last executing test programs: 22.32492128s ago: executing program 0 (id=3751): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffeffe, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="bdb808dc8568b340418c92ceb709", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="fbe6bd8dfcdda5a210b8cfefbd66f459c7261b927d25d3cf74d2f7c97735eba47f606a290d184925922333211d168ab0f6e1081fdbd921ed4db0e67c9d5ab1452445a1e0da5ac68b13f4afe2712eeaad35ef06", 0x53}], 0x1, 0x0, 0xfffffedf}, 0x10) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f0000000340)=r4, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) r6 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000005b80)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a7401", 0x17}], 0x1}, 0x0) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000430033b29396ee35e0e5c50005", @ANYRES32, @ANYRES8=r6], 0xfe33) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r7, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0xffffffffffffffff, 0x1, 0x2000}}, 0x10, 0x0}, 0x0) 21.33517353s ago: executing program 3 (id=3755): r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x10104) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$cgroup_devices(r1, 0x0, 0x2, 0x0) write$cgroup_devices(r2, 0x0, 0xa) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000013006bcd9e3fe3d46e48aa31086b8703130000001f00000000000000050003002e2e0a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c902d1938037e73f07d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 21.241935192s ago: executing program 0 (id=3756): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000921d9caf10928c09000000000537e79ffb1c83940000d6ffffff"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000ac0)={r1, r2}, 0xc) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x51004400, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xe, 0x1c, &(0x7f0000000600)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0xc, 0x2, 0x0, 0x0, 0x20}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xffef, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x107, 0x2, &(0x7f00000000c0), 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000010c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$kcm(0x10, 0x2, 0x4) r5 = socket$kcm(0x28, 0x1, 0x0) setsockopt$sock_attach_bpf(r5, 0x28, 0x3c, 0x0, 0x0) close(r4) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e000000040000000400000002"], 0x50) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)="d8000000140081054e81f782db44b904021f08020a000000040000a118000200e00000e4ffff0d1208000f0100810401880016ea1f0006400303000803600cfab94dcf5c0461c1d67f6f94007134cf6ee080005c8400f45312b3429fa0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a0000", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r6, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) socket$kcm(0x28, 0x5, 0x28) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000800)={r6, &(0x7f0000000780)}, 0x20) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x3, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0xff, 0x0, 0x0, 0x4d31, 0x20002, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpu.stat\x00', 0x26e1, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)="2e00000010008188040f80ec59acbc0413a1f848290000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x400c084) 20.961613565s ago: executing program 4 (id=3759): close(0x3) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000040000000400000008"], 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000300), 0x75, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000800000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000ffffff7f000000008f7bc7f7850000004100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x2100, 0xfffffffd, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) socket$kcm(0xa, 0x3, 0x73) r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r3}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x200000000000000f, &(0x7f0000000000)=ANY=[], &(0x7f0000000c00)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x40}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x100, 0x0, 0x0, 0x6}, 0x0, 0x40000000007, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600}, 0x0) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x5, 0x0, 0x0, 0x12, 0x0, 0x0, 0x34290, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x4200003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) openat$cgroup_procs(r4, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="850200000000000018100000", @ANYRES32, @ANYBLOB="0000000000000000950000000000000045"], 0x0}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair(0x2a, 0x1, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f3, &(0x7f0000000040)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x40000000}, 0x10c002, 0xac5d, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[], 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) 20.961233325s ago: executing program 3 (id=3760): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)='/proc/net/\x00\x00t4/c+\x0fG\xf9aK\fX\a0\x04\x00\xfd\x82q\xee'}, 0x30) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x85, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, @perf_bp={&(0x7f0000000000), 0x7}, 0x2400, 0x0, 0x0, 0x8, 0x200000000, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x9) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, 0x0, &(0x7f00000002c0)}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00', 0x10}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f0, &(0x7f0000000080)) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r4, 0xffffffffffffffff}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={0xffffffffffffffff, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000400)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6, &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x2d, &(0x7f0000000780)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f00000007c0), &(0x7f0000000840), 0x8, 0x81, 0x8, 0x8, &(0x7f0000000880)}}, 0x10) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000a00)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000a40)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0x8, '\x00', r6, r7, 0x0, 0x2, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000006c0)={r4, &(0x7f00000003c0)="09def52f8941a32789960f73ccd2346a8128c588cb3a35cb8af459651524bce99ca8d1f3f56d5edf1e97b21521c72fbe84985d", &(0x7f0000000580)=""/92}, 0x20) sendmsg(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)="ef", 0x1}], 0x1}, 0x40000) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r8, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x19, 0x3, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', r9, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) 20.960705155s ago: executing program 2 (id=3761): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x29, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000900)={&(0x7f0000000300)=@phonet={0x23, 0xf9, 0xa6, 0x7f}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000500)="69ac311947dab8fceaa3873b495ae5cd8de8d56c3203af5955e551d8fd6b88416cab85f7907edb4488f1217bbdb12a36d0d58637852c1ecd1bd253d18397c0a48d67edb3af242f6d9adf88871e248d008bd40f7b16f06e820ed738951f0b312d2bc11608eeb84cde0ed0eaa2173eaf3b1ef1f4c5507aec416da4255b9e5c7c34829bd04ce1dbee06afd9ac1a23fcb8581b5f13da1522558be76221ba55b800f0f54ba280b6b370221d5c7d797e7d6e32b62097992a445fa730a95803fe3481619c69fba88e95726aa02d0851b3e396c0daf4ea210e6ed2ec834bdb6a682ad1567f4a", 0xe2}, {&(0x7f0000000600)="17b41c049e42cd1b29c9803e8c0daf4d89c9dc1c8511e52b23fb64dc01968e6f1b2fe86a68", 0x25}, {&(0x7f0000000640)="a70df0a64e941adf8ac41cda6739314ee681fbba19e6a26ae2021f1eb991fab815cc6aa4ede1ea4a21da7fd731d2624056a7b33fe1cdb5e17aa5a27d29164cef470b99ef37b30bfc739d4fda1b8bf008c6bb44d7562c058c9a3847a28bd71427b9a4dd4813626a1578ecbe595aa746fe9fefd8c04ba395c5bfda2dedd5572f3c18fffff35bb000f9aac702cd37e4edf2b543f31a43baec329a54d2", 0x9b}, {&(0x7f0000000800)="48389665dfe4349f2134f3045b1b49becd7ea57d1b093a7b6c14c14321406cdaa46fe61e7446a7f53ddcedb49e7e266b120d10779482263dc41ce778babd3dfac997897fdb2d62cf3d157c2721ebf045173036b36471eca319dd7ca243bba889b72b42a5a57893b9690cc8f23fe7e9fd982d14c90488478dee69c4087ec7b912a2f927572f63de3c0d1593108c7ed048a821ba83bbfc0c5f1790", 0x9a}], 0x4}, 0xc001) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x0, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000000000000000f9ffffff8500000028000000180100002020702500000000d04d9884be2f"], 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32, @ANYBLOB="10001d000000faff947b72fb9900000045"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x50}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f3, &(0x7f0000000080)) r3 = openat$cgroup_devices(r1, &(0x7f00000000c0)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000980)=ANY=[@ANYBLOB='b *:', @ANYRESOCT=r3], 0xe) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@fwd={0x8}]}, {0x0, [0x2e, 0x61, 0x0, 0x5f, 0x61]}}, &(0x7f00000001c0)=""/45, 0x2b, 0x2d, 0x0, 0xbcca, 0x10000}, 0x28) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x2c) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0xe, 0x0, &(0x7f0000000080)="a314472a3ebf07662bb26a717f3b", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="5c00000013006bab9e3fe3d86e6c1d0000147ea64e21160af36504b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f408000300060100000800030011000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000780)={'pim6reg0\x00', 0x400}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) 20.660996738s ago: executing program 1 (id=3763): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000003540)=""/4114, 0x1012}], 0x1}, 0x10100) (fail_nth: 9) 20.569933319s ago: executing program 4 (id=3764): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000440), 0x8) close(r0) socket$kcm(0xf, 0x3, 0x2) write$cgroup_devices(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='b *:*$r\x00'], 0x8) socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x4, 0x0, 0x0, 0x0, 0x4, 0x32598, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x6, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x8000, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x1e, 0x7, 0x0) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, 0x0, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000018c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb01001800000000000000a8000000a8000000040000000b00000000000010040000000c000000000000100c0000000100000006000013000000000d000000430b0000090000000c0000009e3a339d14fbbdc3b295d57c8fbb00001eee912c09004662a5eb7ff6e212a7c6c1ed9f6fee51000006000000000100000400000060000000010000000f00000001040000000000000d0000006c9e000004000000692cf009c205bbb4997b5e80c01178c00600000000000002030000000b0000000000001004000000060000000000000700000000"], &(0x7f00000008c0)=""/4096, 0xc4, 0x1000, 0x1, 0x5}, 0x28) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x4030582a, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000001000000000000000000000085000000a8000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000340)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, r2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@o_path={&(0x7f00000000c0)='./file0\x00', 0x0, 0x4018}, 0x18) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r5) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r5}, 0x8) ioctl$SIOCSIFHWADDR(r5, 0x8b28, &(0x7f0000000000)={'wlan1\x00', @random=' \x00'}) socket$kcm(0xa, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f00000001c0)={r6}, 0x8) close(r7) socket$kcm(0xa, 0x2, 0x3a) 19.66650415s ago: executing program 3 (id=3765): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000108800000410000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0xfffffffc, 0x0, 0xb6eb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa35f022eb"], 0xcfa4) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r0, &(0x7f0000000240)=ANY=[@ANYRES8, @ANYRESOCT], 0x13) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, r1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 19.61800625s ago: executing program 1 (id=3766): socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2004}, 0x109080, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21bef5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f94306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a835701bea8240399c56ce8f58df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b262341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261e58fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f9ac2f7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe8799fe266e2ccac80fefe750151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa796ea7b156d19612297c63bb20e1e0469f7615f67a9218cbace38f5236821314f76302b98afa93044b83989339ca10e6ae30e70e17a82f03e915b8425e8e7a91614306d2ae0bc3550d856f2d7293672b5673d264fc886b0c8bdf436a0fcd21bf9da7bdca98e34cd6e59b0a7ce4ba1b466561aaa35448dff47bb1d7df23d467689a6669e4300d5acf12e4d0b35abf91569f605b2f6df0d861"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1b0000001a007f029e", 0x9}, {&(0x7f0000000200)="68cabf2dfb58fc0a01008888ffff0200258f", 0x12}], 0x2}, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000000e8ffffffffffff05000000", @ANYRES32=0x1], 0x48) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8916, &(0x7f0000000000)={r2}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8936, &(0x7f0000000000)={r2}) 19.501629281s ago: executing program 4 (id=3767): r0 = socket$kcm(0x2b, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{0x1, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{0x1, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000440)}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={0xffffffffffffffff, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0], 0x0, 0xe3, &(0x7f0000000740)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000780), &(0x7f00000007c0), 0x8, 0xce, 0x8, 0x8, &(0x7f0000000800)}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x6, 0x1b, &(0x7f0000000540)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0xac}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x9}, @jmp={0x5, 0x0, 0x0, 0x3, 0x1, 0xfffffffffffffff0}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}], &(0x7f0000000640)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x4, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000a00)={0xa, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000a40), &(0x7f0000000a80)=[{0x0, 0x4}, {0x3, 0x5, 0x0, 0x6}, {0x0, 0x1, 0x6, 0x5}, {0x5, 0x2, 0x4, 0x9}]}, 0x94) sendmsg$sock(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000140)="a890c370e2bc84548e87d87fd29fc1270e226f5a1d24096c084ec86b1bfa99ee33f91e3495acc756a2cb6685", 0x2c}], 0x1}, 0x4000081) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffa}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x2, 0x4, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4}, 0x0, 0x0}, 0x20) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000080)={r4, &(0x7f0000000040)}, 0x20) 19.425564422s ago: executing program 0 (id=3768): perf_event_open(0x0, 0x0, 0xf, 0xffffffffffffffff, 0xa) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x2}, 0x0, 0x0, 0xfffffffd, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x8f}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x80) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x26e1, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x9, 0xa, 0x89, 0xa7, 0x0, 0x3ff, 0x10000, 0x5, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0x0, 0x6, 0x8, 0x1a, 0x8000, 0x0, 0x0, 0x781, 0x0, 0x3}, 0xffffffffffffffff, 0x1, r1, 0x5) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000000), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe3b, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001180)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1000, '\x00', r5, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x4, 0x2, 0x405e, 0x8, r2, 0xff, '\x00', r5, 0xffffffffffffffff, 0x0, 0x4, 0x3, 0xc}, 0x50) sendmsg$kcm(r4, &(0x7f0000000100)={&(0x7f0000000a80)=@hci={0x1f, 0x300, 0x3}, 0x80, &(0x7f00000000c0)=[{0x0}], 0x1}, 0x4041) r6 = socket$kcm(0x10, 0x2, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000040)=r7, 0x4) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e343a185bbf7000000016ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010300090c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a2", 0x89}], 0x1}, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) 18.859984848s ago: executing program 4 (id=3769): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c268811000000000000000000002571cd53b9851b30599980bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xa, 0x4, 0x4, 0xa, 0x0, 0x1}, 0x50) close(0x3) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0500000005000000fd0900009b"], 0x50) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2}, 0xc) (async) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/162, 0xa2}, {&(0x7f0000000c80)=""/230, 0xe6}, {&(0x7f0000001880)=""/4090, 0xffa}, {&(0x7f00000000c0)=""/108, 0x6c}, {&(0x7f0000000e00)=""/102, 0x66}, {&(0x7f0000000d80)=""/113, 0x71}], 0x6}, 0x100) 18.678553s ago: executing program 3 (id=3770): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000780)={'pim6reg0\x00', 0x400}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000440)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000780)={'pim6reg0\x00', 0x400}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000280)={'ipvlan1\x00', 0x400}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2c0800, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5c00000012006b9c9e3fe3d86e6c1d0000147ea60864160af36504b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c2151fef08d8cdbf9367b4fad1f60a64c9f408000300060100000400000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x2f, &(0x7f0000000480)=r4, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="b40000000000004061146c000000000005000000000000009500000002008f11d800000000e776d3b495bca7a6dfaef8d854cdd5620b04df187800c1c62da07d50679bb9b3d0cbe92177c773da4e7e61662b86cbfbb3444b62c3bc8f4e8f20b869067b465f077b45ccd886556b8d71c75a7821960f0e09d71631b4a23878d279f90a0900000000000000b59d90f983c9d6ee557d8f10"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0x1}, &(0x7f00000001c0), &(0x7f0000000200)=r6}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0), 0x4}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r8 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r8, &(0x7f0000003780)={0x0, 0x3000000, &(0x7f0000000080)=[{&(0x7f0000000040)="0205000902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x0) 18.571899791s ago: executing program 2 (id=3771): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x11c412, 0x1, 0x0, 0x5, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x4, 0x1}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5c00000014006b03000000d86e6c1d0010ffff0af32c6e021fffffff000000000f00000017d3a705251e6182949a369f3d3b48dfd8cd3f9367c1fa51f60a64c9f4d4938037e786a6d0bdd7000000000000eaffffffb3d59256a5a2fd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) close(r0) socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b9040a1d08020a000000040000a1180002003f00000000000e1208000f0100810401a80016ea1f1506400303000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad956", 0xa2}], 0x1, 0x0, 0x0, 0x7400}, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x6eab22e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) 18.571170962s ago: executing program 1 (id=3772): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000120000"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000bc0)={r0, 0xe0, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0], 0x0, 0xb0, &(0x7f0000000740)=[{}], 0x8, 0x10, &(0x7f0000000a00), &(0x7f0000000a40), 0x8, 0x15, 0x8, 0x8, &(0x7f0000000a80)}}, 0x10) r1 = socket$kcm(0x10, 0x3, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socket$kcm(0x2b, 0x1, 0x0) openat$cgroup_freezer_state(r1, &(0x7f0000000380), 0x2, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0xd, r2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b000000070000000100e9ff0800000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={r0, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000400)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x9, &(0x7f0000000440)=[0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x25, &(0x7f0000000580)=[{}, {}], 0x10, 0x10, &(0x7f00000005c0), &(0x7f00000006c0), 0x8, 0x62, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'dvmrp0\x00', 0x2}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020032000b35d25a806f8c6394f90324fc602f1b01000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 18.430797243s ago: executing program 4 (id=3773): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x2, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x4a}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x9, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) 18.430075713s ago: executing program 0 (id=3774): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x9}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x10, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfefff963}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r1, 0x0, 0xe, 0x0, &(0x7f0000000180)="19b24f406b4b34f555028d313a39", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x2}, 0x50) 18.256549145s ago: executing program 2 (id=3775): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000580081044e81f782db44b904021d080009000300e8fe55a118", 0x1d}], 0x1}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x3000}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) r3 = bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xf, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r4}, 0xc) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x9, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x400000, [{0x6, 0x3, 0x1b}]}]}, {0x0, [0x2e, 0x2e, 0x61, 0x61, 0x30, 0x2e, 0x5f]}}, &(0x7f0000000580)=""/250, 0x39, 0xfa, 0x1}, 0x28) sendmsg$inet(r1, &(0x7f0000000400)={&(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000000280)=[{&(0x7f00000001c0)="c8e23ad4e57b526cca3ebcc64cb70c4038e1315cc6823c3d66cddff09921c793bf6ff5d37ef2f1d269854682af723bbc79dbe4a2c2a30a620a2a43f44d5a847fb7e8425d448630979c8f3f12733e73394125d03700bac6c7fc4f858b2c45c915d3eb46c0293b3d02eb67df145756e338564243521f18c70b4ba3d7babec9b76981d53b4e0d3402f86ba6c3ebcba27c13de16128f0784dac629fcb430263b314a074b", 0xa2}], 0x1, &(0x7f0000000380)=[@ip_retopts={{0x2c, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x17, 0x7, [@broadcast, @empty, @dev={0xac, 0x14, 0x14, 0x14}, @empty, @local]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @multicast2, @multicast2}}}], 0x50}, 0x4001) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a9b80"], 0xfe33) 18.212782406s ago: executing program 0 (id=3776): socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffff56a, 0x100000000}, 0x250a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$inet(r1, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1}, 0x3e8) 18.161235656s ago: executing program 4 (id=3777): socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffe21, 0x0, 0x0, 0x8}, 0x28) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmsg(0xffffffffffffffff, 0x0, 0x40000004) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4008804) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x101}, 0x104046}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r1) socket$kcm(0x2, 0x200000000000006, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000000000000000000200000000010000000000000e0100000000000000002e"], 0x0, 0x37}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, r2, 0x2, 0x5}, 0x50) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000000)={0x5, 0x80, 0x10, 0xfd, 0x0, 0x0, 0x0, 0x1, 0x90, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0xaa32, 0x6, 0xfffffffd, 0x0, 0x7f}) ioctl$TUNGETVNETLE(r1, 0x8955, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.swap.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0xc29c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) syz_clone(0x2a801400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x10104) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = openat$cgroup_devices(r3, 0x0, 0x2, 0x0) write$cgroup_devices(r4, 0x0, 0xa) 17.970742978s ago: executing program 2 (id=3778): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = socket$kcm(0x1e, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000000)={r1}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x400000, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r2) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x6, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r4) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\v'], 0x48) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r6) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="000000000400"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRESHEX=r5, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x29, 0x1, 0x4, &(0x7f0000000080)={0x0, 0x0}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{}, 0x0, &(0x7f0000000180)='%pB \x00'}, 0x20) close(r9) setsockopt$sock_attach_bpf(r10, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(r11) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x91400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r12, 0x10f, 0x87, &(0x7f0000000180), 0x127) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r13) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0x40001) setsockopt$sock_attach_bpf(r14, 0x10f, 0x87, &(0x7f0000000140), 0x95) close(r12) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYRESDEC=r8], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x1) 17.970015828s ago: executing program 3 (id=3779): r0 = socket$kcm(0x2b, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{0x1, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{0x1, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000440)}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={0xffffffffffffffff, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0], 0x0, 0xe3, &(0x7f0000000740)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000780), &(0x7f00000007c0), 0x8, 0xce, 0x8, 0x8, &(0x7f0000000800)}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x6, 0x1b, &(0x7f0000000540)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0xac}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x9}, @jmp={0x5, 0x0, 0x0, 0x3, 0x1, 0xfffffffffffffff0}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}], &(0x7f0000000640)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x4, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000a00)={0xa, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000a40), &(0x7f0000000a80)=[{0x0, 0x4}, {0x3, 0x5, 0x0, 0x6}, {0x0, 0x1, 0x6, 0x5}, {0x5, 0x2, 0x4, 0x9}]}, 0x94) sendmsg$sock(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000140)="a890c370e2bc84548e87d87fd29fc1270e226f5a1d24096c084ec86b1bfa99ee33f91e3495acc756a2cb6685", 0x2c}], 0x1}, 0x4000081) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffa}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x2, 0x4, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4}, 0x0, 0x0}, 0x20) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000080)={r4, &(0x7f0000000040)}, 0x20) 17.83085531s ago: executing program 0 (id=3780): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000108800000410000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0xfffffffc, 0x0, 0xb6eb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa35f022eb"], 0xcfa4) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r0, &(0x7f0000000240)=ANY=[@ANYRES8, @ANYRESOCT], 0x13) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, r1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 17.81072584s ago: executing program 1 (id=3781): r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="364000001a00913a"], 0x82d7) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000028c0)={&(0x7f0000000040)=@isdn={0x22, 0x9, 0x7f, 0xd, 0x1}, 0x80, &(0x7f0000000280)=[{&(0x7f00000000c0)="2f7838ed2d3676b61251d810859e8bc0b8df34c4e6010f75e33e3cfcacd459ac0788a8ba39440edd53af8338b3ced9102e0c5b80f922a3d78d4c367210bc1a395fe1e77c28d6f0c5c890516d6f8ffa0b427d0815e382ade550937d4c4025b467911bb486745a066733e2751b32db44bcd3ba5d9366889685b551598f8a3a6d6548bc6dc5507dc12fb18dcdcf3d5fe6b5a0ab4d583abedb92d3b4f780f5c32ae4473cf73f759431218aef5e1440d6e6da8903e757617e3c4465a5d299a0b99ba0ec23eb509b02f2d7fd2114c22d971025d167a8af4150a65a8cbaed8aadb3092616c70c83", 0xe4}, {&(0x7f0000000200)="2a98b0beec4a851bd4747f9f6aabd12689a8e0de", 0x14}], 0x2, &(0x7f0000001380)=[{0xb8, 0xff, 0x1, "2d6f4eac8d20b247e43ec3830427fdd896f5d2a601afe3cdaab4c1710759900fe27fb5a1285fa6529e28efd87bceb46e021c082f4045d9ba10bd1b6afd277474d2d975dd1a3388d8e610ec2fd07a838c7a3126e4ad2330a9488f7d7cf7fbaa5f1c6903dd3d62f5a05bd71679f47b836585af1c3b6d80815b3b1af70a3a9ffe1146b418668e2403c9077b059bec5b9c2c5a57c1dc5ea91c0be9bec215e3676dfebcd3b58eb4ba5e"}, {0x1010, 0x18, 0x7, "5b2078a0dbcd3385275975e6be1beea4c90767b19f8a9ef2a0fef582ab75a08d7c1399180cc5713ce96bab4533ed5579a7e31f3806bd2fecbdaea28ecd953b03a72e9111c7e1970d19b415f3feb4694599d0fadf3c9f095c0640f9d486871f58ac47dbdf623c0b42d678da14888c01f2ae94d91b8cffd59381ace3da54bb91335e4c158029b85c6302e5b4c7d60407cc791e83bae61c09cf23b156f4b3398417b8511ffe1a65473196de5341ac8338e4e8897c53647e06718e9e5865afb2960ffd2804924fbd0258d61409e8d00a4790af67979af02ddd768b5e7c262823a85e63abeff82d72dd2164bdabc4306c59b55e89f1d4a597904dbd92391ff6b36821f0cf17451fb6582d78bc79ed6bcb119418167e0b076463b93b78b30570f98853ed86752c011d4ccea32eccc4c00a5b552e2860f252cba1030f9e632c3bf6183ac0e3da5fad9bee5177ad0cb7cea37b158caa16e972461ddc73be86ae93b74f0a31bcbb4a7b3f92e15a2754bb011e98442a13ef8a21b2e265cf916665c23b95280975a05d0c9513002b326ad025dad665a7deec802bfbdee50ce3c389d33565b3ccfc1f477cd7adb1fd93000281d3ebccfcf614a302416320c78bb1f9425b67068f9c4aed5abe0e15530d54fa8d0f58e9ad2518dc0d1e72715bf21d392916e401a16d83019818a1514964d459415bab814473971ec8a8f6699c95e39071549c02fdee076ecba142f0692695175c58a8087dc8e5913a9a39bdb328d9b55beb4d6ccf330d8845a66275ffef90199394fc525b688c10185dba7829fbefa9236927673eedea76d6b938a0bfe254f1e1f555cc9d7f8e36b073e0c85449e6fc83a6e8d736054bf1b6a6cc4435e9a445ca825c1911996e5bd5193132df4faa0030a2ab1458c42cfc5092eeccd17bd6995217b43d0b28ada71a3c82d1aecdc1376560dd7d9439f0b461c309f79921d6c13d3d7bfe83c7dc5ce68634b4f1f667868aa02c9813d7d576df0d843999a2a03985444e159a68b7d7ed305190c237e8a9b51f43b735c2a542956a8175560fbaf33d30e25e2024276a1da2e7c5039f588793c67364d26472b18410da8c47efd69014aa39848b79416cecd213d18ec28c45c9f267a631815b354f3df310d2bc10aac0a27cfdd467cdfdb6231dedd37b16b93c3bf35ffd4a61ba83f57e1e35d5c020157c1e86f130c1900e6606f532f9024aa44917469cb4c5aded08a05885ce3751c8943a01edb4115255196007bce9ee143f53d54a9f87c6707922e8d560ac146a0b8cf7da3cb9b67ec7f296fe6b34a8128f6b517520e6885b42088df97ebb848fdbe0766a28ab2262fa7f9f7cb620d06a798d47adbb3f12579b79678edc46b169a422e556ab0262f729c27354cbff0862741b6c578b3bc5c46d01317cc32d080d838c84eb952242d13e744f8e581a988d29a3e4af5b406ba441cb53e45803a2da5a7e92705ae70774f3e730a218f9e919eb7cb0c821d6679c2afae867dfe3bc1a5522db15cb4a5e6953c1af4e03eff63ac0a5a41d6a5868661557746652a8d55715e8bc38d395692a62795f1bb419663175b27f1c74f89e8d325156701cc8115ea34d52940e8246004826c654815f83923d16010a35fb3d56f9b78e5ff74d0381a93ba531b32c97dfcd339b12d0505537d332f336c8272f8c38ff9355e1bf258907e538eff4af1c39cf22d1e24265b80736c4b8ac6f739cd809c6c3d5655a669aecd6a65946299ae871cdac47dd8646e20c50363e1ad8ffb389188f44cfa2985b7a2958778039e2df01efd2e04984656d6e6109192485d6a495476be9af2edbd6cba4a16776379c522a767f44dbc08a2c7b8616a548305de7817721ca44b8326f5d39924a30d9ad54cc7b8baa9ec88c723998d911d7718cf3d4d537055dbde3336ba203c54192c28508fd1d7806aa2f681d894c8e9c4546ee3a3d06a70a8ba97adcae370a95b5648a604522e532a80edb510af384166ab7953d3b37981091094334b913d57102f9f37a16a562db0d063fbc9c9ba37b14e61bd54c52d0e791716bb4f2b8e46689b83df33ff5c54fe40acad31f2bd4a4b95d0941707b56b079b7819c71c5a56180c5f2f269ce80bf536fa5edc12146e10d99130a5aa20cf4f1f0516e032b73f7d156c6a51f16fa7877b428c6cb9e795e089525e88fe8519bce14404ee4cc31c447e8d12335c422098098556312515da6898f38cb92045b8a8d2a2e4e60ddc2a8ab2787a9f5ccecc94d1ba68aca911d86f69e1a56fef74ed8a6d510febe836f341a43cb6723638f1ff64b0cd74f515f05ad3704515ce2767ba8858ae7aff9a775a4ba39d66bdf1ea0f4a495f78c7658e0fc518f8548ac01c9efc363fd2d20bfce74d40b57ed893b8807cccae8d9d67e2dda690f4bef7df70ab0651c2878d56e39e53e4894346706ea4dc3e61e330e2cdd0417ea8e4aaf128e6042ad1825b33957eab9a53008c4fcb6330bf4979d7cfaa19fd7bfaa81c9c5cec2d419e093f3d47278ec6747a66c735d4929c4846239f39b265e8fc63975f8ba9e01bc0dfebb92287a416447b9712ab753d64a0406913ca56120f297e70b297d6f1a852c0a6c98874172000577dae1e2d16f367f849ef79aa75eb19f38399b8e62a895d0e342115768d69f0a29de41d23d14447208d7a8f40abed812d30d13befbcd16b178b6c897a200617ad0a1bd3605d40011fe5441d8d38b3cb1f73523d7d26302cf89d7a7328e511e0a10f34ac95561fcfbd63ff7315b68a8e18ef2e7f86b3b376dec9e1811ef60720d696783a23a1882a5750771b480d379859bdc729193c89f94553ea4e2428f772fb12fe2bb9c3b94b80caac9a40e7ff7e068a0d58ebf7740adaa72edfd9a9352d550e4a4d3d50291b67c376fe95894c2b399765304ceb5ddb63c46a07d536451cebcfec4dcc469d4db38d35f4c858483d4c30f22a46ed572bccaacf3bc6b54125b6567ca7dec1508474d504ea520557d5aa884ced3d222de3aaaf896c9f16e04d1b633b213428a6e616e5ca01aec8ebe2ff27b790fe67d62283e3a9cefdddbe20ed6f617935751312903d65d5226daccf47e2c2b4a61342261efc0fcecff5a34317de4ff70f279edcd60a75d9dd0a9a81c025fcbf19f665fba7f4573127426d0cc441e12dd43781286bf4ba4c648f4b1ceefdfe22b27c500319e1c7d156ebaaae465ba7d663628bf2b0bae1fa033d114bfdbb3f8d17eff38c2d8cc783e781ad6e46aa328dc5a8a601a8429a0c867a9df415348ef5538f12a098beb705427a129f71b9f61a0c7b4d310c56924a5943df39c7dce8c251f7281fa8e722b49062bb48b98c0c556af626c1038c54d92942aff94252b368c5106f59c3a22c3c792889c23c61ce218fc96a740749e93bd2780343d46aeed5115ff986d1c01841a5b50d677a01d32cde5318269b97adffe0fcf73c919007387aedc7e3b969b5d9ec426e044ce600efcba98b4a7ffe65ba44bb1fa6d6b197261198849d00f71fec67370b3d1fa44310805e3d86892273a7ed14d39a4d957dc0daa592a8b3c87e346c6aa6e816fad16e8ff28d7fe86e0f451a0ab6ba11a899150c939f74802b2e0adf251db25b2257d4e327bfb0f01d0fdd4a620fb65d7519b941791f74cb89d3a9028d9b648a8d6ea2a6eba969f11fd9ff028a127c4d38d31f4696649294f694b66340b6ca5cb5f892960b42a8da458163ac8fe0b1c2b6d4f85cdf010178326c3e825e6ff4f78c9fe0b8ee2bd71d3a90b1b5b543b35991920b0ceda4de487151be621794ef03c0b8bb2bae9dad1417b4d0a9fdf259987c3c1a0a258ed4d15ac374a52222bd931e37d609cb623cb8ce4417ef3418188c99d33e01f98d35f9f96b04d124f82b0a11d2db5ec87e9b82daf8ceb54319fa54c74531886680c17a22f161759b35b0f9af1eb345fdb822d619ada0921929eedae9bf8771d2289c6bf83ccf4acd5dce98619fa84c9b70658f06050b1569a6ede847e171db592357a5575e272fa77ec4083e92fdf0d2918b7985d638284d9a7a6278b0212ef6eec35bc8e130eaad2858c7e51f3671d289254d86e0a7f3749cb4758c4310828997603591d978f549fe376c05449aa102e0a954023ee2a9104285397671f37fcb9ec495c44fd33bc844c56d5fbbae865a2eb124dabbaaf241515ccbfc930ab253ce469436cc55435546abd5a4d1970030f692512633fcc7451b650046770cf6692535dee4fabd306906447a4abb53077c7d947fd3353d7ce468dc85e8e6f42b484f506b9b2cae73c2aa940c27f42394a09d2c691812d26e7cd7c75100d789910dd1719c8be389e3001d76d4dbc98b210d1c989ad1a2717a5a6434703f87a130d138815caef26c321096b6822b6871d018dfac8a290f3b4c0331bc6985ff7da3937b4553f7ba32a2cf25b17533d73013ac66c7215b0e0b4b91674a01510a1bda015719507b91bfcd1136f7e6dd613648324a978d457f13eaf5004bbc75be8613c077ac3327ab31703484cd02982918df29359fe46fc3526d4e44820e406f0234fafcb3a7c9912efbb91bae12c48f2915f4fca89c15aa68e534171962ba9d2e7611326ec4cd64b65b374a12f1a0372ffb224032606f96b062842c5fe61c55c840ac5ab605c181a75511d37c9d4ea412a2c8f55378207bc69c761c43003831fe5923856e873c8cc804812a6ad598e6d145034a8a4fd0a3d2ce0b189a00b819db84be330691f5d6839672756e46530ae679bf7cbb5c556da7af5c0aeb8dd76cf0e860da59cf8b9a84c671b43b5b7839356b5bc6416ef1985c4bdcbe00ab24cb59024c38d2bf5e2a48c899600fab90f946a75a76e61f5576a71963ff1f3fc85f3c9f6b89ffeedb7c9ebb59c9087a4f63bf58b54bf132096fd37f1abef745b2b9481fbdec9158c590be0f95a70c671d86e0d4ce204a4a88618493986d913a65e501b2ad65324a659e9fb2d36b831ea7453e3156ba9660f3a00dd69dbc73896393a6fb99f6d606b042d288a75989bf91caec226f5d8f90c17c83e8b66e9f6930495666611f899a3475bf2be311f1e7d1cf423f4fb5e694bb29541d1ff62aa14c95ed4a7a39197f3a8de43bc44f92d4bc0b2157f242a2d9c72343680f4f0b573d47363eb90fd85678f3e17a59f0171381fb0191858d3361e25df8f1ae39054c2301da433cdd52dd427b7b5c594392dc64afec561ed4c3a461cfa4a32cdde03f33422a17efdbc38511b1b8c7b02a814aa84a2f457f181418ee06b891fd06228e79bd0742c40a9fe8fc4c0292a4cc343b1ce2dcf486851dec56c0dc5f66dfa85d612950e23bd770b5dc383ea5da80447e9bac2d340d34e277b9797994b32f17f8dd3d68feb8f2edbe0c3510426b6abf1ba28c62c03129db35da02b010cd2957da1e940fd71f13054921e0683cf4548163f8596f5b6319abaf44ad5af342fc84ac8500455371ae7aa3f961748b5722e7dae87c911f8abca98915fae068582435bf3a844bcda2a848746b6e78653b8bec59fb5ffa0f241c77f8c24f9057969d004f5580442516e4047ffeaa528a1c091eae230446ed8dc71d237115498674f3444af64024aa892576b97af56617289b14334a29bbd9849b3828e2b96114d2abb858a79922802fc8e79fb362dd2a562861aac7bf286309156981715897ef50a57758f665f5192d59446c16af9975cf768b4946b7c0ab5911f6c63c7351a294e9c01ccdc83b88cdfd23bde45834c36dbba9676c8c861e3aaa34f72ddfb42b0152a061c4faac20bcc272a0c6980245c7c9906550ff78cdf7695d8dbab68"}, {0xe0, 0x84, 0x8, "0a554013de4503e5ec60b2bf1b3419c1e080f7e4407381237dabc5b6e8f782b0650b359dbe87387c1e1d3c77a16a6bb2b223909e0ff572ec3daf51ca351b66b1ebdb6bc7e817b83698884e21e97bf93eafd88bf9942b7727046aa5b34004ec126a73657a155510dc617d80056179826ed3c0f3decce5d656623f2418a805874e96ce1b11cc433cb04e9bf3a43a92aa81d632ac9fdac647b636b7484aca20255405be2bc0cfca4e122e381dc08e2bc03fdf0fda63bbb42c643afb5be9b70dfb0872ca70887f53b01dd16346"}, {0x78, 0x0, 0x6, "1c49cfa21c9804a132473cf5a18da833133307268f7358dbd54a1ef22a5cabed971a2e779257027018eb1e1b4a5782f39c5e95c5e80ef042a83664e1941931d1d8aa779035d76ced8595ab1fa9efbc61bb36459937cf6e66ee7d15fa954e1969d6"}, {0x18, 0x108, 0x55a7, "b6afa593c5b835"}, {0x38, 0x114, 0x4, "b69d974ce7ffe3509f263fb2132659182211dce1ea5681192d7d51fc97dc0204c5281c"}, {0x58, 0x113, 0x7, "4ef78fc94c3f2e3fb679f6af62d58bb5983f20c7bc7826d256ed1c10a517f1ce1e447f52f2bbe26217e49d6e1124c87f7921f5dced8cb9adfba07d3948b1a26bd33f009394"}, {0x108, 0x1, 0x3, "2753c218a908e527f75e90d2acbcecfd7b3d4a22724522e58e13ebc42b6904a9766ef5dc90d89906280cbc16c46957f44ee990fe4677da4c650f82959077cc952bf0069affe2c8715ae7fe134671919f2af243991c717f526247dd086a083eabd6d38b6a7c73a90f4000ce807312162fdced398ed6d5e65741f7dccdac5e54cdffe35ab50f0ebf6463258cd554a536373817f2e8f04ff6d8759f2fcacfcefc0ab5171f95507b0ce86982e06da9956f83ebb16f12b40d86339fa965f274c92c3e523fc815468975387bdba3ab07387d6e9bb979b6e1ed0a6f28a3a4a781ee8b1a512b7a1227657af07b286db7634f8bf0c2684ff1"}, {0x28, 0x84, 0xd173, "f79c01c2430718a5a437dbdac73a7c6cfac6"}], 0x13f8}, 0x40044) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000540)="d8002100100081046881f782db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a80016000a00014006001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e02360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e8a9b", 0xd8}], 0x1}, 0x0) 17.556229323s ago: executing program 2 (id=3782): socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2004}, 0x109080, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1b0000001a007f029e", 0x9}, {&(0x7f0000000200)="68cabf2dfb58fc0a01008888ffff0200258f", 0x12}], 0x2}, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000000e8ffffffffffff05000000", @ANYRES32=0x1], 0x48) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8916, &(0x7f0000000000)={r2}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8936, &(0x7f0000000000)={r2}) 16.452420925s ago: executing program 1 (id=3783): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="0000000080000000000000000000000000000000a506c17cff93b7c56f4eece128a5902d4d385324e0d7ed54badc9046243fb385dd41bb4b17145f195177c694967b015966b63e26c8a0b062a1568373e1d986ef428b2cc9f05766a17a6721b7cc9b278e1a5689368839492a81b5900ebd4370b9f1f381d6c61b0332b720b73b2498b11719041d987887db2008c455bdfa4bf79f41597c1b805cf0c9128c5cc7fda7a75088c84bf242f677c7a6ffac351b57a4583721a0726d2312220c38eec434018c57076d2c05a256fb44b96fbcf6d3c51bece6cb27484b49f31599572eefd5cf38ad0e66d09bf7eda751c6f1aa7c29a7c7", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r3, &(0x7f0000000180)=ANY=[@ANYRES8=r2, @ANYBLOB=','], 0x9a) socketpair(0x1, 0x1, 0xfffffffd, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000100)={r4}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300000100000085000000c0000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r6, r3, 0x0, 0x4, &(0x7f0000000340)='GPL\x00'}, 0x30) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func={0x1, 0x0, 0x0, 0xf, 0x3}]}, {0x0, [0x5f, 0x2e]}}, 0x0, 0x28}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r3, 0x0, 0xe, 0x0, &(0x7f00000000c0)="ddc937981007901a80379c3e86dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r5, 0x0, 0x11, 0x9a, &(0x7f0000000400)="479968a1a09773c709c5f4d824c46d0c66", &(0x7f0000000440)=""/154, 0x7ff, 0x0, 0xb3, 0xa9, &(0x7f0000000500)="77043d4a5029f1b1934bb590ff3c52a946875ac92aed7446f3573b7371b796d57830d08ca1184e39ecc81d7618b2c4722d0110aff0c9d130ea8d6a589218218daa79225e1a4a3c9b028d06bfc931b8adf331bdd2c7b2e658dc4ca6ec92000c6bd80efd315067b62b9cc7c6515e2fe93098576b3175e254e0897e9e0d4d4e4e5881dc071c8b2ab964a565a5c26dcdd8811b3ee6874ff9a4fc0c4ad85fd960c2b35a56296261d611505aad74c8c82e749a272151", &(0x7f00000005c0)="d7f9ac77a33ae62b1f696b9e276552dc4965fc025be40170442d4c1616e1c79d9990752fe3d25c11fd4643a0d35897c2157b1caa9aae5cdb43f5fb6cc549b88c38e8577f458a69fd56051419184157b42c0f19840129b5568fb0547d4d95f31d1954257acf5a96c1b9523cfe4cc91716cf9deb848589abc4dc77ad65858b69315e73799f4efab8d3fddc868c1a622a933e49f67e23e65aeb7fd8cbd042c30f7cec921f766fdf46b874", 0x2, 0x0, 0x2}, 0x50) 16.450344215s ago: executing program 3 (id=3784): socket$kcm(0x10, 0xa, 0x10) r0 = socket$kcm(0x2b, 0x1, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080)) sendmsg$tipc(r1, &(0x7f00000009c0)={&(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e23, 0x4}}, 0x10, &(0x7f0000000880)=[{&(0x7f00000000c0)="232b1c40ab8ae75cc89b78509f6093d52f04ef772804a9db7678fea1cde88be0ff025fa6d80daabb16d16083870d909a8e644bae33b505b67469b1033b36700b7276c1d5bce586de024dd2430605ac0cb731d1011cb69af8aa9d2c7931eead3aa64cd9251cdcd0f2d9b3612ccbc6b9a675b8a30424bc8e6a616a5ca7841d04b8b28cdc29ae52b9fdc0", 0x89}, {&(0x7f0000000180)="d87985c9777f5a93470052e42a98681b192cb7e53bf9e9e939af5bd47319080dff934486e1a6ca55ab00ee3abbee946ac0b95316aa750b59ea17b5f93e9d55a320258681919accb52ddabbf73dbf006f1c26", 0x52}, {&(0x7f0000000240)="36c6da2c748a5e29391e930227f4f5b0cab44a75389a992f4dc8ca9a91ebf5b36422fadee3e2a38a17d0af4f775d3d5c09cacd7dc2627851ac0a5123b441edc1de851bcb4a846dddc76e1261d836a520e862b09bc2f4aea2d05c5643adce0cf48e4f5ae73728250c4ffda5b914cf7e939e6d1ac26af62084bda032c9904534d24ac67b2c7ee3bd5484ca6e011e200306c329101b06a75dd072e88098af4a6fbf259d69566c2263bc1b73201cbf0d5b64b872054fc1e6e5e46ce53fc71cbbe42b5dba4d87dab9f826d8e97eacf6b40728fc2b1a5a47bda0227210", 0xda}, {&(0x7f0000000340)="a2853306c966f8e8059aaf397c7c6ec3aa4fdb31aef25a2ac61fb20462d3d3391dbffe055141268d1c867af62227ca3b8202a7befa29d958a1d510cd194621f47ccb5548a83548aa204b88a3e0d2cc5441ba88c6abe1c421d10d13fe81193616efbb3f8c1a9e7373bfba6d93edb15691a916feacb962991616fa4b26ee8f204c668773f33467f5d3b375a81f1e7f605a6a2773bd37907a034884164e797bfae09df2a9afde19a5aac6bfbbfc0e40925d657538c1c2ef80d65a5a36522597568cff1f066569021ec5c1be2f30f66f8d294ad8d30ad3d11e5c2296cc6d1faf578dca80d1258d2eebd59fe832b7b0eb4474287216fd5fd7", 0xf6}, {&(0x7f0000000780)="649652511a6d59305b53022248f72b3a9754839fdb81449c173ed70aee22865367040ce1019a737c5ddcb75b5d44132886e164563a4c5803943f599899427971461fe2123c548121bdfc90a734d9352c14ee18da19d9667b5e721f9e533536e5db391d0ea18b1f6aeb30931f96f9791b10aa68a2a23ebd9781560c4248792e6bfd796d0309d86682844cc586e5d623753f3469b9f1b714411652273ea9a0906de3c370eab8104b4f1e8b95b715745ca6d29ce7fec9f3571efafc747c5cdb0822176bc64e31f4d34a2754bedc8e3904433821a4", 0xd3}], 0x5, &(0x7f0000000900)="321f08681605c41274648e8b87391d5c363e662364bb0846812fe5ca13d9c4270b5d1e3f405098e2f524a6d3e97a7c8aa8fabddd788c56e8df27e860c153398d5d361f7d123e4e9e890b093c03388bcbb35c3ddb40615a45ea1083782dfec0a7cee0154fbdaa1e2af80cf3c7a31e56083d2ef2f9a72073fb71981e0861be32098849ba28ab027b96d54e87ffd3", 0x8d}, 0x4) setsockopt$sock_attach_bpf(r0, 0x6, 0x17, &(0x7f0000000200), 0x4) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xd, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) r5 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) syz_clone(0x32a0000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000540)="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", 0x213}], 0x1, 0x0, 0x0, 0x7400}, 0x8800) socket$kcm(0x10, 0xa, 0x10) (async) socket$kcm(0x2b, 0x1, 0x0) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080)) (async) sendmsg$tipc(r1, &(0x7f00000009c0)={&(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e23, 0x4}}, 0x10, &(0x7f0000000880)=[{&(0x7f00000000c0)="232b1c40ab8ae75cc89b78509f6093d52f04ef772804a9db7678fea1cde88be0ff025fa6d80daabb16d16083870d909a8e644bae33b505b67469b1033b36700b7276c1d5bce586de024dd2430605ac0cb731d1011cb69af8aa9d2c7931eead3aa64cd9251cdcd0f2d9b3612ccbc6b9a675b8a30424bc8e6a616a5ca7841d04b8b28cdc29ae52b9fdc0", 0x89}, {&(0x7f0000000180)="d87985c9777f5a93470052e42a98681b192cb7e53bf9e9e939af5bd47319080dff934486e1a6ca55ab00ee3abbee946ac0b95316aa750b59ea17b5f93e9d55a320258681919accb52ddabbf73dbf006f1c26", 0x52}, {&(0x7f0000000240)="36c6da2c748a5e29391e930227f4f5b0cab44a75389a992f4dc8ca9a91ebf5b36422fadee3e2a38a17d0af4f775d3d5c09cacd7dc2627851ac0a5123b441edc1de851bcb4a846dddc76e1261d836a520e862b09bc2f4aea2d05c5643adce0cf48e4f5ae73728250c4ffda5b914cf7e939e6d1ac26af62084bda032c9904534d24ac67b2c7ee3bd5484ca6e011e200306c329101b06a75dd072e88098af4a6fbf259d69566c2263bc1b73201cbf0d5b64b872054fc1e6e5e46ce53fc71cbbe42b5dba4d87dab9f826d8e97eacf6b40728fc2b1a5a47bda0227210", 0xda}, {&(0x7f0000000340)="a2853306c966f8e8059aaf397c7c6ec3aa4fdb31aef25a2ac61fb20462d3d3391dbffe055141268d1c867af62227ca3b8202a7befa29d958a1d510cd194621f47ccb5548a83548aa204b88a3e0d2cc5441ba88c6abe1c421d10d13fe81193616efbb3f8c1a9e7373bfba6d93edb15691a916feacb962991616fa4b26ee8f204c668773f33467f5d3b375a81f1e7f605a6a2773bd37907a034884164e797bfae09df2a9afde19a5aac6bfbbfc0e40925d657538c1c2ef80d65a5a36522597568cff1f066569021ec5c1be2f30f66f8d294ad8d30ad3d11e5c2296cc6d1faf578dca80d1258d2eebd59fe832b7b0eb4474287216fd5fd7", 0xf6}, {&(0x7f0000000780)="649652511a6d59305b53022248f72b3a9754839fdb81449c173ed70aee22865367040ce1019a737c5ddcb75b5d44132886e164563a4c5803943f599899427971461fe2123c548121bdfc90a734d9352c14ee18da19d9667b5e721f9e533536e5db391d0ea18b1f6aeb30931f96f9791b10aa68a2a23ebd9781560c4248792e6bfd796d0309d86682844cc586e5d623753f3469b9f1b714411652273ea9a0906de3c370eab8104b4f1e8b95b715745ca6d29ce7fec9f3571efafc747c5cdb0822176bc64e31f4d34a2754bedc8e3904433821a4", 0xd3}], 0x5, &(0x7f0000000900)="321f08681605c41274648e8b87391d5c363e662364bb0846812fe5ca13d9c4270b5d1e3f405098e2f524a6d3e97a7c8aa8fabddd788c56e8df27e860c153398d5d361f7d123e4e9e890b093c03388bcbb35c3ddb40615a45ea1083782dfec0a7cee0154fbdaa1e2af80cf3c7a31e56083d2ef2f9a72073fb71981e0861be32098849ba28ab027b96d54e87ffd3", 0x8d}, 0x4) (async) setsockopt$sock_attach_bpf(r0, 0x6, 0x17, &(0x7f0000000200), 0x4) (async) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xd, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) (async) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) (async) syz_clone(0x32a0000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000540)="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", 0x213}], 0x1, 0x0, 0x0, 0x7400}, 0x8800) (async) 16.317741557s ago: executing program 2 (id=3785): perf_event_open(0x0, 0x0, 0xf, 0xffffffffffffffff, 0xa) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x2}, 0x0, 0x0, 0xfffffffd, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x8f}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x80) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x26e1, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x9, 0xa, 0x89, 0xa7, 0x0, 0x3ff, 0x10000, 0x5, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0x0, 0x6, 0x8, 0x1a, 0x8000, 0x0, 0x0, 0x781, 0x0, 0x3}, 0xffffffffffffffff, 0x1, r1, 0x5) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000000), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe3b, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001180)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1000, '\x00', r5, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x4, 0x2, 0x405e, 0x8, r2, 0xff, '\x00', r5, 0xffffffffffffffff, 0x0, 0x4, 0x3, 0xc}, 0x50) sendmsg$kcm(r4, &(0x7f0000000100)={&(0x7f0000000a80)=@hci={0x1f, 0x300, 0x3}, 0x80, &(0x7f00000000c0)=[{0x0}], 0x1}, 0x4041) r6 = socket$kcm(0x10, 0x2, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000040)=r7, 0x4) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e343a185bbf7000000016ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010300090c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a2", 0x89}], 0x1}, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) 15.697675353s ago: executing program 1 (id=3786): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x11c412, 0x1, 0x0, 0x5, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x4, 0x1}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5c00000014006b03000000d86e6c1d0010ffff0af32c6e021fffffff000000000f00000017d3a705251e6182949a369f3d3b48dfd8cd3f9367c1fa51f60a64c9f4d4938037e786a6d0bdd7000000000000eaffffffb3d59256a5a2fd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) close(r0) socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b9040a1d08020a000000040000a1180002003f00000000000e1208000f0100810401a80016ea1f1506400303000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a", 0xbd}], 0x1, 0x0, 0x0, 0x7400}, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x6eab22e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) 2.62956314s ago: executing program 32 (id=3780): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000108800000410000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0xfffffffc, 0x0, 0xb6eb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa35f022eb"], 0xcfa4) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r0, &(0x7f0000000240)=ANY=[@ANYRES8, @ANYRESOCT], 0x13) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, r1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.980144917s ago: executing program 33 (id=3777): socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffe21, 0x0, 0x0, 0x8}, 0x28) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmsg(0xffffffffffffffff, 0x0, 0x40000004) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4008804) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x101}, 0x104046}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r1) socket$kcm(0x2, 0x200000000000006, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000000000000000000200000000010000000000000e0100000000000000002e"], 0x0, 0x37}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, r2, 0x2, 0x5}, 0x50) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000000)={0x5, 0x80, 0x10, 0xfd, 0x0, 0x0, 0x0, 0x1, 0x90, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0xaa32, 0x6, 0xfffffffd, 0x0, 0x7f}) ioctl$TUNGETVNETLE(r1, 0x8955, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.swap.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0xc29c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) syz_clone(0x2a801400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x10104) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = openat$cgroup_devices(r3, 0x0, 0x2, 0x0) write$cgroup_devices(r4, 0x0, 0xa) 580.093112ms ago: executing program 34 (id=3786): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x11c412, 0x1, 0x0, 0x5, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x4, 0x1}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5c00000014006b03000000d86e6c1d0010ffff0af32c6e021fffffff000000000f00000017d3a705251e6182949a369f3d3b48dfd8cd3f9367c1fa51f60a64c9f4d4938037e786a6d0bdd7000000000000eaffffffb3d59256a5a2fd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) close(r0) socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b9040a1d08020a000000040000a1180002003f00000000000e1208000f0100810401a80016ea1f1506400303000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a", 0xbd}], 0x1, 0x0, 0x0, 0x7400}, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x6eab22e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) 490.042504ms ago: executing program 35 (id=3785): perf_event_open(0x0, 0x0, 0xf, 0xffffffffffffffff, 0xa) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x2}, 0x0, 0x0, 0xfffffffd, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x8f}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x80) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x26e1, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x9, 0xa, 0x89, 0xa7, 0x0, 0x3ff, 0x10000, 0x5, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0x0, 0x6, 0x8, 0x1a, 0x8000, 0x0, 0x0, 0x781, 0x0, 0x3}, 0xffffffffffffffff, 0x1, r1, 0x5) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000000), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe3b, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001180)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1000, '\x00', r5, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x4, 0x2, 0x405e, 0x8, r2, 0xff, '\x00', r5, 0xffffffffffffffff, 0x0, 0x4, 0x3, 0xc}, 0x50) sendmsg$kcm(r4, &(0x7f0000000100)={&(0x7f0000000a80)=@hci={0x1f, 0x300, 0x3}, 0x80, &(0x7f00000000c0)=[{0x0}], 0x1}, 0x4041) r6 = socket$kcm(0x10, 0x2, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000040)=r7, 0x4) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e343a185bbf7000000016ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010300090c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a2", 0x89}], 0x1}, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) 0s ago: executing program 36 (id=3784): socket$kcm(0x10, 0xa, 0x10) r0 = socket$kcm(0x2b, 0x1, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080)) sendmsg$tipc(r1, &(0x7f00000009c0)={&(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e23, 0x4}}, 0x10, &(0x7f0000000880)=[{&(0x7f00000000c0)="232b1c40ab8ae75cc89b78509f6093d52f04ef772804a9db7678fea1cde88be0ff025fa6d80daabb16d16083870d909a8e644bae33b505b67469b1033b36700b7276c1d5bce586de024dd2430605ac0cb731d1011cb69af8aa9d2c7931eead3aa64cd9251cdcd0f2d9b3612ccbc6b9a675b8a30424bc8e6a616a5ca7841d04b8b28cdc29ae52b9fdc0", 0x89}, {&(0x7f0000000180)="d87985c9777f5a93470052e42a98681b192cb7e53bf9e9e939af5bd47319080dff934486e1a6ca55ab00ee3abbee946ac0b95316aa750b59ea17b5f93e9d55a320258681919accb52ddabbf73dbf006f1c26", 0x52}, {&(0x7f0000000240)="36c6da2c748a5e29391e930227f4f5b0cab44a75389a992f4dc8ca9a91ebf5b36422fadee3e2a38a17d0af4f775d3d5c09cacd7dc2627851ac0a5123b441edc1de851bcb4a846dddc76e1261d836a520e862b09bc2f4aea2d05c5643adce0cf48e4f5ae73728250c4ffda5b914cf7e939e6d1ac26af62084bda032c9904534d24ac67b2c7ee3bd5484ca6e011e200306c329101b06a75dd072e88098af4a6fbf259d69566c2263bc1b73201cbf0d5b64b872054fc1e6e5e46ce53fc71cbbe42b5dba4d87dab9f826d8e97eacf6b40728fc2b1a5a47bda0227210", 0xda}, {&(0x7f0000000340)="a2853306c966f8e8059aaf397c7c6ec3aa4fdb31aef25a2ac61fb20462d3d3391dbffe055141268d1c867af62227ca3b8202a7befa29d958a1d510cd194621f47ccb5548a83548aa204b88a3e0d2cc5441ba88c6abe1c421d10d13fe81193616efbb3f8c1a9e7373bfba6d93edb15691a916feacb962991616fa4b26ee8f204c668773f33467f5d3b375a81f1e7f605a6a2773bd37907a034884164e797bfae09df2a9afde19a5aac6bfbbfc0e40925d657538c1c2ef80d65a5a36522597568cff1f066569021ec5c1be2f30f66f8d294ad8d30ad3d11e5c2296cc6d1faf578dca80d1258d2eebd59fe832b7b0eb4474287216fd5fd7", 0xf6}, {&(0x7f0000000780)="649652511a6d59305b53022248f72b3a9754839fdb81449c173ed70aee22865367040ce1019a737c5ddcb75b5d44132886e164563a4c5803943f599899427971461fe2123c548121bdfc90a734d9352c14ee18da19d9667b5e721f9e533536e5db391d0ea18b1f6aeb30931f96f9791b10aa68a2a23ebd9781560c4248792e6bfd796d0309d86682844cc586e5d623753f3469b9f1b714411652273ea9a0906de3c370eab8104b4f1e8b95b715745ca6d29ce7fec9f3571efafc747c5cdb0822176bc64e31f4d34a2754bedc8e3904433821a4", 0xd3}], 0x5, &(0x7f0000000900)="321f08681605c41274648e8b87391d5c363e662364bb0846812fe5ca13d9c4270b5d1e3f405098e2f524a6d3e97a7c8aa8fabddd788c56e8df27e860c153398d5d361f7d123e4e9e890b093c03388bcbb35c3ddb40615a45ea1083782dfec0a7cee0154fbdaa1e2af80cf3c7a31e56083d2ef2f9a72073fb71981e0861be32098849ba28ab027b96d54e87ffd3", 0x8d}, 0x4) setsockopt$sock_attach_bpf(r0, 0x6, 0x17, &(0x7f0000000200), 0x4) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xd, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) r5 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) syz_clone(0x32a0000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000540)="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", 0x213}], 0x1, 0x0, 0x0, 0x7400}, 0x8800) socket$kcm(0x10, 0xa, 0x10) (async) socket$kcm(0x2b, 0x1, 0x0) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080)) (async) sendmsg$tipc(r1, &(0x7f00000009c0)={&(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e23, 0x4}}, 0x10, &(0x7f0000000880)=[{&(0x7f00000000c0)="232b1c40ab8ae75cc89b78509f6093d52f04ef772804a9db7678fea1cde88be0ff025fa6d80daabb16d16083870d909a8e644bae33b505b67469b1033b36700b7276c1d5bce586de024dd2430605ac0cb731d1011cb69af8aa9d2c7931eead3aa64cd9251cdcd0f2d9b3612ccbc6b9a675b8a30424bc8e6a616a5ca7841d04b8b28cdc29ae52b9fdc0", 0x89}, {&(0x7f0000000180)="d87985c9777f5a93470052e42a98681b192cb7e53bf9e9e939af5bd47319080dff934486e1a6ca55ab00ee3abbee946ac0b95316aa750b59ea17b5f93e9d55a320258681919accb52ddabbf73dbf006f1c26", 0x52}, {&(0x7f0000000240)="36c6da2c748a5e29391e930227f4f5b0cab44a75389a992f4dc8ca9a91ebf5b36422fadee3e2a38a17d0af4f775d3d5c09cacd7dc2627851ac0a5123b441edc1de851bcb4a846dddc76e1261d836a520e862b09bc2f4aea2d05c5643adce0cf48e4f5ae73728250c4ffda5b914cf7e939e6d1ac26af62084bda032c9904534d24ac67b2c7ee3bd5484ca6e011e200306c329101b06a75dd072e88098af4a6fbf259d69566c2263bc1b73201cbf0d5b64b872054fc1e6e5e46ce53fc71cbbe42b5dba4d87dab9f826d8e97eacf6b40728fc2b1a5a47bda0227210", 0xda}, {&(0x7f0000000340)="a2853306c966f8e8059aaf397c7c6ec3aa4fdb31aef25a2ac61fb20462d3d3391dbffe055141268d1c867af62227ca3b8202a7befa29d958a1d510cd194621f47ccb5548a83548aa204b88a3e0d2cc5441ba88c6abe1c421d10d13fe81193616efbb3f8c1a9e7373bfba6d93edb15691a916feacb962991616fa4b26ee8f204c668773f33467f5d3b375a81f1e7f605a6a2773bd37907a034884164e797bfae09df2a9afde19a5aac6bfbbfc0e40925d657538c1c2ef80d65a5a36522597568cff1f066569021ec5c1be2f30f66f8d294ad8d30ad3d11e5c2296cc6d1faf578dca80d1258d2eebd59fe832b7b0eb4474287216fd5fd7", 0xf6}, {&(0x7f0000000780)="649652511a6d59305b53022248f72b3a9754839fdb81449c173ed70aee22865367040ce1019a737c5ddcb75b5d44132886e164563a4c5803943f599899427971461fe2123c548121bdfc90a734d9352c14ee18da19d9667b5e721f9e533536e5db391d0ea18b1f6aeb30931f96f9791b10aa68a2a23ebd9781560c4248792e6bfd796d0309d86682844cc586e5d623753f3469b9f1b714411652273ea9a0906de3c370eab8104b4f1e8b95b715745ca6d29ce7fec9f3571efafc747c5cdb0822176bc64e31f4d34a2754bedc8e3904433821a4", 0xd3}], 0x5, &(0x7f0000000900)="321f08681605c41274648e8b87391d5c363e662364bb0846812fe5ca13d9c4270b5d1e3f405098e2f524a6d3e97a7c8aa8fabddd788c56e8df27e860c153398d5d361f7d123e4e9e890b093c03388bcbb35c3ddb40615a45ea1083782dfec0a7cee0154fbdaa1e2af80cf3c7a31e56083d2ef2f9a72073fb71981e0861be32098849ba28ab027b96d54e87ffd3", 0x8d}, 0x4) (async) setsockopt$sock_attach_bpf(r0, 0x6, 0x17, &(0x7f0000000200), 0x4) (async) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xd, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) (async) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) (async) syz_clone(0x32a0000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000540)="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", 0x213}], 0x1, 0x0, 0x0, 0x7400}, 0x8800) (async) kernel console output (not intermixed with test programs): onfigured BSSID 50:50:50:50:50:50 [ 623.416552][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 623.448041][ T5237] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 623.515484][ T4542] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 623.541860][ T4542] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 623.566229][ T5237] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 624.258054][T13975] FAULT_INJECTION: forcing a failure. [ 624.258054][T13975] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 624.314467][T13975] CPU: 1 PID: 13975 Comm: syz.3.3073 Not tainted syzkaller #0 [ 624.322028][T13975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 624.332282][T13975] Call Trace: [ 624.335688][T13975] [ 624.338656][T13975] dump_stack_lvl+0x188/0x24e [ 624.343650][T13975] ? show_regs_print_info+0x12/0x12 [ 624.348899][T13975] ? load_image+0x400/0x400 [ 624.353462][T13975] ? __lock_acquire+0x7d10/0x7d10 [ 624.358553][T13975] ? snprintf+0xe5/0x140 [ 624.362851][T13975] should_fail_ex+0x399/0x4d0 [ 624.367589][T13975] _copy_to_user+0x2c/0x130 [ 624.372161][T13975] simple_read_from_buffer+0xe3/0x150 [ 624.377585][T13975] proc_fail_nth_read+0x1a6/0x220 [ 624.382754][T13975] ? proc_fault_inject_write+0x310/0x310 [ 624.388453][T13975] ? fsnotify_perm+0x248/0x550 [ 624.393277][T13975] ? proc_fault_inject_write+0x310/0x310 [ 624.398976][T13975] vfs_read+0x2de/0xa00 [ 624.403202][T13975] ? kernel_read+0x1e0/0x1e0 [ 624.407844][T13975] ? __fget_files+0x28/0x4b0 [ 624.412585][T13975] ? __fget_files+0x28/0x4b0 [ 624.417344][T13975] ? __fget_files+0x43d/0x4b0 [ 624.422084][T13975] ? __fdget_pos+0x2ae/0x360 [ 624.426723][T13975] ? ksys_read+0x71/0x250 [ 624.431098][T13975] ksys_read+0x14c/0x250 [ 624.435391][T13975] ? vfs_write+0xa30/0xa30 [ 624.439858][T13975] ? lockdep_hardirqs_on+0x94/0x140 [ 624.445280][T13975] do_syscall_64+0x4c/0xa0 [ 624.449756][T13975] ? clear_bhb_loop+0x60/0xb0 [ 624.454480][T13975] ? clear_bhb_loop+0x60/0xb0 [ 624.459291][T13975] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 624.465232][T13975] RIP: 0033:0x7f48c795d60e [ 624.469755][T13975] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 624.489417][T13975] RSP: 002b:00007f48c88effe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 624.497884][T13975] RAX: ffffffffffffffda RBX: 00007f48c88f06c0 RCX: 00007f48c795d60e [ 624.505909][T13975] RDX: 000000000000000f RSI: 00007f48c88f00a0 RDI: 0000000000000003 [ 624.513944][T13975] RBP: 00007f48c88f0090 R08: 0000000000000000 R09: 0000000000000000 [ 624.521964][T13975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 624.530003][T13975] R13: 00007f48c7c16038 R14: 00007f48c7c15fa0 R15: 00007fff535cd998 [ 624.538068][T13975] [ 624.667726][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.675045][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.531926][T13982] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.3075'. [ 625.548908][T13982] netlink: 6955 bytes leftover after parsing attributes in process `syz.0.3075'. [ 625.807215][ T4284] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 625.819342][ T4284] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 625.830237][ T4284] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 625.845105][ T4285] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 625.852989][ T4285] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 625.861605][ T4285] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 626.181743][ T5255] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.373181][ T5255] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.547270][ T5255] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.903102][ T5255] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.481473][T14033] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.3089'. [ 627.944672][T13251] Bluetooth: hci1: command 0x0409 tx timeout [ 629.919947][T14033] netlink: 6955 bytes leftover after parsing attributes in process `syz.0.3089'. [ 629.933475][T13990] chnl_net:caif_netlink_parms(): no params data found [ 630.024680][T13251] Bluetooth: hci1: command 0x041b tx timeout [ 630.093582][ T5255] tipc: Left network mode [ 630.200648][T14047] FAULT_INJECTION: forcing a failure. [ 630.200648][T14047] name failslab, interval 1, probability 0, space 0, times 0 [ 630.230742][T14044] netlink: 'syz.3.3092': attribute type 21 has an invalid length. [ 630.262181][T14047] CPU: 1 PID: 14047 Comm: syz.2.3093 Not tainted syzkaller #0 [ 630.265811][T14044] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 630.269706][T14047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 630.269723][T14047] Call Trace: [ 630.269731][T14047] [ 630.269740][T14047] dump_stack_lvl+0x188/0x24e [ 630.269779][T14047] ? show_regs_print_info+0x12/0x12 [ 630.269807][T14047] ? load_image+0x400/0x400 [ 630.269834][T14047] ? __might_sleep+0xd0/0xd0 [ 630.269855][T14047] ? __lock_acquire+0x7d10/0x7d10 [ 630.269887][T14047] should_fail_ex+0x399/0x4d0 [ 630.269912][T14047] should_failslab+0x5/0x20 [ 630.269930][T14047] slab_pre_alloc_hook+0x59/0x310 [ 630.269959][T14047] kmem_cache_alloc_node+0x5a/0x320 [ 630.269981][T14047] ? __alloc_skb+0xfc/0x7e0 [ 630.270012][T14047] __alloc_skb+0xfc/0x7e0 [ 630.270036][T14047] ? netlink_autobind+0xda/0x300 [ 630.270060][T14047] netlink_sendmsg+0x654/0xbd0 [ 630.270097][T14047] ? netlink_getsockopt+0x550/0x550 [ 630.270127][T14047] ? aa_sock_msg_perm+0x94/0x150 [ 630.270150][T14047] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 630.270171][T14047] ? security_socket_sendmsg+0x7c/0xa0 [ 630.270201][T14047] ? netlink_getsockopt+0x550/0x550 [ 630.270228][T14047] ____sys_sendmsg+0x5be/0x970 [ 630.270264][T14047] ? __sys_sendmsg_sock+0x30/0x30 [ 630.270290][T14047] ? __import_iovec+0x315/0x500 [ 630.270319][T14047] ? import_iovec+0x6f/0xa0 [ 630.270344][T14047] ___sys_sendmsg+0x2a2/0x360 [ 630.270379][T14047] ? __sys_sendmsg+0x290/0x290 [ 630.412738][T14047] ? __lock_acquire+0x7d10/0x7d10 [ 630.417811][T14047] __se_sys_sendmsg+0x1bb/0x2a0 [ 630.422692][T14047] ? __x64_sys_sendmsg+0x80/0x80 [ 630.427692][T14047] ? lockdep_hardirqs_on+0x94/0x140 [ 630.432918][T14047] do_syscall_64+0x4c/0xa0 [ 630.437365][T14047] ? clear_bhb_loop+0x60/0xb0 [ 630.442061][T14047] ? clear_bhb_loop+0x60/0xb0 [ 630.446753][T14047] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 630.452663][T14047] RIP: 0033:0x7f61a2d9cdd9 [ 630.457111][T14047] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 630.476750][T14047] RSP: 002b:00007f61a3c5c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 630.485178][T14047] RAX: ffffffffffffffda RBX: 00007f61a3015fa0 RCX: 00007f61a2d9cdd9 [ 630.493162][T14047] RDX: 0000000004004000 RSI: 0000200000000180 RDI: 0000000000000003 [ 630.501236][T14047] RBP: 00007f61a3c5c090 R08: 0000000000000000 R09: 0000000000000000 [ 630.509220][T14047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 630.517202][T14047] R13: 00007f61a3016038 R14: 00007f61a3015fa0 R15: 00007ffc7c23b1e8 [ 630.525198][T14047] [ 630.884471][T13990] bridge0: port 1(bridge_slave_0) entered blocking state [ 630.888259][T14053] netlink: 194236 bytes leftover after parsing attributes in process `syz.0.3095'. [ 630.894767][T13990] bridge0: port 1(bridge_slave_0) entered disabled state [ 630.908579][T14053] netlink: zone id is out of range [ 630.914481][T14053] netlink: zone id is out of range [ 630.921904][T14053] netlink: zone id is out of range [ 630.927431][T14053] netlink: zone id is out of range [ 630.933826][T14053] netlink: zone id is out of range [ 630.942246][T14053] netlink: zone id is out of range [ 630.943122][T13990] device bridge_slave_0 entered promiscuous mode [ 630.947677][T14053] netlink: zone id is out of range [ 630.959431][T14053] netlink: zone id is out of range [ 630.971361][T14053] netlink: zone id is out of range [ 631.062316][T13990] bridge0: port 2(bridge_slave_1) entered blocking state [ 631.104302][T13990] bridge0: port 2(bridge_slave_1) entered disabled state [ 631.112666][T13990] device bridge_slave_1 entered promiscuous mode [ 631.489901][T13990] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 631.625958][T14077] netlink: 'syz.2.3102': attribute type 15 has an invalid length. [ 631.639631][T14077] netlink: 'syz.2.3102': attribute type 7 has an invalid length. [ 631.652532][T13990] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 631.677680][T14079] netlink: 180 bytes leftover after parsing attributes in process `syz.0.3101'. [ 631.831386][T14084] netlink: 'syz.2.3102': attribute type 39 has an invalid length. [ 632.104731][T13251] Bluetooth: hci1: command 0x040f tx timeout [ 632.221019][T14094] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.3104'. [ 632.452910][T13990] team0: Port device team_slave_0 added [ 632.494713][T14094] netlink: 6955 bytes leftover after parsing attributes in process `syz.4.3104'. [ 632.590795][T13990] team0: Port device team_slave_1 added [ 632.728557][T14106] FAULT_INJECTION: forcing a failure. [ 632.728557][T14106] name failslab, interval 1, probability 0, space 0, times 0 [ 632.775162][T14106] CPU: 1 PID: 14106 Comm: syz.2.3108 Not tainted syzkaller #0 [ 632.782071][T13990] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 632.782744][T14106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 632.782760][T14106] Call Trace: [ 632.803317][T14106] [ 632.806292][T14106] dump_stack_lvl+0x188/0x24e [ 632.811027][T14106] ? sctp_sendmsg+0x15b0/0x2940 [ 632.815936][T14106] ? ___sys_sendmsg+0x2a2/0x360 [ 632.818424][T13990] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 632.820816][T14106] ? show_regs_print_info+0x12/0x12 [ 632.820851][T14106] ? load_image+0x400/0x400 [ 632.856505][T14106] should_fail_ex+0x399/0x4d0 [ 632.861239][T14106] should_failslab+0x5/0x20 [ 632.865789][T14106] slab_pre_alloc_hook+0x59/0x310 [ 632.870865][T14106] ? sctp_add_bind_addr+0x89/0x350 [ 632.876035][T14106] __kmem_cache_alloc_node+0x4f/0x260 [ 632.881504][T14106] ? sctp_add_bind_addr+0x89/0x350 [ 632.886681][T14106] kmalloc_trace+0x26/0xe0 [ 632.891162][T14106] sctp_add_bind_addr+0x89/0x350 [ 632.896245][T14106] sctp_copy_local_addr_list+0x311/0x4e0 [ 632.901945][T14106] ? sctp_copy_local_addr_list+0xa1/0x4e0 [ 632.907727][T14106] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 632.913946][T14106] ? sctp_v4_is_any+0x31/0x50 [ 632.918688][T14106] ? sctp_copy_one_addr+0x93/0x660 [ 632.923957][T14106] sctp_bind_addr_copy+0xaf/0x3c0 [ 632.929038][T14106] ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190 [ 632.935416][T14106] sctp_connect_new_asoc+0x2f5/0x6a0 [ 632.940767][T14106] ? __sctp_connect+0xd80/0xd80 [ 632.945666][T14106] ? __local_bh_enable_ip+0x136/0x1c0 [ 632.946636][T13990] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 632.951056][T14106] ? _local_bh_enable+0xa0/0xa0 [ 632.951080][T14106] ? sctp_endpoint_lookup_assoc+0x77/0x260 [ 632.951101][T14106] ? sctp_endpoint_lookup_assoc+0x77/0x260 [ 632.951123][T14106] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 632.983737][T14106] ? security_sctp_bind_connect+0x85/0xb0 [ 632.989523][T14106] sctp_sendmsg+0x15b0/0x2940 [ 632.994278][T14106] ? aa_sk_perm+0x771/0x950 [ 632.998919][T14106] ? sctp_getsockopt+0x8a0/0x8a0 [ 633.003913][T14106] ? __might_fault+0xa6/0x120 [ 633.008724][T14106] ? aa_af_perm+0x340/0x340 [ 633.013278][T14106] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 633.017016][T13990] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 633.019743][T14106] ? inet_sendmsg+0x78/0x2f0 [ 633.019768][T14106] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 633.036738][T14106] ? security_socket_sendmsg+0x7c/0xa0 [ 633.042259][T14106] ? inet_send_prepare+0x260/0x260 [ 633.047417][T14106] ____sys_sendmsg+0x5be/0x970 [ 633.052264][T14106] ? __sys_sendmsg_sock+0x30/0x30 [ 633.057397][T14106] ? __import_iovec+0x315/0x500 [ 633.061715][T13990] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 633.062283][T14106] ? import_iovec+0x6f/0xa0 [ 633.092778][T14106] ___sys_sendmsg+0x2a2/0x360 [ 633.097549][T14106] ? __sys_sendmsg+0x290/0x290 [ 633.102424][T14106] ? __lock_acquire+0x7d10/0x7d10 [ 633.107630][T14106] __se_sys_sendmsg+0x1bb/0x2a0 [ 633.112536][T14106] ? __x64_sys_sendmsg+0x80/0x80 [ 633.117558][T14106] ? lockdep_hardirqs_on+0x94/0x140 [ 633.122797][T14106] do_syscall_64+0x4c/0xa0 [ 633.127262][T14106] ? clear_bhb_loop+0x60/0xb0 [ 633.131980][T14106] ? clear_bhb_loop+0x60/0xb0 [ 633.136873][T14106] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 633.142808][T14106] RIP: 0033:0x7f61a2d9cdd9 [ 633.147365][T14106] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 633.167107][T14106] RSP: 002b:00007f61a3c5c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 633.175581][T14106] RAX: ffffffffffffffda RBX: 00007f61a3015fa0 RCX: 00007f61a2d9cdd9 [ 633.180973][T13990] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 633.183574][T14106] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000003 [ 633.183593][T14106] RBP: 00007f61a3c5c090 R08: 0000000000000000 R09: 0000000000000000 [ 633.183607][T14106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 633.183621][T14106] R13: 00007f61a3016038 R14: 00007f61a3015fa0 R15: 00007ffc7c23b1e8 [ 633.226129][T14106] [ 633.338924][T14111] netlink: 'syz.4.3109': attribute type 12 has an invalid length. [ 633.354649][T14111] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3109'. [ 633.529450][T13990] device hsr_slave_0 entered promiscuous mode [ 633.570471][T13990] device hsr_slave_1 entered promiscuous mode [ 633.588406][T13990] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 633.607951][T13990] Cannot create hsr debugfs directory [ 634.188924][ T4285] Bluetooth: hci1: command 0x0419 tx timeout [ 634.923172][T14151] netlink: 'syz.4.3119': attribute type 1 has an invalid length. [ 634.976897][ T4543] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 635.049598][T14154] netlink: 'syz.4.3119': attribute type 22 has an invalid length. [ 635.146449][T14155] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3119'. [ 637.839205][T14160] tipc: Started in network mode [ 637.844550][T14160] tipc: Node identity 9215a268, cluster identity 4711 [ 637.851324][T14160] tipc: Node number set to 2450891368 [ 637.884462][T14177] netlink: 164 bytes leftover after parsing attributes in process `syz.4.3125'. [ 637.960333][T13990] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 638.075163][T13990] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 638.130632][T14181] netlink: 'syz.2.3126': attribute type 10 has an invalid length. [ 638.160131][T14186] netlink: 'syz.3.3127': attribute type 29 has an invalid length. [ 638.175767][T14181] device geneve0 entered promiscuous mode [ 638.257942][T13990] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 638.284027][T13990] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 638.299649][T14186] netlink: 'syz.3.3127': attribute type 29 has an invalid length. [ 638.858822][T14204] netlink: 16255 bytes leftover after parsing attributes in process `syz.3.3132'. [ 639.078607][T14209] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.3133'. [ 639.342102][ T5255] device hsr_slave_0 left promiscuous mode [ 639.364820][ T5255] device hsr_slave_1 left promiscuous mode [ 639.390605][ T5255] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 639.409714][ T5255] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 639.419953][ T5255] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 639.427912][ T5255] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 639.438065][ T5255] batman_adv: batadv0: Interface deactivated: ipvlan1 [ 639.448412][ T5255] batman_adv: batadv0: Removing interface: ipvlan1 [ 639.481164][ T5255] device veth0_macvtap left promiscuous mode [ 639.494045][ T5255] device veth1_vlan left promiscuous mode [ 639.503482][ T5255] device veth0_vlan left promiscuous mode [ 640.889357][ T5255] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 640.949631][ T5255] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 641.240272][ T5255] bond0 (unregistering): Released all slaves [ 641.279348][T14209] netlink: 6955 bytes leftover after parsing attributes in process `syz.4.3133'. [ 641.288964][T14217] tipc: Started in network mode [ 641.293866][T14217] tipc: Node identity 9215a268, cluster identity 4711 [ 641.301866][T14217] tipc: Node number set to 2450891368 [ 641.344782][T13990] 8021q: adding VLAN 0 to HW filter on device bond0 [ 641.522064][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 641.555025][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 641.640166][T13990] 8021q: adding VLAN 0 to HW filter on device team0 [ 641.680753][T14248] FAULT_INJECTION: forcing a failure. [ 641.680753][T14248] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 641.693490][T14245] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3138'. [ 641.756780][T14248] CPU: 0 PID: 14248 Comm: syz.3.3139 Not tainted syzkaller #0 [ 641.764349][T14248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 641.774448][T14248] Call Trace: [ 641.777768][T14248] [ 641.780737][T14248] dump_stack_lvl+0x188/0x24e [ 641.785471][T14248] ? show_regs_print_info+0x12/0x12 [ 641.790730][T14248] ? load_image+0x400/0x400 [ 641.790757][T13990] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 641.795257][T14248] ? __lock_acquire+0x7d10/0x7d10 [ 641.795288][T14248] ? snprintf+0xe5/0x140 [ 641.795312][T14248] should_fail_ex+0x399/0x4d0 [ 641.795338][T14248] _copy_to_user+0x2c/0x130 [ 641.795366][T14248] simple_read_from_buffer+0xe3/0x150 [ 641.795391][T14248] proc_fail_nth_read+0x1a6/0x220 [ 641.795417][T14248] ? proc_fault_inject_write+0x310/0x310 [ 641.795444][T14248] ? fsnotify_perm+0x248/0x550 [ 641.795472][T14248] ? proc_fault_inject_write+0x310/0x310 [ 641.806980][T13990] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 641.810888][T14248] vfs_read+0x2de/0xa00 [ 641.810934][T14248] ? kernel_read+0x1e0/0x1e0 [ 641.870306][T14248] ? __fget_files+0x28/0x4b0 [ 641.874998][T14248] ? __fget_files+0x28/0x4b0 [ 641.879651][T14248] ? __fget_files+0x43d/0x4b0 [ 641.884395][T14248] ? __fdget_pos+0x2ae/0x360 [ 641.889043][T14248] ? ksys_read+0x71/0x250 [ 641.893437][T14248] ksys_read+0x14c/0x250 [ 641.897826][T14248] ? vfs_write+0xa30/0xa30 [ 641.902298][T14248] ? lockdep_hardirqs_on+0x94/0x140 [ 641.907553][T14248] do_syscall_64+0x4c/0xa0 [ 641.912019][T14248] ? clear_bhb_loop+0x60/0xb0 [ 641.916833][T14248] ? clear_bhb_loop+0x60/0xb0 [ 641.921569][T14248] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 641.927521][T14248] RIP: 0033:0x7f48c795d60e [ 641.931983][T14248] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 641.952080][T14248] RSP: 002b:00007f48c88effe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 641.960644][T14248] RAX: ffffffffffffffda RBX: 00007f48c88f06c0 RCX: 00007f48c795d60e [ 641.968669][T14248] RDX: 000000000000000f RSI: 00007f48c88f00a0 RDI: 0000000000000005 [ 641.976784][T14248] RBP: 00007f48c88f0090 R08: 0000000000000000 R09: 0000000000000000 [ 641.985141][T14248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 641.993177][T14248] R13: 00007f48c7c16038 R14: 00007f48c7c15fa0 R15: 00007fff535cd998 [ 642.001241][T14248] [ 642.038388][ T4543] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 642.071904][ T4543] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 642.087440][ T4543] bridge0: port 1(bridge_slave_0) entered blocking state [ 642.094768][ T4543] bridge0: port 1(bridge_slave_0) entered forwarding state [ 642.116243][ T4543] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 642.125385][ T4543] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 642.133983][ T4543] bridge0: port 2(bridge_slave_1) entered blocking state [ 642.141209][ T4543] bridge0: port 2(bridge_slave_1) entered forwarding state [ 642.169444][ T4543] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 642.205782][ T4543] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 642.235693][ T4543] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 642.256286][ T4543] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 642.315556][ T4543] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 642.326685][ T4543] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 642.357495][ T4543] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 642.375914][ T4543] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 642.385746][ T4543] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 642.416440][ T4543] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 642.429531][ T4543] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 642.438372][ T4543] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 642.451903][ T4543] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 645.461151][T14253] device syzkaller0 entered promiscuous mode [ 648.362631][T14287] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3144'. [ 648.383671][T14297] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.3145'. [ 648.393191][T14297] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 648.409918][T14305] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3147'. [ 648.474684][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 648.482249][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 648.519527][T13990] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 648.609677][ T4543] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 648.645381][ T4543] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 648.682212][T13990] device veth0_vlan entered promiscuous mode [ 648.728239][ T4543] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 648.752242][ T4543] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 648.765482][T14309] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3148'. [ 648.779771][T14309] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 648.802150][T14316] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.3149'. [ 648.817487][T14309] net_ratelimit: 3 callbacks suppressed [ 648.817523][T14309] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 648.869033][ T4543] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 648.886560][ T4543] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 648.911073][T14315] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3151'. [ 648.946764][T14316] netlink: 6955 bytes leftover after parsing attributes in process `syz.4.3149'. [ 649.021027][T13990] device veth1_vlan entered promiscuous mode [ 649.263129][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 649.286422][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 649.321629][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 649.337109][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 649.394064][T13990] device veth0_macvtap entered promiscuous mode [ 649.409135][T14323] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3154'. [ 649.441074][T13990] device veth1_macvtap entered promiscuous mode [ 649.472879][ T5255] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 649.495614][ T5255] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 649.622566][T13990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 649.667360][T13990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 649.692842][T13990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 649.708794][T13990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 649.719199][T13990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 649.736265][T13990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 649.755819][T13990] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 649.775739][ T5233] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 649.812599][ T5233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 649.850055][ T5233] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 649.914882][T13990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 650.101225][T13990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 650.154909][T13990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 650.242774][T13990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 650.344682][T13990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 650.460666][T13990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 650.587238][T13990] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 652.597713][T14339] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3158'. [ 652.610841][ T5233] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 652.621536][ T5233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 652.646387][T13990] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.708302][T13990] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.738482][T13990] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.764689][T13990] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.789255][T14345] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3160'. [ 653.045982][ T5237] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 653.064256][ T5237] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 653.071987][ T5237] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 653.405170][T14362] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.3164'. [ 653.415068][ T4543] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 653.422935][ T4543] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 653.445273][T14362] netlink: 6955 bytes leftover after parsing attributes in process `syz.2.3164'. [ 653.513233][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 653.678759][T14378] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3070'. [ 653.691663][T14378] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3070'. [ 653.710774][T14378] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3070'. [ 653.960622][T14386] netlink: 'syz.3.3172': attribute type 21 has an invalid length. [ 654.000968][T14386] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3172'. [ 654.078925][T14386] netlink: 'syz.3.3172': attribute type 4 has an invalid length. [ 655.023087][T14399] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3175'. [ 655.158482][T14404] netlink: 'syz.2.3177': attribute type 16 has an invalid length. [ 655.222671][T13251] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 655.228336][T14404] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3177'. [ 655.255354][T13251] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 655.263532][T13251] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 655.283762][T13251] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 655.298144][T13251] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 655.309261][T13251] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 655.442968][T14412] bridge0: port 3(team0) entered blocking state [ 655.469965][T14416] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.3180'. [ 655.484455][T14412] bridge0: port 3(team0) entered disabled state [ 655.503819][T14412] device team0 entered promiscuous mode [ 655.511153][T14412] device team_slave_0 entered promiscuous mode [ 655.528830][T14412] device team_slave_1 entered promiscuous mode [ 655.543726][T14412] bridge0: port 3(team0) entered blocking state [ 655.550515][T14412] bridge0: port 3(team0) entered forwarding state [ 656.740735][T14416] netlink: 6955 bytes leftover after parsing attributes in process `syz.2.3180'. [ 656.762677][T14421] netlink: 'syz.3.3181': attribute type 46 has an invalid length. [ 656.930731][ T5237] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 657.109965][ T5237] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 657.384344][ T4285] Bluetooth: hci3: command 0x0409 tx timeout [ 657.472253][ T5237] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 657.606969][ T5237] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 659.354984][T14453] netlink: 'syz.3.3188': attribute type 28 has an invalid length. [ 659.374475][T14453] netlink: 'syz.3.3188': attribute type 29 has an invalid length. [ 659.422018][T14453] __nla_validate_parse: 4 callbacks suppressed [ 659.422034][T14453] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3188'. [ 659.464906][ T4285] Bluetooth: hci3: command 0x041b tx timeout [ 659.779083][T14408] chnl_net:caif_netlink_parms(): no params data found [ 660.101633][T14459] FAULT_INJECTION: forcing a failure. [ 660.101633][T14459] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 660.134769][T14459] CPU: 0 PID: 14459 Comm: syz.0.3190 Not tainted syzkaller #0 [ 660.142326][T14459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 660.152515][T14459] Call Trace: [ 660.155882][T14459] [ 660.158854][T14459] dump_stack_lvl+0x188/0x24e [ 660.163589][T14459] ? show_regs_print_info+0x12/0x12 [ 660.168839][T14459] ? load_image+0x400/0x400 [ 660.173451][T14459] ? __lock_acquire+0x7d10/0x7d10 [ 660.178499][T14459] should_fail_ex+0x399/0x4d0 [ 660.183200][T14459] _copy_from_user+0x2c/0x170 [ 660.187900][T14459] __copy_msghdr+0x3b7/0x580 [ 660.192600][T14459] ___sys_sendmsg+0x210/0x360 [ 660.197323][T14459] ? __sys_sendmsg+0x290/0x290 [ 660.202126][T14459] ? rcu_is_watching+0x11/0xa0 [ 660.206950][T14459] __se_sys_sendmsg+0x1bb/0x2a0 [ 660.211921][T14459] ? __x64_sys_sendmsg+0x80/0x80 [ 660.216893][T14459] ? lockdep_hardirqs_on+0x94/0x140 [ 660.222201][T14459] do_syscall_64+0x4c/0xa0 [ 660.226678][T14459] ? clear_bhb_loop+0x60/0xb0 [ 660.231374][T14459] ? clear_bhb_loop+0x60/0xb0 [ 660.236155][T14459] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 660.242160][T14459] RIP: 0033:0x7f668879cdd9 [ 660.246681][T14459] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 660.266391][T14459] RSP: 002b:00007f66896d1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 660.274912][T14459] RAX: ffffffffffffffda RBX: 00007f6688a15fa0 RCX: 00007f668879cdd9 [ 660.282900][T14459] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000005 [ 660.290972][T14459] RBP: 00007f66896d1090 R08: 0000000000000000 R09: 0000000000000000 [ 660.298955][T14459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 660.306934][T14459] R13: 00007f6688a16038 R14: 00007f6688a15fa0 R15: 00007fff78a8eba8 [ 660.315020][T14459] [ 661.544580][ T4284] Bluetooth: hci3: command 0x040f tx timeout [ 661.801445][T14485] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.3194'. [ 661.811180][T14408] bridge0: port 1(bridge_slave_0) entered blocking state [ 661.835476][T14408] bridge0: port 1(bridge_slave_0) entered disabled state [ 661.872927][T14408] device bridge_slave_0 entered promiscuous mode [ 661.886589][T14408] bridge0: port 2(bridge_slave_1) entered blocking state [ 661.900026][T14408] bridge0: port 2(bridge_slave_1) entered disabled state [ 661.909025][T14408] device bridge_slave_1 entered promiscuous mode [ 662.329343][T14485] netlink: 6955 bytes leftover after parsing attributes in process `syz.2.3194'. [ 662.353989][T14498] netlink: 'syz.1.3197': attribute type 10 has an invalid length. [ 662.501263][T14408] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 662.518755][T14505] netlink: 'syz.0.3198': attribute type 1 has an invalid length. [ 662.536277][T14505] netlink: 157116 bytes leftover after parsing attributes in process `syz.0.3198'. [ 662.621513][T14408] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 663.645307][ T4285] Bluetooth: hci3: command 0x0419 tx timeout [ 663.710474][T14408] team0: Port device team_slave_0 added [ 663.822169][T14408] team0: Port device team_slave_1 added [ 664.114589][T14408] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 664.121644][T14408] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 664.284048][T14408] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 664.675842][T14408] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 664.682977][T14408] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 664.844474][T14408] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 665.592072][T14408] device hsr_slave_0 entered promiscuous mode [ 665.654791][T14408] device hsr_slave_1 entered promiscuous mode [ 666.428489][T14541] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3207'. [ 666.772315][T14547] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.3208'. [ 667.358047][T14547] netlink: 6955 bytes leftover after parsing attributes in process `syz.1.3208'. [ 667.966572][T14408] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 668.042414][T14408] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 668.168571][T14408] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 668.194802][T14408] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 668.643372][T14580] FAULT_INJECTION: forcing a failure. [ 668.643372][T14580] name failslab, interval 1, probability 0, space 0, times 0 [ 668.702700][T14408] 8021q: adding VLAN 0 to HW filter on device bond0 [ 668.777299][T14580] CPU: 0 PID: 14580 Comm: syz.2.3216 Not tainted syzkaller #0 [ 668.784986][T14580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 668.795084][T14580] Call Trace: [ 668.798398][T14580] [ 668.801361][T14580] dump_stack_lvl+0x188/0x24e [ 668.806086][T14580] ? show_regs_print_info+0x12/0x12 [ 668.811309][T14580] ? load_image+0x400/0x400 [ 668.815922][T14580] ? __might_sleep+0xd0/0xd0 [ 668.820561][T14580] ? __lock_acquire+0x7d10/0x7d10 [ 668.825624][T14580] should_fail_ex+0x399/0x4d0 [ 668.830322][T14580] should_failslab+0x5/0x20 [ 668.835016][T14580] slab_pre_alloc_hook+0x59/0x310 [ 668.840098][T14580] ? bpf_prog_test_run_skb+0x234/0x12a0 [ 668.845666][T14580] __kmem_cache_alloc_node+0x4f/0x260 [ 668.851051][T14580] ? bpf_prog_test_run_skb+0x234/0x12a0 [ 668.856614][T14580] __kmalloc+0xa0/0x240 [ 668.860841][T14580] bpf_prog_test_run_skb+0x234/0x12a0 [ 668.866229][T14580] ? __fget_files+0x28/0x4b0 [ 668.870838][T14580] ? __fget_files+0x28/0x4b0 [ 668.875449][T14580] ? __fget_files+0x43d/0x4b0 [ 668.880323][T14580] ? cpu_online+0xa0/0xa0 [ 668.884665][T14580] bpf_prog_test_run+0x31e/0x390 [ 668.889650][T14580] __sys_bpf+0x62b/0x780 [ 668.893998][T14580] ? bpf_link_show_fdinfo+0x380/0x380 [ 668.899395][T14580] ? lock_chain_count+0x20/0x20 [ 668.904278][T14580] __x64_sys_bpf+0x78/0x90 [ 668.908717][T14580] do_syscall_64+0x4c/0xa0 [ 668.913152][T14580] ? clear_bhb_loop+0x60/0xb0 [ 668.917862][T14580] ? clear_bhb_loop+0x60/0xb0 [ 668.922558][T14580] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 668.928466][T14580] RIP: 0033:0x7f61a2d9cdd9 [ 668.932897][T14580] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 668.952520][T14580] RSP: 002b:00007f61a3c5c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 668.960952][T14580] RAX: ffffffffffffffda RBX: 00007f61a3015fa0 RCX: 00007f61a2d9cdd9 [ 668.968938][T14580] RDX: 0000000000000048 RSI: 0000200000000780 RDI: 000000000000000a [ 668.976923][T14580] RBP: 00007f61a3c5c090 R08: 0000000000000000 R09: 0000000000000000 [ 668.984907][T14580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 668.992896][T14580] R13: 00007f61a3016038 R14: 00007f61a3015fa0 R15: 00007ffc7c23b1e8 [ 669.000893][T14580] [ 669.038829][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 669.065354][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 669.096426][T14408] 8021q: adding VLAN 0 to HW filter on device team0 [ 669.148508][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 669.205303][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 669.288836][ T4542] bridge0: port 1(bridge_slave_0) entered blocking state [ 669.296091][ T4542] bridge0: port 1(bridge_slave_0) entered forwarding state [ 669.441763][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 669.508927][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 669.570822][ T4542] bridge0: port 2(bridge_slave_1) entered blocking state [ 669.578078][ T4542] bridge0: port 2(bridge_slave_1) entered forwarding state [ 669.649367][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 669.821724][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 669.832248][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 669.915459][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 669.971327][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 670.011795][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 670.051799][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 670.081824][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 670.114350][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 670.133483][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 670.193903][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 670.232114][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 670.294015][T14408] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 671.348442][T14607] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3220'. [ 671.447954][T14616] netlink: 172 bytes leftover after parsing attributes in process `syz.0.3225'. [ 672.146357][T14630] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.3228'. [ 672.172242][T14624] delete_channel: no stack [ 672.205656][ T5237] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 672.213419][ T5237] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 672.264917][ T5237] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 672.272590][ T5237] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 672.565040][ T5237] batman_adv: batadv0: Interface deactivated: ipvlan1 [ 672.572131][ T5237] batman_adv: batadv0: Removing interface: ipvlan1 [ 672.720320][ T5237] device veth0_macvtap left promiscuous mode [ 672.730410][ T5237] device veth1_vlan left promiscuous mode [ 672.742716][ T5237] device veth0_vlan left promiscuous mode [ 674.877762][ T5237] team0 (unregistering): Port device team_slave_1 removed [ 674.963156][ T5237] team0 (unregistering): Port device team_slave_0 removed [ 675.092145][ T5237] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 675.209021][ T5237] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 675.771852][ T5237] bond0 (unregistering): (slave team0): Releasing backup interface [ 675.833974][ T5237] bond0 (unregistering): Released all slaves [ 675.875924][T14630] netlink: 6955 bytes leftover after parsing attributes in process `syz.3.3228'. [ 676.080909][T14658] netlink: 'syz.0.3232': attribute type 21 has an invalid length. [ 676.090784][T14658] netlink: 'syz.0.3232': attribute type 6 has an invalid length. [ 676.111539][T14658] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3232'. [ 676.146141][T14676] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3236'. [ 676.270438][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 676.282217][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 676.340172][T14408] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 676.597898][T14690] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.3238'. [ 676.734296][T14690] netlink: 6955 bytes leftover after parsing attributes in process `syz.1.3238'. [ 677.139572][T14702] netlink: 'syz.2.3242': attribute type 11 has an invalid length. [ 677.276065][T14702] netlink: 'syz.2.3242': attribute type 11 has an invalid length. [ 678.855852][ T5224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 678.921764][ T5224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 679.132284][T14731] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3249'. [ 679.259983][T14408] device veth0_vlan entered promiscuous mode [ 679.294737][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 679.314825][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 679.338497][T14408] device veth1_vlan entered promiscuous mode [ 679.404440][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 679.418013][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 679.429984][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 679.448678][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 679.513809][ T5233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 679.533753][ T5233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 679.614469][T14408] device veth0_macvtap entered promiscuous mode [ 679.648937][T14408] device veth1_macvtap entered promiscuous mode [ 679.708555][T14750] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.3253'. [ 680.085149][T14750] netlink: 6955 bytes leftover after parsing attributes in process `syz.1.3253'. [ 680.208690][ T5233] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 680.218300][ T5233] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 680.302147][T14408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 680.604203][T14408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 680.643701][T14408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 680.694323][T14408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 680.754418][T14408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 680.834158][T14408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 680.894015][T14408] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 680.921660][ T5233] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 680.955837][ T5233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 680.982766][T14408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 681.024511][T14408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 681.057256][T14408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 681.085830][T14408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 681.103004][T14408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 681.116699][T14408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 681.135017][T14408] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 681.148400][ T5224] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 681.215668][ T5224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 681.268025][T14408] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.296595][T14408] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.326589][T14408] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.349106][T14408] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.979552][T14779] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.3269'. [ 683.036792][T14779] netlink: 6955 bytes leftover after parsing attributes in process `syz.0.3269'. [ 683.040020][ T5255] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 683.091410][ T5255] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 683.262710][ T5233] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 683.340905][ T5233] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 683.369246][ T5233] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 684.140692][T14793] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3264'. [ 684.158666][ T5233] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 684.190472][T14799] netlink: 'syz.1.3267': attribute type 1 has an invalid length. [ 684.212700][T14799] netlink: 'syz.1.3267': attribute type 4 has an invalid length. [ 684.244312][T14799] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.3267'. [ 684.379798][T14806] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3268'. [ 685.738619][T14830] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.3275'. [ 686.033885][T14830] netlink: 6955 bytes leftover after parsing attributes in process `syz.4.3275'. [ 686.107979][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.116213][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.369407][ T4285] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 687.379067][ T4285] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 687.411950][ T4285] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 687.426039][ T4285] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 687.434990][T13251] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 687.442411][T13251] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 687.520592][T14855] netlink: 164 bytes leftover after parsing attributes in process `syz.4.3285'. [ 689.476034][T13251] Bluetooth: hci4: command 0x0409 tx timeout [ 690.018980][ T4543] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.128086][T14882] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.3290'. [ 690.168491][T14882] netlink: 6955 bytes leftover after parsing attributes in process `syz.1.3290'. [ 690.257238][ T4543] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.347046][T14880] device syzkaller0 entered promiscuous mode [ 690.415522][ T4543] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.433910][T14861] chnl_net:caif_netlink_parms(): no params data found [ 691.555154][T13251] Bluetooth: hci4: command 0x041b tx timeout [ 692.641090][T14900] netlink: 'syz.2.3294': attribute type 10 has an invalid length. [ 692.652797][T14900] netlink: 55 bytes leftover after parsing attributes in process `syz.2.3294'. [ 692.963663][T14903] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3296'. [ 693.148948][ T4543] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 693.250292][T14861] bridge0: port 1(bridge_slave_0) entered blocking state [ 693.273881][T14861] bridge0: port 1(bridge_slave_0) entered disabled state [ 693.291331][T14861] device bridge_slave_0 entered promiscuous mode [ 693.313318][T14861] bridge0: port 2(bridge_slave_1) entered blocking state [ 693.337291][T14861] bridge0: port 2(bridge_slave_1) entered disabled state [ 693.351111][T14861] device bridge_slave_1 entered promiscuous mode [ 693.654321][ T4284] Bluetooth: hci4: command 0x040f tx timeout [ 694.179837][T14861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 694.242518][T14861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 694.353638][ T4543] tipc: Left network mode [ 694.438498][T14861] team0: Port device team_slave_0 added [ 694.453161][T14861] team0: Port device team_slave_1 added [ 694.513490][T14861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 694.531139][T14861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 694.573846][T14941] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.3304'. [ 694.630505][T14861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 694.671071][T14941] netlink: 6955 bytes leftover after parsing attributes in process `syz.1.3304'. [ 694.690775][T14861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 694.702282][T14861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 694.739523][T14861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 695.236463][T14861] device hsr_slave_0 entered promiscuous mode [ 695.253904][T14861] device hsr_slave_1 entered promiscuous mode [ 695.277807][T14861] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 695.337105][T14861] Cannot create hsr debugfs directory [ 695.455466][T14958] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3309'. [ 695.705081][ T4284] Bluetooth: hci4: command 0x0419 tx timeout [ 697.425489][T15007] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.3317'. [ 699.827163][T15007] netlink: 6955 bytes leftover after parsing attributes in process `syz.1.3317'. [ 700.784053][T15039] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3322'. [ 701.244237][T14861] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 702.921936][T14861] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 702.983599][T14861] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 703.057745][T14861] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 703.246609][T15087] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.3329'. [ 703.359650][T15087] netlink: 6955 bytes leftover after parsing attributes in process `syz.1.3329'. [ 703.402505][T15092] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.3333'. [ 703.493350][T15092] netlink: 6955 bytes leftover after parsing attributes in process `syz.4.3333'. [ 703.524572][T15093] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3334'. [ 703.544313][T13251] Bluetooth: hci5: command 0x0406 tx timeout [ 703.680065][T14861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 703.764994][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 703.842191][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 703.994470][T14861] 8021q: adding VLAN 0 to HW filter on device team0 [ 704.154631][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 704.185147][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 704.235153][ T4542] bridge0: port 1(bridge_slave_0) entered blocking state [ 704.242368][ T4542] bridge0: port 1(bridge_slave_0) entered forwarding state [ 704.339886][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 704.887418][ T5231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 704.973023][ T5231] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 704.992568][ T5231] bridge0: port 2(bridge_slave_1) entered blocking state [ 704.999944][ T5231] bridge0: port 2(bridge_slave_1) entered forwarding state [ 705.039451][T15111] device bridge_slave_1 left promiscuous mode [ 705.063565][T15111] bridge0: port 2(bridge_slave_1) entered disabled state [ 705.103678][T15111] device bridge_slave_0 left promiscuous mode [ 705.120329][T15111] bridge0: port 1(bridge_slave_0) entered disabled state [ 705.511171][ T5231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 705.537016][ T5231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 705.653773][ T5231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 705.689350][ T5231] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 705.707980][ T5231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 705.741934][ T5231] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 705.802054][ T5231] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 705.819127][ T5231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 705.848447][ T5231] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 705.867172][ T5231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 705.897118][ T5231] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 705.917227][T14861] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 706.688724][T15163] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.3344'. [ 706.701767][T15173] FAULT_INJECTION: forcing a failure. [ 706.701767][T15173] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 706.701802][T15173] CPU: 1 PID: 15173 Comm: syz.1.3347 Not tainted syzkaller #0 [ 706.701822][T15173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 706.701835][T15173] Call Trace: [ 706.701842][T15173] [ 706.701850][T15173] dump_stack_lvl+0x188/0x24e [ 706.701887][T15173] ? show_regs_print_info+0x12/0x12 [ 706.701916][T15173] ? load_image+0x400/0x400 [ 706.701947][T15173] ? __lock_acquire+0x7d10/0x7d10 [ 706.701981][T15173] should_fail_ex+0x399/0x4d0 [ 706.702008][T15173] _copy_from_user+0x2c/0x170 [ 706.702036][T15173] iovec_from_user+0x143/0x360 [ 706.702062][T15173] __import_iovec+0x6d/0x500 [ 706.702094][T15173] import_iovec+0x6f/0xa0 [ 706.702120][T15173] ___sys_sendmsg+0x252/0x360 [ 706.702156][T15173] ? __sys_sendmsg+0x290/0x290 [ 706.702208][T15173] ? __lock_acquire+0x7d10/0x7d10 [ 706.702262][T15173] __se_sys_sendmsg+0x1bb/0x2a0 [ 706.702295][T15173] ? __x64_sys_sendmsg+0x80/0x80 [ 706.702342][T15173] ? lockdep_hardirqs_on+0x94/0x140 [ 706.702368][T15173] do_syscall_64+0x4c/0xa0 [ 706.702394][T15173] ? clear_bhb_loop+0x60/0xb0 [ 706.702419][T15173] ? clear_bhb_loop+0x60/0xb0 [ 706.702447][T15173] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 706.702483][T15173] RIP: 0033:0x7f7afe39cdd9 [ 706.702509][T15173] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 706.702527][T15173] RSP: 002b:00007f7afc5f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 706.702552][T15173] RAX: ffffffffffffffda RBX: 00007f7afe615fa0 RCX: 00007f7afe39cdd9 [ 706.702568][T15173] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 706.702582][T15173] RBP: 00007f7afc5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 706.702595][T15173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 706.702607][T15173] R13: 00007f7afe616038 R14: 00007f7afe615fa0 R15: 00007ffe760a62f8 [ 706.702640][T15173] [ 707.183870][T15171] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3346'. [ 707.268486][T15163] netlink: 6955 bytes leftover after parsing attributes in process `syz.2.3344'. [ 707.465224][ T4543] device veth0_macvtap left promiscuous mode [ 708.650645][ T4543] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 710.453422][ T4543] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 710.714827][ T4543] bond0 (unregistering): Released all slaves [ 710.764761][ T5255] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 710.772289][ T5255] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 710.806772][T15217] netlink: 'syz.0.3355': attribute type 20 has an invalid length. [ 710.818235][T15244] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3359'. [ 710.890990][T14861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 711.047374][ T5255] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 711.106248][ T5255] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 711.171535][T15250] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.3360'. [ 711.558067][ T5233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 711.595224][ T5233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 711.644060][T15250] netlink: 6955 bytes leftover after parsing attributes in process `syz.0.3360'. [ 711.663341][T15256] netlink: 763 bytes leftover after parsing attributes in process `syz.1.3361'. [ 711.714539][ T5233] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 711.732483][ T5233] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 711.830751][T14861] device veth0_vlan entered promiscuous mode [ 711.907133][T14861] device veth1_vlan entered promiscuous mode [ 712.035398][ T5255] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 712.062100][ T5255] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 712.115914][T14861] device veth0_macvtap entered promiscuous mode [ 712.162924][T14861] device veth1_macvtap entered promiscuous mode [ 712.268505][T14861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 712.327537][T14861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 712.374414][T14861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 712.434164][T14861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 712.475918][T14861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 712.533210][T14861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 712.571762][T14861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 712.589570][T14861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 712.619820][T14861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 712.652958][T14861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 712.695880][T14861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 712.730785][T14861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 712.789458][T14861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 712.810712][T14861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 712.833010][T14861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 712.854836][T14861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 712.881160][T14861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 712.900233][T14861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 712.932642][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 712.947813][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 712.970652][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 712.990634][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 713.010877][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 713.031057][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 713.060427][T15282] netlink: 'syz.1.3367': attribute type 21 has an invalid length. [ 713.085275][T15282] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3367'. [ 713.327251][T14861] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 713.352482][T14861] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 713.377302][T14861] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 713.397934][T14861] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 713.587359][T15295] netlink: 'syz.0.3369': attribute type 10 has an invalid length. [ 713.724745][T15295] team0: Device veth1_macvtap failed to register rx_handler [ 713.765987][ T4542] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 713.791597][ T4542] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 713.822856][ T5224] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 713.845399][T15297] netlink: 164 bytes leftover after parsing attributes in process `syz.4.3370'. [ 714.128805][T15316] FAULT_INJECTION: forcing a failure. [ 714.128805][T15316] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 714.184275][T15316] CPU: 0 PID: 15316 Comm: syz.0.3373 Not tainted syzkaller #0 [ 714.192202][T15316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 714.202311][T15316] Call Trace: [ 714.205641][T15316] [ 714.208610][T15316] dump_stack_lvl+0x188/0x24e [ 714.213346][T15316] ? show_regs_print_info+0x12/0x12 [ 714.218607][T15316] ? load_image+0x400/0x400 [ 714.223157][T15316] ? __lock_acquire+0x7d10/0x7d10 [ 714.228252][T15316] should_fail_ex+0x399/0x4d0 [ 714.233065][T15316] _copy_from_user+0x2c/0x170 [ 714.237798][T15316] ___sys_sendmsg+0x1c3/0x360 [ 714.242537][T15316] ? __sys_sendmsg+0x290/0x290 [ 714.247386][T15316] ? __lock_acquire+0x7d10/0x7d10 [ 714.252504][T15316] __se_sys_sendmsg+0x1bb/0x2a0 [ 714.257486][T15316] ? __x64_sys_sendmsg+0x80/0x80 [ 714.262467][T15316] ? lockdep_hardirqs_on+0x94/0x140 [ 714.267707][T15316] do_syscall_64+0x4c/0xa0 [ 714.272682][T15316] ? clear_bhb_loop+0x60/0xb0 [ 714.277416][T15316] ? clear_bhb_loop+0x60/0xb0 [ 714.282121][T15316] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 714.288037][T15316] RIP: 0033:0x7f668879cdd9 [ 714.292489][T15316] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 714.312110][T15316] RSP: 002b:00007f66896d1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 714.320549][T15316] RAX: ffffffffffffffda RBX: 00007f6688a15fa0 RCX: 00007f668879cdd9 [ 714.328736][T15316] RDX: 0000000000040004 RSI: 00002000000000c0 RDI: 0000000000000004 [ 714.336744][T15316] RBP: 00007f66896d1090 R08: 0000000000000000 R09: 0000000000000000 [ 714.344743][T15316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 714.352904][T15316] R13: 00007f6688a16038 R14: 00007f6688a15fa0 R15: 00007fff78a8eba8 [ 714.360905][T15316] [ 714.459599][T15314] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3374'. [ 714.471374][T15314] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 714.502422][ T5233] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 714.558551][ T5233] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 714.593352][ T5233] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 714.636907][T15326] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.3375'. [ 715.129410][T15326] netlink: 6955 bytes leftover after parsing attributes in process `syz.2.3375'. [ 717.112364][T15358] netlink: 164 bytes leftover after parsing attributes in process `syz.4.3383'. [ 717.360862][T15362] netlink: 'syz.0.3386': attribute type 10 has an invalid length. [ 717.419253][T15362] team0: Device hsr_slave_0 failed to register rx_handler [ 717.538555][T15364] netlink: 188 bytes leftover after parsing attributes in process `syz.2.3387'. [ 717.803060][T15375] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.3390'. [ 717.987453][T15379] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.3392'. [ 718.457053][T15386] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.3395'. [ 719.209089][T15386] netlink: 6955 bytes leftover after parsing attributes in process `syz.4.3395'. [ 719.450081][T15405] sock: sock_set_timeout: `syz.3.3401' (pid 15405) tries to set negative timeout [ 719.944066][T15419] netlink: 134056 bytes leftover after parsing attributes in process `syz.3.3406'. [ 720.053851][T15421] netlink: 'syz.1.3405': attribute type 10 has an invalid length. [ 720.130437][T15421] device veth0_macvtap left promiscuous mode [ 721.446635][T15446] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.3414'. [ 721.584242][T15446] netlink: 6955 bytes leftover after parsing attributes in process `syz.4.3414'. [ 722.151944][T15466] netlink: 'syz.4.3420': attribute type 39 has an invalid length. [ 722.181251][T15464] netlink: 'syz.2.3419': attribute type 22 has an invalid length. [ 722.194353][T15464] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3419'. [ 722.988330][T15492] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.3428'. [ 723.242637][T15500] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.3430'. [ 723.329041][T15500] netlink: 6955 bytes leftover after parsing attributes in process `syz.4.3430'. [ 723.731920][T15513] delete_channel: no stack [ 723.988349][T15525] FAULT_INJECTION: forcing a failure. [ 723.988349][T15525] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 724.084655][T15525] CPU: 0 PID: 15525 Comm: syz.4.3440 Not tainted syzkaller #0 [ 724.092392][T15525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 724.102583][T15525] Call Trace: [ 724.105902][T15525] [ 724.108863][T15525] dump_stack_lvl+0x188/0x24e [ 724.113592][T15525] ? show_regs_print_info+0x12/0x12 [ 724.118838][T15525] ? load_image+0x400/0x400 [ 724.123399][T15525] ? __lock_acquire+0x7d10/0x7d10 [ 724.128477][T15525] should_fail_ex+0x399/0x4d0 [ 724.133198][T15525] _copy_from_user+0x2c/0x170 [ 724.137917][T15525] iovec_from_user+0x143/0x360 [ 724.142733][T15525] __import_iovec+0x6d/0x500 [ 724.147441][T15525] import_iovec+0x6f/0xa0 [ 724.151816][T15525] ___sys_sendmsg+0x252/0x360 [ 724.156546][T15525] ? __sys_sendmsg+0x290/0x290 [ 724.161369][T15525] ? __lock_acquire+0x7d10/0x7d10 [ 724.166456][T15525] __se_sys_sendmsg+0x1bb/0x2a0 [ 724.171442][T15525] ? __x64_sys_sendmsg+0x80/0x80 [ 724.176474][T15525] ? lockdep_hardirqs_on+0x94/0x140 [ 724.181725][T15525] do_syscall_64+0x4c/0xa0 [ 724.186186][T15525] ? clear_bhb_loop+0x60/0xb0 [ 724.190956][T15525] ? clear_bhb_loop+0x60/0xb0 [ 724.195684][T15525] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 724.201616][T15525] RIP: 0033:0x7f6cb4b9cdd9 [ 724.206057][T15525] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 724.225857][T15525] RSP: 002b:00007f6cb5a9e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 724.234289][T15525] RAX: ffffffffffffffda RBX: 00007f6cb4e16090 RCX: 00007f6cb4b9cdd9 [ 724.242278][T15525] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 724.250262][T15525] RBP: 00007f6cb5a9e090 R08: 0000000000000000 R09: 0000000000000000 [ 724.258423][T15525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 724.266495][T15525] R13: 00007f6cb4e16128 R14: 00007f6cb4e16090 R15: 00007ffcd0d7e708 [ 724.274490][T15525] [ 724.324434][T15529] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3442'. [ 725.021100][T15541] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.3447'. [ 725.051906][T15541] netlink: 6955 bytes leftover after parsing attributes in process `syz.3.3447'. [ 725.825696][T15567] netlink: 'syz.0.3455': attribute type 39 has an invalid length. [ 726.844823][T15578] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3457'. [ 726.857553][T15578] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 726.928771][T15578] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 727.288378][T15598] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.3464'. [ 727.372256][T15598] netlink: 6955 bytes leftover after parsing attributes in process `syz.2.3464'. [ 728.064584][T15610] netlink: 'syz.0.3468': attribute type 16 has an invalid length. [ 728.084933][T15610] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3468'. [ 728.170150][T15610] netlink: 'syz.0.3468': attribute type 10 has an invalid length. [ 728.743029][T15610] device macvlan0 entered promiscuous mode [ 728.765315][T15610] team0: Port device macvlan0 added [ 729.154340][ T4284] Bluetooth: hci0: command 0x0406 tx timeout [ 729.326405][T15635] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.3477'. [ 729.415622][T15635] netlink: 6955 bytes leftover after parsing attributes in process `syz.2.3477'. [ 729.936981][T15639] device syzkaller0 entered promiscuous mode [ 731.013081][T15676] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.3491'. [ 731.700444][T15681] cgroup: fork rejected by pids controller in /syz1 [ 733.383242][T15676] netlink: 6955 bytes leftover after parsing attributes in process `syz.4.3491'. [ 733.720242][T15789] netlink: 'syz.3.3496': attribute type 16 has an invalid length. [ 733.795195][T15792] netlink: 'syz.3.3496': attribute type 10 has an invalid length. [ 733.858726][T15789] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3496'. [ 733.996530][T15792] team0: Port device macvlan0 added [ 734.677502][T15816] netlink: 'syz.3.3505': attribute type 21 has an invalid length. [ 734.947059][T15821] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.3507'. [ 734.962368][T13251] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 734.967510][T15821] netlink: 6955 bytes leftover after parsing attributes in process `syz.2.3507'. [ 734.983778][ T4285] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 735.022930][ T4285] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 735.045212][ T4285] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 735.055777][ T4285] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 735.069055][ T4285] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 735.298723][T15825] chnl_net:caif_netlink_parms(): no params data found [ 735.371123][T15825] bridge0: port 1(bridge_slave_0) entered blocking state [ 735.378660][T15825] bridge0: port 1(bridge_slave_0) entered disabled state [ 735.387607][T15825] device bridge_slave_0 entered promiscuous mode [ 735.396855][T15825] bridge0: port 2(bridge_slave_1) entered blocking state [ 735.404286][T15825] bridge0: port 2(bridge_slave_1) entered disabled state [ 735.412729][T15825] device bridge_slave_1 entered promiscuous mode [ 735.446207][T15825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 735.459783][T15825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 735.492444][T15825] team0: Port device team_slave_0 added [ 735.502276][T15825] team0: Port device team_slave_1 added [ 735.577406][T15825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 735.597423][T15825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 735.717967][T15825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 735.758578][T15825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 735.826912][T15825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 736.077211][T15825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 736.475308][T15825] device hsr_slave_0 entered promiscuous mode [ 736.487864][T15825] device hsr_slave_1 entered promiscuous mode [ 736.548150][T15825] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 736.566405][T15825] Cannot create hsr debugfs directory [ 737.126121][T15879] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.3522'. [ 737.144938][ T4284] Bluetooth: hci1: command 0x0409 tx timeout [ 737.218509][T15825] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.166721][T15879] netlink: 6955 bytes leftover after parsing attributes in process `syz.3.3522'. [ 738.177196][T15880] netlink: 'syz.0.3523': attribute type 4 has an invalid length. [ 738.190018][T15880] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3523'. [ 738.202619][T15880] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 738.268350][T15825] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.470668][T15825] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.647141][T15825] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 739.235267][ T4285] Bluetooth: hci1: command 0x041b tx timeout [ 739.966749][T15825] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 740.128075][T15913] device syzkaller0 entered promiscuous mode [ 740.291129][T15924] netlink: 'syz.4.3539': attribute type 3 has an invalid length. [ 740.305786][T15924] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3539'. [ 741.304709][ T4285] Bluetooth: hci1: command 0x040f tx timeout [ 743.320609][T15825] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 743.331350][T15825] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 743.347962][T15825] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 743.384449][ T4285] Bluetooth: hci1: command 0x0419 tx timeout [ 743.466279][T15938] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.3554'. [ 743.510875][T15938] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.3554'. [ 743.679785][T15938] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3554'. [ 743.711346][T15938] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.3554'. [ 743.721859][T15938] netlink: 'syz.2.3554': attribute type 10 has an invalid length. [ 743.768982][T15825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 743.833700][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 743.855141][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 743.961288][T15825] 8021q: adding VLAN 0 to HW filter on device team0 [ 744.004174][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 744.071953][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 744.121225][ T4542] bridge0: port 1(bridge_slave_0) entered blocking state [ 744.128438][ T4542] bridge0: port 1(bridge_slave_0) entered forwarding state [ 744.221964][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 744.297594][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 744.313377][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 744.405050][ T4542] bridge0: port 2(bridge_slave_1) entered blocking state [ 744.412342][ T4542] bridge0: port 2(bridge_slave_1) entered forwarding state [ 744.468433][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 744.521433][ T5224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 744.549362][ T5233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 744.567787][ T5233] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 744.625341][ T5233] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 744.704385][ T5233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 744.765003][ T5233] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 744.815858][ T5233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 744.826855][ T5233] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 744.928048][T15969] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.3552'. [ 744.930408][T15968] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3553'. [ 745.042741][ T5233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 745.069848][ T5233] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 745.081255][T15825] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 745.111050][T15969] netlink: 6955 bytes leftover after parsing attributes in process `syz.4.3552'. [ 745.134309][T15974] netlink: 'syz.2.3556': attribute type 3 has an invalid length. [ 745.134541][T15973] netlink: 64535 bytes leftover after parsing attributes in process `syz.2.3556'. [ 745.144005][T15974] netlink: 'syz.2.3556': attribute type 1 has an invalid length. [ 745.203612][T15974] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.3556'. [ 745.467020][T15983] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.3558'. [ 746.035367][T16000] netlink: 'syz.2.3562': attribute type 21 has an invalid length. [ 746.063650][T16000] netlink: 16154 bytes leftover after parsing attributes in process `syz.2.3562'. [ 746.100576][T16002] netlink: 'syz.3.3563': attribute type 10 has an invalid length. [ 747.026682][T15825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 747.034002][ T5231] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 747.070926][ T5231] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 747.158907][ T5233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 747.185470][ T5233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 747.287314][ T5233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 747.305296][ T5233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 747.330380][T15825] device veth0_vlan entered promiscuous mode [ 747.351899][T16017] FAULT_INJECTION: forcing a failure. [ 747.351899][T16017] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 747.354162][ T5233] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 747.398878][T16017] CPU: 1 PID: 16017 Comm: syz.0.3567 Not tainted syzkaller #0 [ 747.406426][T16017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 747.416505][T16017] Call Trace: [ 747.419801][T16017] [ 747.422766][T16017] dump_stack_lvl+0x188/0x24e [ 747.427490][T16017] ? show_regs_print_info+0x12/0x12 [ 747.432801][T16017] ? load_image+0x400/0x400 [ 747.437475][T16017] ? __lock_acquire+0x7d10/0x7d10 [ 747.442621][T16017] should_fail_ex+0x399/0x4d0 [ 747.447331][T16017] _copy_from_iter+0x1c0/0x1130 [ 747.452206][T16017] ? __lock_acquire+0x7d10/0x7d10 [ 747.457263][T16017] ? sock_alloc_send_pskb+0x89d/0x9a0 [ 747.462673][T16017] ? copyout_mc+0x110/0x110 [ 747.467208][T16017] ? __virt_addr_valid+0x188/0x540 [ 747.472352][T16017] ? __virt_addr_valid+0x188/0x540 [ 747.477504][T16017] ? __virt_addr_valid+0x465/0x540 [ 747.482741][T16017] ? __check_object_size+0x500/0xa40 [ 747.488058][T16017] skb_copy_datagram_from_iter+0xef/0x690 [ 747.493984][T16017] ? skb_put+0x117/0x210 [ 747.498253][T16017] tun_get_user+0xb81/0x3c70 [ 747.502903][T16017] ? rcu_read_unlock+0xa0/0xa0 [ 747.507710][T16017] ? tun_get+0x1c/0x2e0 [ 747.511905][T16017] ? __lock_acquire+0x7d10/0x7d10 [ 747.516966][T16017] ? tun_get+0x1c/0x2e0 [ 747.521163][T16017] tun_chr_write_iter+0x112/0x1f0 [ 747.526234][T16017] vfs_write+0x4b1/0xa30 [ 747.530544][T16017] ? file_end_write+0x250/0x250 [ 747.535450][T16017] ? __fget_files+0x43d/0x4b0 [ 747.540214][T16017] ? __fdget_pos+0x1d4/0x360 [ 747.544846][T16017] ? ksys_write+0x71/0x250 [ 747.549304][T16017] ksys_write+0x14c/0x250 [ 747.553670][T16017] ? __ia32_sys_read+0x80/0x80 [ 747.558469][T16017] ? lockdep_hardirqs_on+0x94/0x140 [ 747.563694][T16017] do_syscall_64+0x4c/0xa0 [ 747.568310][T16017] ? clear_bhb_loop+0x60/0xb0 [ 747.573009][T16017] ? clear_bhb_loop+0x60/0xb0 [ 747.577713][T16017] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 747.583628][T16017] RIP: 0033:0x7f668879cdd9 [ 747.588068][T16017] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 747.607890][T16017] RSP: 002b:00007f66896d1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 747.616343][T16017] RAX: ffffffffffffffda RBX: 00007f6688a15fa0 RCX: 00007f668879cdd9 [ 747.624516][T16017] RDX: 000000000000fdef RSI: 0000200000000180 RDI: 00000000000000c8 [ 747.632506][T16017] RBP: 00007f66896d1090 R08: 0000000000000000 R09: 0000000000000000 [ 747.640697][T16017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 747.648685][T16017] R13: 00007f6688a16038 R14: 00007f6688a15fa0 R15: 00007fff78a8eba8 [ 747.656703][T16017] [ 747.664257][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.670800][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.684702][ T5233] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 747.701601][T15825] device veth1_vlan entered promiscuous mode [ 747.731589][ T5233] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 747.743119][ T5233] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 747.753516][ T5233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 747.764958][ T5233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 747.796215][T15825] device veth0_macvtap entered promiscuous mode [ 747.820278][T15825] device veth1_macvtap entered promiscuous mode [ 747.837318][T15825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 747.849396][T15825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 747.860404][T15825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 747.871680][T15825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 747.881908][T15825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 747.892940][T15825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 747.903389][T15825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 747.914333][T15825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 747.924885][T16024] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x31 [ 747.934395][T15825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 747.946752][T15825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 747.976281][T15825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 748.009834][T15825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 748.064350][T15825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 748.101187][T15825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 748.121051][T15825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 748.178982][T15825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 748.202401][T16026] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3570'. [ 748.224296][T15825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 748.248349][T15825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 748.250991][T16034] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.3572'. [ 748.260512][T15825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 748.325810][T15825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 748.344706][T16031] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x31 [ 748.393088][T15825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 748.427923][T15825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 748.437122][ T5233] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 748.455183][ T5233] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 748.489403][ T5233] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 748.519051][ T5233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 748.538756][ T5233] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 748.586567][ T5233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 748.772235][T16034] netlink: 6955 bytes leftover after parsing attributes in process `syz.0.3572'. [ 748.795947][T15825] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 748.821722][T15825] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 748.846226][T15825] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 748.863795][T15825] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 749.111347][ T4321] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 749.125935][ T4321] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 749.133895][ T4543] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 749.260237][ T4321] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 749.285729][ T4321] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 749.305944][T16046] netlink: 'syz.4.3579': attribute type 6 has an invalid length. [ 749.329804][T16046] netlink: 164 bytes leftover after parsing attributes in process `syz.4.3579'. [ 749.872194][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 750.269172][T16064] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3499'. [ 750.782038][T16075] netlink: 'syz.2.3584': attribute type 10 has an invalid length. [ 751.635998][T16069] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.3582'. [ 752.446598][T16096] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.3590'. [ 752.654913][T16103] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3592'. [ 752.738732][T16096] netlink: 6955 bytes leftover after parsing attributes in process `syz.1.3590'. [ 753.198965][T16118] netlink: 'syz.3.3600': attribute type 27 has an invalid length. [ 753.219797][T16118] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3600'. [ 753.246954][T16122] netlink: 'syz.4.3601': attribute type 27 has an invalid length. [ 753.264654][T16122] netlink: 164 bytes leftover after parsing attributes in process `syz.4.3601'. [ 753.326815][T16128] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3598'. [ 753.630928][T16133] netlink: 'syz.4.3602': attribute type 10 has an invalid length. [ 756.711268][T16183] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.3616'. [ 756.823109][T16183] netlink: 6955 bytes leftover after parsing attributes in process `syz.3.3616'. [ 756.951605][T16189] FAULT_INJECTION: forcing a failure. [ 756.951605][T16189] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 757.013670][T16189] CPU: 1 PID: 16189 Comm: syz.0.3620 Not tainted syzkaller #0 [ 757.021318][T16189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 757.031422][T16189] Call Trace: [ 757.034736][T16189] [ 757.037701][T16189] dump_stack_lvl+0x188/0x24e [ 757.042433][T16189] ? show_regs_print_info+0x12/0x12 [ 757.047684][T16189] ? load_image+0x400/0x400 [ 757.052236][T16189] ? __lock_acquire+0x7d10/0x7d10 [ 757.057305][T16189] ? snprintf+0xe5/0x140 [ 757.061585][T16189] should_fail_ex+0x399/0x4d0 [ 757.066318][T16189] _copy_to_user+0x2c/0x130 [ 757.070970][T16189] simple_read_from_buffer+0xe3/0x150 [ 757.076385][T16189] proc_fail_nth_read+0x1a6/0x220 [ 757.081450][T16189] ? proc_fault_inject_write+0x310/0x310 [ 757.087125][T16189] ? fsnotify_perm+0x248/0x550 [ 757.091931][T16189] ? proc_fault_inject_write+0x310/0x310 [ 757.097674][T16189] vfs_read+0x2de/0xa00 [ 757.101903][T16189] ? kernel_read+0x1e0/0x1e0 [ 757.106561][T16189] ? __fget_files+0x28/0x4b0 [ 757.111211][T16189] ? __fget_files+0x28/0x4b0 [ 757.115860][T16189] ? __fget_files+0x43d/0x4b0 [ 757.120674][T16189] ? __fdget_pos+0x2ae/0x360 [ 757.125394][T16189] ? ksys_read+0x71/0x250 [ 757.129776][T16189] ksys_read+0x14c/0x250 [ 757.134162][T16189] ? vfs_write+0xa30/0xa30 [ 757.138667][T16189] ? lockdep_hardirqs_on+0x94/0x140 [ 757.143995][T16189] do_syscall_64+0x4c/0xa0 [ 757.148458][T16189] ? clear_bhb_loop+0x60/0xb0 [ 757.153176][T16189] ? clear_bhb_loop+0x60/0xb0 [ 757.157901][T16189] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 757.163838][T16189] RIP: 0033:0x7f668875d60e [ 757.168291][T16189] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 757.187976][T16189] RSP: 002b:00007f66896d0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 757.196446][T16189] RAX: ffffffffffffffda RBX: 00007f66896d16c0 RCX: 00007f668875d60e [ 757.204454][T16189] RDX: 000000000000000f RSI: 00007f66896d10a0 RDI: 0000000000000005 [ 757.212461][T16189] RBP: 00007f66896d1090 R08: 0000000000000000 R09: 0000000000000000 [ 757.220488][T16189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 757.228498][T16189] R13: 00007f6688a16038 R14: 00007f6688a15fa0 R15: 00007fff78a8eba8 [ 757.236704][T16189] [ 759.533668][T16187] netlink: 180 bytes leftover after parsing attributes in process `syz.4.3619'. [ 759.736535][T16201] netlink: 'syz.2.3625': attribute type 3 has an invalid length. [ 759.824809][T16201] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3625'. [ 760.143001][T16210] device team0 left promiscuous mode [ 760.155267][T16210] device team_slave_0 left promiscuous mode [ 760.172728][T16210] device team_slave_1 left promiscuous mode [ 760.183857][T16210] device macvlan0 left promiscuous mode [ 760.193188][T16210] bridge0: port 3(team0) entered disabled state [ 760.796866][T16210] device bridge_slave_1 left promiscuous mode [ 760.803234][T16210] bridge0: port 2(bridge_slave_1) entered disabled state [ 760.825833][T16210] device bridge_slave_0 left promiscuous mode [ 760.832205][T16210] bridge0: port 1(bridge_slave_0) entered disabled state [ 761.059948][T16222] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x31 [ 761.518433][T16226] netlink: 188 bytes leftover after parsing attributes in process `syz.2.3632'. [ 761.663042][T16235] FAULT_INJECTION: forcing a failure. [ 761.663042][T16235] name failslab, interval 1, probability 0, space 0, times 0 [ 761.683437][T16235] CPU: 1 PID: 16235 Comm: syz.3.3635 Not tainted syzkaller #0 [ 761.690971][T16235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 761.701071][T16235] Call Trace: [ 761.704380][T16235] [ 761.707341][T16235] dump_stack_lvl+0x188/0x24e [ 761.712066][T16235] ? show_regs_print_info+0x12/0x12 [ 761.717329][T16235] ? load_image+0x400/0x400 [ 761.721890][T16235] ? __might_sleep+0xd0/0xd0 [ 761.726577][T16235] ? __lock_acquire+0x7d10/0x7d10 [ 761.731659][T16235] should_fail_ex+0x399/0x4d0 [ 761.736377][T16235] should_failslab+0x5/0x20 [ 761.740921][T16235] slab_pre_alloc_hook+0x59/0x310 [ 761.745997][T16235] ? apparmor_sk_alloc_security+0x74/0x100 [ 761.751870][T16235] __kmem_cache_alloc_node+0x4f/0x260 [ 761.757292][T16235] ? apparmor_sk_alloc_security+0x74/0x100 [ 761.763138][T16235] kmalloc_trace+0x26/0xe0 [ 761.767612][T16235] apparmor_sk_alloc_security+0x74/0x100 [ 761.773284][T16235] security_sk_alloc+0x6a/0xa0 [ 761.778090][T16235] sk_prot_alloc+0x101/0x210 [ 761.782713][T16235] ? sk_alloc+0x20/0x340 [ 761.786985][T16235] sk_alloc+0x36/0x340 [ 761.791088][T16235] ? bpf_ctx_init+0x163/0x1a0 [ 761.795888][T16235] ? bpf_prog_test_run_skb+0x26f/0x12a0 [ 761.801470][T16235] bpf_prog_test_run_skb+0x35e/0x12a0 [ 761.806928][T16235] ? __fget_files+0x28/0x4b0 [ 761.811673][T16235] ? __fget_files+0x43d/0x4b0 [ 761.816417][T16235] ? cpu_online+0xa0/0xa0 [ 761.820799][T16235] bpf_prog_test_run+0x31e/0x390 [ 761.825903][T16235] __sys_bpf+0x62b/0x780 [ 761.830192][T16235] ? bpf_link_show_fdinfo+0x380/0x380 [ 761.835743][T16235] ? lock_chain_count+0x20/0x20 [ 761.840658][T16235] __x64_sys_bpf+0x78/0x90 [ 761.845111][T16235] do_syscall_64+0x4c/0xa0 [ 761.849563][T16235] ? clear_bhb_loop+0x60/0xb0 [ 761.854276][T16235] ? clear_bhb_loop+0x60/0xb0 [ 761.858991][T16235] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 761.864924][T16235] RIP: 0033:0x7feeb8f9cdd9 [ 761.869821][T16235] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 761.889900][T16235] RSP: 002b:00007feeb9e15028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 761.898435][T16235] RAX: ffffffffffffffda RBX: 00007feeb9215fa0 RCX: 00007feeb8f9cdd9 [ 761.906488][T16235] RDX: 0000000000000050 RSI: 0000200000000100 RDI: 000000000000000a [ 761.914497][T16235] RBP: 00007feeb9e15090 R08: 0000000000000000 R09: 0000000000000000 [ 761.922510][T16235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 761.930549][T16235] R13: 00007feeb9216038 R14: 00007feeb9215fa0 R15: 00007ffd815ec4b8 [ 761.938571][T16235] [ 762.726506][T16242] netlink: 'syz.3.3637': attribute type 6 has an invalid length. [ 762.747457][T16242] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3637'. [ 763.065805][T16256] netlink: 'syz.2.3640': attribute type 3 has an invalid length. [ 763.370059][T16256] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3640'. [ 764.339556][T16276] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x31 [ 765.803495][T16304] FAULT_INJECTION: forcing a failure. [ 765.803495][T16304] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 765.855241][T16304] CPU: 0 PID: 16304 Comm: syz.3.3653 Not tainted syzkaller #0 [ 765.862794][T16304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 765.872991][T16304] Call Trace: [ 765.876312][T16304] [ 765.879285][T16304] dump_stack_lvl+0x188/0x24e [ 765.884009][T16304] ? show_regs_print_info+0x12/0x12 [ 765.889239][T16304] ? load_image+0x400/0x400 [ 765.893796][T16304] ? __lock_acquire+0x7d10/0x7d10 [ 765.898876][T16304] ? snprintf+0xe5/0x140 [ 765.903170][T16304] should_fail_ex+0x399/0x4d0 [ 765.907896][T16304] _copy_to_user+0x2c/0x130 [ 765.912453][T16304] simple_read_from_buffer+0xe3/0x150 [ 765.917907][T16304] proc_fail_nth_read+0x1a6/0x220 [ 765.922977][T16304] ? proc_fault_inject_write+0x310/0x310 [ 765.928743][T16304] ? fsnotify_perm+0x248/0x550 [ 765.933558][T16304] ? proc_fault_inject_write+0x310/0x310 [ 765.939231][T16304] vfs_read+0x2de/0xa00 [ 765.943447][T16304] ? kernel_read+0x1e0/0x1e0 [ 765.948089][T16304] ? __fget_files+0x28/0x4b0 [ 765.952725][T16304] ? __fget_files+0x28/0x4b0 [ 765.957360][T16304] ? __fget_files+0x43d/0x4b0 [ 765.962095][T16304] ? __fdget_pos+0x2ae/0x360 [ 765.966871][T16304] ? ksys_read+0x71/0x250 [ 765.971267][T16304] ksys_read+0x14c/0x250 [ 765.975624][T16304] ? vfs_write+0xa30/0xa30 [ 765.980149][T16304] ? lockdep_hardirqs_on+0x94/0x140 [ 765.985505][T16304] do_syscall_64+0x4c/0xa0 [ 765.989977][T16304] ? clear_bhb_loop+0x60/0xb0 [ 765.994699][T16304] ? clear_bhb_loop+0x60/0xb0 [ 765.999792][T16304] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 766.005819][T16304] RIP: 0033:0x7feeb8f5d60e [ 766.010277][T16304] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 766.030281][T16304] RSP: 002b:00007feeb9df3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 766.038839][T16304] RAX: ffffffffffffffda RBX: 00007feeb9df46c0 RCX: 00007feeb8f5d60e [ 766.046863][T16304] RDX: 000000000000000f RSI: 00007feeb9df40a0 RDI: 000000000000000a [ 766.054888][T16304] RBP: 00007feeb9df4090 R08: 0000000000000000 R09: 0000000000000000 [ 766.062912][T16304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 766.071276][T16304] R13: 00007feeb9216128 R14: 00007feeb9216090 R15: 00007ffd815ec4b8 [ 766.079320][T16304] [ 766.331196][T16313] netlink: 180 bytes leftover after parsing attributes in process `syz.1.3658'. [ 767.007367][T16329] netlink: 'syz.1.3665': attribute type 6 has an invalid length. [ 767.034531][T16329] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3665'. [ 768.137102][T16344] FAULT_INJECTION: forcing a failure. [ 768.137102][T16344] name failslab, interval 1, probability 0, space 0, times 0 [ 768.186793][T16344] CPU: 0 PID: 16344 Comm: syz.3.3670 Not tainted syzkaller #0 [ 768.194727][T16344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 768.204837][T16344] Call Trace: [ 768.208262][T16344] [ 768.211227][T16344] dump_stack_lvl+0x188/0x24e [ 768.215951][T16344] ? sctp_sendmsg+0x15b0/0x2940 [ 768.220864][T16344] ? ___sys_sendmsg+0x2a2/0x360 [ 768.225892][T16344] ? show_regs_print_info+0x12/0x12 [ 768.231148][T16344] ? load_image+0x400/0x400 [ 768.235684][T16344] should_fail_ex+0x399/0x4d0 [ 768.240401][T16344] should_failslab+0x5/0x20 [ 768.244925][T16344] slab_pre_alloc_hook+0x59/0x310 [ 768.249969][T16344] ? sctp_add_bind_addr+0x89/0x350 [ 768.255191][T16344] __kmem_cache_alloc_node+0x4f/0x260 [ 768.260584][T16344] ? sctp_add_bind_addr+0x89/0x350 [ 768.265720][T16344] kmalloc_trace+0x26/0xe0 [ 768.270201][T16344] sctp_add_bind_addr+0x89/0x350 [ 768.275209][T16344] sctp_copy_local_addr_list+0x311/0x4e0 [ 768.280963][T16344] ? sctp_copy_local_addr_list+0xa1/0x4e0 [ 768.286876][T16344] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 768.292968][T16344] ? sctp_v4_is_any+0x31/0x50 [ 768.297687][T16344] ? sctp_copy_one_addr+0x93/0x660 [ 768.302826][T16344] sctp_bind_addr_copy+0xaf/0x3c0 [ 768.307873][T16344] ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190 [ 768.314227][T16344] sctp_connect_new_asoc+0x2f5/0x6a0 [ 768.319532][T16344] ? __sctp_connect+0xd80/0xd80 [ 768.324393][T16344] ? __local_bh_enable_ip+0x136/0x1c0 [ 768.329778][T16344] ? _local_bh_enable+0xa0/0xa0 [ 768.334645][T16344] ? sctp_endpoint_lookup_assoc+0x77/0x260 [ 768.340466][T16344] ? sctp_endpoint_lookup_assoc+0x77/0x260 [ 768.346372][T16344] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 768.352019][T16344] ? security_sctp_bind_connect+0x85/0xb0 [ 768.357941][T16344] sctp_sendmsg+0x15b0/0x2940 [ 768.362647][T16344] ? aa_sk_perm+0x771/0x950 [ 768.367195][T16344] ? sctp_getsockopt+0x8a0/0x8a0 [ 768.372154][T16344] ? __might_fault+0xa6/0x120 [ 768.376854][T16344] ? aa_af_perm+0x340/0x340 [ 768.381394][T16344] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 768.387839][T16344] ? inet_sendmsg+0x78/0x2f0 [ 768.392439][T16344] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 768.397736][T16344] ? security_socket_sendmsg+0x7c/0xa0 [ 768.403218][T16344] ? inet_send_prepare+0x260/0x260 [ 768.408427][T16344] ____sys_sendmsg+0x5be/0x970 [ 768.413234][T16344] ? __sys_sendmsg_sock+0x30/0x30 [ 768.418285][T16344] ? __import_iovec+0x315/0x500 [ 768.423158][T16344] ? import_iovec+0x6f/0xa0 [ 768.427675][T16344] ___sys_sendmsg+0x2a2/0x360 [ 768.432381][T16344] ? __sys_sendmsg+0x290/0x290 [ 768.437182][T16344] ? __lock_acquire+0x7d10/0x7d10 [ 768.442244][T16344] __se_sys_sendmsg+0x1bb/0x2a0 [ 768.447115][T16344] ? __x64_sys_sendmsg+0x80/0x80 [ 768.452086][T16344] ? lockdep_hardirqs_on+0x94/0x140 [ 768.457396][T16344] do_syscall_64+0x4c/0xa0 [ 768.461834][T16344] ? clear_bhb_loop+0x60/0xb0 [ 768.466529][T16344] ? clear_bhb_loop+0x60/0xb0 [ 768.471223][T16344] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 768.477138][T16344] RIP: 0033:0x7feeb8f9cdd9 [ 768.481565][T16344] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 768.501188][T16344] RSP: 002b:00007feeb9e15028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 768.509622][T16344] RAX: ffffffffffffffda RBX: 00007feeb9215fa0 RCX: 00007feeb8f9cdd9 [ 768.517622][T16344] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000003 [ 768.525623][T16344] RBP: 00007feeb9e15090 R08: 0000000000000000 R09: 0000000000000000 [ 768.533652][T16344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 768.541656][T16344] R13: 00007feeb9216038 R14: 00007feeb9215fa0 R15: 00007ffd815ec4b8 [ 768.549668][T16344] [ 768.773882][T16353] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3672'. [ 768.837261][T16351] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3672'. [ 768.980795][T16355] FAULT_INJECTION: forcing a failure. [ 768.980795][T16355] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 769.016708][T16355] CPU: 1 PID: 16355 Comm: syz.2.3673 Not tainted syzkaller #0 [ 769.024353][T16355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 769.034458][T16355] Call Trace: [ 769.037780][T16355] [ 769.040759][T16355] dump_stack_lvl+0x188/0x24e [ 769.045578][T16355] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 769.052233][T16355] ? show_regs_print_info+0x12/0x12 [ 769.057586][T16355] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 769.063832][T16355] ? dump_stack+0x5/0x12 [ 769.068191][T16355] should_fail_ex+0x399/0x4d0 [ 769.072917][T16355] _copy_from_user+0x2c/0x170 [ 769.077634][T16355] ___sys_sendmsg+0x1c3/0x360 [ 769.082344][T16355] ? __sys_sendmsg+0x290/0x290 [ 769.087135][T16355] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 769.093173][T16355] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 769.099351][T16355] ? lockdep_hardirqs_on+0x94/0x140 [ 769.104584][T16355] ? __se_sys_sendmsg+0xf4/0x2a0 [ 769.109728][T16355] ? kasan_check_range+0x77/0x290 [ 769.114774][T16355] __se_sys_sendmsg+0x1bb/0x2a0 [ 769.119648][T16355] ? ct_nmi_exit+0x145/0x1c0 [ 769.124265][T16355] ? __x64_sys_sendmsg+0x80/0x80 [ 769.129275][T16355] ? lockdep_hardirqs_on+0x94/0x140 [ 769.134946][T16355] do_syscall_64+0x4c/0xa0 [ 769.139433][T16355] ? clear_bhb_loop+0x60/0xb0 [ 769.144133][T16355] ? clear_bhb_loop+0x60/0xb0 [ 769.148918][T16355] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 769.154845][T16355] RIP: 0033:0x7f61a2d9cdd9 [ 769.159277][T16355] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 769.178993][T16355] RSP: 002b:00007f61a3c5c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 769.187463][T16355] RAX: ffffffffffffffda RBX: 00007f61a3015fa0 RCX: 00007f61a2d9cdd9 [ 769.195448][T16355] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 769.203468][T16355] RBP: 00007f61a3c5c090 R08: 0000000000000000 R09: 0000000000000000 [ 769.211450][T16355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 769.219430][T16355] R13: 00007f61a3016038 R14: 00007f61a3015fa0 R15: 00007ffc7c23b1e8 [ 769.227470][T16355] [ 769.647231][T16370] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.3677'. [ 769.825756][T16370] netlink: 6955 bytes leftover after parsing attributes in process `syz.1.3677'. [ 769.858697][T16372] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.3678'. [ 769.882844][T16372] netlink: zone id is out of range [ 769.892225][T16372] netlink: zone id is out of range [ 769.911024][T16372] netlink: zone id is out of range [ 769.920345][T16372] netlink: zone id is out of range [ 769.936662][T16372] netlink: zone id is out of range [ 769.948430][T16372] netlink: zone id is out of range [ 769.960407][T16372] netlink: zone id is out of range [ 770.008073][T16372] netlink: zone id is out of range [ 770.020615][T16372] netlink: zone id is out of range [ 770.039781][T16372] netlink: zone id is out of range [ 770.796332][T16396] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3685'. [ 770.852906][T16396] device hsr_slave_0 left promiscuous mode [ 770.876869][T16396] device hsr_slave_1 left promiscuous mode [ 771.863786][T16419] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.3694'. [ 771.918009][T16419] netlink: 6955 bytes leftover after parsing attributes in process `syz.3.3694'. [ 772.291314][T16425] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.3698'. [ 772.775371][T16442] raw_sendmsg: syz.0.3704 forgot to set AF_INET. Fix it! [ 772.816153][T16442] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 773.476940][T16467] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.3712'. [ 774.237636][T16467] netlink: 6955 bytes leftover after parsing attributes in process `syz.2.3712'. [ 774.322624][T16469] FAULT_INJECTION: forcing a failure. [ 774.322624][T16469] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 774.350281][T16469] CPU: 0 PID: 16469 Comm: syz.4.3714 Not tainted syzkaller #0 [ 774.357877][T16469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 774.368258][T16469] Call Trace: [ 774.371693][T16469] [ 774.374680][T16469] dump_stack_lvl+0x188/0x24e [ 774.379614][T16469] ? show_regs_print_info+0x12/0x12 [ 774.384992][T16469] ? load_image+0x400/0x400 [ 774.389585][T16469] ? __lock_acquire+0x7d10/0x7d10 [ 774.394687][T16469] ? snprintf+0xe5/0x140 [ 774.399006][T16469] should_fail_ex+0x399/0x4d0 [ 774.403773][T16469] _copy_to_user+0x2c/0x130 [ 774.408366][T16469] simple_read_from_buffer+0xe3/0x150 [ 774.413820][T16469] proc_fail_nth_read+0x1a6/0x220 [ 774.418917][T16469] ? proc_fault_inject_write+0x310/0x310 [ 774.424633][T16469] ? fsnotify_perm+0x248/0x550 [ 774.429485][T16469] ? proc_fault_inject_write+0x310/0x310 [ 774.435206][T16469] vfs_read+0x2de/0xa00 [ 774.439466][T16469] ? kernel_read+0x1e0/0x1e0 [ 774.444146][T16469] ? __fget_files+0x28/0x4b0 [ 774.448787][T16469] ? __fget_files+0x28/0x4b0 [ 774.453503][T16469] ? __fget_files+0x43d/0x4b0 [ 774.458244][T16469] ? __fdget_pos+0x2ae/0x360 [ 774.462954][T16469] ? ksys_read+0x71/0x250 [ 774.467338][T16469] ksys_read+0x14c/0x250 [ 774.471687][T16469] ? vfs_write+0xa30/0xa30 [ 774.476207][T16469] ? lockdep_hardirqs_on+0x94/0x140 [ 774.481474][T16469] do_syscall_64+0x4c/0xa0 [ 774.485928][T16469] ? clear_bhb_loop+0x60/0xb0 [ 774.490657][T16469] ? clear_bhb_loop+0x60/0xb0 [ 774.495398][T16469] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 774.501332][T16469] RIP: 0033:0x7f6cb4b5d60e [ 774.505798][T16469] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 774.525524][T16469] RSP: 002b:00007f6cb5abefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 774.534163][T16469] RAX: ffffffffffffffda RBX: 00007f6cb5abf6c0 RCX: 00007f6cb4b5d60e [ 774.542352][T16469] RDX: 000000000000000f RSI: 00007f6cb5abf0a0 RDI: 000000000000000c [ 774.550407][T16469] RBP: 00007f6cb5abf090 R08: 0000000000000000 R09: 0000000000000000 [ 774.558523][T16469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 774.566553][T16469] R13: 00007f6cb4e16038 R14: 00007f6cb4e15fa0 R15: 00007ffcd0d7e708 [ 774.574625][T16469] [ 775.088236][T16477] netlink: 165869 bytes leftover after parsing attributes in process `syz.3.3715'. [ 775.115665][T16477] net_ratelimit: 31 callbacks suppressed [ 775.115681][T16477] netlink: zone id is out of range [ 775.142011][T16477] netlink: zone id is out of range [ 775.164319][T16477] netlink: zone id is out of range [ 775.197257][T16477] netlink: zone id is out of range [ 775.232770][T16477] netlink: zone id is out of range [ 775.248992][T16477] netlink: zone id is out of range [ 775.277942][T16477] netlink: zone id is out of range [ 775.291683][T16477] netlink: zone id is out of range [ 775.316070][T16477] netlink: zone id is out of range [ 775.353809][T16477] netlink: zone id is out of range [ 775.994684][T16504] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.3725'. [ 776.272122][T16519] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.3729'. [ 776.523480][T16519] netlink: 6955 bytes leftover after parsing attributes in process `syz.2.3729'. [ 776.566944][T16527] netlink: 'syz.0.3734': attribute type 39 has an invalid length. [ 777.201174][T16540] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.3736'. [ 777.589490][T16554] FAULT_INJECTION: forcing a failure. [ 777.589490][T16554] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 777.637940][T16554] CPU: 0 PID: 16554 Comm: syz.0.3744 Not tainted syzkaller #0 [ 777.645499][T16554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 777.655674][T16554] Call Trace: [ 777.658962][T16554] [ 777.661905][T16554] dump_stack_lvl+0x188/0x24e [ 777.666616][T16554] ? show_regs_print_info+0x12/0x12 [ 777.671832][T16554] ? load_image+0x400/0x400 [ 777.676502][T16554] ? __lock_acquire+0x7d10/0x7d10 [ 777.681546][T16554] ? snprintf+0xe5/0x140 [ 777.685807][T16554] should_fail_ex+0x399/0x4d0 [ 777.690509][T16554] _copy_to_user+0x2c/0x130 [ 777.695032][T16554] simple_read_from_buffer+0xe3/0x150 [ 777.700427][T16554] proc_fail_nth_read+0x1a6/0x220 [ 777.705477][T16554] ? proc_fault_inject_write+0x310/0x310 [ 777.711144][T16554] ? fsnotify_perm+0x248/0x550 [ 777.715929][T16554] ? proc_fault_inject_write+0x310/0x310 [ 777.721575][T16554] vfs_read+0x2de/0xa00 [ 777.725760][T16554] ? kernel_read+0x1e0/0x1e0 [ 777.730372][T16554] ? __fget_files+0x28/0x4b0 [ 777.734982][T16554] ? __fget_files+0x28/0x4b0 [ 777.739639][T16554] ? __fget_files+0x43d/0x4b0 [ 777.744400][T16554] ? __fdget_pos+0x2ae/0x360 [ 777.749021][T16554] ? ksys_read+0x71/0x250 [ 777.753408][T16554] ksys_read+0x14c/0x250 [ 777.757693][T16554] ? vfs_write+0xa30/0xa30 [ 777.762131][T16554] ? lockdep_hardirqs_on+0x94/0x140 [ 777.767356][T16554] do_syscall_64+0x4c/0xa0 [ 777.771876][T16554] ? clear_bhb_loop+0x60/0xb0 [ 777.776575][T16554] ? clear_bhb_loop+0x60/0xb0 [ 777.781270][T16554] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 777.787184][T16554] RIP: 0033:0x7f668875d60e [ 777.791626][T16554] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 777.811532][T16554] RSP: 002b:00007f66896d0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 777.819974][T16554] RAX: ffffffffffffffda RBX: 00007f66896d16c0 RCX: 00007f668875d60e [ 777.827971][T16554] RDX: 000000000000000f RSI: 00007f66896d10a0 RDI: 0000000000000004 [ 777.835979][T16554] RBP: 00007f66896d1090 R08: 0000000000000000 R09: 0000000000000000 [ 777.843976][T16554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 777.851989][T16554] R13: 00007f6688a16038 R14: 00007f6688a15fa0 R15: 00007fff78a8eba8 [ 777.859990][T16554] [ 777.959235][T16561] netlink: 'syz.1.3747': attribute type 11 has an invalid length. [ 777.984482][T16561] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3747'. [ 778.208467][T16569] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.3748'. [ 778.734992][T16576] ref_ctr_offset mismatch. inode: 0x39d offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 779.199908][T16569] netlink: 6955 bytes leftover after parsing attributes in process `syz.3.3748'. [ 779.211796][T16577] netlink: 14975 bytes leftover after parsing attributes in process `syz.0.3751'. [ 779.512660][T16589] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3755'. [ 779.698121][T16596] netlink: 'syz.0.3756': attribute type 2 has an invalid length. [ 779.832672][T16591] netlink: 'syz.0.3756': attribute type 10 has an invalid length. [ 779.859757][T16591] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 780.032528][T16591] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 780.344256][ T4284] Bluetooth: hci3: command 0x0406 tx timeout [ 780.577002][T16591] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 780.628414][T16614] FAULT_INJECTION: forcing a failure. [ 780.628414][T16614] name failslab, interval 1, probability 0, space 0, times 0 [ 780.641702][T16614] CPU: 1 PID: 16614 Comm: syz.1.3763 Not tainted syzkaller #0 [ 780.649386][T16614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 780.659576][T16614] Call Trace: [ 780.662890][T16614] [ 780.665852][T16614] dump_stack_lvl+0x188/0x24e [ 780.670590][T16614] ? show_regs_print_info+0x12/0x12 [ 780.675843][T16614] ? load_image+0x400/0x400 [ 780.680401][T16614] ? skb_network_protocol+0x51b/0x780 [ 780.685822][T16614] should_fail_ex+0x399/0x4d0 [ 780.690651][T16614] should_failslab+0x5/0x20 [ 780.695203][T16614] slab_pre_alloc_hook+0x59/0x310 [ 780.700292][T16614] kmem_cache_alloc+0x56/0x2f0 [ 780.705101][T16614] ? skb_clone+0x1e7/0x370 [ 780.709577][T16614] skb_clone+0x1e7/0x370 [ 780.713874][T16614] ? dev_queue_xmit_nit+0x20e/0xbb0 [ 780.719124][T16614] dev_queue_xmit_nit+0x249/0xbb0 [ 780.724203][T16614] ? dev_queue_xmit_nit+0x29/0xbb0 [ 780.729371][T16614] dev_hard_start_xmit+0x154/0x870 [ 780.734538][T16614] __dev_queue_xmit+0x1aa3/0x37c0 [ 780.739631][T16614] ? __dev_queue_xmit+0x26b/0x37c0 [ 780.744801][T16614] ? netdev_core_pick_tx+0x340/0x340 [ 780.750242][T16614] ? __copy_skb_header+0x3ba/0x4f0 [ 780.755402][T16614] ? memcpy+0x3c/0x60 [ 780.759413][T16614] ? __copy_skb_header+0x3ba/0x4f0 [ 780.764586][T16614] ? __skb_clone+0x480/0x790 [ 780.769210][T16614] ? skb_clone+0x21b/0x370 [ 780.773680][T16614] __netlink_deliver_tap+0x580/0x800 [ 780.779028][T16614] ? netlink_deliver_tap+0x2e/0x1b0 [ 780.784262][T16614] netlink_deliver_tap+0x19c/0x1b0 [ 780.789575][T16614] netlink_dump+0x832/0xd00 [ 780.794113][T16614] ? netlink_lookup+0x200/0x200 [ 780.798989][T16614] ? netlink_recvmsg+0x5e3/0xe00 [ 780.803946][T16614] ? kmem_cache_free+0xf7/0x290 [ 780.808812][T16614] netlink_recvmsg+0x68f/0xe00 [ 780.813802][T16614] ? netlink_sendmsg+0xbd0/0xbd0 [ 780.818793][T16614] ? aa_af_perm+0x340/0x340 [ 780.823334][T16614] ? __might_fault+0xa6/0x120 [ 780.828035][T16614] ? bpf_lsm_socket_recvmsg+0x5/0x10 [ 780.833345][T16614] ? security_socket_recvmsg+0x85/0xb0 [ 780.838830][T16614] ? netlink_sendmsg+0xbd0/0xbd0 [ 780.843878][T16614] ____sys_recvmsg+0x2cb/0x5e0 [ 780.848689][T16614] ? __sys_recvmsg_sock+0x40/0x40 [ 780.853754][T16614] ? import_iovec+0x6f/0xa0 [ 780.858296][T16614] ___sys_recvmsg+0x212/0x590 [ 780.862996][T16614] ? __sys_recvmsg+0x290/0x290 [ 780.867787][T16614] ? common_file_perm+0x171/0x1c0 [ 780.872837][T16614] ? __fget_files+0x43d/0x4b0 [ 780.877547][T16614] __x64_sys_recvmsg+0x205/0x2e0 [ 780.882509][T16614] ? ___sys_recvmsg+0x590/0x590 [ 780.887391][T16614] ? lockdep_hardirqs_on+0x94/0x140 [ 780.892609][T16614] do_syscall_64+0x4c/0xa0 [ 780.897046][T16614] ? clear_bhb_loop+0x60/0xb0 [ 780.901738][T16614] ? clear_bhb_loop+0x60/0xb0 [ 780.906436][T16614] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 780.912347][T16614] RIP: 0033:0x7fba8a39cdd9 [ 780.916782][T16614] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 780.936488][T16614] RSP: 002b:00007fba8b19f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 780.944947][T16614] RAX: ffffffffffffffda RBX: 00007fba8a616090 RCX: 00007fba8a39cdd9 [ 780.952951][T16614] RDX: 0000000000010100 RSI: 0000200000000080 RDI: 0000000000000003 [ 780.960932][T16614] RBP: 00007fba8b19f090 R08: 0000000000000000 R09: 0000000000000000 [ 780.968918][T16614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 780.976901][T16614] R13: 00007fba8a616128 R14: 00007fba8a616090 R15: 00007ffc062d0368 [ 780.984896][T16614] [ 781.943604][T16637] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3769'. [ 781.961307][T16637] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3769'. [ 782.352094][T16651] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.3772'. [ 782.529849][T16651] netlink: 6955 bytes leftover after parsing attributes in process `syz.1.3772'. [ 782.569872][T16657] netlink: 65023 bytes leftover after parsing attributes in process `syz.2.3775'. [ 798.720697][ T4285] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 798.733516][ T4285] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 798.747661][ T4285] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 798.756201][ T4285] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 798.764263][ T4285] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 798.771755][ T4285] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 799.532622][ T4284] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 799.551506][ T4284] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 799.560100][ T4284] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 799.568725][ T4284] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 799.577709][ T4284] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 799.585454][ T4284] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 800.283466][T16700] chnl_net:caif_netlink_parms(): no params data found [ 800.824242][T13251] Bluetooth: hci2: command 0x0409 tx timeout [ 801.733661][T16704] chnl_net:caif_netlink_parms(): no params data found [ 801.833913][ T4285] Bluetooth: hci6: command 0x0409 tx timeout [ 802.002990][T16717] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 802.011978][T16717] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 802.021146][T16717] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 802.032503][T16717] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 802.040409][T16717] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 802.048788][T16717] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 802.057260][T16717] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 802.065074][T16717] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 802.072291][T16717] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 802.083001][T16717] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 802.090483][T16717] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 802.097929][T16717] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 802.107881][T16717] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 802.115467][T16717] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 802.122813][T16717] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 802.131051][T16717] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 802.138329][T16717] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 802.146028][T16717] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 802.799655][T16700] bridge0: port 1(bridge_slave_0) entered blocking state [ 802.807492][T16700] bridge0: port 1(bridge_slave_0) entered disabled state [ 802.825847][T16700] device bridge_slave_0 entered promiscuous mode [ 802.904199][T16722] Bluetooth: hci2: command 0x041b tx timeout [ 802.980237][T16700] bridge0: port 2(bridge_slave_1) entered blocking state [ 802.988472][T16700] bridge0: port 2(bridge_slave_1) entered disabled state [ 803.005737][T16700] device bridge_slave_1 entered promiscuous mode [ 803.158790][T16704] bridge0: port 1(bridge_slave_0) entered blocking state [ 803.170987][T16704] bridge0: port 1(bridge_slave_0) entered disabled state [ 803.185699][T16704] device bridge_slave_0 entered promiscuous mode [ 803.221774][T16700] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 803.298654][T16704] bridge0: port 2(bridge_slave_1) entered blocking state [ 803.314217][T16704] bridge0: port 2(bridge_slave_1) entered disabled state [ 803.334236][T16704] device bridge_slave_1 entered promiscuous mode [ 803.348191][T16700] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 803.671129][T16704] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 803.714865][T16700] team0: Port device team_slave_0 added [ 803.733645][T16704] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 803.763609][T16700] team0: Port device team_slave_1 added [ 803.843041][T16704] team0: Port device team_slave_0 added [ 803.861789][T16700] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 803.872995][T16700] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 803.912801][T16700] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 803.937041][T16704] team0: Port device team_slave_1 added [ 804.024723][T16722] Bluetooth: hci6: command 0x041b tx timeout [ 804.184433][T16722] Bluetooth: hci9: command 0x0409 tx timeout [ 804.190992][T16722] Bluetooth: hci7: command 0x0409 tx timeout [ 804.264208][T16722] Bluetooth: hci8: command 0x0409 tx timeout [ 804.984215][T16722] Bluetooth: hci2: command 0x040f tx timeout [ 806.104607][T16722] Bluetooth: hci6: command 0x040f tx timeout [ 806.264296][T16722] Bluetooth: hci7: command 0x041b tx timeout [ 806.270391][T16722] Bluetooth: hci9: command 0x041b tx timeout [ 806.344249][T16722] Bluetooth: hci8: command 0x041b tx timeout [ 807.064272][T16722] Bluetooth: hci2: command 0x0419 tx timeout [ 808.184646][T16722] Bluetooth: hci6: command 0x0419 tx timeout [ 808.344492][T16722] Bluetooth: hci9: command 0x040f tx timeout [ 808.350593][T16722] Bluetooth: hci7: command 0x040f tx timeout [ 808.424245][T16722] Bluetooth: hci8: command 0x040f tx timeout [ 808.988955][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.995483][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.625020][T14602] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 0-.... } 2640 jiffies s: 54101 root: 0x1/. [ 809.650120][T14602] rcu: blocking rcu_node structures (internal RCU debug): [ 809.663198][T14602] Sending NMI from CPU 1 to CPUs 0: [ 809.668893][ C0] NMI backtrace for cpu 0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 809.668905][ C0] CPU: 0 PID: 16660 Comm: syz.4.3777 Not tainted syzkaller #0 [ 809.668922][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 809.668930][ C0] RIP: 0010:check_preemption_disabled+0x13/0x110 [ 809.668955][ C0] Code: 00 cc cc 00 00 cc cc 48 c7 c7 c0 12 df 8a 48 c7 c6 00 13 df 8a eb 00 55 41 57 41 56 53 48 83 ec 10 65 48 8b 04 25 28 00 00 00 <48> 89 44 24 08 65 8b 05 01 1f d4 75 65 8b 0d a2 74 d4 75 f7 c1 ff [ 809.668967][ C0] RSP: 0018:ffffc90000007628 EFLAGS: 00000086 [ 809.668982][ C0] RAX: f0c80184deb66f00 RBX: 0000000000000000 RCX: ffffffff8164c000 [ 809.668994][ C0] RDX: 0000000000000000 RSI: ffffffff8adf1300 RDI: ffffffff8adf12c0 [ 809.669004][ C0] RBP: ffffc90000007790 R08: ffffffff8e1ff3ef R09: 1ffffffff1c3fe7d [ 809.669015][ C0] R10: dffffc0000000000 R11: fffffbfff1c3fe7e R12: 0000000000120000 [ 809.669026][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff92000000edc [ 809.669036][ C0] FS: 00007f6cb5a9e6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 809.669050][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 809.669062][ C0] CR2: 00007f61a2fe8158 CR3: 000000004421f000 CR4: 00000000003506f0 [ 809.669077][ C0] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 809.669087][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 809.669097][ C0] Call Trace: [ 809.669103][ C0] [ 809.669118][ C0] rcu_is_watching+0x11/0xa0 [ 809.669141][ C0] lock_release+0xcf/0x920 [ 809.669162][ C0] ? trace_call_bpf+0xbf/0x6b0 [ 809.669183][ C0] ? __lock_acquire+0x7d10/0x7d10 [ 809.669206][ C0] ? trace_call_bpf+0xbf/0x6b0 [ 809.669224][ C0] trace_call_bpf+0x5ca/0x6b0 [ 809.669243][ C0] ? trace_call_bpf+0xbf/0x6b0 [ 809.669265][ C0] ? __bpf_trace_bpf_trace_printk+0x20/0x20 [ 809.669285][ C0] ? kvm_sched_clock_read+0x14/0x40 [ 809.669300][ C0] ? sched_clock_cpu+0x6e/0x260 [ 809.669318][ C0] perf_trace_run_bpf_submit+0x79/0x1c0 [ 809.669342][ C0] perf_trace_preemptirq_template+0x268/0x320 [ 809.669363][ C0] ? asm_sysvec_irq_work+0x16/0x20 [ 809.669382][ C0] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 809.669403][ C0] ? __irq_exit_rcu+0x147/0x230 [ 809.669417][ C0] ? irq_exit_rcu+0x20/0x20 [ 809.669432][ C0] ? asm_sysvec_irq_work+0x16/0x20 [ 809.669450][ C0] trace_irq_enable_rcuidle+0xd3/0x140 [ 809.669470][ C0] trace_hardirqs_on+0x24/0x40 [ 809.669487][ C0] asm_sysvec_irq_work+0x16/0x20 [ 809.669504][ C0] RIP: 0010:rcu_read_unlock_special+0x7f/0x510 [ 809.669519][ C0] Code: eb 03 48 b8 f1 f1 f1 f1 f8 f2 f2 f2 4a 89 04 2b 42 c7 44 2b 08 f8 f3 f3 f3 65 44 8b 35 d2 33 95 7e 41 f7 c6 00 00 f0 00 74 40 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 42 c7 44 2b 08 [ 809.669531][ C0] RSP: 0018:ffffc90000007ac0 EFLAGS: 00000206 [ 809.669543][ C0] RAX: f0c80184deb66f00 RBX: 1ffff92000000f60 RCX: f0c80184deb66f00 [ 809.669553][ C0] RDX: dffffc0000000000 RSI: ffffffff8a8c1120 RDI: ffffffff8adf1320 [ 809.669564][ C0] RBP: ffffc90000007bb0 R08: ffffffff90af9277 R09: 1ffffffff215f24e [ 809.669574][ C0] R10: dffffc0000000000 R11: fffffbfff215f24f R12: 0000000000000246 [ 809.669584][ C0] R13: dffffc0000000000 R14: ffff8880b8e3b900 R15: 0000000000000001 [ 809.669604][ C0] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 809.669624][ C0] ? __rcu_read_unlock+0xd0/0xd0 [ 809.669644][ C0] __rcu_read_unlock+0x78/0xd0 [ 809.669657][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x26/0x170 [ 809.669679][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 809.669695][ C0] ieee80211_iterate_active_interfaces_atomic+0x156/0x170 [ 809.669717][ C0] mac80211_hwsim_beacon+0xb7/0x1b0 [ 809.669740][ C0] __hrtimer_run_queues+0x54a/0xd50 [ 809.669760][ C0] ? hw_scan_work+0xf50/0xf50 [ 809.669784][ C0] ? hrtimer_interrupt+0x9c0/0x9c0 [ 809.669800][ C0] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 809.669821][ C0] hrtimer_run_softirq+0x183/0x2a0 [ 809.669840][ C0] handle_softirqs+0x2a1/0x930 [ 809.669857][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 809.669874][ C0] ? do_softirq+0x210/0x210 [ 809.669889][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 809.669905][ C0] __irq_exit_rcu+0x13b/0x230 [ 809.669919][ C0] ? irq_exit_rcu+0x20/0x20 [ 809.669938][ C0] irq_exit_rcu+0x5/0x20 [ 809.669950][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 809.669965][ C0] [ 809.669969][ C0] [ 809.669974][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 809.669992][ C0] RIP: 0010:kasan_check_range+0x1b2/0x290 [ 809.670012][ C0] Code: 01 f3 49 89 df 49 8d 5f 07 4d 85 ff 49 0f 49 df 48 83 e3 f8 49 29 df 74 0e 41 80 3b 00 75 69 49 ff c3 49 ff cf 75 f2 5b 41 5c <41> 5e 41 5f 5d c3 45 84 ff 0f 85 91 00 00 00 41 f7 c7 00 ff 00 00 [ 809.670024][ C0] RSP: 0018:ffffc9000384f8a0 EFLAGS: 00000256 [ 809.670035][ C0] RAX: 0000000000000001 RBX: 0000000000000010 RCX: ffffffff8a364085 [ 809.670045][ C0] RDX: 0000000000000001 RSI: 0000000000000010 RDI: ffffc9000384fa00 [ 809.670055][ C0] RBP: 0000000000000000 R08: ffffc9000384fa0f R09: 1ffff92000709f41 [ 809.670064][ C0] R10: dffffc0000000000 R11: fffff52000709f42 R12: ffffc9000384fa00 [ 809.670075][ C0] R13: 0000000000000000 R14: 1ffff92000709f40 R15: 0000000000000002 [ 809.670088][ C0] ? __schedule+0xb5/0x40e0 [ 809.670117][ C0] memset+0x1e/0x40 [ 809.670131][ C0] __schedule+0xb5/0x40e0 [ 809.670150][ C0] ? perf_trace_run_bpf_submit+0x124/0x1c0 [ 809.670174][ C0] ? mark_lock+0x94/0x320 [ 809.670195][ C0] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 809.670214][ C0] ? __sched_text_start+0x8/0x8 [ 809.670232][ C0] ? lock_chain_count+0x20/0x20 [ 809.670249][ C0] ? perf_trace_preemptirq_template+0xa8/0x320 [ 809.670270][ C0] ? preempt_schedule_irq+0xb0/0x160 [ 809.670290][ C0] preempt_schedule_irq+0xbb/0x160 [ 809.670310][ C0] ? preempt_schedule_notrace+0x120/0x120 [ 809.670330][ C0] ? rcu_is_watching+0x11/0xa0 [ 809.670351][ C0] ? rcu_irq_exit_check_preempt+0xdb/0x210 [ 809.670371][ C0] irqentry_exit+0x63/0x70 [ 809.670386][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 809.670404][ C0] RIP: 0010:lock_acquire+0x225/0x4a0 [ 809.670423][ C0] Code: f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 3d 04 f8 0f 85 f0 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 44 3d 00 00 00 00 00 43 c7 44 3d 08 00 00 00 00 65 48 8b 04 [ 809.670434][ C0] RSP: 0018:ffffc9000384fbe0 EFLAGS: 00000206 [ 809.670445][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: f0c80184deb66f00 [ 809.670455][ C0] RDX: 0000000000000000 RSI: ffffffff8a8c22a0 RDI: ffffffff8adf1320 [ 809.670465][ C0] RBP: ffffc9000384fcf0 R08: dffffc0000000000 R09: 1ffffffff215f24e [ 809.670475][ C0] R10: dffffc0000000000 R11: fffffbfff215f24f R12: 0000000000000000 [ 809.670485][ C0] R13: 1ffff92000709f88 R14: 0000000000000246 R15: dffffc0000000000 [ 809.670506][ C0] ? __might_sleep+0xd0/0xd0 [ 809.670520][ C0] ? read_lock_is_recursive+0x10/0x10 [ 809.670538][ C0] ? trace_call_bpf+0xbf/0x6b0 [ 809.670557][ C0] ? trace_call_bpf+0x5d6/0x6b0 [ 809.670577][ C0] ? perf_trace_run_bpf_submit+0x124/0x1c0 [ 809.670598][ C0] ? __might_fault+0xa6/0x120 [ 809.670613][ C0] __might_fault+0xc2/0x120 [ 809.670627][ C0] ? __might_fault+0xa6/0x120 [ 809.670643][ C0] perf_copy_attr+0x39/0x850 [ 809.670662][ C0] __se_sys_perf_event_open+0xf5/0x1ec0 [ 809.670680][ C0] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 809.670707][ C0] ? __sanitizer_cov_trace_pc+0x41/0x60 [ 809.670724][ C0] ? __x64_sys_perf_event_open+0x1c/0xc0 [ 809.670745][ C0] do_syscall_64+0x4c/0xa0 [ 809.670764][ C0] ? clear_bhb_loop+0x60/0xb0 [ 809.670781][ C0] ? clear_bhb_loop+0x60/0xb0 [ 809.670800][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 809.670817][ C0] RIP: 0033:0x7f6cb4b9cdd9 [ 809.670830][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 809.670841][ C0] RSP: 002b:00007f6cb5a9e028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 809.670856][ C0] RAX: ffffffffffffffda RBX: 00007f6cb4e16090 RCX: 00007f6cb4b9cdd9 [ 809.670867][ C0] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000480 [ 809.670877][ C0] RBP: 00007f6cb4c32d69 R08: 0000000000000000 R09: 0000000000000000 [ 809.670886][ C0] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 809.670896][ C0] R13: 00007f6cb4e16128 R14: 00007f6cb4e16090 R15: 00007ffcd0d7e708 [ 809.670913][ C0] [ 810.424397][T16722] Bluetooth: hci7: command 0x0419 tx timeout [ 810.497897][T16717] Bluetooth: hci9: command 0x0419 tx timeout [ 810.504131][T13251] Bluetooth: hci8: command 0x0419 tx timeout