.957596][T32269] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8968'. [ 1809.052124][T32269] bridge0: port 3(ipvlan1) entered blocking state [ 1809.059022][ T4292] Bluetooth: hci2: command 0x0419 tx timeout [ 1809.108294][T32269] bridge0: port 3(ipvlan1) entered disabled state [ 1809.130623][T32278] FAULT_INJECTION: forcing a failure. [ 1809.130623][T32278] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1809.208554][T32269] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1809.225189][T32278] CPU: 0 PID: 32278 Comm: syz.5.8971 Not tainted syzkaller #0 [ 1809.232716][T32278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1809.242887][T32278] Call Trace: [ 1809.246214][T32278] [ 1809.249188][T32278] dump_stack_lvl+0x188/0x24e [ 1809.253939][T32278] ? show_regs_print_info+0x12/0x12 [ 1809.259211][T32278] ? load_image+0x410/0x410 [ 1809.263787][T32278] ? __lock_acquire+0x7c40/0x7c40 [ 1809.268877][T32278] ? migrate_enable+0x148/0x220 [ 1809.273822][T32278] should_fail_ex+0x390/0x4c0 [ 1809.278594][T32278] _copy_to_user+0x2c/0x130 [ 1809.283163][T32278] bpf_test_finish+0x198/0x600 [ 1809.288102][T32278] ? convert_skb_to___skb+0x420/0x420 [ 1809.293546][T32278] ? memcpy+0x3c/0x60 [ 1809.297672][T32278] bpf_prog_test_run_skb+0x1129/0x18e0 [ 1809.303247][T32278] ? cpu_online+0xa0/0xa0 [ 1809.307674][T32278] bpf_prog_test_run+0x31c/0x390 [ 1809.312681][T32278] __sys_bpf+0x62b/0x780 [ 1809.317069][T32278] ? bpf_link_show_fdinfo+0x380/0x380 [ 1809.322540][T32278] ? lock_chain_count+0x20/0x20 [ 1809.327491][T32278] __x64_sys_bpf+0x78/0x90 [ 1809.331974][T32278] do_syscall_64+0x4c/0xa0 [ 1809.336456][T32278] ? clear_bhb_loop+0x60/0xb0 [ 1809.341193][T32278] ? clear_bhb_loop+0x60/0xb0 [ 1809.345913][T32278] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1809.351848][T32278] RIP: 0033:0x7f3191f9e159 [ 1809.356295][T32278] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1809.376028][T32278] RSP: 002b:00007f3192dda028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1809.384478][T32278] RAX: ffffffffffffffda RBX: 00007f3192225fa0 RCX: 00007f3191f9e159 [ 1809.392484][T32278] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 1809.400487][T32278] RBP: 00007f3192dda090 R08: 0000000000000000 R09: 0000000000000000 [ 1809.408510][T32278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1809.416515][T32278] R13: 00007f3192226038 R14: 00007f3192225fa0 R15: 00007ffe21744878 [ 1809.424703][T32278] [ 1809.822319][T32272] netlink: 'syz.1.8970': attribute type 9 has an invalid length. [ 1809.837529][T32272] netlink: 61951 bytes leftover after parsing attributes in process `syz.1.8970'. [ 1809.854185][T32276] device netdevsim0 entered promiscuous mode [ 1809.960802][T32099] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1810.030602][T32099] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1810.216354][T32099] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1810.318724][T32099] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1810.583510][T32301] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8977'. [ 1810.603662][T18757] team0: Port device wlan1 removed [ 1810.648760][T32301] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8977'. [ 1810.668226][T32291] delete_channel: no stack [ 1810.676121][T32304] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8977'. [ 1810.959932][T32312] netlink: 'syz.4.8980': attribute type 3 has an invalid length. [ 1810.989784][T32312] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.8980'. [ 1811.119547][T18757] device hsr_slave_0 left promiscuous mode [ 1811.159519][T18757] device hsr_slave_1 left promiscuous mode [ 1811.178947][T18757] device bridge_slave_1 left promiscuous mode [ 1811.185398][T18757] bridge0: port 2(bridge_slave_1) entered disabled state [ 1811.240337][T18757] device bridge_slave_0 left promiscuous mode [ 1811.246779][T18757] bridge0: port 1(bridge_slave_0) entered disabled state [ 1811.389323][T18757] device veth0_vlan left promiscuous mode [ 1812.715942][T18757] team0 (unregistering): Port device geneve1 removed [ 1813.143253][T18757] team0 (unregistering): Port device team_slave_1 removed [ 1813.191977][T18757] team0 (unregistering): Port device team_slave_0 removed [ 1813.243884][T18757] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1813.636700][T18757] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1813.645995][T18757] bond0 (unregistering): Released all slaves [ 1813.757572][T32335] netlink: 'syz.4.8986': attribute type 10 has an invalid length. [ 1813.765961][T32335] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8986'. [ 1813.782198][T32335] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 1813.878255][T32099] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1813.983968][T19250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1813.992724][T19250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1814.019349][T32099] 8021q: adding VLAN 0 to HW filter on device team0 [ 1814.056232][T19250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1814.075637][T19250] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1814.124651][T19250] bridge0: port 1(bridge_slave_0) entered blocking state [ 1814.131887][T19250] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1814.211201][T19250] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1814.233039][T19250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1814.264311][T19250] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1814.311674][T19250] bridge0: port 2(bridge_slave_1) entered blocking state [ 1814.318900][T19250] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1814.358231][T19250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1814.379810][T32358] netlink: 'syz.4.8992': attribute type 3 has an invalid length. [ 1814.394936][T19250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1814.404155][T32358] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.8992'. [ 1814.447707][T19250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1814.457080][T19250] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1814.481330][T19250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1814.509860][T19250] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1814.568686][T19250] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1814.598420][T19250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1814.619709][T19250] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1814.670144][T32099] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1814.709035][T32099] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1814.732243][T19250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1814.784034][T19250] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1815.001232][T32372] device pim6reg1 entered promiscuous mode [ 1815.829938][T32403] netlink: 'syz.1.9004': attribute type 3 has an invalid length. [ 1815.843354][T19250] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1815.858153][T19250] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1815.884904][T32403] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.9004'. [ 1815.929493][T32099] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1816.069413][T18748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1816.091814][T18748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1816.176603][T19250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1816.195901][T19250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1816.246183][T32099] device veth0_vlan entered promiscuous mode [ 1816.258153][T19250] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1816.284636][T19250] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1816.319307][T32099] device veth1_vlan entered promiscuous mode [ 1816.359394][T32414] netlink: 'syz.3.9008': attribute type 3 has an invalid length. [ 1816.368463][T32414] netlink: 152 bytes leftover after parsing attributes in process `syz.3.9008'. [ 1816.461938][T19254] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1816.494715][T19254] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1816.530001][T19254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1816.631392][T19254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1816.691629][T32099] device veth0_macvtap entered promiscuous mode [ 1816.743676][T32099] device veth1_macvtap entered promiscuous mode [ 1816.834584][T32421] bond0: (slave wlan1): Error: Slave device does not support XDP [ 1816.861786][T19250] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1816.899598][T19250] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1816.953480][T32099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1817.020220][T32099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1817.079702][T32099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1817.105428][T32099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1817.126334][T32445] netlink: 'syz.1.9017': attribute type 3 has an invalid length. [ 1817.135993][T32099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1817.167315][T32099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1817.179307][T32445] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.9017'. [ 1817.220645][T32099] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1817.257589][T19250] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1817.271543][T19250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1817.299817][T32099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1817.328649][T32099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1817.347327][T32099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1817.367637][T32099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1817.405502][T32099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1817.426971][T32099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1817.467844][T32099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1817.498820][T32099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1817.536775][T32099] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1817.570994][T18748] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1817.599711][T18748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1817.635918][T32099] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1817.656246][T32099] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1817.684286][T32099] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1817.713874][T32099] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1817.797893][T32458] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9019'. [ 1817.905899][T32452] netlink: 'syz.4.9018': attribute type 21 has an invalid length. [ 1818.164966][T19254] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1818.202323][T19254] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1818.268834][T19254] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1818.297508][T32469] FAULT_INJECTION: forcing a failure. [ 1818.297508][T32469] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1818.367700][T32469] CPU: 1 PID: 32469 Comm: syz.5.9023 Not tainted syzkaller #0 [ 1818.375355][T32469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1818.385478][T32469] Call Trace: [ 1818.388807][T32469] [ 1818.391792][T32469] dump_stack_lvl+0x188/0x24e [ 1818.396543][T32469] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1818.402781][T32469] ? show_regs_print_info+0x12/0x12 [ 1818.408051][T32469] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1818.414292][T32469] ? dump_stack+0x5/0x12 [ 1818.418611][T32469] should_fail_ex+0x390/0x4c0 [ 1818.423374][T32469] _copy_from_user+0x2c/0x170 [ 1818.428131][T32469] __sys_bpf+0x2ea/0x780 [ 1818.432451][T32469] ? bpf_link_show_fdinfo+0x380/0x380 [ 1818.437911][T32469] ? lock_chain_count+0x20/0x20 [ 1818.442917][T32469] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1818.448974][T32469] __x64_sys_bpf+0x78/0x90 [ 1818.453466][T32469] do_syscall_64+0x4c/0xa0 [ 1818.458218][T32469] ? clear_bhb_loop+0x60/0xb0 [ 1818.462964][T32469] ? clear_bhb_loop+0x60/0xb0 [ 1818.467717][T32469] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1818.473766][T32469] RIP: 0033:0x7f3191f9e159 [ 1818.478216][T32469] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1818.497866][T32469] RSP: 002b:00007f3192dda028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1818.506411][T32469] RAX: ffffffffffffffda RBX: 00007f3192225fa0 RCX: 00007f3191f9e159 [ 1818.514441][T32469] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 1818.522467][T32469] RBP: 00007f3192dda090 R08: 0000000000000000 R09: 0000000000000000 [ 1818.530491][T32469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1818.538614][T32469] R13: 00007f3192226038 R14: 00007f3192225fa0 R15: 00007ffe21744878 [ 1818.546739][T32469] [ 1818.629207][T32454] device syzkaller0 entered promiscuous mode [ 1818.684629][T18748] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1818.705924][T18748] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1818.736625][T18748] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1818.763706][T32474] netlink: 134056 bytes leftover after parsing attributes in process `syz.3.9022'. [ 1819.764339][T32492] netlink: 'syz.1.9030': attribute type 3 has an invalid length. [ 1819.804182][T32492] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.9030'. [ 1821.020540][T32499] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1823.166405][T32474] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1823.180384][T32495] netlink: 'syz.5.9029': attribute type 10 has an invalid length. [ 1823.194056][T32495] netlink: 40 bytes leftover after parsing attributes in process `syz.5.9029'. [ 1823.203539][T32474] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1823.219770][T32495] device ipvlan1 entered promiscuous mode [ 1823.225917][T32474] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1823.240414][T32495] bridge0: port 3(ipvlan1) entered blocking state [ 1823.267956][T32495] bridge0: port 3(ipvlan1) entered disabled state [ 1823.276259][T32495] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1823.376662][T32498] ieee80211 phy162: Failed to add default virtual iface [ 1824.022106][T32529] FAULT_INJECTION: forcing a failure. [ 1824.022106][T32529] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1824.086565][T32529] CPU: 0 PID: 32529 Comm: syz.3.9040 Not tainted syzkaller #0 [ 1824.094119][T32529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1824.104227][T32529] Call Trace: [ 1824.107549][T32529] [ 1824.110523][T32529] dump_stack_lvl+0x188/0x24e [ 1824.115264][T32529] ? show_regs_print_info+0x12/0x12 [ 1824.120562][T32529] ? load_image+0x410/0x410 [ 1824.125126][T32529] ? __lock_acquire+0x7c40/0x7c40 [ 1824.130210][T32529] ? migrate_enable+0x148/0x220 [ 1824.135124][T32529] should_fail_ex+0x390/0x4c0 [ 1824.139878][T32529] _copy_to_user+0x2c/0x130 [ 1824.144441][T32529] bpf_test_finish+0x4a2/0x600 [ 1824.149273][T32529] ? convert_skb_to___skb+0x420/0x420 [ 1824.154763][T32529] ? memcpy+0x3c/0x60 [ 1824.158866][T32529] bpf_prog_test_run_skb+0x1129/0x18e0 [ 1824.164445][T32529] ? cpu_online+0xa0/0xa0 [ 1824.168841][T32529] bpf_prog_test_run+0x31c/0x390 [ 1824.173854][T32529] __sys_bpf+0x62b/0x780 [ 1824.178171][T32529] ? bpf_link_show_fdinfo+0x380/0x380 [ 1824.183625][T32529] ? lock_chain_count+0x20/0x20 [ 1824.188550][T32529] __x64_sys_bpf+0x78/0x90 [ 1824.193048][T32529] do_syscall_64+0x4c/0xa0 [ 1824.197530][T32529] ? clear_bhb_loop+0x60/0xb0 [ 1824.202270][T32529] ? clear_bhb_loop+0x60/0xb0 [ 1824.207010][T32529] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1824.213416][T32529] RIP: 0033:0x7f6cd0d9e159 [ 1824.217887][T32529] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1824.237563][T32529] RSP: 002b:00007f6cd1d4c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1824.246049][T32529] RAX: ffffffffffffffda RBX: 00007f6cd1025fa0 RCX: 00007f6cd0d9e159 [ 1824.254179][T32529] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 1824.262216][T32529] RBP: 00007f6cd1d4c090 R08: 0000000000000000 R09: 0000000000000000 [ 1824.270250][T32529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1824.278280][T32529] R13: 00007f6cd1026038 R14: 00007f6cd1025fa0 R15: 00007ffc88c93338 [ 1824.286324][T32529] [ 1824.341512][T32533] FAULT_INJECTION: forcing a failure. [ 1824.341512][T32533] name failslab, interval 1, probability 0, space 0, times 0 [ 1824.387807][T32533] CPU: 1 PID: 32533 Comm: syz.4.9042 Not tainted syzkaller #0 [ 1824.395364][T32533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1824.405579][T32533] Call Trace: [ 1824.408920][T32533] [ 1824.411929][T32533] dump_stack_lvl+0x188/0x24e [ 1824.416756][T32533] ? show_regs_print_info+0x12/0x12 [ 1824.422000][T32533] ? load_image+0x410/0x410 [ 1824.426553][T32533] ? __lock_acquire+0x7c40/0x7c40 [ 1824.431626][T32533] should_fail_ex+0x390/0x4c0 [ 1824.436347][T32533] should_failslab+0x5/0x20 [ 1824.440885][T32533] slab_pre_alloc_hook+0x59/0x300 [ 1824.445947][T32533] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1824.451965][T32533] ? bpf_test_init+0x9f/0x140 [ 1824.456724][T32533] __kmem_cache_alloc_node+0x4f/0x270 [ 1824.462141][T32533] ? bpf_test_init+0x9f/0x140 [ 1824.466885][T32533] __kmalloc+0xa3/0x240 [ 1824.471101][T32533] bpf_test_init+0x9f/0x140 [ 1824.475653][T32533] bpf_prog_test_run_xdp+0x488/0xf80 [ 1824.480976][T32533] ? __lock_acquire+0x7c40/0x7c40 [ 1824.486079][T32533] ? dev_put+0x80/0x80 [ 1824.490203][T32533] ? dev_put+0x80/0x80 [ 1824.494310][T32533] bpf_prog_test_run+0x31c/0x390 [ 1824.499287][T32533] __sys_bpf+0x62b/0x780 [ 1824.503588][T32533] ? bpf_link_show_fdinfo+0x380/0x380 [ 1824.509034][T32533] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1824.515263][T32533] __x64_sys_bpf+0x78/0x90 [ 1824.519731][T32533] do_syscall_64+0x4c/0xa0 [ 1824.524232][T32533] ? clear_bhb_loop+0x60/0xb0 [ 1824.529292][T32533] ? clear_bhb_loop+0x60/0xb0 [ 1824.534028][T32533] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1824.539977][T32533] RIP: 0033:0x7fe74079e159 [ 1824.544428][T32533] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1824.564076][T32533] RSP: 002b:00007fe7416be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1824.572526][T32533] RAX: ffffffffffffffda RBX: 00007fe740a25fa0 RCX: 00007fe74079e159 [ 1824.580526][T32533] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 1824.588526][T32533] RBP: 00007fe7416be090 R08: 0000000000000000 R09: 0000000000000000 [ 1824.596542][T32533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1824.604562][T32533] R13: 00007fe740a26038 R14: 00007fe740a25fa0 R15: 00007fff95e2cd38 [ 1824.612755][T32533] [ 1824.692092][T32535] netlink: 'syz.5.9043': attribute type 3 has an invalid length. [ 1824.769866][T32535] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.9043'. [ 1824.859259][T32550] netlink: 'syz.1.9044': attribute type 21 has an invalid length. [ 1824.877670][T32550] netlink: 156 bytes leftover after parsing attributes in process `syz.1.9044'. [ 1824.919989][T32550] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9044'. [ 1824.954758][T32552] netlink: 'syz.0.9046': attribute type 10 has an invalid length. [ 1824.969885][T32552] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9046'. [ 1824.997978][T32552] device ipvlan1 entered promiscuous mode [ 1825.026070][T32552] bridge0: port 3(ipvlan1) entered blocking state [ 1825.043115][T32552] bridge0: port 3(ipvlan1) entered disabled state [ 1825.061173][T32552] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1825.171217][T32548] netlink: 'syz.4.9047': attribute type 39 has an invalid length. [ 1825.185248][T32548] device macvlan0 entered promiscuous mode [ 1825.606390][T32561] netlink: 'syz.3.9051': attribute type 12 has an invalid length. [ 1825.654531][T32561] netlink: 104 bytes leftover after parsing attributes in process `syz.3.9051'. [ 1825.691308][T32565] netlink: 'syz.4.9052': attribute type 10 has an invalid length. [ 1825.827967][T32562] netlink: 'syz.3.9051': attribute type 29 has an invalid length. [ 1825.902708][T32562] netlink: 'syz.3.9051': attribute type 29 has an invalid length. [ 1826.956264][T32586] netlink: 'syz.0.9060': attribute type 3 has an invalid length. [ 1826.968230][T32586] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.9060'. [ 1827.988754][T32610] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9066'. [ 1828.010931][T32610] bridge0: port 3(ipvlan1) entered blocking state [ 1828.039665][T32610] bridge0: port 3(ipvlan1) entered disabled state [ 1828.049493][T32610] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1828.229927][T32613] validate_nla: 1 callbacks suppressed [ 1828.229950][T32613] netlink: 'syz.5.9068': attribute type 10 has an invalid length. [ 1828.347255][T32613] netlink: 40 bytes leftover after parsing attributes in process `syz.5.9068'. [ 1828.489989][T32613] bridge0: port 3(ipvlan1) entered blocking state [ 1828.538376][T32613] bridge0: port 3(ipvlan1) entered disabled state [ 1828.627193][T32613] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1829.151025][T32625] netlink: 164 bytes leftover after parsing attributes in process `syz.0.9073'. [ 1829.193115][T32630] netlink: 'syz.1.9075': attribute type 3 has an invalid length. [ 1829.218059][T32630] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.9075'. [ 1829.241152][T32631] netlink: 164 bytes leftover after parsing attributes in process `syz.0.9073'. [ 1829.323946][T32625] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1829.996005][T32648] netlink: 128 bytes leftover after parsing attributes in process `syz.0.9080'. [ 1830.101506][T32648] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1830.561623][T19254] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1830.574053][T32657] FAULT_INJECTION: forcing a failure. [ 1830.574053][T32657] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1830.617551][T32657] CPU: 0 PID: 32657 Comm: syz.0.9084 Not tainted syzkaller #0 [ 1830.625120][T32657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1830.635242][T32657] Call Trace: [ 1830.638638][T32657] [ 1830.641633][T32657] dump_stack_lvl+0x188/0x24e [ 1830.646382][T32657] ? show_regs_print_info+0x12/0x12 [ 1830.651652][T32657] ? load_image+0x410/0x410 [ 1830.656224][T32657] ? __lock_acquire+0x7c40/0x7c40 [ 1830.661325][T32657] ? rcu_is_watching+0x11/0xa0 [ 1830.666156][T32657] should_fail_ex+0x390/0x4c0 [ 1830.670896][T32657] _copy_to_user+0x2c/0x130 [ 1830.675485][T32657] bpf_ctx_finish+0x126/0x200 [ 1830.680220][T32657] ? bpf_test_finish+0x600/0x600 [ 1830.685320][T32657] ? memcpy+0x3c/0x60 [ 1830.686372][T31850] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1830.689345][T32657] bpf_prog_test_run_skb+0x1167/0x18e0 [ 1830.689399][T32657] ? cpu_online+0xa0/0xa0 [ 1830.706453][T32657] bpf_prog_test_run+0x31c/0x390 [ 1830.711466][T32657] __sys_bpf+0x62b/0x780 [ 1830.715800][T32657] ? bpf_link_show_fdinfo+0x380/0x380 [ 1830.721253][T32657] ? lock_chain_count+0x20/0x20 [ 1830.726174][T32657] __x64_sys_bpf+0x78/0x90 [ 1830.728931][T31850] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1830.730628][T32657] do_syscall_64+0x4c/0xa0 [ 1830.741737][T31850] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1830.742005][T32657] ? clear_bhb_loop+0x60/0xb0 [ 1830.753684][T32657] ? clear_bhb_loop+0x60/0xb0 [ 1830.755798][T31850] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1830.758399][T32657] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1830.758435][T32657] RIP: 0033:0x7fc0d539e159 [ 1830.767094][T31850] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1830.771307][T32657] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1830.771330][T32657] RSP: 002b:00007fc0d61c8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1830.771355][T32657] RAX: ffffffffffffffda RBX: 00007fc0d5625fa0 RCX: 00007fc0d539e159 [ 1830.779262][T31850] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1830.782817][T32657] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 1830.833908][T32657] RBP: 00007fc0d61c8090 R08: 0000000000000000 R09: 0000000000000000 [ 1830.841940][T32657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1830.849960][T32657] R13: 00007fc0d5626038 R14: 00007fc0d5625fa0 R15: 00007fffc4d9fbb8 [ 1830.858000][T32657] [ 1830.954808][T32659] netlink: 'syz.1.9083': attribute type 3 has an invalid length. [ 1830.980630][T32659] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9083'. [ 1831.015153][T19254] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1831.164278][T19254] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1831.213102][T32670] FAULT_INJECTION: forcing a failure. [ 1831.213102][T32670] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1831.254924][T32670] CPU: 1 PID: 32670 Comm: syz.5.9087 Not tainted syzkaller #0 [ 1831.262487][T32670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1831.272607][T32670] Call Trace: [ 1831.275945][T32670] [ 1831.278924][T32670] dump_stack_lvl+0x188/0x24e [ 1831.283682][T32670] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1831.289913][T32670] ? show_regs_print_info+0x12/0x12 [ 1831.295184][T32670] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1831.301415][T32670] should_fail_ex+0x390/0x4c0 [ 1831.306135][T32670] _copy_from_user+0x2c/0x170 [ 1831.310850][T32670] bpf_test_init+0xde/0x140 [ 1831.315396][T32670] bpf_prog_test_run_xdp+0x488/0xf80 [ 1831.320718][T32670] ? __lock_acquire+0x7c40/0x7c40 [ 1831.325784][T32670] ? lock_chain_count+0x20/0x20 [ 1831.330684][T32670] ? dev_put+0x80/0x80 [ 1831.334809][T32670] ? dev_put+0x80/0x80 [ 1831.338921][T32670] bpf_prog_test_run+0x31c/0x390 [ 1831.343898][T32670] __sys_bpf+0x62b/0x780 [ 1831.348180][T32670] ? bpf_link_show_fdinfo+0x380/0x380 [ 1831.353608][T32670] ? lock_chain_count+0x20/0x20 [ 1831.358504][T32670] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1831.364525][T32670] __x64_sys_bpf+0x78/0x90 [ 1831.369009][T32670] do_syscall_64+0x4c/0xa0 [ 1831.373469][T32670] ? clear_bhb_loop+0x60/0xb0 [ 1831.378182][T32670] ? clear_bhb_loop+0x60/0xb0 [ 1831.382900][T32670] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1831.388826][T32670] RIP: 0033:0x7f3191f9e159 [ 1831.393276][T32670] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1831.412934][T32670] RSP: 002b:00007f3192dda028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1831.421381][T32670] RAX: ffffffffffffffda RBX: 00007f3192225fa0 RCX: 00007f3191f9e159 [ 1831.429383][T32670] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 1831.437386][T32670] RBP: 00007f3192dda090 R08: 0000000000000000 R09: 0000000000000000 [ 1831.445407][T32670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1831.453414][T32670] R13: 00007f3192226038 R14: 00007f3192225fa0 R15: 00007ffe21744878 [ 1831.461428][T32670] [ 1831.513591][T19254] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1831.743932][T32681] netlink: 'syz.0.9090': attribute type 3 has an invalid length. [ 1831.804136][T32681] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.9090'. [ 1831.857093][T32658] chnl_net:caif_netlink_parms(): no params data found [ 1831.875094][T19254] tipc: Left network mode [ 1832.132408][T19254] device ip6gretap0 left promiscuous mode [ 1832.187687][T19254] : port 1(ip6gretap0) entered disabled state [ 1832.833284][ T4291] Bluetooth: hci3: command 0x0409 tx timeout [ 1833.333304][T32702] netlink: 128 bytes leftover after parsing attributes in process `syz.1.9094'. [ 1833.353075][T32702] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1833.414192][T32704] netlink: 'syz.4.9095': attribute type 10 has an invalid length. [ 1833.734088][T32719] tc_dump_action: action bad kind [ 1833.799340][T32731] netlink: 'syz.5.9101': attribute type 3 has an invalid length. [ 1833.807169][T32731] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.9101'. [ 1833.969636][T32658] bridge0: port 1(bridge_slave_0) entered blocking state [ 1833.977742][T32658] bridge0: port 1(bridge_slave_0) entered disabled state [ 1833.986106][T32658] device bridge_slave_0 entered promiscuous mode [ 1834.255818][T32658] bridge0: port 2(bridge_slave_1) entered blocking state [ 1834.265012][T32658] bridge0: port 2(bridge_slave_1) entered disabled state [ 1834.293001][T32658] device bridge_slave_1 entered promiscuous mode [ 1834.441223][T32747] netlink: 'syz.0.9115': attribute type 3 has an invalid length. [ 1834.449191][T32747] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.9115'. [ 1834.528835][T32658] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1834.897823][ T4291] Bluetooth: hci3: command 0x041b tx timeout [ 1836.245373][T32658] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1836.328233][T32761] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.9109'. [ 1836.986121][ T4291] Bluetooth: hci3: command 0x040f tx timeout [ 1839.075391][ T4291] Bluetooth: hci3: command 0x0419 tx timeout [ 1839.411887][T32658] team0: Port device team_slave_0 added [ 1839.456106][ T313] netlink: 'syz.0.9112': attribute type 7 has an invalid length. [ 1839.467208][ T316] netlink: 128 bytes leftover after parsing attributes in process `syz.5.9110'. [ 1839.478203][ T316] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1839.616076][T32658] team0: Port device team_slave_1 added [ 1839.743584][T32658] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1839.759482][T32658] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1839.799420][T32658] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1839.845605][T32658] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1839.887717][T32658] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1840.007329][T32658] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1840.105351][ T347] netlink: 'syz.5.9123': attribute type 3 has an invalid length. [ 1840.133898][ T347] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.9123'. [ 1840.209635][T32658] device hsr_slave_0 entered promiscuous mode [ 1840.248585][T32658] device hsr_slave_1 entered promiscuous mode [ 1840.269542][T32658] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1840.287594][T32658] Cannot create hsr debugfs directory [ 1840.390837][ T353] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9125'. [ 1844.138056][ T392] netlink: 'syz.4.9136': attribute type 3 has an invalid length. [ 1844.158135][ T391] -1: renamed from syzkaller0 [ 1844.199150][ T392] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.9136'. [ 1848.210023][ T420] netlink: 132 bytes leftover after parsing attributes in process `syz.5.9143'. [ 1848.542570][ T455] netlink: 'syz.5.9148': attribute type 3 has an invalid length. [ 1848.551517][ T455] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.9148'. [ 1848.765227][T32658] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1848.792796][T32658] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1848.862169][T32658] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1848.917071][T32658] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1848.959500][ T462] FAULT_INJECTION: forcing a failure. [ 1848.959500][ T462] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1849.042840][ T462] CPU: 0 PID: 462 Comm: syz.5.9150 Not tainted syzkaller #0 [ 1849.050241][ T462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1849.060367][ T462] Call Trace: [ 1849.063830][ T462] [ 1849.066911][ T462] dump_stack_lvl+0x188/0x24e [ 1849.071758][ T462] ? show_regs_print_info+0x12/0x12 [ 1849.077037][ T462] ? load_image+0x410/0x410 [ 1849.081615][ T462] ? __lock_acquire+0x7c40/0x7c40 [ 1849.086716][ T462] should_fail_ex+0x390/0x4c0 [ 1849.091474][ T462] _copy_to_user+0x2c/0x130 [ 1849.096226][ T462] bpf_ctx_finish+0x178/0x200 [ 1849.100976][ T462] ? bpf_test_finish+0x600/0x600 [ 1849.105996][ T462] ? memcpy+0x3c/0x60 [ 1849.110058][ T462] bpf_prog_test_run_skb+0x1167/0x18e0 [ 1849.115656][ T462] ? cpu_online+0xa0/0xa0 [ 1849.120084][ T462] bpf_prog_test_run+0x31c/0x390 [ 1849.125138][ T462] __sys_bpf+0x62b/0x780 [ 1849.129453][ T462] ? bpf_link_show_fdinfo+0x380/0x380 [ 1849.134918][ T462] ? lock_chain_count+0x20/0x20 [ 1849.139856][ T462] __x64_sys_bpf+0x78/0x90 [ 1849.144352][ T462] do_syscall_64+0x4c/0xa0 [ 1849.148823][ T462] ? clear_bhb_loop+0x60/0xb0 [ 1849.153572][ T462] ? clear_bhb_loop+0x60/0xb0 [ 1849.158339][ T462] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1849.164306][ T462] RIP: 0033:0x7f3191f9e159 [ 1849.168779][ T462] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1849.188525][ T462] RSP: 002b:00007f3192dda028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1849.196994][ T462] RAX: ffffffffffffffda RBX: 00007f3192225fa0 RCX: 00007f3191f9e159 [ 1849.205012][ T462] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 1849.213020][ T462] RBP: 00007f3192dda090 R08: 0000000000000000 R09: 0000000000000000 [ 1849.221025][ T462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1849.229028][ T462] R13: 00007f3192226038 R14: 00007f3192225fa0 R15: 00007ffe21744878 [ 1849.237046][ T462] [ 1849.855922][ T473] FAULT_INJECTION: forcing a failure. [ 1849.855922][ T473] name failslab, interval 1, probability 0, space 0, times 0 [ 1849.882964][T19254] device hsr_slave_0 left promiscuous mode [ 1849.902647][ T473] CPU: 1 PID: 473 Comm: syz.4.9154 Not tainted syzkaller #0 [ 1849.910025][ T473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1849.920142][ T473] Call Trace: [ 1849.923471][ T473] [ 1849.926443][ T473] dump_stack_lvl+0x188/0x24e [ 1849.931181][ T473] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1849.937394][ T473] ? show_regs_print_info+0x12/0x12 [ 1849.942652][ T473] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1849.948885][ T473] should_fail_ex+0x390/0x4c0 [ 1849.953624][ T473] should_failslab+0x5/0x20 [ 1849.958167][ T473] slab_pre_alloc_hook+0x59/0x300 [ 1849.963240][ T473] ? kvmalloc_node+0x6c/0x180 [ 1849.967980][ T473] __kmem_cache_alloc_node+0x4f/0x270 [ 1849.973507][ T473] ? kvmalloc_node+0x6c/0x180 [ 1849.978248][ T473] __kmalloc_node+0xa2/0x240 [ 1849.982923][ T473] kvmalloc_node+0x6c/0x180 [ 1849.987486][ T473] bpf_test_run_xdp_live+0x206/0x1a90 [ 1849.992911][ T473] ? 0xffffffffa00041c0 [ 1849.997137][ T473] ? bpf_dispatcher_change_prog+0xc92/0xf10 [ 1850.003093][ T473] ? perf_trace_run_bpf_submit+0x124/0x1c0 [ 1850.008966][ T473] ? xdp_convert_md_to_buff+0x330/0x330 [ 1850.014574][ T473] ? perf_trace_preemptirq_template+0x268/0x320 [ 1850.020906][ T473] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1850.027124][ T473] ? lockdep_hardirqs_on+0x94/0x140 [ 1850.032389][ T473] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 1850.038710][ T473] ? bpf_dispatcher_change_prog+0xcae/0xf10 [ 1850.044708][ T473] bpf_prog_test_run_xdp+0x757/0xf80 [ 1850.050058][ T473] ? __lock_acquire+0x7c40/0x7c40 [ 1850.055162][ T473] ? dev_put+0x80/0x80 [ 1850.059308][ T473] ? dev_put+0x80/0x80 [ 1850.063443][ T473] bpf_prog_test_run+0x31c/0x390 [ 1850.068448][ T473] __sys_bpf+0x62b/0x780 [ 1850.072761][ T473] ? bpf_link_show_fdinfo+0x380/0x380 [ 1850.078214][ T473] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1850.084458][ T473] __x64_sys_bpf+0x78/0x90 [ 1850.088938][ T473] do_syscall_64+0x4c/0xa0 [ 1850.093418][ T473] ? clear_bhb_loop+0x60/0xb0 [ 1850.098161][ T473] ? clear_bhb_loop+0x60/0xb0 [ 1850.102902][ T473] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1850.108862][ T473] RIP: 0033:0x7fe74079e159 [ 1850.113318][ T473] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1850.132978][ T473] RSP: 002b:00007fe7416be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1850.141448][ T473] RAX: ffffffffffffffda RBX: 00007fe740a25fa0 RCX: 00007fe74079e159 [ 1850.149474][ T473] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 1850.157670][ T473] RBP: 00007fe7416be090 R08: 0000000000000000 R09: 0000000000000000 [ 1850.165693][ T473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1850.173723][ T473] R13: 00007fe740a26038 R14: 00007fe740a25fa0 R15: 00007fff95e2cd38 [ 1850.181797][ T473] [ 1850.209537][T19254] device hsr_slave_1 left promiscuous mode [ 1850.224916][T19254] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1850.236755][T19254] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1850.255155][T19254] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1850.287713][T19254] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1850.776054][T19254] device bridge_slave_1 left promiscuous mode [ 1850.790567][T19254] bridge0: port 2(bridge_slave_1) entered disabled state [ 1850.811442][T19254] device bridge_slave_0 left promiscuous mode [ 1850.822360][T19254] bridge0: port 1(bridge_slave_0) entered disabled state [ 1850.943437][T19254] device veth1_macvtap left promiscuous mode [ 1850.974723][T19254] device veth0_macvtap left promiscuous mode [ 1850.985025][T19254] device veth1_vlan left promiscuous mode [ 1851.005753][T19254] device veth0_vlan left promiscuous mode [ 1852.797249][T32658] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1852.807219][ T489] netlink: 'syz.0.9158': attribute type 10 has an invalid length. [ 1852.884781][T32658] 8021q: adding VLAN 0 to HW filter on device team0 [ 1852.918908][T18748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1852.946503][T18748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1853.049315][T18748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1853.059385][T18748] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1853.098482][T18748] bridge0: port 1(bridge_slave_0) entered blocking state [ 1853.105724][T18748] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1853.231308][T18748] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1853.259077][T18748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1853.318479][T18748] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1853.370566][T18748] bridge0: port 2(bridge_slave_1) entered blocking state [ 1853.377803][T18748] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1853.395190][ T526] netlink: 'syz.0.9171': attribute type 3 has an invalid length. [ 1853.482170][T18748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1853.534975][ T526] netlink: 197592 bytes leftover after parsing attributes in process `syz.0.9171'. [ 1853.545221][T18748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1853.621238][T18748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1853.645217][T18748] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1853.738942][T18748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1853.800613][T18748] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1853.875508][T18748] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1853.905016][T18748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1853.971812][T18748] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1854.009824][T18748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1854.038460][T18748] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1854.067965][ T537] netlink: 'syz.1.9173': attribute type 10 has an invalid length. [ 1854.093980][ T537] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9173'. [ 1854.348835][T32658] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1855.471356][ T556] netlink: 'syz.4.9176': attribute type 12 has an invalid length. [ 1855.547913][ T556] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9176'. [ 1855.691118][ T562] netlink: 14 bytes leftover after parsing attributes in process `syz.5.9180'. [ 1855.825460][ T562] device hsr_slave_0 left promiscuous mode [ 1855.851057][ T562] device hsr_slave_1 left promiscuous mode [ 1856.047558][ T7186] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1856.062742][ T7186] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1856.107842][T32658] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1856.183160][ T7186] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1856.202930][ T7186] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1856.277185][ T7186] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1856.295781][ T7186] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1856.328524][T32658] device veth0_vlan entered promiscuous mode [ 1856.363226][ T7186] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1856.410508][ T7186] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1856.614453][T32658] device veth1_vlan entered promiscuous mode [ 1856.805418][ T7186] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1856.847735][ T7186] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1856.903605][ T7186] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1856.951784][ T7186] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1857.014348][T32658] device veth0_macvtap entered promiscuous mode [ 1857.057595][ T7186] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1857.070880][T32658] device veth1_macvtap entered promiscuous mode [ 1857.169837][T32658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1857.221199][T32658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1857.250916][T32658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1857.281906][T32658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1857.302830][T32658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1857.364667][T32658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1857.417127][T32658] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1857.449410][T32658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1857.490521][T32658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1857.521377][T32658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1857.556241][T32658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1857.586751][T32658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1857.617738][T32658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1857.647935][T32658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1857.672801][T32658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1857.709183][T32658] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1857.774588][ T7186] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1857.814753][ T7186] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1857.854795][ T7186] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1857.878409][ T7186] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1857.905677][T32658] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1857.927208][T32658] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1857.956560][T32658] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1857.991488][T32658] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1858.093950][ T616] netlink: 'syz.0.9192': attribute type 1 has an invalid length. [ 1858.135940][ T616] netlink: 157116 bytes leftover after parsing attributes in process `syz.0.9192'. [ 1858.429981][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1858.436363][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1858.609965][ T7186] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1858.643293][ T7186] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1858.703235][T18761] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1858.783077][T19254] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1858.843983][T19254] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1858.882351][T18757] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1859.038290][ T638] netlink: 'syz.5.9196': attribute type 25 has an invalid length. [ 1859.057133][ T638] netlink: 'syz.5.9196': attribute type 28 has an invalid length. [ 1859.145291][ T640] netlink: 'syz.3.9077': attribute type 10 has an invalid length. [ 1859.177671][ T640] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9077'. [ 1859.219147][ T640] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 1859.404886][ T647] netlink: 'syz.4.9198': attribute type 10 has an invalid length. [ 1859.762487][ T662] netlink: 'syz.4.9202': attribute type 1 has an invalid length. [ 1859.799526][ T662] netlink: 5 bytes leftover after parsing attributes in process `syz.4.9202'. [ 1860.060622][ T672] netlink: 'syz.5.9206': attribute type 2 has an invalid length. [ 1860.099893][ T672] netlink: 14 bytes leftover after parsing attributes in process `syz.5.9206'. [ 1860.155067][ T673] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9206'. [ 1861.828481][ T4292] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1861.867871][ T4292] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1861.893497][ T4292] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1861.918700][ T4292] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1861.927144][T31850] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1861.937700][ T4292] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1862.473123][ T673] netlink: 'syz.5.9206': attribute type 21 has an invalid length. [ 1862.505605][ T673] netlink: 132 bytes leftover after parsing attributes in process `syz.5.9206'. [ 1862.908280][ T704] netlink: 'syz.3.9213': attribute type 3 has an invalid length. [ 1862.983292][ T704] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.9213'. [ 1863.010486][ T701] netlink: 'syz.0.9212': attribute type 12 has an invalid length. [ 1863.019643][ T701] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9212'. [ 1863.391699][ T696] chnl_net:caif_netlink_parms(): no params data found [ 1863.590024][T18757] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1863.787025][T18757] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1864.012192][T18757] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1864.027782][ T4291] Bluetooth: hci5: command 0x0409 tx timeout [ 1864.325198][T18757] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1864.368915][ T696] bridge0: port 1(bridge_slave_0) entered blocking state [ 1864.376099][ T696] bridge0: port 1(bridge_slave_0) entered disabled state [ 1864.421464][ T696] device bridge_slave_0 entered promiscuous mode [ 1864.458973][ T696] bridge0: port 2(bridge_slave_1) entered blocking state [ 1864.466659][ T696] bridge0: port 2(bridge_slave_1) entered disabled state [ 1864.499909][ T696] device bridge_slave_1 entered promiscuous mode [ 1864.656648][ T696] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1864.780074][ T696] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1864.930826][ T696] team0: Port device team_slave_0 added [ 1864.937305][T18757] tipc: Left network mode [ 1865.004169][ T696] team0: Port device team_slave_1 added [ 1865.344325][ T759] netlink: 'syz.5.9226': attribute type 3 has an invalid length. [ 1865.385842][ T759] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.9226'. [ 1866.098620][ T4291] Bluetooth: hci5: command 0x041b tx timeout [ 1866.105632][ T696] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1866.113364][ T696] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1866.140656][ T696] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1866.254792][ T696] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1866.272446][ T696] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1866.362121][ T696] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1866.722596][ T696] device hsr_slave_0 entered promiscuous mode [ 1866.760075][ T696] device hsr_slave_1 entered promiscuous mode [ 1866.985073][ T789] netlink: 'syz.3.9232': attribute type 10 has an invalid length. [ 1867.079184][ T789] team0: Port device macvlan1 added [ 1868.178624][ T4291] Bluetooth: hci5: command 0x040f tx timeout [ 1869.786688][ T818] bond0: (slave wlan1): Error: Slave device does not support XDP [ 1869.987839][ T696] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1870.163198][ T696] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1870.257727][ T4291] Bluetooth: hci5: command 0x0419 tx timeout [ 1870.346888][ T696] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1870.395363][ T696] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1870.462450][ T844] tipc: Started in network mode [ 1870.518732][ T844] tipc: Node identity 9215a268, cluster identity 4711 [ 1870.525596][ T844] tipc: Node number set to 2450891368 [ 1870.586359][ T843] delete_channel: no stack [ 1870.667934][ T847] Ÿë: port 1(veth0_to_team) entered blocking state [ 1870.677716][ T847] Ÿë: port 1(veth0_to_team) entered disabled state [ 1870.719514][ T847] device veth0_to_team entered promiscuous mode [ 1873.363574][ T906] netlink: 'syz.3.9259': attribute type 21 has an invalid length. [ 1873.385953][ T906] netlink: 152 bytes leftover after parsing attributes in process `syz.3.9259'. [ 1874.232285][ T919] delete_channel: no stack [ 1876.959146][ T696] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1876.986992][ T925] tipc: Started in network mode [ 1877.002408][ T925] tipc: Node identity 9215a268, cluster identity 4711 [ 1877.017829][ T925] tipc: Node number set to 2450891368 [ 1877.244381][ T7186] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1877.264375][ T7186] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1877.319110][ T696] 8021q: adding VLAN 0 to HW filter on device team0 [ 1877.990426][T18757] device hsr_slave_0 left promiscuous mode [ 1878.057501][T18757] device hsr_slave_1 left promiscuous mode [ 1878.076377][T18757] device bridge_slave_1 left promiscuous mode [ 1878.101329][T18757] bridge0: port 2(bridge_slave_1) entered disabled state [ 1878.143054][T18757] device bridge_slave_0 left promiscuous mode [ 1878.175664][T18757] bridge0: port 1(bridge_slave_0) entered disabled state [ 1878.256565][T18757] device veth0_vlan left promiscuous mode [ 1879.129663][T18757] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1879.189176][T18757] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1879.592767][T18757] bond0 (unregistering): Released all slaves [ 1879.735020][ T946] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9270'. [ 1879.746449][ T951] netlink: 'syz.0.9272': attribute type 10 has an invalid length. [ 1879.762096][ T958] netlink: 'syz.1.9274': attribute type 10 has an invalid length. [ 1879.777832][ T958] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9274'. [ 1879.804631][ T958] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 1879.871832][T18748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1879.904873][T18748] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1879.957026][T18748] bridge0: port 1(bridge_slave_0) entered blocking state [ 1879.964276][T18748] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1880.009252][ T971] tipc: Started in network mode [ 1880.014781][ T971] tipc: Node identity 9215a268, cluster identity 4711 [ 1880.047513][ T971] tipc: Node number set to 2450891368 [ 1880.063581][T18748] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1880.076042][T18748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1880.091365][ T970] delete_channel: no stack [ 1880.107445][T18748] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1880.134708][T18748] bridge0: port 2(bridge_slave_1) entered blocking state [ 1880.142227][T18748] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1880.173686][T18748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1880.232951][T18748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1880.300053][T18748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1880.317608][T18748] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1880.337234][T18748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1880.346967][T18748] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1880.406963][T18748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1880.418514][T18748] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1880.427244][T18748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1880.436774][T18748] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1880.452261][ T696] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1880.498141][T18748] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1881.295834][ T1007] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9289'. [ 1882.016672][T18761] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1882.033469][T18761] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1882.067188][ T696] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1882.129598][ T1024] netlink: 'syz.3.9294': attribute type 3 has an invalid length. [ 1882.188271][ T1024] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.9294'. [ 1882.563944][ T1047] netlink: 'syz.0.9298': attribute type 2 has an invalid length. [ 1882.597476][ T1047] netlink: 'syz.0.9298': attribute type 1 has an invalid length. [ 1882.606759][ T1049] netlink: 132 bytes leftover after parsing attributes in process `syz.5.9301'. [ 1882.975157][ T1061] netlink: 'syz.5.9304': attribute type 13 has an invalid length. [ 1883.024715][ T1061] netlink: 152 bytes leftover after parsing attributes in process `syz.5.9304'. [ 1883.083415][ T1061] syz_tun: refused to change device tx_queue_len [ 1883.156061][ T1061] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1883.454998][T18761] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1883.470541][T18761] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1883.619174][ T7186] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1883.650665][ T7186] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1883.692104][ T696] device veth0_vlan entered promiscuous mode [ 1883.734542][ T7186] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1883.766527][ T7186] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1883.813154][ T696] device veth1_vlan entered promiscuous mode [ 1883.958882][T18761] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1883.971053][T18761] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1884.004432][T18761] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1884.067052][T18761] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1884.128169][ T696] device veth0_macvtap entered promiscuous mode [ 1884.158414][ T696] device veth1_macvtap entered promiscuous mode [ 1884.205686][ T696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1884.235253][ T696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1884.262138][ T696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1884.297511][ T696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1884.324538][ T696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1884.362878][ T696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1884.393360][ T696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1884.424686][ T696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1884.463472][ T696] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1884.505416][T19254] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1884.526079][T19254] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1884.550773][T19254] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1884.586166][T19254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1884.617010][ T696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1884.644970][ T696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1884.685454][ T696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1884.713708][ T696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1884.744335][ T696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1884.775719][ T696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1884.807599][ T696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1884.827561][ T696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1884.847511][ T696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1884.858493][ T696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1884.926785][ T696] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1884.953361][T18761] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1884.986551][T18761] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1885.047069][ T696] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1885.086660][ T696] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1885.109061][ T696] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1885.124804][ T696] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1885.234597][ T1076] netlink: 'syz.5.9309': attribute type 3 has an invalid length. [ 1885.243478][ T1076] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.9309'. [ 1885.331144][T18757] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1885.359881][T18757] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1885.372449][T18764] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1885.418111][T18764] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1885.426027][T18764] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1885.465416][T18757] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1885.639510][ T1087] netlink: 156 bytes leftover after parsing attributes in process `syz.4.9209'. [ 1885.713802][ T1083] netlink: 'syz.3.9314': attribute type 41 has an invalid length. [ 1886.356260][ T1110] netlink: 'syz.4.9323': attribute type 3 has an invalid length. [ 1886.401911][ T1108] netlink: 'syz.5.9322': attribute type 25 has an invalid length. [ 1886.409384][ T1110] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.9323'. [ 1886.419680][ T1108] netlink: 'syz.5.9322': attribute type 29 has an invalid length. [ 1886.461720][ T1108] netlink: 5 bytes leftover after parsing attributes in process `syz.5.9322'. [ 1887.418973][ T1150] netlink: 'syz.1.9333': attribute type 10 has an invalid length. [ 1887.426925][ T1150] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9333'. [ 1887.535304][ T1155] netlink: 'syz.4.9339': attribute type 3 has an invalid length. [ 1887.583709][ T1155] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.9339'. [ 1887.623771][ T1159] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9340'. [ 1888.199691][ T1168] netlink: 'syz.3.9341': attribute type 10 has an invalid length. [ 1888.378290][ T1168] team0 (unregistering): Port device team_slave_0 removed [ 1888.441588][ T1168] team0 (unregistering): Port device team_slave_1 removed [ 1888.534007][ T1168] team0 (unregistering): Port device macvlan1 removed [ 1889.189836][ T1194] netlink: 16054 bytes leftover after parsing attributes in process `syz.1.9352'. [ 1889.454104][ T1202] netlink: 'syz.5.9354': attribute type 3 has an invalid length. [ 1889.529847][ T1202] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.9354'. [ 1889.553088][ T1203] netlink: 'syz.1.9355': attribute type 3 has an invalid length. [ 1889.572576][ T1203] netlink: 163968 bytes leftover after parsing attributes in process `syz.1.9355'. [ 1890.971000][ T1214] netlink: 'syz.4.9359': attribute type 21 has an invalid length. [ 1891.575021][ T1237] netlink: 'syz.3.9368': attribute type 25 has an invalid length. [ 1891.598482][ T1237] netlink: 'syz.3.9368': attribute type 29 has an invalid length. [ 1891.632093][ T1238] netlink: 5 bytes leftover after parsing attributes in process `syz.3.9368'. [ 1892.044059][ T1242] netlink: 'syz.3.9369': attribute type 2 has an invalid length. [ 1892.100831][ T1242] netlink: 16162 bytes leftover after parsing attributes in process `syz.3.9369'. [ 1892.135266][ T1245] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9370'. [ 1892.182544][ T1247] netlink: 'syz.0.9371': attribute type 3 has an invalid length. [ 1892.215453][ T1247] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.9371'. [ 1892.835317][ T1268] netlink: 'syz.4.9375': attribute type 15 has an invalid length. [ 1892.865966][ T1268] netlink: 'syz.4.9375': attribute type 7 has an invalid length. [ 1892.924919][ T1272] netlink: 'syz.5.9373': attribute type 10 has an invalid length. [ 1892.988713][ T1272] netlink: 40 bytes leftover after parsing attributes in process `syz.5.9373'. [ 1893.060741][ T1272] bridge0: port 3(ipvlan1) entered blocking state [ 1893.067527][ T1272] bridge0: port 3(ipvlan1) entered disabled state [ 1893.171056][ T1272] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1893.224961][ T1268] netlink: 'syz.4.9375': attribute type 39 has an invalid length. [ 1893.813047][ T1291] netlink: 'syz.0.9382': attribute type 16 has an invalid length. [ 1893.851324][ T1291] netlink: 152 bytes leftover after parsing attributes in process `syz.0.9382'. [ 1895.029808][ T1309] netlink: 100 bytes leftover after parsing attributes in process `syz.4.9387'. [ 1896.738656][ T1357] validate_nla: 4 callbacks suppressed [ 1896.738678][ T1357] netlink: 'syz.3.9404': attribute type 10 has an invalid length. [ 1896.812532][ T1360] netlink: 'syz.4.9405': attribute type 10 has an invalid length. [ 1896.837677][ T1360] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9405'. [ 1896.875668][ T1360] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 1897.015773][ T1364] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9407'. [ 1898.464935][ T1380] netlink: 'syz.1.9413': attribute type 3 has an invalid length. [ 1898.557444][ T1380] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.9413'. [ 1901.080076][ T1393] delete_channel: no stack [ 1901.276948][ T1406] netlink: 194236 bytes leftover after parsing attributes in process `syz.5.9420'. [ 1901.329590][ T1406] netlink: zone id is out of range [ 1901.334857][ T1406] netlink: zone id is out of range [ 1901.447563][ T1406] netlink: zone id is out of range [ 1901.547735][ T1406] netlink: zone id is out of range [ 1901.559147][ T1407] bond0: (slave wlan1): Error: Slave device does not support XDP [ 1901.597607][ T1406] netlink: zone id is out of range [ 1901.635955][ T1406] netlink: zone id is out of range [ 1901.668990][ T1406] netlink: zone id is out of range [ 1901.698181][ T1406] netlink: get zone limit has 8 unknown bytes [ 1902.066402][ T1422] netlink: 'syz.1.9425': attribute type 3 has an invalid length. [ 1902.104255][ T1422] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.9425'. [ 1902.198148][ T1424] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1902.571410][ T1432] netlink: 144 bytes leftover after parsing attributes in process `syz.1.9429'. [ 1902.688468][ T1435] delete_channel: no stack [ 1902.814507][ T1439] netlink: 'syz.0.9432': attribute type 10 has an invalid length. [ 1903.116199][ T1443] netlink: 132 bytes leftover after parsing attributes in process `syz.5.9433'. [ 1903.500300][ T1453] netlink: 'syz.1.9437': attribute type 25 has an invalid length. [ 1903.575822][ T1458] netlink: 'syz.3.9439': attribute type 3 has an invalid length. [ 1903.680272][ T1458] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.9439'. [ 1903.718764][ T1453] netlink: 'syz.1.9437': attribute type 3 has an invalid length. [ 1903.848398][ T1453] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9437'. [ 1905.669331][ T1471] delete_channel: no stack [ 1905.879351][ T1479] netlink: 'syz.1.9444': attribute type 10 has an invalid length. [ 1905.887282][ T1479] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9444'. [ 1906.017138][ T1481] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1906.025108][ T1481] IPv6: NLM_F_CREATE should be set when creating new route [ 1906.034106][ T1481] IPv6: NLM_F_CREATE should be set when creating new route [ 1906.041879][ T1481] IPv6: NLM_F_CREATE should be set when creating new route [ 1906.123392][ T1484] netlink: 'syz.4.9445': attribute type 2 has an invalid length. [ 1906.213654][ T1484] netlink: 60 bytes leftover after parsing attributes in process `syz.4.9445'. [ 1906.687364][ T1494] netlink: 'syz.4.9451': attribute type 10 has an invalid length. [ 1906.890208][ T1494] team0: Port device geneve1 added [ 1908.099308][ T1520] delete_channel: no stack [ 1910.899098][ T1548] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1912.092717][ T1563] netlink: 132 bytes leftover after parsing attributes in process `syz.5.9471'. [ 1912.106742][ T1561] netlink: 'syz.0.9470': attribute type 3 has an invalid length. [ 1912.154712][ T1561] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.9470'. [ 1912.464550][ T1567] netlink: 'syz.3.9472': attribute type 21 has an invalid length. [ 1912.487808][ T1567] netlink: 'syz.3.9472': attribute type 1 has an invalid length. [ 1912.495646][ T1567] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9472'. [ 1913.173227][ T1583] netlink: 'syz.1.9476': attribute type 2 has an invalid length. [ 1913.230677][ T1583] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.9476'. [ 1913.922083][ T1581] delete_channel: no stack [ 1914.122619][ T1595] netlink: 'syz.3.9480': attribute type 21 has an invalid length. [ 1914.158309][ T1595] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9480'. [ 1914.220358][ T1595] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9480'. [ 1914.964218][ T1610] netlink: 'syz.1.9486': attribute type 3 has an invalid length. [ 1915.059693][ T1610] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.9486'. [ 1915.373743][ T1624] netlink: 'syz.1.9491': attribute type 15 has an invalid length. [ 1915.414475][ T1624] netlink: 'syz.1.9491': attribute type 7 has an invalid length. [ 1915.477512][ T1627] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.9490'. [ 1915.514263][ T1625] delete_channel: no stack [ 1915.539535][ T1629] netlink: 'syz.1.9491': attribute type 39 has an invalid length. [ 1916.139992][ T1637] netlink: 202920 bytes leftover after parsing attributes in process `syz.5.9494'. [ 1916.444658][ T1640] netlink: 'syz.4.9496': attribute type 10 has an invalid length. [ 1916.855545][ T4292] Bluetooth: hci0: command 0x0406 tx timeout [ 1916.942839][ T1645] netlink: 12289 bytes leftover after parsing attributes in process `syz.1.9497'. [ 1918.069050][ T1661] netlink: 'syz.5.9502': attribute type 3 has an invalid length. [ 1918.084866][ T1661] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.9502'. [ 1918.215105][ T1664] delete_channel: no stack [ 1919.034056][ T1688] netlink: 'syz.5.9512': attribute type 10 has an invalid length. [ 1919.118672][ T1688] netlink: 40 bytes leftover after parsing attributes in process `syz.5.9512'. [ 1919.300578][ T1688] bridge0: port 3(ipvlan1) entered blocking state [ 1919.340428][ T1688] bridge0: port 3(ipvlan1) entered disabled state [ 1919.428980][ T1688] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1919.626526][ T1690] bond0: (slave wlan1): Error: Slave device does not support XDP [ 1919.841332][ T1697] netlink: 'syz.4.9517': attribute type 3 has an invalid length. [ 1919.905313][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1919.911776][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1919.999787][ T1697] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.9517'. [ 1920.984155][ T1715] netlink: 830 bytes leftover after parsing attributes in process `syz.3.9521'. [ 1921.769412][ T1754] netlink: 'syz.1.9532': attribute type 3 has an invalid length. [ 1921.777293][ T1754] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.9532'. [ 1922.906347][ T4291] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1922.917022][ T4291] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1922.928690][ T4291] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1922.941030][ T4291] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1922.951148][T31850] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1922.960794][T31850] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1923.321012][ T1775] chnl_net:caif_netlink_parms(): no params data found [ 1923.884862][ T1804] netlink: 'syz.4.9544': attribute type 3 has an invalid length. [ 1923.892910][ T1804] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.9544'. [ 1923.998591][ T1775] bridge0: port 1(bridge_slave_0) entered blocking state [ 1924.006565][ T1775] bridge0: port 1(bridge_slave_0) entered disabled state [ 1924.032516][ T1775] device bridge_slave_0 entered promiscuous mode [ 1924.055749][ T1775] bridge0: port 2(bridge_slave_1) entered blocking state [ 1924.072386][ T1775] bridge0: port 2(bridge_slave_1) entered disabled state [ 1924.086652][ T1775] device bridge_slave_1 entered promiscuous mode [ 1924.109861][ T1798] netlink: 'syz.3.9543': attribute type 10 has an invalid length. [ 1924.315004][ T1809] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9546'. [ 1924.399098][ T7186] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1924.502706][ T1775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1924.606234][ T7186] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1924.696292][ T1775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1924.984170][ T1775] team0: Port device team_slave_0 added [ 1924.993197][T31850] Bluetooth: hci1: command 0x0409 tx timeout [ 1925.053628][ T1775] team0: Port device team_slave_1 added [ 1925.758340][ T7186] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1925.804636][ T1830] netlink: 10 bytes leftover after parsing attributes in process `syz.4.9551'. [ 1925.814769][ T1831] netlink: 'syz.4.9551': attribute type 10 has an invalid length. [ 1925.847913][ T1831] bridge0: port 2(bridge_slave_1) entered disabled state [ 1925.855929][ T1831] bridge0: port 1(bridge_slave_0) entered disabled state [ 1925.947700][ T1831] bridge0: port 2(bridge_slave_1) entered blocking state [ 1925.954956][ T1831] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1925.962589][ T1831] bridge0: port 1(bridge_slave_0) entered blocking state [ 1925.969882][ T1831] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1926.038883][ T1831] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1926.079960][ T1832] delete_channel: no stack [ 1926.121289][ T1775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1926.138087][ T1775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1926.262516][ T1775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1926.379282][ T7186] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1926.394350][ T1775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1926.427474][ T1775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1926.497035][ T1848] netlink: 'syz.4.9556': attribute type 3 has an invalid length. [ 1926.537716][ T1848] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.9556'. [ 1926.547604][ T1775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1926.579596][ T1845] netlink: 'syz.0.9555': attribute type 10 has an invalid length. [ 1926.595972][ T1845] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9555'. [ 1926.691920][ T1845] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 1926.765641][ T1846] netlink: 'syz.3.9554': attribute type 10 has an invalid length. [ 1926.840214][ T1846] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9554'. [ 1926.890796][ T1846] device ipvlan1 entered promiscuous mode [ 1926.939878][ T1846] bridge0: port 3(ipvlan1) entered blocking state [ 1926.986952][ T1846] bridge0: port 3(ipvlan1) entered disabled state [ 1927.012429][ T1846] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1927.057568][ T4292] Bluetooth: hci1: command 0x041b tx timeout [ 1927.063855][ T4292] Bluetooth: hci2: command 0x0406 tx timeout [ 1927.635852][ T1775] device hsr_slave_0 entered promiscuous mode [ 1927.673201][ T1775] device hsr_slave_1 entered promiscuous mode [ 1927.695153][ T1775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1927.710621][ T1775] Cannot create hsr debugfs directory [ 1929.020836][ T1870] delete_channel: no stack [ 1929.073133][ T1884] netlink: 830 bytes leftover after parsing attributes in process `syz.0.9568'. [ 1929.147733][ T4292] Bluetooth: hci1: command 0x040f tx timeout [ 1929.214654][ T1893] netlink: 'syz.3.9569': attribute type 3 has an invalid length. [ 1929.224871][ T1893] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.9569'. [ 1929.482734][ T1900] netlink: 132 bytes leftover after parsing attributes in process `syz.5.9572'. [ 1929.605717][ T1907] netlink: 'syz.3.9574': attribute type 10 has an invalid length. [ 1929.792333][ T1911] netlink: 'syz.4.9577': attribute type 29 has an invalid length. [ 1929.940307][ T1911] netlink: 'syz.4.9577': attribute type 29 has an invalid length. [ 1930.008356][ T1914] netlink: 'syz.4.9577': attribute type 29 has an invalid length. [ 1930.030820][ T1775] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1930.161120][ T1920] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.9578'. [ 1930.216553][ T1775] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1930.513621][ T1775] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1930.532057][ T1920] device bridge_slave_1 left promiscuous mode [ 1930.554027][ T1920] bridge0: port 2(bridge_slave_1) entered disabled state [ 1930.809236][ T1920] device bridge_slave_0 left promiscuous mode [ 1930.861220][ T1920] bridge0: port 1(bridge_slave_0) entered disabled state [ 1931.217477][ T4292] Bluetooth: hci1: command 0x0419 tx timeout [ 1932.418613][ T1775] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1932.655735][ T1940] netlink: 'syz.0.9584': attribute type 3 has an invalid length. [ 1932.674296][ T1940] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.9584'. [ 1932.861087][ T1945] netlink: 'syz.3.9585': attribute type 33 has an invalid length. [ 1932.882974][ T1945] netlink: 152 bytes leftover after parsing attributes in process `syz.3.9585'. [ 1933.102114][ T1952] netlink: 'syz.0.9587': attribute type 10 has an invalid length. [ 1933.197366][ T1952] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9587'. [ 1933.218072][ T1952] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 1935.085447][ T1775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1935.115299][ T1959] netlink: 'syz.3.9589': attribute type 10 has an invalid length. [ 1935.137891][ T1959] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9589'. [ 1935.169148][ T1959] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1935.199188][ T1970] bond0: (slave bridge0): Error: Slave device does not support XDP [ 1935.281175][T18757] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1935.298535][T18757] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1935.324072][ T1775] 8021q: adding VLAN 0 to HW filter on device team0 [ 1935.345594][ T1979] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.9595'. [ 1935.393985][T18757] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1935.413839][T18757] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1935.433742][T18757] bridge0: port 1(bridge_slave_0) entered blocking state [ 1935.441048][T18757] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1935.453419][ T1983] netlink: 'syz.3.9596': attribute type 3 has an invalid length. [ 1935.462982][ T1983] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.9596'. [ 1935.625995][T18757] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1935.659077][T18757] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1935.690859][T18757] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1935.713416][T18757] bridge0: port 2(bridge_slave_1) entered blocking state [ 1935.722502][T18757] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1935.752297][ T1979] device bridge_slave_1 left promiscuous mode [ 1935.765986][ T1979] bridge0: port 2(bridge_slave_1) entered disabled state [ 1935.792008][ T1979] device bridge_slave_0 left promiscuous mode [ 1935.808592][ T1979] bridge0: port 1(bridge_slave_0) entered disabled state [ 1936.439333][T19252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1936.459151][T19252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1936.502488][T19252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1936.550477][T19252] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1936.589732][T19252] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1936.623276][ T2005] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9600'. [ 1936.643980][ T2003] netlink: 'syz.5.9601': attribute type 10 has an invalid length. [ 1937.063748][T19252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1937.132226][T19252] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1937.152478][T19252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1937.174579][T19252] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1937.262771][T19252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1937.290440][T19252] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1937.362842][ T1775] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1937.510317][ T2020] netlink: 'syz.0.9607': attribute type 3 has an invalid length. [ 1937.557514][ T2020] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.9607'. [ 1938.188221][ T2037] netlink: 'syz.3.9611': attribute type 10 has an invalid length. [ 1938.222153][ T2037] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9611'. [ 1938.256065][ T2037] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 1938.553702][T18746] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1938.576169][ T2044] netlink: 64859 bytes leftover after parsing attributes in process `syz.5.9612'. [ 1938.603375][T18746] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1938.623288][ T1775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1938.736398][ T2048] netlink: 'syz.3.9613': attribute type 10 has an invalid length. [ 1938.821609][ T2044] device bridge_slave_1 left promiscuous mode [ 1938.841424][ T2044] bridge0: port 2(bridge_slave_1) entered disabled state [ 1938.902576][ T2044] device bridge_slave_0 left promiscuous mode [ 1938.934624][ T2044] bridge0: port 1(bridge_slave_0) entered disabled state [ 1939.068385][ T28] INFO: task syz.2.8724:31497 blocked for more than 143 seconds. [ 1939.086644][ T28] Not tainted syzkaller #0 [ 1939.100185][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1939.139165][ T28] task:syz.2.8724 state:D stack:26448 pid:31497 ppid:23102 flags:0x00004002 [ 1939.161014][ T28] Call Trace: [ 1939.178870][ T28] [ 1939.182143][ T28] __schedule+0x107f/0x4030 [ 1939.186741][ T28] ? __lock_acquire+0x7c40/0x7c40 [ 1939.205291][ T28] ? release_firmware_map_entry+0x187/0x187 [ 1939.217741][ T28] ? task_work_cancel+0xa1/0x220 [ 1939.223072][ T28] ? task_work_cancel_func+0x210/0x210 [ 1939.241273][ T28] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1939.247933][ T28] schedule+0xb9/0x180 [ 1939.252124][ T28] ? _free_event+0x10d/0x1050 [ 1939.269814][ T28] _free_event+0x176/0x1050 [ 1939.276889][ T28] perf_event_release_kernel+0x7c4/0x850 [ 1939.285150][ T28] ? __might_sleep+0xd0/0xd0 [ 1939.302884][ T28] ? calc_timer_values+0x410/0x410 [ 1939.325155][ T28] ? __might_sleep+0xd0/0xd0 [ 1939.330454][ T28] ? perf_mmap+0x1470/0x1470 [ 1939.340181][ T28] perf_release+0x37/0x40 [ 1939.347135][ T28] __fput+0x20a/0x8b0 [ 1939.367980][ T28] task_work_run+0x1d0/0x260 [ 1939.372698][ T28] ? task_work_cancel+0x220/0x220 [ 1939.379193][ T28] ? do_raw_spin_unlock+0x11d/0x230 [ 1939.384492][ T28] do_exit+0x9d5/0x2570 [ 1939.389280][ T28] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1939.395371][ T28] ? put_task_struct+0x80/0x80 [ 1939.400668][ T28] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1939.407019][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 1939.412755][ T28] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1939.427482][ T28] do_group_exit+0x229/0x2e0 [ 1939.432334][ T28] ? _raw_spin_unlock_irq+0x25/0x40 [ 1939.446582][ T28] get_signal+0x1259/0x1340 [ 1939.451999][ T28] arch_do_signal_or_restart+0xc4/0x1310 [ 1939.459186][ T28] ? perf_trace_preemptirq_template+0xa8/0x320 [ 1939.466343][ T28] ? irqentry_enter+0x33/0x50 [ 1939.480109][ T28] ? get_sigframe_size+0x10/0x10 [ 1939.485184][ T28] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1939.491840][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 1939.497242][ T28] ? exit_to_user_mode_loop+0x3b/0x110 [ 1939.507807][ T28] exit_to_user_mode_loop+0x70/0x110 [ 1939.513316][ T28] exit_to_user_mode_prepare+0xee/0x180 [ 1939.526656][ T28] syscall_exit_to_user_mode+0x16/0x40 [ 1939.533546][ T28] do_syscall_64+0x58/0xa0 [ 1939.545698][ T28] ? clear_bhb_loop+0x60/0xb0 [ 1939.550748][ T28] ? clear_bhb_loop+0x60/0xb0 [ 1939.555742][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1939.568757][ T28] RIP: 0033:0x7fb4c939e159 [ 1939.573570][ T28] RSP: 002b:00007fb4ca2cb0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1939.583203][ T28] RAX: fffffffffffffe00 RBX: 00007fb4c9626098 RCX: 00007fb4c939e159 [ 1939.598829][ T28] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fb4c9626098 [ 1939.607080][ T28] RBP: 00007fb4c9626090 R08: 0000000000000000 R09: 0000000000000000 [ 1939.615508][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1939.624060][ T28] R13: 00007fb4c9626128 R14: 00007ffef71feac0 R15: 00007ffef71feba8 [ 1939.633061][ T28] [ 1939.636222][ T28] [ 1939.636222][ T28] Showing all locks held in the system: [ 1939.644270][ T28] 1 lock held by rcu_tasks_kthre/12: [ 1939.649676][ T28] #0: ffffffff8cb2e5b0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xef0 [ 1939.660298][ T28] 1 lock held by rcu_tasks_trace/13: [ 1939.665691][ T28] #0: ffffffff8cb2edd0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xef0 [ 1939.687431][ T28] 1 lock held by khungtaskd/28: [ 1939.693006][ T28] #0: ffffffff8cb2dc20 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 1939.705013][ T28] 2 locks held by getty/4034: [ 1939.719051][ T28] #0: ffff88802f8ec098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 1939.730031][ T28] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x41e/0x1360 [ 1939.742842][ T28] 4 locks held by kworker/u4:11/7186: [ 1939.748381][ T28] #0: ffff88801761e938 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 1939.759203][ T28] #1: ffffc90004d9fd00 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 1939.769587][ T28] #2: ffffffff8dd4fa90 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x148/0xba0 [ 1939.780399][ T28] #3: ffffffff8dd5c928 (rtnl_mutex){+.+.}-{3:3}, at: wiphy_unregister+0x24d/0xb30 [ 1939.791132][ T28] 3 locks held by kworker/1:7/14510: [ 1939.796582][ T28] #0: ffff88814cdc8138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 1939.809022][ T28] #1: ffffc90004c4fd00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 1939.821986][ T28] #2: ffffffff8dd5c928 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xc4/0x1500 [ 1939.831842][ T28] 2 locks held by kworker/u4:0/18746: [ 1939.837461][ T28] #0: ffff888017479138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 1939.849874][ T28] #1: ffffc90004ee7d00 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 1939.861922][ T28] 2 locks held by kworker/u4:13/18758: [ 1939.867679][ T28] #0: ffff888017479138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 1939.883783][ T28] #1: ffffc90004fdfd00 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 1939.895610][ T28] 3 locks held by kworker/u4:16/18761: [ 1939.902843][ T28] #0: ffff888017479138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 1939.914311][ T28] #1: ffffc9000502fd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 1939.924998][ T28] #2: ffffffff8dd5c928 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xa/0x50 [ 1939.935560][ T28] 2 locks held by kworker/u4:20/18764: [ 1939.942493][ T28] 2 locks held by kworker/1:2/28000: [ 1939.948164][ T28] #0: ffff888017472138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 1939.959615][ T28] #1: ffffc9000512fd00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 1939.971442][ T28] 3 locks held by kworker/1:3/28001: [ 1939.976781][ T28] #0: ffff888017470938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 1939.988012][ T28] #1: ffffc9000513fd00 (deferred_process_work){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 1939.998703][ T28] #2: ffffffff8dd5c928 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xa/0x20 [ 1940.010511][ T28] 3 locks held by kworker/0:8/28010: [ 1940.015866][ T28] #0: ffff88814cdc8138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 1940.027243][ T28] #1: ffffc9000509fd00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 1940.040342][ T28] #2: ffffffff8dd5c928 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xc4/0x1500 [ 1940.050967][ T28] 1 lock held by syz-executor/1775: [ 1940.056321][ T28] #0: ffffffff8dd5c928 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x80d/0xfb0 [ 1940.066010][ T28] 1 lock held by syz.5.9612/2040: [ 1940.076817][ T28] #0: ffffffff8dd5c928 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3d/0x1b0 [ 1940.087029][ T28] 2 locks held by syz.5.9612/2044: [ 1940.092456][ T28] #0: ffffffff8dd5c928 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x80d/0xfb0 [ 1940.102487][ T28] #1: ffffffff8cb338f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3c0/0x890 [ 1940.113916][ T28] 2 locks held by syz.3.9613/2046: [ 1940.123229][ T28] #0: ffffffff8cb82ee8 (event_mutex){+.+.}-{3:3}, at: perf_trace_destroy+0x2a/0x140 [ 1940.133256][ T28] #1: ffffffff8cb338f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3c0/0x890 [ 1940.150054][ T28] 2 locks held by syz.3.9613/2053: [ 1940.155237][ T28] #0: ffffffff8dd4fa90 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x324/0x5b0 [ 1940.164948][ T28] #1: ffffffff8dd5c928 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x240 [ 1940.175271][ T28] 1 lock held by syz.4.9615/2054: [ 1940.185223][ T28] #0: ffffffff8dd5c928 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3d/0x1b0 [ 1940.196137][ T28] 1 lock held by syz.4.9615/2055: [ 1940.205777][ T28] #0: ffffffff8dd5c928 (rtnl_mutex){+.+.}-{3:3}, at: __tun_chr_ioctl+0x3f3/0x1ed0 [ 1940.217043][ T28] 1 lock held by syz.4.9615/2057: [ 1940.226468][ T28] #0: ffffffff8dd5c928 (rtnl_mutex){+.+.}-{3:3}, at: __tun_chr_ioctl+0x3f3/0x1ed0 [ 1940.237054][ T28] 1 lock held by syz.4.9615/2058: [ 1940.242439][ T28] #0: ffffffff8dd5c928 (rtnl_mutex){+.+.}-{3:3}, at: __tun_chr_ioctl+0x3f3/0x1ed0 [ 1940.252566][ T28] 1 lock held by syz.4.9615/2059: [ 1940.258901][ T28] #0: ffffffff8dd5c928 (rtnl_mutex){+.+.}-{3:3}, at: __tun_chr_ioctl+0x3f3/0x1ed0 [ 1940.268471][ T28] 1 lock held by syz.4.9615/2060: [ 1940.273712][ T28] #0: ffffffff8dd5c928 (rtnl_mutex){+.+.}-{3:3}, at: __tun_chr_ioctl+0x3f3/0x1ed0 [ 1940.283528][ T28] 1 lock held by syz.0.9616/2061: [ 1940.289939][ T28] #0: ffffffff8cb82ee8 (event_mutex){+.+.}-{3:3}, at: perf_trace_destroy+0x2a/0x140 [ 1940.301258][ T28] [ 1940.303666][ T28] ============================================= [ 1940.303666][ T28] [ 1940.312325][ T28] NMI backtrace for cpu 1 [ 1940.317062][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 1940.324600][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1940.335689][ T28] Call Trace: [ 1940.339021][ T28] [ 1940.341997][ T28] dump_stack_lvl+0x188/0x24e [ 1940.346746][ T28] ? ct_irq_enter_irqson+0x170/0x170 [ 1940.352093][ T28] ? show_regs_print_info+0x12/0x12 [ 1940.357584][ T28] ? load_image+0x410/0x410 [ 1940.362164][ T28] ? vprintk_emit+0x59f/0x6a0 [ 1940.366925][ T28] ? nmi_cpu_backtrace+0x1cb/0x460 [ 1940.372160][ T28] nmi_cpu_backtrace+0x3e6/0x460 [ 1940.377216][ T28] ? nmi_trigger_cpumask_backtrace+0x450/0x450 [ 1940.383483][ T28] ? _printk+0xda/0x130 [ 1940.387697][ T28] ? load_image+0x410/0x410 [ 1940.392267][ T28] ? load_image+0x410/0x410 [ 1940.396842][ T28] ? nmi_trigger_cpumask_backtrace+0xf3/0x450 [ 1940.402970][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 1940.409165][ T28] nmi_trigger_cpumask_backtrace+0x1d4/0x450 [ 1940.415639][ T28] watchdog+0xf0e/0xf50 [ 1940.419941][ T28] ? watchdog+0x1ed/0xf50 [ 1940.424405][ T28] kthread+0x29d/0x330 [ 1940.428517][ T28] ? hungtask_pm_notify+0x40/0x40 [ 1940.433753][ T28] ? kthread_blkcg+0xd0/0xd0 [ 1940.438371][ T28] ret_from_fork+0x1f/0x30 [ 1940.442955][ T28] [ 1940.449377][ T28] Sending NMI from CPU 1 to CPUs 0: [ 1940.454683][ C0] NMI backtrace for cpu 0 [ 1940.454699][ C0] CPU: 0 PID: 19254 Comm: kworker/u4:46 Not tainted syzkaller #0 [ 1940.454717][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1940.454735][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 1940.454856][ C0] RIP: 0010:devlink_trap_report+0xa6/0x6f0 [ 1940.454939][ C0] Code: f8 f8 f3 f3 f3 f3 f3 f3 48 89 4c 24 08 48 89 44 19 08 e8 ed 57 5d f8 4c 89 34 24 49 83 c6 28 4c 89 f0 48 c1 e8 03 80 3c 18 00 <74> 08 4c 89 f7 e8 10 95 ae f8 49 8b 1e 4c 89 7c 24 38 4d 8d 77 70 [ 1940.454954][ C0] RSP: 0018:ffffc9000dc9fa60 EFLAGS: 00000246 [ 1940.454975][ C0] RAX: 1ffff1100b190195 RBX: dffffc0000000000 RCX: ffff888072ca3c00 [ 1940.454989][ C0] RDX: 0000000000000000 RSI: ffff88804e2178c0 RDI: ffff888030e78000 [ 1940.455003][ C0] RBP: ffffc9000dc9fb70 R08: 0000000000000000 R09: 0000000000000004 [ 1940.455014][ C0] R10: dffffc0000000000 R11: fffff52001b93f60 R12: 0000000000000068 [ 1940.455027][ C0] R13: ffff888058081248 R14: ffff888058c80ca8 R15: ffff88804e2178c0 [ 1940.455042][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1940.455057][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1940.455070][ C0] CR2: 0000001b33403ff8 CR3: 0000000079666000 CR4: 00000000003506f0 [ 1940.455086][ C0] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 1940.455097][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1940.455109][ C0] Call Trace: [ 1940.455115][ C0] [ 1940.455126][ C0] ? devlink_traps_unregister+0x50/0x50 [ 1940.455150][ C0] ? do_raw_spin_lock+0x128/0x2f0 [ 1940.455169][ C0] ? __rwlock_init+0x140/0x140 [ 1940.455187][ C0] ? nsim_dev_trap_report_work+0x680/0xa80 [ 1940.455213][ C0] nsim_dev_trap_report_work+0x70d/0xa80 [ 1940.455243][ C0] ? process_one_work+0x7b4/0x1160 [ 1940.455264][ C0] process_one_work+0x8ab/0x1160 [ 1940.455292][ C0] ? worker_detach_from_pool+0x240/0x240 [ 1940.455311][ C0] ? _raw_spin_lock_irq+0x86/0xf0 [ 1940.455352][ C0] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1940.455373][ C0] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1940.455397][ C0] ? wq_worker_running+0x97/0x190 [ 1940.455426][ C0] worker_thread+0xaf5/0x12a0 [ 1940.455453][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1940.455481][ C0] kthread+0x29d/0x330 [ 1940.455496][ C0] ? worker_clr_flags+0x1a0/0x1a0 [ 1940.455515][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1940.455532][ C0] ret_from_fork+0x1f/0x30 [ 1940.455562][ C0] [ 1940.477287][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 1940.477349][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 1940.477414][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1940.477457][ T28] Call Trace: [ 1940.477481][ T28] [ 1940.477503][ T28] dump_stack_lvl+0x188/0x24e [ 1940.477601][ T28] ? memcpy+0x3c/0x60 [ 1940.477664][ T28] ? show_regs_print_info+0x12/0x12 [ 1940.477750][ T28] ? load_image+0x410/0x410 [ 1940.477826][ T28] panic+0x2d3/0x710 [ 1940.477854][ T28] ? schedule_preempt_disabled+0x20/0x20 [ 1940.477951][ T28] ? bpf_jit_dump+0xd0/0xd0 [ 1940.478016][ T28] ? __irq_work_queue_local+0x12c/0x190 [ 1940.478127][ T28] ? nmi_trigger_cpumask_backtrace+0x35b/0x450 [ 1940.478243][ T28] ? nmi_trigger_cpumask_backtrace+0x360/0x450 [ 1940.478359][ T28] watchdog+0xf4d/0xf50 [ 1940.478442][ T28] ? watchdog+0x1ed/0xf50 [ 1940.478533][ T28] kthread+0x29d/0x330 [ 1940.478585][ T28] ? hungtask_pm_notify+0x40/0x40 [ 1940.478650][ T28] ? kthread_blkcg+0xd0/0xd0 [ 1940.478705][ T28] ret_from_fork+0x1f/0x30 [ 1940.478823][ T28] [ 1940.480432][ T28] Kernel Offset: disabled [ 1940.819542][ T28] Rebooting in 86400 seconds..