last executing test programs: 54.49116157s ago: executing program 0 (id=9376): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8050, 0x4, 0x43a1bd76, 0x5, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="bb00000031000b63ddd2806c8c6f94f903f4b76ffa24fc60100003000a00020005358ac137800500026ced000300", 0x2e}, {&(0x7f0000000140)="c512603b5c247ac97270d2d9f9e3a774644b37ffa4c38bc5ac41e6569c22f21809625db64973a31646a005a85e988285af8f70ec763129dac5d3c4e5e28b003aec39da77a70fcc3aec02c9d2148fa6edc37169089bf94207176394", 0x5b}, {&(0x7f0000000380)="e166186d6cb0b5b1d6ffadb2be01b8263d3abab0c802ff3938203ba118ca79aec5641d631a209c4a807a66d32c93d6258379", 0x32}], 0x3}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xd, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000b00)={r2}, 0xc) r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x3d, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfef8}, 0x94) r4 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r4, 0x29, 0x32, 0x0, 0x0) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0x1f, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r6, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000ac0), 0xc) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 54.238060706s ago: executing program 0 (id=9388): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8050, 0x4, 0x43a1bd76, 0x5, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="bb00000031000b63ddd2806c8c6f94f903f4b76ffa24fc60100003000a00020005358ac137800500026ced000300", 0x2e}, {&(0x7f0000000140)="c512603b5c247ac97270d2d9f9e3a774644b37ffa4c38bc5ac41e6569c22f21809625db64973a31646a005a85e988285af8f70ec763129dac5d3c4e5e28b003aec39da77a70fcc3aec02c9d2148fa6edc37169089bf94207176394", 0x5b}, {&(0x7f0000000380)="e166186d6cb0b5b1d6ffadb2be01b8263d3abab0c802ff3938203ba118ca79aec5641d631a209c4a807a66d32c93d6258379", 0x32}], 0x3}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xd, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000b00)={r2}, 0xc) r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x3d, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfef8}, 0x94) r4 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r4, 0x29, 0x32, 0x0, 0x0) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0x1f, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r6, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000ac0), 0xc) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 54.053889666s ago: executing program 0 (id=9383): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async) socketpair(0x1, 0x1, 0x0, 0x0) (async, rerun: 32) r0 = perf_event_open(&(0x7f0000000b00)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x0, 0x32, 0x43e1bd74, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x8) (rerun: 32) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x4b, 0x0, 0x0, 0xff, 0x5cc0d1b89fca497e, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_config_ext={0x3, 0x5d}, 0x0, 0xca, 0x0, 0x2, 0x3, 0x3ff, 0x40, 0x0, 0x0, 0x0, 0x6c6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)) (async) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) (async) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) (async, rerun: 32) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, &(0x7f0000000640)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="180200000100000000000000000000008500000053000000180100002020752500000000000020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fcff"], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000840)={r6, 0x3000000, 0xd, 0x0, &(0x7f00000008c0)="e07b292fe079989cb9547ed387", 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0a000000050000000300000004"], 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r9 = bpf$ITER_CREATE(0x21, &(0x7f0000001880), 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000018c0)={@map=r8, r3, 0x2a, 0x200c, r5, @value=r9}, 0x20) r10 = perf_event_open(&(0x7f0000001900)={0x2, 0x80, 0x9b, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0xfffffffe, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000001980)={0x5, 0x3, &(0x7f0000001a40)=ANY=[@ANYBLOB="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"], &(0x7f00000022c0)='GPL\x00', 0x5, 0xc3, &(0x7f0000002300)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, r11) perf_event_open(&(0x7f0000002400)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002480)) (async) socketpair$unix(0x1, 0x1, 0x0, 0x0) close(r2) (async, rerun: 32) recvmsg$unix(r1, &(0x7f00000024c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002500)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (async, rerun: 32) r13 = openat$ppp(0xffffffffffffff9c, &(0x7f0000002540), 0x0, 0x0) write$cgroup_subtree(r12, &(0x7f0000002580)=ANY=[@ANYRES8=r2, @ANYRES8=r13], 0x12) (async, rerun: 64) perf_event_open(&(0x7f0000000b80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7f}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (rerun: 64) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x13, 0x36, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x200}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @map_idx={0x18, 0x9, 0x5, 0x0, 0xc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000001c0)='GPL\x00', 0x7fffffff, 0x0, 0x0, 0x41000, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x9, 0x5}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8, &(0x7f0000000240)=[0x1, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, r0], &(0x7f0000000280)=[{0x2, 0x1, 0x3, 0xa}, {0x4, 0x5, 0x2, 0x4}, {0x1, 0x2, 0x9, 0x8}, {0x4, 0x2, 0x1, 0x9}, {0x1, 0x5, 0x6, 0x2}, {0x4, 0x1, 0xa, 0x4}, {0x0, 0x4, 0x0, 0x7}, {0x3, 0x2, 0x1, 0xc}], 0x10, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x10, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000017c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000001800), 0x8, 0x10, &(0x7f0000001840), 0x10, 0x0, r14, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) 52.988660396s ago: executing program 0 (id=9390): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x1c}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0xc}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xc, 0x9, 0x0, 0x0, 0xfffffffb}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x5}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8, 0x9, 0x20, 0xfeffffff}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 52.733656662s ago: executing program 0 (id=9401): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) socket$kcm(0x2, 0x200000000000001, 0x106) r0 = socket$kcm(0x2, 0x3, 0x84) close(0xffffffffffffffff) r1 = socket$kcm(0x2b, 0x1, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x8400, 0x5, 0x3, 0xaaf04684de878bda, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0500000001000000400000000500000041000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000300)={r2, 0x0, &(0x7f0000000340)=""/31}, 0x20) r3 = socket$kcm(0x10, 0x2, 0x4) close(r3) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05000000040000000400000005"], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xd, &(0x7f0000000b40)=ANY=[@ANYBLOB="18000000080000000000000000000080850000000f00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000725e85000000010000"], &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000c00)={r5}, 0xc) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(r6, &(0x7f00000004c0)=0x8000000000000000, 0x12) ioctl$SIOCSIFHWADDR(r6, 0x4030582b, &(0x7f0000000500)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc, 0x8}}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r6, 0x4008240b, &(0x7f0000000540)={0x1, 0x80, 0x8, 0x74, 0x9, 0x3, 0x0, 0xf7b, 0x82240, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xc96, 0x2, @perf_bp={&(0x7f0000000640), 0xa}, 0xc090, 0x6, 0x5, 0x6, 0x1000, 0x5, 0x8a, 0x0, 0x8, 0x0, 0x100000000}) socket$kcm(0xa, 0x6, 0x0) close(r1) sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f00000006c0)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, 0x0, 0x0, 0x0, 0x48}, 0x20028814) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_lsm={0x6, 0x3, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000880)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000008c0)={r7, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r7, 0x5, 0xe, 0x0, &(0x7f00000009c0)="39b5903e6251964922c666d4692a", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x9}, 0x50) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 52.579628448s ago: executing program 0 (id=9395): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000070000000000000000000000850000004100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x7, 0x2, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x6, 0xffffffffffffffff, 0x0) socket$kcm(0x2c, 0x3, 0x0) perf_event_open(&(0x7f0000000440)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xcb20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x41, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, r2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x1f, 0x2, &(0x7f00000005c0)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="02000000040000000600000006"], 0x66) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800), &(0x7f0000000840), 0xffffffff, r4}, 0x38) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = perf_event_open(&(0x7f0000000880)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x2, 0x0) socket$kcm(0x2c, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) r8 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r8, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=[{0x10, 0x110, 0xa}], 0x10}, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000009c0)={'rose0\x00', 0x112}) perf_event_open(&(0x7f0000000a00)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x72bd1de2ad10b2f3, 0x63, 0xcfb5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x84000, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x8940, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r10) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x2, 0x8, 0x40, 0xc0, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440), &(0x7f0000000480), 0x1003, r11}, 0x38) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x10, 0xd, &(0x7f0000000b80)=ANY=[@ANYBLOB="1802000040000000000000000000000085100000010000009500000000000000180100002020732500000000002020207b1af8ff00000000bea100000000000007010000f8ffffffb702000008000000b703000000000028850000005b00000095"], &(0x7f0000000c00)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0xa}, 0x94) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x2, r11}, 0x38) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 36.760852755s ago: executing program 32 (id=9395): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000070000000000000000000000850000004100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x7, 0x2, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x6, 0xffffffffffffffff, 0x0) socket$kcm(0x2c, 0x3, 0x0) perf_event_open(&(0x7f0000000440)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xcb20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x41, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, r2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x1f, 0x2, &(0x7f00000005c0)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="02000000040000000600000006"], 0x66) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800), &(0x7f0000000840), 0xffffffff, r4}, 0x38) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = perf_event_open(&(0x7f0000000880)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x2, 0x0) socket$kcm(0x2c, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) r8 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r8, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=[{0x10, 0x110, 0xa}], 0x10}, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000009c0)={'rose0\x00', 0x112}) perf_event_open(&(0x7f0000000a00)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x72bd1de2ad10b2f3, 0x63, 0xcfb5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x84000, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x8940, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r10) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x2, 0x8, 0x40, 0xc0, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440), &(0x7f0000000480), 0x1003, r11}, 0x38) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x10, 0xd, &(0x7f0000000b80)=ANY=[@ANYBLOB="1802000040000000000000000000000085100000010000009500000000000000180100002020732500000000002020207b1af8ff00000000bea100000000000007010000f8ffffffb702000008000000b703000000000028850000005b00000095"], &(0x7f0000000c00)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0xa}, 0x94) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x2, r11}, 0x38) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 21.138040692s ago: executing program 2 (id=9589): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) socket$kcm(0x2, 0x200000000000001, 0x106) r0 = socket$kcm(0x2, 0x3, 0x84) close(0xffffffffffffffff) r1 = socket$kcm(0x2b, 0x1, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x8400, 0x5, 0x3, 0xaaf04684de878bda, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0500000001000000400000000500000041000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000300)={r2, 0x0, &(0x7f0000000340)=""/31}, 0x20) r3 = socket$kcm(0x10, 0x2, 0x4) close(r3) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05000000040000000400000005"], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xd, &(0x7f0000000b40)=ANY=[@ANYBLOB="18000000080000000000000000000080850000000f00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000725e85000000010000"], &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000c00)={r5}, 0xc) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(r6, &(0x7f00000004c0)=0x8000000000000000, 0x12) ioctl$SIOCSIFHWADDR(r6, 0x4030582b, &(0x7f0000000500)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc, 0x8}}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r6, 0x4008240b, &(0x7f0000000540)={0x1, 0x80, 0x8, 0x74, 0x9, 0x3, 0x0, 0xf7b, 0x82240, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xc96, 0x2, @perf_bp={&(0x7f0000000640), 0xa}, 0xc090, 0x6, 0x5, 0x6, 0x1000, 0x5, 0x8a, 0x0, 0x8, 0x0, 0x100000000}) socket$kcm(0xa, 0x6, 0x0) close(r1) sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f00000006c0)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, 0x0, 0x0, 0x0, 0x48}, 0x20028814) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_lsm={0x6, 0x3, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000880)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000008c0)={r7, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r7, 0x5, 0xe, 0x0, &(0x7f00000009c0)="39b5903e6251964922c666d4692a", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x9}, 0x50) (fail_nth: 7) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYBLOB], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 20.368810162s ago: executing program 2 (id=9597): ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0xf}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x6, 0x82, 0xf7, 0x0, 0x9, 0x1300, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3e14, 0x3, @perf_config_ext={0x7fffffff, 0x18000000}, 0xa0, 0x8, 0x7, 0x2, 0xfffffffffffffffd, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) close(r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000280)={'wg2\x00'}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='\f\x00\x00\x00 \x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="307563674d07764954516bf689d4b468bb950381babb516eb9fbdf", @ANYRES64=0x0], 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) socket$kcm(0xa, 0x1, 0x106) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r4, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) gettid() perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x410, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)) 18.969991196s ago: executing program 2 (id=9602): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x1, 0x10, &(0x7f0000001180)=@framed={{}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfff}}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x3}]}, &(0x7f0000001240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe1b) perf_event_open(0x0, 0x0, 0x6, 0xffffffffffffffff, 0xb) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) close(r2) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x3, 0x4, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28e9, 0x0, @perf_config_ext={0x1, 0xc7d2d38}, 0x4110, 0x0, 0x0, 0x5, 0x0, 0x9, 0x8, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETDEBUG(r4, 0x400454c9, 0xffffffffffffffff) ioctl$TUNSETLINK(r4, 0x400454cd, 0x300) syz_clone(0x20128000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000340)={r2, &(0x7f0000000200)="8cb01297813eda28ca70e53b8772feeeca38770cf7c862c9ceef5ac21c2c3e67623c5ab3250faa82baac4004047e4c6ce46c1baba0259997ef014bd491c4565751a106413562a1e3", &(0x7f0000000280)=""/160, 0x4}, 0x20) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x0) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r5, &(0x7f0000000100)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x34044840) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x5411, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001280)={r1, 0x0, 0xe, 0x0, &(0x7f0000001300)='\x00'/14, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 16.1404016s ago: executing program 2 (id=9611): socket$kcm(0x29, 0x0, 0x0) socket$kcm(0x11, 0x2, 0x300) (async) r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r0, &(0x7f0000000b40)={&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xd}, @loopback}}}], 0x20}, 0x0) 15.832713421s ago: executing program 2 (id=9614): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000400)=@generic={&(0x7f0000000380)='./file0\x00', 0x0, 0x8}, 0x18) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa2, 0xa2, 0x9, [@restrict={0x1, 0x0, 0x0, 0xb, 0x1}, @type_tag={0xc, 0x0, 0x0, 0x12, 0x4}, @func={0x2, 0x0, 0x0, 0xc, 0x4}, @decl_tag={0xc, 0x0, 0x0, 0x11, 0x2, 0xffffffffffffffff}, @fwd={0xc}, @float={0x6, 0x0, 0x0, 0x10, 0x10}, @datasec={0xe, 0x6, 0x0, 0xf, 0x2, [{0x3, 0x9, 0x1}, {0x4, 0x8aa1, 0x5}, {0x5, 0x0, 0x5}, {0x4, 0x696, 0x7}, {0x4, 0x8b9, 0x9}, {0x5, 0x0, 0xe50}], 't\b'}]}, {0x0, [0x30, 0x0, 0x5f, 0x61, 0xe, 0x30, 0x2e]}}, &(0x7f0000000700)=""/100, 0xc5, 0x64, 0x1, 0x9, 0x10000}, 0x28) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001a40)={0x0, 0x11, &(0x7f0000000840)=@framed={{0x18, 0x0, 0x0, 0x0, 0x372}, [@jmp={0x5, 0x0, 0xd, 0x5, 0xb, 0xffffffffffffffe0, 0xffffffffffffffff}, @map_fd={0x18, 0x5, 0x1, 0x0, 0x1}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0xd}, @ldst={0x2, 0x2, 0x3, 0x3, 0x8, 0xfffffffffffffff0, 0xc0eee8ad569a03ec}, @generic={0x2, 0x2, 0x3, 0x3, 0x7fff}, @map_val={0x18, 0x1, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x100}, @map_idx_val={0x18, 0xe1151e122a53cfef, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xffffffffffffffff}, @alu={0x7, 0x0, 0xc, 0x5, 0x2, 0x30, 0xfffffffffffffffc}]}, &(0x7f0000000900)='syzkaller\x00', 0x3, 0x1000, &(0x7f0000000940)=""/4096, 0x1f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001940)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000001980)={0x2, 0x9, 0x2, 0x6}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000019c0)=[0xffffffffffffffff], &(0x7f0000001a00)=[{0x5, 0x3, 0xd, 0x2}], 0x10, 0x5}, 0x94) socket$kcm(0x10, 0x3, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001d80)={0xc, 0xe, &(0x7f0000001e40)=ANY=[@ANYBLOB="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"], &(0x7f0000002b40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000002b80), 0x64400, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000003240)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}, 0x15208, 0x0, 0x0, 0x0, 0x1}, r5, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(r5, &(0x7f00000032c0)='ns/ipc\x00') r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002bc0)={0x6, 0x4, &(0x7f0000002c80)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f0000002cc0)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000002d00)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000002d80)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8004, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x4, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002e00)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000002e80)="76ea0900bce100000000009ba56a", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002ec0)={&(0x7f0000002f00)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000002f80)=[{&(0x7f0000002fc0)="7a03020001f300000600002fb96dbcf706e10500000086ddffff1144ee0000d4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000003c21880b000000000000721a5dbb56a3d9e16e7c4079c9b5b24722944820e635fc5bd443bdee6a9ce7d767c54f189b07d0822ca4232c98a9936ba722475ca52c16f89b0f2751fefa1d755437878615f37c3b3bb45304e5b76dd27e089b596adc0e126cbd802c70b6fa954a7040b8eec6253f7e06df82ab5df4c71f60da024b09c139e418877d", 0xc6}, {&(0x7f00000030c0)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65e0d33330e2ef36205dd154e363bcadf8f2ea93f45503b5d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00000000000000000000000000000083b5902889ba", 0x8c}], 0x2}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000003180)={r4, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000003200)="b9ffddc1ddcccdf175537d53888edfcef6e296510cff24fc83423368", 0x0, 0x600, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8946, &(0x7f0000001d00)) socketpair(0x10, 0x3, 0xe, &(0x7f0000001d40)) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001b00)={0x1b, 0x0, 0x0, 0x7ff, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001c00)={0x17, 0x16, &(0x7f0000000440)=@raw=[@printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}, @map_fd={0x18, 0x7, 0x1, 0x0, r1}, @call={0x85, 0x0, 0x0, 0x11}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x7}], &(0x7f0000000500)='syzkaller\x00', 0x7fff, 0x8c, &(0x7f0000000540)=""/140, 0x41100, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, r2, 0x8, &(0x7f00000007c0)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000800)={0x2, 0x5, 0xffffffff, 0xd}, 0x10, 0x0, r3, 0x4, &(0x7f0000001b80)=[r8, 0x1], &(0x7f0000001bc0)=[{0x4, 0x3, 0xb, 0x9}, {0x4, 0x3, 0xd, 0xc}, {0x4, 0x2, 0x0, 0x6}, {0x3, 0x2, 0x5, 0xc}], 0x10, 0x3}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="12000000060000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r9, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1e, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000fcff18110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_lookup, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x7, 0xc, &(0x7f0000000380)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x84}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) 14.214773379s ago: executing program 2 (id=9624): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8050, 0x4, 0x43a1bd76, 0x5, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$kcm(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xd, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000b00)={r2}, 0xc) r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x3d, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfef8}, 0x94) r4 = socket$kcm(0x2, 0x922000000001, 0x106) sendmsg$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="02", 0x1}, {0x0}], 0x2}, 0x0) setsockopt$sock_attach_bpf(r4, 0x29, 0x32, 0x0, 0x0) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0x1f, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r6, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000ac0), 0xc) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 8.02396688s ago: executing program 1 (id=9653): perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0xa, 0x1c, &(0x7f0000000580)=ANY=[@ANYBLOB="bf16000000000000b702000000000000732af8ff000000007b2af0ff000000007b2ae8ff000000007b2ae0ff000000007b2ad8ff000000007b2ad0ff000000007b2ac803000000007b2ac0ff00000000b702000002000000732ac0ff00000000b702000001000000632ac4ff00000000180200000a2000010000000000000000632accff00000000180200000a0000020000000000000000632ac0ff00000000bf61000000000100bfa200000000000007020000c0ffffffb703000040000000b7040000000000008500000045000000b700000002000000957d0b"], &(0x7f00000011c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0xa, 0x1c, &(0x7f0000000580)=ANY=[@ANYBLOB="bf16000000000000b702000000000000732af8ff000000007b2af0ff000000007b2ae8ff000000007b2ae0ff000000007b2ad8ff000000007b2ad0ff000000007b2ac803000000007b2ac0ff00000000b702000002000000732ac0ff00000000b702000001000000632ac4ff00000000180200000a2000010000000000000000632accff00000000180200000a0000020000000000000000632ac0ff00000000bf61000000000100bfa200000000000007020000c0ffffffb703000040000000b7040000000000008500000045000000b700000002000000957d0b"], &(0x7f00000011c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x18, 0x7, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10003, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x401, 0x1}, 0x0, 0xf, 0x0, 0x0, 0x0, 0x3ff, 0x3, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10003, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x401, 0x1}, 0x0, 0xf, 0x0, 0x0, 0x0, 0x3ff, 0x3, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = socket$kcm(0x25, 0x1, 0x0) sendmsg$kcm(r4, &(0x7f0000000cc0)={0x0, 0x0, 0x0}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x4904100, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) syz_clone(0x2000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) (async) r7 = socket$kcm(0x29, 0x2, 0x0) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r9 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r9, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="5c6fe21b324f78e6a757b75774b1eaf349f52584e21bf50bcbf1739bf8076a72399035313a8f37ff6c1d12cdedfb8c197adde3fa47a273b0a57340a8bc0df32d43e6b3a47f2ef9b6846bfc9fcbff22f1e0d9fa755d4747a44dac207bb53279ed56ee2ef618d9eefc83db"], 0x18}, 0x0) sendmsg$kcm(r9, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x2, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800009298296e5f0c4802fc6c9c00000000001001000001"], 0x18}, 0x0) (async) sendmsg$kcm(r9, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x2, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800009298296e5f0c4802fc6c9c00000000001001000001"], 0x18}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f0000000040)={r8, r5}) bpf$ITER_CREATE(0x21, &(0x7f00000001c0)={r8}, 0x8) perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0xa) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r10) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 5.818763548s ago: executing program 1 (id=9656): r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xffff0001, '\x00', 0x0, r0, 0x4, 0x1}, 0x50) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x0, 0x9, 0x3, 0xaaf04684de878bda, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x4000000000002009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x180, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x800, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) write$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x12) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x8, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x0, 0x1800}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 5.579012303s ago: executing program 1 (id=9658): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) socket$kcm(0x2, 0x200000000000001, 0x106) r0 = socket$kcm(0x2, 0x3, 0x84) close(0xffffffffffffffff) r1 = socket$kcm(0x2b, 0x1, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x8400, 0x5, 0x3, 0xaaf04684de878bda, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0500000001000000400000000500000041000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000300)={r2, 0x0, &(0x7f0000000340)=""/31}, 0x20) r3 = socket$kcm(0x10, 0x2, 0x4) close(r3) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05000000040000000400000005"], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xd, &(0x7f0000000b40)=ANY=[@ANYBLOB="18000000080000000000000000000080850000000f00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000725e85000000010000"], &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000c00)={r5}, 0xc) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(r6, &(0x7f00000004c0)=0x8000000000000000, 0x12) ioctl$SIOCSIFHWADDR(r6, 0x4030582b, &(0x7f0000000500)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc, 0x8}}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r6, 0x4008240b, &(0x7f0000000540)={0x1, 0x80, 0x8, 0x74, 0x9, 0x3, 0x0, 0xf7b, 0x82240, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xc96, 0x2, @perf_bp={&(0x7f0000000640), 0xa}, 0xc090, 0x6, 0x5, 0x6, 0x1000, 0x5, 0x8a, 0x0, 0x8, 0x0, 0x100000000}) socket$kcm(0xa, 0x6, 0x0) close(r1) sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f00000006c0)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, 0x0, 0x0, 0x0, 0x48}, 0x20028814) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_lsm={0x6, 0x3, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000880)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000008c0)={r7, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r7, 0x5, 0xe, 0x0, &(0x7f00000009c0)="39b5903e6251964922c666d4692a", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x9}, 0x50) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYBLOB], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.504299121s ago: executing program 4 (id=9661): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) close(r0) r1 = socket$kcm(0x2b, 0x1, 0x0) close(r1) socket$kcm(0x2, 0x3, 0x84) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000080), 0x2cb) close(r1) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0xa, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0xfffffffd, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000180)='cgroup\x00'}, 0x30) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000003c0), 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="380009100010000065ab3a59e0009619eb1bb72b", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000000000000400"/28], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="0e000000040000000400000003"], 0x48) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x5, 0x12) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d00)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x15, 0x1c, &(0x7f0000000e40)=ANY=[@ANYBLOB="1808000060000000000000000000008018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc0908000000000035090100000000009500000000070000b7020000000000007b9a00fe000000006609000000000000dbaaf0ff50000000bf8620000000000007080000f8ffffffbfa400000000000007040000f0ffffff770000000800000018220000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000180000084609f0ff76000000bf9820000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000f40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.451310247s ago: executing program 1 (id=9662): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8050, 0x4, 0x43a1bd76, 0x5, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$kcm(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xd, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000b00)={r2}, 0xc) r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x3d, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfef8}, 0x94) r4 = socket$kcm(0x2, 0x922000000001, 0x106) sendmsg$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="02", 0x1}, {0x0}], 0x2}, 0x0) setsockopt$sock_attach_bpf(r4, 0x29, 0x32, 0x0, 0x0) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0x1f, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r6, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000ac0), 0xc) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 2.41155193s ago: executing program 4 (id=9663): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)="d8000000580081044e81f782db44b904021d080009000200df55a1180015000600142603600e120900210000000401a80016000a00014006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7ce5e61fd3acff96ceec14f80080000000000000048ee4bf3b6e0d869d8dc531f4d1030547aa25de38d1c77d5ab0500132afde1da60d6318e627abae3b924ae1f8c828e38f4125292761f3f16288f98aec5d7d283696d596878b5cf1249d18526d44ed41109b1158c", 0xd2}], 0x1}, 0x42880) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xaf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x801000, 0x0, 0xfffffffffffffdaa, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000500)="630b00dcb95b0e4afdb20104bb4e", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="08000000040000000400000000000000b58450d0c9d888e89d29cf7b8b1b66f097c15109b6a4b2646e6883ccc3b288c05cf7a6607cde2673d6889ffe2e7ffdce496b15", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x26, 0xc, 0x0, 0x0, 0x0, 0x9, 0x242b9, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x382a, 0xffffffffffff0001}, 0x8000, 0x3, 0x43a1bd76, 0x7, 0x9, 0x658, 0x1, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x20800, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x336) close(r4) 1.796520554s ago: executing program 1 (id=9664): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xd040, 0x10000}, 0x14403, 0xfffc, 0x0, 0x5, 0x582, 0x20005, 0x8, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000280)='ns/net\x00') ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x40049409, 0x5) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) socket$kcm(0x10, 0x2, 0x4) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$kcm(0x2b, 0x1, 0x0) close(r4) r5 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r5, &(0x7f0000000100)={&(0x7f0000000900)=@in6={0xa, 0x0, 0x0, @dev, 0x2}, 0xff32, 0x0}, 0xe07e872420dfefca) recvmsg$kcm(r4, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000a00)=""/124, 0x7c}], 0x1}, 0x100) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r3, 0xffffffffffffffff}, &(0x7f0000000440), &(0x7f0000000540)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000580)={r6}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3, 0x11, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000000000000000400008500000018000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000500000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000840)={r7, 0x18000000000002a0, 0x48, 0x62, &(0x7f00000008c0)="b9ff03075fe9008cb89e08e086dd", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x28) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) 1.793903295s ago: executing program 4 (id=9671): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="bb00000031000b63ddd2806c8c6f94f903f4b76ffa24fc60100003000a00020005358ac137800500026ced000300", 0x2e}, {&(0x7f0000000140)="c512603b5c247ac97270d2d9f9e3a774644b37ffa4c38bc5ac41e6569c22f21809625db64973a31646a005a85e988285af8f70ec763129dac5d3c4e5e28b003aec39da77a70fcc3aec02c9d2148fa6edc37169089bf94207176394", 0x5b}, {&(0x7f0000000380)="e166186d6cb0b5b1d6ffadb2be01b8263d3abab0c802ff3938203ba118ca79aec5641d631a209c4a807a66d32c93d6258379", 0x32}], 0x3}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xd, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000b00)={r2}, 0xc) r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x3d, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfef8}, 0x94) r4 = socket$kcm(0x2, 0x922000000001, 0x106) sendmsg$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="02", 0x1}, {0x0}], 0x2}, 0x0) setsockopt$sock_attach_bpf(r4, 0x29, 0x32, 0x0, 0x0) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0x1f, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r6, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000ac0), 0xc) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 1.700022584s ago: executing program 3 (id=9665): r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xffff0001, '\x00', 0x0, r0, 0x4, 0x1}, 0x50) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x0, 0x9, 0x3, 0xaaf04684de878bda, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x4000000000002009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x180, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x800, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) write$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x12) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x8, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x0, 0x2000}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.35288122s ago: executing program 3 (id=9666): r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000200)='cpu&\t\t') ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000240)='\x00') bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000800)={&(0x7f0000000840)=@hci={0x1f, 0x4788, 0x37}, 0x80, 0x0}, 0x4000080) r2 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f0000000040)=@in={0x2, 0x4e21, @remote}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000100)='@', 0x1}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000008400000005"], 0x18}, 0x41) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x2c0000000}, 0x115905, 0x4, 0x0, 0x7, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_clone(0x1000880, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fb, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x1, 0x2020007, 0xec49, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x15, 0x1, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)=[{0x0}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x11) r3 = perf_event_open(&(0x7f00000008c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) socket$kcm(0xa, 0x1, 0x0) r4 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001980)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000001a40)=[{0x5}, {0x1, 0x0, 0xa}]}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001a80)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001b00)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r4, 0x84, 0x7b, &(0x7f0000001b40)=r7, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x10, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="180000008b104e04004000009500"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) socket$kcm(0x10, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f00000006c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2a, 0x2, 0x0) 1.095171317s ago: executing program 4 (id=9667): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.min\x00', 0x2, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)='%pI4 \x00'}, 0x20) (async) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x7ff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x2}, 0x50) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f00000003c0)=[0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x44, &(0x7f0000000440)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x75, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001780)={0xffffffffffffffff, 0x20, &(0x7f0000001740)={&(0x7f0000000700)=""/4096, 0x1000, 0x0, &(0x7f0000001700)=""/60, 0x3c}}, 0x10) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001980)={0x6, 0x7, &(0x7f00000017c0)=@raw=[@alu={0x7, 0x0, 0xa, 0x3, 0xa, 0x40}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x200, 0x0, 0x0, 0x0, 0x2}, @ringbuf_query], &(0x7f0000001800)='GPL\x00', 0x59e, 0x1c, &(0x7f0000001840)=""/28, 0x41000, 0x11, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001880)={0x5, 0xdde, 0x5, 0x1}, 0x10, 0x0, 0x0, 0x9, 0x0, &(0x7f00000018c0)=[{0x2, 0x5, 0xf, 0xb}, {0x3, 0x3, 0x4, 0x5}, {0x0, 0x1, 0x4, 0x2}, {0x3, 0x5, 0x4, 0x9}, {0x3, 0x1, 0x3, 0xc}, {0x5, 0x4, 0x7, 0x9}, {0x4, 0x2, 0xf, 0x5}, {0x3, 0x1, 0x4, 0x1}, {0x1, 0x3, 0x5, 0xb}], 0x10, 0x8}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001ac0)={{r2, 0xffffffffffffffff}, &(0x7f0000001a40), &(0x7f0000001a80)='%pK \x00'}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001b80)={0x1c, 0x11, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3c10, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@ldst={0x2, 0x0, 0x6, 0x2, 0x3, 0xffffffffffffffc0, 0xffffffffffffffff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}]}, &(0x7f0000000280)='syzkaller\x00', 0x617c3f4c, 0x83, &(0x7f00000002c0)=""/131, 0x41000, 0x1, '\x00', r4, @fallback=0x6, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x4, 0x5}, 0x8, 0x10, &(0x7f00000006c0)={0x2, 0x7, 0x1, 0x2}, 0x10, r5, r6, 0x1, &(0x7f0000001b00)=[r2, r2, r7, r2, r2], &(0x7f0000001b40)=[{0x5, 0x4, 0x6, 0xb}], 0x10, 0x8}, 0x94) (async, rerun: 64) r9 = getpid() (rerun: 64) r10 = perf_event_open(&(0x7f0000001d00)={0x1, 0x80, 0xb, 0x8, 0x5, 0x8, 0x0, 0x4, 0x800, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x7, 0xb09}, 0x102088, 0x100, 0x413, 0x1, 0x2, 0x80000000, 0x9, 0x0, 0x2, 0x0, 0x6}, 0x0, 0x4, 0xffffffffffffffff, 0x2) r11 = perf_event_open(&(0x7f0000001c80)={0x5, 0x80, 0x2, 0x7f, 0x40, 0x80, 0x0, 0x5, 0x80000, 0x4, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7fff, 0x2, @perf_bp={&(0x7f0000001c40)}, 0x4503, 0x5, 0x7, 0x3, 0x7, 0x8001, 0x80, 0x0, 0x8, 0x0, 0xfffffffffffffff1}, r9, 0xb, r10, 0x8) (async) r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001f40)={&(0x7f0000001d80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7f, 0x7f, 0x3, [@datasec={0x6, 0x6, 0x0, 0xf, 0x3, [{0x2, 0x0, 0x3aa01b47}, {0x4, 0x6, 0x6}, {0x3, 0x7, 0x10000}, {0x2, 0x7, 0xf}, {0x4, 0x101, 0x2}, {0x3, 0x8, 0xf730}], "dc5aa8"}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x4, 0xffffff7f}}, @int={0xd, 0x0, 0x0, 0x1, 0x8, 0x1f, 0x0, 0x6, 0x5}]}, {0x0, [0x30]}}, &(0x7f0000001e40)=""/216, 0x9b, 0xd8, 0x1, 0x4}, 0x28) r13 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001f80)={0x1b, 0x0, 0x0, 0x40, 0x0, r3, 0x0, '\x00', r4, r12, 0x0, 0x3}, 0x50) ioctl$PERF_EVENT_IOC_PERIOD(r11, 0x40082404, &(0x7f0000002000)=0xa8ee) (async) r14 = bpf$ITER_CREATE(0x21, &(0x7f0000002040)={r1}, 0x8) ioctl$TUNSETVNETHDRSZ(r14, 0x400454d8, &(0x7f0000002080)=0x10) (async) r15 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002340)={&(0x7f00000022c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@type_tag={0xa, 0x0, 0x0, 0x12, 0x3}, @ptr={0x8, 0x0, 0x0, 0x2, 0x3}]}, {0x0, [0x61, 0x30]}}, &(0x7f0000002300)=""/22, 0x34, 0x16, 0x0, 0x101}, 0x28) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002440)={{r14, 0xffffffffffffffff}, &(0x7f00000023c0), &(0x7f0000002400)=r8}, 0x20) r17 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000002480)={0xffffffffffffffff, 0x14, 0x18}, 0xc) r18 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002540)={0x6, 0x1d, &(0x7f00000020c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x3ff}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@map_idx_val={0x18, 0xb, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}, @map_fd={0x18, 0xb, 0x1, 0x0, r3}, @map_fd={0x18, 0x4, 0x1, 0x0, r3}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfb}, @tail_call={{0x18, 0x2, 0x1, 0x0, r14}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000021c0)='syzkaller\x00', 0x0, 0x83, &(0x7f0000002200)=""/131, 0x41000, 0x0, '\x00', r4, 0x25, r15, 0x8, &(0x7f0000002380)={0x6, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000024c0)=[r16, r13, r14, r13, r2, r17, r13, r13, r13], &(0x7f0000002500)=[{0x2, 0x4, 0x10, 0x1}], 0x10, 0x7fffffff}, 0x94) (async) r19 = openat$tun(0xffffffffffffff9c, &(0x7f0000002600), 0x400, 0x0) (async) r20 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002640)='./cgroup.net/syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r20, &(0x7f0000002680)='syz1\x00', 0x1ff) r21 = openat$cgroup_freezer_state(r14, &(0x7f00000026c0), 0x2, 0x0) openat$cgroup_freezer_state(r19, &(0x7f0000002700), 0x2, 0x0) (async, rerun: 64) write$cgroup_pid(r14, &(0x7f0000002740)=r9, 0x12) (async, rerun: 64) ioctl$TUNGETIFF(r21, 0x800454d2, &(0x7f0000002780)={'vlan1\x00'}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000027c0)={@map=r7, r18, 0x20, 0x2020, r6, @void, @void, @value=0xffffffffffffffff}, 0x20) (async) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000002a80)={0xffffffffffffffff, r6, 0x4}, 0x10) 1.022682374s ago: executing program 3 (id=9668): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x10162) syz_clone(0x160480, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) 768.220001ms ago: executing program 3 (id=9669): r0 = syz_clone(0x101000, &(0x7f0000000000)="4f35b2e2fcf11bdafc8ffbeb9d678327553fbde9798457e4c9a59c1ac47e5c88beac276f8a4c593bf3db28cdbc9ca56216e9bba3cf89ecaef4727697c7bec92148342f452f6e65d1027cfc8d3c7731451eae1a805793aa11902f604f730ddd89ee11fd5a751feed3151035952d0d83402e294654cadaab171f9c9853b2ebac0339a803a13f7110bb3fc9fcc6cd4bda51edbcea0432397bf5ffe641e813108ce53614aad66efb581a4e8b7caa3e283b1ee134305dcba8df5f1ab3835489e4190b8d8f622089c0dd3f2bd65c45b172036c850ff78cbaf92090e1b2ad8d49731ee9515060ad16567fd9a60f", 0xea, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="8c0ecf33439110dc52ee6fb12cf7ab930ab4edafe096ea1d3a724aa2583e9a9b54075cde4be94206271505395ee4d492c0db50ff656c315cad85a73553a8b9a4") bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r0, 0xffffffffffffffff, 0x0, 0x6, &(0x7f00000001c0)='}(-^.\x00', 0x0}, 0x30) gettid() r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz1\x00', 0x200002, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x3, [@decl_tag={0x3, 0x0, 0x0, 0x11, 0x4, 0x3}]}, {0x0, [0x61]}}, &(0x7f00000002c0)=""/103, 0x2b, 0x67, 0x0, 0x8}, 0x28) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x80, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f00000003c0)={'gre0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0x0, 0x8, 0x8}, 0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000004c0)={0x1, 0x58, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)={0x1b, 0x0, 0x0, 0x0, 0x0, r5, 0x2, '\x00', r6, r3, 0x0, 0x4, 0x3}, 0x50) r8 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000580)={r1}, 0x4) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r8) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x13, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @ldst={0x0, 0x0, 0x4, 0x3, 0x1, 0xfffffffffffffffe, 0x8}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x200}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @alu={0x7, 0x1, 0xb, 0x3, 0x3, 0x30, 0x4}]}, &(0x7f0000000680)='syzkaller\x00', 0x2, 0x4b, &(0x7f00000006c0)=""/75, 0x40f00, 0x8, '\x00', 0x0, 0x25, r3, 0x8, &(0x7f0000000740)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000780)=[r7], &(0x7f00000007c0)=[{0x1, 0x4, 0x2, 0xb}, {0x1, 0x1, 0x3, 0x1}, {0x1, 0x5, 0x7, 0x4}, {0x0, 0x3, 0xa, 0x9}, {0x3, 0x2, 0x10, 0x5}, {0x2, 0x4, 0x1, 0xb}], 0x10, 0x9}, 0x94) r10 = perf_event_open(&(0x7f0000000900)={0x0, 0x80, 0x8, 0x3, 0x2, 0x1, 0x0, 0x991, 0x8, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0xab9d, 0x2, @perf_config_ext={0x400, 0x2}, 0x400, 0x161, 0x7fff, 0x2, 0x3, 0xc54, 0xfff9, 0x0, 0x4, 0x0, 0x7}, 0x0, 0x1, 0xffffffffffffffff, 0x1) r11 = perf_event_open$cgroup(&(0x7f00000009c0)={0x0, 0x80, 0x1, 0x1, 0x6, 0x4, 0x0, 0x9, 0xa0001, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x794, 0x1, @perf_bp={&(0x7f0000000980), 0xd}, 0x150c0, 0x4000000000000000, 0x3, 0x8, 0x1ff, 0x7, 0x8, 0x0, 0x8001, 0x0, 0x7}, r2, 0x6, 0xffffffffffffffff, 0x6) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r10, 0x2405, r11) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c80)={0x6, 0x11, &(0x7f0000000a40)=@raw=[@map_val={0x18, 0x3, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x11}, @generic={0x6, 0x2, 0x1, 0x0, 0xff}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}], &(0x7f0000000b00)='syzkaller\x00', 0xc, 0x50, &(0x7f0000000b40)=""/80, 0x41100, 0x4c, '\x00', r6, 0x25, r3, 0x8, &(0x7f0000000bc0)={0x5, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000c00)=[r5, r7, r7, r5, r7, r7, r5, r5, r7], &(0x7f0000000c40)=[{0x1, 0x1, 0x2, 0x4}, {0x3, 0x4, 0x0, 0xa}, {0x0, 0x3, 0xa}, {0x2, 0x3, 0x4, 0x3}], 0x10, 0x9a}, 0x94) r12 = socket$kcm(0x29, 0x5, 0x0) sendmsg$sock(r12, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000d40)="daa5076d0e839814d3", 0x9}], 0x1, &(0x7f0000000dc0)=[@mark={{0x14, 0x1, 0x24, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x4c}}, @timestamping={{0x14, 0x1, 0x25, 0x194}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}, @mark={{0x14, 0x1, 0x24, 0x8}}], 0x78}, 0x800) r13 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000e80)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xa, '\x00', r6, r3, 0x3, 0x3}, 0x50) r14 = openat$tun(0xffffffffffffff9c, &(0x7f0000000f00), 0x2001, 0x0) ioctl$TUNSETQUEUE(r14, 0x400454d9, &(0x7f0000000f40)={'hsr0\x00', 0x200}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001280)={r9, 0xe0, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000f80)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, &(0x7f0000000fc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001000)=[0x0], 0x0, 0xdb, &(0x7f0000001040)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f00000010c0), &(0x7f0000001100), 0x8, 0x99, 0x8, 0x8, &(0x7f0000001140)}}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000012c0)={0x3, 0x4, 0x4, 0xa, 0x0, r13, 0x8059, '\x00', r15, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x50) r16 = openat$tun(0xffffffffffffff9c, &(0x7f0000001340), 0x208901, 0x0) ioctl$TUNSETQUEUE(r16, 0x400454d9, &(0x7f0000001380)={'geneve0\x00'}) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000014c0)={@ifindex=r15, 0x2, 0x0, 0x0, &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, &(0x7f0000001400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001480)}, 0x40) setsockopt$sock_attach_bpf(r12, 0x1, 0x32, &(0x7f0000001500)=r8, 0x4) ioctl$sock_kcm_SIOCKCMUNATTACH(r12, 0x89e1, &(0x7f0000001540)={r12}) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000001580)={'veth1\x00', @broadcast}) 711.544157ms ago: executing program 4 (id=9670): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) socket$kcm(0x2, 0x200000000000001, 0x106) r0 = socket$kcm(0x2, 0x1, 0x84) close(0xffffffffffffffff) r1 = socket$kcm(0x2b, 0x1, 0x0) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7f, 0x94001, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4008009, 0x2, @perf_config_ext={0xffffffffffffffff, 0x3}, 0x8400, 0x5, 0x3, 0xaaf04684de878bda, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0500000001000000400000000500000041000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000300)={r2, 0x0, &(0x7f0000000340)=""/31}, 0x20) r3 = socket$kcm(0x10, 0x2, 0x4) close(r3) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05000000040000000400000005"], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xd, &(0x7f0000000b40)=ANY=[@ANYBLOB="18000000080000000000000000000080850000000f00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000725e85000000010000"], &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000c00)={r5}, 0xc) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(r6, &(0x7f00000004c0)=0x8000000000000000, 0x12) ioctl$SIOCSIFHWADDR(r6, 0x4030582b, &(0x7f0000000500)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc, 0x8}}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r6, 0x4008240b, &(0x7f0000000540)={0x1, 0x80, 0x8, 0x74, 0x9, 0x3, 0x0, 0xf7b, 0x88201, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xc96, 0x2, @perf_bp={&(0x7f0000000640), 0xa}, 0xc090, 0x6, 0x5, 0x6, 0x1000, 0x8, 0x8a, 0x0, 0x8, 0x0, 0x100000000}) socket$kcm(0xa, 0x6, 0x0) close(r1) sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f00000006c0)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, 0x0, 0x0, 0x0, 0x48}, 0x20028814) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_lsm={0x6, 0x3, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000880)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000008c0)={r7, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r7, 0x5, 0xe, 0x0, &(0x7f00000009c0)="39b5903e6251964922c666d4692a", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x9}, 0x50) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYBLOB], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 328.002626ms ago: executing program 3 (id=9672): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x6, 0x4, 0x6, 0x10}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780), &(0x7f00000007c0), 0xfff, r1, 0x0, 0xa0028000}, 0x38) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r0, 0x58, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa5, 0xa5, 0x4, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1, 0x7}}, @union={0x7, 0x4, 0x0, 0x5, 0x0, 0xc67, [{0xd, 0x2, 0x400}, {0x6, 0x3, 0xe}, {0x8, 0x4, 0x8}, {0x3, 0x4, 0xc80000}]}, @datasec={0x4, 0x1, 0x0, 0xf, 0x1, [{0x5, 0xc}], "e4"}, @type_tag={0x7, 0x0, 0x0, 0x12, 0x2}, @enum={0xe, 0x2, 0x0, 0x6, 0x4, [{0x1, 0x4}, {0xd, 0xd582}]}, @int={0xc, 0x0, 0x0, 0x1, 0xc, 0x3a, 0x0, 0x8, 0x6}]}, {0x0, [0x30, 0x5f]}}, &(0x7f0000000300)=""/152, 0xc4, 0x98, 0x1, 0x4}, 0x28) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000800)=0xffffffffffffffff, 0x4) r5 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000840)={0x0, r3}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@arena={0x21, 0x0, 0x0, 0x20, 0x9c182ebe83bc6d9, r0, 0x6, '\x00', 0x0, r3, 0x4, 0x2, 0x3, 0x0, @value=r4, @void, @value=r5}, 0x50) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000003c0)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r6, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0x0, 0x0, &(0x7f00000004c0)='GPL\x00', 0xfffdffff, 0x82, &(0x7f0000000500)=""/130, 0x40f00, 0x4, '\x00', r2, @fallback=0x26, r3, 0x8, &(0x7f00000005c0)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0xd, 0x1, 0x1}, 0x10, r6, 0xffffffffffffffff, 0x2, &(0x7f0000000640), &(0x7f0000000680)=[{0x2, 0x3, 0x9, 0x9}, {0x4, 0x3, 0x5, 0x9}]}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x90}, [@ldst={0x2, 0x0, 0xb, 0x0, 0x0, 0xe00}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x5, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r6}, 0x94) 65.470563ms ago: executing program 1 (id=9673): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb01001800000000000000540000005400000002000000000000000100000d000000000000000004000000000000000200000d0000000000000000000000000000000000000000000000000000000d000400000000000001000084000000000000000004"], &(0x7f00000003c0)=""/15, 0x6e, 0xf, 0x1}, 0x28) (async) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r2, 0xffffffffffffffff}, &(0x7f0000000440), &(0x7f0000000480)='%-5lx \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000004c0)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3, 0x11, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000300000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r4, 0x18000000000002a0, 0x48, 0xaf, &(0x7f0000000840)="c3941108a8000000009e08e086dd3ddd5e4cf73d9da674ebca0ce0510e656d14ccecebc51c669fa2c8c63d9b60879b1691088a165b47b112d55312223baba55ec5e6a8a10196a0a7ba01d00edaa257e6dd385979ceb51787dab408dfc44e08449ec766cb0d0cb70a59b2bb6cb0b0ca626cb1b190586da7bb", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x28) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x19, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r5}, 0x94) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000780)=@generic={0x0, r6}, 0x18) 294.68µs ago: executing program 4 (id=9674): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8050, 0x4, 0x43a1bd76, 0x5, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xd, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000b00)={r2}, 0xc) r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x3d, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfef8}, 0x94) r4 = socket$kcm(0x2, 0x922000000001, 0x106) sendmsg$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="02", 0x1}, {0x0}], 0x2}, 0x0) setsockopt$sock_attach_bpf(r4, 0x29, 0x32, 0x0, 0x0) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0x1f, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r6, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000ac0), 0xc) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 0s ago: executing program 3 (id=9675): r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xffff0001, '\x00', 0x0, r0, 0x4, 0x1}, 0x50) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x0, 0x9, 0x3, 0xaaf04684de878bda, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x4000000000002009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x180, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x800, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) write$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x12) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x8, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x0, 0x4000}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) kernel console output (not intermixed with test programs): e 3 has an invalid length. [ 1587.389889][ T2385] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.8359'. [ 1587.604678][ T2391] netlink: 'syz.0.8362': attribute type 3 has an invalid length. [ 1587.633369][ T2391] netlink: 101892 bytes leftover after parsing attributes in process `syz.0.8362'. [ 1588.913122][ T2450] tap1: tun_chr_ioctl cmd 1074025677 [ 1588.927764][ T2450] tap1: linktype set to 778 [ 1589.385240][ T2472] netlink: 168 bytes leftover after parsing attributes in process `syz.3.8377'. [ 1589.523395][ T2472] validate_nla: 1 callbacks suppressed [ 1589.523529][ T2472] netlink: 'syz.3.8377': attribute type 10 has an invalid length. [ 1590.265382][ T2472] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1592.318633][ T2495] netlink: 'syz.3.8384': attribute type 2 has an invalid length. [ 1592.326549][ T2495] netlink: 'syz.3.8384': attribute type 1 has an invalid length. [ 1592.421468][ T2508] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8384'. [ 1592.762064][ T2526] netlink: 'syz.1.8389': attribute type 9 has an invalid length. [ 1592.772279][ T2526] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.8389'. [ 1593.013872][ T2531] netlink: 'syz.1.8389': attribute type 9 has an invalid length. [ 1593.022372][ T2531] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.8389'. [ 1593.041889][ T2541] netlink: 196 bytes leftover after parsing attributes in process `syz.3.8391'. [ 1593.318183][ T2548] netlink: 168 bytes leftover after parsing attributes in process `syz.1.8393'. [ 1593.382918][ T2547] netlink: 'syz.1.8393': attribute type 10 has an invalid length. [ 1593.502856][ T2547] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1594.288282][ T2583] netlink: 144 bytes leftover after parsing attributes in process `syz.3.8411'. [ 1594.493409][ T2589] netlink: 196 bytes leftover after parsing attributes in process `syz.1.8404'. [ 1594.905955][ T2608] netlink: 'syz.0.8419': attribute type 39 has an invalid length. [ 1594.931534][ T2606] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.8410'. [ 1598.149160][ T2629] netlink: 'syz.1.8415': attribute type 4 has an invalid length. [ 1598.156969][ T2629] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.8415'. [ 1598.213644][ T2625] netlink: 'syz.3.8416': attribute type 21 has an invalid length. [ 1598.444879][ T2637] netlink: 168 bytes leftover after parsing attributes in process `syz.0.8414'. [ 1598.836960][ T2637] netlink: 'syz.0.8414': attribute type 10 has an invalid length. [ 1599.393302][ T2637] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1599.552958][ T2661] netlink: 14 bytes leftover after parsing attributes in process `syz.2.8422'. [ 1600.001839][ T2675] netlink: 14207 bytes leftover after parsing attributes in process `syz.1.8425'. [ 1600.257387][ T2680] syzkaller0: entered promiscuous mode [ 1600.267151][ T2680] syzkaller0: entered allmulticast mode [ 1600.418245][ T2690] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8427'. [ 1600.421201][ T2689] netlink: 'syz.0.8428': attribute type 29 has an invalid length. [ 1600.496091][ T2690] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8427'. [ 1600.518453][ T2692] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8427'. [ 1600.549620][ T2680] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.8427'. [ 1600.559275][ T2689] netlink: 'syz.0.8428': attribute type 29 has an invalid length. [ 1600.581388][ T2691] netlink: 'syz.0.8428': attribute type 29 has an invalid length. [ 1600.612335][ T2688] netlink: 'syz.0.8428': attribute type 29 has an invalid length. [ 1602.728325][ T2689] netlink: 'syz.0.8428': attribute type 10 has an invalid length. [ 1602.736872][ T2689] veth0_vlan: entered allmulticast mode [ 1602.782850][ T2689] veth0_vlan: left promiscuous mode [ 1602.809634][ T2689] veth0_vlan: entered promiscuous mode [ 1602.827150][ T2689] team0: Device veth0_vlan failed to register rx_handler [ 1602.846177][ T2719] netlink: 'syz.3.8432': attribute type 27 has an invalid length. [ 1602.854831][ T2719] netlink: 164 bytes leftover after parsing attributes in process `syz.3.8432'. [ 1602.864288][ T2688] netlink: 'syz.0.8428': attribute type 29 has an invalid length. [ 1602.874401][ T2704] netlink: 'syz.1.8431': attribute type 10 has an invalid length. [ 1602.883122][ T2691] netlink: 830 bytes leftover after parsing attributes in process `syz.0.8428'. [ 1603.136676][ T2724] netlink: 'syz.3.8433': attribute type 9 has an invalid length. [ 1603.158669][ T2724] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.8433'. [ 1603.684532][ T2737] rxe_eth0 speed is unknown, defaulting to 1000 [ 1603.786938][ T2752] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1603.804188][ T2752] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1603.815182][ T2752] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1603.827438][ T2752] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1603.851329][ T2755] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.8439'. [ 1603.937006][ T2755] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 1603.994997][ T2757] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1604.001415][ T2757] syzkaller1: linktype set to 6 [ 1604.319907][ T2765] netlink: 'syz.1.8444': attribute type 1 has an invalid length. [ 1604.565087][ T2764] __nla_validate_parse: 39 callbacks suppressed [ 1604.565107][ T2764] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8444'. [ 1604.626669][ T2767] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.8444'. [ 1604.657725][ T2767] netlink: 16126 bytes leftover after parsing attributes in process `syz.1.8444'. [ 1604.707005][ T2767] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.8444'. [ 1604.758642][ T2764] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8444'. [ 1604.797472][ T2767] netlink: 16126 bytes leftover after parsing attributes in process `syz.1.8444'. [ 1604.824017][ T2764] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8444'. [ 1604.840057][ T2767] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.8444'. [ 1604.866916][ T2764] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8444'. [ 1604.882146][ T2767] netlink: 16126 bytes leftover after parsing attributes in process `syz.1.8444'. [ 1607.558426][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.564857][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.674597][ T2778] validate_nla: 34 callbacks suppressed [ 1607.674659][ T2778] netlink: 'syz.2.8446': attribute type 21 has an invalid length. [ 1609.602524][ T2816] __nla_validate_parse: 116 callbacks suppressed [ 1609.602544][ T2816] netlink: 144240 bytes leftover after parsing attributes in process `syz.0.8453'. [ 1609.865136][ T2826] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1609.872958][ T2826] IPv6: NLM_F_CREATE should be set when creating new route [ 1609.880876][ T2826] IPv6: NLM_F_CREATE should be set when creating new route [ 1609.888775][ T2826] IPv6: NLM_F_CREATE should be set when creating new route [ 1609.916310][ T2827] netlink: 'syz.3.8455': attribute type 9 has an invalid length. [ 1609.943057][ T2827] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.8455'. [ 1610.125974][ T2826] netlink: 'syz.3.8455': attribute type 9 has an invalid length. [ 1610.173213][ T2826] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.8455'. [ 1610.219602][ T2843] netlink: 'syz.3.8455': attribute type 9 has an invalid length. [ 1610.248220][ T2843] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.8455'. [ 1610.275367][ T2827] netlink: 'syz.3.8455': attribute type 9 has an invalid length. [ 1610.299388][ T2827] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.8455'. [ 1610.614169][ T2859] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.8461'. [ 1610.813912][ T2860] netlink: 'syz.0.8459': attribute type 10 has an invalid length. [ 1610.938040][ T2860] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1611.289066][ T2869] netlink: 'syz.0.8463': attribute type 21 has an invalid length. [ 1611.296963][ T2869] netlink: 128 bytes leftover after parsing attributes in process `syz.0.8463'. [ 1611.836749][ T2880] netlink: 144240 bytes leftover after parsing attributes in process `syz.3.8467'. [ 1613.347666][ T2900] netlink: 'syz.1.8472': attribute type 10 has an invalid length. [ 1613.420226][ T2900] bridge0: port 2(bridge_slave_1) entered disabled state [ 1613.452676][ T2900] bridge_slave_1: left allmulticast mode [ 1613.465889][ T2900] bridge_slave_1: left promiscuous mode [ 1613.474681][ T2900] bridge0: port 2(bridge_slave_1) entered disabled state [ 1613.582827][ T2900] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1613.609006][ T2907] pim6reg0: tun_chr_ioctl cmd 1074025672 [ 1613.614969][ T2907] pim6reg0: ignored: set checksum disabled [ 1617.040857][ T2917] netlink: 144240 bytes leftover after parsing attributes in process `syz.2.8477'. [ 1617.462993][ T2933] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1617.497606][ T2933] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1617.524290][ T2933] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1617.551916][ T2935] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.8483'. [ 1617.582992][ T2933] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1617.608781][ T2933] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 1617.615954][ T2933] batman_adv: batadv0: Removing interface: virt_wifi0 [ 1617.912091][ T2935] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 1618.333893][ T2947] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.8488'. [ 1618.434563][ T2947] netlink: 14 bytes leftover after parsing attributes in process `syz.1.8488'. [ 1618.506482][ T2947] hsr_slave_0: left promiscuous mode [ 1618.520761][ T2947] hsr_slave_1: left promiscuous mode [ 1618.843815][ T2952] netlink: 'syz.2.8489': attribute type 10 has an invalid length. [ 1618.915203][ T2954] netlink: 'syz.1.8490': attribute type 21 has an invalid length. [ 1618.934341][ T2954] netlink: 128 bytes leftover after parsing attributes in process `syz.1.8490'. [ 1621.088519][ T2991] netlink: 'syz.3.8500': attribute type 10 has an invalid length. [ 1621.166228][ T2994] netlink: 'syz.2.8503': attribute type 21 has an invalid length. [ 1621.704272][ T3015] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.8510'. [ 1624.374500][ T3041] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.8517'. [ 1625.746041][ T3037] netlink: 'syz.2.8516': attribute type 10 has an invalid length. [ 1625.826942][ T3037] team0: Port device wlan1 added [ 1625.958886][ T3049] netlink: 'syz.0.8519': attribute type 58 has an invalid length. [ 1625.988817][ T3049] netlink: 144 bytes leftover after parsing attributes in process `syz.0.8519'. [ 1626.030987][ T3052] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.8521'. [ 1626.183721][ T3054] rxe_eth0 speed is unknown, defaulting to 1000 [ 1626.223038][ T3062] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.8524'. [ 1626.240419][ T3059] can: request_module (can-proto-0) failed. [ 1626.304918][ T3062] netlink: 14 bytes leftover after parsing attributes in process `syz.2.8524'. [ 1626.475721][ T3062] hsr_slave_0: left promiscuous mode [ 1626.487415][ T3062] hsr_slave_1: left promiscuous mode [ 1627.053275][ T3077] netlink: 'syz.2.8527': attribute type 15 has an invalid length. [ 1627.080228][ T3077] netlink: 'syz.2.8527': attribute type 7 has an invalid length. [ 1627.093394][ T3077] netlink: 52 bytes leftover after parsing attributes in process `syz.2.8527'. [ 1627.169465][ T3082] netlink: 156 bytes leftover after parsing attributes in process `syz.3.8528'. [ 1627.469824][ T3091] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.8531'. [ 1627.546027][ T3091] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1627.561616][ T3091] CPU: 1 PID: 3091 Comm: syz.1.8531 Not tainted syzkaller #0 [ 1627.569046][ T3091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1627.579100][ T3091] Call Trace: [ 1627.582396][ T3091] [ 1627.585367][ T3091] dump_stack_lvl+0x18c/0x250 [ 1627.590057][ T3091] ? show_regs_print_info+0x20/0x20 [ 1627.595276][ T3091] ? load_image+0x420/0x420 [ 1627.599792][ T3091] sysfs_warn_dup+0x8e/0xa0 [ 1627.604311][ T3091] sysfs_do_create_link_sd+0xc0/0x110 [ 1627.609711][ T3091] device_add_class_symlinks+0x1cf/0x240 [ 1627.613253][ T3095] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.8533'. [ 1627.615419][ T3091] device_add+0x4f9/0xc40 [ 1627.629022][ T3091] wiphy_register+0x1f24/0x2c70 [ 1627.634064][ T3091] ? cfg80211_event_work+0x40/0x40 [ 1627.639297][ T3091] ? minstrel_ht_alloc+0x88a/0x990 [ 1627.644540][ T3091] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 1627.650642][ T3091] ieee80211_register_hw+0x2f3d/0x3cb0 [ 1627.656196][ T3091] ? ieee80211_register_hw+0xf61/0x3cb0 [ 1627.661770][ T3091] ? ieee80211_tasklet_handler+0x20/0x20 [ 1627.667443][ T3091] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1627.673506][ T3091] ? __debug_object_init+0xec/0x450 [ 1627.678718][ T3091] ? __asan_memset+0x22/0x40 [ 1627.683330][ T3091] ? __hrtimer_init+0x189/0x270 [ 1627.688178][ T3091] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 1627.693945][ T3091] ? mac80211_hwsim_free+0x220/0x220 [ 1627.699230][ T3091] ? rcu_is_watching+0x15/0xb0 [ 1627.704001][ T3091] ? kstrndup+0xbd/0x140 [ 1627.708268][ T3091] hwsim_new_radio_nl+0xdad/0x1a70 [ 1627.713418][ T3091] ? __nla_validate+0x50/0x50 [ 1627.718139][ T3091] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 1627.724509][ T3091] ? __nla_parse+0x40/0x50 [ 1627.728961][ T3091] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 1627.735311][ T3091] genl_family_rcv_msg_doit+0x21a/0x310 [ 1627.740877][ T3091] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 1627.746777][ T3091] ? bpf_lsm_capable+0x9/0x10 [ 1627.751448][ T3091] ? security_capable+0x89/0xb0 [ 1627.756304][ T3091] genl_rcv_msg+0x611/0x7a0 [ 1627.760820][ T3091] ? genl_bind+0x360/0x360 [ 1627.765242][ T3091] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 1627.771568][ T3091] ? ref_tracker_free+0x686/0x830 [ 1627.776592][ T3091] ? __kasan_kmalloc_large+0x8b/0xa0 [ 1627.781888][ T3091] netlink_rcv_skb+0x235/0x4c0 [ 1627.786665][ T3091] ? genl_bind+0x360/0x360 [ 1627.791084][ T3091] ? netlink_ack+0x1160/0x1160 [ 1627.795864][ T3091] ? __lock_acquire+0x7eb0/0x7eb0 [ 1627.800894][ T3091] ? down_read+0x1ac/0x2e0 [ 1627.805310][ T3091] genl_rcv+0x28/0x40 [ 1627.809292][ T3091] netlink_unicast+0x7b1/0x930 [ 1627.814074][ T3091] netlink_sendmsg+0x8d0/0xbf0 [ 1627.818890][ T3091] ? netlink_getsockopt+0x590/0x590 [ 1627.824085][ T3091] ? apparmor_socket_sendmsg+0x8e/0x330 [ 1627.829654][ T3091] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1627.834956][ T3091] ? security_socket_sendmsg+0x80/0xa0 [ 1627.840429][ T3091] ? netlink_getsockopt+0x590/0x590 [ 1627.845640][ T3091] ____sys_sendmsg+0x61b/0x980 [ 1627.850411][ T3091] ? __asan_memset+0x22/0x40 [ 1627.855004][ T3091] ? __sys_sendmsg_sock+0x30/0x30 [ 1627.860046][ T3091] ? __import_iovec+0x5f2/0x850 [ 1627.864907][ T3091] ? import_iovec+0x73/0xa0 [ 1627.869428][ T3091] ___sys_sendmsg+0x2a6/0x360 [ 1627.874126][ T3091] ? __sys_sendmsg+0x2b0/0x2b0 [ 1627.878932][ T3091] __se_sys_sendmsg+0x1d0/0x2c0 [ 1627.883802][ T3091] ? __x64_sys_sendmsg+0x80/0x80 [ 1627.888748][ T3091] ? lockdep_hardirqs_on+0x98/0x150 [ 1627.893971][ T3091] do_syscall_64+0x55/0xb0 [ 1627.898387][ T3091] ? clear_bhb_loop+0x40/0x90 [ 1627.903066][ T3091] ? clear_bhb_loop+0x40/0x90 [ 1627.907747][ T3091] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1627.913639][ T3091] RIP: 0033:0x7f9efbb9f559 [ 1627.918058][ T3091] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1627.937672][ T3091] RSP: 002b:00007f9efca08028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1627.946081][ T3091] RAX: ffffffffffffffda RBX: 00007f9efbe25fa0 RCX: 00007f9efbb9f559 [ 1627.954049][ T3091] RDX: 0000000000000000 RSI: 00002000000011c0 RDI: 0000000000000003 [ 1627.962016][ T3091] RBP: 00007f9efbc36b20 R08: 0000000000000000 R09: 0000000000000000 [ 1627.969983][ T3091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1627.977958][ T3091] R13: 00007f9efbe26038 R14: 00007f9efbe25fa0 R15: 00007fff01a33288 [ 1627.985950][ T3091] [ 1629.147241][ T3117] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1629.243935][ T3130] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.8542'. [ 1629.590306][ T3140] __nla_validate_parse: 1 callbacks suppressed [ 1629.590324][ T3140] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.8545'. [ 1629.668780][ T3144] netlink: 763 bytes leftover after parsing attributes in process `syz.2.8546'. [ 1629.946221][ T3151] netlink: 'syz.0.8549': attribute type 27 has an invalid length. [ 1629.954963][ T3151] netlink: 164 bytes leftover after parsing attributes in process `syz.0.8549'. [ 1630.204709][ T3164] netlink: 180 bytes leftover after parsing attributes in process `syz.1.8551'. [ 1630.326892][ T3174] netlink: 'syz.3.8555': attribute type 21 has an invalid length. [ 1630.341389][ T3174] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1630.348765][ T3174] IPv6: NLM_F_CREATE should be set when creating new route [ 1630.356108][ T3174] IPv6: NLM_F_CREATE should be set when creating new route [ 1630.363942][ T3174] IPv6: NLM_F_CREATE should be set when creating new route [ 1630.562467][ T3187] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.8557'. [ 1631.392250][ T3198] netlink: 'syz.1.8569': attribute type 29 has an invalid length. [ 1631.418357][ T3198] netlink: 'syz.1.8569': attribute type 29 has an invalid length. [ 1631.961357][ T3227] netlink: 61211 bytes leftover after parsing attributes in process `syz.3.8572'. [ 1632.335776][ T3234] netlink: set zone limit has 8 unknown bytes [ 1633.042467][ T3262] netlink: 196 bytes leftover after parsing attributes in process `syz.1.8583'. [ 1633.237104][ T3267] netlink: 'syz.0.8584': attribute type 21 has an invalid length. [ 1633.253855][ T3267] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8584'. [ 1634.820142][ T3288] netlink: 'syz.0.8590': attribute type 10 has an invalid length. [ 1634.848626][ T3290] netlink: 'syz.0.8590': attribute type 2 has an invalid length. [ 1634.856414][ T3290] netlink: 'syz.0.8590': attribute type 8 has an invalid length. [ 1634.897585][ T3290] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8590'. [ 1634.960408][ T3290] netlink: 'syz.0.8590': attribute type 2 has an invalid length. [ 1634.998270][ T3290] netlink: 'syz.0.8590': attribute type 8 has an invalid length. [ 1635.007060][ T3290] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8590'. [ 1635.022873][ T3290] netlink: 'syz.0.8590': attribute type 2 has an invalid length. [ 1635.030951][ T3290] netlink: 'syz.0.8590': attribute type 8 has an invalid length. [ 1635.043190][ T3290] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8590'. [ 1635.075735][ T3290] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8590'. [ 1635.147792][ T3290] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8590'. [ 1635.184284][ T3290] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8590'. [ 1635.228986][ T3290] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8590'. [ 1635.241020][ T3290] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8590'. [ 1635.254099][ T3290] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8590'. [ 1635.265852][ T3290] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8590'. [ 1636.066351][ T3323] syzkaller0: entered promiscuous mode [ 1636.072248][ T3323] syzkaller0: entered allmulticast mode [ 1636.318426][ T3328] veth0_vlan: left promiscuous mode [ 1636.370091][ T3328] veth0_vlan: left allmulticast mode [ 1636.380980][ T3328] veth0_vlan: entered promiscuous mode [ 1636.395704][ T3328] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 1636.506238][ T3337] validate_nla: 23 callbacks suppressed [ 1636.506256][ T3337] netlink: 'syz.0.8607': attribute type 7 has an invalid length. [ 1638.352676][ T3391] netlink: 'syz.2.8620': attribute type 2 has an invalid length. [ 1638.368311][ T3391] netlink: 'syz.2.8620': attribute type 8 has an invalid length. [ 1639.199265][ T3415] netlink: 'syz.3.8632': attribute type 19 has an invalid length. [ 1641.498666][ T3465] netlink: 'syz.0.8656': attribute type 6 has an invalid length. [ 1641.506800][ T3465] __nla_validate_parse: 11 callbacks suppressed [ 1641.506814][ T3465] netlink: 140 bytes leftover after parsing attributes in process `syz.0.8656'. [ 1641.579701][ T3467] netlink: 'syz.1.8659': attribute type 2 has an invalid length. [ 1641.590556][ T3467] netlink: 'syz.1.8659': attribute type 8 has an invalid length. [ 1641.600282][ T3467] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8659'. [ 1643.410474][ T3506] netlink: 'syz.3.8663': attribute type 11 has an invalid length. [ 1643.419344][ T3506] netlink: 168 bytes leftover after parsing attributes in process `syz.3.8663'. [ 1651.889506][ T3619] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8694'. [ 1653.283039][ T3675] FAULT_INJECTION: forcing a failure. [ 1653.283039][ T3675] name failslab, interval 1, probability 0, space 0, times 0 [ 1653.317925][ T3675] CPU: 1 PID: 3675 Comm: syz.3.8709 Not tainted syzkaller #0 [ 1653.325382][ T3675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1653.335460][ T3675] Call Trace: [ 1653.338758][ T3675] [ 1653.341702][ T3675] dump_stack_lvl+0x18c/0x250 [ 1653.346413][ T3675] ? show_regs_print_info+0x20/0x20 [ 1653.351632][ T3675] ? load_image+0x420/0x420 [ 1653.356157][ T3675] ? trace_call_bpf+0xc3/0x6c0 [ 1653.360938][ T3675] ? trace_call_bpf+0xc3/0x6c0 [ 1653.365733][ T3675] should_fail_ex+0x394/0x4c0 [ 1653.370439][ T3675] should_failslab+0x9/0x20 [ 1653.374956][ T3675] slab_pre_alloc_hook+0x59/0x300 [ 1653.380013][ T3675] kmem_cache_alloc_node+0x5e/0x320 [ 1653.385227][ T3675] ? __alloc_skb+0x103/0x2c0 [ 1653.389848][ T3675] __alloc_skb+0x103/0x2c0 [ 1653.394291][ T3675] tipc_msg_create+0x4a/0x4c0 [ 1653.399070][ T3675] ? tipc_node_remove_conn+0x28c/0x3d0 [ 1653.404560][ T3675] __tipc_shutdown+0xe9f/0x1590 [ 1653.409543][ T3675] ? tipc_recvstream+0xe90/0xe90 [ 1653.414503][ T3675] ? wait_woken+0x180/0x180 [ 1653.419027][ T3675] ? _local_bh_enable+0xa0/0xa0 [ 1653.423916][ T3675] tipc_release+0x2fd/0x20e0 [ 1653.428532][ T3675] ? ima_get_current_hash_algo+0x10/0x10 [ 1653.434209][ T3675] ? tipc_sock_destruct+0x180/0x180 [ 1653.439422][ T3675] ? down_write+0x16e/0x200 [ 1653.443942][ T3675] ? down_read_killable+0x340/0x340 [ 1653.449181][ T3675] sock_close+0xa7/0x210 [ 1653.453443][ T3675] ? sock_mmap+0xa0/0xa0 [ 1653.457703][ T3675] __fput+0x221/0x940 [ 1653.461732][ T3675] __se_sys_close+0x15c/0x1e0 [ 1653.466432][ T3675] do_syscall_64+0x55/0xb0 [ 1653.470863][ T3675] ? clear_bhb_loop+0x40/0x90 [ 1653.475556][ T3675] ? clear_bhb_loop+0x40/0x90 [ 1653.480261][ T3675] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1653.486176][ T3675] RIP: 0033:0x7f8c3179f559 [ 1653.490608][ T3675] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1653.510232][ T3675] RSP: 002b:00007f8c3268d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1653.518667][ T3675] RAX: ffffffffffffffda RBX: 00007f8c31a25fa0 RCX: 00007f8c3179f559 [ 1653.526656][ T3675] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 1653.534647][ T3675] RBP: 00007f8c3268d090 R08: 0000000000000000 R09: 0000000000000000 [ 1653.542635][ T3675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1653.550618][ T3675] R13: 00007f8c31a26038 R14: 00007f8c31a25fa0 R15: 00007fff8013a1e8 [ 1653.558644][ T3675] [ 1654.162366][ T3703] netlink: 14 bytes leftover after parsing attributes in process `syz.2.8718'. [ 1654.248270][ T3703] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1654.293793][ T3703] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1654.337034][ T3703] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 1654.350043][ T3703] bond0 (unregistering): Released all slaves [ 1656.076927][ T3764] rxe_eth0 speed is unknown, defaulting to 1000 [ 1656.735104][ T3789] netlink: 212424 bytes leftover after parsing attributes in process `syz.3.8747'. [ 1657.578141][ T3810] netlink: 'syz.0.8752': attribute type 10 has an invalid length. [ 1657.832483][ T3817] mac80211_hwsim hwsim370 wlan0: entered promiscuous mode [ 1657.916561][ T3817] mac80211_hwsim hwsim370 wlan0: entered allmulticast mode [ 1659.074527][ T3847] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.8762'. [ 1659.114912][ T3850] netlink: 'syz.1.8764': attribute type 10 has an invalid length. [ 1659.399127][ T3857] netlink: 'syz.3.8766': attribute type 10 has an invalid length. [ 1659.845942][ T3880] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.8773'. [ 1660.339569][ T3888] pimreg: tun_chr_ioctl cmd 1074025677 [ 1660.354727][ T3888] pimreg: linktype set to 774 [ 1660.372796][ T3888] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8775'. [ 1660.411985][ T3888] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8775'. [ 1660.451540][ T3887] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8775'. [ 1660.525312][ T3891] netlink: 'syz.1.8776': attribute type 3 has an invalid length. [ 1660.559536][ T3891] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.8776'. [ 1661.260804][ T3904] netlink: 'syz.1.8780': attribute type 10 has an invalid length. [ 1661.950045][ T3919] netlink: 'syz.3.8786': attribute type 21 has an invalid length. [ 1661.980483][ T3919] netlink: 156 bytes leftover after parsing attributes in process `syz.3.8786'. [ 1662.089855][ T3919] A link change request failed with some changes committed already. Interface Q±6ã`Ò˜ may have been left with an inconsistent configuration, please check. [ 1662.115983][ T3933] netlink: 'syz.2.8792': attribute type 41 has an invalid length. [ 1662.130100][ T3933] netlink: 'syz.2.8792': attribute type 41 has an invalid length. [ 1662.499304][ T3941] netlink: 'syz.2.8795': attribute type 10 has an invalid length. [ 1662.947291][ T3957] netlink: 'syz.2.8802': attribute type 21 has an invalid length. [ 1662.958934][ T3957] netlink: 156 bytes leftover after parsing attributes in process `syz.2.8802'. [ 1663.040523][ T3957] A link change request failed with some changes committed already. Interface Q±6ã`Ò˜ may have been left with an inconsistent configuration, please check. [ 1663.680778][ T3975] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.8810'. [ 1663.728192][ T3975] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8810'. [ 1664.225054][ T3997] netlink: 'syz.0.8816': attribute type 21 has an invalid length. [ 1664.257292][ T3997] netlink: 156 bytes leftover after parsing attributes in process `syz.0.8816'. [ 1664.288660][ T4003] A link change request failed with some changes committed already. Interface Q±6ã`Ò˜ may have been left with an inconsistent configuration, please check. [ 1664.704374][ T4009] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.8820'. [ 1664.715111][ T4009] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8820'. [ 1664.848304][ T4020] netlink: 'syz.3.8824': attribute type 10 has an invalid length. [ 1664.856191][ T4020] netlink: 55 bytes leftover after parsing attributes in process `syz.3.8824'. [ 1665.055791][ T4020] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 1665.095978][ T4020] batman_adv: batadv0: Removing interface: virt_wifi0 [ 1665.108150][ T4020] batman_adv: batadv0: Removing interface: veth1_virt_wifi [ 1665.144846][ T4034] ipvlan1: entered promiscuous mode [ 1665.150383][ T4034] ipvlan1: entered allmulticast mode [ 1665.181240][ T4020] netlink: 'syz.3.8824': attribute type 10 has an invalid length. [ 1665.189798][ T4020] netlink: 55 bytes leftover after parsing attributes in process `syz.3.8824'. [ 1665.217368][ T4020] netlink: 'syz.3.8824': attribute type 10 has an invalid length. [ 1665.238171][ T4020] netlink: 55 bytes leftover after parsing attributes in process `syz.3.8824'. [ 1665.249971][ T4020] netlink: 'syz.3.8824': attribute type 10 has an invalid length. [ 1665.261853][ T4020] netlink: 55 bytes leftover after parsing attributes in process `syz.3.8824'. [ 1665.279434][ T4020] netlink: 'syz.3.8824': attribute type 10 has an invalid length. [ 1665.290775][ T4020] netlink: 55 bytes leftover after parsing attributes in process `syz.3.8824'. [ 1665.301564][ T4020] netlink: 'syz.3.8824': attribute type 10 has an invalid length. [ 1665.322231][ T4020] netlink: 55 bytes leftover after parsing attributes in process `syz.3.8824'. [ 1665.332371][ T4040] netlink: 192436 bytes leftover after parsing attributes in process `syz.1.8829'. [ 1665.352302][ T4040] openvswitch: netlink: Duplicate key (type 0). [ 1665.359644][ T4020] netlink: 'syz.3.8824': attribute type 10 has an invalid length. [ 1665.387798][ T4020] netlink: 'syz.3.8824': attribute type 10 has an invalid length. [ 1668.409884][ T4156] bridge_slave_1: default FDB implementation only supports local addresses [ 1668.479562][ T4158] validate_nla: 58 callbacks suppressed [ 1668.479581][ T4158] netlink: 'syz.3.8871': attribute type 10 has an invalid length. [ 1669.003355][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.016062][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1672.432041][ T4201] netlink: 'syz.3.8886': attribute type 10 has an invalid length. [ 1672.857070][ T4219] vlan0: entered promiscuous mode [ 1672.864625][ T4219] vlan0: entered allmulticast mode [ 1672.869927][ T4219] veth0_vlan: entered allmulticast mode [ 1672.912876][ T4222] __nla_validate_parse: 69 callbacks suppressed [ 1672.912896][ T4222] netlink: 14 bytes leftover after parsing attributes in process `syz.2.8894'. [ 1672.924403][ T4219] netlink: 'syz.1.8893': attribute type 1 has an invalid length. [ 1672.936904][ T4219] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.8893'. [ 1672.953364][ T4219] netlink: 'syz.1.8893': attribute type 1 has an invalid length. [ 1673.417066][ T4231] netlink: 'syz.2.8898': attribute type 10 has an invalid length. [ 1673.496489][ T4233] delete_channel: no stack [ 1673.508187][ T4238] netlink: 'syz.3.8901': attribute type 6 has an invalid length. [ 1673.593540][ T4238] syzkaller0: entered promiscuous mode [ 1673.625621][ T4238] syzkaller0: entered allmulticast mode [ 1675.793058][ T4250] netlink: 13822 bytes leftover after parsing attributes in process `syz.1.8904'. [ 1675.990587][ T4273] netlink: 'syz.0.8911': attribute type 8 has an invalid length. [ 1676.148213][ T4274] netlink: 'syz.1.8910': attribute type 10 has an invalid length. [ 1676.441720][ T4285] netlink: 'syz.3.8913': attribute type 3 has an invalid length. [ 1676.514291][ T4285] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8913'. [ 1677.082750][ T4291] netlink: 'syz.2.8916': attribute type 49 has an invalid length. [ 1677.122737][ T4291] netlink: set zone limit has 8 unknown bytes [ 1678.401911][ T4303] netlink: 'syz.3.8917': attribute type 4 has an invalid length. [ 1678.457916][ T4303] netlink: 'syz.3.8917': attribute type 10 has an invalid length. [ 1678.497716][ T4303] netlink: 152 bytes leftover after parsing attributes in process `syz.3.8917'. [ 1678.570765][ T4303] wlan1: mtu greater than device maximum [ 1678.646135][ T4292] rxe_eth0 speed is unknown, defaulting to 1000 [ 1678.696642][ T4303] netlink: 'syz.3.8917': attribute type 21 has an invalid length. [ 1679.313053][ T4313] syzkaller0: entered promiscuous mode [ 1679.389934][ T4313] syzkaller0: entered allmulticast mode [ 1679.544582][ T4319] A link change request failed with some changes committed already. Interface Q±6ã`Ò˜ may have been left with an inconsistent configuration, please check. [ 1682.113860][ T4320] netlink: 'syz.1.8919': attribute type 21 has an invalid length. [ 1682.121896][ T4320] netlink: 168 bytes leftover after parsing attributes in process `syz.1.8919'. [ 1682.135954][ T4329] netlink: 'syz.3.8922': attribute type 10 has an invalid length. [ 1683.187978][ T4345] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.8924'. [ 1683.211739][ T4346] netlink: 48 bytes leftover after parsing attributes in process `syz.1.8924'. [ 1683.389898][ T4359] netlink: 'syz.2.8929': attribute type 10 has an invalid length. [ 1683.443720][ T4359] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.8929'. [ 1683.476794][ T4356] rxe_eth0 speed is unknown, defaulting to 1000 [ 1683.743534][ T4368] vlan0: entered promiscuous mode [ 1683.795471][ T4368] vlan0: entered allmulticast mode [ 1683.852705][ T4373] netlink: 'syz.3.8933': attribute type 1 has an invalid length. [ 1683.901602][ T4373] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.8933'. [ 1683.923167][ T4371] netlink: 'syz.0.8934': attribute type 10 has an invalid length. [ 1683.946619][ T4373] netlink: 'syz.3.8933': attribute type 1 has an invalid length. [ 1684.771559][ T4387] netlink: 208052 bytes leftover after parsing attributes in process `syz.3.8940'. [ 1684.781063][ T4387] netlink: 'syz.3.8940': attribute type 1 has an invalid length. [ 1684.789299][ T4387] netlink: 'syz.3.8940': attribute type 2 has an invalid length. [ 1684.797055][ T4387] netlink: 'syz.3.8940': attribute type 3 has an invalid length. [ 1684.805532][ T4387] netlink: 'syz.3.8940': attribute type 4 has an invalid length. [ 1685.532566][ T4407] netlink: 'syz.1.8944': attribute type 10 has an invalid length. [ 1685.554490][ T4406] vlan0: entered promiscuous mode [ 1685.563834][ T4406] vlan0: entered allmulticast mode [ 1685.585961][ T4406] netlink: 'syz.0.8946': attribute type 1 has an invalid length. [ 1685.599174][ T4406] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.8946'. [ 1685.618079][ T4406] netlink: 'syz.0.8946': attribute type 1 has an invalid length. [ 1685.816792][ T4415] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8950'. [ 1685.846020][ T4415] netlink: 463 bytes leftover after parsing attributes in process `syz.2.8950'. [ 1688.144383][ T4480] netlink: 65027 bytes leftover after parsing attributes in process `syz.0.8971'. [ 1688.275487][ T4486] vlan0: entered promiscuous mode [ 1688.283871][ T4486] vlan0: entered allmulticast mode [ 1688.290991][ T4486] veth0_vlan: entered allmulticast mode [ 1688.558671][ T4495] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 1689.372419][ T4517] validate_nla: 7 callbacks suppressed [ 1689.372464][ T4517] netlink: 'syz.0.8981': attribute type 10 has an invalid length. [ 1691.647667][ T4568] netlink: 'syz.2.8995': attribute type 10 has an invalid length. [ 1691.969976][ T4579] netlink: 209840 bytes leftover after parsing attributes in process `syz.3.8999'. [ 1692.561752][ T4600] netlink: 'syz.2.9006': attribute type 10 has an invalid length. [ 1692.979151][ T4618] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9010'. [ 1693.017652][ T4618] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9010'. [ 1693.052541][ T4618] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9010'. [ 1693.412365][ T4624] bridge0: port 1(bridge_slave_0) entered disabled state [ 1693.425226][ T4624] bridge0: entered allmulticast mode [ 1693.459532][ T4624] bridge0: port 1(bridge_slave_0) entered blocking state [ 1693.467311][ T4624] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1693.478968][ T4624] bridge0: entered promiscuous mode [ 1694.312209][ T4649] netlink: 'syz.1.9026': attribute type 39 has an invalid length. [ 1694.693048][ T4654] can: request_module (can-proto-4) failed. [ 1697.205521][ T4675] netlink: 134780 bytes leftover after parsing attributes in process `syz.3.9032'. [ 1698.906199][ T4742] netlink: 144 bytes leftover after parsing attributes in process `syz.1.9055'. [ 1699.001643][ T4742] team0: Port device team_slave_0 removed [ 1699.026712][ T4742] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1699.633342][ T4760] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.9061'. [ 1700.007232][ T4774] netlink: 'syz.2.9068': attribute type 3 has an invalid length. [ 1700.039790][ T4774] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.9068'. [ 1700.206936][ T4774] netlink: 1772 bytes leftover after parsing attributes in process `syz.2.9068'. [ 1700.420234][ T4793] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.9074'. [ 1700.440378][ T4793] tap0: tun_chr_ioctl cmd 1074025680 [ 1701.475700][ T4822] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9083'. [ 1701.977891][ T4817] netlink: 'syz.1.9082': attribute type 10 has an invalid length. [ 1701.987786][ T4822] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9083'. [ 1701.998043][ T4823] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9084'. [ 1702.016143][ T4818] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9083'. [ 1702.664177][ T4856] veth1_to_team: entered allmulticast mode [ 1702.957720][ T4874] netlink: 'syz.1.9104': attribute type 21 has an invalid length. [ 1702.966368][ T4874] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9104'. [ 1703.300620][ T4892] netlink: 'syz.0.9107': attribute type 9 has an invalid length. [ 1703.320654][ T4892] netlink: 463 bytes leftover after parsing attributes in process `syz.0.9107'. [ 1703.340889][ T4893] netlink: 'syz.0.9107': attribute type 10 has an invalid length. [ 1703.401953][ T4893] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1703.449483][ T4893] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1703.461734][ T4893] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1703.472486][ T4893] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1703.559598][ T4892] netlink: 'syz.0.9107': attribute type 10 has an invalid length. [ 1704.040550][ T4917] netlink: 'syz.1.9115': attribute type 2 has an invalid length. [ 1704.154192][ T4917] netlink: 'syz.1.9115': attribute type 9 has an invalid length. [ 1704.237641][ T4917] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9115'. [ 1704.283255][ T4917] netlink: 'syz.1.9115': attribute type 2 has an invalid length. [ 1704.297611][ T4917] netlink: 'syz.1.9115': attribute type 9 has an invalid length. [ 1704.314873][ T4917] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9115'. [ 1704.354346][ T4917] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9115'. [ 1704.413937][ T4917] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9115'. [ 1704.553693][ T4917] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9115'. [ 1705.526677][ T4951] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.9126'. [ 1705.700374][ T4960] validate_nla: 6 callbacks suppressed [ 1705.700391][ T4960] netlink: 'syz.0.9129': attribute type 21 has an invalid length. [ 1705.816952][ T4960] netlink: 156 bytes leftover after parsing attributes in process `syz.0.9129'. [ 1706.555434][ T4985] netlink: 'syz.3.9138': attribute type 29 has an invalid length. [ 1706.566122][ T4985] netlink: 'syz.3.9138': attribute type 29 has an invalid length. [ 1706.576322][ T4985] netlink: 'syz.3.9138': attribute type 29 has an invalid length. [ 1706.659293][ T4987] netlink: 'syz.0.9137': attribute type 21 has an invalid length. [ 1706.670990][ T4987] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9137'. [ 1706.680510][ T4989] netlink: 'syz.3.9138': attribute type 29 has an invalid length. [ 1706.939966][ T4992] -1: renamed from syzkaller0 (while UP) [ 1707.356056][ T5014] netlink: 'syz.1.9149': attribute type 10 has an invalid length. [ 1708.226198][ T5034] netlink: 'syz.0.9157': attribute type 10 has an invalid length. [ 1708.282315][ T5037] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9157'. [ 1708.477727][ T5044] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9158'. [ 1708.523787][ T5044] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9158'. [ 1708.545574][ T5018] rxe_eth0 speed is unknown, defaulting to 1000 [ 1708.568988][ T5046] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9158'. [ 1710.828479][ T5085] netlink: 'syz.0.9169': attribute type 10 has an invalid length. [ 1711.529085][ T5108] netlink: 'syz.3.9174': attribute type 64 has an invalid length. [ 1711.613651][ T5106] netlink: 'syz.0.9175': attribute type 10 has an invalid length. [ 1712.896849][ T5149] netlink: 128 bytes leftover after parsing attributes in process `syz.1.9183'. [ 1712.961578][ T5149] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1715.252325][ T5191] bridge0: port 1(bridge_slave_0) entered disabled state [ 1715.432787][ T5191] bridge0: left promiscuous mode [ 1716.171000][ T5206] netlink: 'syz.2.9202': attribute type 21 has an invalid length. [ 1716.205485][ T5202] netlink: 'syz.3.9201': attribute type 10 has an invalid length. [ 1717.008499][ T5224] netlink: 'syz.0.9216': attribute type 10 has an invalid length. [ 1717.143867][ T5233] netlink: 'syz.3.9210': attribute type 21 has an invalid length. [ 1717.195415][ T5233] netlink: 'syz.3.9210': attribute type 6 has an invalid length. [ 1717.217672][ T5233] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9210'. [ 1717.218015][ T5238] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.9211'. [ 1717.429504][ T5240] netlink: 'syz.1.9212': attribute type 27 has an invalid length. [ 1717.452788][ T5240] netlink: 152 bytes leftover after parsing attributes in process `syz.1.9212'. [ 1717.483111][ T5240] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1717.954772][ T5258] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9218'. [ 1718.217416][ T5261] FAULT_INJECTION: forcing a failure. [ 1718.217416][ T5261] name failslab, interval 1, probability 0, space 0, times 0 [ 1718.265751][ T5261] CPU: 1 PID: 5261 Comm: syz.2.9219 Not tainted syzkaller #0 [ 1718.273229][ T5261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1718.283434][ T5261] Call Trace: [ 1718.286757][ T5261] [ 1718.289731][ T5261] dump_stack_lvl+0x18c/0x250 [ 1718.294489][ T5261] ? show_regs_print_info+0x20/0x20 [ 1718.299751][ T5261] ? load_image+0x420/0x420 [ 1718.304323][ T5261] ? __might_sleep+0xe0/0xe0 [ 1718.308987][ T5261] ? __lock_acquire+0x7eb0/0x7eb0 [ 1718.314084][ T5261] should_fail_ex+0x394/0x4c0 [ 1718.318839][ T5261] should_failslab+0x9/0x20 [ 1718.323396][ T5261] slab_pre_alloc_hook+0x59/0x300 [ 1718.328479][ T5261] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 1718.334261][ T5261] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 1718.340043][ T5261] __kmem_cache_alloc_node+0x53/0x260 [ 1718.345492][ T5261] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 1718.351287][ T5261] __kmalloc+0xa7/0x240 [ 1718.355667][ T5261] tomoyo_realpath_from_path+0xe6/0x5c0 [ 1718.361305][ T5261] ? tomoyo_domain+0xd6/0x120 [ 1718.366050][ T5261] tomoyo_path_number_perm+0x248/0x5e0 [ 1718.371563][ T5261] ? tomoyo_path_number_perm+0x217/0x5e0 [ 1718.377257][ T5261] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1718.382745][ T5261] ? ksys_write+0x1d2/0x260 [ 1718.387355][ T5261] ? __fget_files+0x28/0x460 [ 1718.392058][ T5261] security_file_ioctl+0x70/0xa0 [ 1718.397059][ T5261] __se_sys_ioctl+0x48/0x170 [ 1718.401689][ T5261] do_syscall_64+0x55/0xb0 [ 1718.406126][ T5261] ? clear_bhb_loop+0x40/0x90 [ 1718.410820][ T5261] ? clear_bhb_loop+0x40/0x90 [ 1718.415516][ T5261] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1718.421429][ T5261] RIP: 0033:0x7f76bd79f559 [ 1718.425861][ T5261] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1718.445487][ T5261] RSP: 002b:00007f76be719028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1718.453923][ T5261] RAX: ffffffffffffffda RBX: 00007f76bda25fa0 RCX: 00007f76bd79f559 [ 1718.461925][ T5261] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000014 [ 1718.469909][ T5261] RBP: 00007f76be719090 R08: 0000000000000000 R09: 0000000000000000 [ 1718.477890][ T5261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1718.485888][ T5261] R13: 00007f76bda26038 R14: 00007f76bda25fa0 R15: 00007ffff52d3178 [ 1718.493909][ T5261] [ 1718.517145][ T5261] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1718.853384][ T5267] mac80211_hwsim hwsim359 wlan0: entered promiscuous mode [ 1718.908137][ T5267] mac80211_hwsim hwsim359 wlan0: entered allmulticast mode [ 1719.311114][ T5288] netlink: 'syz.3.9227': attribute type 27 has an invalid length. [ 1719.322956][ T5288] netlink: 152 bytes leftover after parsing attributes in process `syz.3.9227'. [ 1719.351868][ T5288] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1721.326557][ T5345] netlink: 'syz.2.9243': attribute type 1 has an invalid length. [ 1721.473264][ T5349] wg2: entered promiscuous mode [ 1721.488262][ T5349] wg2: entered allmulticast mode [ 1722.111318][ T5368] mac80211_hwsim hwsim370 wlan0: left promiscuous mode [ 1722.120288][ T5368] mac80211_hwsim hwsim370 wlan0: left allmulticast mode [ 1722.153801][ T5370] mac80211_hwsim hwsim370 wlan0: entered promiscuous mode [ 1722.170946][ T5370] mac80211_hwsim hwsim370 wlan0: entered allmulticast mode [ 1722.479019][ T5379] netlink: 830 bytes leftover after parsing attributes in process `syz.0.9253'. [ 1723.560901][ T5405] FAULT_INJECTION: forcing a failure. [ 1723.560901][ T5405] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1723.574692][ T5405] CPU: 0 PID: 5405 Comm: syz.2.9263 Not tainted syzkaller #0 [ 1723.582100][ T5405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1723.592180][ T5405] Call Trace: [ 1723.595481][ T5405] [ 1723.598431][ T5405] dump_stack_lvl+0x18c/0x250 [ 1723.603147][ T5405] ? show_regs_print_info+0x20/0x20 [ 1723.608371][ T5405] ? load_image+0x420/0x420 [ 1723.612883][ T5405] ? __might_fault+0xaa/0x120 [ 1723.617565][ T5405] ? __lock_acquire+0x7eb0/0x7eb0 [ 1723.622599][ T5405] should_fail_ex+0x394/0x4c0 [ 1723.627277][ T5405] _copy_from_user+0x2f/0xe0 [ 1723.631872][ T5405] dev_ethtool+0xc6/0x18d0 [ 1723.636293][ T5405] ? ethtool_get_module_eeprom_call+0x170/0x170 [ 1723.642537][ T5405] ? __lock_acquire+0x7eb0/0x7eb0 [ 1723.647566][ T5405] ? __might_fault+0xaa/0x120 [ 1723.652239][ T5405] ? full_name_hash+0x92/0xe0 [ 1723.656916][ T5405] ? dev_load+0x21/0x1f0 [ 1723.661247][ T5405] dev_ioctl+0x392/0x1140 [ 1723.665578][ T5405] sock_do_ioctl+0x239/0x310 [ 1723.670180][ T5405] ? sock_show_fdinfo+0xb0/0xb0 [ 1723.675040][ T5405] sock_ioctl+0x5be/0x7e0 [ 1723.679369][ T5405] ? sock_poll+0x3e0/0x3e0 [ 1723.683785][ T5405] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1723.688743][ T5405] ? security_file_ioctl+0x80/0xa0 [ 1723.693850][ T5405] ? sock_poll+0x3e0/0x3e0 [ 1723.698288][ T5405] __se_sys_ioctl+0xfd/0x170 [ 1723.702879][ T5405] do_syscall_64+0x55/0xb0 [ 1723.707291][ T5405] ? clear_bhb_loop+0x40/0x90 [ 1723.711965][ T5405] ? clear_bhb_loop+0x40/0x90 [ 1723.716644][ T5405] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1723.722562][ T5405] RIP: 0033:0x7f76bd79f559 [ 1723.726973][ T5405] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1723.746585][ T5405] RSP: 002b:00007f76be719028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1723.754997][ T5405] RAX: ffffffffffffffda RBX: 00007f76bda25fa0 RCX: 00007f76bd79f559 [ 1723.762969][ T5405] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 000000000000003b [ 1723.770936][ T5405] RBP: 00007f76be719090 R08: 0000000000000000 R09: 0000000000000000 [ 1723.778917][ T5405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1723.786904][ T5405] R13: 00007f76bda26038 R14: 00007f76bda25fa0 R15: 00007ffff52d3178 [ 1723.794894][ T5405] [ 1724.043316][ T5416] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.9266'. [ 1724.073145][ T5419] netlink: 'syz.0.9267': attribute type 9 has an invalid length. [ 1724.098837][ T5419] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.9267'. [ 1724.207357][ T5421] netlink: 'syz.0.9267': attribute type 9 has an invalid length. [ 1724.217849][ T5421] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.9267'. [ 1724.282121][ T5428] netlink: 'syz.3.9269': attribute type 2 has an invalid length. [ 1724.306842][ T5428] netlink: 'syz.3.9269': attribute type 2 has an invalid length. [ 1724.579059][ T5441] tap0: tun_chr_ioctl cmd 1074025675 [ 1724.584529][ T5441] tap0: persist enabled [ 1724.594733][ T5442] tap0: tun_chr_ioctl cmd 1074025675 [ 1724.601882][ T5442] tap0: persist enabled [ 1724.614032][ T5441] tap0: tun_chr_ioctl cmd 1074025675 [ 1724.624104][ T5441] tap0: persist enabled [ 1724.643376][ T5442] IPv6: pim6reg1: Disabled Multicast RS [ 1724.858250][ T5453] FAULT_INJECTION: forcing a failure. [ 1724.858250][ T5453] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1724.877412][ T5453] CPU: 0 PID: 5453 Comm: syz.0.9276 Not tainted syzkaller #0 [ 1724.884885][ T5453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1724.894996][ T5453] Call Trace: [ 1724.898319][ T5453] [ 1724.901301][ T5453] dump_stack_lvl+0x18c/0x250 [ 1724.906047][ T5453] ? show_regs_print_info+0x20/0x20 [ 1724.911303][ T5453] ? load_image+0x420/0x420 [ 1724.915876][ T5453] ? __might_fault+0xaa/0x120 [ 1724.920610][ T5453] ? __lock_acquire+0x7eb0/0x7eb0 [ 1724.925718][ T5453] should_fail_ex+0x394/0x4c0 [ 1724.930476][ T5453] _copy_from_user+0x2f/0xe0 [ 1724.935135][ T5453] dev_ethtool+0xc6/0x18d0 [ 1724.939640][ T5453] ? ethtool_get_module_eeprom_call+0x170/0x170 [ 1724.945933][ T5453] ? __lock_acquire+0x7eb0/0x7eb0 [ 1724.951018][ T5453] ? __might_fault+0xaa/0x120 [ 1724.955741][ T5453] ? full_name_hash+0x92/0xe0 [ 1724.960484][ T5453] ? dev_load+0x21/0x1f0 [ 1724.964789][ T5453] dev_ioctl+0x392/0x1140 [ 1724.969210][ T5453] sock_do_ioctl+0x239/0x310 [ 1724.973887][ T5453] ? sock_show_fdinfo+0xb0/0xb0 [ 1724.978847][ T5453] sock_ioctl+0x5be/0x7e0 [ 1724.983264][ T5453] ? sock_poll+0x3e0/0x3e0 [ 1724.987769][ T5453] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1724.992760][ T5453] ? security_file_ioctl+0x80/0xa0 [ 1724.997933][ T5453] ? sock_poll+0x3e0/0x3e0 [ 1725.002403][ T5453] __se_sys_ioctl+0xfd/0x170 [ 1725.007059][ T5453] do_syscall_64+0x55/0xb0 [ 1725.011517][ T5453] ? clear_bhb_loop+0x40/0x90 [ 1725.016232][ T5453] ? clear_bhb_loop+0x40/0x90 [ 1725.020964][ T5453] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1725.026904][ T5453] RIP: 0033:0x7f2930b9f559 [ 1725.031367][ T5453] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1725.051021][ T5453] RSP: 002b:00007f2931980028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1725.059484][ T5453] RAX: ffffffffffffffda RBX: 00007f2930e25fa0 RCX: 00007f2930b9f559 [ 1725.067475][ T5453] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 000000000000003c [ 1725.075494][ T5453] RBP: 00007f2931980090 R08: 0000000000000000 R09: 0000000000000000 [ 1725.083507][ T5453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1725.091517][ T5453] R13: 00007f2930e26038 R14: 00007f2930e25fa0 R15: 00007fffbf0104e8 [ 1725.099584][ T5453] [ 1726.038787][ T5469] netlink: 'syz.2.9280': attribute type 19 has an invalid length. [ 1728.242026][ T5486] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9286'. [ 1728.296070][ T5479] netlink: 830 bytes leftover after parsing attributes in process `syz.1.9284'. [ 1728.796079][ T5490] FAULT_INJECTION: forcing a failure. [ 1728.796079][ T5490] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1728.867744][ T5490] CPU: 0 PID: 5490 Comm: syz.0.9287 Not tainted syzkaller #0 [ 1728.875198][ T5490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1728.885277][ T5490] Call Trace: [ 1728.888564][ T5490] [ 1728.891491][ T5490] dump_stack_lvl+0x18c/0x250 [ 1728.896178][ T5490] ? show_regs_print_info+0x20/0x20 [ 1728.901375][ T5490] ? load_image+0x420/0x420 [ 1728.905906][ T5490] ? __might_fault+0xaa/0x120 [ 1728.910584][ T5490] ? __lock_acquire+0x7eb0/0x7eb0 [ 1728.915614][ T5490] should_fail_ex+0x394/0x4c0 [ 1728.920296][ T5490] _copy_from_user+0x2f/0xe0 [ 1728.924893][ T5490] dev_ethtool+0x24a/0x18d0 [ 1728.929399][ T5490] ? lock_chain_count+0x20/0x20 [ 1728.934250][ T5490] ? ethtool_get_module_eeprom_call+0x170/0x170 [ 1728.940491][ T5490] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1728.946646][ T5490] ? lockdep_hardirqs_on+0x98/0x150 [ 1728.951853][ T5490] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1728.958013][ T5490] ? dev_load+0x162/0x1f0 [ 1728.962350][ T5490] dev_ioctl+0x392/0x1140 [ 1728.966679][ T5490] sock_do_ioctl+0x239/0x310 [ 1728.971266][ T5490] ? asm_sysvec_call_function_single+0x1a/0x20 [ 1728.977425][ T5490] ? sock_show_fdinfo+0xb0/0xb0 [ 1728.982286][ T5490] ? sock_ioctl+0x181/0x7e0 [ 1728.986797][ T5490] sock_ioctl+0x5be/0x7e0 [ 1728.991142][ T5490] ? sock_poll+0x3e0/0x3e0 [ 1728.995562][ T5490] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1729.000497][ T5490] ? security_file_ioctl+0x80/0xa0 [ 1729.005604][ T5490] ? sock_poll+0x3e0/0x3e0 [ 1729.010016][ T5490] __se_sys_ioctl+0xfd/0x170 [ 1729.014609][ T5490] do_syscall_64+0x55/0xb0 [ 1729.019020][ T5490] ? clear_bhb_loop+0x40/0x90 [ 1729.023693][ T5490] ? clear_bhb_loop+0x40/0x90 [ 1729.028401][ T5490] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1729.034294][ T5490] RIP: 0033:0x7f2930b9f559 [ 1729.038716][ T5490] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1729.058325][ T5490] RSP: 002b:00007f2931980028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1729.066738][ T5490] RAX: ffffffffffffffda RBX: 00007f2930e25fa0 RCX: 00007f2930b9f559 [ 1729.074703][ T5490] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 000000000000003c [ 1729.082669][ T5490] RBP: 00007f2931980090 R08: 0000000000000000 R09: 0000000000000000 [ 1729.090636][ T5490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1729.098607][ T5490] R13: 00007f2930e26038 R14: 00007f2930e25fa0 R15: 00007fffbf0104e8 [ 1729.106589][ T5490] [ 1729.206439][ T5503] netlink: 'syz.1.9290': attribute type 10 has an invalid length. [ 1729.372754][ T5510] netlink: 'syz.0.9294': attribute type 10 has an invalid length. [ 1729.616600][ T5521] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.9300'. [ 1729.639143][ T5521] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8 [ 1729.769477][ T5530] rxe_eth0 speed is unknown, defaulting to 1000 [ 1729.769751][ T5534] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.9302'. [ 1730.186392][ T5538] FAULT_INJECTION: forcing a failure. [ 1730.186392][ T5538] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1730.201738][ T5538] CPU: 0 PID: 5538 Comm: syz.2.9303 Not tainted syzkaller #0 [ 1730.209176][ T5538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1730.219262][ T5538] Call Trace: [ 1730.222560][ T5538] [ 1730.225510][ T5538] dump_stack_lvl+0x18c/0x250 [ 1730.230224][ T5538] ? show_regs_print_info+0x20/0x20 [ 1730.235454][ T5538] ? load_image+0x420/0x420 [ 1730.239993][ T5538] ? __might_fault+0xaa/0x120 [ 1730.244702][ T5538] ? __lock_acquire+0x7eb0/0x7eb0 [ 1730.249760][ T5538] ? __lock_acquire+0x1431/0x7eb0 [ 1730.254837][ T5538] should_fail_ex+0x394/0x4c0 [ 1730.259554][ T5538] _copy_from_user+0x2f/0xe0 [ 1730.264178][ T5538] ethtool_set_per_queue+0xf0/0x1f0 [ 1730.269413][ T5538] ? ethtool_get_phy_stats+0x650/0x650 [ 1730.274960][ T5538] ? __might_fault+0xaa/0x120 [ 1730.279669][ T5538] ? __lock_acquire+0x7eb0/0x7eb0 [ 1730.284729][ T5538] ? __might_fault+0xaa/0x120 [ 1730.289431][ T5538] ? __might_fault+0xc6/0x120 [ 1730.294127][ T5538] ? __might_fault+0xaa/0x120 [ 1730.298840][ T5538] dev_ethtool+0x1733/0x18d0 [ 1730.303471][ T5538] ? ethtool_get_module_eeprom_call+0x170/0x170 [ 1730.309743][ T5538] ? __lock_acquire+0x7eb0/0x7eb0 [ 1730.314803][ T5538] ? __might_fault+0xaa/0x120 [ 1730.319514][ T5538] ? full_name_hash+0x92/0xe0 [ 1730.324218][ T5538] ? dev_load+0x21/0x1f0 [ 1730.328493][ T5538] dev_ioctl+0x392/0x1140 [ 1730.332858][ T5538] sock_do_ioctl+0x239/0x310 [ 1730.337478][ T5538] ? sock_show_fdinfo+0xb0/0xb0 [ 1730.342374][ T5538] sock_ioctl+0x5be/0x7e0 [ 1730.346721][ T5538] ? sock_poll+0x3e0/0x3e0 [ 1730.351167][ T5538] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1730.356115][ T5538] ? security_file_ioctl+0x80/0xa0 [ 1730.361238][ T5538] ? sock_poll+0x3e0/0x3e0 [ 1730.365693][ T5538] __se_sys_ioctl+0xfd/0x170 [ 1730.370304][ T5538] do_syscall_64+0x55/0xb0 [ 1730.374732][ T5538] ? clear_bhb_loop+0x40/0x90 [ 1730.379423][ T5538] ? clear_bhb_loop+0x40/0x90 [ 1730.384117][ T5538] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1730.390022][ T5538] RIP: 0033:0x7f76bd79f559 [ 1730.394460][ T5538] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1730.414089][ T5538] RSP: 002b:00007f76be719028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1730.422526][ T5538] RAX: ffffffffffffffda RBX: 00007f76bda25fa0 RCX: 00007f76bd79f559 [ 1730.430519][ T5538] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 000000000000003c [ 1730.438507][ T5538] RBP: 00007f76be719090 R08: 0000000000000000 R09: 0000000000000000 [ 1730.446486][ T5538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1730.454469][ T5538] R13: 00007f76bda26038 R14: 00007f76bda25fa0 R15: 00007ffff52d3178 [ 1730.462474][ T5538] [ 1730.473155][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.479802][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.698135][ T5549] netlink: 'syz.2.9306': attribute type 10 has an invalid length. [ 1730.836969][ T5551] netlink: 'syz.3.9307': attribute type 10 has an invalid length. [ 1732.042683][ T5571] netlink: 'syz.1.9313': attribute type 29 has an invalid length. [ 1733.893847][ T5571] netlink: 'syz.1.9313': attribute type 29 has an invalid length. [ 1733.909876][ T5569] netlink: 'syz.1.9313': attribute type 29 has an invalid length. [ 1737.600549][ T5574] FAULT_INJECTION: forcing a failure. [ 1737.600549][ T5574] name fail_futex, interval 1, probability 0, space 0, times 1 [ 1737.637248][ T5574] CPU: 0 PID: 5574 Comm: syz.2.9314 Not tainted syzkaller #0 [ 1737.644698][ T5574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1737.654775][ T5574] Call Trace: [ 1737.658066][ T5574] [ 1737.661010][ T5574] dump_stack_lvl+0x18c/0x250 [ 1737.665709][ T5574] ? show_regs_print_info+0x20/0x20 [ 1737.670932][ T5574] ? load_image+0x420/0x420 [ 1737.675457][ T5574] ? __lock_acquire+0x1431/0x7eb0 [ 1737.680520][ T5574] should_fail_ex+0x394/0x4c0 [ 1737.685215][ T5574] get_futex_key+0x136/0x1030 [ 1737.689917][ T5574] ? futex_setup_timer+0xc0/0xc0 [ 1737.694880][ T5574] futex_wake+0x127/0x4f0 [ 1737.699249][ T5574] ? futex_wake_mark+0x150/0x150 [ 1737.704230][ T5574] do_futex+0x35d/0x3e0 [ 1737.708402][ T5574] ? __might_fault+0xaa/0x120 [ 1737.713102][ T5574] ? __ia32_sys_get_robust_list+0x110/0x110 [ 1737.719012][ T5574] ? __might_fault+0xc6/0x120 [ 1737.723706][ T5574] mm_release+0x184/0x3a0 [ 1737.728055][ T5574] ? exit_mm_release+0x30/0x30 [ 1737.732831][ T5574] ? lockdep_hardirqs_on+0x98/0x150 [ 1737.738057][ T5574] exit_mm+0xa4/0x340 [ 1737.742062][ T5574] ? sysctl_delayacct+0x220/0x220 [ 1737.747107][ T5574] ? do_exit+0x2530/0x2530 [ 1737.751565][ T5574] do_exit+0x909/0x2530 [ 1737.755756][ T5574] ? put_task_struct+0xc0/0xc0 [ 1737.760546][ T5574] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1737.766544][ T5574] ? get_signal+0x100e/0x1390 [ 1737.771243][ T5574] ? lock_chain_count+0x20/0x20 [ 1737.776123][ T5574] ? _raw_spin_lock_irq+0xbb/0xf0 [ 1737.781169][ T5574] do_group_exit+0x22d/0x2f0 [ 1737.785771][ T5574] ? lockdep_hardirqs_on+0x98/0x150 [ 1737.790997][ T5574] get_signal+0x12a6/0x1390 [ 1737.795550][ T5574] arch_do_signal_or_restart+0xc2/0x7b0 [ 1737.801171][ T5574] ? get_sigframe_size+0x20/0x20 [ 1737.806156][ T5574] ? exit_to_user_mode_loop+0x3b/0x110 [ 1737.811646][ T5574] exit_to_user_mode_loop+0x70/0x110 [ 1737.816960][ T5574] exit_to_user_mode_prepare+0xee/0x180 [ 1737.822538][ T5574] syscall_exit_to_user_mode+0x1a/0x50 [ 1737.828036][ T5574] do_syscall_64+0x61/0xb0 [ 1737.832475][ T5574] ? clear_bhb_loop+0x40/0x90 [ 1737.837173][ T5574] ? clear_bhb_loop+0x40/0x90 [ 1737.841874][ T5574] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1737.847790][ T5574] RIP: 0033:0x7f76bd79f559 [ 1737.852223][ T5574] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1737.871855][ T5574] RSP: 002b:00007f76be719028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1737.880292][ T5574] RAX: ffffffffffffffa1 RBX: 00007f76bda25fa0 RCX: 00007f76bd79f559 [ 1737.888288][ T5574] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 000000000000003c [ 1737.896280][ T5574] RBP: 00007f76be719090 R08: 0000000000000000 R09: 0000000000000000 [ 1737.904270][ T5574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1737.912258][ T5574] R13: 00007f76bda26038 R14: 00007f76bda25fa0 R15: 00007ffff52d3178 [ 1737.920263][ T5574] [ 1737.968845][ T5597] netlink: 'syz.0.9319': attribute type 10 has an invalid length. [ 1738.324830][ T5602] netlink: 'syz.2.9321': attribute type 10 has an invalid length. [ 1740.641647][ T5628] netlink: 'syz.1.9329': attribute type 10 has an invalid length. [ 1744.083924][ T5672] netlink: 'syz.3.9343': attribute type 10 has an invalid length. [ 1744.348196][ T5682] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.9348'. [ 1744.495876][ T5689] netlink: 'syz.1.9351': attribute type 25 has an invalid length. [ 1744.538444][ T5689] netlink: 'syz.1.9351': attribute type 3 has an invalid length. [ 1744.546487][ T5689] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9351'. [ 1744.994711][ T5702] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.9355'. [ 1745.186045][ T5700] netlink: 'syz.1.9354': attribute type 29 has an invalid length. [ 1745.236692][ T5700] netlink: 'syz.1.9354': attribute type 29 has an invalid length. [ 1745.249328][ T5711] netlink: 'syz.1.9354': attribute type 29 has an invalid length. [ 1745.278933][ T5700] netlink: 'syz.1.9354': attribute type 29 has an invalid length. [ 1747.316991][ T5700] netlink: 'syz.1.9354': attribute type 29 has an invalid length. [ 1747.472578][ T5727] FAULT_INJECTION: forcing a failure. [ 1747.472578][ T5727] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1747.499263][ T5727] CPU: 1 PID: 5727 Comm: syz.1.9362 Not tainted syzkaller #0 [ 1747.506707][ T5727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1747.516794][ T5727] Call Trace: [ 1747.520097][ T5727] [ 1747.523047][ T5727] dump_stack_lvl+0x18c/0x250 [ 1747.527759][ T5727] ? show_regs_print_info+0x20/0x20 [ 1747.532987][ T5727] ? load_image+0x420/0x420 [ 1747.537526][ T5727] ? __might_fault+0xaa/0x120 [ 1747.542227][ T5727] ? __lock_acquire+0x7eb0/0x7eb0 [ 1747.547274][ T5727] ? unix_ioctl+0x259/0x6b0 [ 1747.551812][ T5727] should_fail_ex+0x394/0x4c0 [ 1747.556523][ T5727] _copy_from_user+0x2f/0xe0 [ 1747.561159][ T5727] sock_do_ioctl+0x190/0x310 [ 1747.565794][ T5727] ? sock_show_fdinfo+0xb0/0xb0 [ 1747.570709][ T5727] sock_ioctl+0x5be/0x7e0 [ 1747.575050][ T5727] ? sock_poll+0x3e0/0x3e0 [ 1747.579482][ T5727] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1747.584433][ T5727] ? security_file_ioctl+0x80/0xa0 [ 1747.589555][ T5727] ? sock_poll+0x3e0/0x3e0 [ 1747.593976][ T5727] __se_sys_ioctl+0xfd/0x170 [ 1747.598583][ T5727] do_syscall_64+0x55/0xb0 [ 1747.603008][ T5727] ? clear_bhb_loop+0x40/0x90 [ 1747.607700][ T5727] ? clear_bhb_loop+0x40/0x90 [ 1747.612392][ T5727] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1747.618299][ T5727] RIP: 0033:0x7f9efbb9f559 [ 1747.622722][ T5727] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1747.642332][ T5727] RSP: 002b:00007f9efca08028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1747.650759][ T5727] RAX: ffffffffffffffda RBX: 00007f9efbe25fa0 RCX: 00007f9efbb9f559 [ 1747.658738][ T5727] RDX: 0000200000000080 RSI: 0000000000008914 RDI: 0000000000000005 [ 1747.666723][ T5727] RBP: 00007f9efca08090 R08: 0000000000000000 R09: 0000000000000000 [ 1747.674703][ T5727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1747.682679][ T5727] R13: 00007f9efbe26038 R14: 00007f9efbe25fa0 R15: 00007fff01a33288 [ 1747.690674][ T5727] [ 1747.811823][ T5728] netlink: 'syz.0.9360': attribute type 10 has an invalid length. [ 1747.861418][ T5736] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.9364'. [ 1747.957150][ T5741] netlink: 'syz.1.9365': attribute type 16 has an invalid length. [ 1747.968603][ T5735] netlink: 171808 bytes leftover after parsing attributes in process `syz.1.9365'. [ 1747.988606][ T5741] netlink: 2 bytes leftover after parsing attributes in process `syz.1.9365'. [ 1748.634772][ T5761] FAULT_INJECTION: forcing a failure. [ 1748.634772][ T5761] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1748.652559][ T5761] CPU: 1 PID: 5761 Comm: syz.2.9375 Not tainted syzkaller #0 [ 1748.659982][ T5761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1748.670039][ T5761] Call Trace: [ 1748.673318][ T5761] [ 1748.676246][ T5761] dump_stack_lvl+0x18c/0x250 [ 1748.680937][ T5761] ? show_regs_print_info+0x20/0x20 [ 1748.686131][ T5761] ? load_image+0x420/0x420 [ 1748.690632][ T5761] ? __might_fault+0xaa/0x120 [ 1748.695306][ T5761] ? __lock_acquire+0x7eb0/0x7eb0 [ 1748.700330][ T5761] ? unix_ioctl+0x259/0x6b0 [ 1748.704833][ T5761] should_fail_ex+0x394/0x4c0 [ 1748.709512][ T5761] _copy_from_user+0x2f/0xe0 [ 1748.714105][ T5761] sock_do_ioctl+0x190/0x310 [ 1748.718704][ T5761] ? sock_show_fdinfo+0xb0/0xb0 [ 1748.723559][ T5761] sock_ioctl+0x5be/0x7e0 [ 1748.727887][ T5761] ? sock_poll+0x3e0/0x3e0 [ 1748.732309][ T5761] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1748.737243][ T5761] ? security_file_ioctl+0x80/0xa0 [ 1748.742350][ T5761] ? sock_poll+0x3e0/0x3e0 [ 1748.746761][ T5761] __se_sys_ioctl+0xfd/0x170 [ 1748.751377][ T5761] do_syscall_64+0x55/0xb0 [ 1748.755794][ T5761] ? clear_bhb_loop+0x40/0x90 [ 1748.760469][ T5761] ? clear_bhb_loop+0x40/0x90 [ 1748.765149][ T5761] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1748.771049][ T5761] RIP: 0033:0x7f76bd79f559 [ 1748.775460][ T5761] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1748.795084][ T5761] RSP: 002b:00007f76be719028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1748.803496][ T5761] RAX: ffffffffffffffda RBX: 00007f76bda25fa0 RCX: 00007f76bd79f559 [ 1748.811464][ T5761] RDX: 0000200000000080 RSI: 0000000000008914 RDI: 0000000000000005 [ 1748.819432][ T5761] RBP: 00007f76be719090 R08: 0000000000000000 R09: 0000000000000000 [ 1748.827397][ T5761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1748.835362][ T5761] R13: 00007f76bda26038 R14: 00007f76bda25fa0 R15: 00007ffff52d3178 [ 1748.843344][ T5761] [ 1749.236525][ T5779] validate_nla: 3 callbacks suppressed [ 1749.236572][ T5779] netlink: 'syz.0.9388': attribute type 10 has an invalid length. [ 1749.307731][ T5782] netlink: 'syz.1.9380': attribute type 10 has an invalid length. [ 1749.398352][ T5788] netdevsim netdevsim2 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 1749.436775][ T5783] netlink: 'syz.3.9381': attribute type 10 has an invalid length. [ 1749.471306][ T5794] netlink: 'syz.1.9384': attribute type 1 has an invalid length. [ 1749.709748][ T5803] FAULT_INJECTION: forcing a failure. [ 1749.709748][ T5803] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1749.767538][ T5803] CPU: 1 PID: 5803 Comm: syz.3.9386 Not tainted syzkaller #0 [ 1749.774982][ T5803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1749.785053][ T5803] Call Trace: [ 1749.788328][ T5803] [ 1749.791263][ T5803] dump_stack_lvl+0x18c/0x250 [ 1749.795966][ T5803] ? show_regs_print_info+0x20/0x20 [ 1749.801170][ T5803] ? load_image+0x420/0x420 [ 1749.805691][ T5803] ? __might_fault+0xaa/0x120 [ 1749.810380][ T5803] ? __lock_acquire+0x7eb0/0x7eb0 [ 1749.815398][ T5803] should_fail_ex+0x394/0x4c0 [ 1749.820085][ T5803] _copy_from_user+0x2f/0xe0 [ 1749.824681][ T5803] kstrtouint_from_user+0xde/0x170 [ 1749.829791][ T5803] ? kstrtol_from_user+0x190/0x190 [ 1749.834950][ T5803] proc_fail_nth_write+0x8f/0x250 [ 1749.839979][ T5803] ? proc_fail_nth_read+0x260/0x260 [ 1749.845180][ T5803] ? proc_fail_nth_read+0x260/0x260 [ 1749.850379][ T5803] vfs_write+0x299/0x9a0 [ 1749.854625][ T5803] ? file_end_write+0x250/0x250 [ 1749.859477][ T5803] ? __fget_files+0x28/0x460 [ 1749.864068][ T5803] ? __fget_files+0x3fc/0x460 [ 1749.868753][ T5803] ? __fdget_pos+0x2a3/0x330 [ 1749.873339][ T5803] ? ksys_write+0x74/0x260 [ 1749.877759][ T5803] ksys_write+0x151/0x260 [ 1749.882089][ T5803] ? __ia32_sys_read+0x90/0x90 [ 1749.886858][ T5803] ? lockdep_hardirqs_on+0x98/0x150 [ 1749.892061][ T5803] do_syscall_64+0x55/0xb0 [ 1749.896482][ T5803] ? clear_bhb_loop+0x40/0x90 [ 1749.901156][ T5803] ? clear_bhb_loop+0x40/0x90 [ 1749.905832][ T5803] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1749.911724][ T5803] RIP: 0033:0x7f8c3175fd8e [ 1749.916140][ T5803] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1749.935747][ T5803] RSP: 002b:00007f8c3268cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1749.944160][ T5803] RAX: ffffffffffffffda RBX: 00007f8c3268d6c0 RCX: 00007f8c3175fd8e [ 1749.952143][ T5803] RDX: 0000000000000001 RSI: 00007f8c3268d0a0 RDI: 0000000000000006 [ 1749.960118][ T5803] RBP: 00007f8c3268d090 R08: 0000000000000000 R09: 0000000000000000 [ 1749.968090][ T5803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1749.976102][ T5803] R13: 00007f8c31a26038 R14: 00007f8c31a25fa0 R15: 00007fff8013a1e8 [ 1749.984089][ T5803] [ 1750.186199][ T5807] netlink: 'syz.1.9387': attribute type 2 has an invalid length. [ 1750.194154][ T5807] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9387'. [ 1750.608309][ T5820] netlink: 'syz.3.9392': attribute type 10 has an invalid length. [ 1750.780040][ T5824] netlink: 'syz.2.9393': attribute type 10 has an invalid length. [ 1752.457754][ T5857] netlink: 'syz.1.9403': attribute type 10 has an invalid length. [ 1752.684182][ T5868] netlink: 'syz.2.9406': attribute type 21 has an invalid length. [ 1752.700918][ T5868] netlink: 'syz.2.9406': attribute type 20 has an invalid length. [ 1752.870623][ T5873] netlink: 435 bytes leftover after parsing attributes in process `syz.3.9408'. [ 1753.085807][ T5889] netlink: 6 bytes leftover after parsing attributes in process `syz.1.9411'. [ 1753.104700][ T5888] rxe_eth0 speed is unknown, defaulting to 1000 [ 1753.205914][ T5892] sctp: [Deprecated]: syz.1.9411 (pid 5892) Use of int in maxseg socket option. [ 1753.205914][ T5892] Use struct sctp_assoc_value instead [ 1754.084648][ T5901] rxe_eth0 speed is unknown, defaulting to 1000 [ 1754.465070][ T5913] validate_nla: 3 callbacks suppressed [ 1754.465088][ T5913] netlink: 'syz.2.9421': attribute type 41 has an invalid length. [ 1754.495145][ T5913] netlink: 208064 bytes leftover after parsing attributes in process `syz.2.9421'. [ 1754.919704][ T5920] netlink: 'syz.1.9423': attribute type 10 has an invalid length. [ 1755.241584][ T5928] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.9425'. [ 1755.714426][ T5954] netlink: 'syz.3.9430': attribute type 2 has an invalid length. [ 1755.755834][ T5954] netlink: 'syz.3.9430': attribute type 1 has an invalid length. [ 1755.776147][ T5954] netlink: 9 bytes leftover after parsing attributes in process `syz.3.9430'. [ 1756.471703][ T5964] netlink: 'syz.2.9432': attribute type 10 has an invalid length. [ 1756.565257][ T5968] netlink: 'syz.2.9434': attribute type 16 has an invalid length. [ 1756.573487][ T5968] netlink: 168 bytes leftover after parsing attributes in process `syz.2.9434'. [ 1756.583110][ T5969] netlink: 'syz.2.9434': attribute type 21 has an invalid length. [ 1756.584509][ T5970] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.9434'. [ 1756.591172][ T5969] netlink: 164 bytes leftover after parsing attributes in process `syz.2.9434'. [ 1756.978805][ T5982] netlink: 'syz.1.9439': attribute type 10 has an invalid length. [ 1757.258363][ T5995] netlink: 'syz.3.9444': attribute type 2 has an invalid length. [ 1757.266435][ T5995] netlink: 116 bytes leftover after parsing attributes in process `syz.3.9444'. [ 1757.277593][ T5995] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1757.293958][ T5988] netlink: 'syz.1.9442': attribute type 10 has an invalid length. [ 1757.521177][ T6000] netlink: 'syz.2.9446': attribute type 11 has an invalid length. [ 1757.530837][ T6000] netlink: 184116 bytes leftover after parsing attributes in process `syz.2.9446'. [ 1757.545404][ T6000] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 1758.103289][ T6015] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.9452'. [ 1758.114807][ T6015] netlink: 9 bytes leftover after parsing attributes in process `syz.2.9452'. [ 1758.789522][ T6044] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1758.807770][ T6044] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1758.838856][ T6044] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1758.857400][ T6044] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1759.016669][ T6049] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.9462'. [ 1759.629798][ T6062] validate_nla: 3 callbacks suppressed [ 1759.629863][ T6062] netlink: 'syz.1.9466': attribute type 10 has an invalid length. [ 1760.155282][ T6082] netlink: 'syz.1.9474': attribute type 1 has an invalid length. [ 1760.574818][ T6093] netlink: 'syz.2.9477': attribute type 10 has an invalid length. [ 1761.117712][ T6114] netlink: 'syz.2.9485': attribute type 21 has an invalid length. [ 1761.125819][ T6114] netlink: 'syz.2.9485': attribute type 12 has an invalid length. [ 1761.134881][ T6114] netlink: 'syz.2.9485': attribute type 13 has an invalid length. [ 1761.159229][ T6114] netlink: 'syz.2.9485': attribute type 14 has an invalid length. [ 1761.180559][ T6114] netlink: 'syz.2.9485': attribute type 15 has an invalid length. [ 1761.198185][ T6114] netlink: 'syz.2.9485': attribute type 16 has an invalid length. [ 1761.221033][ T6114] __nla_validate_parse: 3 callbacks suppressed [ 1761.221068][ T6114] netlink: 12926 bytes leftover after parsing attributes in process `syz.2.9485'. [ 1761.309659][ T6119] netlink: 'syz.1.9488': attribute type 10 has an invalid length. [ 1761.752643][T21542] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1761.761857][T21542] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1761.773870][T21542] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1761.783873][T21542] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1761.792523][T21542] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1761.811347][T21542] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1761.909520][T19235] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1761.974623][ T6131] rxe_eth0 speed is unknown, defaulting to 1000 [ 1762.060379][T19235] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1762.182603][T19235] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1762.237329][ T6145] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1762.271365][ T6145] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.9496'. [ 1762.322605][T19235] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1762.657236][ T6131] chnl_net:caif_netlink_parms(): no params data found [ 1762.709819][T19235] tipc: Left network mode [ 1762.968372][ T6131] bridge0: port 1(bridge_slave_0) entered blocking state [ 1762.975707][ T6131] bridge0: port 1(bridge_slave_0) entered disabled state [ 1763.005756][ T6131] bridge_slave_0: entered allmulticast mode [ 1763.038821][ T6131] bridge_slave_0: entered promiscuous mode [ 1763.185055][ T6131] bridge0: port 2(bridge_slave_1) entered blocking state [ 1763.202533][ T6131] bridge0: port 2(bridge_slave_1) entered disabled state [ 1763.222599][ T6131] bridge_slave_1: entered allmulticast mode [ 1763.230356][ T6131] bridge_slave_1: entered promiscuous mode [ 1763.239633][ T6168] netlink: 12926 bytes leftover after parsing attributes in process `syz.1.9498'. [ 1763.435403][ T6131] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1763.536727][ T6131] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1763.693526][ T6131] team0: Port device team_slave_0 added [ 1763.706546][ T6131] team0: Port device team_slave_1 added [ 1763.775027][ T6131] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1763.782793][ T6131] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1763.811802][ T6131] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1763.827149][ T6131] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1763.834285][ T6131] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1763.859512][T30233] Bluetooth: hci2: command tx timeout [ 1763.863898][ T6131] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1764.064926][ T6131] hsr_slave_0: entered promiscuous mode [ 1764.098225][ T6131] hsr_slave_1: entered promiscuous mode [ 1764.144189][ T6193] netlink: 198048 bytes leftover after parsing attributes in process `syz.1.9504'. [ 1765.145042][T19235] bond0: (slave wlan1): Releasing backup interface [ 1765.376922][ T6131] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1765.423173][ T6131] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1765.493639][ T6131] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1765.522976][ T6131] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1765.607132][T19235] veth1_macvtap: left promiscuous mode [ 1765.615956][T19235] veth1_vlan: left promiscuous mode [ 1765.835749][T19235] team0 (unregistering): Port device geneve1 removed [ 1765.945218][T30233] Bluetooth: hci2: command tx timeout [ 1766.372883][T19235] team0 (unregistering): Port device team_slave_1 removed [ 1766.424048][T19235] team0 (unregistering): Port device C removed [ 1766.481244][T19235] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1766.547807][T19235] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1766.721679][T19235] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 1767.063347][T21542] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1767.080310][T21542] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1767.091037][T21542] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1767.109339][T21542] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1767.117198][T21542] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1767.132810][T21542] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1767.263862][T19235] bond0 (unregistering): Released all slaves [ 1767.330156][ T6235] validate_nla: 12 callbacks suppressed [ 1767.330185][ T6235] netlink: 'syz.1.9509': attribute type 10 has an invalid length. [ 1767.423065][ T6238] rxe_eth0 speed is unknown, defaulting to 1000 [ 1767.602377][ T6131] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1767.663917][ T6131] 8021q: adding VLAN 0 to HW filter on device team0 [ 1767.701150][ T7646] bridge0: port 1(bridge_slave_0) entered blocking state [ 1767.708364][ T7646] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1767.796609][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1767.803868][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1768.017930][T30233] Bluetooth: hci2: command tx timeout [ 1768.039395][ T6256] rxe_eth0 speed is unknown, defaulting to 1000 [ 1768.076465][ T6258] netlink: 'syz.2.9514': attribute type 10 has an invalid length. [ 1768.547766][ T6238] chnl_net:caif_netlink_parms(): no params data found [ 1768.678578][ T6131] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1768.813204][ T6238] bridge0: port 1(bridge_slave_0) entered blocking state [ 1768.844247][ T6238] bridge0: port 1(bridge_slave_0) entered disabled state [ 1768.867040][ T6238] bridge_slave_0: entered allmulticast mode [ 1768.896544][ T6238] bridge_slave_0: entered promiscuous mode [ 1768.926461][ T6238] bridge0: port 2(bridge_slave_1) entered blocking state [ 1768.943100][ T6238] bridge0: port 2(bridge_slave_1) entered disabled state [ 1768.961081][ T6238] bridge_slave_1: entered allmulticast mode [ 1768.971561][ T6238] bridge_slave_1: entered promiscuous mode [ 1769.042755][ T6238] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1769.088220][ T6238] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1769.214489][ T6238] team0: Port device team_slave_0 added [ 1769.225644][T30233] Bluetooth: hci3: command tx timeout [ 1769.230082][ T6238] team0: Port device team_slave_1 added [ 1769.402299][ T6238] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1769.409603][ T6238] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1769.444830][ T6238] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1769.568927][ T6131] veth0_vlan: entered promiscuous mode [ 1769.591711][ T6238] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1769.637611][ T6238] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1769.717549][ T6238] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1769.791687][ T6131] veth1_vlan: entered promiscuous mode [ 1769.827567][ T6238] hsr_slave_0: entered promiscuous mode [ 1769.857313][ T6238] hsr_slave_1: entered promiscuous mode [ 1769.864519][ T6238] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1769.882725][ T6238] Cannot create hsr debugfs directory [ 1770.097837][T30233] Bluetooth: hci2: command tx timeout [ 1770.150688][ T6131] veth0_macvtap: entered promiscuous mode [ 1770.217451][ T6131] veth1_macvtap: entered promiscuous mode [ 1770.268707][ T6131] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1770.326619][ T6131] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1770.352851][ T6131] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1770.371378][ T6131] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1770.397822][ T6131] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1770.406594][ T6131] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1770.465131][ T6303] FAULT_INJECTION: forcing a failure. [ 1770.465131][ T6303] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1770.483401][ T6303] CPU: 1 PID: 6303 Comm: syz.1.9520 Not tainted syzkaller #0 [ 1770.490834][ T6303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1770.500904][ T6303] Call Trace: [ 1770.504188][ T6303] [ 1770.507109][ T6303] dump_stack_lvl+0x18c/0x250 [ 1770.511782][ T6303] ? show_regs_print_info+0x20/0x20 [ 1770.516972][ T6303] ? load_image+0x420/0x420 [ 1770.521463][ T6303] ? __might_fault+0xaa/0x120 [ 1770.526130][ T6303] ? __lock_acquire+0x7eb0/0x7eb0 [ 1770.531176][ T6303] should_fail_ex+0x394/0x4c0 [ 1770.535854][ T6303] _copy_from_user+0x2f/0xe0 [ 1770.540442][ T6303] __sys_bpf+0x23e/0x890 [ 1770.544690][ T6303] ? bpf_link_show_fdinfo+0x560/0x560 [ 1770.550059][ T6303] ? lock_chain_count+0x20/0x20 [ 1770.554898][ T6303] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1770.560868][ T6303] __x64_sys_bpf+0x7c/0x90 [ 1770.565271][ T6303] do_syscall_64+0x55/0xb0 [ 1770.569675][ T6303] ? clear_bhb_loop+0x40/0x90 [ 1770.574336][ T6303] ? clear_bhb_loop+0x40/0x90 [ 1770.579001][ T6303] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1770.584912][ T6303] RIP: 0033:0x7f9efbb9f559 [ 1770.589329][ T6303] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1770.608946][ T6303] RSP: 002b:00007f9efca08028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1770.617367][ T6303] RAX: ffffffffffffffda RBX: 00007f9efbe25fa0 RCX: 00007f9efbb9f559 [ 1770.625341][ T6303] RDX: 0000000000000050 RSI: 0000200000000940 RDI: 000000000000000a [ 1770.633308][ T6303] RBP: 00007f9efca08090 R08: 0000000000000000 R09: 0000000000000000 [ 1770.641320][ T6303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1770.649300][ T6303] R13: 00007f9efbe26038 R14: 00007f9efbe25fa0 R15: 00007fff01a33288 [ 1770.657302][ T6303] [ 1770.677011][ T6238] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1770.694813][ T6307] netlink: 'syz.2.9519': attribute type 10 has an invalid length. [ 1770.704854][ T6238] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1770.740519][ T6238] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1770.764439][ T6238] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1770.988064][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1771.003355][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1771.014549][ T6310] netlink: 'syz.2.9521': attribute type 10 has an invalid length. [ 1771.079039][T19212] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1771.088642][T19212] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1771.152648][ T6238] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1771.194310][ T6238] 8021q: adding VLAN 0 to HW filter on device team0 [ 1771.232286][T19212] bridge0: port 1(bridge_slave_0) entered blocking state [ 1771.239517][T19212] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1771.258396][T19212] bridge0: port 2(bridge_slave_1) entered blocking state [ 1771.265582][T19212] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1771.299219][T30233] Bluetooth: hci3: command tx timeout [ 1771.773882][ T6238] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1771.834091][ T6330] rxe_eth0 speed is unknown, defaulting to 1000 [ 1771.950724][ T6336] mac80211_hwsim hwsim371 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1772.044284][ T6338] netlink: 128 bytes leftover after parsing attributes in process `syz.1.9527'. [ 1772.069529][ T6338] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1772.424180][ T6343] FAULT_INJECTION: forcing a failure. [ 1772.424180][ T6343] name failslab, interval 1, probability 0, space 0, times 0 [ 1772.447661][ T6343] CPU: 0 PID: 6343 Comm: syz.2.9528 Not tainted syzkaller #0 [ 1772.455106][ T6343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1772.465185][ T6343] Call Trace: [ 1772.468484][ T6343] [ 1772.471439][ T6343] dump_stack_lvl+0x18c/0x250 [ 1772.476149][ T6343] ? show_regs_print_info+0x20/0x20 [ 1772.481377][ T6343] ? load_image+0x420/0x420 [ 1772.485905][ T6343] ? __lock_acquire+0x7eb0/0x7eb0 [ 1772.490959][ T6343] ? perf_trace_preemptirq_template+0x269/0x330 [ 1772.497234][ T6343] should_fail_ex+0x394/0x4c0 [ 1772.501948][ T6343] should_failslab+0x9/0x20 [ 1772.506475][ T6343] slab_pre_alloc_hook+0x59/0x300 [ 1772.511525][ T6343] ? bpf_test_init+0x9f/0x140 [ 1772.516230][ T6343] ? bpf_test_init+0x9f/0x140 [ 1772.520933][ T6343] __kmem_cache_alloc_node+0x53/0x260 [ 1772.526335][ T6343] ? bpf_test_init+0x9f/0x140 [ 1772.531039][ T6343] __kmalloc+0xa7/0x240 [ 1772.535237][ T6343] bpf_test_init+0x9f/0x140 [ 1772.539771][ T6343] bpf_prog_test_run_xdp+0x4cd/0x1140 [ 1772.545165][ T6343] ? __lock_acquire+0x7eb0/0x7eb0 [ 1772.550226][ T6343] ? dev_put+0x80/0x80 [ 1772.554338][ T6343] ? dev_put+0x80/0x80 [ 1772.558428][ T6343] bpf_prog_test_run+0x31f/0x390 [ 1772.563378][ T6343] __sys_bpf+0x49d/0x890 [ 1772.567617][ T6343] ? bpf_link_show_fdinfo+0x560/0x560 [ 1772.573003][ T6343] ? lock_chain_count+0x20/0x20 [ 1772.577850][ T6343] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1772.583835][ T6343] __x64_sys_bpf+0x7c/0x90 [ 1772.588249][ T6343] do_syscall_64+0x55/0xb0 [ 1772.592660][ T6343] ? clear_bhb_loop+0x40/0x90 [ 1772.597337][ T6343] ? clear_bhb_loop+0x40/0x90 [ 1772.602016][ T6343] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1772.607908][ T6343] RIP: 0033:0x7f76bd79f559 [ 1772.612319][ T6343] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1772.631919][ T6343] RSP: 002b:00007f76be719028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1772.640329][ T6343] RAX: ffffffffffffffda RBX: 00007f76bda25fa0 RCX: 00007f76bd79f559 [ 1772.648295][ T6343] RDX: 0000000000000050 RSI: 0000200000000940 RDI: 000000000000000a [ 1772.656258][ T6343] RBP: 00007f76be719090 R08: 0000000000000000 R09: 0000000000000000 [ 1772.664221][ T6343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1772.672188][ T6343] R13: 00007f76bda26038 R14: 00007f76bda25fa0 R15: 00007ffff52d3178 [ 1772.680171][ T6343] [ 1772.735406][ T6238] veth0_vlan: entered promiscuous mode [ 1772.783253][ T6238] veth1_vlan: entered promiscuous mode [ 1772.874483][ T6349] netlink: 'syz.1.9529': attribute type 3 has an invalid length. [ 1772.889501][ T6349] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.9529'. [ 1772.936266][ T6238] veth0_macvtap: entered promiscuous mode [ 1772.978898][ T6238] veth1_macvtap: entered promiscuous mode [ 1773.016976][ T6352] netlink: 'syz.2.9530': attribute type 10 has an invalid length. [ 1773.039715][ T6238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1773.052917][ T6238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1773.073342][ T6238] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1773.098439][ T6238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1773.114694][ T6238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1773.131606][ T6238] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1773.172986][ T6238] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1773.194626][ T6238] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1773.216636][ T6238] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1773.227635][ T6238] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1773.389126][T30233] Bluetooth: hci3: command tx timeout [ 1773.414704][ T6359] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1773.422063][ T6359] IPv6: NLM_F_CREATE should be set when creating new route [ 1773.429422][ T6359] IPv6: NLM_F_CREATE should be set when creating new route [ 1773.436702][ T6359] IPv6: NLM_F_CREATE should be set when creating new route [ 1773.572336][ T7646] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1773.599871][T19233] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1773.612369][T19233] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1773.673867][ T7646] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1774.083778][ T6369] netlink: 'syz.4.9508': attribute type 21 has an invalid length. [ 1774.108472][ T6369] netlink: 'syz.4.9508': attribute type 12 has an invalid length. [ 1774.116559][ T6369] netlink: 'syz.4.9508': attribute type 13 has an invalid length. [ 1774.138346][ T6369] netlink: 'syz.4.9508': attribute type 14 has an invalid length. [ 1774.148984][ T6369] netlink: 'syz.4.9508': attribute type 15 has an invalid length. [ 1774.157298][ T6369] netlink: 'syz.4.9508': attribute type 16 has an invalid length. [ 1774.166403][ T6369] netlink: 12926 bytes leftover after parsing attributes in process `syz.4.9508'. [ 1774.279171][ T6376] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.9537'. [ 1774.354526][ T6374] netlink: 'syz.1.9537': attribute type 2 has an invalid length. [ 1774.363453][ T6375] netlink: 'syz.1.9537': attribute type 2 has an invalid length. [ 1774.509031][ T6380] FAULT_INJECTION: forcing a failure. [ 1774.509031][ T6380] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1774.547877][ T6380] CPU: 0 PID: 6380 Comm: syz.3.9539 Not tainted syzkaller #0 [ 1774.555330][ T6380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1774.556902][ T6382] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.9540'. [ 1774.565402][ T6380] Call Trace: [ 1774.565417][ T6380] [ 1774.565427][ T6380] dump_stack_lvl+0x18c/0x250 [ 1774.565456][ T6380] ? show_regs_print_info+0x20/0x20 [ 1774.565477][ T6380] ? load_image+0x420/0x420 [ 1774.565497][ T6380] ? __lock_acquire+0x7eb0/0x7eb0 [ 1774.565523][ T6380] should_fail_ex+0x394/0x4c0 [ 1774.565549][ T6380] _copy_from_user+0x2f/0xe0 [ 1774.565577][ T6380] bpf_test_init+0xde/0x140 [ 1774.565603][ T6380] bpf_prog_test_run_xdp+0x4cd/0x1140 [ 1774.565625][ T6380] ? __lock_acquire+0x7eb0/0x7eb0 [ 1774.565657][ T6380] ? dev_put+0x80/0x80 [ 1774.565688][ T6380] ? dev_put+0x80/0x80 [ 1774.565710][ T6380] bpf_prog_test_run+0x31f/0x390 [ 1774.565735][ T6380] __sys_bpf+0x49d/0x890 [ 1774.565756][ T6380] ? bpf_link_show_fdinfo+0x560/0x560 [ 1774.565791][ T6380] ? lock_chain_count+0x20/0x20 [ 1774.565811][ T6380] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1774.658358][ T6380] __x64_sys_bpf+0x7c/0x90 [ 1774.662780][ T6380] do_syscall_64+0x55/0xb0 [ 1774.667196][ T6380] ? clear_bhb_loop+0x40/0x90 [ 1774.671873][ T6380] ? clear_bhb_loop+0x40/0x90 [ 1774.676549][ T6380] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1774.682442][ T6380] RIP: 0033:0x7fde0a79f559 [ 1774.686852][ T6380] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1774.706455][ T6380] RSP: 002b:00007fde0b6b1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1774.714867][ T6380] RAX: ffffffffffffffda RBX: 00007fde0aa25fa0 RCX: 00007fde0a79f559 [ 1774.722832][ T6380] RDX: 0000000000000050 RSI: 0000200000000940 RDI: 000000000000000a [ 1774.730797][ T6380] RBP: 00007fde0b6b1090 R08: 0000000000000000 R09: 0000000000000000 [ 1774.738764][ T6380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1774.746726][ T6380] R13: 00007fde0aa26038 R14: 00007fde0aa25fa0 R15: 00007fffc4f82088 [ 1774.754710][ T6380] [ 1774.812677][ T6388] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.9542'. [ 1774.841281][ T6388] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.9542'. [ 1774.854410][ T6388] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.9542'. [ 1775.039683][ T6392] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.9542'. [ 1775.080531][ T6397] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.9542'. [ 1775.470672][T30233] Bluetooth: hci3: command tx timeout [ 1775.638936][ T6387] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1777.186240][ T6434] __nla_validate_parse: 1 callbacks suppressed [ 1777.186276][ T6434] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.9551'. [ 1777.212427][ T6426] rxe_eth0 speed is unknown, defaulting to 1000 [ 1777.262892][ T6437] FAULT_INJECTION: forcing a failure. [ 1777.262892][ T6437] name failslab, interval 1, probability 0, space 0, times 0 [ 1777.285626][ T6437] CPU: 1 PID: 6437 Comm: syz.1.9553 Not tainted syzkaller #0 [ 1777.293072][ T6437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1777.303136][ T6437] Call Trace: [ 1777.306424][ T6437] [ 1777.309355][ T6437] dump_stack_lvl+0x18c/0x250 [ 1777.314084][ T6437] ? show_regs_print_info+0x20/0x20 [ 1777.319281][ T6437] ? load_image+0x420/0x420 [ 1777.323782][ T6437] ? __might_sleep+0xe0/0xe0 [ 1777.328369][ T6437] ? __lock_acquire+0x7eb0/0x7eb0 [ 1777.333392][ T6437] should_fail_ex+0x394/0x4c0 [ 1777.338079][ T6437] should_failslab+0x9/0x20 [ 1777.342578][ T6437] slab_pre_alloc_hook+0x59/0x300 [ 1777.347624][ T6437] ? __lock_acquire+0x7eb0/0x7eb0 [ 1777.352663][ T6437] ? kvmalloc_node+0x70/0x180 [ 1777.357336][ T6437] ? kvmalloc_node+0x70/0x180 [ 1777.362025][ T6437] __kmem_cache_alloc_node+0x53/0x260 [ 1777.367395][ T6437] ? kvmalloc_node+0x70/0x180 [ 1777.372077][ T6437] __kmalloc_node+0xa6/0x240 [ 1777.376670][ T6437] kvmalloc_node+0x70/0x180 [ 1777.381174][ T6437] bpf_test_run_xdp_live+0x1c2/0x1b30 [ 1777.386567][ T6437] ? verify_lock_unused+0x140/0x140 [ 1777.391770][ T6437] ? kasan_set_track+0x4e/0x70 [ 1777.396532][ T6437] ? __kasan_kmalloc+0x8f/0xa0 [ 1777.401294][ T6437] ? __kmalloc+0xb7/0x240 [ 1777.405631][ T6437] ? bpf_dispatcher_change_prog+0xc96/0xf10 [ 1777.411529][ T6437] ? xdp_convert_md_to_buff+0x330/0x330 [ 1777.417092][ T6437] ? __lock_acquire+0x7eb0/0x7eb0 [ 1777.422141][ T6437] ? __virt_addr_valid+0x10c/0x380 [ 1777.427255][ T6437] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 1777.433512][ T6437] ? _copy_from_user+0xa5/0xe0 [ 1777.438297][ T6437] ? bpf_test_init+0x119/0x140 [ 1777.443076][ T6437] ? xdp_convert_md_to_buff+0x5b/0x330 [ 1777.448534][ T6437] bpf_prog_test_run_xdp+0x7d8/0x1140 [ 1777.453911][ T6437] ? __lock_acquire+0x7eb0/0x7eb0 [ 1777.458962][ T6437] ? dev_put+0x80/0x80 [ 1777.463035][ T6437] ? dev_put+0x80/0x80 [ 1777.467130][ T6437] bpf_prog_test_run+0x31f/0x390 [ 1777.472073][ T6437] __sys_bpf+0x49d/0x890 [ 1777.476314][ T6437] ? bpf_link_show_fdinfo+0x560/0x560 [ 1777.481694][ T6437] ? lock_chain_count+0x20/0x20 [ 1777.486540][ T6437] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1777.492527][ T6437] __x64_sys_bpf+0x7c/0x90 [ 1777.496962][ T6437] do_syscall_64+0x55/0xb0 [ 1777.501394][ T6437] ? clear_bhb_loop+0x40/0x90 [ 1777.506070][ T6437] ? clear_bhb_loop+0x40/0x90 [ 1777.510750][ T6437] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1777.516643][ T6437] RIP: 0033:0x7f9efbb9f559 [ 1777.521059][ T6437] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1777.540667][ T6437] RSP: 002b:00007f9efca08028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1777.549079][ T6437] RAX: ffffffffffffffda RBX: 00007f9efbe25fa0 RCX: 00007f9efbb9f559 [ 1777.557066][ T6437] RDX: 0000000000000050 RSI: 0000200000000940 RDI: 000000000000000a [ 1777.565032][ T6437] RBP: 00007f9efca08090 R08: 0000000000000000 R09: 0000000000000000 [ 1777.573019][ T6437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1777.580988][ T6437] R13: 00007f9efbe26038 R14: 00007f9efbe25fa0 R15: 00007fff01a33288 [ 1777.588990][ T6437] [ 1778.250370][ T6448] validate_nla: 5 callbacks suppressed [ 1778.250405][ T6448] netlink: 'syz.3.9556': attribute type 10 has an invalid length. [ 1778.294617][ T6448] bridge0: port 2(bridge_slave_1) entered disabled state [ 1778.306915][ T6448] bridge_slave_1: left allmulticast mode [ 1778.313937][ T6448] bridge_slave_1: left promiscuous mode [ 1778.322147][ T6448] bridge0: port 2(bridge_slave_1) entered disabled state [ 1778.386986][ T6455] netlink: 'syz.1.9558': attribute type 10 has an invalid length. [ 1778.569867][ T6459] netlink: 'syz.3.9561': attribute type 7 has an invalid length. [ 1778.592563][ T6459] netlink: 'syz.3.9561': attribute type 1 has an invalid length. [ 1778.617965][ T6459] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.9561'. [ 1778.717822][ T6464] netlink: 'syz.1.9562': attribute type 10 has an invalid length. [ 1778.793151][ T6463] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9561'. [ 1779.081628][ T6468] netlink: 'syz.1.9564': attribute type 10 has an invalid length. [ 1779.133398][ T6467] FAULT_INJECTION: forcing a failure. [ 1779.133398][ T6467] name failslab, interval 1, probability 0, space 0, times 0 [ 1779.175338][ T6467] CPU: 1 PID: 6467 Comm: syz.2.9565 Not tainted syzkaller #0 [ 1779.182769][ T6467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1779.192845][ T6467] Call Trace: [ 1779.196139][ T6467] [ 1779.199081][ T6467] dump_stack_lvl+0x18c/0x250 [ 1779.203785][ T6467] ? show_regs_print_info+0x20/0x20 [ 1779.209026][ T6467] ? load_image+0x420/0x420 [ 1779.213552][ T6467] ? __might_sleep+0xe0/0xe0 [ 1779.218168][ T6467] ? __lock_acquire+0x7eb0/0x7eb0 [ 1779.223211][ T6467] should_fail_ex+0x394/0x4c0 [ 1779.227916][ T6467] should_failslab+0x9/0x20 [ 1779.232437][ T6467] slab_pre_alloc_hook+0x59/0x300 [ 1779.237475][ T6467] ? kvmalloc_node+0x70/0x180 [ 1779.242159][ T6467] ? kvmalloc_node+0x70/0x180 [ 1779.246833][ T6467] __kmem_cache_alloc_node+0x53/0x260 [ 1779.252204][ T6467] ? kvmalloc_node+0x70/0x180 [ 1779.256917][ T6467] __kmalloc_node+0xa6/0x240 [ 1779.261539][ T6467] kvmalloc_node+0x70/0x180 [ 1779.266044][ T6467] bpf_test_run_xdp_live+0x1e9/0x1b30 [ 1779.271418][ T6467] ? verify_lock_unused+0x140/0x140 [ 1779.276616][ T6467] ? kasan_set_track+0x4e/0x70 [ 1779.281379][ T6467] ? __kasan_kmalloc+0x8f/0xa0 [ 1779.286142][ T6467] ? __kmalloc+0xb7/0x240 [ 1779.290473][ T6467] ? bpf_dispatcher_change_prog+0xc96/0xf10 [ 1779.296364][ T6467] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 1779.302116][ T6467] ? xdp_convert_md_to_buff+0x330/0x330 [ 1779.307676][ T6467] ? __lock_acquire+0x7eb0/0x7eb0 [ 1779.312707][ T6467] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1779.318863][ T6467] ? __virt_addr_valid+0x10c/0x380 [ 1779.323980][ T6467] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 1779.330223][ T6467] ? _copy_from_user+0xa5/0xe0 [ 1779.334998][ T6467] ? bpf_test_init+0x119/0x140 [ 1779.339757][ T6467] ? xdp_convert_md_to_buff+0x5b/0x330 [ 1779.345222][ T6467] bpf_prog_test_run_xdp+0x7d8/0x1140 [ 1779.350597][ T6467] ? __lock_acquire+0x7eb0/0x7eb0 [ 1779.355629][ T6467] ? dev_put+0x80/0x80 [ 1779.359705][ T6467] ? dev_put+0x80/0x80 [ 1779.363770][ T6467] bpf_prog_test_run+0x31f/0x390 [ 1779.368725][ T6467] __sys_bpf+0x49d/0x890 [ 1779.372965][ T6467] ? bpf_link_show_fdinfo+0x560/0x560 [ 1779.378347][ T6467] ? lock_chain_count+0x20/0x20 [ 1779.383203][ T6467] __x64_sys_bpf+0x7c/0x90 [ 1779.387613][ T6467] do_syscall_64+0x55/0xb0 [ 1779.392029][ T6467] ? clear_bhb_loop+0x40/0x90 [ 1779.396706][ T6467] ? clear_bhb_loop+0x40/0x90 [ 1779.401384][ T6467] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1779.407276][ T6467] RIP: 0033:0x7f76bd79f559 [ 1779.411688][ T6467] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1779.431289][ T6467] RSP: 002b:00007f76be719028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1779.439699][ T6467] RAX: ffffffffffffffda RBX: 00007f76bda25fa0 RCX: 00007f76bd79f559 [ 1779.447666][ T6467] RDX: 0000000000000050 RSI: 0000200000000940 RDI: 000000000000000a [ 1779.455634][ T6467] RBP: 00007f76be719090 R08: 0000000000000000 R09: 0000000000000000 [ 1779.463606][ T6467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1779.471576][ T6467] R13: 00007f76bda26038 R14: 00007f76bda25fa0 R15: 00007ffff52d3178 [ 1779.479554][ T6467] [ 1779.664108][ T6471] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9566'. [ 1779.946818][ T6481] netlink: 'syz.3.9570': attribute type 10 has an invalid length. [ 1780.014721][ T6489] netlink: 'syz.1.9572': attribute type 10 has an invalid length. [ 1780.354912][ T6497] FAULT_INJECTION: forcing a failure. [ 1780.354912][ T6497] name failslab, interval 1, probability 0, space 0, times 0 [ 1780.384380][ T6497] CPU: 1 PID: 6497 Comm: syz.1.9576 Not tainted syzkaller #0 [ 1780.391825][ T6497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1780.401914][ T6497] Call Trace: [ 1780.405197][ T6497] [ 1780.408138][ T6497] dump_stack_lvl+0x18c/0x250 [ 1780.412818][ T6497] ? show_regs_print_info+0x20/0x20 [ 1780.418012][ T6497] ? load_image+0x420/0x420 [ 1780.422511][ T6497] ? __might_sleep+0xe0/0xe0 [ 1780.427101][ T6497] ? __lock_acquire+0x7eb0/0x7eb0 [ 1780.432151][ T6497] should_fail_ex+0x394/0x4c0 [ 1780.436844][ T6497] should_failslab+0x9/0x20 [ 1780.441346][ T6497] slab_pre_alloc_hook+0x59/0x300 [ 1780.446369][ T6497] ? page_pool_create+0x71/0x5c0 [ 1780.451306][ T6497] __kmem_cache_alloc_node+0x53/0x260 [ 1780.456671][ T6497] ? page_pool_create+0x71/0x5c0 [ 1780.461607][ T6497] kmalloc_node_trace+0x26/0xe0 [ 1780.466458][ T6497] page_pool_create+0x71/0x5c0 [ 1780.471222][ T6497] bpf_test_run_xdp_live+0x203/0x1b30 [ 1780.476597][ T6497] ? verify_lock_unused+0x140/0x140 [ 1780.481806][ T6497] ? __kmalloc+0xb7/0x240 [ 1780.486137][ T6497] ? bpf_dispatcher_change_prog+0xc96/0xf10 [ 1780.492036][ T6497] ? xdp_convert_md_to_buff+0x330/0x330 [ 1780.497597][ T6497] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1780.503784][ T6497] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 1780.510029][ T6497] ? xdp_convert_md_to_buff+0x5b/0x330 [ 1780.515508][ T6497] bpf_prog_test_run_xdp+0x7d8/0x1140 [ 1780.520883][ T6497] ? __lock_acquire+0x7eb0/0x7eb0 [ 1780.525908][ T6497] ? lock_chain_count+0x20/0x20 [ 1780.530757][ T6497] ? dev_put+0x80/0x80 [ 1780.534831][ T6497] ? dev_put+0x80/0x80 [ 1780.538896][ T6497] bpf_prog_test_run+0x31f/0x390 [ 1780.543837][ T6497] __sys_bpf+0x49d/0x890 [ 1780.548075][ T6497] ? bpf_link_show_fdinfo+0x560/0x560 [ 1780.553454][ T6497] ? lock_chain_count+0x20/0x20 [ 1780.558309][ T6497] __x64_sys_bpf+0x7c/0x90 [ 1780.562721][ T6497] do_syscall_64+0x55/0xb0 [ 1780.567140][ T6497] ? clear_bhb_loop+0x40/0x90 [ 1780.571815][ T6497] ? clear_bhb_loop+0x40/0x90 [ 1780.576490][ T6497] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1780.582388][ T6497] RIP: 0033:0x7f9efbb9f559 [ 1780.586823][ T6497] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1780.606436][ T6497] RSP: 002b:00007f9efca08028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1780.614873][ T6497] RAX: ffffffffffffffda RBX: 00007f9efbe25fa0 RCX: 00007f9efbb9f559 [ 1780.622854][ T6497] RDX: 0000000000000050 RSI: 0000200000000940 RDI: 000000000000000a [ 1780.630836][ T6497] RBP: 00007f9efca08090 R08: 0000000000000000 R09: 0000000000000000 [ 1780.638810][ T6497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1780.646781][ T6497] R13: 00007f9efbe26038 R14: 00007f9efbe25fa0 R15: 00007fff01a33288 [ 1780.654762][ T6497] [ 1780.799148][ T6507] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.9578'. [ 1780.818561][ T6507] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8 [ 1781.133444][ T6522] netlink: 'syz.2.9581': attribute type 10 has an invalid length. [ 1781.370951][ T6533] netlink: 'syz.4.9583': attribute type 10 has an invalid length. [ 1782.110991][ T6533] bridge0: port 2(bridge_slave_1) entered disabled state [ 1782.185374][ T6533] bridge_slave_1: left allmulticast mode [ 1782.197675][ T6533] bridge_slave_1: left promiscuous mode [ 1782.215314][ T6533] bridge0: port 2(bridge_slave_1) entered disabled state [ 1782.379995][ T6553] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.9590'. [ 1782.459684][ T6551] FAULT_INJECTION: forcing a failure. [ 1782.459684][ T6551] name failslab, interval 1, probability 0, space 0, times 0 [ 1782.498602][ T6551] CPU: 0 PID: 6551 Comm: syz.2.9589 Not tainted syzkaller #0 [ 1782.506047][ T6551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1782.516123][ T6551] Call Trace: [ 1782.519419][ T6551] [ 1782.522367][ T6551] dump_stack_lvl+0x18c/0x250 [ 1782.527079][ T6551] ? show_regs_print_info+0x20/0x20 [ 1782.532308][ T6551] ? load_image+0x420/0x420 [ 1782.536845][ T6551] ? __might_sleep+0xe0/0xe0 [ 1782.541462][ T6551] ? __lock_acquire+0x7eb0/0x7eb0 [ 1782.546517][ T6551] should_fail_ex+0x394/0x4c0 [ 1782.551216][ T6551] should_failslab+0x9/0x20 [ 1782.555731][ T6551] slab_pre_alloc_hook+0x59/0x300 [ 1782.560773][ T6551] ? kvmalloc_node+0x70/0x180 [ 1782.565477][ T6551] ? kvmalloc_node+0x70/0x180 [ 1782.570176][ T6551] __kmem_cache_alloc_node+0x53/0x260 [ 1782.575569][ T6551] ? kvmalloc_node+0x70/0x180 [ 1782.580300][ T6551] __kmalloc_node+0xa6/0x240 [ 1782.584917][ T6551] kvmalloc_node+0x70/0x180 [ 1782.589444][ T6551] page_pool_create+0x1eb/0x5c0 [ 1782.594324][ T6551] bpf_test_run_xdp_live+0x203/0x1b30 [ 1782.599726][ T6551] ? verify_lock_unused+0x140/0x140 [ 1782.604952][ T6551] ? kasan_set_track+0x4e/0x70 [ 1782.609737][ T6551] ? __kasan_kmalloc+0x8f/0xa0 [ 1782.614525][ T6551] ? __kmalloc+0xb7/0x240 [ 1782.618882][ T6551] ? bpf_dispatcher_change_prog+0xc96/0xf10 [ 1782.624805][ T6551] ? xdp_convert_md_to_buff+0x330/0x330 [ 1782.630399][ T6551] ? __lock_acquire+0x7eb0/0x7eb0 [ 1782.635448][ T6551] ? __virt_addr_valid+0x10c/0x380 [ 1782.640588][ T6551] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 1782.646877][ T6551] ? _copy_from_user+0xa5/0xe0 [ 1782.651673][ T6551] ? bpf_test_init+0x119/0x140 [ 1782.656465][ T6551] ? xdp_convert_md_to_buff+0x5b/0x330 [ 1782.661950][ T6551] bpf_prog_test_run_xdp+0x7d8/0x1140 [ 1782.667387][ T6551] ? __lock_acquire+0x7eb0/0x7eb0 [ 1782.672447][ T6551] ? dev_put+0x80/0x80 [ 1782.676555][ T6551] ? dev_put+0x80/0x80 [ 1782.680689][ T6551] bpf_prog_test_run+0x31f/0x390 [ 1782.685661][ T6551] __sys_bpf+0x49d/0x890 [ 1782.689935][ T6551] ? bpf_link_show_fdinfo+0x560/0x560 [ 1782.695343][ T6551] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1782.701540][ T6551] __x64_sys_bpf+0x7c/0x90 [ 1782.705979][ T6551] do_syscall_64+0x55/0xb0 [ 1782.710405][ T6551] ? clear_bhb_loop+0x40/0x90 [ 1782.715088][ T6551] ? clear_bhb_loop+0x40/0x90 [ 1782.719773][ T6551] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1782.725671][ T6551] RIP: 0033:0x7f76bd79f559 [ 1782.730082][ T6551] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1782.749701][ T6551] RSP: 002b:00007f76be719028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1782.758115][ T6551] RAX: ffffffffffffffda RBX: 00007f76bda25fa0 RCX: 00007f76bd79f559 [ 1782.766080][ T6551] RDX: 0000000000000050 RSI: 0000200000000940 RDI: 000000000000000a [ 1782.774049][ T6551] RBP: 00007f76be719090 R08: 0000000000000000 R09: 0000000000000000 [ 1782.782063][ T6551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1782.790068][ T6551] R13: 00007f76bda26038 R14: 00007f76bda25fa0 R15: 00007ffff52d3178 [ 1782.798073][ T6551] [ 1782.809113][ T6561] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1782.845270][ T6551] page_pool_create() gave up with errno -12 [ 1783.812483][ T6582] validate_nla: 2 callbacks suppressed [ 1783.812500][ T6582] netlink: 'syz.3.9598': attribute type 29 has an invalid length. [ 1784.134448][ T6577] wg2: entered promiscuous mode [ 1784.157056][ T6577] wg2: entered allmulticast mode [ 1784.210005][ T6582] netlink: 'syz.3.9598': attribute type 29 has an invalid length. [ 1784.235768][ T6583] netlink: 'syz.3.9598': attribute type 29 has an invalid length. [ 1784.270385][ T6586] netlink: 'syz.3.9598': attribute type 29 has an invalid length. [ 1784.313400][ T6589] netlink: 'syz.3.9598': attribute type 29 has an invalid length. [ 1784.806645][ T6608] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.9605'. [ 1784.846390][ T6603] netlink: 'syz.1.9604': attribute type 10 has an invalid length. [ 1784.881896][ T6600] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 1784.908435][ T6600] syzkaller0: linktype set to 768 [ 1787.837102][ T6654] netlink: 'syz.4.9616': attribute type 10 has an invalid length. [ 1788.789316][ T6672] FAULT_INJECTION: forcing a failure. [ 1788.789316][ T6672] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1788.814492][ T6672] CPU: 0 PID: 6672 Comm: syz.4.9619 Not tainted syzkaller #0 [ 1788.821936][ T6672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1788.825249][ T6680] mac80211_hwsim hwsim394 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1788.831989][ T6672] Call Trace: [ 1788.832000][ T6672] [ 1788.832008][ T6672] dump_stack_lvl+0x18c/0x250 [ 1788.832038][ T6672] ? show_regs_print_info+0x20/0x20 [ 1788.832059][ T6672] ? load_image+0x420/0x420 [ 1788.832080][ T6672] ? __might_fault+0xaa/0x120 [ 1788.832102][ T6672] ? __lock_acquire+0x7eb0/0x7eb0 [ 1788.832127][ T6672] should_fail_ex+0x394/0x4c0 [ 1788.832153][ T6672] _copy_to_user+0x2f/0xa0 [ 1788.880504][ T6672] bpf_test_finish+0x19f/0x650 [ 1788.885280][ T6672] ? convert_skb_to___skb+0x420/0x420 [ 1788.890649][ T6672] ? _copy_from_user+0xa5/0xe0 [ 1788.895410][ T6672] ? bpf_test_init+0x119/0x140 [ 1788.900177][ T6672] bpf_prog_test_run_xdp+0x8b4/0x1140 [ 1788.905549][ T6672] ? __lock_acquire+0x7eb0/0x7eb0 [ 1788.910580][ T6672] ? dev_put+0x80/0x80 [ 1788.914653][ T6672] ? dev_put+0x80/0x80 [ 1788.918722][ T6672] bpf_prog_test_run+0x31f/0x390 [ 1788.923687][ T6672] __sys_bpf+0x49d/0x890 [ 1788.927948][ T6672] ? bpf_link_show_fdinfo+0x560/0x560 [ 1788.933338][ T6672] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1788.939508][ T6672] __x64_sys_bpf+0x7c/0x90 [ 1788.943940][ T6672] do_syscall_64+0x55/0xb0 [ 1788.948357][ T6672] ? clear_bhb_loop+0x40/0x90 [ 1788.953049][ T6672] ? clear_bhb_loop+0x40/0x90 [ 1788.957730][ T6672] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1788.963640][ T6672] RIP: 0033:0x7f801b39f559 [ 1788.968056][ T6672] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1788.987684][ T6672] RSP: 002b:00007f801c1c0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1788.996094][ T6672] RAX: ffffffffffffffda RBX: 00007f801b625fa0 RCX: 00007f801b39f559 [ 1789.004065][ T6672] RDX: 0000000000000050 RSI: 0000200000000940 RDI: 000000000000000a [ 1789.012033][ T6672] RBP: 00007f801c1c0090 R08: 0000000000000000 R09: 0000000000000000 [ 1789.019999][ T6672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1789.027971][ T6672] R13: 00007f801b626038 R14: 00007f801b625fa0 R15: 00007fff32a12178 [ 1789.035950][ T6672] [ 1789.072854][ T6681] mac80211_hwsim hwsim394 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1789.371103][ T6687] netlink: 'syz.2.9624': attribute type 10 has an invalid length. [ 1790.056477][ T6708] FAULT_INJECTION: forcing a failure. [ 1790.056477][ T6708] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1790.080199][ T6708] CPU: 1 PID: 6708 Comm: syz.3.9633 Not tainted syzkaller #0 [ 1790.087642][ T6708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1790.099024][ T6708] Call Trace: [ 1790.102320][ T6708] [ 1790.105261][ T6708] dump_stack_lvl+0x18c/0x250 [ 1790.109962][ T6708] ? show_regs_print_info+0x20/0x20 [ 1790.115186][ T6708] ? load_image+0x420/0x420 [ 1790.119715][ T6708] ? __might_fault+0xaa/0x120 [ 1790.124416][ T6708] ? __lock_acquire+0x7eb0/0x7eb0 [ 1790.129471][ T6708] should_fail_ex+0x394/0x4c0 [ 1790.134178][ T6708] _copy_to_user+0x2f/0xa0 [ 1790.138621][ T6708] bpf_test_finish+0x25a/0x650 [ 1790.143420][ T6708] ? convert_skb_to___skb+0x420/0x420 [ 1790.148830][ T6708] ? _copy_from_user+0xa5/0xe0 [ 1790.153617][ T6708] ? bpf_test_init+0x119/0x140 [ 1790.158405][ T6708] bpf_prog_test_run_xdp+0x8b4/0x1140 [ 1790.163814][ T6708] ? __lock_acquire+0x7eb0/0x7eb0 [ 1790.168877][ T6708] ? dev_put+0x80/0x80 [ 1790.172987][ T6708] ? dev_put+0x80/0x80 [ 1790.177080][ T6708] bpf_prog_test_run+0x31f/0x390 [ 1790.182042][ T6708] __sys_bpf+0x49d/0x890 [ 1790.186302][ T6708] ? bpf_link_show_fdinfo+0x560/0x560 [ 1790.191711][ T6708] ? lock_chain_count+0x20/0x20 [ 1790.196587][ T6708] __x64_sys_bpf+0x7c/0x90 [ 1790.201020][ T6708] do_syscall_64+0x55/0xb0 [ 1790.205456][ T6708] ? clear_bhb_loop+0x40/0x90 [ 1790.210151][ T6708] ? clear_bhb_loop+0x40/0x90 [ 1790.214850][ T6708] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1790.220767][ T6708] RIP: 0033:0x7fde0a79f559 [ 1790.225208][ T6708] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1790.244840][ T6708] RSP: 002b:00007fde0b690028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1790.253264][ T6708] RAX: ffffffffffffffda RBX: 00007fde0aa26090 RCX: 00007fde0a79f559 [ 1790.261259][ T6708] RDX: 0000000000000050 RSI: 0000200000000940 RDI: 000000000000000a [ 1790.269258][ T6708] RBP: 00007fde0b690090 R08: 0000000000000000 R09: 0000000000000000 [ 1790.277374][ T6708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1790.285372][ T6708] R13: 00007fde0aa26128 R14: 00007fde0aa26090 R15: 00007fffc4f82088 [ 1790.289953][T21542] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1790.293362][ T6708] [ 1790.307185][T21542] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1790.316030][T21542] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1790.324437][T21542] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1790.333583][T21542] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1790.341164][T21542] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1790.476460][ T6712] rxe_eth0 speed is unknown, defaulting to 1000 [ 1791.381320][ T6733] netlink: 'syz.1.9647': attribute type 21 has an invalid length. [ 1791.444549][ T6733] netlink: 16166 bytes leftover after parsing attributes in process `syz.1.9647'. [ 1791.676699][T19229] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1791.861848][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.868692][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1791.890344][T19229] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1792.023146][ T6740] syzkaller0: entered promiscuous mode [ 1792.035989][ T6740] syzkaller0: entered allmulticast mode [ 1792.051980][ T6750] FAULT_INJECTION: forcing a failure. [ 1792.051980][ T6750] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1792.078441][ T6750] CPU: 0 PID: 6750 Comm: syz.4.9643 Not tainted syzkaller #0 [ 1792.085879][ T6750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1792.095967][ T6750] Call Trace: [ 1792.099267][ T6750] [ 1792.102222][ T6750] dump_stack_lvl+0x18c/0x250 [ 1792.106932][ T6750] ? show_regs_print_info+0x20/0x20 [ 1792.112155][ T6750] ? load_image+0x420/0x420 [ 1792.116686][ T6750] ? __might_fault+0xaa/0x120 [ 1792.121385][ T6750] ? __lock_acquire+0x7eb0/0x7eb0 [ 1792.126435][ T6750] should_fail_ex+0x394/0x4c0 [ 1792.131133][ T6750] _copy_to_user+0x2f/0xa0 [ 1792.135569][ T6750] bpf_test_finish+0x4e7/0x650 [ 1792.140338][ T6750] ? convert_skb_to___skb+0x420/0x420 [ 1792.145701][ T6750] ? _copy_from_user+0xa5/0xe0 [ 1792.150468][ T6750] ? bpf_test_init+0x119/0x140 [ 1792.155249][ T6750] bpf_prog_test_run_xdp+0x8b4/0x1140 [ 1792.160625][ T6750] ? __lock_acquire+0x7eb0/0x7eb0 [ 1792.165657][ T6750] ? dev_put+0x80/0x80 [ 1792.169729][ T6750] ? dev_put+0x80/0x80 [ 1792.173791][ T6750] bpf_prog_test_run+0x31f/0x390 [ 1792.178728][ T6750] __sys_bpf+0x49d/0x890 [ 1792.182968][ T6750] ? bpf_link_show_fdinfo+0x560/0x560 [ 1792.188347][ T6750] ? lock_chain_count+0x20/0x20 [ 1792.193197][ T6750] __x64_sys_bpf+0x7c/0x90 [ 1792.197613][ T6750] do_syscall_64+0x55/0xb0 [ 1792.202027][ T6750] ? clear_bhb_loop+0x40/0x90 [ 1792.206699][ T6750] ? clear_bhb_loop+0x40/0x90 [ 1792.211375][ T6750] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1792.217262][ T6750] RIP: 0033:0x7f801b39f559 [ 1792.221672][ T6750] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1792.241273][ T6750] RSP: 002b:00007f801c19f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1792.249695][ T6750] RAX: ffffffffffffffda RBX: 00007f801b626090 RCX: 00007f801b39f559 [ 1792.257661][ T6750] RDX: 0000000000000050 RSI: 0000200000000940 RDI: 000000000000000a [ 1792.265626][ T6750] RBP: 00007f801c19f090 R08: 0000000000000000 R09: 0000000000000000 [ 1792.273596][ T6750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1792.281558][ T6750] R13: 00007f801b626128 R14: 00007f801b626090 R15: 00007fff32a12178 [ 1792.289541][ T6750] [ 1792.321796][T19229] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1792.419258][T30233] Bluetooth: hci5: command tx timeout [ 1792.602894][T19229] netdevsim netdevsim2 ÿÿÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1793.072381][T19235] wlan1: Trigger new scan to find an IBSS to join [ 1794.497761][T30233] Bluetooth: hci5: command tx timeout [ 1794.914349][ T6765] netlink: 'syz.4.9649': attribute type 10 has an invalid length. [ 1794.960009][ T6712] chnl_net:caif_netlink_parms(): no params data found [ 1795.707861][ T6712] bridge0: port 1(bridge_slave_0) entered blocking state [ 1795.801789][ T6712] bridge0: port 1(bridge_slave_0) entered disabled state [ 1795.843543][ T6712] bridge_slave_0: entered allmulticast mode [ 1795.913733][ T6712] bridge_slave_0: entered promiscuous mode [ 1795.974858][ T6712] bridge0: port 2(bridge_slave_1) entered blocking state [ 1796.014398][ T6712] bridge0: port 2(bridge_slave_1) entered disabled state [ 1796.036999][T19235] wlan1: Trigger new scan to find an IBSS to join [ 1796.069381][ T6712] bridge_slave_1: entered allmulticast mode [ 1796.076748][ T6712] bridge_slave_1: entered promiscuous mode [ 1796.577570][T30233] Bluetooth: hci5: command tx timeout [ 1797.319468][ T12] wlan1: Creating new IBSS network, BSSID da:68:f6:cc:7e:8a [ 1797.364247][ T6712] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1797.396622][ T6712] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1798.667591][T30233] Bluetooth: hci5: command tx timeout [ 1800.691484][ T6712] team0: Port device team_slave_0 added [ 1800.753853][ T6712] team0: Port device team_slave_1 added [ 1801.094329][ T6831] netlink: 'syz.3.9660': attribute type 10 has an invalid length. [ 1801.274164][ T6712] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1801.299604][ T6712] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1801.326718][ T6712] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1801.350154][ T6849] netlink: 'syz.1.9662': attribute type 10 has an invalid length. [ 1801.426908][ T6712] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1801.434236][ T6712] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1801.462880][ T6712] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1801.790394][ T6712] hsr_slave_0: entered promiscuous mode [ 1801.831055][ T6712] hsr_slave_1: entered promiscuous mode [ 1801.838907][ T6712] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1801.846523][ T6712] Cannot create hsr debugfs directory [ 1801.948235][ T6866] netlink: 'syz.4.9671': attribute type 10 has an invalid length. [ 1803.359898][T19229] [ 1803.362975][T19229] ====================================================== [ 1803.370000][T19229] WARNING: possible circular locking dependency detected [ 1803.377041][T19229] syzkaller #0 Not tainted [ 1803.381470][T19229] ------------------------------------------------------ [ 1803.388494][T19229] kworker/u4:48/19229 is trying to acquire lock: [ 1803.394820][T19229] ffff888079cb4dc0 (team->team_lock_key#13){+.+.}-{3:3}, at: team_device_event+0x295/0xc50 [ 1803.404857][T19229] [ 1803.404857][T19229] but task is already holding lock: [ 1803.412204][T19229] ffff888066d70768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x2bd/0x690 [ 1803.422547][T19229] [ 1803.422547][T19229] which lock already depends on the new lock. [ 1803.422547][T19229] [ 1803.432939][T19229] [ 1803.432939][T19229] the existing dependency chain (in reverse order) is: [ 1803.441941][T19229] [ 1803.441941][T19229] -> #1 (&rdev->wiphy.mtx){+.+.}-{3:3}: [ 1803.449662][T19229] __mutex_lock+0x135/0xc80 [ 1803.454742][T19229] ieee80211_open+0x144/0x200 [ 1803.459932][T19229] __dev_open+0x2cb/0x430 [ 1803.464787][T19229] dev_open+0xab/0x190 [ 1803.469363][T19229] team_add_slave+0x703/0x28a0 [ 1803.474640][T19229] do_setlink+0xda4/0x3f00 [ 1803.479565][T19229] rtnl_newlink+0x1848/0x2170 [ 1803.484749][T19229] rtnetlink_rcv_msg+0x843/0xf90 [ 1803.490196][T19229] netlink_rcv_skb+0x235/0x4c0 [ 1803.495469][T19229] netlink_unicast+0x7b1/0x930 [ 1803.500742][T19229] netlink_sendmsg+0x8d0/0xbf0 [ 1803.506035][T19229] ____sys_sendmsg+0x61b/0x980 [ 1803.511310][T19229] ___sys_sendmsg+0x2a6/0x360 [ 1803.516497][T19229] __se_sys_sendmsg+0x1d0/0x2c0 [ 1803.521855][T19229] do_syscall_64+0x55/0xb0 [ 1803.526785][T19229] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1803.533192][T19229] [ 1803.533192][T19229] -> #0 (team->team_lock_key#13){+.+.}-{3:3}: [ 1803.541443][T19229] __lock_acquire+0x3a07/0x7eb0 [ 1803.546804][T19229] lock_acquire+0x19e/0x420 [ 1803.551815][T19229] __mutex_lock+0x135/0xc80 [ 1803.556852][T19229] team_device_event+0x295/0xc50 [ 1803.562296][T19229] notifier_call_chain+0x18f/0x380 [ 1803.567921][T19229] unregister_netdevice_many_notify+0x1037/0x1910 [ 1803.574851][T19229] unregister_netdevice_queue+0x2e9/0x330 [ 1803.581080][T19229] _cfg80211_unregister_wdev+0x16c/0x5a0 [ 1803.587226][T19229] ieee80211_remove_interfaces+0x4b3/0x690 [ 1803.593541][T19229] ieee80211_unregister_hw+0x5d/0x2a0 [ 1803.599428][T19229] mac80211_hwsim_del_radio+0x289/0x480 [ 1803.605485][T19229] hwsim_exit_net+0x58d/0x650 [ 1803.610669][T19229] cleanup_net+0x6f7/0xb00 [ 1803.615591][T19229] process_scheduled_works+0xa60/0x1600 [ 1803.621651][T19229] worker_thread+0xa5e/0xfe0 [ 1803.626752][T19229] kthread+0x2fa/0x390 [ 1803.631329][T19229] ret_from_fork+0x48/0x80 [ 1803.636255][T19229] ret_from_fork_asm+0x11/0x20 [ 1803.641582][T19229] [ 1803.641582][T19229] other info that might help us debug this: [ 1803.641582][T19229] [ 1803.651809][T19229] Possible unsafe locking scenario: [ 1803.651809][T19229] [ 1803.659246][T19229] CPU0 CPU1 [ 1803.664594][T19229] ---- ---- [ 1803.669946][T19229] lock(&rdev->wiphy.mtx); [ 1803.674441][T19229] lock(team->team_lock_key#13); [ 1803.681980][T19229] lock(&rdev->wiphy.mtx); [ 1803.688991][T19229] lock(team->team_lock_key#13); [ 1803.694005][T19229] [ 1803.694005][T19229] *** DEADLOCK *** [ 1803.694005][T19229] [ 1803.702134][T19229] 5 locks held by kworker/u4:48/19229: [ 1803.707573][T19229] #0: ffff888140049138 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 1803.718442][T19229] #1: ffffc90004b6fd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 1803.728963][T19229] #2: ffffffff8f3db010 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x140/0xb00 [ 1803.738352][T19229] #3: ffffffff8f3e8208 (rtnl_mutex){+.+.}-{3:3}, at: ieee80211_unregister_hw+0x55/0x2a0 [ 1803.748175][T19229] #4: ffff888066d70768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x2bd/0x690 [ 1803.758950][T19229] [ 1803.758950][T19229] stack backtrace: [ 1803.764825][T19229] CPU: 1 PID: 19229 Comm: kworker/u4:48 Not tainted syzkaller #0 [ 1803.772544][T19229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1803.782600][T19229] Workqueue: netns cleanup_net [ 1803.787368][T19229] Call Trace: [ 1803.790639][T19229] [ 1803.793581][T19229] dump_stack_lvl+0x18c/0x250 [ 1803.798254][T19229] ? load_image+0x420/0x420 [ 1803.802747][T19229] ? show_regs_print_info+0x20/0x20 [ 1803.807944][T19229] ? print_circular_bug+0x12b/0x1a0 [ 1803.813141][T19229] check_noncircular+0x2fc/0x400 [ 1803.818075][T19229] ? print_deadlock_bug+0x5d0/0x5d0 [ 1803.823261][T19229] ? lockdep_lock+0xf5/0x230 [ 1803.827847][T19229] ? _find_first_zero_bit+0xd6/0x100 [ 1803.833130][T19229] __lock_acquire+0x3a07/0x7eb0 [ 1803.837999][T19229] ? verify_lock_unused+0x140/0x140 [ 1803.843207][T19229] ? verify_lock_unused+0x140/0x140 [ 1803.848406][T19229] ? __up_read+0x2b8/0x6b0 [ 1803.852815][T19229] ? up_read+0x20/0x20 [ 1803.856876][T19229] lock_acquire+0x19e/0x420 [ 1803.861385][T19229] ? team_device_event+0x295/0xc50 [ 1803.866497][T19229] ? __might_sleep+0xe0/0xe0 [ 1803.871084][T19229] ? read_lock_is_recursive+0x20/0x20 [ 1803.876449][T19229] ? xsk_notifier+0x210/0x220 [ 1803.881199][T19229] __mutex_lock+0x135/0xc80 [ 1803.885698][T19229] ? team_device_event+0x295/0xc50 [ 1803.890812][T19229] ? bond_netdev_event+0xeb/0xef0 [ 1803.895835][T19229] ? team_device_event+0x295/0xc50 [ 1803.901027][T19229] ? mutex_lock_nested+0x20/0x20 [ 1803.905965][T19229] team_device_event+0x295/0xc50 [ 1803.910900][T19229] notifier_call_chain+0x18f/0x380 [ 1803.916006][T19229] unregister_netdevice_many_notify+0x1037/0x1910 [ 1803.922418][T19229] ? unregister_netdevice_many+0x20/0x20 [ 1803.928044][T19229] ? kernfs_remove_by_name_ns+0x117/0x150 [ 1803.933765][T19229] ? __lock_acquire+0x7eb0/0x7eb0 [ 1803.938807][T19229] unregister_netdevice_queue+0x2e9/0x330 [ 1803.944527][T19229] ? list_netdevice+0x730/0x730 [ 1803.949368][T19229] ? kernfs_remove_by_name_ns+0x117/0x150 [ 1803.955113][T19229] _cfg80211_unregister_wdev+0x16c/0x5a0 [ 1803.960748][T19229] ieee80211_remove_interfaces+0x4b3/0x690 [ 1803.966552][T19229] ? ieee80211_do_stop+0x2030/0x2030 [ 1803.971834][T19229] ? rcu_is_watching+0x15/0xb0 [ 1803.976600][T19229] ieee80211_unregister_hw+0x5d/0x2a0 [ 1803.981970][T19229] mac80211_hwsim_del_radio+0x289/0x480 [ 1803.987512][T19229] ? rhashtable_remove_fast+0xc00/0xc00 [ 1803.993048][T19229] hwsim_exit_net+0x58d/0x650 [ 1803.997718][T19229] ? hwsim_init_net+0x90/0x90 [ 1804.002416][T19229] ? __ip_vs_dev_cleanup_batch+0x238/0x250 [ 1804.008290][T19229] cleanup_net+0x6f7/0xb00 [ 1804.012700][T19229] ? ops_free_list+0x3b0/0x3b0 [ 1804.017461][T19229] ? _raw_spin_unlock_irq+0x23/0x50 [ 1804.022663][T19229] ? process_scheduled_works+0x975/0x1600 [ 1804.028408][T19229] ? process_scheduled_works+0x975/0x1600 [ 1804.034142][T19229] process_scheduled_works+0xa60/0x1600 [ 1804.039713][T19229] ? worker_attach_to_pool+0x370/0x370 [ 1804.045176][T19229] ? assign_work+0x3cc/0x5d0 [ 1804.049765][T19229] worker_thread+0xa5e/0xfe0 [ 1804.054354][T19229] ? _raw_spin_unlock+0x40/0x40 [ 1804.059198][T19229] ? __kthread_parkme+0x71/0x1c0 [ 1804.064129][T19229] kthread+0x2fa/0x390 [ 1804.068191][T19229] ? pr_cont_work+0x550/0x550 [ 1804.072860][T19229] ? kthread_blkcg+0xd0/0xd0 [ 1804.077439][T19229] ret_from_fork+0x48/0x80 [ 1804.081848][T19229] ? kthread_blkcg+0xd0/0xd0 [ 1804.086427][T19229] ret_from_fork_asm+0x11/0x20 [ 1804.091190][T19229] [ 1804.169222][T19229] team0: Port device wlan1 removed [ 1804.219021][ T6905] netlink: 'syz.4.9674': attribute type 10 has an invalid length. [ 1804.477282][T19229] veth1_macvtap: left promiscuous mode [ 1804.483640][T19229] veth0_macvtap: left promiscuous mode [ 1804.490646][T19229] veth1_vlan: left promiscuous mode [ 1804.582758][T19229] team0 (unregistering): Port device geneve1 removed [ 1804.965705][T19229] team0 (unregistering): Port device team_slave_1 removed [ 1805.385459][ T6712] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1805.405330][ T6712] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1805.418677][ T6712] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1805.428906][ T6712] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1805.651915][ T6712] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1805.685957][ T6712] 8021q: adding VLAN 0 to HW filter on device team0 [ 1805.723497][T19212] bridge0: port 1(bridge_slave_0) entered blocking state [ 1805.730702][T19212] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1805.777300][T19212] bridge0: port 2(bridge_slave_1) entered blocking state [ 1805.784501][T19212] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1805.858769][ T6712] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1806.092720][ T6712] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1806.139706][ T6712] veth0_vlan: entered promiscuous mode [ 1806.151977][ T6712] veth1_vlan: entered promiscuous mode [ 1806.200043][ T6712] veth0_macvtap: entered promiscuous mode [ 1806.212262][ T6712] veth1_macvtap: entered promiscuous mode [ 1806.232172][ T6712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1806.243912][ T6712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1806.256441][ T6712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1806.269144][ T6712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1806.280616][ T6712] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1806.299201][ T6712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1806.312495][ T6712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1806.324210][ T6712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1806.335828][ T6712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1806.347317][ T6712] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1806.365216][ T6712] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1806.375082][ T6712] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1806.384578][ T6712] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1806.394633][ T6712] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1806.442538][ T6712] ieee80211 phy398: Selected rate control algorithm 'minstrel_ht' [ 1806.481431][T19235] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1806.482780][ T6712] ieee80211 phy399: Selected rate control algorithm 'minstrel_ht' [ 1806.510056][T19235] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1806.540862][T19233] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1806.549284][T19233] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50