last executing test programs: 2m33.632962404s ago: executing program 0 (id=3023): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x1b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x10, &(0x7f0000000900)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000080)='syzkaller\x00', 0x4, 0x98, &(0x7f00000000c0)=""/152, 0x40f00}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r1, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x2) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)="5c00000012006bcd9e3fe3dc6e48aa310b6b87033c00a6001f03000000000000040012000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40) 2m32.98227346s ago: executing program 0 (id=3026): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="18120000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x60}, 0x94) socket$kcm(0x29, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0xc8, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x18, 0xf, &(0x7f0000000780)=ANY=[@ANYBLOB="1900130009000000000000080100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000000000008500000086000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000900000085000000060000009500000000000000"], &(0x7f0000000800)='syzkaller\x00', 0x0, 0x98, &(0x7f0000000940)=""/152, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000a00)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000b00)={0x0, 0x1, 0x200, 0x4cf}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000b40)=[r0, 0x1, 0x1], &(0x7f0000000b80)=[{0x1, 0x5, 0x7, 0x3}, {0x0, 0x3, 0xe, 0xe}], 0x10, 0xfffffff9}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000c80)=r4, 0x4) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003567d25a806f8c6394f93224fc60320011000a7403004700000037153e370248018000f01700d1bd", 0x2bdc4}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0xf3}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x108ea5, 0xc78, 0x0, 0x0, 0x0, 0x0, 0xae7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41100, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000001900"/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r7, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1879bd6f053a7451a87600"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r8, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r12, 0x1, 0x32, &(0x7f0000000180)=r11, 0x4) sendmsg$inet(r13, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) socket$kcm(0xa, 0xd, 0x0) 2m32.543470981s ago: executing program 0 (id=3027): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x6, 0x8, 0x8, 0x40}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYRES8=r0, @ANYBLOB="c1ea742647e944966e19a2ddd99d53d50abf9913e27da0f1b7044c00006c88e01598b078a024f4ee8aaeec1c86ae681c03145791bea5d8305d45046b52ebdf0685fb31c6a13aafb7612ad35d809a23a32ab8c64a087170a73c564055003bd60d30d926f3981eb1b375ee0f9e5360e8"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0xa, 0x5, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x9, 0x0, &(0x7f0000000640)="b9ff03076844268cb8", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f00000004000000080000000500008000", @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000f700000000000000"], 0x50) bpf$ITER_CREATE(0xb, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) r3 = socket$kcm(0xa, 0x2, 0x73) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000240)=@generic={&(0x7f0000002000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x2b, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) write$cgroup_type(r4, 0x0, 0x0) sendmsg$kcm(r3, 0x0, 0x810) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x58, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a53650e95000000000000000000009500000000000000"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6}, 0x94) 2m31.885001347s ago: executing program 0 (id=3030): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x55}, 0x94) r0 = socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setsockopt$sock_attach_bpf(r0, 0x84, 0x13, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d030000000000000000000002000000000000000000000009030000000000000063"], 0x0, 0x52}, 0x28) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, @perf_config_ext={0x0, 0xff}, 0x4140, 0x0, 0x8, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x300, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x804, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r1, @ANYBLOB="0000000002000000b70500000800000085000000a900000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x1002, &(0x7f00000014c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe65}, 0x23) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000280)="61df718305a35997984d4763fcac", 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x408000, 0x0) ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB='V?\x00\x00-\x00Y'], 0xfe33) socket$kcm(0xa, 0x1, 0x0) 2m31.022474248s ago: executing program 0 (id=3042): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x16, '\x00', 0x0, 0x24}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffee0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe52, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004100000084fa511346f0000030100000080000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r3, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000002980)={r1, 0x20, &(0x7f0000000040)={&(0x7f0000002ac0)=""/176, 0xb0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x12, 0x33, &(0x7f0000001080)=ANY=[@ANYBLOB="18000000070e131a5410927f446adf2fb12c00000000", @ANYRES32, @ANYRES32=r4, @ANYRES32=r4], 0x0, 0xffff0000, 0xae, &(0x7f0000000500)=""/174, 0x41100, 0x60, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6ce1}, 0x94) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002cc0)=@bpf_lsm={0x1d, 0x0, &(0x7f0000000040), &(0x7f0000000180)='GPL\x00', 0x2, 0xb4, &(0x7f00000028c0)=""/180, 0x40f00, 0x4, '\x00', r3, 0x1b, r1, 0x8, &(0x7f0000002a40)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000002a80)={0x2, 0x4, 0xb55, 0x3}, 0x10, r5, 0x0, 0xffffffffffffffec, 0x0, 0x0, 0x10, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000240)="5c00000013006b04000000d86e6c1d0002887ea6ea65670000000000000090f9c3dc90f8f41f8ecff32c6e020075e300250045586c8da718ad4b4460bc24eab55600000000000000bf9367b4fa51f60a64c9f4d4938037e786a6d0bd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0xd4) sendmsg(r0, &(0x7f0000002880)={&(0x7f0000000340)=@generic={0xa, "305c21071ad7339a2168f740d3f1b4085cb2bde7f658ac5fe325300f41270fcd79f6b82cd76cfc45637f988fee30e1fe9235ceb3fa7b8573538abf29f08c7611de9113852ad0ddafc055bd8518fd5654baa0131819cd47c95ccce6c16b2d96a79f5b398a807c9e56b6788162bbcec9690babd6b2c1c678881d054e4626f6"}, 0x80, &(0x7f0000001700)=[{&(0x7f0000000480)="3733189a6c7b1246ae124ca2e5d251c3e97c8b27cf4486ba002c7451d12f4f5f1706a5664ce1eb849c0ed0e56779a148dc767f9c770d0ad1e729a442a89543ce5217c5189d791c4437928f969dcd679c78b7fa5a54408f89a007e91b390ea285c945ff12bbba252a1b1da849c157a5e53f3f6d52df2135447e564bbd74fefa9c6cbf19c69c6a2276d846e7b40b308995a04e909783cb7e38d6fe13826313b2181bb5d7adf879588180dab755404c8de6e86dd8a9daede7dd09a620d6ec56f29f576fd8694cc3f5946180544417cbc1f405913119e32d39", 0xd7}, {&(0x7f0000000640)="937ae31c2cce8a38f43441de0d63ac0dbde9ea80664b42f8de99256bd269983d13e8e5730313fa4ab3e98026f7eb4fa8611c9ef9dd5f15ce303f9b6ec5ee7922fb7ceab24eaed39fbf7197697f33a63a9ca34f177aee0283a41cb0456ba5e3ce74268d013a76fc9f7d042c528e35fc6a1143822282f98350464a76051a6e0aff0392c638d692e9a41b05cf3619dbc4375d", 0x91}, {&(0x7f0000000700)="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", 0x1000}], 0x3, &(0x7f0000001740)=[{0x110, 0x117, 0x7fff, "eaaa47f820fc49c92b22b6dbbf9f4cfd9f364e316664348bff3c0087b768a1510740b39a2151abb857f0a3ea69e94fc92af033a1a23f1f32bc283ca440c54fefab58e3b1df7f4d9e309788256568da6db4345205bc4284734d65eb6909944b0a758960b65d02b92b52d87d580810ad8c260bd2617743894557360af209e1d9e91eaec7383b4f78ef6e62bb49bda82eb5ea97bb91070d5e1a9e7cacdd5965bd5e2618265db5cdb26fa594dd03650f9d28e93b580c3e4619f061f2453fb30f111304b2b07adcecc402a290c44ceebe289f4374d0a694635dbf9394fdccacec2cf7618d54647e13febf24c440573ae2f4904f41f39f241cec548f"}, {0x1010, 0x111, 0x1000, "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"}], 0x1120}, 0x24) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="0000710422000000000095000000", @ANYRES64, @ANYRESDEC=r0], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) 2m30.15589561s ago: executing program 0 (id=3037): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0xc6}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x1ffe000000000, 0xfffffffffffffffa}, 0x7e02, 0x0, 0x0, 0x0, 0x0, 0x8d3c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, &(0x7f0000000040)=""/155, 0x1000000, 0x9b, 0x1}, 0x20) (async) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0xa}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/time_for_children\x00') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000003c0)='cpuset.cpu_exclusive\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f00000002c0)=0x3, 0x12) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0700000004000000180000008e02000000000000eace20de2f02fb4c99ce962c38a1cec2189f49bee2efe8a4270420ce2e8140546745cd403c72d282737b3c4f269bdc883a5bba3187f28b2bba2c638369a5ab5aa424e03ec9f53ea940756903395d059bc4a85582de928b34c31737a93ebfbb59fde2b2aebaec11446d89a351448f78063f3fe4bdad72614ae9179ae3be4b30920e8f1a000000", @ANYRES32, @ANYRES32=0x0], 0x48) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) (async) r4 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f0000000180)=r3, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x29, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d08007b490d4f1e81f8d815000100fe80000000000000080005007a010401a80016002000104004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x21, &(0x7f0000000040)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73f72cc9f0ba1f848390000005e100602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x20000800) (async) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000980)=@o_path={&(0x7f0000000200)='./file0\x00', 0xffffffffffffffff, 0x4000, r0}, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000001680)={'team0\x00', 0x200}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)={0x1b, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0xc8eb, '\x00', r7, r3, 0x4, 0x0, 0x4}, 0x50) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) 2m15.101396902s ago: executing program 32 (id=3037): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0xc6}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x1ffe000000000, 0xfffffffffffffffa}, 0x7e02, 0x0, 0x0, 0x0, 0x0, 0x8d3c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, &(0x7f0000000040)=""/155, 0x1000000, 0x9b, 0x1}, 0x20) (async) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0xa}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/time_for_children\x00') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000003c0)='cpuset.cpu_exclusive\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f00000002c0)=0x3, 0x12) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0700000004000000180000008e02000000000000eace20de2f02fb4c99ce962c38a1cec2189f49bee2efe8a4270420ce2e8140546745cd403c72d282737b3c4f269bdc883a5bba3187f28b2bba2c638369a5ab5aa424e03ec9f53ea940756903395d059bc4a85582de928b34c31737a93ebfbb59fde2b2aebaec11446d89a351448f78063f3fe4bdad72614ae9179ae3be4b30920e8f1a000000", @ANYRES32, @ANYRES32=0x0], 0x48) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) (async) r4 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f0000000180)=r3, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x29, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d08007b490d4f1e81f8d815000100fe80000000000000080005007a010401a80016002000104004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x21, &(0x7f0000000040)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73f72cc9f0ba1f848390000005e100602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x20000800) (async) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000980)=@o_path={&(0x7f0000000200)='./file0\x00', 0xffffffffffffffff, 0x4000, r0}, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000001680)={'team0\x00', 0x200}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)={0x1b, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0xc8eb, '\x00', r7, r3, 0x4, 0x0, 0x4}, 0x50) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) 10.704915255s ago: executing program 4 (id=3777): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x2d1}, 0x20b8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0x1c, 0x1, 0x3, 0x0, 0x0, 0xfffffc, 0x10200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6, @perf_bp={&(0x7f0000000140), 0xc}, 0x10c082, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f855f2ff00000000000000008500000036000000850000000700000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000040)="f7edad00"/14, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={0x0, 0x3}, 0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f00000002c0)=[0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x0, 0xaa, &(0x7f0000000340), 0x0, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0x18, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000006c0), 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x51e, '\x00', r3, r4, 0x0, 0x4}, 0x50) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340)={r2}, 0x4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000440)=r5, 0x4) 10.446684232s ago: executing program 4 (id=3780): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xe0800, 0x0) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f00000001c0)={0x5, &(0x7f0000000180)=[{0x0, 0x7, 0x4, 0x95}, {0x1000, 0x2, 0x91, 0x54}, {0xb, 0x7, 0xff, 0x9}, {0x2a, 0x1, 0x6, 0xffff8001}, {0x1, 0x7f, 0x7, 0x401}]}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%pK \x00'}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000007910000000000000730ae0ff0000000095"], &(0x7f0000000100)='GPL\x00', 0x4, 0xc4, &(0x7f00000002c0)=""/196}, 0x94) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r2}, 0x4) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x10, &(0x7f0000000700)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x40}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64) 10.09859129s ago: executing program 4 (id=3783): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="d8000000210081044e810382db44b9040a00007f00000500002015000600142603600e1209000600fe7f00007f6f94007134cfeee0800089e408e8d8ef52b40800de00e06bbace8017cbec4c2ee5a7cef4090000001fb79164075ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5035ccb29e00360db70100000040fad95667e006dcdf969b3ef35ce3bb9ae5abb3dbe08141a90bffece0b42a9ecbee5de6ccd40df8e4edef3d93c42a83954b43370e9701008400002d3bc75dc0bb9dd33e438c", 0xcb}, {&(0x7f0000000080)="2947ccfbab120bb6a8b56c98e1", 0xd}], 0x2}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xfd, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef43c000000e3bd6efb440009000e000a0010000000ba8000001201", 0x2e}], 0x1}, 0x0) 9.601064313s ago: executing program 4 (id=3789): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="09000000010000006d05000002"], 0x48) r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x4000003, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/ipc\x00') write$cgroup_pressure(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r1}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000a00), &(0x7f00000004c0), 0x1000, r1, 0x0, 0x11000000}, 0x38) close(r0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x7, 0x0, 0x0, 0x0, 0x0, 0x10409, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0x8}, 0x10c002, 0xac5d}, 0x0, 0x9, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x108ea5, 0xc78, 0x0, 0x0, 0x0, 0x0, 0xae7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r5}, 0x4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x3, 0x4, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x1200000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_clone(0x62005000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000ac0)={r3}, 0xc) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x8041, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 8.991734398s ago: executing program 2 (id=3793): socket$kcm(0x10, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000001280)={0x5, 0x80, 0x0, 0x0, 0x0, 0x10, 0x0, 0x5d32, 0x12659, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x1000000007fff}, 0x350, 0x0, 0x5bbd7c31, 0x0, 0x309, 0x80000005, 0xffff, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast1}}, 0x80, 0x0}, 0x0) sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c000000000000000002000008800000", @ANYRES32=0x0, @ANYBLOB="ac141411e000000100000000140000000000000000000000070000000100000000000000"], 0x38}, 0x200040c4) r1 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), 0x4d}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x64, &(0x7f0000000000), 0x10) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000001180)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f00000003c0)=ANY=[@ANYRESDEC], 0x27) sendmsg$inet(r1, &(0x7f0000000140)={&(0x7f0000000100)={0x2, 0x10, @local}, 0x10, &(0x7f0000000180)=[{&(0x7f0000001940)='{', 0x1}], 0x1}, 0x80d1) close(r1) r6 = socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6, 0x9, 0x0, 0x0, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(r6, &(0x7f0000000f00)={&(0x7f00000000c0)={0x2, 0x0, @rand_addr=0x64010102}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000240)="f5169c76672525175a2b297128eb4060d646295e6fa9f0fab5866f0df194c06d739ea417f836c5d88c8c0ae869ca9cb74c140900f40a29d248d6e239ad9f2e9c87fe40d68c9ace7b823bda", 0x4b}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="200000000000deff8300000008"], 0x20}, 0x0) sendmsg$inet(r6, &(0x7f0000000f00)={&(0x7f0000000180)={0x2, 0x0, @dev}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000040)='&', 0x1}], 0x1, &(0x7f0000000000)=ANY=[], 0x20}, 0x0) socketpair(0xb, 0xa, 0x8, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[], 0x0, 0x52, 0x0, 0x20}, 0x28) 7.498821605s ago: executing program 3 (id=3797): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000200)=@raw=[@jmp={0x7, 0x0, 0x1, 0x1}, @func, @exit], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x9c, &(0x7f0000000000)=""/156}, 0x94) 7.007569877s ago: executing program 2 (id=3798): bpf$MAP_CREATE(0x0, 0x0, 0x50) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\n\x00\x00'], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair(0x1, 0x1, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'vcan0\x00', 0x200}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2c, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x3, 0x8, &(0x7f00000002c0)='\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x2c, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0xf, 0x3, 0x2) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0300000004000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/24], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000600)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000100), &(0x7f0000000140)=r2}, 0x20) socketpair(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8922, &(0x7f0000000080)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x10, &(0x7f0000001a80)=ANY=[@ANYBLOB="18000000030000000000000003000000b7080000000000007b8af8ff00000000b7080000010000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000", @ANYBLOB="4000000000000000b70500000800000085000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x17, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000200000000181100008c29ebb56b1138053f1cd9", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) write$cgroup_subtree(r6, &(0x7f00000033c0)=ANY=[], 0xfe33) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2, 0x0, 0xff, 0xe6, 0x0, 0xa023, 0x42082, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0xffffffffffffffc1, 0x400000000000a5}, 0x0, 0xb, 0x4, 0x5, 0x2, 0x401, 0x8, 0x0, 0x6, 0x0, 0xfffffffffffffffa}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89a0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89a2, &(0x7f0000000080)) 6.89577884s ago: executing program 5 (id=3799): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240)={0x1, 0xffffffffffffffff}, 0x4) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=0xffffffffffffffff, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(r4, &(0x7f0000000200)=ANY=[@ANYRES8=r3, @ANYRES8=r5], 0x12) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1e, 0x0, 0x0, 0x6, 0x9320, r0, 0x0, '\x00', 0x0, r1, 0x1, 0x5, 0x0, 0x0, @value=r4}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r7, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000300)="d2ffdd934517f3e145f228e086dd", 0x0, 0xd5b4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = perf_event_open(&(0x7f0000000440)={0x5, 0x80, 0x2, 0x2, 0xc, 0x7, 0x0, 0x2, 0x85982, 0x8, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, @perf_bp, 0x809, 0xfffffffffffffffa, 0xe, 0x3, 0x100, 0x4de, 0x2, 0x0, 0xc, 0x0, 0x4}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x1) r9 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4, 0x4, 0x0, 0x2, 0x0, 0x297, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x7fffffff, 0x2, @perf_config_ext={0x8, 0x6}, 0x8000, 0xc9, 0x4, 0x0, 0x8001, 0x101, 0x3, 0x0, 0x3, 0x0, 0x8}, 0x0, 0x7, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r8, 0x2405, r9) 6.725231064s ago: executing program 3 (id=3800): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="1c0000001a006b00103fe3dc6e080000810080ffffff00007ea60864", 0x1c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) socket$kcm(0x2, 0x200000000000001, 0x106) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x40000000000006}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r3 = socket$kcm(0x29, 0x5, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r2}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x9, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x400000, 0x0) ioctl$TUNDETACHFILTER(r4, 0x401054d6, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, 0x0, 0x48) r5 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[], 0x101d0) r6 = socket$kcm(0x1e, 0x4, 0x0) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r8 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r8, 0x88, 0xa, &(0x7f0000000000)=r7, 0x4) sendmsg$kcm(r8, &(0x7f0000000280)={&(0x7f00000000c0)=@in6={0xa, 0x4e23, 0x10, @remote, 0x5}, 0x80, 0x0}, 0x40) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r9 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r9, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[], 0x101d0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, 0x0, 0x0) syz_clone(0x630c0700, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x12cd) r10 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1b0000001a007f029e", 0x9}, {&(0x7f0000000200)="68cabf2dfb58fc0a01008888ffff0200258f", 0x12}], 0x2}, 0x0) 5.758563718s ago: executing program 5 (id=3802): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200008800000000000000fdfffdff18010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000007200000085000000d000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe8a}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e09f547ed3f02dc1fd3d6487775b", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYBLOB="a5870d", @ANYRES16=r0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000b987801052376eeaaa7bc01b60dba536000000001000000000566c0000997542d1d6a8fa9b877685657a2e"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r2}, &(0x7f0000000400), &(0x7f0000000440)=r2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r2, &(0x7f0000000240), &(0x7f0000000000)=""/1, 0x2}, 0x20) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc/1/\x00\x82q\xee\xe5\xa0\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f0000001240)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x10000000006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f00000001c0)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) r5 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb548, 0x2}, 0x200, 0x400000, 0x0, 0x0, 0x0, 0xfffffffd, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b9040a1d08020a000000040000a1180002003f00000000000e1208000f0100810401a80016ea1f0006400303000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000190091c8b14a0778a8123d"], 0xfe33) sendmsg(0xffffffffffffffff, 0x0, 0x8000) r7 = socket$kcm(0x10, 0x3, 0x10) recvmsg$kcm(r7, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x40002000) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x700, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000030000b0fd25a806c8c6f94f90324fc60", 0x33fe0}], 0x1}, 0x0) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002400)={&(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f00000023c0)=""/49, 0xfb, 0x31, 0x0, 0x7fff}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000002440)={0x400, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000024c0)={0xe, 0x12, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000008000000000000000900000018110000", @ANYRES32=r4, @ANYBLOB="00000000cd8400000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000008510000001000000186500000e0000000000000002000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f00000007c0)='syzkaller\x00', 0x9, 0x1000, &(0x7f00000012c0)=""/4096, 0x40f00, 0x15, '\x00', 0x0, @sk_skb=0x26, r8, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r9, r0, 0x0, &(0x7f0000002480)=[r2], 0x0, 0x10, 0x401}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 5.592025412s ago: executing program 2 (id=3803): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x7, 0x0, 0x0, 0x800f332, 0x21800, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={&(0x7f0000000540), 0x2}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x8}, 0x1500, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) (async) r1 = perf_event_open(&(0x7f0000000640)={0x0, 0x80, 0x5, 0x26, 0x5, 0x1, 0x0, 0xfff, 0x11e48, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f00000003c0), 0x3}, 0x4a2c, 0x4, 0x1, 0x3, 0x3, 0x681e, 0x10, 0x0, 0x4, 0x0, 0x3}, 0x0, 0x3, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000740)={0x5, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, r1, 0x0) (async, rerun: 64) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000003000000000000000040000018010000786c6c2e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000008500000006000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffde, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r3, 0x4) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000001000000000000000000000071180b000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x21600, 0x8, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="5c00000013006bcc9e3be35c6e17aa35066b876c3d0000007ea6e763160af36504001ac0080010000500e7daeb660000ef64bc76bd7b6278c206d83f38d833aa516adc24eab556a705251e618294ff0051f60a9553adac000e4509c5", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2080) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_user\x00', 0x0, 0x0) (async, rerun: 64) socket$kcm(0x10, 0x400000002, 0x0) (async, rerun: 64) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x208, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x108282, 0xac5d, 0x10000, 0x0, 0x3, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x9810, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socket$kcm(0x21, 0x2, 0x2) (async) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x2, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xea02, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x7, 0xffff}, 0x10000, 0x0, 0xc2ba, 0x1}, 0x0, 0xffffffffffffffff, r0, 0x1) (async) socket$kcm(0x10, 0x3, 0x10) 4.984781247s ago: executing program 5 (id=3805): r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188e6b62aa73772cc9f08000000000000005e140602c30000000e001a0010000000028000031294", 0x2e}], 0x1}, 0x8000) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f00000001c0)="d8000000180081044e81f782db4cb9041c1d0800fe007c05e8fe55b204000100ff02142603600e12080005007a010401a80016002000034004020000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f01ea23b77edf704bc2ce8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350d3798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000000), 0x4) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r3, 0x2401, 0x1a9) 4.914779349s ago: executing program 2 (id=3806): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x80, 0x0}, 0x0) r2 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r2, &(0x7f0000001700)={&(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10, &(0x7f0000001640)=[{&(0x7f0000000100)="ea", 0x1}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x9, &(0x7f0000000000), 0x98) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x7, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0xfffffe46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f375ffff86dd6317ce62070000000000000000431ccaf57b00000000000000000104"], 0xfe1b) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a1810039000000000b0000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) 4.8519225s ago: executing program 1 (id=3807): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x28}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 3.940820562s ago: executing program 5 (id=3808): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x37e2f4aba9289b81, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000120000"], &(0x7f0000000c00)='GPL\x00'}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001340)="94da", 0x2}], 0x1}, 0x20000001) recvmsg$unix(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)=""/151, 0x97}], 0x1}, 0x2097) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="364000001a00913a"], 0x82d7) recvmsg(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000002200)=""/4096, 0x7ffff000}, {&(0x7f0000003200)=""/4073, 0xfe9}], 0x2}, 0x0) recvmsg(r4, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) r5 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYRES32], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x23}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) recvmsg$kcm(r4, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8983, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000300)="d8000000190081054e81f782db4cb9040a1d080006007c02e8fe55a10a0015000900142603600e1208000f4f1b000401a8001600200005400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) socketpair(0xa, 0x3, 0xff, &(0x7f0000000000)) socket$kcm(0x1e, 0x4, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r8 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r8, 0x0, 0x16, 0x0, 0x0) 3.800504586s ago: executing program 3 (id=3809): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710421000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002180)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x57, 0x10, &(0x7f0000000000), 0xffffffffffffffc9}, 0x48) r1 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000240), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000400)='THAWED\x00', 0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r0, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000380)=ANY=[@ANYBLOB="180000001700000000000000ff000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r6}, 0xc) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000200)="fa82", 0x3e80}], 0x53}, 0x0) 3.715964158s ago: executing program 1 (id=3810): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x1}, 0x100c, 0x7, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = socket$kcm(0xa, 0x5, 0x0) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd}, 0x39) (async) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x15, 0x0, 0xd, 0xfffffffd}, {0x3, 0x4, 0x9, 0x80000000}]}) (async) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) (async) setsockopt$sock_attach_bpf(r0, 0x84, 0x15, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001540)=ANY=[@ANYRESHEX], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 3.162993872s ago: executing program 2 (id=3811): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x30200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x7, 0x8, 0x0, 0x4200003, 0x0, 0xc4cd, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x40282, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000001}, 0x1000, 0x2, 0xc2ba, 0x0, 0x4000000}, 0x0, 0x4, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x16, 0x3, &(0x7f0000001240)=ANY=[@ANYRESOCT=r0], &(0x7f00000001c0)='GPL\x00', 0x5, 0xc3, &(0x7f0000000680)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)=@generic={&(0x7f0000000040)='./file0\x00'}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xc, 0x2000000000000216, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000280)=ANY=[@ANYRES32=0x0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x5, 0x5, 0x0, &(0x7f0000000100)={0x0, 0x0}) close(r1) close(0xffffffffffffffff) close(0xffffffffffffffff) close(0xffffffffffffffff) close(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1b"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) ioctl$SIOCSIFHWADDR(r2, 0x8946, &(0x7f0000000040)={'veth0_vlan\x00', @random='\x00\x00\x00\x00\x00 '}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r3, &(0x7f0000000180), 0x40010) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r4, &(0x7f0000000180), 0x40010) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r5, &(0x7f0000000180), 0x40010) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x2, 0x8, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) 2.581867216s ago: executing program 1 (id=3812): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x12400, 0x0) (async) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10}, 0x8, 0x8000000000ca, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0xffffff7e, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x3}, 0x1084, 0x10004, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xffffffffffffffff, @perf_config_ext={0x76, 0x81ef7}, 0x11efa, 0x4, 0x9a, 0x0, 0x2, 0xfffff271, 0x7fff, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) socket$kcm(0x21, 0x2, 0xa) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85feff0fc9"], 0x0}, 0x94) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f00000001c0)='cpu!=0||!') bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) (async) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000140)=ANY=[@ANYBLOB='b *:4\tw'], 0xa) r6 = openat$cgroup_devices(r4, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r6, &(0x7f0000000280)={'b', ' *:* ', 'rm\x00'}, 0x9) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={r2, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000540)=[0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0], 0x0, 0xe8, &(0x7f00000005c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000600), &(0x7f00000006c0), 0x8, 0xae, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) socket$kcm(0x2, 0x5, 0x84) (async) socket$kcm(0xa, 0x5, 0x0) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 2.143768887s ago: executing program 5 (id=3813): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f0000000180)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r3 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r3, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYRES32=r3], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x400000}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@map, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r6 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000a40)="1c0000005e007f829e0b18c9d25a27a69801976ab0a2720f5ed81483", 0x1c}], 0x1}, 0x4000) recvmsg$kcm(r6, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x40000022) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x11, 0x3, &(0x7f0000000b40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000b80)='GPL\x00', 0xa5e, 0x3c, &(0x7f0000000bc0)=""/60, 0x41000, 0x21, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x9, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000c40)=[r0, r0], &(0x7f0000000c80)=[{0x5, 0x4, 0x8, 0x7}, {0x3, 0x4, 0x5, 0x6}, {0x5, 0x5, 0xe, 0xb}, {0x0, 0x1, 0xb, 0x4}, {0x5, 0x4, 0xa, 0xb}, {0x0, 0x5, 0x1, 0x6}, {0x3, 0x5, 0x4, 0xa}, {0x5, 0x3, 0x7fff, 0x6}, {0x4, 0x2, 0x6, 0xa}], 0x10, 0xff8d}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="180200000300000000000000000000008500000022000000850000007d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={r4, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000500), &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xce, &(0x7f0000000580)=[{}, {}], 0x10, 0x10, &(0x7f0000000680), &(0x7f0000000e00), 0x8, 0x3b, 0x8, 0x8, &(0x7f0000000740)}}, 0x10) r9 = bpf$ITER_CREATE(0x21, &(0x7f0000000980), 0x8) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x20, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000007000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000180100002020737200000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x0, &(0x7f0000000100), &(0x7f00000002c0)='syzkaller\x00', 0x80000000, 0x67, &(0x7f00000003c0)=""/103, 0x41000, 0x8, '\x00', r8, 0x0, r9, 0x8, 0x0, 0x0, 0x10, &(0x7f00000009c0)={0x3, 0xc, 0x4, 0x1000}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000a00)=[r0, r10], &(0x7f0000000a40)=[{0x2, 0x5, 0x8, 0xc}, {0x3, 0x4, 0x6, 0x7}, {0x3, 0x4, 0x10, 0x4}], 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r7, 0x0, 0xe, 0x0, &(0x7f0000000280)="e0400000000d85ff9782762f88ca", 0x0, 0xadca, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.0143108s ago: executing program 3 (id=3814): perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x5, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x100000001}, 0x4000, 0x2, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@cgroup, 0x3, 0x0, 0x1, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000200), 0x0, 0x0}, 0x40) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000100)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00'}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r0, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0xfffffffffffffffc, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffc0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r2, 0x0, 0x480c4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a00000006000000080000000800000040000000", @ANYRES32, @ANYBLOB="000000000000000000000000dd00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000380)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000280)=ANY=[@ANYBLOB='b *:4\trr'], 0xa) close(0x3) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@union={0x5, 0x0, 0x0, 0x5, 0x1, 0x20e2b81}]}, {0x0, [0x61, 0x2e, 0x61, 0x5f]}}, &(0x7f0000000300)=""/242, 0x2a, 0xf2, 0x1}, 0x28) r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@o_path={&(0x7f00000001c0)='./file0\x00', 0x0, 0x10, r3}, 0x18) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000440)=@generic={&(0x7f0000000100)='./file0\x00', r6}, 0x18) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000480850000002d00000018110000", @ANYRES32=r3, @ANYRESDEC=r6, @ANYRESDEC], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000580)={r1, r7}) r8 = socket$kcm(0x2, 0x1000000000000005, 0x0) sendmsg$inet(r8, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x0, @rand_addr=0x20}, 0x10, 0x0, 0x0, &(0x7f0000000480)=[@ip_retopts={{0x20, 0x84, 0x2, {[@ra={0x94, 0x4, 0x4}, @timestamp={0x44, 0xc, 0x0, 0x0, 0x0, [0x0, 0x0]}]}}}], 0x20}, 0x0) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080b01000000e8fe55a1180015000600142603600e120800180000000401040016000a00104006001000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f4d360000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 1.404080715s ago: executing program 4 (id=3815): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb010018000000000000004000000040000000020000ffff0f0000000000060400000000000000000000010500000008000000000000000000000300000000010000000200000004000000000000000000000b"], 0x0, 0x5a}, 0x28) 1.264029909s ago: executing program 2 (id=3816): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000028000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x2, 0x1000000000000002, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0x8, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4000008, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff7fffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f00000000c0)={&(0x7f0000000040)=@hci, 0x80, 0x0}, 0x1f00) sendmsg$tipc(r2, 0x0, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) socket$kcm(0x11, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x8024, 0x60000000, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x0, 0x36, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.262991449s ago: executing program 1 (id=3817): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c06", 0x27}], 0x1}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r2, 0x2000000, 0x50, 0x0, &(0x7f0000000c80)="63eced8e46dc3f0adf33c9f7b986000000800f30134e0c6d660656e8af0e7754bf142c111bb893d6500c31c939573ed657ec972b815cee8774e4218f4fdb86261bfa416ba05babaa7952311efaa2b1cf", 0x0, 0x8d83c26, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, '\x00', 0x0, @fallback=0x20, r3}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth0_to_hsr\x00', 0x800}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000080)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f90324fc601000050000", 0x19}], 0x1}, 0x40040) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="7c00000000000000000000000700000044140001ac1414aa00000000ac1414000000000000441c0003e0000001000000007f000001000000000000000000000000442c00000000000000000f883816814100000000000000000000000000000000000000000000000000000000000000000000440c0001000000000000000000000000000000a400000000000000000000000700000044280000000000000000000000000000000000000000000000000000000000000000000000000000071700e0000002ac1414bb00000000e0000002ac1414bb018616000000000010c986d78e6c4b9394b247217b87cb00830b00000000007f000001861f0000000000020010421487f84baabcbcfb42a4d90bab000748c68c4c31001089ca45d9612e5b5c11f12bc78a41000000000000006c000000000000000000000007000000441c0003ffffffff000000000000000000000000e00000010000000044340001ac1414bb0000000000000000000000000000000000000000ac1414aa00000000ac1414aa00000000ac1e000100000000830b0000000000e000000200000000001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1e, 0x37, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_idx_val={0x18, 0xb, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0x1a}, @cb_func={0x18, 0x4}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x38}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000005c0)='syzkaller\x00', 0x3, 0xee, &(0x7f0000000680)=""/238, 0x41000, 0x4, '\x00', 0x0, @sk_lookup, r3, 0x8, &(0x7f0000000780)={0x5, 0x3}, 0x8, 0x10, &(0x7f00000007c0)={0x0, 0x7, 0x7, 0xd}, 0x10, 0xffffffffffffffff, r3, 0x0, &(0x7f00000008c0)=[r0, r3, r3, r3], 0x0, 0x10, 0x4}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f00000009c0)={r3, r6}) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) 1.21322471s ago: executing program 3 (id=3818): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000002000000000060400000000000000000000010500000008000000000000000000000300000000010000000200000004000000000000000000000b"], 0x0, 0x5a}, 0x28) 1.145467862s ago: executing program 5 (id=3819): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_clone(0x62005000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10003}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0xa, 0x5, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9e1b4c8161b02", 0x0, 0x0, 0x0}, 0x38) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x30, 0x0, 0x0, 0x6}, {0x74, 0x40}, {0x6, 0x0, 0x0, 0x2}]}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b0b, &(0x7f0000000180)={'wlan1\x00', @broadcast}) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0xfe33) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0x0, 0x59, 0x8}, 0xc) socket$kcm(0x21, 0x2, 0x2) r5 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r6, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x0) close(r6) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuset.memory_pressure\x00', 0x275a, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x3, 0x80, 0x7, 0x7, 0x80, 0x5, 0x0, 0x9, 0xa0450, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xa, 0x2, @perf_config_ext={0x9, 0x9}, 0x88, 0x3, 0x1, 0x9, 0x3, 0x5, 0x2, 0x0, 0x1, 0x0, 0x8f}, r7, 0x7, 0xffffffffffffffff, 0x6) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0, @ANYRES32=r5, @ANYRESDEC=r2], &(0x7f0000000600)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x35, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 1.064040884s ago: executing program 4 (id=3820): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b7000000df000000bfa3000000000000070300000080ffff720af0fff8ffffff71a4f0ff000000005d040200000000001d"], &(0x7f00000001c0)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffffe4}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, 0x0, &(0x7f00000002c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x4, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="1802"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x437b, 0x0}, 0x8) perf_event_open(0x0, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000005c0)={0x1, 0x0, 0x0}, 0x10) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340), 0xc) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket$kcm(0xa, 0x7, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000780)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x2a, &(0x7f0000000100)=r5, 0x4) sendmsg$unix(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="b9f297", 0x3}], 0x1, 0x0, 0x0, 0x40000}, 0x20004011) recvmsg$unix(r3, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000030500000000000008000000c7004000f0ffffff9500000000000000"], &(0x7f0000000300)='syzkaller\x00', 0x303, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x1b, r5, 0x8, &(0x7f0000000380)={0x6, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x4, 0xb, 0x0, 0x80}, 0x10, r1, 0x0, 0x0, &(0x7f0000000400)=[r0], 0x0, 0x10, 0xc}, 0x94) r7 = socket$kcm(0x11, 0x2, 0x300) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYRES64=r1, @ANYRESOCT=r7, @ANYBLOB="000000000400"/20, @ANYRES32=r6, @ANYRES32, @ANYRES8=r2, @ANYRESHEX=r3], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x800, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000180)=r9, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000640)="2e0000001000815e7b14d3ec59acbc0413a1f8481f0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x4050) 991.810015ms ago: executing program 3 (id=3821): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000880)={0x2, 0x4e1d, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="2800000000000000000000000700000083070400000000070f"], 0x28}, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) (async) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0x0, 0xfffffffffffffffc}, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) r5 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) r6 = socket$kcm(0x2, 0x3, 0x2) r7 = perf_event_open(&(0x7f0000000780)={0x4, 0x80, 0x6, 0x6, 0x8, 0x5b, 0x0, 0xa94e, 0x1080, 0xa, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10001, 0x3, @perf_config_ext={0x5, 0x2}, 0x2002, 0xffffffff, 0x8, 0x1, 0x8, 0x8, 0x2, 0x0, 0x5, 0x0, 0x7}, 0x0, 0x3, r5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f0000000800)='syzkaller\x00') sendmsg$inet(r6, &(0x7f0000000680)={&(0x7f0000000300)={0x2, 0x4e23, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000600)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x10}, @local}}}], 0x20}, 0x0) recvmsg(r6, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x60) (async) recvmsg(r6, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x60) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r9) recvmsg$unix(r8, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18}, 0x60) (async) recvmsg$unix(r8, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18}, 0x60) setsockopt$sock_attach_bpf(r4, 0x107, 0x12, &(0x7f00000008c0)=r10, 0x4) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x4) (async) r11 = socket$kcm(0x10, 0x2, 0x4) close(r11) socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="1800000068007f089e", 0x59}, {&(0x7f0000000640)="68cabf2dfb58fc021d6b689866f05d480004fbffffffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae24f89a565ee52dcd729cd39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc36024aa400", 0x57}], 0x2}, 0x0) (async) sendmsg$inet(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="1800000068007f089e", 0x59}, {&(0x7f0000000640)="68cabf2dfb58fc021d6b689866f05d480004fbffffffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae24f89a565ee52dcd729cd39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc36024aa400", 0x57}], 0x2}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6493790710000000000080000b2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9924be41a9169bdfaf16da915b2e249f21c6eee84309e7a23c19a394830f2539fcb4e0b6eab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bfb1c0e6b1244d35b213bda84cc172afcc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbb888b0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab2e4b380a00d72bc0480f94479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b844139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a662d8bc9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e558d17879570c8ad943e392955f4f979ea13201bafe4f0f6ea508000000a0c548552b571bed5647323478a9968100000005"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x16}, 0x94) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x2}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000008c0)=r12, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="05000000040000000400000004"], 0x48) (async) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="05000000040000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x15, 0x17, &(0x7f0000000880)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r13}, {}, {}, {0x85, 0x0, 0x0, 0x76}}, {{0x6, 0x0, 0x2, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [@printk={@s, {0x5, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x14}}], {{0x4, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x15, 0x17, &(0x7f0000000880)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r13}, {}, {}, {0x85, 0x0, 0x0, 0x76}}, {{0x6, 0x0, 0x2, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [@printk={@s, {0x5, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x14}}], {{0x4, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 256.834484ms ago: executing program 1 (id=3822): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d0800fe007c05e8fe55a115000100fc11142603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x4040010) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040), 0x8) 0s ago: executing program 1 (id=3823): getpid() r0 = socket$kcm(0x28, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x28, 0x8, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$kcm(0x29, 0x2, 0x0) close(r3) r4 = socket$kcm(0x2b, 0x1, 0x0) close(r4) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7}, 0x94) close(r5) socket$kcm(0x2, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0f000000040000000400000012a006b2d63620ac016758000000000000009231b0c92f0c85066e4dce0864f968b6dac32e8cca34193ab63c", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r5}, 0x20) setsockopt$sock_attach_bpf(r3, 0x1, 0xd, &(0x7f0000000080), 0x2cb) close(r4) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x80002, 0x0) close(r2) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000002c0)={'netdevsim0\x00', 0x400}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) r10 = syz_clone(0x1000, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x9, 0x100, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x4b15}, r10, 0x0, 0xffffffffffffffff, 0x0) r11 = perf_event_open$cgroup(&(0x7f0000000540)={0x5, 0x80, 0xf, 0x5, 0xfc, 0x6, 0x0, 0x9, 0x80, 0x6, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0xfb19, 0x5}, 0xf200, 0x7fff, 0x10001, 0x7, 0xf801, 0xfffffff8, 0x52, 0x0, 0x3089, 0x0, 0xc}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x8, 0x4, 0x8, 0x80, 0x0, 0xc, 0x40, 0xe, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x5, 0x7, @perf_bp={&(0x7f0000000300), 0x2}, 0x2400, 0x0, 0x80000000, 0x5, 0x400000004000, 0x6, 0xc09, 0x0, 0x9, 0x0, 0xfffffffffffffffc}, r10, 0x4, r11, 0x2) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r9}, 0x38) kernel console output (not intermixed with test programs): d_connect+0x5/0x10 [ 487.723203][T13984] ? security_sctp_bind_connect+0x85/0xb0 [ 487.728925][T13984] sctp_sendmsg+0x1686/0x2940 [ 487.733621][T13984] ? sctp_getsockopt+0x8a0/0x8a0 [ 487.738561][T13984] ? __might_fault+0xa6/0x120 [ 487.743241][T13984] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 487.749663][T13984] ? aa_sock_msg_perm+0x94/0x150 [ 487.754621][T13984] ? inet_sendmsg+0xca/0x2a0 [ 487.759206][T13984] ? inet_send_prepare+0x250/0x250 [ 487.764308][T13984] ____sys_sendmsg+0x5ed/0x9a0 [ 487.769077][T13984] ? __sys_sendmsg_sock+0x30/0x30 [ 487.774098][T13984] ? __import_iovec+0x306/0x510 [ 487.778954][T13984] ? import_iovec+0x6f/0xa0 [ 487.783453][T13984] ___sys_sendmsg+0x2a2/0x360 [ 487.788132][T13984] ? __sys_sendmsg+0x2a0/0x2a0 [ 487.792909][T13984] ? __lock_acquire+0x7c40/0x7c40 [ 487.797949][T13984] __se_sys_sendmsg+0x1c3/0x2b0 [ 487.802797][T13984] ? __x64_sys_sendmsg+0x80/0x80 [ 487.807742][T13984] ? lockdep_hardirqs_on+0x94/0x140 [ 487.812932][T13984] do_syscall_64+0x4c/0xa0 [ 487.817346][T13984] ? clear_bhb_loop+0x60/0xb0 [ 487.822015][T13984] ? clear_bhb_loop+0x60/0xb0 [ 487.826688][T13984] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 487.832572][T13984] RIP: 0033:0x7ff81a59de99 [ 487.836983][T13984] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 487.856581][T13984] RSP: 002b:00007ff81b519028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 487.864996][T13984] RAX: ffffffffffffffda RBX: 00007ff81a825fa0 RCX: 00007ff81a59de99 [ 487.872960][T13984] RDX: 0000000000040844 RSI: 00002000000000c0 RDI: 0000000000000003 [ 487.880922][T13984] RBP: 00007ff81b519090 R08: 0000000000000000 R09: 0000000000000000 [ 487.888882][T13984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 487.896845][T13984] R13: 00007ff81a826038 R14: 00007ff81a825fa0 R15: 00007ffe43f7c278 [ 487.904820][T13984] [ 488.200990][T14000] netlink: 'syz.1.2739': attribute type 2 has an invalid length. [ 488.218105][T14000] netlink: 'syz.1.2739': attribute type 8 has an invalid length. [ 488.233874][T14000] __nla_validate_parse: 2 callbacks suppressed [ 488.233917][T14000] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2739'. [ 488.603915][T14010] netlink: 'syz.1.2741': attribute type 10 has an invalid length. [ 488.652970][T14010] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2741'. [ 488.688854][T14013] netlink: 'syz.1.2741': attribute type 21 has an invalid length. [ 488.728725][T14010] netlink: 'syz.1.2741': attribute type 10 has an invalid length. [ 488.748086][T14010] device wlan1 left promiscuous mode [ 488.781592][T14010] device wlan1 entered promiscuous mode [ 488.801972][T14010] team0: Port device wlan1 added [ 488.823904][T14016] device syzkaller0 entered promiscuous mode [ 489.034452][T14022] device syzkaller0 entered promiscuous mode [ 489.206607][T14032] FAULT_INJECTION: forcing a failure. [ 489.206607][T14032] name failslab, interval 1, probability 0, space 0, times 0 [ 489.242281][T14032] CPU: 0 PID: 14032 Comm: syz.4.2749 Not tainted syzkaller #0 [ 489.249789][T14032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 489.259861][T14032] Call Trace: [ 489.263147][T14032] [ 489.266086][T14032] dump_stack_lvl+0x188/0x24e [ 489.270787][T14032] ? show_regs_print_info+0x12/0x12 [ 489.276000][T14032] ? load_image+0x410/0x410 [ 489.280517][T14032] ? __might_sleep+0xd0/0xd0 [ 489.285201][T14032] ? __lock_acquire+0x7c40/0x7c40 [ 489.290247][T14032] should_fail_ex+0x390/0x4c0 [ 489.294945][T14032] should_failslab+0x5/0x20 [ 489.299461][T14032] slab_pre_alloc_hook+0x59/0x300 [ 489.304502][T14032] ? sctp_association_new+0x86/0x2520 [ 489.309960][T14032] __kmem_cache_alloc_node+0x4f/0x270 [ 489.315332][T14032] ? sctp_v6_to_sk_saddr+0xfc/0x1c0 [ 489.320524][T14032] ? sctp_association_new+0x86/0x2520 [ 489.325900][T14032] kmalloc_trace+0x26/0xe0 [ 489.330316][T14032] sctp_association_new+0x86/0x2520 [ 489.335518][T14032] ? __ipv6_addr_type+0x10e/0x2e0 [ 489.340630][T14032] sctp_connect_new_asoc+0x2da/0x6a0 [ 489.345917][T14032] ? __sctp_connect+0xd80/0xd80 [ 489.350766][T14032] ? __local_bh_enable_ip+0x136/0x1c0 [ 489.356135][T14032] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 489.361672][T14032] ? security_sctp_bind_connect+0x85/0xb0 [ 489.367389][T14032] sctp_sendmsg+0x1686/0x2940 [ 489.372088][T14032] ? sctp_getsockopt+0x8a0/0x8a0 [ 489.377023][T14032] ? __might_fault+0xa6/0x120 [ 489.381698][T14032] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 489.388105][T14032] ? aa_sock_msg_perm+0x94/0x150 [ 489.393043][T14032] ? inet_sendmsg+0xca/0x2a0 [ 489.397621][T14032] ? inet_send_prepare+0x250/0x250 [ 489.402724][T14032] ____sys_sendmsg+0x5ed/0x9a0 [ 489.407494][T14032] ? __sys_sendmsg_sock+0x30/0x30 [ 489.412511][T14032] ? __import_iovec+0x306/0x510 [ 489.417370][T14032] ? import_iovec+0x6f/0xa0 [ 489.421958][T14032] ___sys_sendmsg+0x2a2/0x360 [ 489.426638][T14032] ? __sys_sendmsg+0x2a0/0x2a0 [ 489.431414][T14032] ? trace_call_bpf+0xbf/0x6b0 [ 489.436199][T14032] __se_sys_sendmsg+0x1c3/0x2b0 [ 489.441044][T14032] ? perf_trace_preemptirq_template+0x268/0x320 [ 489.447282][T14032] ? __x64_sys_sendmsg+0x80/0x80 [ 489.452231][T14032] ? lockdep_hardirqs_on+0x94/0x140 [ 489.457440][T14032] do_syscall_64+0x4c/0xa0 [ 489.461849][T14032] ? clear_bhb_loop+0x60/0xb0 [ 489.466520][T14032] ? clear_bhb_loop+0x60/0xb0 [ 489.471192][T14032] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 489.477078][T14032] RIP: 0033:0x7ff81a59de99 [ 489.481487][T14032] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 489.501097][T14032] RSP: 002b:00007ff81b519028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 489.509514][T14032] RAX: ffffffffffffffda RBX: 00007ff81a825fa0 RCX: 00007ff81a59de99 [ 489.517487][T14032] RDX: 0000000000040844 RSI: 00002000000000c0 RDI: 0000000000000003 [ 489.525453][T14032] RBP: 00007ff81b519090 R08: 0000000000000000 R09: 0000000000000000 [ 489.533422][T14032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 489.541387][T14032] R13: 00007ff81a826038 R14: 00007ff81a825fa0 R15: 00007ffe43f7c278 [ 489.549369][T14032] [ 492.029384][T14068] netlink: 'syz.2.2761': attribute type 27 has an invalid length. [ 492.040734][T14068] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2761'. [ 492.447853][T14077] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2764'. [ 492.515227][T14077] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2764'. [ 492.567686][T14084] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2764'. [ 492.856985][T14092] netlink: 'syz.3.2769': attribute type 10 has an invalid length. [ 492.885930][T14092] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2769'. [ 493.958719][T14112] netlink: 'syz.3.2775': attribute type 3 has an invalid length. [ 493.983357][T14112] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2775'. [ 493.995942][T14115] FAULT_INJECTION: forcing a failure. [ 493.995942][T14115] name failslab, interval 1, probability 0, space 0, times 0 [ 494.020831][T14115] CPU: 0 PID: 14115 Comm: syz.2.2776 Not tainted syzkaller #0 [ 494.028326][T14115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 494.038393][T14115] Call Trace: [ 494.041686][T14115] [ 494.044632][T14115] dump_stack_lvl+0x188/0x24e [ 494.049337][T14115] ? show_regs_print_info+0x12/0x12 [ 494.054560][T14115] ? load_image+0x410/0x410 [ 494.059083][T14115] ? __lock_acquire+0x7c40/0x7c40 [ 494.064127][T14115] ? rcu_is_watching+0x11/0xa0 [ 494.069027][T14115] ? __alloc_pages+0x290/0x4f0 [ 494.073818][T14115] should_fail_ex+0x390/0x4c0 [ 494.078522][T14115] should_failslab+0x5/0x20 [ 494.083037][T14115] slab_pre_alloc_hook+0x59/0x300 [ 494.088081][T14115] ? sctp_auth_asoc_copy_shkeys+0x148/0x5a0 [ 494.093990][T14115] __kmem_cache_alloc_node+0x4f/0x270 [ 494.099382][T14115] ? sctp_auth_asoc_copy_shkeys+0x148/0x5a0 [ 494.105299][T14115] kmalloc_trace+0x26/0xe0 [ 494.109748][T14115] sctp_auth_asoc_copy_shkeys+0x148/0x5a0 [ 494.115493][T14115] ? sctp_stream_interleave_init+0x54/0x90 [ 494.121331][T14115] sctp_association_new+0x15d4/0x2520 [ 494.126738][T14115] sctp_connect_new_asoc+0x2da/0x6a0 [ 494.132052][T14115] ? __sctp_connect+0xd80/0xd80 [ 494.136920][T14115] ? __local_bh_enable_ip+0x136/0x1c0 [ 494.142319][T14115] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 494.147879][T14115] ? security_sctp_bind_connect+0x85/0xb0 [ 494.153630][T14115] sctp_sendmsg+0x1686/0x2940 [ 494.158346][T14115] ? sctp_getsockopt+0x8a0/0x8a0 [ 494.163303][T14115] ? __might_fault+0xa6/0x120 [ 494.167999][T14115] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 494.174436][T14115] ? aa_sock_msg_perm+0x94/0x150 [ 494.179407][T14115] ? inet_sendmsg+0xca/0x2a0 [ 494.184010][T14115] ? inet_send_prepare+0x250/0x250 [ 494.189142][T14115] ____sys_sendmsg+0x5ed/0x9a0 [ 494.193937][T14115] ? __sys_sendmsg_sock+0x30/0x30 [ 494.198980][T14115] ? __import_iovec+0x306/0x510 [ 494.203859][T14115] ? import_iovec+0x6f/0xa0 [ 494.208389][T14115] ___sys_sendmsg+0x2a2/0x360 [ 494.213097][T14115] ? __sys_sendmsg+0x2a0/0x2a0 [ 494.217904][T14115] ? __lock_acquire+0x7c40/0x7c40 [ 494.222971][T14115] __se_sys_sendmsg+0x1c3/0x2b0 [ 494.227848][T14115] ? __x64_sys_sendmsg+0x80/0x80 [ 494.232830][T14115] ? lockdep_hardirqs_on+0x94/0x140 [ 494.238048][T14115] do_syscall_64+0x4c/0xa0 [ 494.242481][T14115] ? clear_bhb_loop+0x60/0xb0 [ 494.247169][T14115] ? clear_bhb_loop+0x60/0xb0 [ 494.251871][T14115] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 494.257787][T14115] RIP: 0033:0x7fd4b559de99 [ 494.262199][T14115] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 494.281799][T14115] RSP: 002b:00007fd4b63fb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 494.290210][T14115] RAX: ffffffffffffffda RBX: 00007fd4b5825fa0 RCX: 00007fd4b559de99 [ 494.298180][T14115] RDX: 0000000000040844 RSI: 00002000000000c0 RDI: 0000000000000003 [ 494.306147][T14115] RBP: 00007fd4b63fb090 R08: 0000000000000000 R09: 0000000000000000 [ 494.314112][T14115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 494.322077][T14115] R13: 00007fd4b5826038 R14: 00007fd4b5825fa0 R15: 00007fff8ee1be78 [ 494.330062][T14115] [ 494.659984][T14134] raw_sendmsg: syz.2.2781 forgot to set AF_INET. Fix it! [ 495.350983][T14154] FAULT_INJECTION: forcing a failure. [ 495.350983][T14154] name failslab, interval 1, probability 0, space 0, times 0 [ 495.448618][T14154] CPU: 1 PID: 14154 Comm: syz.3.2789 Not tainted syzkaller #0 [ 495.456132][T14154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 495.466185][T14154] Call Trace: [ 495.469462][T14154] [ 495.472384][T14154] dump_stack_lvl+0x188/0x24e [ 495.477065][T14154] ? verify_lock_unused+0x140/0x140 [ 495.482264][T14154] ? show_regs_print_info+0x12/0x12 [ 495.487459][T14154] ? load_image+0x410/0x410 [ 495.491956][T14154] ? crng_make_state+0x60e/0xb00 [ 495.496991][T14154] ? crng_make_state+0x1d1/0xb00 [ 495.501926][T14154] ? urandom_read_iter+0x140/0x140 [ 495.507034][T14154] ? ___sys_sendmsg+0x2a2/0x360 [ 495.511897][T14154] should_fail_ex+0x390/0x4c0 [ 495.516577][T14154] should_failslab+0x5/0x20 [ 495.521072][T14154] slab_pre_alloc_hook+0x59/0x300 [ 495.526093][T14154] ? sctp_add_bind_addr+0x89/0x350 [ 495.531205][T14154] __kmem_cache_alloc_node+0x4f/0x270 [ 495.536574][T14154] ? sctp_add_bind_addr+0x89/0x350 [ 495.541682][T14154] kmalloc_trace+0x26/0xe0 [ 495.546099][T14154] sctp_add_bind_addr+0x89/0x350 [ 495.551035][T14154] sctp_copy_local_addr_list+0x317/0x4d0 [ 495.556670][T14154] ? sctp_copy_local_addr_list+0xa0/0x4d0 [ 495.562391][T14154] ? sctp_do_8_2_transport_strike+0x900/0x900 [ 495.568471][T14154] ? sctp_v6_is_any+0x60/0x70 [ 495.573152][T14154] ? sctp_copy_one_addr+0x93/0x660 [ 495.578269][T14154] sctp_bind_addr_copy+0xaf/0x3c0 [ 495.583303][T14154] ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190 [ 495.589649][T14154] sctp_connect_new_asoc+0x2f5/0x6a0 [ 495.594940][T14154] ? __sctp_connect+0xd80/0xd80 [ 495.599789][T14154] ? __local_bh_enable_ip+0x136/0x1c0 [ 495.605162][T14154] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 495.610704][T14154] ? security_sctp_bind_connect+0x85/0xb0 [ 495.616427][T14154] sctp_sendmsg+0x1686/0x2940 [ 495.621116][T14154] ? sctp_getsockopt+0x8a0/0x8a0 [ 495.626053][T14154] ? __might_fault+0xa6/0x120 [ 495.630722][T14154] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 495.637133][T14154] ? aa_sock_msg_perm+0x94/0x150 [ 495.642075][T14154] ? inet_sendmsg+0xca/0x2a0 [ 495.646658][T14154] ? inet_send_prepare+0x250/0x250 [ 495.651761][T14154] ____sys_sendmsg+0x5ed/0x9a0 [ 495.656533][T14154] ? __sys_sendmsg_sock+0x30/0x30 [ 495.661553][T14154] ? __import_iovec+0x306/0x510 [ 495.666409][T14154] ? import_iovec+0x6f/0xa0 [ 495.670911][T14154] ___sys_sendmsg+0x2a2/0x360 [ 495.675592][T14154] ? __sys_sendmsg+0x2a0/0x2a0 [ 495.680374][T14154] ? __lock_acquire+0x7c40/0x7c40 [ 495.685416][T14154] __se_sys_sendmsg+0x1c3/0x2b0 [ 495.690269][T14154] ? __x64_sys_sendmsg+0x80/0x80 [ 495.695221][T14154] ? lockdep_hardirqs_on+0x94/0x140 [ 495.700416][T14154] do_syscall_64+0x4c/0xa0 [ 495.704831][T14154] ? clear_bhb_loop+0x60/0xb0 [ 495.709503][T14154] ? clear_bhb_loop+0x60/0xb0 [ 495.714177][T14154] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 495.720070][T14154] RIP: 0033:0x7f5eb4f9de99 [ 495.724479][T14154] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 495.744077][T14154] RSP: 002b:00007f5eb5e57028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 495.752486][T14154] RAX: ffffffffffffffda RBX: 00007f5eb5225fa0 RCX: 00007f5eb4f9de99 [ 495.760449][T14154] RDX: 0000000000040844 RSI: 00002000000000c0 RDI: 0000000000000003 [ 495.768429][T14154] RBP: 00007f5eb5e57090 R08: 0000000000000000 R09: 0000000000000000 [ 495.776392][T14154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 495.784355][T14154] R13: 00007f5eb5226038 R14: 00007f5eb5225fa0 R15: 00007ffc56e96798 [ 495.792333][T14154] [ 496.426910][T14172] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.2795'. [ 496.568290][T14175] device ipvlan1 entered promiscuous mode [ 496.771541][T14190] netlink: 'syz.3.2801': attribute type 27 has an invalid length. [ 496.783416][T14190] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2801'. [ 497.052764][T14198] FAULT_INJECTION: forcing a failure. [ 497.052764][T14198] name failslab, interval 1, probability 0, space 0, times 0 [ 497.070207][T14198] CPU: 0 PID: 14198 Comm: syz.2.2803 Not tainted syzkaller #0 [ 497.077703][T14198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 497.087779][T14198] Call Trace: [ 497.091066][T14198] [ 497.094006][T14198] dump_stack_lvl+0x188/0x24e [ 497.098740][T14198] ? sctp_sendmsg+0x1686/0x2940 [ 497.103615][T14198] ? ___sys_sendmsg+0x2a2/0x360 [ 497.108489][T14198] ? show_regs_print_info+0x12/0x12 [ 497.113708][T14198] ? load_image+0x410/0x410 [ 497.118246][T14198] should_fail_ex+0x390/0x4c0 [ 497.122946][T14198] should_failslab+0x5/0x20 [ 497.127462][T14198] slab_pre_alloc_hook+0x59/0x300 [ 497.132504][T14198] ? sctp_add_bind_addr+0x89/0x350 [ 497.137634][T14198] __kmem_cache_alloc_node+0x4f/0x270 [ 497.143026][T14198] ? sctp_add_bind_addr+0x89/0x350 [ 497.148170][T14198] kmalloc_trace+0x26/0xe0 [ 497.152609][T14198] sctp_add_bind_addr+0x89/0x350 [ 497.157570][T14198] sctp_copy_local_addr_list+0x317/0x4d0 [ 497.163225][T14198] ? sctp_copy_local_addr_list+0xa0/0x4d0 [ 497.168966][T14198] ? sctp_do_8_2_transport_strike+0x900/0x900 [ 497.175056][T14198] ? sctp_v6_is_any+0x60/0x70 [ 497.179758][T14198] ? sctp_copy_one_addr+0x93/0x660 [ 497.184893][T14198] sctp_bind_addr_copy+0xaf/0x3c0 [ 497.189942][T14198] ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190 [ 497.196296][T14198] sctp_connect_new_asoc+0x2f5/0x6a0 [ 497.201605][T14198] ? __sctp_connect+0xd80/0xd80 [ 497.206469][T14198] ? __local_bh_enable_ip+0x136/0x1c0 [ 497.211863][T14198] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 497.217422][T14198] ? security_sctp_bind_connect+0x85/0xb0 [ 497.223164][T14198] sctp_sendmsg+0x1686/0x2940 [ 497.227872][T14198] ? sctp_getsockopt+0x8a0/0x8a0 [ 497.232840][T14198] ? __might_fault+0xa6/0x120 [ 497.237530][T14198] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 497.243964][T14198] ? aa_sock_msg_perm+0x94/0x150 [ 497.248931][T14198] ? inet_sendmsg+0xca/0x2a0 [ 497.253537][T14198] ? inet_send_prepare+0x250/0x250 [ 497.258673][T14198] ____sys_sendmsg+0x5ed/0x9a0 [ 497.263467][T14198] ? __sys_sendmsg_sock+0x30/0x30 [ 497.268508][T14198] ? __import_iovec+0x306/0x510 [ 497.273385][T14198] ? import_iovec+0x6f/0xa0 [ 497.277917][T14198] ___sys_sendmsg+0x2a2/0x360 [ 497.282619][T14198] ? __sys_sendmsg+0x2a0/0x2a0 [ 497.287424][T14198] ? __lock_acquire+0x7c40/0x7c40 [ 497.292492][T14198] __se_sys_sendmsg+0x1c3/0x2b0 [ 497.297371][T14198] ? __x64_sys_sendmsg+0x80/0x80 [ 497.302349][T14198] ? lockdep_hardirqs_on+0x94/0x140 [ 497.307571][T14198] do_syscall_64+0x4c/0xa0 [ 497.312010][T14198] ? clear_bhb_loop+0x60/0xb0 [ 497.316709][T14198] ? clear_bhb_loop+0x60/0xb0 [ 497.321412][T14198] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 497.327321][T14198] RIP: 0033:0x7fd4b559de99 [ 497.331754][T14198] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 497.351377][T14198] RSP: 002b:00007fd4b63fb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 497.359812][T14198] RAX: ffffffffffffffda RBX: 00007fd4b5825fa0 RCX: 00007fd4b559de99 [ 497.367810][T14198] RDX: 0000000000040844 RSI: 00002000000000c0 RDI: 0000000000000003 [ 497.375796][T14198] RBP: 00007fd4b63fb090 R08: 0000000000000000 R09: 0000000000000000 [ 497.383780][T14198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 497.391765][T14198] R13: 00007fd4b5826038 R14: 00007fd4b5825fa0 R15: 00007fff8ee1be78 [ 497.399766][T14198] [ 497.724414][T14214] netlink: 'syz.4.2807': attribute type 10 has an invalid length. [ 499.068772][T14242] delete_channel: no stack [ 499.105564][T14261] netlink: 'syz.3.2823': attribute type 4 has an invalid length. [ 499.625475][T14269] netlink: 'syz.3.2825': attribute type 3 has an invalid length. [ 499.653604][T14269] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2825'. [ 500.740538][T14296] netlink: 'syz.4.2835': attribute type 27 has an invalid length. [ 500.763320][T14296] netlink: 'syz.4.2835': attribute type 3 has an invalid length. [ 500.804766][T14296] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2835'. [ 500.887241][T14297] device syzkaller0 entered promiscuous mode [ 501.231860][T14320] netlink: 'syz.3.2841': attribute type 2 has an invalid length. [ 501.271612][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.278047][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.803716][T14356] netlink: 'syz.3.2849': attribute type 10 has an invalid length. [ 503.829232][T14356] team0: Device vxcan1 is of different type [ 503.929003][T14366] netlink: 'syz.1.2853': attribute type 1 has an invalid length. [ 503.937398][T14366] netlink: 116376 bytes leftover after parsing attributes in process `syz.1.2853'. [ 503.987242][T14371] netlink: 'syz.0.2851': attribute type 11 has an invalid length. [ 504.015603][T14371] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2851'. [ 504.061316][T14359] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 504.296175][T14383] netlink: 'syz.3.2858': attribute type 3 has an invalid length. [ 504.303990][T14383] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2858'. [ 504.589777][T14396] device syzkaller0 left promiscuous mode [ 504.780902][T14408] netlink: 'syz.4.2866': attribute type 21 has an invalid length. [ 504.793088][T14408] netlink: 'syz.4.2866': attribute type 22 has an invalid length. [ 504.827472][T14408] netlink: 'syz.4.2866': attribute type 13 has an invalid length. [ 504.844686][T14408] netlink: 6188 bytes leftover after parsing attributes in process `syz.4.2866'. [ 504.867135][T14412] netlink: 'syz.2.2868': attribute type 1 has an invalid length. [ 504.883793][T14412] netlink: 'syz.2.2868': attribute type 3 has an invalid length. [ 504.899322][T14412] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2868'. [ 505.168211][T14417] netlink: 65055 bytes leftover after parsing attributes in process `syz.4.2870'. [ 505.940639][T14453] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.2880'. [ 506.493763][T14479] syz.1.2886[14479] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 506.493929][T14479] syz.1.2886[14479] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 506.635307][T14482] FAULT_INJECTION: forcing a failure. [ 506.635307][T14482] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 506.795903][T14482] CPU: 0 PID: 14482 Comm: syz.3.2887 Not tainted syzkaller #0 [ 506.803413][T14482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 506.813466][T14482] Call Trace: [ 506.816738][T14482] [ 506.819660][T14482] dump_stack_lvl+0x188/0x24e [ 506.824353][T14482] ? show_regs_print_info+0x12/0x12 [ 506.829550][T14482] ? load_image+0x410/0x410 [ 506.834048][T14482] ? __lock_acquire+0x7c40/0x7c40 [ 506.839076][T14482] should_fail_ex+0x390/0x4c0 [ 506.843750][T14482] _copy_from_user+0x2c/0x170 [ 506.848422][T14482] __sys_bpf+0x2ea/0x780 [ 506.852743][T14482] ? bpf_link_show_fdinfo+0x380/0x380 [ 506.858119][T14482] ? lock_chain_count+0x20/0x20 [ 506.862972][T14482] __x64_sys_bpf+0x78/0x90 [ 506.867384][T14482] do_syscall_64+0x4c/0xa0 [ 506.871795][T14482] ? clear_bhb_loop+0x60/0xb0 [ 506.876469][T14482] ? clear_bhb_loop+0x60/0xb0 [ 506.881139][T14482] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 506.887027][T14482] RIP: 0033:0x7f5eb4f9de99 [ 506.891433][T14482] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 506.911032][T14482] RSP: 002b:00007f5eb5e57028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 506.919438][T14482] RAX: ffffffffffffffda RBX: 00007f5eb5225fa0 RCX: 00007f5eb4f9de99 [ 506.927405][T14482] RDX: 0000000000000050 RSI: 0000200000000640 RDI: 000000000000000a [ 506.935368][T14482] RBP: 00007f5eb5e57090 R08: 0000000000000000 R09: 0000000000000000 [ 506.943328][T14482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 506.951292][T14482] R13: 00007f5eb5226038 R14: 00007f5eb5225fa0 R15: 00007ffc56e96798 [ 506.959272][T14482] [ 507.327878][T14493] device syzkaller0 entered promiscuous mode [ 507.989600][T14518] netlink: 'syz.3.2897': attribute type 6 has an invalid length. [ 508.207989][T14521] netlink: 'syz.0.2900': attribute type 10 has an invalid length. [ 508.776770][T14528] netlink: 'syz.1.2901': attribute type 10 has an invalid length. [ 508.798583][T14531] netlink: 15231 bytes leftover after parsing attributes in process `syz.2.2902'. [ 508.840948][T14528] device vxcan1 entered promiscuous mode [ 508.856169][T14528] team0: Device vxcan1 is of different type [ 509.159440][T14547] netlink: 'syz.4.2907': attribute type 3 has an invalid length. [ 509.209399][T14547] netlink: 16066 bytes leftover after parsing attributes in process `syz.4.2907'. [ 509.255300][T14552] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2907'. [ 509.528813][T14563] netlink: 'syz.2.2909': attribute type 29 has an invalid length. [ 509.545798][T14563] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2909'. [ 510.245757][T14552] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 510.304479][T14552] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 510.331871][T14552] bond0 (unregistering): (slave team0): Releasing backup interface [ 510.341592][T14552] bond0 (unregistering): Released all slaves [ 510.378234][T14563] netlink: 'syz.2.2909': attribute type 29 has an invalid length. [ 510.399049][T14563] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2909'. [ 510.701278][T14589] netlink: 'syz.0.2916': attribute type 29 has an invalid length. [ 510.714514][T14586] netlink: 'syz.3.2915': attribute type 10 has an invalid length. [ 510.756976][T14586] device veth1_macvtap left promiscuous mode [ 510.935389][T14589] netlink: 'syz.0.2916': attribute type 29 has an invalid length. [ 510.943470][T14591] netlink: 'syz.3.2915': attribute type 10 has an invalid length. [ 510.968823][T14601] netlink: 154020 bytes leftover after parsing attributes in process `syz.2.2919'. [ 511.004443][T14590] netlink: 'syz.0.2916': attribute type 29 has an invalid length. [ 511.095683][T14595] netlink: 'syz.0.2916': attribute type 29 has an invalid length. [ 511.124916][T14601] net_ratelimit: 3544 callbacks suppressed [ 511.124937][T14601] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 513.290113][T14654] netlink: 'syz.0.2936': attribute type 10 has an invalid length. [ 513.389737][T14654] netlink: 'syz.0.2936': attribute type 10 has an invalid length. [ 513.651824][ T4335] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.792379][ T4335] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.822174][ T4274] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 513.837066][T14660] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 513.875614][T14660] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 513.884659][T14660] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 513.892271][T14660] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 513.899711][T14660] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 514.011454][ T4335] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.129969][ T4335] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.305197][T14672] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2940'. [ 514.439438][T14670] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2939'. [ 514.502208][T14675] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2939'. [ 514.667275][ T4335] device 0 left promiscuous mode [ 514.757788][ T4335] device 1 left promiscuous mode [ 514.865828][ T4335] device 2 left promiscuous mode [ 514.943132][T14657] chnl_net:caif_netlink_parms(): no params data found [ 514.975819][ T4335] device 3 left promiscuous mode [ 515.091495][ T4335] device 4 left promiscuous mode [ 515.160265][ T4335] device 5 left promiscuous mode [ 515.264470][ T4335] device 6 left promiscuous mode [ 515.329519][T14708] netlink: 125520 bytes leftover after parsing attributes in process `syz.4.2950'. [ 515.367937][T14709] validate_nla: 3 callbacks suppressed [ 515.367955][T14709] netlink: 'syz.1.2949': attribute type 10 has an invalid length. [ 515.400186][ T4335] device 7 left promiscuous mode [ 515.470607][T14657] bridge0: port 1(bridge_slave_0) entered blocking state [ 515.490443][T14657] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.513487][T14657] device bridge_slave_0 entered promiscuous mode [ 515.524249][T14709] netlink: 'syz.1.2949': attribute type 10 has an invalid length. [ 515.545535][T14714] delete_channel: no stack [ 515.651389][ T4335] device 8 left promiscuous mode [ 515.683378][T14657] bridge0: port 2(bridge_slave_1) entered blocking state [ 515.706665][T14657] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.748201][T14657] device bridge_slave_1 entered promiscuous mode [ 515.860792][ T4335] device 9 left promiscuous mode [ 515.984782][T14660] Bluetooth: hci1: command 0x0409 tx timeout [ 518.064874][T14660] Bluetooth: hci1: command 0x041b tx timeout [ 518.756895][T14657] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 518.808932][T14657] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 518.938170][T14657] team0: Port device team_slave_0 added [ 519.019157][T14657] team0: Port device team_slave_1 added [ 519.069860][ T4335] device 10 left promiscuous mode [ 519.098146][T14657] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 519.118666][T14657] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 519.213188][T14657] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 519.512330][T14657] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 519.525178][T14657] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 519.648522][T14657] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 519.785938][T14762] netlink: 763 bytes leftover after parsing attributes in process `syz.4.2959'. [ 520.144855][T14660] Bluetooth: hci1: command 0x040f tx timeout [ 520.203853][T14657] device hsr_slave_0 entered promiscuous mode [ 520.240119][T14657] device hsr_slave_1 entered promiscuous mode [ 520.265591][T14657] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 520.284248][T14657] Cannot create hsr debugfs directory [ 521.170352][T14812] netlink: 'syz.1.2968': attribute type 1 has an invalid length. [ 521.190323][T14812] netlink: 'syz.1.2968': attribute type 3 has an invalid length. [ 521.198845][T14812] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2968'. [ 521.822603][T14657] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 521.863926][T14657] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 522.065380][T14657] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 522.081016][T14839] netlink: 'syz.3.2984': attribute type 33 has an invalid length. [ 522.109474][T14839] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2984'. [ 522.128208][T14842] netlink: 'syz.3.2984': attribute type 10 has an invalid length. [ 522.152168][T14842] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.2984'. [ 522.178444][T14657] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 522.224902][T14660] Bluetooth: hci1: command 0x0419 tx timeout [ 522.258895][ T4335] device hsr_slave_0 left promiscuous mode [ 522.307841][ T4335] device hsr_slave_1 left promiscuous mode [ 522.343982][ T4335] bridge0: port 2(dummy0) entered disabled state [ 522.600927][T14853] netlink: 'syz.3.2977': attribute type 3 has an invalid length. [ 522.658402][T14853] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2977'. [ 525.409888][ T4335] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 525.445707][ T4335] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 525.599388][ T4335] bond0 (unregistering): Released all slaves [ 525.694988][T14852] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2977'. [ 525.878466][T14657] 8021q: adding VLAN 0 to HW filter on device bond0 [ 525.928675][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 525.946939][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 525.975928][T14657] 8021q: adding VLAN 0 to HW filter on device team0 [ 526.021171][T10216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 526.038210][T10216] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 526.083186][T10216] bridge0: port 1(bridge_slave_0) entered blocking state [ 526.090377][T10216] bridge0: port 1(bridge_slave_0) entered forwarding state [ 526.144098][T10216] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 526.172977][ T4845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 526.206240][ T4845] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 526.232319][ T4845] bridge0: port 2(bridge_slave_1) entered blocking state [ 526.239499][ T4845] bridge0: port 2(bridge_slave_1) entered forwarding state [ 526.310334][ T4845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 526.328465][ T4845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 526.369497][ T4845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 526.407348][ T4845] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 526.429387][T14889] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2988'. [ 526.447094][T14895] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2988'. [ 526.601024][ T4845] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 526.613715][ T4845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 526.647428][ T4845] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 526.681083][ T4845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 526.701195][ T4845] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 526.716914][ T4845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 526.725819][ T4845] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 526.807566][T14657] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 526.910676][T14899] device aaaaaaaaaaaaaaa entered promiscuous mode [ 528.201052][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 528.210968][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 528.250619][T14657] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 528.328325][ T4847] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 528.347192][ T4847] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 528.427008][T10214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 528.461127][T10214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 528.514211][T14657] device veth0_vlan entered promiscuous mode [ 528.533293][T10214] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 528.604574][T10214] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 528.658888][T14657] device veth1_vlan entered promiscuous mode [ 528.794892][ T4847] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 528.833331][ T4847] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 528.865785][ T4847] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 528.907415][ T4847] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 528.942548][T14657] device veth0_macvtap entered promiscuous mode [ 528.991368][T14657] device veth1_macvtap entered promiscuous mode [ 529.120460][T14657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 529.162603][T14657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 529.264390][T14657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 529.354781][T14657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 529.422689][T14657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 529.493462][T14657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 529.556531][T14657] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 529.611644][T10214] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 529.630560][T10214] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 529.717108][T10214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 529.757119][T14657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 529.795323][T14657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 529.848652][T14657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 529.891810][T14657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 529.929615][T14657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 529.955765][T14657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 529.997818][T14657] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 530.014122][ T4847] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 530.045534][ T4847] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 530.100526][T14657] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.129820][T14657] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.172778][T14657] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.204475][T14657] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.249418][T14963] netlink: 'syz.0.3001': attribute type 17 has an invalid length. [ 530.566708][T14965] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.3002'. [ 530.579038][T14965] netlink: zone id is out of range [ 530.591265][T14965] netlink: zone id is out of range [ 530.598424][T14965] netlink: zone id is out of range [ 530.609488][T14965] netlink: zone id is out of range [ 530.619305][T14965] netlink: zone id is out of range [ 530.643990][T14965] netlink: zone id is out of range [ 530.714229][T14965] netlink: zone id is out of range [ 530.727291][T14965] netlink: zone id is out of range [ 530.736030][T14965] netlink: zone id is out of range [ 530.743218][T14965] netlink: zone id is out of range [ 530.808754][ T4847] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 530.840394][ T4847] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 530.889477][T10214] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 532.255825][ T4335] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 532.296516][ T4335] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 532.328552][ T4845] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 532.661559][T15014] netlink: 'syz.1.3012': attribute type 29 has an invalid length. [ 532.697323][T15014] netlink: 'syz.1.3012': attribute type 29 has an invalid length. [ 532.759372][T15015] netlink: 'syz.0.3011': attribute type 10 has an invalid length. [ 532.905471][T15019] netlink: 'syz.0.3011': attribute type 29 has an invalid length. [ 532.965572][T15019] netlink: 'syz.0.3011': attribute type 29 has an invalid length. [ 533.022711][T15015] netlink: 'syz.0.3011': attribute type 29 has an invalid length. [ 533.624970][T15042] device sit0 left promiscuous mode [ 533.746384][T14660] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 533.756179][T14660] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 533.763834][T14660] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 533.776349][T14660] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 533.783947][T14660] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 533.791690][T14660] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 533.842394][T15055] netlink: 15743 bytes leftover after parsing attributes in process `syz.0.3019'. [ 534.180951][T15047] device sit0 entered promiscuous mode [ 534.800082][T15067] netlink: 'syz.1.3021': attribute type 3 has an invalid length. [ 534.840972][T15067] netlink: 163968 bytes leftover after parsing attributes in process `syz.1.3021'. [ 535.054072][T15078] netlink: 'syz.0.3023': attribute type 10 has an invalid length. [ 535.105781][T15048] chnl_net:caif_netlink_parms(): no params data found [ 535.120359][T15078] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3023'. [ 535.159608][T15078] netlink: 'syz.0.3023': attribute type 10 has an invalid length. [ 535.217666][T15078] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3023'. [ 535.276843][T15076] netlink: 'syz.0.3023': attribute type 10 has an invalid length. [ 535.310066][T15076] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3023'. [ 535.405961][T15048] bridge0: port 1(bridge_slave_0) entered blocking state [ 535.449935][T15048] bridge0: port 1(bridge_slave_0) entered disabled state [ 535.484389][T15048] device bridge_slave_0 entered promiscuous mode [ 535.537458][T15048] bridge0: port 2(bridge_slave_1) entered blocking state [ 535.602794][T15048] bridge0: port 2(bridge_slave_1) entered disabled state [ 535.636694][T15048] device bridge_slave_1 entered promiscuous mode [ 535.824823][ T4279] Bluetooth: hci5: command 0x0409 tx timeout [ 535.833950][T15048] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 535.876947][T15048] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 536.078679][T15048] team0: Port device team_slave_0 added [ 536.256712][T15048] team0: Port device team_slave_1 added [ 536.314247][T15048] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 536.343596][T15048] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 536.543979][T15048] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 536.629466][T15048] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 536.678409][T15048] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 536.885087][T15048] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 536.955670][T15115] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.3030'. [ 537.347275][T15048] device hsr_slave_0 entered promiscuous mode [ 537.399158][T15048] device hsr_slave_1 entered promiscuous mode [ 537.486478][T15048] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 537.494094][T15048] Cannot create hsr debugfs directory [ 537.651818][T15137] netlink: 15743 bytes leftover after parsing attributes in process `syz.1.3033'. [ 537.707230][ T4335] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.904992][T14660] Bluetooth: hci5: command 0x041b tx timeout [ 537.964919][ T4335] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.209803][ T4335] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.452703][T15149] device syzkaller0 entered promiscuous mode [ 538.607731][ T4335] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.994767][T14660] Bluetooth: hci5: command 0x040f tx timeout [ 540.889435][ T4335] device 0 left promiscuous mode [ 541.033904][ T4335] tipc: Left network mode [ 541.757438][T15201] netlink: 'syz.3.3045': attribute type 21 has an invalid length. [ 541.774915][T15201] netlink: 'syz.3.3045': attribute type 1 has an invalid length. [ 541.782872][T15201] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.3045'. [ 541.858225][T15203] netlink: 'syz.2.3046': attribute type 41 has an invalid length. [ 542.085752][T14660] Bluetooth: hci5: command 0x0419 tx timeout [ 542.137319][T15048] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 542.235900][T15048] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 542.295147][T15048] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 542.319614][T15048] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 542.445050][T15231] netlink: 134056 bytes leftover after parsing attributes in process `syz.3.3053'. [ 542.716007][T15048] 8021q: adding VLAN 0 to HW filter on device bond0 [ 542.737367][T15236] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3054'. [ 542.788352][T15048] 8021q: adding VLAN 0 to HW filter on device team0 [ 542.843743][ T7098] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 542.887705][ T7098] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 542.972005][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 542.995210][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 543.013975][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 543.021194][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 543.056565][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 543.083848][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 543.092701][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 543.099866][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 543.169603][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 543.371074][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 543.412237][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 543.463284][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 543.501843][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 543.530870][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 543.560724][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 543.607532][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 543.641446][T15048] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 543.688681][T15048] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 543.725603][T15260] netlink: 'syz.3.3059': attribute type 41 has an invalid length. [ 543.762820][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 543.784931][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 543.824305][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 543.839730][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 543.850307][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 544.106379][ T4335] device hsr_slave_0 left promiscuous mode [ 544.112994][ T4335] device hsr_slave_1 left promiscuous mode [ 544.129019][T15272] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3060'. [ 544.141293][ T4335] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 544.174941][ T4335] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 544.210359][ T4335] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 544.236668][ T4335] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 544.257563][ T4335] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 544.272078][ T4335] batman_adv: batadv0: Removing interface: virt_wifi0 [ 544.635570][ T4335] team0 (unregistering): Port device geneve1 removed [ 544.641132][T15289] netlink: 'syz.1.3064': attribute type 11 has an invalid length. [ 544.651248][T15289] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3064'. [ 544.672090][T15289] netlink: 'syz.1.3064': attribute type 11 has an invalid length. [ 544.680734][T15289] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3064'. [ 544.702124][T15289] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3064'. [ 544.788838][T15285] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 545.024431][ T4335] team0 (unregistering): Port device team_slave_1 removed [ 545.127246][ T4335] team0 (unregistering): Port device team_slave_0 removed [ 546.020986][T15302] netlink: 'syz.1.3066': attribute type 2 has an invalid length. [ 546.058829][T10216] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 546.073592][T10216] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 546.749931][T15048] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 547.153257][T14660] Bluetooth: hci4: Malformed HCI Event [ 547.159094][T14660] Bluetooth: hci4: Malformed HCI Event [ 547.322687][T15329] netlink: 'syz.3.3071': attribute type 21 has an invalid length. [ 547.352536][T15329] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3071'. [ 547.482082][T15335] net_ratelimit: 23 callbacks suppressed [ 547.482101][T15335] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 547.576339][T15335] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3073'. [ 547.602367][T15338] netlink: 188 bytes leftover after parsing attributes in process `syz.3.3074'. [ 547.648882][T10214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 547.659567][T10214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 547.712560][T10214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 547.728424][T10214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 547.738494][T10214] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 547.747604][T10214] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 547.764882][T15048] device veth0_vlan entered promiscuous mode [ 547.798692][T15048] device veth1_vlan entered promiscuous mode [ 547.879640][T15048] device veth0_macvtap entered promiscuous mode [ 547.901939][T10216] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 547.928689][T10216] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 547.956044][T10216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 547.995339][T10216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 548.019046][T15048] device veth1_macvtap entered promiscuous mode [ 548.037795][T10216] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 548.054283][T10216] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 548.131346][T15048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 548.157168][T15048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.170211][T15048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 548.182054][T15048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.194697][T15048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 548.206021][T15048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.234913][T15048] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 548.247449][T15356] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.3078'. [ 548.263609][ T4847] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 548.283404][ T4847] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 548.324239][T15048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 548.344134][T15048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.369868][T15048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 548.385054][T15048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.396584][T15048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 548.407098][T15048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.418457][T15048] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 548.443015][ T4847] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 548.462729][ T4847] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 548.486346][T15048] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.502637][T15048] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.511503][T15048] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.520609][T15048] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.699061][ T7098] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 548.713286][ T7098] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 548.753749][ T7098] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 548.781477][T10214] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 548.830140][T10214] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 548.853610][T10214] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 548.897995][T15378] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3086'. [ 548.923284][T15379] netlink: 'syz.3.3085': attribute type 3 has an invalid length. [ 548.932268][T15378] netlink: 'syz.2.3086': attribute type 10 has an invalid length. [ 548.934572][T15379] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3085'. [ 548.950587][T15378] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 548.980044][T15381] netlink: 134056 bytes leftover after parsing attributes in process `syz.1.3087'. [ 549.039317][T15381] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 549.074704][T15381] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 549.094739][T15381] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 550.365175][ T4279] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 550.374358][ T4279] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 550.382337][ T4279] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 550.390975][ T4279] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 550.429997][ T4279] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 550.444885][ T4279] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 551.368246][T15415] chnl_net:caif_netlink_parms(): no params data found [ 551.465546][T15415] bridge0: port 1(bridge_slave_0) entered blocking state [ 551.472688][T15415] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.483830][T15415] device bridge_slave_0 entered promiscuous mode [ 551.552157][T15415] bridge0: port 2(bridge_slave_1) entered blocking state [ 551.568618][T15415] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.581667][T15436] netlink: 'syz.2.3100': attribute type 2 has an invalid length. [ 551.591398][T15415] device bridge_slave_1 entered promiscuous mode [ 551.598006][T15436] netlink: 'syz.2.3100': attribute type 1 has an invalid length. [ 551.662258][T15415] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 551.704767][ T4845] device 0 left promiscuous mode [ 551.754095][T15415] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 551.877905][T15415] team0: Port device team_slave_0 added [ 551.886189][ T4845] tipc: Left network mode [ 551.887341][T15444] netlink: 'syz.2.3103': attribute type 21 has an invalid length. [ 551.917042][T15415] team0: Port device team_slave_1 added [ 551.981863][T15415] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 552.012784][T15415] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 552.049474][T15415] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 552.065710][T15447] sctp: [Deprecated]: syz.4.3104 (pid 15447) Use of int in max_burst socket option deprecated. [ 552.065710][T15447] Use struct sctp_assoc_value instead [ 552.185632][T15415] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 552.196232][T15415] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 552.269293][T15415] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 552.467624][ T4279] Bluetooth: hci2: command 0x0409 tx timeout [ 552.504944][T15456] netlink: 'syz.1.3106': attribute type 10 has an invalid length. [ 552.513152][T15456] netlink: 55 bytes leftover after parsing attributes in process `syz.1.3106'. [ 553.219299][T15464] IPv6: Can't replace route, no match found [ 553.255823][T15468] netlink: 'syz.4.3108': attribute type 10 has an invalid length. [ 553.263667][T15468] netlink: 55 bytes leftover after parsing attributes in process `syz.4.3108'. [ 553.953948][T15415] device hsr_slave_0 entered promiscuous mode [ 553.992747][T15415] device hsr_slave_1 entered promiscuous mode [ 554.001447][T14660] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 554.011247][T14660] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 554.034840][T14660] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 554.042780][T14660] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 554.051740][T14660] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 554.059889][T14660] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 554.250930][T15491] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 554.258234][T15491] IPv6: NLM_F_CREATE should be set when creating new route [ 554.265549][T15491] IPv6: NLM_F_CREATE should be set when creating new route [ 554.272783][T15491] IPv6: NLM_F_CREATE should be set when creating new route [ 554.548574][ T4279] Bluetooth: hci2: command 0x041b tx timeout [ 555.252769][T15484] chnl_net:caif_netlink_parms(): no params data found [ 555.550657][T15484] bridge0: port 1(bridge_slave_0) entered blocking state [ 555.582245][T15484] bridge0: port 1(bridge_slave_0) entered disabled state [ 555.595897][T15484] device bridge_slave_0 entered promiscuous mode [ 555.885308][ T4845] team0: Port device wlan1 removed [ 555.913446][T15484] bridge0: port 2(bridge_slave_1) entered blocking state [ 555.926400][T15484] bridge0: port 2(bridge_slave_1) entered disabled state [ 555.946060][T15484] device bridge_slave_1 entered promiscuous mode [ 555.954437][T15538] IPv6: Can't replace route, no match found [ 555.975229][T15540] netlink: 61967 bytes leftover after parsing attributes in process `syz.2.3125'. [ 555.997853][T15541] netlink: 'syz.1.3123': attribute type 10 has an invalid length. [ 556.007412][T15541] netlink: 55 bytes leftover after parsing attributes in process `syz.1.3123'. [ 556.029810][T15415] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 556.074860][T15415] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 556.144742][ T4279] Bluetooth: hci0: command 0x0409 tx timeout [ 556.376918][T15415] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 556.413833][T15484] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 556.441685][T15415] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 556.472848][T15484] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 556.572381][ T4845] device hsr_slave_0 left promiscuous mode [ 556.579273][ T4845] device hsr_slave_1 left promiscuous mode [ 556.602358][ T4845] device bridge_slave_0 left promiscuous mode [ 556.612025][ T4845] bridge0: port 1(bridge_slave_0) entered disabled state [ 556.625039][ T4279] Bluetooth: hci2: command 0x040f tx timeout [ 556.697089][ T4845] device veth1_vlan left promiscuous mode [ 556.883193][T15577] netlink: 'syz.2.3136': attribute type 2 has an invalid length. [ 556.927457][ T4845] team0 (unregistering): Port device geneve1 removed [ 557.474307][ T4845] team0 (unregistering): Port device team_slave_1 removed [ 557.540258][ T4845] team0 (unregistering): Port device team_slave_0 removed [ 557.970959][T15484] team0: Port device team_slave_0 added [ 557.978784][T15484] team0: Port device team_slave_1 added [ 557.999494][T15568] netlink: 'syz.4.3134': attribute type 12 has an invalid length. [ 558.010727][T15568] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3134'. [ 558.024539][T15577] device 0 entered promiscuous mode [ 558.050176][T15484] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 558.062228][T15484] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 558.090792][T15484] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 558.139644][T15484] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 558.157398][T15484] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 558.214824][T15484] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 558.226669][ T4279] Bluetooth: hci0: command 0x041b tx timeout [ 558.263868][T15583] IPv6: Can't replace route, no match found [ 558.313334][T15586] netlink: 'syz.2.3137': attribute type 10 has an invalid length. [ 558.331258][T15586] netlink: 55 bytes leftover after parsing attributes in process `syz.2.3137'. [ 558.655990][T15581] device syzkaller0 entered promiscuous mode [ 558.713683][T14660] Bluetooth: hci2: command 0x0419 tx timeout [ 558.756190][T15484] device hsr_slave_0 entered promiscuous mode [ 558.786564][T15484] device hsr_slave_1 entered promiscuous mode [ 558.808446][T15484] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 558.854713][T15484] Cannot create hsr debugfs directory [ 559.011285][T15415] 8021q: adding VLAN 0 to HW filter on device bond0 [ 559.108583][T15415] 8021q: adding VLAN 0 to HW filter on device team0 [ 559.184934][T10214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 559.203012][T10214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 559.253222][T10214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 559.277024][T10214] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 559.318594][T10214] bridge0: port 1(bridge_slave_0) entered blocking state [ 559.325787][T10214] bridge0: port 1(bridge_slave_0) entered forwarding state [ 559.366385][T10214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 559.400491][T10214] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 559.436357][T10214] bridge0: port 2(bridge_slave_1) entered blocking state [ 559.443580][T10214] bridge0: port 2(bridge_slave_1) entered forwarding state [ 559.590320][T10214] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 559.624010][T10214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 559.664519][T10214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 559.715498][T10214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 559.769825][T10214] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 559.853893][T10214] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 559.872335][T10214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 559.893037][T10214] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 559.933584][T10214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 559.975021][T10214] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 560.003373][T15415] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 560.056608][T15415] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 560.083768][T15623] netlink: 'syz.2.3147': attribute type 21 has an invalid length. [ 560.129802][T15623] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3147'. [ 560.176018][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 560.208077][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 560.305564][T14660] Bluetooth: hci0: command 0x040f tx timeout [ 560.463826][T15484] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 560.528061][T15484] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 560.587294][T15484] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 560.612321][T15484] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 561.233181][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 561.254247][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 561.286802][T15484] 8021q: adding VLAN 0 to HW filter on device bond0 [ 561.307710][T15415] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 561.421435][T10214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 561.443484][T10214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 561.493687][T15484] 8021q: adding VLAN 0 to HW filter on device team0 [ 561.549746][ T4845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 561.579158][ T4845] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 561.675492][ T4845] bridge0: port 1(bridge_slave_0) entered blocking state [ 561.682662][ T4845] bridge0: port 1(bridge_slave_0) entered forwarding state [ 561.770442][ T4845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 561.799382][ T4845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 561.874974][T15675] netlink: 'syz.2.3158': attribute type 27 has an invalid length. [ 561.899648][ T4845] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 561.916528][ T4845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 561.948836][ T4845] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 561.962536][ T4845] bridge0: port 2(bridge_slave_1) entered blocking state [ 561.969766][ T4845] bridge0: port 2(bridge_slave_1) entered forwarding state [ 562.041070][ T4845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 562.097747][ T4845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 562.117763][ T4845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 562.154234][ T4845] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 562.188222][ T4845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 562.235799][ T4845] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 562.262289][T15415] device veth0_vlan entered promiscuous mode [ 562.338806][ T4845] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 562.357946][ T4845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 562.384848][T14660] Bluetooth: hci0: command 0x0419 tx timeout [ 562.392234][ T4845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 562.416296][ T4845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 562.455256][ T4845] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 562.491253][ T4845] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 562.520130][ T4845] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 562.558077][ T4845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 562.607723][ T4845] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 562.709972][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.716384][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.732576][T15415] device veth1_vlan entered promiscuous mode [ 562.766222][T15484] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 562.860369][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 562.896032][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 562.949592][T15415] device veth0_macvtap entered promiscuous mode [ 562.996130][T15415] device veth1_macvtap entered promiscuous mode [ 563.066769][T15415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 563.138919][T15415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 563.174667][T15415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 563.244677][T15415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 563.284731][T15415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 563.334681][T15415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 563.384807][T15415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 563.434654][T15415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 563.478307][T15415] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 563.525320][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 563.534425][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 563.591687][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 563.631290][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 563.664078][T15415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 563.696379][T15415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 563.770210][T15415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 563.823832][T15415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 563.867328][T15415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 563.911655][T15415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 563.944787][T15415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 563.981007][T15415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.022280][T15415] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 564.092791][ T7098] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 564.126019][ T7098] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 564.159003][T15415] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.195729][T15415] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.204491][T15415] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.258507][T15415] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.596467][T15484] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 564.613871][T15750] netlink: 'syz.2.3172': attribute type 21 has an invalid length. [ 564.646112][T15750] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3172'. [ 564.674813][T15750] netlink: 'syz.2.3172': attribute type 4 has an invalid length. [ 564.743600][ T4845] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 564.773091][ T4845] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 564.926588][ T4845] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 564.940958][ T4845] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 565.027517][ T4847] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 565.056336][ T4847] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 565.098827][ T4847] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 565.135638][ T7098] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 565.720461][T15772] netlink: 180900 bytes leftover after parsing attributes in process `syz.2.3177'. [ 565.766773][T15772] openvswitch: netlink: Flow actions attr not present in new flow. [ 566.411410][T15788] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.3180'. [ 566.537239][T15792] netlink: 146340 bytes leftover after parsing attributes in process `syz.4.3182'. [ 566.561272][ T4845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 566.582307][ T4845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 566.641009][T15792] openvswitch: netlink: Key type 386 is out of range max 32 [ 566.680479][T15484] device veth0_vlan entered promiscuous mode [ 566.733693][ T4845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 566.787337][ T4845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 566.793108][T15787] netlink: 'syz.3.3181': attribute type 3 has an invalid length. [ 566.819412][T15787] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3181'. [ 566.847283][ T4845] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 566.886494][ T4845] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 566.923523][T15484] device veth1_vlan entered promiscuous mode [ 567.025787][T15801] pimreg: tun_chr_ioctl cmd 1074025677 [ 567.031488][T15801] pimreg: linktype set to 804 [ 567.165806][T10216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 567.176560][T15809] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3185'. [ 567.190655][T10216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 567.227345][T15484] device veth0_macvtap entered promiscuous mode [ 567.249608][T15484] device veth1_macvtap entered promiscuous mode [ 567.340427][T15484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 567.404872][T15484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 567.444704][T15484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 567.464178][T15484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 567.493732][T15484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 567.493856][T14660] Bluetooth: hci2: unexpected event 0x08 length: 151 > 4 [ 567.613184][T15484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 567.717742][T15484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 567.734727][T15484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 567.744589][T15484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 567.808206][T15484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 567.906714][T15484] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 567.941182][T15484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 568.024687][T15484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 568.082021][T15484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 568.126328][T15484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 568.175672][T15484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 568.214728][T15484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 568.254730][T15484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 568.284707][T15484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 568.294556][T15484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 568.344825][T15484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 568.366215][T15484] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 568.396781][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 568.407150][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 568.430332][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 568.445918][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 568.462342][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 568.473338][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 568.500603][T15828] netlink: 'syz.3.3193': attribute type 17 has an invalid length. [ 568.511051][T15828] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3193'. [ 568.529237][T15828] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 568.570088][T15484] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.602571][T15484] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.662937][T15484] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.695492][T15484] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.025313][T10216] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 569.048450][T10216] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 569.076534][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 569.199388][ T4335] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 569.245093][ T4335] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 569.252742][ T4847] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 569.451194][T15843] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.3198'. [ 569.464881][T15843] tc_dump_action: action bad kind [ 569.543549][T15843] device pim6reg1 entered promiscuous mode [ 570.435641][ T4279] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 570.446694][ T4279] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 570.455046][ T4279] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 570.475312][ T4279] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 570.482911][ T4279] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 570.491268][ T4279] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 570.848811][T15870] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3205'. [ 571.127792][T15859] chnl_net:caif_netlink_parms(): no params data found [ 571.340786][T15859] bridge0: port 1(bridge_slave_0) entered blocking state [ 571.377126][T15859] bridge0: port 1(bridge_slave_0) entered disabled state [ 571.386260][T15859] device bridge_slave_0 entered promiscuous mode [ 571.406074][T15859] bridge0: port 2(bridge_slave_1) entered blocking state [ 571.413262][T15859] bridge0: port 2(bridge_slave_1) entered disabled state [ 571.422512][T15859] device bridge_slave_1 entered promiscuous mode [ 571.468350][T15859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 571.494902][T15859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 571.570939][T15859] team0: Port device team_slave_0 added [ 571.591141][T15859] team0: Port device team_slave_1 added [ 571.651342][T15859] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 571.674733][T15859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 571.730073][T15859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 571.743051][T15859] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 571.763373][T15859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 571.800686][T15859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 572.349397][T15895] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 572.356262][T15895] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 572.545036][ T4279] Bluetooth: hci4: command 0x0409 tx timeout [ 573.197094][T15859] device hsr_slave_0 entered promiscuous mode [ 573.208141][T15859] device hsr_slave_1 entered promiscuous mode [ 573.218827][T15859] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 573.232138][T15859] Cannot create hsr debugfs directory [ 573.565199][T15900] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3212'. [ 573.654334][ T4335] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.805161][T15905] netlink: 'syz.4.3213': attribute type 10 has an invalid length. [ 573.813039][T15905] netlink: 55 bytes leftover after parsing attributes in process `syz.4.3213'. [ 573.986137][ T4335] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.247537][ T4335] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.428700][ T4335] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.625802][ T4279] Bluetooth: hci4: command 0x041b tx timeout [ 574.899722][T15928] device syzkaller0 entered promiscuous mode [ 574.984495][ T4335] device .*! left promiscuous mode [ 575.396327][T15939] netlink: 'syz.4.3221': attribute type 10 has an invalid length. [ 575.415235][T15939] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3221'. [ 575.618943][T15939] batman_adv: batadv0: Adding interface: virt_wifi0 [ 575.627778][T15939] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 575.673437][T15939] batman_adv: batadv0: Interface activated: virt_wifi0 [ 576.704879][ T4279] Bluetooth: hci4: command 0x040f tx timeout [ 578.784839][ T4279] Bluetooth: hci4: command 0x0419 tx timeout [ 579.228744][T15961] netlink: 'syz.2.3226': attribute type 39 has an invalid length. [ 579.319195][T15978] netlink: 'syz.5.3229': attribute type 10 has an invalid length. [ 579.329812][T15978] bridge0: port 2(bridge_slave_1) entered disabled state [ 579.337290][T15978] bridge0: port 1(bridge_slave_0) entered disabled state [ 579.404340][T15978] bridge0: port 2(bridge_slave_1) entered blocking state [ 579.412089][T15978] bridge0: port 2(bridge_slave_1) entered forwarding state [ 579.420208][T15978] bridge0: port 1(bridge_slave_0) entered blocking state [ 579.427385][T15978] bridge0: port 1(bridge_slave_0) entered forwarding state [ 579.452797][T15978] team0: Port device bridge0 added [ 580.103719][T16016] netlink: 128 bytes leftover after parsing attributes in process `syz.5.3238'. [ 580.124907][T16016] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 580.199262][T16020] netlink: 128 bytes leftover after parsing attributes in process `syz.5.3238'. [ 580.254367][T16020] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 580.336952][T16014] netlink: 'syz.3.3236': attribute type 10 has an invalid length. [ 580.362991][T16014] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3236'. [ 580.437015][T16014] device team0 entered promiscuous mode [ 580.492457][T16014] device team_slave_0 entered promiscuous mode [ 580.553556][T16014] device team_slave_1 entered promiscuous mode [ 580.630717][T16014] bridge0: port 3(team0) entered blocking state [ 580.665592][T16014] bridge0: port 3(team0) entered disabled state [ 580.712543][T16014] bridge0: port 3(team0) entered blocking state [ 580.719657][T16014] bridge0: port 3(team0) entered forwarding state [ 580.908205][T16041] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3241'. [ 580.935474][T16041] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 581.016425][T16041] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 581.074336][T15859] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 581.190613][T15859] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 581.325241][T15859] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 581.347335][T15859] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 581.667437][T15859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 581.737328][ T4847] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 581.768809][ T4847] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 581.817431][T15859] 8021q: adding VLAN 0 to HW filter on device team0 [ 581.871222][T10216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 581.887812][T10216] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 581.918458][T10216] bridge0: port 1(bridge_slave_0) entered blocking state [ 581.925693][T10216] bridge0: port 1(bridge_slave_0) entered forwarding state [ 581.961573][T10216] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 582.133560][ T4335] team0: Port device wlan1 removed [ 582.146123][T16071] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 582.158141][T16071] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 582.192500][ T4853] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 582.209528][ T4853] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 582.218376][ T4853] bridge0: port 2(bridge_slave_1) entered blocking state [ 582.225553][ T4853] bridge0: port 2(bridge_slave_1) entered forwarding state [ 582.242015][T16076] netlink: 'syz.3.3250': attribute type 21 has an invalid length. [ 582.305808][T10216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 582.404080][T16085] netlink: 'syz.2.3253': attribute type 2 has an invalid length. [ 582.461710][T10216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 582.515547][T16085] device 1 entered promiscuous mode [ 582.523375][T10216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 582.554870][T10216] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 582.597656][ T4335] device team0 left promiscuous mode [ 582.603005][ T4335] device team_slave_0 left promiscuous mode [ 582.620749][ T4335] device team_slave_1 left promiscuous mode [ 582.646173][ T4335] device geneve1 left promiscuous mode [ 582.675339][ T4335] : port 1(team0) entered disabled state [ 582.801815][ T4335] device hsr_slave_0 left promiscuous mode [ 582.826142][ T4335] device hsr_slave_1 left promiscuous mode [ 582.853311][ T4335] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 582.861798][ T4335] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 582.873844][ T4335] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 582.895121][ T4335] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 583.401951][T16107] netlink: 'syz.3.3258': attribute type 2 has an invalid length. [ 583.429501][T16107] netlink: 10 bytes leftover after parsing attributes in process `syz.3.3258'. [ 583.519491][T16107] netlink: 'syz.3.3258': attribute type 29 has an invalid length. [ 585.264666][T16125] netlink: 'syz.2.3264': attribute type 29 has an invalid length. [ 586.185312][ T4335] team0 (unregistering): Port device geneve1 removed [ 586.463338][ T4335] team0 (unregistering): Port device team_slave_1 removed [ 586.516822][ T4335] team0 (unregistering): Port device team_slave_0 removed [ 586.967017][T10216] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 586.977545][T10216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 586.987671][T10216] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 586.999299][T10216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 587.019003][T10216] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 587.055102][T16096] netlink: 2944 bytes leftover after parsing attributes in process `syz.5.3256'. [ 587.083168][T16107] netlink: 'syz.3.3258': attribute type 29 has an invalid length. [ 587.091983][T16119] netlink: 180 bytes leftover after parsing attributes in process `syz.4.3261'. [ 587.105085][T16125] netlink: 'syz.2.3264': attribute type 29 has an invalid length. [ 587.116990][T15859] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 587.154325][T15859] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 587.189749][ T4847] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 587.209155][ T4847] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 587.476874][T16139] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3267'. [ 588.153585][T16157] netlink: 'syz.5.3272': attribute type 10 has an invalid length. [ 588.170979][T16157] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3272'. [ 588.201295][T16157] batman_adv: batadv0: Adding interface: virt_wifi0 [ 588.209433][T16157] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 588.271694][T16157] batman_adv: batadv0: Interface activated: virt_wifi0 [ 588.291607][T15859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 588.346535][ T4845] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 588.392888][ T4845] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 588.458304][ T4853] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 588.485490][ T4853] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 588.536690][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 588.563135][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 588.601869][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 588.623425][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 588.686268][T15859] device veth0_vlan entered promiscuous mode [ 588.711066][T15859] device veth1_vlan entered promiscuous mode [ 588.777570][T10216] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 588.837053][T10216] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 588.848397][T10216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 588.869129][T10216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 588.904088][T15859] device veth0_macvtap entered promiscuous mode [ 591.940897][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 592.004461][T15859] device veth1_macvtap entered promiscuous mode [ 592.196706][T15859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 592.214720][T15859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 592.254802][T15859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 592.294677][T15859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 592.324687][T15859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 592.385801][T15859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 592.421024][T15859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 592.431688][T16199] FAULT_INJECTION: forcing a failure. [ 592.431688][T16199] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 592.464822][T15859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 592.469391][T16199] CPU: 1 PID: 16199 Comm: syz.2.3288 Not tainted syzkaller #0 [ 592.482114][T16199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 592.492184][T16199] Call Trace: [ 592.495475][T16199] [ 592.498416][T16199] dump_stack_lvl+0x188/0x24e [ 592.503121][T16199] ? show_regs_print_info+0x12/0x12 [ 592.504663][T15859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 592.508317][T16199] ? load_image+0x410/0x410 [ 592.508343][T16199] ? __lock_acquire+0x7c40/0x7c40 [ 592.528276][T16199] should_fail_ex+0x390/0x4c0 [ 592.532981][T16199] _copy_from_user+0x2c/0x170 [ 592.537678][T16199] ___sys_sendmsg+0x1c3/0x360 [ 592.542376][T16199] ? migrate_enable+0x148/0x220 [ 592.547325][T16199] ? __sys_sendmsg+0x2a0/0x2a0 [ 592.549410][T15859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 592.552133][T16199] __se_sys_sendmsg+0x1c3/0x2b0 [ 592.566750][T16199] ? __x64_sys_sendmsg+0x80/0x80 [ 592.571721][T16199] ? syscall_enter_from_user_mode+0x2a/0x80 [ 592.577638][T16199] do_syscall_64+0x4c/0xa0 [ 592.582076][T16199] ? clear_bhb_loop+0x60/0xb0 [ 592.586777][T16199] ? clear_bhb_loop+0x60/0xb0 [ 592.591475][T16199] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 592.597386][T16199] RIP: 0033:0x7f2338d9de99 [ 592.601812][T16199] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 592.621435][T16199] RSP: 002b:00007f2336ff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 592.624080][T15859] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 592.629851][T16199] RAX: ffffffffffffffda RBX: 00007f2339025fa0 RCX: 00007f2338d9de99 [ 592.629868][T16199] RDX: 0000000000000005 RSI: 00002000000001c0 RDI: 0000000000000008 [ 592.629879][T16199] RBP: 00007f2336ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 592.629896][T16199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 592.629908][T16199] R13: 00007f2339026038 R14: 00007f2339025fa0 R15: 00007fff294c12d8 [ 592.629935][T16199] [ 592.803717][T15859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 592.834708][T15859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 592.846989][T15859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 592.867664][T15859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 592.894663][T15859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 592.916828][T15859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 592.926886][T15859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 592.937566][T15859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 592.947869][T15859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 592.961772][T15859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 592.974120][T15859] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 593.005019][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 593.065640][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 593.075389][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 593.087012][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 593.142173][T15859] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.177905][T15859] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.216680][T15859] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.231875][T15859] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.243945][T16208] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.3289'. [ 593.404383][T10214] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 593.447245][T10214] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 593.485200][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 593.523062][T16216] netlink: 144 bytes leftover after parsing attributes in process `syz.5.3290'. [ 594.372094][T16216] team0: Port device team_slave_0 removed [ 594.395395][T16216] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 594.476988][T10214] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 594.506806][T10214] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 594.532211][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 594.785823][T16244] netlink: 'syz.4.3298': attribute type 3 has an invalid length. [ 594.815588][T16244] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3298'. [ 595.215342][T16262] FAULT_INJECTION: forcing a failure. [ 595.215342][T16262] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 595.249742][T16262] CPU: 1 PID: 16262 Comm: syz.1.3302 Not tainted syzkaller #0 [ 595.257249][T16262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 595.267319][T16262] Call Trace: [ 595.270609][T16262] [ 595.273558][T16262] dump_stack_lvl+0x188/0x24e [ 595.278263][T16262] ? show_regs_print_info+0x12/0x12 [ 595.283483][T16262] ? load_image+0x410/0x410 [ 595.288013][T16262] ? __lock_acquire+0x7c40/0x7c40 [ 595.293066][T16262] should_fail_ex+0x390/0x4c0 [ 595.297770][T16262] _copy_from_user+0x2c/0x170 [ 595.302469][T16262] __copy_msghdr+0x384/0x560 [ 595.307088][T16262] ___sys_sendmsg+0x210/0x360 [ 595.311786][T16262] ? migrate_enable+0x148/0x220 [ 595.316668][T16262] ? __sys_sendmsg+0x2a0/0x2a0 [ 595.321504][T16262] __se_sys_sendmsg+0x1c3/0x2b0 [ 595.326376][T16262] ? __x64_sys_sendmsg+0x80/0x80 [ 595.331352][T16262] ? syscall_enter_from_user_mode+0x2a/0x80 [ 595.337265][T16262] do_syscall_64+0x4c/0xa0 [ 595.341707][T16262] ? clear_bhb_loop+0x60/0xb0 [ 595.346413][T16262] ? clear_bhb_loop+0x60/0xb0 [ 595.351112][T16262] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 595.357024][T16262] RIP: 0033:0x7fcbe039de99 [ 595.361463][T16262] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 595.381092][T16262] RSP: 002b:00007fcbe1329028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 595.389533][T16262] RAX: ffffffffffffffda RBX: 00007fcbe0625fa0 RCX: 00007fcbe039de99 [ 595.397560][T16262] RDX: 0000000000000005 RSI: 00002000000001c0 RDI: 0000000000000008 [ 595.405551][T16262] RBP: 00007fcbe1329090 R08: 0000000000000000 R09: 0000000000000000 [ 595.413537][T16262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 595.421522][T16262] R13: 00007fcbe0626038 R14: 00007fcbe0625fa0 R15: 00007ffd1de6eef8 [ 595.429527][T16262] [ 596.030498][T16287] netlink: 'syz.4.3311': attribute type 1 has an invalid length. [ 596.045757][T16285] tipc: Started in network mode [ 596.062247][T16285] tipc: Node identity 9215a268, cluster identity 4711 [ 596.071679][T16287] netlink: 'syz.4.3311': attribute type 1 has an invalid length. [ 596.090369][T16287] netlink: 116376 bytes leftover after parsing attributes in process `syz.4.3311'. [ 596.098091][T16285] tipc: Node number set to 2450891368 [ 596.397102][T16291] netlink: 'syz.2.3312': attribute type 3 has an invalid length. [ 596.412167][T16291] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3312'. [ 596.418903][T14660] Bluetooth: hci5: unexpected subevent 0x01 length: 150 > 18 [ 596.790715][T16307] FAULT_INJECTION: forcing a failure. [ 596.790715][T16307] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 596.832460][T16309] netlink: 'syz.2.3319': attribute type 29 has an invalid length. [ 596.851411][T16309] netlink: 'syz.2.3319': attribute type 29 has an invalid length. [ 596.865136][T16307] CPU: 1 PID: 16307 Comm: syz.1.3318 Not tainted syzkaller #0 [ 596.872634][T16307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 596.882707][T16307] Call Trace: [ 596.886009][T16307] [ 596.888951][T16307] dump_stack_lvl+0x188/0x24e [ 596.893659][T16307] ? show_regs_print_info+0x12/0x12 [ 596.898874][T16307] ? load_image+0x410/0x410 [ 596.903397][T16307] ? __lock_acquire+0x7c40/0x7c40 [ 596.908443][T16307] should_fail_ex+0x390/0x4c0 [ 596.913141][T16307] _copy_from_user+0x2c/0x170 [ 596.917834][T16307] iovec_from_user+0x143/0x360 [ 596.922620][T16307] __import_iovec+0x6c/0x510 [ 596.927234][T16307] import_iovec+0x6f/0xa0 [ 596.931584][T16307] ___sys_sendmsg+0x252/0x360 [ 596.936276][T16307] ? migrate_enable+0x148/0x220 [ 596.941142][T16307] ? __sys_sendmsg+0x2a0/0x2a0 [ 596.945967][T16307] __se_sys_sendmsg+0x1c3/0x2b0 [ 596.950841][T16307] ? __x64_sys_sendmsg+0x80/0x80 [ 596.955807][T16307] ? syscall_enter_from_user_mode+0x2a/0x80 [ 596.961713][T16307] do_syscall_64+0x4c/0xa0 [ 596.966144][T16307] ? clear_bhb_loop+0x60/0xb0 [ 596.970834][T16307] ? clear_bhb_loop+0x60/0xb0 [ 596.975527][T16307] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 596.981434][T16307] RIP: 0033:0x7fcbe039de99 [ 596.985863][T16307] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 597.005479][T16307] RSP: 002b:00007fcbe1329028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 597.013905][T16307] RAX: ffffffffffffffda RBX: 00007fcbe0625fa0 RCX: 00007fcbe039de99 [ 597.021886][T16307] RDX: 0000000000000005 RSI: 00002000000001c0 RDI: 0000000000000008 [ 597.029864][T16307] RBP: 00007fcbe1329090 R08: 0000000000000000 R09: 0000000000000000 [ 597.037841][T16307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 597.045816][T16307] R13: 00007fcbe0626038 R14: 00007fcbe0625fa0 R15: 00007ffd1de6eef8 [ 597.053815][T16307] [ 597.061179][T16312] netlink: 'syz.2.3319': attribute type 29 has an invalid length. [ 597.127648][T16311] netlink: 'syz.3.3320': attribute type 29 has an invalid length. [ 597.195253][T16311] netlink: 'syz.3.3320': attribute type 29 has an invalid length. [ 597.297497][T16315] netlink: 'syz.3.3320': attribute type 29 has an invalid length. [ 597.442767][T16326] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3324'. [ 597.460196][T16326] device hsr0 entered promiscuous mode [ 597.513640][T16326] bridge0: port 3(hsr0) entered blocking state [ 597.534402][T16326] bridge0: port 3(hsr0) entered disabled state [ 597.576818][T16326] bridge0: port 3(hsr0) entered blocking state [ 597.583085][T16326] bridge0: port 3(hsr0) entered forwarding state [ 598.256556][T16360] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3334'. [ 598.379857][T16367] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.3337'. [ 598.429111][T16364] FAULT_INJECTION: forcing a failure. [ 598.429111][T16364] name failslab, interval 1, probability 0, space 0, times 0 [ 598.447048][T16364] CPU: 1 PID: 16364 Comm: syz.3.3335 Not tainted syzkaller #0 [ 598.454536][T16364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 598.464585][T16364] Call Trace: [ 598.467862][T16364] [ 598.470786][T16364] dump_stack_lvl+0x188/0x24e [ 598.475474][T16364] ? show_regs_print_info+0x12/0x12 [ 598.480670][T16364] ? load_image+0x410/0x410 [ 598.485172][T16364] ? __might_sleep+0xd0/0xd0 [ 598.489754][T16364] ? __lock_acquire+0x7c40/0x7c40 [ 598.494784][T16364] ? perf_trace_preemptirq_template+0x268/0x320 [ 598.501027][T16364] should_fail_ex+0x390/0x4c0 [ 598.505708][T16364] should_failslab+0x5/0x20 [ 598.510204][T16364] slab_pre_alloc_hook+0x59/0x300 [ 598.515231][T16364] ? lock_chain_count+0x20/0x20 [ 598.520087][T16364] ? sctp_association_new+0x86/0x2520 [ 598.525462][T16364] __kmem_cache_alloc_node+0x4f/0x270 [ 598.530836][T16364] ? sctp_association_new+0x86/0x2520 [ 598.536208][T16364] kmalloc_trace+0x26/0xe0 [ 598.540625][T16364] sctp_association_new+0x86/0x2520 [ 598.545825][T16364] ? sctp_connect_new_asoc+0x296/0x6a0 [ 598.551288][T16364] sctp_connect_new_asoc+0x2da/0x6a0 [ 598.556574][T16364] ? __sctp_connect+0xd80/0xd80 [ 598.561421][T16364] ? _local_bh_enable+0xa0/0xa0 [ 598.566264][T16364] ? sctp_endpoint_lookup_assoc+0x77/0x260 [ 598.572069][T16364] ? sctp_endpoint_lookup_assoc+0x77/0x260 [ 598.577872][T16364] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 598.583414][T16364] ? security_sctp_bind_connect+0x85/0xb0 [ 598.589134][T16364] sctp_sendmsg+0x1686/0x2940 [ 598.593823][T16364] ? sctp_getsockopt+0x8a0/0x8a0 [ 598.598759][T16364] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 598.604918][T16364] ? lockdep_hardirqs_on+0x94/0x140 [ 598.610116][T16364] ? sctp_getsockopt+0x8a0/0x8a0 [ 598.615053][T16364] ? inet_send_prepare+0x250/0x250 [ 598.620159][T16364] ____sys_sendmsg+0x5ed/0x9a0 [ 598.624928][T16364] ? __sys_sendmsg_sock+0x30/0x30 [ 598.629949][T16364] ? __import_iovec+0x306/0x510 [ 598.634806][T16364] ? import_iovec+0x6f/0xa0 [ 598.639309][T16364] ___sys_sendmsg+0x2a2/0x360 [ 598.643987][T16364] ? __sys_sendmsg+0x2a0/0x2a0 [ 598.648792][T16364] __se_sys_sendmsg+0x1c3/0x2b0 [ 598.653642][T16364] ? __x64_sys_sendmsg+0x80/0x80 [ 598.658592][T16364] ? syscall_enter_from_user_mode+0x2a/0x80 [ 598.664482][T16364] do_syscall_64+0x4c/0xa0 [ 598.668901][T16364] ? clear_bhb_loop+0x60/0xb0 [ 598.673573][T16364] ? clear_bhb_loop+0x60/0xb0 [ 598.678246][T16364] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 598.684132][T16364] RIP: 0033:0x7f908419de99 [ 598.688542][T16364] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 598.708149][T16364] RSP: 002b:00007f90850b3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 598.716565][T16364] RAX: ffffffffffffffda RBX: 00007f9084425fa0 RCX: 00007f908419de99 [ 598.724549][T16364] RDX: 0000000000000005 RSI: 00002000000001c0 RDI: 0000000000000008 [ 598.732534][T16364] RBP: 00007f90850b3090 R08: 0000000000000000 R09: 0000000000000000 [ 598.740504][T16364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 598.748483][T16364] R13: 00007f9084426038 R14: 00007f9084425fa0 R15: 00007ffc8aec00a8 [ 598.756485][T16364] [ 598.760441][T14660] Bluetooth: hci5: command 0x2016 tx timeout [ 600.370507][T16432] validate_nla: 7 callbacks suppressed [ 600.370526][T16432] netlink: 'syz.3.3357': attribute type 2 has an invalid length. [ 601.128966][T16449] netlink: 'syz.1.3363': attribute type 21 has an invalid length. [ 601.174730][T16449] netlink: 'syz.1.3363': attribute type 12 has an invalid length. [ 601.216096][T16449] netlink: 'syz.1.3363': attribute type 13 has an invalid length. [ 601.308919][T16449] netlink: 'syz.1.3363': attribute type 14 has an invalid length. [ 601.405287][T16449] netlink: 'syz.1.3363': attribute type 15 has an invalid length. [ 601.413655][T16449] netlink: 'syz.1.3363': attribute type 16 has an invalid length. [ 601.498100][T16449] netlink: 'syz.1.3363': attribute type 19 has an invalid length. [ 601.524941][T16449] netlink: 'syz.1.3363': attribute type 6 has an invalid length. [ 601.564854][T16449] netlink: 9618 bytes leftover after parsing attributes in process `syz.1.3363'. [ 601.731915][T16459] device syzkaller0 entered promiscuous mode [ 604.245156][T16501] netlink: 'syz.4.3376': attribute type 19 has an invalid length. [ 604.275265][T16501] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3376'. [ 604.283293][ T4279] Bluetooth: hci1: unexpected subevent 0x03 length: 150 > 9 [ 604.377756][T16501] netlink: 168 bytes leftover after parsing attributes in process `syz.4.3376'. [ 604.842349][T16521] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.3382'. [ 606.755014][T16560] validate_nla: 1 callbacks suppressed [ 606.755035][T16560] netlink: 'syz.2.3392': attribute type 2 has an invalid length. [ 606.984680][T16560] netlink: 'syz.2.3392': attribute type 1 has an invalid length. [ 607.314903][T16558] netlink: 'syz.2.3392': attribute type 10 has an invalid length. [ 607.439062][T16558] bridge0: port 2(bridge_slave_1) entered disabled state [ 607.563837][T16558] device bridge_slave_1 left promiscuous mode [ 607.647698][T16558] bridge0: port 2(bridge_slave_1) entered disabled state [ 607.742149][T16558] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 608.308279][T16580] netlink: 'syz.3.3400': attribute type 29 has an invalid length. [ 608.390549][T16580] netlink: 'syz.3.3400': attribute type 29 has an invalid length. [ 608.481878][T16585] netlink: 'syz.3.3400': attribute type 29 has an invalid length. [ 608.594159][T16591] netlink: 'syz.1.3401': attribute type 10 has an invalid length. [ 610.434960][T16614] netlink: 'syz.3.3408': attribute type 10 has an invalid length. [ 610.443299][T16614] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3408'. [ 610.649786][T16620] netlink: 'syz.5.3410': attribute type 29 has an invalid length. [ 610.821022][T16614] bridge0: port 4(veth0_vlan) entered blocking state [ 610.851667][T16614] bridge0: port 4(veth0_vlan) entered disabled state [ 611.087381][T16614] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 611.118093][T16620] netlink: 'syz.5.3410': attribute type 29 has an invalid length. [ 611.145588][T16621] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3409'. [ 611.163566][T16621] device hsr0 entered promiscuous mode [ 611.182848][T16621] bridge0: port 2(hsr0) entered blocking state [ 611.214818][T16621] bridge0: port 2(hsr0) entered disabled state [ 611.246866][T16621] bridge0: port 2(hsr0) entered blocking state [ 611.253156][T16621] bridge0: port 2(hsr0) entered forwarding state [ 611.615066][T16638] ¥: port 1(syz_tun) entered blocking state [ 611.668193][T16638] ¥: port 1(syz_tun) entered disabled state [ 611.843143][T16638] device syz_tun entered promiscuous mode [ 612.743522][T16644] device syzkaller0 entered promiscuous mode [ 614.464240][T16675] syzkaller0: tun_chr_ioctl cmd 1074025680 [ 614.475007][T16681] validate_nla: 1 callbacks suppressed [ 614.475020][T16681] netlink: 'syz.2.3427': attribute type 12 has an invalid length. [ 614.488579][T16681] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3427'. [ 614.871044][T16688] device syzkaller0 entered promiscuous mode [ 617.132168][T16732] device ip6_vti0 entered promiscuous mode [ 617.145881][T16736] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3442'. [ 617.163118][T16736] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3442'. [ 617.435068][T16749] netlink: 'syz.1.3446': attribute type 21 has an invalid length. [ 617.442997][T16749] netlink: 'syz.1.3446': attribute type 1 has an invalid length. [ 617.527645][T16749] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3446'. [ 617.558810][T16751] netlink: 'syz.1.3446': attribute type 21 has an invalid length. [ 617.608151][T16751] netlink: 'syz.1.3446': attribute type 1 has an invalid length. [ 617.667634][T16751] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3446'. [ 618.084862][T16767] IPv6: pim6reg1: Disabled Multicast RS [ 620.234318][T16824] netlink: 'syz.1.3465': attribute type 2 has an invalid length. [ 620.291848][T16832] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3465'. [ 620.581987][T16814] netlink: 'syz.1.3465': attribute type 10 has an invalid length. [ 620.630231][T16814] bridge0: port 2(bridge_slave_1) entered disabled state [ 620.693070][T16814] device bridge_slave_1 left promiscuous mode [ 620.725161][T16814] bridge0: port 2(bridge_slave_1) entered disabled state [ 620.844342][T16814] team0: Port device bridge_slave_1 added [ 622.480407][T16887] tap0: tun_chr_ioctl cmd 2147767521 [ 623.672546][T16908] netlink: 4419 bytes leftover after parsing attributes in process `syz.3.3486'. [ 624.149331][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.155741][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.157006][T16913] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3487'. [ 624.498776][T16930] netlink: 'syz.4.3493': attribute type 28 has an invalid length. [ 624.645333][T16938] netlink: 'syz.4.3493': attribute type 10 has an invalid length. [ 625.264955][T16950] bridge0: port 3(team0) entered disabled state [ 625.271569][T16950] bridge0: port 2(bridge_slave_1) entered disabled state [ 625.279057][T16950] bridge0: port 1(bridge_slave_0) entered disabled state [ 625.299981][T16953] netlink: 'syz.5.3499': attribute type 1 has an invalid length. [ 625.333824][T16953] netlink: 'syz.5.3499': attribute type 1 has an invalid length. [ 625.404771][T16953] netlink: 116376 bytes leftover after parsing attributes in process `syz.5.3499'. [ 628.188193][T16947] netlink: 'syz.1.3495': attribute type 10 has an invalid length. [ 628.252389][T16947] team0: Port device geneve1 added [ 628.602713][T16995] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3508'. [ 629.571520][T17010] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.3513'. [ 630.552511][T17017] netlink: 176 bytes leftover after parsing attributes in process `syz.3.3515'. [ 630.772029][T17022] netlink: 'syz.5.3517': attribute type 10 has an invalid length. [ 630.900934][T17025] netlink: 'syz.2.3518': attribute type 3 has an invalid length. [ 631.098305][T17025] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3518'. [ 631.227670][T17022] team0: Device wg1 is of different type [ 632.850283][T17058] netlink: 'syz.1.3527': attribute type 3 has an invalid length. [ 632.885543][T17058] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3527'. [ 633.205853][T17077] netlink: 'syz.2.3532': attribute type 39 has an invalid length. [ 633.665658][T17077] device veth0_macvtap left promiscuous mode [ 634.282492][T17096] netlink: 140 bytes leftover after parsing attributes in process `syz.5.3540'. [ 634.335864][T17096] netlink: 10 bytes leftover after parsing attributes in process `syz.5.3540'. [ 634.455255][T17104] netlink: 'syz.2.3542': attribute type 29 has an invalid length. [ 634.506224][T17096] bond0: (slave bond_slave_0): Releasing backup interface [ 634.710731][T17096] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 634.754254][T17104] netlink: 'syz.2.3542': attribute type 29 has an invalid length. [ 634.769203][T17107] netlink: 'syz.2.3542': attribute type 29 has an invalid length. [ 634.784985][T17104] netlink: 'syz.2.3542': attribute type 2 has an invalid length. [ 634.835694][T17104] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3542'. [ 634.842143][T17108] netlink: 'syz.2.3542': attribute type 29 has an invalid length. [ 634.915688][T17109] netlink: 'syz.2.3542': attribute type 29 has an invalid length. [ 635.327130][T17133] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3551'. [ 636.238881][T17171] validate_nla: 1 callbacks suppressed [ 636.238899][T17171] netlink: 'syz.3.3561': attribute type 2 has an invalid length. [ 636.304985][T17171] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3561'. [ 636.460598][T17182] netlink: 22 bytes leftover after parsing attributes in process `syz.2.3565'. [ 636.469908][T14660] Bluetooth: hci1: command 0x0406 tx timeout [ 636.935276][T17197] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3570'. [ 637.029362][T17200] netlink: 'syz.2.3571': attribute type 10 has an invalid length. [ 637.986294][T17209] netlink: 'syz.3.3574': attribute type 21 has an invalid length. [ 638.005032][T17209] netlink: 'syz.3.3574': attribute type 6 has an invalid length. [ 638.027704][T17209] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3574'. [ 638.790925][T17249] netlink: 'syz.2.3583': attribute type 21 has an invalid length. [ 638.857455][T17249] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3583'. [ 638.914798][T17249] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3583'. [ 638.938858][T17247] netlink: 'syz.2.3583': attribute type 21 has an invalid length. [ 638.995035][T17247] netlink: 'syz.2.3583': attribute type 1 has an invalid length. [ 639.027568][T17247] netlink: 100 bytes leftover after parsing attributes in process `syz.2.3583'. [ 639.582390][T17276] netlink: 'syz.4.3592': attribute type 29 has an invalid length. [ 639.596253][T17276] netlink: 'syz.4.3592': attribute type 29 has an invalid length. [ 639.631903][T17273] netlink: 'syz.4.3592': attribute type 29 has an invalid length. [ 639.879277][T17281] team0: Port device geneve1 added [ 639.917193][T17284] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3594'. [ 639.950045][T17284] batman_adv: batadv0: Adding interface: vlan1 [ 639.963967][T17284] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 640.038366][T17284] batman_adv: batadv0: Interface activated: vlan1 [ 640.229366][T17294] netlink: 188 bytes leftover after parsing attributes in process `syz.3.3597'. [ 640.301393][T17294] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3597'. [ 640.413783][T17295] device syzkaller0 entered promiscuous mode [ 640.453553][T17294] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3597'. [ 645.547689][T17364] validate_nla: 4 callbacks suppressed [ 645.547740][T17364] netlink: 'syz.3.3619': attribute type 10 has an invalid length. [ 646.169741][T17392] netlink: 1057 bytes leftover after parsing attributes in process `syz.2.3626'. [ 646.495278][T17377] device syzkaller0 entered promiscuous mode [ 646.511602][T17395] netlink: 40227 bytes leftover after parsing attributes in process `syz.1.3627'. [ 647.056430][T17419] netlink: 'syz.2.3635': attribute type 29 has an invalid length. [ 649.378406][T17419] netlink: 'syz.2.3635': attribute type 29 has an invalid length. [ 649.806796][T17439] netlink: 188 bytes leftover after parsing attributes in process `syz.5.3642'. [ 649.867680][T17443] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3643'. [ 650.278859][T17454] netlink: 'syz.3.3646': attribute type 10 has an invalid length. [ 650.287400][T17454] netlink: 'syz.3.3646': attribute type 4 has an invalid length. [ 650.311825][T17454] netlink: 116 bytes leftover after parsing attributes in process `syz.3.3646'. [ 650.404913][T17457] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3644'. [ 650.591719][T17457] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 650.647907][T17457] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 650.711978][T17457] bond0 (unregistering): Released all slaves [ 651.605836][T17481] device sit0 entered promiscuous mode [ 652.775194][T17530] netlink: 'syz.2.3668': attribute type 25 has an invalid length. [ 652.802845][T17530] netlink: 'syz.2.3668': attribute type 28 has an invalid length. [ 653.075529][T17555] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3674'. [ 653.675198][ T4847] wlan1: Trigger new scan to find an IBSS to join [ 653.855252][T17549] netlink: 'syz.5.3673': attribute type 2 has an invalid length. [ 654.431671][T17549] device 0 entered promiscuous mode [ 656.181215][T17593] netlink: 'syz.4.3681': attribute type 1 has an invalid length. [ 656.274811][T17593] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.3681'. [ 656.535342][T17593] netlink: 'syz.4.3681': attribute type 29 has an invalid length. [ 656.605943][T17593] netlink: 'syz.4.3681': attribute type 29 has an invalid length. [ 656.705372][T10214] wlan1: Trigger new scan to find an IBSS to join [ 656.945068][ T4279] Bluetooth: hci5: command 0x0406 tx timeout [ 658.945962][T10214] wlan1: Creating new IBSS network, BSSID a2:1a:fa:8b:cf:e7 [ 659.606506][T17628] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3694'. [ 661.077341][T17650] -1: renamed from syzkaller0 [ 663.754274][T17683] device syzkaller0 entered promiscuous mode [ 663.776042][T17686] device lo entered promiscuous mode [ 665.959534][T17729] netlink: 'syz.3.3725': attribute type 29 has an invalid length. [ 666.330156][T17731] can: request_module (can-proto-0) failed. [ 666.912336][T17739] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.3727'. [ 668.774858][T17729] netlink: 'syz.3.3725': attribute type 29 has an invalid length. [ 669.471321][T17762] netlink: 184 bytes leftover after parsing attributes in process `syz.5.3731'. [ 669.958684][T17771] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3736'. [ 671.612698][T17809] netlink: 'syz.3.3745': attribute type 21 has an invalid length. [ 671.630566][T17809] netlink: 'syz.3.3745': attribute type 7 has an invalid length. [ 671.641740][T17809] netlink: 'syz.3.3745': attribute type 3 has an invalid length. [ 671.705441][T17809] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3745'. [ 671.755642][T17805] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3746'. [ 672.249525][T17826] netlink: 'syz.3.3750': attribute type 6 has an invalid length. [ 672.294174][T17826] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3750'. [ 672.919144][T17859] netlink: 'syz.1.3757': attribute type 2 has an invalid length. [ 672.929441][T17851] device syzkaller0 entered promiscuous mode [ 672.974980][T17859] netlink: 199848 bytes leftover after parsing attributes in process `syz.1.3757'. [ 673.721818][T17877] netlink: 'syz.4.3763': attribute type 3 has an invalid length. [ 673.782295][T17877] netlink: 199824 bytes leftover after parsing attributes in process `syz.4.3763'. [ 677.417044][T17885] IPv6: NLM_F_CREATE should be specified when creating new route [ 677.426449][T14660] Bluetooth: hci0: command 0x0406 tx timeout [ 677.434791][ T4279] Bluetooth: hci2: command 0x0406 tx timeout [ 677.441312][T17885] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3765'. [ 677.451354][T17891] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3765'. [ 677.889141][T17921] netlink: 'syz.3.3778': attribute type 21 has an invalid length. [ 678.067790][T17924] netlink: 'syz.2.3779': attribute type 10 has an invalid length. [ 678.103296][T17924] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3779'. [ 678.135323][T17924] device dummy0 entered promiscuous mode [ 678.152380][T17924] bridge0: port 3(dummy0) entered blocking state [ 678.165533][T17924] bridge0: port 3(dummy0) entered disabled state [ 678.204314][T17924] bridge0: port 3(dummy0) entered blocking state [ 678.212570][T17924] bridge0: port 3(dummy0) entered forwarding state [ 678.436099][T17928] netlink: 'syz.1.3781': attribute type 41 has an invalid length. [ 678.538391][T17941] netlink: 'syz.4.3783': attribute type 6 has an invalid length. [ 678.595813][T17941] netlink: 168 bytes leftover after parsing attributes in process `syz.4.3783'. [ 678.628491][T17947] netlink: 'syz.4.3783': attribute type 10 has an invalid length. [ 678.820257][T17949] netlink: 154020 bytes leftover after parsing attributes in process `syz.1.3786'. [ 678.964958][T17949] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 679.395748][T17960] netlink: 'syz.5.3790': attribute type 2 has an invalid length. [ 679.425560][T17960] netlink: 'syz.5.3790': attribute type 4 has an invalid length. [ 679.475860][T17960] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3790'. [ 682.399648][T17998] ¥: port 1(syz_tun) entered blocking state [ 682.414977][T17998] ¥: port 1(syz_tun) entered disabled state [ 682.454320][T17998] device syz_tun entered promiscuous mode [ 683.149387][T18005] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3802'. [ 683.802587][T18017] netlink: 'syz.5.3805': attribute type 1 has an invalid length. [ 684.018883][T18022] netlink: 'syz.2.3806': attribute type 10 has an invalid length. [ 685.427345][T18025] netlink: 'syz.5.3808': attribute type 21 has an invalid length. [ 685.835313][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.842035][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.024592][T18054] netlink: 'syz.3.3814': attribute type 16 has an invalid length. [ 687.044732][T18054] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3814'. [ 687.406370][T18065] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.3817'. [ 687.840663][T18079] netlink: 'syz.4.3820': attribute type 10 has an invalid length. [ 688.300498][T18082] netlink: 'syz.1.3822': attribute type 3 has an invalid length. [ 688.313531][T18082] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3822'. [ 688.784941][ T27] INFO: task syz.0.3037:15156 blocked for more than 143 seconds. [ 688.804538][ T27] Not tainted syzkaller #0 [ 688.823437][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 688.843716][ T27] task:syz.0.3037 state:D stack:25432 pid:15156 ppid:4272 flags:0x00004002 [ 688.870721][ T27] Call Trace: [ 688.889943][ T27] [ 688.901069][ T27] __schedule+0x107f/0x4030 [ 688.927196][ T27] ? __lock_acquire+0x7c40/0x7c40 [ 688.944007][ T27] ? __sched_text_start+0x8/0x8 [ 688.964294][ T27] ? task_work_cancel+0xa1/0x220 [ 688.978956][ T27] ? task_work_cancel_func+0x210/0x210 [ 689.001363][ T27] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 689.014294][ T27] schedule+0xb9/0x180 [ 689.022096][ T27] ? _free_event+0x10d/0x1050 [ 689.035039][ T27] _free_event+0x176/0x1050 [ 689.050326][ T27] perf_event_release_kernel+0x7c4/0x850 [ 689.065964][ T27] ? __might_sleep+0xd0/0xd0 [ 689.072929][ T27] ? calc_timer_values+0x410/0x410 [ 689.083662][ T27] ? __might_sleep+0xd0/0xd0 [ 689.094006][ T27] ? perf_mmap+0x1470/0x1470 [ 689.102952][ T27] perf_release+0x37/0x40 [ 689.117288][ T27] __fput+0x20a/0x8b0 [ 689.126265][ T27] task_work_run+0x1d0/0x260 [ 689.133791][ T27] ? task_work_cancel+0x220/0x220 [ 689.144150][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 689.154424][ T27] do_exit+0x9d5/0x2570 [ 689.164217][ T27] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 689.178259][ T27] ? put_task_struct+0x80/0x80 [ 689.190263][ T27] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 689.201790][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 689.213732][ T27] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 689.235994][ T27] do_group_exit+0x229/0x2e0 [ 689.242404][ T27] ? _raw_spin_unlock_irq+0x25/0x40 [ 689.254064][ T27] get_signal+0x1259/0x1340 [ 689.262311][ T27] arch_do_signal_or_restart+0xc4/0x1310 [ 689.276195][ T27] ? __lock_acquire+0x7c40/0x7c40 [ 689.283393][ T27] ? perf_trace_preemptirq_template+0xa8/0x320 [ 689.297186][ T27] ? irqentry_enter+0x33/0x50 [ 689.304577][ T27] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 689.341185][ T27] ? get_sigframe_size+0x10/0x10 [ 689.353617][ T27] ? lock_chain_count+0x20/0x20 [ 689.363813][ T27] ? rcu_is_watching+0x11/0xa0 [ 689.372298][ T27] exit_to_user_mode_loop+0x70/0x110 [ 689.384254][ T27] exit_to_user_mode_prepare+0xee/0x180 [ 689.394087][ T27] syscall_exit_to_user_mode+0x16/0x40 [ 689.407821][ T27] do_syscall_64+0x58/0xa0 [ 689.418371][ T27] ? clear_bhb_loop+0x60/0xb0 [ 689.423761][ T27] ? clear_bhb_loop+0x60/0xb0 [ 689.438825][ T27] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 689.453394][ T27] RIP: 0033:0x7f0a0499de99 [ 689.463769][ T27] RSP: 002b:00007f0a05871028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 689.480754][ T27] RAX: 0000000000000009 RBX: 00007f0a04c25fa0 RCX: 00007f0a0499de99 [ 689.490954][ T27] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000000 [ 689.506217][ T27] RBP: 00007f0a04a33eaf R08: 0000000000000000 R09: 0000000000000000 [ 689.521778][ T27] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 689.532095][ T27] R13: 00007f0a04c26038 R14: 00007f0a04c25fa0 R15: 00007ffe45985058 [ 689.550114][ T27] [ 689.560061][ T27] [ 689.560061][ T27] Showing all locks held in the system: [ 689.576446][ T27] 1 lock held by rcu_tasks_kthre/12: [ 689.582193][ T27] #0: ffffffff8cb2e4f0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xef0 [ 689.604343][ T27] 1 lock held by rcu_tasks_trace/13: [ 689.617410][ T27] #0: ffffffff8cb2ed10 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xef0 [ 689.638321][ T27] 1 lock held by khungtaskd/27: [ 689.643705][ T27] #0: ffffffff8cb2db60 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 689.666487][ T27] 4 locks held by kworker/u4:3/47: [ 689.674024][ T27] #0: ffff88801761e938 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 689.696718][ T27] #1: ffffc90000b87d00 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 689.713540][ T27] #2: ffffffff8dd4ead0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x148/0xba0 [ 689.732249][ T27] #3: ffffffff8cb33838 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3c0/0x890 [ 689.769374][ T27] 2 locks held by kworker/1:2/126: [ 689.780650][ T27] #0: ffff888017472138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 689.800324][ T27] #1: ffffc90002da7d00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 689.820856][ T27] 2 locks held by getty/4029: [ 689.828588][ T27] #0: ffff88803000f098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 689.847150][ T27] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x41e/0x1360 [ 689.864289][ T27] 2 locks held by kworker/u4:10/4847: [ 689.872935][ T27] #0: ffff888017479138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 689.898137][ T27] #1: ffffc9000d4afd00 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 689.920695][ T27] 1 lock held by syz.2.3816/18061: [ 689.928159][ T27] #0: ffff888054f73810 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x82/0x210 [ 689.945989][ T27] 2 locks held by syz.2.3816/18062: [ 689.953314][ T27] 1 lock held by syz.5.3819/18066: [ 689.966414][ T27] #0: ffffffff8dd5b968 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3d/0x1b0 [ 689.982522][ T27] 1 lock held by syz.4.3820/18068: [ 689.993443][ T27] #0: ffff888073a94410 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x82/0x210 [ 690.015470][ T27] 2 locks held by syz.3.3821/18071: [ 690.024384][ T27] #0: ffff888054c79410 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x82/0x210 [ 690.043354][ T27] #1: ffffffff8cb33838 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x2ec/0x890 [ 690.064213][ T27] 1 lock held by syz.1.3823/18084: [ 690.072514][ T27] #0: ffffffff8dd5b968 (rtnl_mutex){+.+.}-{3:3}, at: __tun_chr_ioctl+0x3f3/0x1ed0 [ 690.090955][ T27] 1 lock held by syz.1.3823/18085: [ 690.098594][ T27] #0: ffffffff8dd5b968 (rtnl_mutex){+.+.}-{3:3}, at: dev_ioctl+0x54d/0xe80 [ 690.120829][ T27] 1 lock held by syz.1.3823/18087: [ 690.133427][ T27] #0: ffffffff8dd5b968 (rtnl_mutex){+.+.}-{3:3}, at: __tun_chr_ioctl+0x3f3/0x1ed0 [ 690.158383][ T27] 1 lock held by syz.1.3823/18088: [ 690.168644][ T27] #0: ffffffff8dd5b968 (rtnl_mutex){+.+.}-{3:3}, at: __tun_chr_ioctl+0x3f3/0x1ed0 [ 690.183231][ T27] [ 690.190743][ T27] ============================================= [ 690.190743][ T27] [ 690.208307][ T27] NMI backtrace for cpu 1 [ 690.212810][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 690.220174][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 690.230372][ T27] Call Trace: [ 690.233697][ T27] [ 690.236776][ T27] dump_stack_lvl+0x188/0x24e [ 690.241721][ T27] ? ct_irq_enter_irqson+0x170/0x170 [ 690.247234][ T27] ? show_regs_print_info+0x12/0x12 [ 690.252489][ T27] ? load_image+0x410/0x410 [ 690.257040][ T27] ? vprintk_emit+0x59f/0x6a0 [ 690.261795][ T27] ? nmi_cpu_backtrace+0x1cb/0x460 [ 690.267003][ T27] nmi_cpu_backtrace+0x3e6/0x460 [ 690.272007][ T27] ? nmi_trigger_cpumask_backtrace+0x450/0x450 [ 690.278271][ T27] ? _printk+0xda/0x130 [ 690.282466][ T27] ? load_image+0x410/0x410 [ 690.287020][ T27] ? load_image+0x410/0x410 [ 690.291618][ T27] ? nmi_trigger_cpumask_backtrace+0xf3/0x450 [ 690.297752][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 690.304127][ T27] nmi_trigger_cpumask_backtrace+0x1d4/0x450 [ 690.310154][ T27] watchdog+0xf0e/0xf50 [ 690.314391][ T27] ? watchdog+0x1ed/0xf50 [ 690.318871][ T27] kthread+0x29d/0x330 [ 690.323101][ T27] ? hungtask_pm_notify+0x40/0x40 [ 690.329733][ T27] ? kthread_blkcg+0xd0/0xd0 [ 690.334361][ T27] ret_from_fork+0x1f/0x30 [ 690.339035][ T27] [ 690.342883][ T27] Sending NMI from CPU 1 to CPUs 0: [ 690.348274][ C0] NMI backtrace for cpu 0 [ 690.348286][ C0] CPU: 0 PID: 18062 Comm: syz.2.3816 Not tainted syzkaller #0 [ 690.348300][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 690.348308][ C0] RIP: 0010:__lock_acquire+0x1ef/0x7c40 [ 690.348332][ C0] Code: 64 00 00 41 83 fe 30 0f 93 c0 83 3d fa 60 5d 15 00 74 02 31 c0 84 c0 0f 85 9d 57 00 00 44 89 a4 24 a8 00 00 00 48 89 5c 24 10 <44> 8b 65 20 48 c7 c0 00 71 49 90 49 29 c7 49 c1 ff 06 48 ba ab aa [ 690.348344][ C0] RSP: 0018:ffffc90000007a20 EFLAGS: 00000046 [ 690.348357][ C0] RAX: 0000000000000000 RBX: ffff88802e57e4d8 RCX: ffffffff96c16103 [ 690.348367][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8cb47288 [ 690.348376][ C0] RBP: ffffc90000007c50 R08: dffffc0000000000 R09: 0000000000000001 [ 690.348386][ C0] R10: dffffc0000000000 R11: fffffbfff1c4215e R12: 0000000000000001 [ 690.348396][ C0] R13: ffffffff8cb47288 R14: 0000000000000005 R15: ffffffff9049a880 [ 690.348406][ C0] FS: 00007f2336ff66c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 690.348418][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 690.348428][ C0] CR2: 00007fcbe12a4ff8 CR3: 0000000061288000 CR4: 00000000003506f0 [ 690.348440][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 690.348449][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 690.348457][ C0] Call Trace: [ 690.348462][ C0] [ 690.348469][ C0] ? mark_lock+0x94/0x320 [ 690.348487][ C0] ? __lock_acquire+0x1465/0x7c40 [ 690.348514][ C0] ? verify_lock_unused+0x140/0x140 [ 690.348535][ C0] ? verify_lock_unused+0x140/0x140 [ 690.348553][ C0] ? perf_trace_lock+0xf8/0x390 [ 690.348569][ C0] lock_acquire+0x1bb/0x4a0 [ 690.348585][ C0] ? ktime_get_update_offsets_now+0x44/0x3e0 [ 690.348611][ C0] ? read_lock_is_recursive+0x10/0x10 [ 690.348631][ C0] ? do_raw_spin_lock+0x128/0x2f0 [ 690.348643][ C0] ? ktime_get_update_offsets_now+0x44/0x3e0 [ 690.348660][ C0] seqcount_lockdep_reader_access+0xcd/0x1d0 [ 690.348675][ C0] ? ktime_get_update_offsets_now+0x44/0x3e0 [ 690.348690][ C0] ? ktime_get_real_ts64+0x440/0x440 [ 690.348708][ C0] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 690.348724][ C0] ktime_get_update_offsets_now+0x44/0x3e0 [ 690.348744][ C0] hrtimer_interrupt+0x11a/0x980 [ 690.348759][ C0] ? sched_clock_cpu+0x6e/0x260 [ 690.348856][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 690.348870][ C0] ? __sched_clock_gtod_offset+0xe0/0xe0 [ 690.348888][ C0] ? __irq_exit_rcu+0x147/0x230 [ 690.348901][ C0] ? irq_exit_rcu+0x20/0x20 [ 690.348917][ C0] __sysvec_apic_timer_interrupt+0x153/0x5a0 [ 690.348949][ C0] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 690.348963][ C0] [ 690.348967][ C0] [ 690.348972][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 690.348989][ C0] RIP: 0010:unwind_get_return_address+0x1e/0x80 [ 690.349011][ C0] Code: b8 1e f7 08 0f 1f 84 00 00 00 00 00 41 57 41 56 53 48 89 fb 49 be 00 00 00 00 00 fc ff df 48 89 f8 48 c1 e8 03 42 0f b6 04 30 <84> c0 75 47 83 3b 00 74 3a 48 83 c3 48 49 89 df 49 c1 ef 03 43 80 [ 690.349021][ C0] RSP: 0018:ffffc9000f147008 EFLAGS: 00000a06 [ 690.349032][ C0] RAX: 0000000000000000 RBX: ffffc9000f147028 RCX: 0000000080000201 [ 690.349045][ C0] RDX: ffffc9000f147001 RSI: dffffc0000000000 RDI: ffffc9000f147028 [ 690.349055][ C0] RBP: ffffc9000f1470b0 R08: ffffc9000f147730 R09: ffffc9000f147078 [ 690.349065][ C0] R10: dffffc0000000000 R11: fffff52001e28e11 R12: ffff88802e57da00 [ 690.349074][ C0] R13: ffffc9000f147450 R14: dffffc0000000000 R15: ffffc9000f147028 [ 690.349093][ C0] ? stack_trace_save+0xf0/0xf0 [ 690.349109][ C0] arch_stack_walk+0xf2/0x140 [ 690.349139][ C0] ? __dev_queue_xmit+0x180d/0x3810 [ 690.349189][ C0] stack_trace_save+0xa6/0xf0 [ 690.349205][ C0] ? stack_trace_snprint+0xe0/0xe0 [ 690.349224][ C0] ? memset+0x1e/0x40 [ 690.349238][ C0] kasan_set_track+0x4b/0x70 [ 690.349253][ C0] ? kasan_set_track+0x4b/0x70 [ 690.349267][ C0] ? kasan_save_free_info+0x27/0x40 [ 690.349279][ C0] ? ____kasan_slab_free+0x126/0x1f0 [ 690.349295][ C0] ? slab_free_freelist_hook+0x133/0x1b0 [ 690.349309][ C0] ? kmem_cache_free+0xf7/0x2a0 [ 690.349322][ C0] ? packet_rcv+0x166/0x1300 [ 690.349335][ C0] ? dev_queue_xmit_nit+0xb0c/0xba0 [ 690.349347][ C0] ? dev_hard_start_xmit+0x158/0x8b0 [ 690.349360][ C0] ? sch_direct_xmit+0x24d/0x4a0 [ 690.349421][ C0] ? kmem_cache_free+0xf7/0x2a0 [ 690.349434][ C0] kasan_save_free_info+0x27/0x40 [ 690.349446][ C0] ____kasan_slab_free+0x126/0x1f0 [ 690.349464][ C0] slab_free_freelist_hook+0x133/0x1b0 [ 690.349481][ C0] ? packet_rcv+0x166/0x1300 [ 690.349493][ C0] kmem_cache_free+0xf7/0x2a0 [ 690.349510][ C0] packet_rcv+0x166/0x1300 [ 690.349525][ C0] ? packet_sock_destruct+0x160/0x160 [ 690.349540][ C0] dev_queue_xmit_nit+0xb0c/0xba0 [ 690.349553][ C0] ? dev_queue_xmit_nit+0x29/0xba0 [ 690.349570][ C0] dev_hard_start_xmit+0x158/0x8b0 [ 690.349591][ C0] sch_direct_xmit+0x24d/0x4a0 [ 690.349607][ C0] ? do_raw_spin_lock+0x2f0/0x2f0 [ 690.349623][ C0] ? mrp_pdu_append_vecattr_event+0x1670/0x1670 [ 690.349643][ C0] __dev_queue_xmit+0x180d/0x3810 [ 690.349661][ C0] ? __dev_queue_xmit+0x281/0x3810 [ 690.349679][ C0] ? netdev_core_pick_tx+0x360/0x360 [ 690.349702][ C0] ? skb_release_data+0x1d3/0x7e0 [ 690.349725][ C0] __bpf_redirect+0xb65/0x1110 [ 690.349775][ C0] bpf_clone_redirect+0x311/0x4a0 [ 690.349793][ C0] bpf_prog_9e76daf83c32d9b9+0x19/0x1d [ 690.349808][ C0] bpf_test_run+0x4c1/0x830 [ 690.349832][ C0] ? dst_hold+0xb0/0xb0 [ 690.349846][ C0] ? eth_get_headlen+0x200/0x200 [ 690.349859][ C0] ? __build_skb+0x24b/0x3b0 [ 690.349876][ C0] ? bpf_prog_test_run_skb+0x808/0x18e0 [ 690.349890][ C0] ? convert___skb_to_skb+0x3d/0x580 [ 690.349905][ C0] bpf_prog_test_run_skb+0xdaf/0x18e0 [ 690.349929][ C0] ? cpu_online+0xa0/0xa0 [ 690.349943][ C0] bpf_prog_test_run+0x31c/0x390 [ 690.349963][ C0] __sys_bpf+0x62b/0x780 [ 690.349979][ C0] ? bpf_link_show_fdinfo+0x380/0x380 [ 690.350001][ C0] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 690.350023][ C0] __x64_sys_bpf+0x78/0x90 [ 690.350039][ C0] do_syscall_64+0x4c/0xa0 [ 690.350055][ C0] ? clear_bhb_loop+0x60/0xb0 [ 690.350070][ C0] ? clear_bhb_loop+0x60/0xb0 [ 690.350086][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 690.350101][ C0] RIP: 0033:0x7f2338d9de99 [ 690.350118][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 690.350129][ C0] RSP: 002b:00007f2336ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 690.350142][ C0] RAX: ffffffffffffffda RBX: 00007f2339025fa0 RCX: 00007f2338d9de99 [ 690.350151][ C0] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 690.350160][ C0] RBP: 00007f2338e33eaf R08: 0000000000000000 R09: 0000000000000000 [ 690.350168][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 690.350176][ C0] R13: 00007f2339026038 R14: 00007f2339025fa0 R15: 00007fff294c12d8 [ 690.350193][ C0] [ 691.140359][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 691.147561][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 691.154958][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 691.166036][ T27] Call Trace: [ 691.169589][ T27] [ 691.172929][ T27] dump_stack_lvl+0x188/0x24e [ 691.178005][ T27] ? memcpy+0x3c/0x60 [ 691.182035][ T27] ? show_regs_print_info+0x12/0x12 [ 691.187334][ T27] ? load_image+0x410/0x410 [ 691.191876][ T27] panic+0x2d3/0x710 [ 691.195803][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 691.201475][ T27] ? bpf_jit_dump+0xd0/0xd0 [ 691.206114][ T27] ? __irq_work_queue_local+0x12c/0x190 [ 691.211791][ T27] ? nmi_trigger_cpumask_backtrace+0x35b/0x450 [ 691.218210][ T27] ? nmi_trigger_cpumask_backtrace+0x360/0x450 [ 691.224454][ T27] watchdog+0xf4d/0xf50 [ 691.228647][ T27] ? watchdog+0x1ed/0xf50 [ 691.232990][ T27] kthread+0x29d/0x330 [ 691.237072][ T27] ? hungtask_pm_notify+0x40/0x40 [ 691.242103][ T27] ? kthread_blkcg+0xd0/0xd0 [ 691.246803][ T27] ret_from_fork+0x1f/0x30 [ 691.251375][ T27] [ 691.254702][ T27] Kernel Offset: disabled [ 691.259054][ T27] Rebooting in 86400 seconds..