last executing test programs: 2m31.360852487s ago: executing program 1 (id=3286): r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80350, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc020, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x1, &(0x7f0000000040)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], &(0x7f0000000200)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x3, 0xa, 0x8}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000380)=[0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000003c0)=[{0x2, 0x1, 0xf, 0x4}, {0x1, 0x5, 0x3, 0x5}, {0x0, 0x5, 0x2, 0x7}, {0x3, 0x2, 0x10, 0xb}, {0x3, 0x2, 0x4, 0xc}, {0x3, 0x4, 0xb, 0x3}, {0x4, 0x1, 0x7, 0x6}], 0x10, 0x7fffffff}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000600)={@fallback=r3, 0x35, 0x1, 0xff, &(0x7f0000000500)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000540)=[0x0, 0x0], &(0x7f0000000580)=[0x0], &(0x7f00000005c0)=[0x0, 0x0], 0x0}, 0x40) r6 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000680)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000640)={@fallback=r0, r4, 0x28, 0x2004, 0x0, @value=r6, @void, @void, @void, r5}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) r7 = socket$kcm(0xa, 0x2, 0x11) sendmsg$sock(r7, &(0x7f0000000400)={&(0x7f0000000240)=@in6={0xa, 0x4e20, 0xa, @empty, 0x2}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=[@txtime={{0x27}}], 0x18}, 0x14) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0), 0x48) ioctl$PERF_EVENT_IOC_RESET(r9, 0x2, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32=r8], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r10}, 0xc) write$cgroup_pid(r2, &(0x7f0000000000), 0xfdef) recvmsg$unix(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/79, 0xce80}], 0x300}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80350, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc020, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x1, &(0x7f0000000040)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], &(0x7f0000000200)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x3, 0xa, 0x8}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000380)=[0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000003c0)=[{0x2, 0x1, 0xf, 0x4}, {0x1, 0x5, 0x3, 0x5}, {0x0, 0x5, 0x2, 0x7}, {0x3, 0x2, 0x10, 0xb}, {0x3, 0x2, 0x4, 0xc}, {0x3, 0x4, 0xb, 0x3}, {0x4, 0x1, 0x7, 0x6}], 0x10, 0x7fffffff}, 0x94) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000600)={@fallback=r3, 0x35, 0x1, 0xff, &(0x7f0000000500)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000540)=[0x0, 0x0], &(0x7f0000000580)=[0x0], &(0x7f00000005c0)=[0x0, 0x0]}, 0x40) (async) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000680)=0xffffffffffffffff, 0x4) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000640)={@fallback=r0, r4, 0x28, 0x2004, 0x0, @value=r6, @void, @void, @void, r5}, 0x20) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) (async) socket$kcm(0xa, 0x2, 0x11) (async) sendmsg$sock(r7, &(0x7f0000000400)={&(0x7f0000000240)=@in6={0xa, 0x4e20, 0xa, @empty, 0x2}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=[@txtime={{0x27}}], 0x18}, 0x14) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0), 0x48) (async) ioctl$PERF_EVENT_IOC_RESET(r9, 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32=r8], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r10}, 0xc) (async) write$cgroup_pid(r2, &(0x7f0000000000), 0xfdef) (async) recvmsg$unix(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/79, 0xce80}], 0x300}, 0x0) (async) 2m31.188744603s ago: executing program 1 (id=3288): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) socket$kcm(0xa, 0x7, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r1, 0x0, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_ext={0x1c, 0xc, 0x0, 0x0, 0x9, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x5, 0xf, 0x5, 0x3}, 0x10, 0x24966, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xf53}, 0x94) r2 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000000000000000000000004000030000000000000848400000001"], 0x50}, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xe, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) socket$kcm(0x1e, 0x4, 0x0) 2m30.469016545s ago: executing program 1 (id=3293): r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x2000003a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x40000000, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x12, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x2, @perf_bp={0x0}, 0x0, 0x8, 0x0, 0x5, 0x0, 0x7fff, 0xfffd, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x880000000000, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x100) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000012020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300001a00000085000000c800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xeee}, 0x94) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, 0x0) r6 = openat$cgroup_procs(r4, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000380), 0x12) write$cgroup_int(r5, &(0x7f0000000040), 0x1) close(r2) bpf$ENABLE_STATS(0x20, &(0x7f00000000c0), 0x4) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r7, 0x10) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1) 2m30.217639003s ago: executing program 1 (id=3294): bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="02000000"], 0x50) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xfffffffffffffffe}, 0x200, 0x4000000000ac5d, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a80)={r2, 0x0, 0x0, 0x4a, 0x0, &(0x7f0000001980)=""/74, 0x2, 0x0, 0x0, 0x14, 0x0, &(0x7f0000001a40)="b3144677a65867acf6a8843a710bbe0e131744c3", 0x6}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000080654d970008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0xa, 0x2, 0x0) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8802}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 2m29.229343534s ago: executing program 1 (id=3296): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)}, 0x0) close(r1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = socket$kcm(0x2, 0x1, 0x84) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYRESHEX], 0x48) r5 = perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0xfffffffffffffffd, 0xf0) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000000b00)={0x0, 0xf22fff7f, &(0x7f0000000180)=[{&(0x7f0000000080)="31de76fb398bc62d058b8a96924594f5476a0824be53f7a5949f80614c42391e4b80412938c955d34d37eb96ba7849c3eb823bb36724bd6f6d0219cfe5c884afcd2bdea5acf9c877c03dcdbbb3e47417b6707c27d4c5c1db1924071f6b6f23c7d199c799c9b0c41101e625fcdb7bbfd12a3eeeef4540a5698f058aaf6a141e5d333929b92a7f64e925bf0ef424c3ef29fcd5fd4721c547fde6abe4d47048b64511693624b0d786711abe4a66e250fcbfe95ac9037e58f331b26b6ed0d08e5c73ba4c49", 0xc00e}], 0x9, &(0x7f00000001c0)=ANY=[@ANYBLOB="000026d4f47f000000000000010000000000000406000000140000000000000000000000020000000000000000000000140000000000000000000000020000000000000000000000110000000000000000000000010000000000000000000000110000000000000002000000010000001400000000000000000000000000000000000000070000008300000000960000206a77bdd1a004129054e7704a000000"], 0xf}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="12000000090000000800000002"], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r9, &(0x7f00000006c0), 0x0}, 0x20) socket$kcm(0x10, 0x2, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001140)={&(0x7f0000000540)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000e80)=[{&(0x7f0000000680)="e9468f2f72602421526e2dabdb3e28561ff18b99e708d0938389f7b7643f1c4083c37e3ab070355e627f986511986bc5cb1667fe8146eaf2acf0f567d9aee2a39063378af9567711275c06f3a910b3e5e8e3113e4e46cba3dcd7aee3935c29c8934eed89f12a95a259240dc9eed692cf7e880ba0b8c987cea350214f06084104542715138ff6aaa1a73e5c7fecf524ba9288f14273b9ee36d7e075f63332068d584b573682b07267c399e661be3957ab4ce75987ae46964f4597cb1556a13071bb4ea89666dfa0c60e665939c7aa780171dd5418", 0xd4}, {&(0x7f0000000840)="9dcbc12fea79b55d8df13ce336fc241a630157b3168b7b23f5b6e5c158af5e70cf98a86a52ab424a83497d47a727b31e74e4e595c9a5359ca42e6da608c1f76ec1dad6e59bb32a6ddbb0889106ddfdeadc216f95", 0x54}, {&(0x7f00000008c0)="cef8d532dcd2d6dbcced3ccb744a981162", 0x11}, {&(0x7f0000000900)="2df17b0527c48d41981d0e54404ef1c0e4032fb2aa6fade7b69b65a7707ef9c622f692e4e8ce176b23e7e1af5c199ad50a9e0f40138e72aa708c4bfaf655fe7df240f333e59dbf14c42b73e355303db3241aebf615064e4ab275ad9087023579ded2c909e6f7f5c5b7c43094b4d1c02b0be55879e219ad775d4b4bf249bd15bfab6ec6e6edb02edb1d77b596f8b6377c637c", 0x92}, {&(0x7f0000000280)='L', 0x1}, {&(0x7f0000000a00)="d2cc73e3ceede0560db50489056834a5f977c6a3089ee750b3637da6ab7878ef276eaafa8c8537599998058910bfd10029671ef13df5e873d67553f2307d6123de86b638f6c54416eb2933cd82044d6a12c59cce7b76a975eb67d8dc1660480883089d6a7eb36f69df4630a26d64c630316d8da6f1d85c5b4f86196ad85d27ab0df1fd28299481f0576453d3fddedb9292da8efe8f70845f09fe63786b580f228726fdefe0dc190fbb0e449e750d0b108225b7bfc16c667c7386dd2691", 0xbd}, {&(0x7f0000000b40)="9eda5586e694753e1d7063083c62553d5b86607570e647b72c1995acc3cfa4a94b21595d4720aeb4fc0fee1c3b3dbb404b22dec2c746206064384eb590014f2a2480f79a4cdd4d8ff3732395a88bde18a9c8f02d7556de22c9c7a43b60e5de2ad82c7d53fc54f61dd263d5e56a455fd9ae61c6564773debf07df2f", 0x7b}, {&(0x7f0000000c40)="8ae756ca9790ac8c9e7fd9b6161a0197d79bea89feb7a9d41a5d68d27dd198443438e4c72229c0b759e0710f813bdd6e135f94fe2c92216374c8183eb6ff3a15ce18dc73b711f06f20048202a58d4fbef3f051428ea256963b8ab14ed314add3c37745bc4769af18028b3d07e93f99daedc78998f5f5c513b8ebe596db32db418255a893878577549957f779ada2b4d227d189f21aa478a678796dcf1bd2b62419f1a303f6df6f36", 0xa8}], 0x8, &(0x7f0000001000)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r4, @ANYRES32=r2, @ANYBLOB="00000000100000000000000001000000010000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB="000000001c00000000000000010000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32, @ANYBLOB="0000000030001100080000000100000001000000", @ANYRES32=r6, @ANYRES32=r8, @ANYRES32=r1, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYBLOB="24000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00'], 0x108, 0x20048000}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000050000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x0, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x22) 2m28.941002124s ago: executing program 1 (id=3297): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000009"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0d00000006000000040000000100000000000000", @ANYRESDEC], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1}, &(0x7f0000000300), &(0x7f0000000340)=r0}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x891d, &(0x7f0000000000)={'veth1_to_bridge\x00', @random="0200c100d8f1"}) r3 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x10506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000801, 0x1}, 0x7402, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f0000000700)={&(0x7f0000000000)=@abs={0x1, 0x0, 0x4e23}, 0x6e, 0x0, 0x0, &(0x7f0000000100)=[@rights={{0x14, 0x1, 0x1, [r4]}}], 0x18, 0x14}, 0x4000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_clone(0x40204000, &(0x7f00000001c0)="f4aa7bb135d6c43d8778099e0b796e3bc47c686e76519e5b1f0a40a73ad0a47aa2b74db58b", 0x25, &(0x7f0000000280), &(0x7f0000000300), &(0x7f0000001100)="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") bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f00000002c0)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) r5 = perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f00000003c0)=ANY=[@ANYRES16=r3, @ANYRESDEC=r1], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0xc2) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r6, 0x0, 0x0}, 0x10) close(r5) 2m13.200228512s ago: executing program 32 (id=3297): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000009"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0d00000006000000040000000100000000000000", @ANYRESDEC], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1}, &(0x7f0000000300), &(0x7f0000000340)=r0}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x891d, &(0x7f0000000000)={'veth1_to_bridge\x00', @random="0200c100d8f1"}) r3 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x10506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000801, 0x1}, 0x7402, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f0000000700)={&(0x7f0000000000)=@abs={0x1, 0x0, 0x4e23}, 0x6e, 0x0, 0x0, &(0x7f0000000100)=[@rights={{0x14, 0x1, 0x1, [r4]}}], 0x18, 0x14}, 0x4000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_clone(0x40204000, &(0x7f00000001c0)="f4aa7bb135d6c43d8778099e0b796e3bc47c686e76519e5b1f0a40a73ad0a47aa2b74db58b", 0x25, &(0x7f0000000280), &(0x7f0000000300), &(0x7f0000001100)="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") bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f00000002c0)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) r5 = perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f00000003c0)=ANY=[@ANYRES16=r3, @ANYRESDEC=r1], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0xc2) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r6, 0x0, 0x0}, 0x10) close(r5) 8.757231093s ago: executing program 3 (id=4084): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0x4, &(0x7f00000005c0)=ANY=[@ANYRES16], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) (async) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r3) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') (async) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000640)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0xa) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r6 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r5, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000340)=r6, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000800)=r6, 0x4) (async) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)=r0}, 0x20) (async) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000180)={0xffffffffffffffff, 0x24, 0x10}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000200000007910000000000000c3000000400000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x4, [@func_proto={0x0, 0x8, 0x0, 0xd, 0x0, [{0xb, 0x5}, {0x1, 0x1}, {0xa, 0x1}, {0xe}, {0x5, 0x4}, {0xe, 0x2}, {0x9, 0x2}, {0xf, 0x2}]}]}, {0x0, [0x30, 0x61]}}, &(0x7f0000000380)=""/168, 0x68, 0xa8, 0x1, 0x9, 0x10000}, 0x28) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={r0, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000580)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0], 0x0, 0x84, &(0x7f0000000680)=[{}], 0x8, 0x10, &(0x7f00000006c0), &(0x7f0000000700), 0x8, 0x45, 0x8, 0x8, &(0x7f0000000740)}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000900)=@bpf_lsm={0x1d, 0x1d, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x111}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_fd={0x18, 0xb, 0x1, 0x0, r9}, @generic={0xb, 0x0, 0x9, 0x724, 0x66}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xb1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000002c0)='syzkaller\x00', 0xc, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x1b, r10, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540)={0x0, 0x3, 0x3d, 0x5}, 0x10, r11, 0x0, 0x3, 0x0, &(0x7f00000008c0)=[{0x2, 0x2, 0x1}, {0x0, 0x5, 0x5, 0x8}, {0x1, 0x2, 0x6, 0xc}], 0x10, 0x3}, 0x94) 8.446215353s ago: executing program 3 (id=4085): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0500000004000000080000000500000000000000", @ANYRES32, @ANYBLOB="000000000000000000195a7afe9600466a1409a7729d8d0f00000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socket$kcm(0x22, 0x0, 0x21) bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffff3e) r1 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000009c0)={&(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x3, 0x4, 0x0, {0xa, 0x4e24, 0x2000000, @mcast1, 0x80}}}, 0x80, 0x0, 0x0, &(0x7f0000000280)=ANY=[], 0x18}, 0x4800) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x300080c1) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x9, &(0x7f0000000800), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0xb, 0x1c, &(0x7f0000001400)=ANY=[@ANYBLOB="180000007bae0000000000000080000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000186100000b000000000000000500000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018420000ffffffff00000000000000001827004016d7aa0d207063a4fa450cfdabc649d5e8df666efc630e578d3ca7a765fd7e280997a3621a7f95f936548df4abca4f978ec45edadd5273031ec5089060fdb2611f59e87f663fc899c0754b43ad02d20c336dbf34b9090fe70ee0a767b95779af1af5582a4c9c864010c8c08d0c11c5110d50f541aed1ed5d1403c92d248fa67c51107a93275b1c339cffb8dd350d1ccd05ba3c9e8ec9a2def2ee113a7f04eb25c7a7688db214", @ANYRES32, @ANYBLOB="0000000006000000181e0000", @ANYRES32, @ANYBLOB="0000000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000d80)='syzkaller\x00', 0x5, 0xa5, &(0x7f0000000dc0)=""/165, 0x40f00, 0x18, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000f40)={0x0, 0x4}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000001040)=[0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x10001}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x18, 0x11, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0xfffffff4, 0x0, 0x0, 0x41000, 0x71, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000940)={0x3, 0xa, 0x4, 0x8}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000a80)=[{0x1, 0x1, 0x4, 0xc}, {0x1, 0x3, 0xb, 0x5}, {0x4, 0x1, 0x1}, {0x3, 0x2, 0xa, 0x5}, {0x0, 0xffffffff, 0x1000d, 0x9}, {0x5, 0x3, 0xe, 0x1}], 0x10, 0x8}, 0x94) sendmsg$inet(r1, &(0x7f0000000ac0)={&(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x10, &(0x7f00000008c0)=[{&(0x7f00000000c0)="574acadc3405b12b9237dae3fcf0b8e66be6bbf494473caa68abf51ed4c0dbb7302e4daedc7a77e799", 0x29}, {&(0x7f0000000200)="b9d74e80efa2f775033819a5defb65a7e44ee2b508dd60aeef40a1fdc3ed67bf42d725349bc85f1adf0c6625c40b07067239537458d7e58d1b502f35e62262cbef18dcdd01db992454d1c3300ddb85619912500f2945728682dc2e34580a6f15f67c487c434fc40656b99c3b1892bf1745b107299565c277b3300f2a359628ca05388d08399a82ce0d8dc532d7e7c5eb5723cb1830355fc682972e658a850af4f32413916187b8bbc4baacb93db1fafc99d6f4634888ef27f893868813566c325c5e061416be2080db8e598824961e23081978ab19566ed9e0985539fd32394a5418cc9d93", 0xe5}, {&(0x7f0000000300)="6fa6e3440b55e4c0a86f9c544a5ec8b87ae401272f6b7e212a1eac1ec64db67d6f8b62fc6bbdfff1f3bed3803f40006bbcf1f10eb2710bb629132a0611d88d2081d50a288093b7c348882c8878871c0eb9ddd4adbbc75b1e903fe5473faf581e0d424df29828d783a1197ac04e004d10f371a8d0d5036f53256e8ccce7ff02bb2e941e6f72fa4ca13ed0d6e810ed3d20ea6971be", 0x94}, {&(0x7f00000003c0)="ce9489efee5d01d089366efbc456861b9b8abb8f70703356e119bdbb4edc89", 0x1f}, {&(0x7f0000000540)="9fcc2514e1c48d57d296a5d642e8716ba5968f503ae8c193684a8d70a0f27984f79f8797f369063f00d3606903b300e76a6a531c933a5ba5f7dd7106a39e9431e09f52fdcb1cda4104cbdb7ccc12bea5785b9e5c9ab73fd939e11ff8", 0x5c}, {0x0}, {&(0x7f00000006c0)="06e741f29873cc79738b3f146ac74ca6e709104a274cd2a93be2dfce9ad577ad80f80f9d0c860f3ae4104cb8f37df8b19208e8fd48c6428febd965a4e2e6b8510ab46699914c0957abb2dceec82961eafb3108aef56a8668476a8606efb04657deedb321d9de14403f7a2fa3621f2fb8372b8b2035ec5a6a1d374f2b08f792cdb8387572a4ed9f6248e96b2ab558cc8ef6b7fcf9d0885d919e716f6a556087c005e2b80abc2515557cfa86f21ed1f3532b7880b9b3ac3387a60eab8ac3413283912a65ebe204956b0876f738d3131d9153e8a85dfc60e535387eec47ed7aab3ab845bc6391bf", 0xe6}, {&(0x7f0000000c80)="92ac3ebf14a41214889cc60e9e5c2f37d368f319b97156f84b8b07c0cbd863473f61156cd16133a3f7d94fa5097e82a387b5462543556d28bc1339cabb0496f1c40e684722f186665dccbd59d4e12dca24f694f7a2d616bed456db96719d1dc630045326f3e234c8447c5c376e94bc5c7d193fa8d6c8431c1990507720efb727a617406f16ddee6642475e72d1f9e41826d2a9a2950d3efe4cc11b7a7e37bce3a08c3313818f132d5874c8e6e2d744807b06a4ba063ebaea469584220db24cebe9710815409848f82baa78485af60ed6e9e5441363bfc36dd723180850a616", 0xdf}], 0x8, &(0x7f0000001380)=[@ip_ttl={{0x14, 0x0, 0x2, 0xefc6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010100, @remote}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @broadcast}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}], 0x70}, 0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001280)={r2, 0xe0, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000a00)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001380), 0x0, 0x0, 0x59, &(0x7f0000000bc0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000c00), &(0x7f0000000c40), 0x8, 0x7b, 0x8, 0x8, &(0x7f0000000ec0)}}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c000000030000000100000000000003"], 0x0, 0x37}, 0x28) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000012c0)=@bpf_lsm={0x1d, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="180000001a0d0000000000000800000018010000786c6c2500000000002020207b1af8ff00000000bf9d00000000000007010000f8ffffffb702000008000000b70300000500000085000000060000009500000000000004"], &(0x7f00000006c0)='syzkaller\x00', 0x10000, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000740)={0x4, 0x2, 0x8, 0x7fffffff}, 0x10, r3, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000600)={r0, 0x58, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1e000000f1fffffffd0000000600000000010000", @ANYRES32=r0, @ANYBLOB="0100000000000000000000200000000000000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="0300000002000000420000000700"/28], 0x50) socketpair$unix(0x1, 0x2, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) socketpair(0x1a, 0x3, 0x0, &(0x7f0000000200)) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021d080207000000040000a118000200e000000000000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843c8802033d0803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) bpf$BPF_PROG_TEST_RUN(0x16, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021d080207000000040000a118000200e000060100000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843c8802033d0803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) perf_event_open(&(0x7f0000000500)={0x3, 0x80, 0xa8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x644b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x4, @perf_config_ext={0x2f21, 0xd01}, 0x8000, 0x4, 0x43a1bd76, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xe, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x43cd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0xa1, &(0x7f0000001240)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 8.2183992s ago: executing program 2 (id=4087): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000004740)={&(0x7f0000000040)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000004640)=[@ip_retopts={{0x3c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0xc, 0x68, 0x3, 0x8, [{@local, 0x7}]}, @cipso={0x86, 0x1d, 0xffffffffffffffff, [{0x1, 0xc, "99ab0d55d29ab8107d50"}, {0x2, 0x3, '>'}, {0x6, 0x8, "ee6c2736c654"}]}]}}}], 0x40}, 0x40000d0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1c0000001e007f109e", 0x2a}, {&(0x7f0000000140)="78cafb73fc02010700000000ef02258f2e440ab8f9e6aaeb1ae2f6e8bcb5ee52dc06b6c9ad11cb5dbc249798093c5102a1bca0b6050000004f6e6b788b3219c233e60ddc36024a99a63e7238fe9f9b06f96137c8af12b6", 0x98}], 0x2}, 0x4000000) 7.726045486s ago: executing program 5 (id=4091): bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0200000004000000ff07000009"], 0x50) socket$kcm(0x10, 0x2, 0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a80)={r2, 0x0, 0xec, 0x4a, &(0x7f0000001880)="9f90406def1cefbd7bf46f1df34d8841fbdf94bb31d682edfccc375656edfe1122dc8cce254740266485fbcba87617b949c3e5f1b735daafe4a71ae361929082c409fc7980a9bc9e92b810c8a3187fd02a83a834d350d89f65bc372adbfa9b95cc2b869901e597e60a36eb7549c3e5b5c7b398fdf4ad30a9da64a3a3d3c0105ce68e5c4d49bc15380f525ba25aed5a7b605525114ac8fd59e34aef1fdc222608b62255f7357a37e5243cd3fceedd9ba30858a65b3e30956ac5cdbae8a9828c13f0e2b8a739692f74fce074a802f05d2c3504482f118eee4a4b95d4333da2a4a4f5ecca320f5c7eaba0b19d59", &(0x7f0000001980)=""/74, 0x2, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001a40), 0x6}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x8918, 0x0) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x5, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8802}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x38) socket$kcm(0x29, 0x2, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000001840), 0xc) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r5, 0x0, 0x20048000) 6.762152596s ago: executing program 5 (id=4094): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000900)=ANY=[@ANYBLOB="180200000200000000000000350e000085000000970000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b77504f7f7fbb0c7c52287298b03000000000000850000009b0000009500000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xd}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) socketpair(0xb, 0x1, 0x6, &(0x7f00000007c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r3, &(0x7f0000000180)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="27030202590400000000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada300c9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2c236205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0xfeb9}, {&(0x7f0000000280)="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", 0x1a1}, {&(0x7f0000000540)="6fe4dd9eeb85271de1b87ef9440284", 0xf}], 0x4}, 0x200400c4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r4 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40, 0x64b}, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xd, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="720ac4ff000000007110ca00000000009500000000000000"], &(0x7f0000000480)='GPL\x00'}, 0x80) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000140)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x6, 0xc, 0x0, 0x0, 0x0, 0x2000, 0x848, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x4, @perf_config_ext={0x4, 0x3}, 0x0, 0xc, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89a0, &(0x7f0000000080)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89a2, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89a3, &(0x7f0000000080)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.323217382s ago: executing program 2 (id=4096): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x500, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848390000005e140602002000000e000a00100000000a8000001294", 0x2e}], 0x1}, 0x0) 5.322279762s ago: executing program 3 (id=4098): r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={&(0x7f0000000100)=@l2tp={0x2, 0x0, @private=0xa01fdff}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000003280)=ANY=[@ANYBLOB="20000000000000008400000008000000941f6721e757691d02000000000000001800000000000000840000000700000062"], 0x38}, 0x41) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x81, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x2}, 0x50) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x4}, 0x50) r3 = socket$kcm(0x29, 0x5, 0x0) sendmsg$inet(r3, &(0x7f0000001240)={&(0x7f0000001040)={0x2, 0x4e21, @local}, 0x10, &(0x7f00000011c0)=[{&(0x7f0000001080)="eaeb2f645ede0c2053591afd04175f8fc44eb51bc21c50587fab8e49511e511dacb93e3d0880e20b7dd42b7fda48c28ae36021322f52e13217e06a5593934ec8caaa96109703bcc096a1ad16279bbfed24c76854a6a3c07beebadfd738368593f83022f5e57c37c86f5c43559892ee8967cee811df297666884820a3b9fce5cbd516944215027a33652e14dbaadaacc1887c4ec74dcf1855bc8907a85c59e53bb45c6015f6b7fd00de1b1405def6edc25ef312737716612e", 0xb8}, {&(0x7f0000001140)="745c2d74f54471ecf326cf74fbc75d017c3220a7531895084161b0539105cfa57494d7a29f462fdb946cab150fa112047d046082b21a64f40a65db6dbd5f97b9f00539c176f6b7c530df9e699b0c3a0b4eb5554322808c5fd1d6ce161a2c5d9c19732137435cea74c02ef7239d47ca0b1d26cb6b5c91677aa4e40b96", 0x7c}], 0x2, &(0x7f0000001200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}], 0x38}, 0x20000000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x8001, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x3}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={0xffffffffffffffff, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000680)=[0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x29, &(0x7f0000000700)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000780), &(0x7f00000007c0), 0x8, 0x9a, 0x8, 0x8, &(0x7f0000000800)}}, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c80)={0x11, 0x26, &(0x7f00000009c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@btf_id={0x18, 0x9, 0x3, 0x0, 0x1}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x4}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x4}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0xa}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x3}, @ldst={0x1, 0x1, 0x6, 0x4, 0x2, 0x40}, @ringbuf_query, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffff8}, @exit], {{}, {}, {0x85, 0x0, 0x0, 0x18c}}}, &(0x7f0000000b00)='GPL\x00', 0x9, 0x1c, &(0x7f0000000b40)=""/28, 0x40f00, 0x65, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x3, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000bc0)=[0xffffffffffffffff, 0x1, 0x1, r0, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000c00)=[{0x0, 0x1, 0x3}, {0x4, 0x4, 0x5, 0x5}, {0x0, 0x5, 0x6, 0x4}, {0x5, 0x4, 0x9, 0xb}, {0x5, 0x2, 0x4, 0x9}, {0x1, 0x1, 0xa}, {0x0, 0x4, 0x6, 0x4}, {0x5, 0x5, 0xe, 0xa}], 0x10, 0x8}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_subtree(r8, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000140)=ANY=[@ANYBLOB='\t '], 0x8) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xe, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x300}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r10}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x63}}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit]}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r11, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000dc0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000d40), &(0x7f0000000d80)='%+9llu \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000e80)={{0x1, 0xffffffffffffffff}, &(0x7f0000000e00), &(0x7f0000000e40)}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000f80)=@bpf_ext={0x1c, 0x2e, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@map_fd={0x18, 0x8}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0xfffffff7}, @map_val={0x18, 0x9, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x7}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @alu={0x4, 0x0, 0x3, 0x0, 0x7, 0xfffffffffffffff8, 0x1}, @call={0x85, 0x0, 0x0, 0x75}, @jmp={0x5, 0x1, 0x2, 0x8, 0x8, 0x10, 0xffffffffffffffe0}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000004c0)='syzkaller\x00', 0xfffff702, 0xf1, &(0x7f0000000500)=""/241, 0x32e7f3a3b88826f0, 0x1, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000980)={0x4, 0x7, 0x100, 0x60d}, 0x10, 0x647c, r7, 0x6, &(0x7f0000000ec0)=[r10, r11, r12, r13], &(0x7f0000000f00)=[{0x1, 0x2, 0xa, 0x3}, {0x3, 0x5, 0x6, 0x3}, {0x3, 0x3, 0x8, 0x628f08fa415d811f}, {0x4, 0x2, 0xd, 0x1}, {0x3, 0x2, 0xc, 0x5}, {0x5, 0x4, 0x9, 0xa}], 0x10, 0x6}, 0x94) 5.195922006s ago: executing program 5 (id=4100): socket$kcm(0x11, 0x3, 0x300) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x0) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd}, 0x10c002, 0xac59, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa6820000}, 0xfff5) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa88"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040033, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa87d}, 0x48) 4.997245722s ago: executing program 3 (id=4101): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000039c0)}, 0x40089) recvmsg$unix(r0, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r3 = socket$kcm(0xa, 0x2, 0x88) r4 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r4, &(0x7f0000001140)={&(0x7f0000000140)={0x2, 0xffff, @dev}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000100)="1f7a149fc15afde5b3403f50018bf3a8", 0x10}], 0x1}, 0x20040000) setsockopt$sock_attach_bpf(r3, 0x1, 0x41, &(0x7f0000000040)=r2, 0x4) sendmsg$kcm(r3, &(0x7f0000000580)={&(0x7f00000001c0)=@in6={0xa, 0x4e21, 0x4, @mcast2, 0x9}, 0x80, 0x0}, 0x40440c0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{}], 0x1, 0x0, 0x0, 0x7400}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x8000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/35, 0x23}, 0x40012000) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0xe, 0x4, &(0x7f0000000300)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r5, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280), &(0x7f00000002c0), 0x0, 0xda, &(0x7f0000000340)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0x57, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="01000000010000004000000040"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000840), &(0x7f00000003c0), 0x1003, r6}, 0x38) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x3, [@func={0x4, 0x0, 0x0, 0xc, 0x5}, @float={0x3, 0x0, 0x0, 0x10, 0x10}, @int={0x8, 0x0, 0x0, 0x1, 0x0, 0x40, 0x0, 0x60, 0x5}, @decl_tag={0x8, 0x0, 0x0, 0x11, 0x3, 0x8}, @volatile={0xe, 0x0, 0x0, 0x9, 0x1}]}, {0x0, [0x61]}}, &(0x7f0000000000)=""/117, 0x5f, 0x75, 0x1, 0xdb2a}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0xf73, 0x0, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="181100", @ANYRES32, @ANYBLOB="0000000000000000b702000010000000850000008600000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0500000005000000fd0900008500000041000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000180", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000900)="70cf4c9baf6007dd25e0206dc06a6b027574914e055ed82e", 0x802, r7}, 0x38) 4.997044782s ago: executing program 2 (id=4102): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0}, 0x94) (async) r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x1}, 0x40, 0x0, 0x0, 0x5, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0xfffffffffffffdf3}, 0x94) (async) r2 = socket$kcm(0x2b, 0x1, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) (async) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x6, 0x13, &(0x7f0000000200)=r5, 0x4) (async) write$cgroup_subtree(r5, 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x2d, 0x0, 0x0) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)='/proc/net/\x00\x00t4/c+\x0fG\xf9aK\fX\a0\x04\x00\x00\x82q\xee'}, 0x30) (async) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r6, &(0x7f00000002c0)='io.stat\x00', 0x275a, 0x0) (async) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000000)) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000380)="e0a2363b4438a55d1a5e47b8bffc", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) bpf$LINK_DETACH(0x22, &(0x7f0000000080)=r5, 0x4) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r7) (async) syz_clone(0x20102400, 0x0, 0x0, 0x0, 0x0, 0x0) 4.495851768s ago: executing program 2 (id=4105): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x108282, 0xac5d, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890b, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa6820000}, 0xfff5) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa88"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.current\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000001540)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00'}, 0x90) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r2, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000140)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', r3}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000840)={{r4}, &(0x7f00000000c0), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x16, 0x12, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@alu={0x7, 0x0, 0xa, 0xb, 0x7, 0xc}, @cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffff8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000300)='GPL\x00', 0x5, 0x4d, &(0x7f00000003c0)=""/77, 0x41100, 0x22, '\x00', r3, @fallback=0x13, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000440)={0x3, 0x9, 0x9, 0x1000}, 0x10, 0x0, r0, 0x8, &(0x7f0000000540)=[r1, r4, r1], &(0x7f0000000580)=[{0x4, 0x1, 0x1, 0x1}, {0x2, 0x1, 0x10, 0x2}, {0x5, 0x4, 0x4, 0xb}, {0x4, 0x1, 0x10, 0x3}, {0x2, 0x3, 0xa, 0x6}, {0x3, 0x5, 0x3, 0x2}, {0x0, 0x3, 0x2, 0x8}, {0x3, 0x1, 0x3, 0x2}], 0x10, 0xff}, 0x94) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r5) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110e22fff6) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0xfffffffc}]}) ioctl$TUNGETVNETLE(r5, 0x40107446, &(0x7f0000000180)) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r7, 0x4004743d, 0x110e22fff6) write$cgroup_type(r7, &(0x7f0000000280), 0x9) 4.495519938s ago: executing program 3 (id=4106): socket$kcm(0x15, 0x5, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8}, 0x94) socket$kcm(0x10, 0x2, 0x2) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x2, 0x20000}, 0x102065, 0x0, 0x0, 0x3, 0x7, 0x1, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x4e25, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, 0x0, 0x48}, 0x0) r0 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x404a) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000001680)=""/4096, 0x1000}], 0x1, &(0x7f0000000080)=""/173, 0xad}, 0x20) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x15, 0xf, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x8}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x6, 0x0, 0xb, 0xa}, {0xf}}, [], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, 0x0, 0x3, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) close(r1) socket$kcm(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000009700000005000000850000005000000095"], 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000002b80)={r2}, 0xc) ioctl$SIOCSIFHWADDR(r1, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)="1800000069006bcd8e3fe3bb", 0xc}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f00000002c0)={'syzkaller0\x00', @link_local}) 3.237796867s ago: executing program 5 (id=4107): bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x7, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x800000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x21}, 0x50) 3.054169553s ago: executing program 5 (id=4108): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0500000004000000080000000500000000000000", @ANYRES32, @ANYBLOB="000000000000000000195a7afe9600466a1409a7729d8d0f00000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socket$kcm(0x22, 0x0, 0x21) bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffff3e) r1 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000009c0)={&(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x3, 0x4, 0x0, {0xa, 0x4e24, 0x2000000, @mcast1, 0x80}}}, 0x80, 0x0, 0x0, &(0x7f0000000280)=ANY=[], 0x18}, 0x4800) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x300080c1) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x9, &(0x7f0000000800), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0xb, 0x1c, &(0x7f0000001400)=ANY=[@ANYBLOB="180000007bae0000000000000080000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000186100000b000000000000000500000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018420000ffffffff00000000000000001827004016d7aa0d207063a4fa450cfdabc649d5e8df666efc630e578d3ca7a765fd7e280997a3621a7f95f936548df4abca4f978ec45edadd5273031ec5089060fdb2611f59e87f663fc899c0754b43ad02d20c336dbf34b9090fe70ee0a767b95779af1af5582a4c9c864010c8c08d0c11c5110d50f541aed1ed5d1403c92d248fa67c51107a93275b1c339cffb8dd350d1ccd05ba3c9e8ec9a2def2ee113a7f04eb25c7a7688db214", @ANYRES32, @ANYBLOB="0000000006000000181e0000", @ANYRES32, @ANYBLOB="0000000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000d80)='syzkaller\x00', 0x5, 0xa5, &(0x7f0000000dc0)=""/165, 0x40f00, 0x18, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000f40)={0x0, 0x4}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000001040)=[0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x10001}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x18, 0x11, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0xfffffff4, 0x0, 0x0, 0x41000, 0x71, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000940)={0x3, 0xa, 0x4, 0x8}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000a80)=[{0x1, 0x1, 0x4, 0xc}, {0x1, 0x3, 0xb, 0x5}, {0x4, 0x1, 0x1}, {0x3, 0x2, 0xa, 0x5}, {0x0, 0xffffffff, 0x1000d, 0x9}, {0x5, 0x3, 0xe, 0x1}], 0x10, 0x8}, 0x94) sendmsg$inet(r1, &(0x7f0000000ac0)={&(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x10, &(0x7f00000008c0)=[{&(0x7f00000000c0)="574acadc3405b12b9237dae3fcf0b8e66be6bbf494473caa68abf51ed4c0dbb7302e4daedc7a77e799", 0x29}, {&(0x7f0000000200)="b9d74e80efa2f775033819a5defb65a7e44ee2b508dd60aeef40a1fdc3ed67bf42d725349bc85f1adf0c6625c40b07067239537458d7e58d1b502f35e62262cbef18dcdd01db992454d1c3300ddb85619912500f2945728682dc2e34580a6f15f67c487c434fc40656b99c3b1892bf1745b107299565c277b3300f2a359628ca05388d08399a82ce0d8dc532d7e7c5eb5723cb1830355fc682972e658a850af4f32413916187b8bbc4baacb93db1fafc99d6f4634888ef27f893868813566c325c5e061416be2080db8e598824961e23081978ab19566ed9e0985539fd32394a5418cc9d93", 0xe5}, {&(0x7f0000000300)="6fa6e3440b55e4c0a86f9c544a5ec8b87ae401272f6b7e212a1eac1ec64db67d6f8b62fc6bbdfff1f3bed3803f40006bbcf1f10eb2710bb629132a0611d88d2081d50a288093b7c348882c8878871c0eb9ddd4adbbc75b1e903fe5473faf581e0d424df29828d783a1197ac04e004d10f371a8d0d5036f53256e8ccce7ff02bb2e941e6f72fa4ca13ed0d6e810ed3d20ea6971be", 0x94}, {&(0x7f00000003c0)="ce9489efee5d01d089366efbc456861b9b8abb8f70703356e119bdbb4edc89", 0x1f}, {&(0x7f0000000540)="9fcc2514e1c48d57d296a5d642e8716ba5968f503ae8c193684a8d70a0f27984f79f8797f369063f00d3606903b300e76a6a531c933a5ba5f7dd7106a39e9431e09f52fdcb1cda4104cbdb7ccc12bea5785b9e5c9ab73fd939e11ff8", 0x5c}, {0x0}, {&(0x7f00000006c0)="06e741f29873cc79738b3f146ac74ca6e709104a274cd2a93be2dfce9ad577ad80f80f9d0c860f3ae4104cb8f37df8b19208e8fd48c6428febd965a4e2e6b8510ab46699914c0957abb2dceec82961eafb3108aef56a8668476a8606efb04657deedb321d9de14403f7a2fa3621f2fb8372b8b2035ec5a6a1d374f2b08f792cdb8387572a4ed9f6248e96b2ab558cc8ef6b7fcf9d0885d919e716f6a556087c005e2b80abc2515557cfa86f21ed1f3532b7880b9b3ac3387a60eab8ac3413283912a65ebe204956b0876f738d3131d9153e8a85dfc60e535387eec47ed7aab3ab845bc6391bf", 0xe6}, {&(0x7f0000000c80)="92ac3ebf14a41214889cc60e9e5c2f37d368f319b97156f84b8b07c0cbd863473f61156cd16133a3f7d94fa5097e82a387b5462543556d28bc1339cabb0496f1c40e684722f186665dccbd59d4e12dca24f694f7a2d616bed456db96719d1dc630045326f3e234c8447c5c376e94bc5c7d193fa8d6c8431c1990507720efb727a617406f16ddee6642475e72d1f9e41826d2a9a2950d3efe4cc11b7a7e37bce3a08c3313818f132d5874c8e6e2d744807b06a4ba063ebaea469584220db24cebe9710815409848f82baa78485af60ed6e9e5441363bfc36dd723180850a616", 0xdf}], 0x8, &(0x7f0000001380)=[@ip_ttl={{0x14, 0x0, 0x2, 0xefc6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010100, @remote}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @broadcast}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}], 0x70}, 0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001280)={r2, 0xe0, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000a00)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001380), 0x0, 0x0, 0x59, &(0x7f0000000bc0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000c00), &(0x7f0000000c40), 0x8, 0x7b, 0x8, 0x8, &(0x7f0000000ec0)}}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c000000030000000100000000000003"], 0x0, 0x37}, 0x28) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000012c0)=@bpf_lsm={0x1d, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="180000001a0d0000000000000800000018010000786c6c2500000000002020207b1af8ff00000000bf9d00000000000007010000f8ffffffb702000008000000b70300000500000085000000060000009500000000000004"], &(0x7f00000006c0)='syzkaller\x00', 0x10000, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000740)={0x4, 0x2, 0x8, 0x7fffffff}, 0x10, r3, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000600)={r0, 0x58, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1e000000f1fffffffd0000000600000000010000", @ANYRES32=r0, @ANYBLOB="0100000000000000000000200000000000000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="0300000002000000420000000700"/28], 0x50) socketpair$unix(0x1, 0x2, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) socketpair(0x1a, 0x3, 0x0, &(0x7f0000000200)) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021d080207000000040000a118000200e000000000000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843c8802033d0803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) bpf$BPF_PROG_TEST_RUN(0x16, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021d080207000000040000a118000200e000060100000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843c8802033d0803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) perf_event_open(&(0x7f0000000500)={0x3, 0x80, 0xa8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x644b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x4, @perf_config_ext={0x2f21, 0xd01}, 0x8000, 0x4, 0x43a1bd76, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xe, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x43cd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0xa1, &(0x7f0000001240)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 3.010902285s ago: executing program 4 (id=4109): socket$kcm(0xa, 0x6, 0x0) (async) r0 = socket$kcm(0xa, 0x6, 0x0) recvmsg$kcm(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1b, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x7d, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x1d}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x7d, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x1d}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x0, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020030000b02d25a806f8c2d94f90224fc602f1a04000a740100073582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020030000b02d25a806f8c2d94f90224fc602f1a04000a740100073582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000540), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x5) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x9, 0x8}, 0x50) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x9, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1d}}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1d}}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="5a6e41dea43e63a3f70cff11c72b", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0x1}, 0x201, 0x0, 0xc2ba, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0xfffffff7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) 2.979099076s ago: executing program 2 (id=4110): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000900)=ANY=[@ANYBLOB="180200000200000000000000350e000085000000970000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b77504f7f7fbb0c7c52287298b03000000000000850000009b0000009500000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xd}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) socketpair(0xb, 0x1, 0x6, &(0x7f00000007c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r3, &(0x7f0000000180)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="27030202590400000000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada300c9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2c236205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0xfeb9}, {&(0x7f0000000280)="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", 0x1a1}, {&(0x7f0000000540)="6fe4dd9eeb85271de1b87ef9440284", 0xf}], 0x4}, 0x200400c4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r4 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40, 0x64b}, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xd, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="720ac4ff000000007110ca00000000009500000000000000"], &(0x7f0000000480)='GPL\x00'}, 0x80) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x6, 0xc, 0x0, 0x0, 0x0, 0x2000, 0x848, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x4, @perf_config_ext={0x4, 0x3}, 0x0, 0xc, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89a0, &(0x7f0000000080)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89a2, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89a3, &(0x7f0000000080)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.717158844s ago: executing program 0 (id=4112): r0 = socket$kcm(0x21, 0x2, 0xa) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41000, 0x53, '\x00', 0x0, @fallback=0x36}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x10c002, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8982, &(0x7f0000000080)) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, &(0x7f0000002800)=[{&(0x7f0000000c00)="b107c09a5026de51ce3e8640af1a8b2d1e67f16405c3458fe41dc04ef234718d683aa3a998fa99431a9c7c6d7505b0cec633f763303666604cbb6aa4c0f995a9454dc81b079dc93b0162ac3d1a8a1b72ce18d493594b3b24bad58801007a7b1d8ab9b50c5dbef8311b2502a124913259abadf354fea31d1ce0fed5c7ac577690164d1a72748723d3eb92e3e73e3a2b7cdfaa442f9e9f8e1a711d5b988215f0f80a2eeade5a078256a41973b0b029278c20a2818628dc256a0742896c3def6e825fdf64fd33d5f584ca908c272dc04d0693decdad028feec7f76221378c185027e8695c9b07506ed46d4f8bb90883c08e85e058", 0xf3}, {&(0x7f0000001680)="fae0835ee82c20abb86f7c287ffb04a52a0b2339a4efc8216bada6fb7f4385ead471969bdf9b82994c10898db8b0fd9a6068b87f4547eff53d6cb7b37534e44d27c79042f5c405c0ff3eaf643001000000000000008263d71ee0e5b2cb31215ded6df9c76d150aa52a4eecb94fe48e79205c96a0aab13eaa4681860576d2e32f6873b200d669e65d56bd8a4703cbea6b8c610ec158fe5f8683f7", 0x9a}, {&(0x7f00000015c0)="6b75b597d05d", 0x6}, {&(0x7f0000001740)="3f013c9ef434ca4df0854ba1c14f7db8ccda5e87715ffd1ead9c4d9a2306168b07d3c6763a3ceabf6dfae235f3d783ddc8a7bbd796b345df843b5f0a623ab36b3123dfcd05bf4a6e3f35d859ffc0b699be4052995533be91880029387cc3e15b2d9bf3513e617572d965ba8f665eedcbdaad53d04cddeed78a3904956c5dc95f47132090648f98558d14a4850ac4b92e1b41a06dee6198c74c72607a032c3c7ef5abd0ba4a7f9f5dfebd75457b2ec358e951ade2375ad6524eb4263d6ef72e05901da983aac2b31a5e2631e39301a6dd04c128aabcea9134ec99685df1068506541f1265c77c85300497abfebce6ed768d9922ba3699dc6cc1863c0aa9321170b9e63a74986c1996d0fa1a5886e7023836ddbe64bea33edfe6fc1cb64784da18c2d4930eb481930b9298b57c7939189df401aed6a586f0103fccf70f92a53666d5afd3dd0b12273e5c1f2ddee89ed9a280c10df8e55ed24dcf9d631b693cd38006da4629a6b4a599de94a5b8ba6bccffdaa9d3fe0970623c118ba7e811d534915e4c63fa40df1e5a37ad9e5827ff65b2e4d8480a3f66576a3a52c0c80606098c0cb0b203f20d4f7b614652e4d8eb595d29ad1a4ce2c97aa30328c9987e1f1d8b7954ff54ddb69d5c3d2225bdd84e93b19edc2d33116373b0b5be8eea62d84896d2412edf5d321f75811360f89fe6ca8ac6545ec1c9f86ab285d1b5ba00c269514dab7a076c01cbfecaaff336d116481b16e434262de851a70ff056b1f9319840e27d5f446a3476210f4e70ceb71eeec17619911d56b74d7e761ff9c43dd237772377f888bfad215f3ee19eeeb87564f77241258874dd70bdd976305092426d18a3bc60022cb0acc2d21b3e246ae7f49f5b6461b888a3d353362c2ec9bed1f7d4d3a0200e3af42fcf36f4c09bc095b3fd391a23faad86bfa29696b80093da6a97d6c4a54eca89d4979f12acbf89bca0c8cc5f490737b09fd77b8b7fcfa7b94787f81cff59ae583b5309bdb82ff76ceaf739cd254b32cc8e289541b8921aa2aedac4bf6c91c2aab801c459", 0x2ea}], 0x4, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x10}, @multicast1}}}, @ip_retopts={{0x34, 0x0, 0x7, {[@noop, @noop, @rr={0x7, 0x13, 0x22, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @rand_addr, @dev]}, @generic={0x0, 0xc, "3a047e2aae56e4b9eab8"}]}}}], 0x58}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x10002) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000004a40)={0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000003840)=""/4096, 0x1000}], 0x1}, 0x10002) socket$kcm(0xa, 0x6, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r1, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdir(0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb0100180000000000000028000000282000000a000000020000000000000102000000080000010800000001000084090000000400000001000000010000200061615f5f0000305f"], &(0x7f00000000c0)=""/138, 0x4a, 0x8a, 0x1}, 0x28) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="051a000000000000711142000000000085100000020000008500020005000000950000009d1f0b0f4a9344000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r2, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000001b40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x47, 0x0}}, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0xa, 0x0, @empty}}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000010010000010070e725f5bde5292e6e0000dc0000ee40258c35"], 0x18}, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x16, 0x2, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801, 0x0, @perf_bp={0x0, 0x6}, 0x101c93, 0xca, 0x0, 0x3, 0x1000, 0x0, 0x0, 0x0, 0x20008}, 0x0, 0x1000000, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) socket$kcm(0x10, 0x2, 0x10) 2.679347226s ago: executing program 4 (id=4113): r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r1) socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) close(0x3) socket$kcm(0xf, 0x3, 0x2) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x33fe0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x9fd, 0x84, 0x1}, 0x48) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x2, 0x922000000001, 0x106) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x1}, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_config_ext={0x8, 0x5}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x2, 0x1000000000000000, 0x0) sendmsg$inet(r3, &(0x7f0000000b40)={&(0x7f0000000200)={0x2, 0x4c20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xf}, @loopback}}}], 0x20}, 0xe900) write$cgroup_subtree(r3, &(0x7f00000001c0)=ANY=[], 0xfe33) r4 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r2, 0x6, 0x4, &(0x7f0000000b80)=r4, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0xd, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000fcffffff000000008000000085000000a800000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000040)=[0x0], &(0x7f0000000080), 0x0, 0x8c, &(0x7f00000000c0)=[{}], 0x8, 0x10, &(0x7f0000000100), &(0x7f0000000140), 0x8, 0x40, 0x8, 0x8, &(0x7f0000000180)}}, 0x10) 2.611717228s ago: executing program 0 (id=4114): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000002c0)=@in6={0xa, 0x4e23, 0x0, @loopback}, 0x80, 0x0}, 0x200ce0c0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a0f0000}, 0x97) 2.479521421s ago: executing program 0 (id=4115): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_bp={&(0x7f0000000240), 0x6}, 0x0, 0x0, 0xc2ba, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x9fd, 0x84, 0x1}, 0x48) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r0}, 0x38) (fail_nth: 61) 2.119636803s ago: executing program 4 (id=4116): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1b, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="282000000000000071114f00000000008510000002000000850000000000000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) 2.100879924s ago: executing program 0 (id=4117): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0xd, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x80, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x18}, 0x0) recvmsg$kcm(r2, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x8014) 1.949311958s ago: executing program 4 (id=4118): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff00000000000000008510000002000000850000000f0000009500000000000000"], 0x0, 0xfffffdfe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffe55, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x28, 0x2, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) bpf$BPF_MAP_FREEZE(0x16, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={0x1, 0x58, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='pids.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x3, 0x0, 0x1, 0x7, '\x00', r0, r1, 0x2, 0x2, 0x5}, 0x50) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) 1.8826321s ago: executing program 0 (id=4119): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x104007, 0xac5d, 0x0, 0x0, 0x10001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff58, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020027000b35d25a806f8c6394f90224fc602f1b01000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000010c0)={0xffffffffffffffff, 0xfffffffffffffd62, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0}}, 0x10) sendmsg$inet(r2, &(0x7f0000000000)={0x0, 0xffffffffffffffef, &(0x7f0000000040)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a076b876c1d0048007ea60864160af36504001a0038001d00", 0x28}, {&(0x7f00000000c0)="83d2ff5f00000080d2898a0cc6d6703b87eb28f77b09bc7e64f918fa3be4664d327d90424d5503002800"/52, 0x34}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x5) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002400)={r0, 0x0, 0x0, 0x1000, &(0x7f0000000200), &(0x7f00000012c0)=""/4096, 0x873, 0x0, 0x5c, 0xa7, &(0x7f00000022c0)="3fa73878bb863e9b2790ea7c7dd629552b4a98316c0c5895d0338fce064059fb6a135870df1ec7b3a7c98170db50d7d8f9376b000d1eddb27b17f561934c18c85b3557e1ac293e2860af3fe18c2356f7d2cafbef6f4c95e133a121a2", &(0x7f0000002340)="400e2825c068a9115a59b2a64f8bcef359e0f56fd4858f2084aa843f6facd9341d568bd949228d10b22c35bc110e6c4bfd4346de119a7222fb59f65197d273f9ffed9a6f555adc34732ea5e1d465635c741b479b699a865fcb8d7a97eb834d9d6e497626886129b7bbed84e985f069575cd4ddfadc722be4e0c3efef6c5d5faf4a951df0932e71bc6d8de6f780f3234cadd6711b0d5b6aaafd4806c5425f84296cb3866c319164", 0x3, 0x0, 0x8}, 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000005c0)="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", 0x166}, {&(0x7f0000000440)="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", 0x10e}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x4008052) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x3, 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000085100000ff"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f00}, 0x94) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r4, 0xffffffffffffffff}, 0x4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x3, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x27}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}]}, &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r7, 0x29, 0x23, &(0x7f0000000040), 0x12b) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x11, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002c000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2, 0x0, 0x0, 0x1000000}, 0x0) 1.839854452s ago: executing program 4 (id=4120): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x108282, 0xac5d, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890b, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa6820000}, 0xfff5) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa88"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x1, 0x0, &(0x7f0000000000)='%', 0x0, 0xd03, 0x80040033, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x12) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.current\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000001540)) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00'}, 0x90) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r3, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000140)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', r4}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000840)={{r5}, &(0x7f00000000c0), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x16, 0x12, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@alu={0x7, 0x0, 0xa, 0xb, 0x7, 0xc}, @cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffff8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000300)='GPL\x00', 0x5, 0x4d, &(0x7f00000003c0)=""/77, 0x41100, 0x22, '\x00', r4, @fallback=0x13, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000440)={0x3, 0x9, 0x9, 0x1000}, 0x10, 0x0, r0, 0x8, &(0x7f0000000540)=[r2, r5, r2], &(0x7f0000000580)=[{0x4, 0x1, 0x1, 0x1}, {0x2, 0x1, 0x10, 0x2}, {0x5, 0x4, 0x4, 0xb}, {0x4, 0x1, 0x10, 0x3}, {0x2, 0x3, 0xa, 0x6}, {0x3, 0x5, 0x3, 0x2}, {0x0, 0x3, 0x2, 0x8}, {0x3, 0x1, 0x3, 0x2}], 0x10, 0xff}, 0x94) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r6) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x110e22fff6) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0xfffffffc}]}) ioctl$TUNGETVNETLE(r6, 0x40107446, &(0x7f0000000180)) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r8, 0x4004743d, 0x110e22fff6) write$cgroup_type(r8, &(0x7f0000000280), 0x9) 149.870625ms ago: executing program 2 (id=4121): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x7c3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0], 0x48) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8916, &(0x7f0000000000)={'syz_tun\x00', @random="02001400ac14"}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x9, 0x1, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8b0f, &(0x7f0000000000)={'wlan1\x00', @broadcast}) write$cgroup_type(0xffffffffffffffff, &(0x7f00000001c0), 0x9) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(0xffffffffffffffff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/syz0\x00', 0x200002, 0x0) 149.585025ms ago: executing program 3 (id=4122): bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0200000004000000ff07000009"], 0x50) socket$kcm(0x10, 0x2, 0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a80)={r2, 0x0, 0xec, 0x4a, &(0x7f0000001880)="9f90406def1cefbd7bf46f1df34d8841fbdf94bb31d682edfccc375656edfe1122dc8cce254740266485fbcba87617b949c3e5f1b735daafe4a71ae361929082c409fc7980a9bc9e92b810c8a3187fd02a83a834d350d89f65bc372adbfa9b95cc2b869901e597e60a36eb7549c3e5b5c7b398fdf4ad30a9da64a3a3d3c0105ce68e5c4d49bc15380f525ba25aed5a7b605525114ac8fd59e34aef1fdc222608b62255f7357a37e5243cd3fceedd9ba30858a65b3e30956ac5cdbae8a9828c13f0e2b8a739692f74fce074a802f05d2c3504482f118eee4a4b95d4333da2a4a4f5ecca320f5c7eaba0b19d59", &(0x7f0000001980)=""/74, 0x2, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001a40), 0x6}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x8918, 0x0) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x5, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8802}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x38) socket$kcm(0x29, 0x2, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000001840), 0xc) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r5, 0x0, 0x20048000) 59.510438ms ago: executing program 5 (id=4123): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000600010200"/25], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000004c0)={r0, &(0x7f0000000240)="be22deb6c77ce85be20827ef6a0261c48a6b90d300d6bfcdef02838810cfbe5090512649a9ab72bc299c92e81fd567b0898a77bf62066aef32d52dadd7dc3ce30c4cf076480f5f1c81a7a1059f6f216d25ed6674b31b22ecdcf2a1630a81425e36e63860164608f301c559e756579330ec66ce6ef28e021cb076cf430af4263e0b12dde88abc7d7a4864b00a9923ef0b8b5b0026343417e6c5a9e968dc3bd093287c144b93bb2aab746411116483c30102043e42d7a9498633ccceaefeb538ea771d85fb0f15071b1eb4db7eaa028efa4c6e32f89c1636f9", &(0x7f0000000400)=""/152, 0x4}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0xff, 0x0, 0xbf, 0x0, 0x0, 0x8001, 0x2408c, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x4, @perf_config_ext={0x2, 0xfffffffffffffffe}, 0x10008, 0xcd, 0x80000001, 0x9, 0x0, 0x1, 0xdffd, 0x0, 0xfffffffc}, 0x0, 0xb, 0xffffffffffffffff, 0xb) close(r2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x27, 0x8, 0x0, &(0x7f0000000180)="0005000000000001", 0x0, 0x405, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmsg$unix(r1, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0xa, 0x2, 0x3a) socket$kcm(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) getpid() sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r3 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r3, &(0x7f0000001a00)=ANY=[@ANYBLOB="13100000520091ef"], 0xfe33) recvmsg$kcm(r3, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001a40)=""/4095, 0xfff}], 0x1}, 0x0) recvmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x50be}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="5400020029000b05d25a806f8c6394f90424fc602f0011002f2f2f00053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x5000000}, 0x0) recvmsg$kcm(r4, &(0x7f0000000240)={&(0x7f00000002c0)=@ax25={{}, [@bcast, @remote, @default, @rose, @default, @remote, @rose, @bcast]}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000100)=""/58, 0x3a}, {&(0x7f00000005c0)=""/253, 0xfd}, {&(0x7f0000000840)=""/133, 0x85}, {&(0x7f0000000900)=""/180, 0xb4}], 0x4, &(0x7f00000001c0)=""/52, 0x34}, 0x2000) recvmsg$kcm(r3, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 386.54µs ago: executing program 0 (id=4124): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000290007000000890704e068000000110000000000000000dbc790ad000000fc000000000000001400000000000000000000003400000004000000000000001c000000000000000000000008"], 0x68}, 0x0) 0s ago: executing program 4 (id=4125): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0xcc, 0xc, 0x1010}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000100000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) kernel console output (not intermixed with test programs): idge0: port 2(bridge_slave_1) entered disabled state [ 574.696990][T13913] device bridge_slave_1 entered promiscuous mode [ 574.757115][T13913] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 574.903265][T13913] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 575.154743][T13913] team0: Port device team_slave_0 added [ 575.167891][T13913] team0: Port device team_slave_1 added [ 575.196306][T13913] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 575.204760][T13913] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 575.255776][T13990] netlink: 118424 bytes leftover after parsing attributes in process `syz.3.3117'. [ 575.279277][T13913] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 575.419301][ T4279] Bluetooth: hci0: command 0x041b tx timeout [ 575.510412][T13913] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 575.529716][T13913] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 575.655576][T13913] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 575.998938][T13913] device hsr_slave_0 entered promiscuous mode [ 576.079960][T13913] device hsr_slave_1 entered promiscuous mode [ 576.112934][T13913] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 576.137119][T13913] Cannot create hsr debugfs directory [ 576.225826][T14005] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3122'. [ 576.264652][T14005] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3122'. [ 576.694195][T14025] validate_nla: 9 callbacks suppressed [ 576.694212][T14025] netlink: 'syz.4.3126': attribute type 3 has an invalid length. [ 576.837407][T14025] netlink: 'syz.4.3126': attribute type 153 has an invalid length. [ 576.944038][T14025] netlink: 85736 bytes leftover after parsing attributes in process `syz.4.3126'. [ 577.499849][ T4279] Bluetooth: hci0: command 0x040f tx timeout [ 578.263914][T14039] netlink: 'syz.3.3130': attribute type 2 has an invalid length. [ 578.330483][T14039] netlink: 'syz.3.3130': attribute type 8 has an invalid length. [ 578.338416][T14039] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3130'. [ 578.448196][ T9] device veth1_macvtap left promiscuous mode [ 578.458215][ T9] device veth0_macvtap left promiscuous mode [ 578.467747][ T9] device veth1_vlan left promiscuous mode [ 578.498200][ T9] device veth0_vlan left promiscuous mode [ 578.657823][ T9] device geneve1 left promiscuous mode [ 578.666100][ T9] team0 (unregistering): Port device geneve1 removed [ 579.100183][ T9] device team_slave_1 left promiscuous mode [ 579.107021][ T9] team0 (unregistering): Port device team_slave_1 removed [ 579.147795][ T9] device team_slave_0 left promiscuous mode [ 579.155669][ T9] team0 (unregistering): Port device team_slave_0 removed [ 579.494700][T14047] netlink: 'syz.3.3130': attribute type 2 has an invalid length. [ 579.505868][T14047] netlink: 'syz.3.3130': attribute type 8 has an invalid length. [ 579.513759][T14047] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3130'. [ 579.526251][T14039] netlink: 'syz.3.3130': attribute type 10 has an invalid length. [ 579.557621][T14054] netlink: 'syz.4.3135': attribute type 2 has an invalid length. [ 579.577023][T14054] netlink: 'syz.4.3135': attribute type 8 has an invalid length. [ 579.579290][ T4279] Bluetooth: hci0: command 0x0419 tx timeout [ 579.599809][T14054] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3135'. [ 579.634875][T14058] netlink: 'syz.4.3135': attribute type 2 has an invalid length. [ 579.645621][T14058] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3135'. [ 579.914730][T13913] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 579.944817][T13913] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 580.024720][T13913] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 580.455048][T14085] netlink: 85736 bytes leftover after parsing attributes in process `syz.2.3141'. [ 580.712674][T13913] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 581.163833][T13913] 8021q: adding VLAN 0 to HW filter on device bond0 [ 581.232285][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 581.245936][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 581.283862][T13913] 8021q: adding VLAN 0 to HW filter on device team0 [ 581.307618][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 581.326935][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 581.336663][ T4337] bridge0: port 1(bridge_slave_0) entered blocking state [ 581.343925][ T4337] bridge0: port 1(bridge_slave_0) entered forwarding state [ 581.379981][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 581.401553][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 581.426707][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 581.454511][ T4337] bridge0: port 2(bridge_slave_1) entered blocking state [ 581.461760][ T4337] bridge0: port 2(bridge_slave_1) entered forwarding state [ 581.514621][T14105] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3146'. [ 581.543978][T14102] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3146'. [ 581.577943][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 581.605165][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 581.618342][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 581.630516][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 581.658299][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 581.678685][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 581.689720][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 581.701045][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 581.711237][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 581.733143][T13913] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 581.753603][T13913] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 581.766038][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 581.776996][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 581.930148][T14116] validate_nla: 9 callbacks suppressed [ 581.930165][T14116] netlink: 'syz.4.3149': attribute type 1 has an invalid length. [ 581.969046][T14116] netlink: 112860 bytes leftover after parsing attributes in process `syz.4.3149'. [ 582.507077][T14144] FAULT_INJECTION: forcing a failure. [ 582.507077][T14144] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 582.583734][T14144] CPU: 0 PID: 14144 Comm: syz.4.3156 Not tainted syzkaller #0 [ 582.591281][T14144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 582.601373][T14144] Call Trace: [ 582.604685][T14144] [ 582.607683][T14144] dump_stack_lvl+0x188/0x24e [ 582.612411][T14144] ? show_regs_print_info+0x12/0x12 [ 582.617661][T14144] ? load_image+0x400/0x400 [ 582.622210][T14144] ? __lock_acquire+0x7d10/0x7d10 [ 582.627297][T14144] should_fail_ex+0x399/0x4d0 [ 582.632023][T14144] _copy_from_user+0x2c/0x170 [ 582.636746][T14144] generic_map_update_batch+0x4f3/0x810 [ 582.642365][T14144] ? rcu_read_unlock+0xa0/0xa0 [ 582.647186][T14144] ? __fdget+0x17c/0x200 [ 582.651478][T14144] ? rcu_read_unlock+0xa0/0xa0 [ 582.656273][T14144] bpf_map_do_batch+0x466/0x600 [ 582.661178][T14144] __sys_bpf+0x6f7/0x780 [ 582.665467][T14144] ? bpf_link_show_fdinfo+0x380/0x380 [ 582.670919][T14144] ? lock_chain_count+0x20/0x20 [ 582.675835][T14144] __x64_sys_bpf+0x78/0x90 [ 582.680298][T14144] do_syscall_64+0x4c/0xa0 [ 582.684921][T14144] ? clear_bhb_loop+0x60/0xb0 [ 582.689639][T14144] ? clear_bhb_loop+0x60/0xb0 [ 582.694371][T14144] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 582.700322][T14144] RIP: 0033:0x7f1184b9ce59 [ 582.704774][T14144] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 582.724510][T14144] RSP: 002b:00007f1185985028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 582.732980][T14144] RAX: ffffffffffffffda RBX: 00007f1184e15fa0 RCX: 00007f1184b9ce59 [ 582.740994][T14144] RDX: 0000000000000038 RSI: 0000200000000300 RDI: 000000000000001a [ 582.749002][T14144] RBP: 00007f1185985090 R08: 0000000000000000 R09: 0000000000000000 [ 582.757009][T14144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 582.765016][T14144] R13: 00007f1184e16038 R14: 00007f1184e15fa0 R15: 00007ffdddd399e8 [ 582.773062][T14144] [ 582.844001][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 582.859557][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 582.899857][T13913] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 582.957347][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 582.981993][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 583.029559][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 583.047926][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 583.077451][T13913] device veth0_vlan entered promiscuous mode [ 583.087051][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 583.114041][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 583.149614][T13913] device veth1_vlan entered promiscuous mode [ 583.209540][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 583.225246][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 583.251198][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 583.274469][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 583.301078][T13913] device veth0_macvtap entered promiscuous mode [ 583.319632][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 583.345379][T13913] device veth1_macvtap entered promiscuous mode [ 583.406778][T13913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 583.423964][T13913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 583.437283][T13913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 583.454432][T13913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 583.473697][T13913] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 583.489312][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 583.506407][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 583.534568][T13913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 583.558536][T13913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 583.591298][T13913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 583.614035][T13913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 583.631697][T13913] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 583.653755][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 583.673382][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 583.700817][T13913] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.717097][T13913] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.727738][T13913] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.747089][T13913] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.223808][ T7702] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 584.244888][ T7702] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 584.278805][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 584.363156][ T7702] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 584.402006][ T7702] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 584.451026][ T7702] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 585.001183][T14190] netlink: 'syz.2.3166': attribute type 3 has an invalid length. [ 585.076218][T14190] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3166'. [ 585.400787][T14202] syzkaller0: create flow: hash 2863311513 index 1 [ 585.680426][ T4277] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 585.689487][ T4277] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 585.698234][ T4277] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 585.707423][T13078] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 585.719741][T13078] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 585.727982][T13078] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 585.758212][ T4262] syzkaller0: tun_net_xmit 76 [ 585.768891][ T4262] syzkaller0: tun_net_xmit 48 [ 585.789491][T13122] syzkaller0: tun_net_xmit 76 [ 585.862851][T14204] netlink: 128124 bytes leftover after parsing attributes in process `syz.4.3170'. [ 586.025696][T14194] syzkaller0: delete flow: hash 2863311513 index 1 [ 587.819655][ T4279] Bluetooth: hci1: command 0x0409 tx timeout [ 587.961296][T14237] netlink: 'syz.4.3179': attribute type 2 has an invalid length. [ 587.969592][T14237] netlink: 'syz.4.3179': attribute type 8 has an invalid length. [ 587.977706][T14237] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3179'. [ 587.989428][T14237] netlink: 'syz.4.3179': attribute type 2 has an invalid length. [ 587.997295][T14237] netlink: 'syz.4.3179': attribute type 8 has an invalid length. [ 588.005886][T14237] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3179'. [ 588.026661][T14237] netlink: 'syz.4.3179': attribute type 10 has an invalid length. [ 588.048597][T14239] tipc: Started in network mode [ 588.070033][T14239] tipc: Node identity 9215a268, cluster identity 4711 [ 588.077326][T14239] tipc: Node number set to 2450891368 [ 588.197559][T14211] chnl_net:caif_netlink_parms(): no params data found [ 588.323804][T14249] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3180'. [ 588.394172][T14255] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 588.419650][T14255] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 588.448760][T14255] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 588.481711][T14255] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 588.492450][T14255] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 588.506752][T14255] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 588.517311][T14255] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 588.528143][T14255] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 588.538685][T14255] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 588.552909][T14255] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 589.675254][ T46] tipc: Left network mode [ 589.675408][T14272] netlink: 'syz.0.3188': attribute type 2 has an invalid length. [ 589.698193][T14272] netlink: 'syz.0.3188': attribute type 8 has an invalid length. [ 589.710541][T14272] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3188'. [ 589.722991][T14211] bridge0: port 1(bridge_slave_0) entered blocking state [ 589.735947][T14211] bridge0: port 1(bridge_slave_0) entered disabled state [ 589.750962][T14211] device bridge_slave_0 entered promiscuous mode [ 589.766134][T14274] netlink: 'syz.0.3188': attribute type 2 has an invalid length. [ 589.779365][T14274] netlink: 'syz.0.3188': attribute type 8 has an invalid length. [ 589.795234][T14274] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3188'. [ 589.899627][ T4279] Bluetooth: hci1: command 0x041b tx timeout [ 590.009828][T14277] netlink: 'syz.0.3188': attribute type 10 has an invalid length. [ 590.018227][ T22] syzkaller0: tun_net_xmit 76 [ 590.033316][ T22] syzkaller0: tun_net_xmit 48 [ 590.055030][ T4357] syzkaller0: tun_net_xmit 76 [ 590.176514][ T46] device ip6gretap0 left promiscuous mode [ 590.194668][ T46] : port 1(ip6gretap0) entered disabled state [ 590.243523][T14211] bridge0: port 2(bridge_slave_1) entered blocking state [ 590.257368][T14211] bridge0: port 2(bridge_slave_1) entered disabled state [ 590.275865][T14211] device bridge_slave_1 entered promiscuous mode [ 590.298108][T14264] syzkaller0: delete flow: hash 1797406810 index 1 [ 591.984338][ T4279] Bluetooth: hci1: command 0x040f tx timeout [ 592.213364][T14300] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3195'. [ 592.234308][T14302] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3195'. [ 592.286175][T14211] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 592.478529][T14211] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 592.685774][T14211] team0: Port device team_slave_0 added [ 592.713267][T14319] device sit0 entered promiscuous mode [ 592.826424][T14211] team0: Port device team_slave_1 added [ 592.863442][T14211] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 592.880914][T14211] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 592.989518][T14211] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 593.074404][T14328] validate_nla: 6 callbacks suppressed [ 593.074442][T14328] netlink: 'syz.0.3204': attribute type 11 has an invalid length. [ 593.088855][T14211] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 593.117220][T14211] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 593.198209][T14211] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 593.300228][T14347] netlink: 'syz.4.3208': attribute type 3 has an invalid length. [ 593.351417][T14347] netlink: 118424 bytes leftover after parsing attributes in process `syz.4.3208'. [ 593.361780][T14337] netlink: 'syz.1.3207': attribute type 10 has an invalid length. [ 593.382777][T14337] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3207'. [ 593.413338][T14337] batman_adv: batadv0: Adding interface: veth0_vlan [ 593.421835][T14337] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 593.449526][T14337] batman_adv: batadv0: Interface activated: veth0_vlan [ 593.553281][T14211] device hsr_slave_0 entered promiscuous mode [ 593.560637][T14211] device hsr_slave_1 entered promiscuous mode [ 593.587543][T14211] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 593.603392][T14211] Cannot create hsr debugfs directory [ 594.059214][ T4279] Bluetooth: hci1: command 0x0419 tx timeout [ 594.113410][T14373] device syzkaller0 entered promiscuous mode [ 596.040447][T14387] device sit0 entered promiscuous mode [ 596.305308][T14395] netlink: 'syz.0.3220': attribute type 10 has an invalid length. [ 596.329527][T14395] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3220'. [ 596.694060][T14211] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 596.765752][T14413] netlink: 'syz.2.3226': attribute type 3 has an invalid length. [ 596.797759][T14413] netlink: 118424 bytes leftover after parsing attributes in process `syz.2.3226'. [ 596.833685][ T46] device hsr_slave_0 left promiscuous mode [ 596.850787][ T46] device hsr_slave_1 left promiscuous mode [ 596.884587][ T46] device veth1_macvtap left promiscuous mode [ 596.895564][ T46] device veth0_macvtap left promiscuous mode [ 596.909514][ T46] device veth1_vlan left promiscuous mode [ 596.915396][ T46] device veth0_vlan left promiscuous mode [ 597.225224][ T46] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 597.460660][ T46] team0 (unregistering): Port device macvlan0 removed [ 598.038525][ T46] team0 (unregistering): Port device team_slave_1 removed [ 598.104603][ T46] team0 (unregistering): Port device team_slave_0 removed [ 598.151404][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 598.196378][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 598.240982][ T46] team0 (unregistering): Port device bridge_slave_1 removed [ 598.415629][ T46] team0 (unregistering): Port device bond0 removed [ 598.443771][ T46] bond0 (unregistering): Released all slaves [ 598.476258][T14211] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 598.490155][T14417] netlink: 'syz.1.3229': attribute type 2 has an invalid length. [ 598.498111][T14417] netlink: 'syz.1.3229': attribute type 8 has an invalid length. [ 598.530902][T14417] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3229'. [ 598.553133][T14419] netlink: 'syz.1.3229': attribute type 2 has an invalid length. [ 598.569459][T14419] netlink: 'syz.1.3229': attribute type 8 has an invalid length. [ 598.578516][T14419] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3229'. [ 598.588796][T14422] netlink: 'syz.1.3229': attribute type 10 has an invalid length. [ 598.598187][T14422] bridge0: port 2(bridge_slave_1) entered disabled state [ 598.605716][T14422] bridge0: port 1(bridge_slave_0) entered disabled state [ 598.636606][T14422] bridge0: port 2(bridge_slave_1) entered blocking state [ 598.644072][T14422] bridge0: port 2(bridge_slave_1) entered forwarding state [ 598.651674][T14422] bridge0: port 1(bridge_slave_0) entered blocking state [ 598.658917][T14422] bridge0: port 1(bridge_slave_0) entered forwarding state [ 598.689323][T14454] netlink: 'syz.2.3242': attribute type 3 has an invalid length. [ 598.711179][T14422] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 598.738113][T14454] netlink: 118424 bytes leftover after parsing attributes in process `syz.2.3242'. [ 598.757858][T14444] netlink: 'syz.0.3232': attribute type 2 has an invalid length. [ 598.774352][T14444] netlink: 'syz.0.3232': attribute type 8 has an invalid length. [ 598.805394][T14444] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3232'. [ 598.825636][T14447] netlink: 'syz.0.3232': attribute type 2 has an invalid length. [ 598.833656][T14447] netlink: 'syz.0.3232': attribute type 8 has an invalid length. [ 598.841667][T14447] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3232'. [ 598.865759][T14211] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 598.919391][T14457] device sit0 entered promiscuous mode [ 598.997883][T14462] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3234'. [ 599.096730][T14211] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 599.182001][T14469] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3236'. [ 599.481720][T14211] 8021q: adding VLAN 0 to HW filter on device bond0 [ 599.520288][T14476] FAULT_INJECTION: forcing a failure. [ 599.520288][T14476] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 599.562301][T14211] 8021q: adding VLAN 0 to HW filter on device team0 [ 599.563749][T14476] CPU: 0 PID: 14476 Comm: syz.1.3238 Not tainted syzkaller #0 [ 599.576418][T14476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 599.586500][T14476] Call Trace: [ 599.589788][T14476] [ 599.592724][T14476] dump_stack_lvl+0x188/0x24e [ 599.597413][T14476] ? show_regs_print_info+0x12/0x12 [ 599.602615][T14476] ? load_image+0x400/0x400 [ 599.607131][T14476] ? __lock_acquire+0x7d10/0x7d10 [ 599.612165][T14476] should_fail_ex+0x399/0x4d0 [ 599.616855][T14476] _copy_from_user+0x2c/0x170 [ 599.621538][T14476] iovec_from_user+0x143/0x360 [ 599.626304][T14476] __import_iovec+0x6d/0x500 [ 599.630907][T14476] import_iovec+0x6f/0xa0 [ 599.635243][T14476] ___sys_sendmsg+0x252/0x360 [ 599.639929][T14476] ? __sys_sendmsg+0x290/0x290 [ 599.644717][T14476] ? __lock_acquire+0x7d10/0x7d10 [ 599.649776][T14476] __se_sys_sendmsg+0x1bb/0x2a0 [ 599.654630][T14476] ? __x64_sys_sendmsg+0x80/0x80 [ 599.659588][T14476] ? lockdep_hardirqs_on+0x94/0x140 [ 599.664792][T14476] do_syscall_64+0x4c/0xa0 [ 599.669215][T14476] ? clear_bhb_loop+0x60/0xb0 [ 599.673921][T14476] ? clear_bhb_loop+0x60/0xb0 [ 599.678601][T14476] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 599.684501][T14476] RIP: 0033:0x7fb5eeb9ce59 [ 599.689199][T14476] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 599.708829][T14476] RSP: 002b:00007fb5efa44028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 599.717256][T14476] RAX: ffffffffffffffda RBX: 00007fb5eee15fa0 RCX: 00007fb5eeb9ce59 [ 599.725241][T14476] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 599.733216][T14476] RBP: 00007fb5efa44090 R08: 0000000000000000 R09: 0000000000000000 [ 599.741190][T14476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 599.749187][T14476] R13: 00007fb5eee16038 R14: 00007fb5eee15fa0 R15: 00007ffe546946b8 [ 599.757205][T14476] [ 599.878732][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 599.903646][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 599.971149][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 600.011122][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 600.026132][ T4497] bridge0: port 1(bridge_slave_0) entered blocking state [ 600.033359][ T4497] bridge0: port 1(bridge_slave_0) entered forwarding state [ 600.076171][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 600.093641][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 600.103735][ T4497] bridge0: port 2(bridge_slave_1) entered blocking state [ 600.110911][ T4497] bridge0: port 2(bridge_slave_1) entered forwarding state [ 600.124576][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 600.133771][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 600.158971][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 600.175725][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 600.188086][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 600.202001][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 600.217433][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 600.244972][T14211] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 600.274774][T14211] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 600.303794][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 600.317252][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 600.341853][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 600.395432][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 600.415060][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 600.434776][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 600.567048][T14504] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3244'. [ 600.599108][T14500] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3244'. [ 601.136940][T14513] syzkaller0: create flow: hash 2863311513 index 1 [ 601.239526][T14400] syzkaller0: tun_net_xmit 76 [ 601.270957][T14512] syzkaller0: delete flow: hash 2863311513 index 1 [ 602.872217][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 602.880943][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 602.907796][T14211] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 602.980495][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 602.994754][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 603.036314][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 603.046183][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 603.057436][T14211] device veth0_vlan entered promiscuous mode [ 603.076285][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 603.091940][T14530] netlink: 118424 bytes leftover after parsing attributes in process `syz.1.3251'. [ 603.103520][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 603.117227][T14211] device veth1_vlan entered promiscuous mode [ 603.157163][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 603.168832][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 603.177742][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 603.192993][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 603.212315][T14211] device veth0_macvtap entered promiscuous mode [ 603.232334][T14211] device veth1_macvtap entered promiscuous mode [ 603.262564][T14211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 603.273464][T14211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.283709][T14211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 603.309184][T14211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.329193][T14211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 603.357551][T14211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.374674][T14211] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 603.394451][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 603.407263][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 603.418157][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 603.427416][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 603.439502][T14211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 603.451389][T14211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.462168][T14211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 603.473164][T14211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.483387][T14211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 603.494932][T14211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.507239][T14211] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 603.525650][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 603.543554][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 603.557705][T14211] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.575793][T14211] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.587376][T14211] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.597409][T14211] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.608485][T14540] validate_nla: 11 callbacks suppressed [ 603.608500][T14540] netlink: 'syz.4.3254': attribute type 7 has an invalid length. [ 603.627620][T14540] netlink: 126644 bytes leftover after parsing attributes in process `syz.4.3254'. [ 603.680997][T14540] netlink: 'syz.4.3254': attribute type 29 has an invalid length. [ 603.693309][T14540] netlink: 'syz.4.3254': attribute type 29 has an invalid length. [ 603.709934][T14540] netlink: 'syz.4.3254': attribute type 29 has an invalid length. [ 603.745777][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 603.778753][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 603.828748][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 603.879668][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 603.887543][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 603.948621][T14545] netlink: 'syz.0.3256': attribute type 2 has an invalid length. [ 603.961966][T14545] netlink: 'syz.0.3256': attribute type 8 has an invalid length. [ 603.971478][T14545] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3256'. [ 603.992802][T14545] netlink: 'syz.0.3256': attribute type 2 has an invalid length. [ 604.001649][T14545] netlink: 'syz.0.3256': attribute type 8 has an invalid length. [ 604.025178][T14545] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3256'. [ 604.035754][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 604.056894][T14545] netlink: 'syz.0.3256': attribute type 10 has an invalid length. [ 604.070733][T14550] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3257'. [ 604.110515][T14544] netlink: 'syz.4.3257': attribute type 12 has an invalid length. [ 604.137332][T14544] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3257'. [ 604.404044][T14556] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3261'. [ 604.417877][T14562] netlink: 85736 bytes leftover after parsing attributes in process `syz.0.3260'. [ 605.471502][T13078] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 605.481535][T13078] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 605.490371][T13078] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 605.498571][ T4277] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 605.537627][ T4277] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 605.546912][ T4277] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 605.994764][ T4283] bond0: (slave syz_tun): Releasing backup interface [ 606.030426][ T4367] syzkaller0: tun_net_xmit 76 [ 606.035561][ T4367] syzkaller0: tun_net_xmit 48 [ 606.040931][T14559] syzkaller0: delete flow: hash 2863311513 index 1 [ 606.344463][T14587] netlink: 180900 bytes leftover after parsing attributes in process `syz.0.3270'. [ 606.369281][T14587] net_ratelimit: 4460 callbacks suppressed [ 606.369325][T14587] openvswitch: netlink: Flow actions attr not present in new flow. [ 607.662242][ T4277] Bluetooth: hci3: command 0x0409 tx timeout [ 607.981139][T14575] mac80211_hwsim hwsim63 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 608.005234][T14586] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3271'. [ 608.028023][T14588] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3271'. [ 608.063529][T14589] bridge0: port 2(bridge_slave_1) entered disabled state [ 608.070815][T14589] bridge0: port 1(bridge_slave_0) entered disabled state [ 608.205009][ T4301] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.343489][ T4301] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.481958][ T4301] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.651518][T14611] validate_nla: 8 callbacks suppressed [ 608.651535][T14611] netlink: 'syz.2.3278': attribute type 29 has an invalid length. [ 608.766176][ T4301] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.911683][T14611] netlink: 'syz.2.3278': attribute type 29 has an invalid length. [ 608.948138][T14614] can: request_module (can-proto-0) failed. [ 609.005185][T14616] netlink: 'syz.2.3278': attribute type 29 has an invalid length. [ 609.739726][ T4277] Bluetooth: hci3: command 0x041b tx timeout [ 610.989761][T14632] netlink: 'syz.3.3283': attribute type 2 has an invalid length. [ 611.001894][T14632] netlink: 'syz.3.3283': attribute type 8 has an invalid length. [ 611.030604][T14632] __nla_validate_parse: 1 callbacks suppressed [ 611.030619][T14632] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3283'. [ 611.066454][T14633] netlink: 'syz.3.3283': attribute type 2 has an invalid length. [ 611.084637][T14633] netlink: 'syz.3.3283': attribute type 8 has an invalid length. [ 611.128385][T14633] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3283'. [ 611.149212][T14634] netlink: 'syz.3.3283': attribute type 10 has an invalid length. [ 611.174107][T14634] bridge0: port 2(bridge_slave_1) entered disabled state [ 611.181658][T14634] bridge0: port 1(bridge_slave_0) entered disabled state [ 611.257044][T14634] bridge0: port 2(bridge_slave_1) entered blocking state [ 611.264258][T14634] bridge0: port 2(bridge_slave_1) entered forwarding state [ 611.271746][T14634] bridge0: port 1(bridge_slave_0) entered blocking state [ 611.278903][T14634] bridge0: port 1(bridge_slave_0) entered forwarding state [ 611.320186][T14634] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 611.337019][T14577] chnl_net:caif_netlink_parms(): no params data found [ 611.453874][ T4301] device 0 left promiscuous mode [ 611.552205][T14577] bridge0: port 1(bridge_slave_0) entered blocking state [ 611.560355][T14577] bridge0: port 1(bridge_slave_0) entered disabled state [ 611.570347][T14577] device bridge_slave_0 entered promiscuous mode [ 611.587626][ T4301] tipc: Left network mode [ 611.588522][T14577] bridge0: port 2(bridge_slave_1) entered blocking state [ 611.599657][T14577] bridge0: port 2(bridge_slave_1) entered disabled state [ 611.608423][T14577] device bridge_slave_1 entered promiscuous mode [ 611.635179][T14577] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 611.706427][ T33] tipc: Subscription rejected, illegal request [ 611.807441][ T4301] device ip6gretap0 left promiscuous mode [ 611.819771][ T4497] wlan1: Trigger new scan to find an IBSS to join [ 611.820000][ T4277] Bluetooth: hci3: command 0x040f tx timeout [ 611.830762][ T4301] : port 1(ip6gretap0) entered disabled state [ 611.978533][T14577] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 612.216521][T14577] team0: Port device team_slave_0 added [ 613.457399][T14577] team0: Port device team_slave_1 added [ 613.899574][ T4279] Bluetooth: hci3: command 0x0419 tx timeout [ 615.345130][T14702] netlink: 'syz.2.3299': attribute type 2 has an invalid length. [ 615.369458][T14702] netlink: 'syz.2.3299': attribute type 8 has an invalid length. [ 615.389895][T14702] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3299'. [ 615.407978][T14704] netlink: 'syz.2.3299': attribute type 2 has an invalid length. [ 615.416689][T14704] netlink: 'syz.2.3299': attribute type 8 has an invalid length. [ 615.425542][T14704] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3299'. [ 615.449388][T14705] netlink: 'syz.2.3299': attribute type 10 has an invalid length. [ 615.471096][T14577] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 615.484267][T14577] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 615.520327][T14577] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 615.608260][T14577] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 615.617405][T14577] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 615.650422][T14577] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 615.667569][T14719] netlink: 'syz.2.3304': attribute type 25 has an invalid length. [ 615.679817][T14719] netlink: 'syz.2.3304': attribute type 29 has an invalid length. [ 615.704381][T14720] netlink: 5 bytes leftover after parsing attributes in process `syz.2.3304'. [ 615.820436][ T4737] wlan1: Trigger new scan to find an IBSS to join [ 615.871787][T14577] device hsr_slave_0 entered promiscuous mode [ 615.908795][T14577] device hsr_slave_1 entered promiscuous mode [ 615.921802][T14723] netlink: 'syz.0.3305': attribute type 10 has an invalid length. [ 615.933574][T14723] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3305'. [ 615.951317][T14723] batman_adv: batadv0: Adding interface: vlan1 [ 615.957863][T14723] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 615.997366][T14723] batman_adv: batadv0: Interface activated: vlan1 [ 616.779877][T14622] wlan1: Creating new IBSS network, BSSID 72:22:73:4f:89:ca [ 617.514006][T14577] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 617.560395][T14577] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 617.618052][T14577] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 617.653089][T14577] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 617.675943][T14761] netlink: 'syz.0.3314': attribute type 2 has an invalid length. [ 617.704046][T14761] netlink: 'syz.0.3314': attribute type 8 has an invalid length. [ 617.717592][T14761] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3314'. [ 617.774035][T14765] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3314'. [ 618.125591][ T4301] team0: Port device wlan1 removed [ 618.169454][T14577] 8021q: adding VLAN 0 to HW filter on device bond0 [ 618.216585][T14780] netlink: 118424 bytes leftover after parsing attributes in process `syz.0.3319'. [ 618.254351][ T4737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 618.268155][ T4737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 618.296566][T14577] 8021q: adding VLAN 0 to HW filter on device team0 [ 618.380321][ T4737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 618.390416][ T4737] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 618.400075][ T4737] bridge0: port 1(bridge_slave_0) entered blocking state [ 618.407220][ T4737] bridge0: port 1(bridge_slave_0) entered forwarding state [ 618.453327][ T4737] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 618.486929][ T4301] device hsr_slave_0 left promiscuous mode [ 618.493721][ T4301] device hsr_slave_1 left promiscuous mode [ 618.520341][ T4301] device veth0_macvtap left promiscuous mode [ 618.532365][ T4301] device veth1_vlan left promiscuous mode [ 618.538457][ T4301] device veth0_vlan left promiscuous mode [ 618.814643][ T4301] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 619.241504][ T4301] team0 (unregistering): Port device team_slave_1 removed [ 619.282173][ T4301] team0 (unregistering): Port device team_slave_0 removed [ 619.325272][ T4301] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 619.371936][ T4301] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 619.598863][ T4301] bond0 (unregistering): Released all slaves [ 619.628077][ T4737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 619.637050][ T4737] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 619.645982][ T4737] bridge0: port 2(bridge_slave_1) entered blocking state [ 619.653133][ T4737] bridge0: port 2(bridge_slave_1) entered forwarding state [ 619.664836][ T4737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 619.689591][ T4737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 619.758504][T14787] syzkaller0: delete flow: hash 2863311513 index 1 [ 619.940627][T14802] netlink: 118424 bytes leftover after parsing attributes in process `syz.0.3330'. [ 619.948464][T14803] netlink: 85736 bytes leftover after parsing attributes in process `syz.2.3321'. [ 621.939484][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 621.972571][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 622.010028][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 622.052351][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 622.075539][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 622.090734][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 622.112588][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 622.214566][T14577] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 622.243153][T14577] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 622.258935][ T7702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 622.269430][ T7702] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 622.278890][T14815] : port 1(ip6gretap0) entered blocking state [ 622.285809][T14815] : port 1(ip6gretap0) entered disabled state [ 622.304472][T14815] device ip6gretap0 entered promiscuous mode [ 622.823132][T14832] validate_nla: 7 callbacks suppressed [ 622.823163][T14832] netlink: 'syz.0.3326': attribute type 16 has an invalid length. [ 622.863950][T14832] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3326'. [ 623.067642][ T7702] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 623.081971][ T7702] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 623.111521][T14577] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 623.491142][ T4367] syzkaller0: tun_net_xmit 76 [ 623.496106][ T4367] syzkaller0: tun_net_xmit 48 [ 623.505501][T14849] syzkaller0: create flow: hash 2863311513 index 1 [ 623.519768][ T4357] syzkaller0: tun_net_xmit 76 [ 623.692695][T14858] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 623.699520][T14848] syzkaller0: delete flow: hash 2863311513 index 1 [ 624.307949][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.316265][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.013273][T14873] : port 1(ip6gretap0) entered blocking state [ 626.021771][T14873] : port 1(ip6gretap0) entered disabled state [ 626.045012][T14873] device ip6gretap0 entered promiscuous mode [ 626.176286][ T7702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 626.208246][ T7702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 626.222582][T14577] device veth0_vlan entered promiscuous mode [ 626.242545][ T7702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 626.251971][ T7702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 626.262828][T14900] netlink: 'syz.2.3342': attribute type 29 has an invalid length. [ 626.272047][ T7702] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 626.281689][ T7702] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 626.298097][T14577] device veth1_vlan entered promiscuous mode [ 626.306393][T14900] netlink: 'syz.2.3342': attribute type 29 has an invalid length. [ 626.342922][T14577] device veth0_macvtap entered promiscuous mode [ 626.351327][T14622] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 626.368887][T14622] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 626.378145][T14622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 626.401398][T14622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 626.414680][T14622] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 626.453091][T14577] device veth1_macvtap entered promiscuous mode [ 626.484888][T14904] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 626.514190][T14577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 626.525328][T14577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.539344][T14577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 626.550243][T14577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.560501][T14577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 626.571695][T14577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.589166][T14577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 626.607874][T14577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.630360][T14577] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 626.641029][ T7702] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 626.660432][ T7702] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 626.671507][ T7702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 626.687191][T14577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 626.698322][T14577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.708527][T14577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 626.726657][T14577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.756142][T14577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 626.767565][T14577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.783585][T14577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 626.796248][T14577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.807246][T14911] FAULT_INJECTION: forcing a failure. [ 626.807246][T14911] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 626.823335][T14577] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 626.832074][ T7702] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 626.841380][ T7702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 626.849778][T14911] CPU: 0 PID: 14911 Comm: syz.0.3346 Not tainted syzkaller #0 [ 626.857266][T14911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 626.867331][T14911] Call Trace: [ 626.870611][T14911] [ 626.873537][T14911] dump_stack_lvl+0x188/0x24e [ 626.878210][T14911] ? show_regs_print_info+0x12/0x12 [ 626.883401][T14911] ? load_image+0x400/0x400 [ 626.887902][T14911] ? __lock_acquire+0x7d10/0x7d10 [ 626.893100][T14911] should_fail_ex+0x399/0x4d0 [ 626.897797][T14911] _copy_from_user+0x2c/0x170 [ 626.902476][T14911] generic_map_update_batch+0x4a1/0x810 [ 626.908034][T14911] ? rcu_read_unlock+0xa0/0xa0 [ 626.912803][T14911] ? __fdget+0x17c/0x200 [ 626.917047][T14911] ? rcu_read_unlock+0xa0/0xa0 [ 626.921806][T14911] bpf_map_do_batch+0x466/0x600 [ 626.926655][T14911] __sys_bpf+0x6f7/0x780 [ 626.930896][T14911] ? bpf_link_show_fdinfo+0x380/0x380 [ 626.936270][T14911] ? lock_chain_count+0x20/0x20 [ 626.941124][T14911] __x64_sys_bpf+0x78/0x90 [ 626.945537][T14911] do_syscall_64+0x4c/0xa0 [ 626.949950][T14911] ? clear_bhb_loop+0x60/0xb0 [ 626.954631][T14911] ? clear_bhb_loop+0x60/0xb0 [ 626.959303][T14911] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 626.965201][T14911] RIP: 0033:0x7f43cff9ce59 [ 626.969615][T14911] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 626.989385][T14911] RSP: 002b:00007f43d0d82028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 626.997838][T14911] RAX: ffffffffffffffda RBX: 00007f43d0215fa0 RCX: 00007f43cff9ce59 [ 627.005989][T14911] RDX: 0000000000000038 RSI: 0000200000000300 RDI: 000000000000001a [ 627.013956][T14911] RBP: 00007f43d0d82090 R08: 0000000000000000 R09: 0000000000000000 [ 627.021926][T14911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 627.029996][T14911] R13: 00007f43d0216038 R14: 00007f43d0215fa0 R15: 00007ffe86ae42f8 [ 627.037975][T14911] [ 627.074951][T14577] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.094628][T14577] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.106591][T14577] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.118434][T14577] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.253743][ T4337] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 627.270323][ T4337] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 627.322576][ T7702] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 627.342041][T14622] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 627.355712][T14622] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 627.378166][ T4737] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 627.441060][T14919] syzkaller0: create flow: hash 2863311513 index 1 [ 627.600095][T14918] syzkaller0: delete flow: hash 2863311513 index 1 [ 627.600487][T14925] netlink: 'syz.0.3349': attribute type 3 has an invalid length. [ 627.619639][T14925] netlink: 'syz.0.3349': attribute type 153 has an invalid length. [ 627.627598][T14925] netlink: 85736 bytes leftover after parsing attributes in process `syz.0.3349'. [ 629.607307][ T4279] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 629.631419][ T4279] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 629.639262][ T4279] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 629.653278][ T4279] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 629.664647][ T4279] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 629.673142][ T4279] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 629.859712][T14939] netlink: 'syz.3.3356': attribute type 10 has an invalid length. [ 630.075455][T14946] netlink: 'syz.0.3358': attribute type 2 has an invalid length. [ 630.099405][T14946] netlink: 'syz.0.3358': attribute type 8 has an invalid length. [ 630.107458][T14946] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3358'. [ 630.136680][T14953] netlink: 'syz.0.3358': attribute type 2 has an invalid length. [ 630.153129][T14953] netlink: 'syz.0.3358': attribute type 8 has an invalid length. [ 630.169275][T14953] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3358'. [ 630.205434][T14946] netlink: 'syz.0.3358': attribute type 10 has an invalid length. [ 630.308943][T14941] chnl_net:caif_netlink_parms(): no params data found [ 630.500248][T14941] bridge0: port 1(bridge_slave_0) entered blocking state [ 630.507435][T14941] bridge0: port 1(bridge_slave_0) entered disabled state [ 630.515864][T14941] device bridge_slave_0 entered promiscuous mode [ 630.526317][T14941] bridge0: port 2(bridge_slave_1) entered blocking state [ 630.533997][T14941] bridge0: port 2(bridge_slave_1) entered disabled state [ 630.542884][T14941] device bridge_slave_1 entered promiscuous mode [ 630.569846][T14941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 630.582798][T14941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 630.609827][T14941] team0: Port device team_slave_0 added [ 630.618514][T14941] team0: Port device team_slave_1 added [ 630.642507][T14941] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 630.649624][T14941] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 630.687583][T14941] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 630.707826][T14941] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 630.715214][T14941] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 630.742798][T14941] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 631.594303][T14941] device hsr_slave_0 entered promiscuous mode [ 631.604967][T14941] device hsr_slave_1 entered promiscuous mode [ 631.612135][T14941] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 631.630378][T14941] Cannot create hsr debugfs directory [ 631.819356][ T4277] Bluetooth: hci4: command 0x0409 tx timeout [ 631.943924][T14984] netlink: 'syz.0.3368': attribute type 3 has an invalid length. [ 631.969554][T14984] netlink: 'syz.0.3368': attribute type 153 has an invalid length. [ 631.977503][T14984] netlink: 85736 bytes leftover after parsing attributes in process `syz.0.3368'. [ 632.050663][T14400] syzkaller0: tun_net_xmit 76 [ 632.055561][T14400] syzkaller0: tun_net_xmit 48 [ 632.061674][T14980] syzkaller0: create flow: hash 2863311513 index 1 [ 632.079418][ T4262] syzkaller0: tun_net_xmit 76 [ 632.173005][T14979] syzkaller0: delete flow: hash 2863311513 index 1 [ 633.903170][ T4277] Bluetooth: hci4: command 0x041b tx timeout [ 634.207473][T14941] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 634.278163][T14995] netlink: 'syz.0.3372': attribute type 2 has an invalid length. [ 634.319998][T14995] netlink: 'syz.0.3372': attribute type 8 has an invalid length. [ 634.336884][T14995] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3372'. [ 634.347241][T14941] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 634.357668][T14999] team0: Device macvlan0 is up. Set it down before adding it as a team port [ 634.388108][T15000] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3372'. [ 634.418190][T14941] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 634.440723][T14941] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 634.717967][T14941] 8021q: adding VLAN 0 to HW filter on device bond0 [ 634.783787][ T4737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 634.836282][ T4737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 634.880013][T14941] 8021q: adding VLAN 0 to HW filter on device team0 [ 634.949420][ T4737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 634.965021][ T4737] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 635.019539][ T4737] bridge0: port 1(bridge_slave_0) entered blocking state [ 635.026770][ T4737] bridge0: port 1(bridge_slave_0) entered forwarding state [ 635.076294][ T4737] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 635.084911][ T4737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 635.097249][ T4737] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 635.108940][ T4737] bridge0: port 2(bridge_slave_1) entered blocking state [ 635.116142][ T4737] bridge0: port 2(bridge_slave_1) entered forwarding state [ 635.205836][ T4737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 635.216869][T15021] validate_nla: 4 callbacks suppressed [ 635.216885][T15021] netlink: 'syz.2.3381': attribute type 3 has an invalid length. [ 635.273946][ T4737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 635.313523][T15021] netlink: 'syz.2.3381': attribute type 153 has an invalid length. [ 635.370873][T15021] netlink: 85736 bytes leftover after parsing attributes in process `syz.2.3381'. [ 635.409361][T14622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 635.411741][T15018] syzkaller0: create flow: hash 2863311513 index 1 [ 635.418522][T14622] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 635.448456][T14622] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 635.481838][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 635.521223][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 635.557709][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 635.585536][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 635.833663][T14941] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 635.852574][T14941] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 635.979463][ T4277] Bluetooth: hci4: command 0x040f tx timeout [ 635.979731][T14622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 636.020161][T14622] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 636.039341][T15017] syzkaller0: delete flow: hash 2863311513 index 1 [ 636.202605][T15038] netlink: 'syz.2.3386': attribute type 1 has an invalid length. [ 636.223231][T15038] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.3386'. [ 636.238411][T15038] netlink: 'syz.2.3386': attribute type 29 has an invalid length. [ 637.918659][T15038] netlink: 'syz.2.3386': attribute type 29 has an invalid length. [ 637.926891][T15043] netlink: 'syz.4.3388': attribute type 2 has an invalid length. [ 637.946339][T15043] netlink: 'syz.4.3388': attribute type 8 has an invalid length. [ 637.979548][T15043] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3388'. [ 638.019310][T15045] netlink: 'syz.4.3388': attribute type 2 has an invalid length. [ 638.027100][T15045] netlink: 'syz.4.3388': attribute type 8 has an invalid length. [ 638.064227][ T4279] Bluetooth: hci4: command 0x0419 tx timeout [ 638.099374][T15045] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3388'. [ 638.116209][T15046] netlink: 'syz.4.3388': attribute type 10 has an invalid length. [ 638.140320][T15046] bridge0: port 2(bridge_slave_1) entered disabled state [ 638.147858][T15046] bridge0: port 1(bridge_slave_0) entered disabled state [ 638.182359][T15046] bridge0: port 2(bridge_slave_1) entered blocking state [ 638.189841][T15046] bridge0: port 2(bridge_slave_1) entered forwarding state [ 638.197504][T15046] bridge0: port 1(bridge_slave_0) entered blocking state [ 638.204796][T15046] bridge0: port 1(bridge_slave_0) entered forwarding state [ 638.228262][T15046] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 638.286212][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 638.297675][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 638.385347][T14941] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 639.180714][T14622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 639.190013][T14622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 639.221557][T14941] device veth0_vlan entered promiscuous mode [ 639.232841][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 639.242641][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 639.270636][T14941] device veth1_vlan entered promiscuous mode [ 639.285563][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 639.297792][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 639.313788][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 639.353536][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 639.373064][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 639.420997][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 639.441734][T14941] device veth0_macvtap entered promiscuous mode [ 639.468819][T14941] device veth1_macvtap entered promiscuous mode [ 639.498623][T14941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 639.545344][T14941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 639.578790][T14941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 639.606979][T14941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 639.624168][T14941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 639.651945][T15080] netlink: 85736 bytes leftover after parsing attributes in process `syz.4.3396'. [ 639.682617][T14941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 639.739681][T14941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 639.779316][T14941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 639.794796][T15087] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3398'. [ 639.809330][T14941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 639.829269][T14941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 639.846831][T14941] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 639.874584][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 639.893555][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 639.933721][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 639.973954][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 640.010423][T14941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 640.025255][T14941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.035636][T14941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 640.094305][T14941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.147247][T14941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 640.175862][T14941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.223256][T14941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 640.250046][T14941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.312561][T14941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 640.350511][T14941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.400035][T14941] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 640.420268][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 640.438273][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 640.465612][T14941] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.481266][T14941] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.496839][T14941] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.513433][T14941] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.717219][ T4337] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 640.774716][ T4337] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 640.829308][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 640.850211][T15102] validate_nla: 2 callbacks suppressed [ 640.850242][T15102] netlink: 'syz.0.3403': attribute type 2 has an invalid length. [ 640.893418][T15102] netlink: 'syz.0.3403': attribute type 8 has an invalid length. [ 640.971472][T15102] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3403'. [ 641.016129][T15105] netlink: 'syz.0.3403': attribute type 2 has an invalid length. [ 641.017673][ T4301] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 641.078894][ T4301] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 641.086713][T15105] netlink: 'syz.0.3403': attribute type 8 has an invalid length. [ 641.179445][T15105] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3403'. [ 641.264907][T15102] netlink: 'syz.0.3403': attribute type 10 has an invalid length. [ 641.317196][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 641.768706][T15125] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3411'. [ 641.868731][T15126] netlink: 'syz.0.3412': attribute type 3 has an invalid length. [ 641.876751][T15126] netlink: 'syz.0.3412': attribute type 153 has an invalid length. [ 641.884796][T15126] netlink: 85736 bytes leftover after parsing attributes in process `syz.0.3412'. [ 642.458022][T15131] netlink: 'syz.2.3413': attribute type 10 has an invalid length. [ 642.517947][T15131] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 642.790083][T15138] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3417'. [ 643.472423][T15155] netlink: 'syz.5.3423': attribute type 2 has an invalid length. [ 643.582949][T15155] netlink: 'syz.5.3423': attribute type 8 has an invalid length. [ 643.603467][T15155] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3423'. [ 643.626968][T15162] netlink: 64535 bytes leftover after parsing attributes in process `syz.0.3426'. [ 643.638138][T15163] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3423'. [ 643.681311][T15159] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3425'. [ 643.720675][T15159] batman_adv: batadv0: Adding interface: veth0_vlan [ 643.741821][T15159] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 643.797918][T15159] batman_adv: batadv0: Interface activated: veth0_vlan [ 643.841961][T15172] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3428'. [ 643.860318][T15167] bridge0: port 2(bridge_slave_1) entered disabled state [ 643.867964][T15167] bridge0: port 1(bridge_slave_0) entered disabled state [ 644.012505][T15167] bridge0: port 2(bridge_slave_1) entered blocking state [ 644.019762][T15167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 644.027290][T15167] bridge0: port 1(bridge_slave_0) entered blocking state [ 644.034542][T15167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 644.080974][T15167] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 645.391043][T15207] device syzkaller0 entered promiscuous mode [ 648.494877][T15247] __nla_validate_parse: 1 callbacks suppressed [ 648.494917][T15247] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.3456'. [ 648.850126][T15260] validate_nla: 7 callbacks suppressed [ 648.850139][T15260] netlink: 'syz.4.3461': attribute type 2 has an invalid length. [ 648.872475][T15260] netlink: 'syz.4.3461': attribute type 8 has an invalid length. [ 648.965153][T15260] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3461'. [ 648.992296][T15265] netlink: 'syz.0.3462': attribute type 3 has an invalid length. [ 649.029446][T15265] netlink: 'syz.0.3462': attribute type 153 has an invalid length. [ 649.382794][T15265] netlink: 85736 bytes leftover after parsing attributes in process `syz.0.3462'. [ 650.112238][T15286] netlink: 'syz.2.3470': attribute type 2 has an invalid length. [ 650.147051][T15286] netlink: 'syz.2.3470': attribute type 8 has an invalid length. [ 650.199461][T15286] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3470'. [ 650.226657][T15290] netlink: 'syz.0.3471': attribute type 4 has an invalid length. [ 650.235089][T15288] device wlan1 entered promiscuous mode [ 650.236303][T15290] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3471'. [ 650.244967][T15293] netlink: 'syz.2.3470': attribute type 2 has an invalid length. [ 650.290280][T15293] netlink: 'syz.2.3470': attribute type 8 has an invalid length. [ 650.314434][T15293] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3470'. [ 650.384661][T15295] netlink: 'syz.2.3470': attribute type 10 has an invalid length. [ 651.117341][T15330] device bridge_slave_1 left promiscuous mode [ 651.150185][T15330] bridge0: port 2(bridge_slave_1) entered disabled state [ 651.184540][T15330] device bridge_slave_0 left promiscuous mode [ 651.209244][T15330] bridge0: port 1(bridge_slave_0) entered disabled state [ 651.287052][T15330] bond0: (slave bridge0): Releasing backup interface [ 651.375958][T15333] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3484'. [ 651.700228][T15351] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3489'. [ 651.764207][T15351] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3489'. [ 651.979329][ T4279] Bluetooth: hci2: command 0x0406 tx timeout [ 652.131880][T15365] netlink: 126288 bytes leftover after parsing attributes in process `syz.2.3495'. [ 653.361010][T15395] mac80211_hwsim hwsim67 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 654.311208][T15409] device batadv_slave_1 entered promiscuous mode [ 654.358734][T15409] __nla_validate_parse: 3 callbacks suppressed [ 654.358752][T15409] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3509'. [ 654.960308][T15434] validate_nla: 10 callbacks suppressed [ 654.960344][T15434] netlink: 'syz.0.3518': attribute type 2 has an invalid length. [ 654.979377][T15435] netlink: 'syz.2.3517': attribute type 3 has an invalid length. [ 654.987162][T15435] netlink: 118424 bytes leftover after parsing attributes in process `syz.2.3517'. [ 655.023509][T15434] netlink: 'syz.0.3518': attribute type 8 has an invalid length. [ 655.063507][T15434] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3518'. [ 655.143300][T15438] netlink: 'syz.0.3518': attribute type 2 has an invalid length. [ 655.215679][T15438] netlink: 'syz.0.3518': attribute type 8 has an invalid length. [ 655.306350][T15438] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3518'. [ 655.337819][T15434] netlink: 'syz.0.3518': attribute type 10 has an invalid length. [ 655.820376][ T33] wlan1: Trigger new scan to find an IBSS to join [ 656.006388][ T33] tipc: Subscription rejected, illegal request [ 656.736560][T15473] netlink: 'syz.4.3539': attribute type 3 has an invalid length. [ 656.766902][T15473] netlink: 118424 bytes leftover after parsing attributes in process `syz.4.3539'. [ 658.842388][T15472] netlink: 'syz.5.3531': attribute type 25 has an invalid length. [ 658.855920][T15472] netlink: 'syz.5.3531': attribute type 29 has an invalid length. [ 658.866599][ T9] wlan1: Trigger new scan to find an IBSS to join [ 658.891187][T15479] netlink: 5 bytes leftover after parsing attributes in process `syz.5.3531'. [ 658.927221][T15484] netlink: 'syz.0.3534': attribute type 2 has an invalid length. [ 658.943169][T15484] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3534'. [ 658.986996][T15485] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3534'. [ 659.188905][T15501] netlink: 118424 bytes leftover after parsing attributes in process `syz.3.3546'. [ 661.743152][T15507] netlink: 64535 bytes leftover after parsing attributes in process `syz.0.3541'. [ 661.823674][ T4737] wlan1: Trigger new scan to find an IBSS to join [ 662.140349][T15531] validate_nla: 5 callbacks suppressed [ 662.140386][T15531] netlink: 'syz.5.3551': attribute type 2 has an invalid length. [ 662.172644][T15531] netlink: 'syz.5.3551': attribute type 8 has an invalid length. [ 662.207157][T15531] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3551'. [ 662.280002][T15535] netlink: 'syz.5.3551': attribute type 2 has an invalid length. [ 662.287780][T15535] netlink: 'syz.5.3551': attribute type 8 has an invalid length. [ 662.345358][T15535] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3551'. [ 662.394225][T15533] netlink: 'syz.5.3551': attribute type 10 has an invalid length. [ 662.435397][T15533] bridge0: port 2(bridge_slave_1) entered disabled state [ 662.442773][T15533] bridge0: port 1(bridge_slave_0) entered disabled state [ 662.515281][T15540] netlink: 'syz.3.3553': attribute type 16 has an invalid length. [ 662.598427][T15540] netlink: 'syz.3.3553': attribute type 3 has an invalid length. [ 662.740227][T15540] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3553'. [ 662.890401][ T4737] wlan1: Creating new IBSS network, BSSID f2:28:04:ab:bd:e9 [ 663.780114][T15565] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3562'. [ 664.175093][T15577] netlink: 'syz.0.3565': attribute type 3 has an invalid length. [ 664.297465][T15577] netlink: 118424 bytes leftover after parsing attributes in process `syz.0.3565'. [ 664.433570][T15582] netlink: 'syz.4.3568': attribute type 2 has an invalid length. [ 664.453581][T15582] netlink: 'syz.4.3568': attribute type 8 has an invalid length. [ 664.497267][T15582] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3568'. [ 664.803461][T15590] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3568'. [ 664.863729][T15582] bridge0: port 2(bridge_slave_1) entered disabled state [ 664.871689][T15582] bridge0: port 1(bridge_slave_0) entered disabled state [ 665.425220][T15616] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3585'. [ 665.467779][T15616] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3585'. [ 666.481755][T15643] device syzkaller0 entered promiscuous mode [ 666.756992][T15648] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3583'. [ 667.151601][T15655] validate_nla: 12 callbacks suppressed [ 667.151621][T15655] netlink: 'syz.4.3584': attribute type 3 has an invalid length. [ 667.339455][ T4277] Bluetooth: hci5: command 0x0406 tx timeout [ 667.339903][T15655] netlink: 118424 bytes leftover after parsing attributes in process `syz.4.3584'. [ 668.281165][T15668] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 670.129429][T15667] netlink: 'syz.0.3591': attribute type 2 has an invalid length. [ 670.137248][T15667] netlink: 'syz.0.3591': attribute type 8 has an invalid length. [ 670.174629][T15667] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3591'. [ 670.210864][T15669] netlink: 'syz.0.3591': attribute type 2 has an invalid length. [ 670.229239][T15669] netlink: 'syz.0.3591': attribute type 8 has an invalid length. [ 670.262310][T15669] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3591'. [ 670.289425][T15670] netlink: 'syz.0.3591': attribute type 10 has an invalid length. [ 670.311684][T15675] netlink: 'syz.2.3593': attribute type 2 has an invalid length. [ 670.320345][T15675] netlink: 'syz.2.3593': attribute type 8 has an invalid length. [ 670.328465][T15675] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3593'. [ 670.344172][T15675] netlink: 'syz.2.3593': attribute type 2 has an invalid length. [ 670.353956][T15675] netlink: 'syz.2.3593': attribute type 8 has an invalid length. [ 670.363518][T15675] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3593'. [ 670.424038][T15676] netlink: 143932 bytes leftover after parsing attributes in process `syz.3.3594'. [ 670.440917][T15676] netlink: zone id is out of range [ 670.446249][T15676] netlink: zone id is out of range [ 670.499823][T15676] netlink: zone id is out of range [ 670.511130][T15676] netlink: zone id is out of range [ 670.523786][T15676] netlink: zone id is out of range [ 670.537115][T15676] netlink: zone id is out of range [ 670.550149][T15676] netlink: zone id is out of range [ 670.557089][T15676] netlink: zone id is out of range [ 670.564242][T15676] netlink: zone id is out of range [ 670.843148][T15692] netlink: 85736 bytes leftover after parsing attributes in process `syz.4.3599'. [ 671.354514][T15705] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 671.508228][T15710] FAULT_INJECTION: forcing a failure. [ 671.508228][T15710] name failslab, interval 1, probability 0, space 0, times 0 [ 671.534196][T15710] CPU: 0 PID: 15710 Comm: syz.3.3605 Not tainted syzkaller #0 [ 671.541711][T15710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 671.551791][T15710] Call Trace: [ 671.555210][T15710] [ 671.558154][T15710] dump_stack_lvl+0x188/0x24e [ 671.562911][T15710] ? show_regs_print_info+0x12/0x12 [ 671.568146][T15710] ? load_image+0x400/0x400 [ 671.572685][T15710] ? __lock_acquire+0x7d10/0x7d10 [ 671.577740][T15710] should_fail_ex+0x399/0x4d0 [ 671.582449][T15710] should_failslab+0x5/0x20 [ 671.586973][T15710] slab_pre_alloc_hook+0x59/0x310 [ 671.590540][T15712] FAULT_INJECTION: forcing a failure. [ 671.590540][T15712] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 671.592003][T15710] kmem_cache_alloc+0x56/0x2f0 [ 671.592025][T15710] ? security_file_alloc+0x30/0x110 [ 671.592051][T15710] security_file_alloc+0x30/0x110 [ 671.620027][T15710] __alloc_file+0xc2/0x230 [ 671.624470][T15710] alloc_empty_file+0x90/0x180 [ 671.629264][T15710] alloc_file+0x5c/0x5f0 [ 671.633614][T15710] alloc_file_pseudo+0x180/0x200 [ 671.638573][T15710] ? alloc_empty_file_noaccount+0x80/0x80 [ 671.644305][T15710] ? put_pid+0xc3/0x120 [ 671.648471][T15710] ? init_peercred+0x273/0x310 [ 671.653264][T15710] sock_alloc_file+0xb3/0x240 [ 671.657966][T15710] __sys_socketpair+0x2cc/0x540 [ 671.662839][T15710] __x64_sys_socketpair+0x97/0xb0 [ 671.667902][T15710] do_syscall_64+0x4c/0xa0 [ 671.672429][T15710] ? clear_bhb_loop+0x60/0xb0 [ 671.677140][T15710] ? clear_bhb_loop+0x60/0xb0 [ 671.681848][T15710] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 671.687766][T15710] RIP: 0033:0x7fe4faf9ce59 [ 671.692200][T15710] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 671.711828][T15710] RSP: 002b:00007fe4fbe42028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 671.720253][T15710] RAX: ffffffffffffffda RBX: 00007fe4fb215fa0 RCX: 00007fe4faf9ce59 [ 671.728325][T15710] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000001 [ 671.736316][T15710] RBP: 00007fe4fbe42090 R08: 0000000000000000 R09: 0000000000000000 [ 671.744318][T15710] R10: 00002000000029c0 R11: 0000000000000246 R12: 0000000000000002 [ 671.752308][T15710] R13: 00007fe4fb216038 R14: 00007fe4fb215fa0 R15: 00007ffe8b493a18 [ 671.760308][T15710] [ 671.763332][T15712] CPU: 1 PID: 15712 Comm: syz.0.3607 Not tainted syzkaller #0 [ 671.770813][T15712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 671.780889][T15712] Call Trace: [ 671.784162][T15712] [ 671.787086][T15712] dump_stack_lvl+0x188/0x24e [ 671.791763][T15712] ? show_regs_print_info+0x12/0x12 [ 671.796958][T15712] ? load_image+0x400/0x400 [ 671.801466][T15712] ? __lock_acquire+0x7d10/0x7d10 [ 671.806507][T15712] should_fail_ex+0x399/0x4d0 [ 671.811277][T15712] _copy_from_user+0x2c/0x170 [ 671.815952][T15712] generic_map_update_batch+0x4f3/0x810 [ 671.821504][T15712] ? rcu_read_unlock+0xa0/0xa0 [ 671.826267][T15712] ? __fdget+0x17c/0x200 [ 671.830508][T15712] ? rcu_read_unlock+0xa0/0xa0 [ 671.835265][T15712] bpf_map_do_batch+0x466/0x600 [ 671.840117][T15712] __sys_bpf+0x6f7/0x780 [ 671.844360][T15712] ? bpf_link_show_fdinfo+0x380/0x380 [ 671.850264][T15712] ? lock_chain_count+0x20/0x20 [ 671.855125][T15712] __x64_sys_bpf+0x78/0x90 [ 671.859541][T15712] do_syscall_64+0x4c/0xa0 [ 671.863951][T15712] ? clear_bhb_loop+0x60/0xb0 [ 671.868649][T15712] ? clear_bhb_loop+0x60/0xb0 [ 671.873343][T15712] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 671.879245][T15712] RIP: 0033:0x7f43cff9ce59 [ 671.883661][T15712] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 671.903614][T15712] RSP: 002b:00007f43d0d82028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 671.912033][T15712] RAX: ffffffffffffffda RBX: 00007f43d0215fa0 RCX: 00007f43cff9ce59 [ 671.920002][T15712] RDX: 0000000000000038 RSI: 0000200000000300 RDI: 000000000000001a [ 671.927998][T15712] RBP: 00007f43d0d82090 R08: 0000000000000000 R09: 0000000000000000 [ 671.935969][T15712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 671.944046][T15712] R13: 00007f43d0216038 R14: 00007f43d0215fa0 R15: 00007ffe86ae42f8 [ 671.952049][T15712] [ 672.042396][T15715] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3608'. [ 672.074081][T15715] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3608'. [ 672.346246][T15724] validate_nla: 9 callbacks suppressed [ 672.346293][T15724] netlink: 'syz.0.3611': attribute type 2 has an invalid length. [ 672.377763][T15724] netlink: 'syz.0.3611': attribute type 8 has an invalid length. [ 672.401158][T15724] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3611'. [ 672.424194][T15723] netlink: 'syz.4.3613': attribute type 21 has an invalid length. [ 672.458424][T15723] netlink: 14548 bytes leftover after parsing attributes in process `syz.4.3613'. [ 672.505096][T15728] netlink: 'syz.0.3611': attribute type 2 has an invalid length. [ 672.514795][T15728] netlink: 'syz.0.3611': attribute type 8 has an invalid length. [ 672.530893][T15728] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3611'. [ 672.542031][T15733] netlink: 'syz.0.3611': attribute type 10 has an invalid length. [ 672.881484][T15746] netlink: 'syz.2.3620': attribute type 10 has an invalid length. [ 672.903207][T15748] netlink: 'syz.4.3618': attribute type 3 has an invalid length. [ 673.037441][T15748] netlink: 'syz.4.3618': attribute type 153 has an invalid length. [ 673.160896][T15748] netlink: 85736 bytes leftover after parsing attributes in process `syz.4.3618'. [ 673.576715][T15759] netlink: 'syz.5.3624': attribute type 2 has an invalid length. [ 673.586528][T15759] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3624'. [ 673.602436][T15759] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3624'. [ 673.810119][T15770] netlink: 118424 bytes leftover after parsing attributes in process `syz.3.3625'. [ 673.969433][T15775] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3629'. [ 674.118377][ T7702] tipc: Subscription rejected, illegal request [ 677.059187][T15798] __nla_validate_parse: 3 callbacks suppressed [ 677.059205][T15798] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3637'. [ 677.083576][T15799] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3637'. [ 677.144449][T15800] bridge0: port 2(bridge_slave_1) entered disabled state [ 677.152154][T15800] bridge0: port 1(bridge_slave_0) entered disabled state [ 677.421246][T15815] validate_nla: 18 callbacks suppressed [ 677.421290][T15815] netlink: 'syz.3.3643': attribute type 2 has an invalid length. [ 677.437695][T15815] netlink: 'syz.3.3643': attribute type 8 has an invalid length. [ 677.445788][T15815] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3643'. [ 677.458188][T15815] netlink: 'syz.3.3643': attribute type 2 has an invalid length. [ 677.473188][T15815] netlink: 'syz.3.3643': attribute type 8 has an invalid length. [ 677.484983][T15815] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3643'. [ 677.573355][T15816] netlink: 'syz.3.3643': attribute type 10 has an invalid length. [ 678.517951][T15832] netlink: 'syz.5.3648': attribute type 3 has an invalid length. [ 678.556990][T15832] netlink: 118424 bytes leftover after parsing attributes in process `syz.5.3648'. [ 678.971297][T15846] netlink: 'syz.4.3653': attribute type 2 has an invalid length. [ 678.985886][T15846] netlink: 'syz.4.3653': attribute type 8 has an invalid length. [ 679.000867][T15846] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3653'. [ 679.018600][T15848] netlink: 'syz.3.3654': attribute type 10 has an invalid length. [ 679.038525][T15848] team0: Device macvlan0 is up. Set it down before adding it as a team port [ 679.058866][T15846] netlink: 'syz.4.3653': attribute type 2 has an invalid length. [ 679.078963][T15846] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3653'. [ 679.337455][T15855] netlink: 125520 bytes leftover after parsing attributes in process `syz.2.3667'. [ 679.347147][T15853] netlink: 85736 bytes leftover after parsing attributes in process `syz.0.3655'. [ 679.772981][T15868] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3660'. [ 680.634964][ T4367] syzkaller0: tun_net_xmit 76 [ 680.640670][ T4367] syzkaller0: tun_net_xmit 48 [ 680.664050][T13056] syzkaller0: tun_net_xmit 76 [ 681.082517][T15902] ksmbd: Daemon and kernel module version mismatch. ksmbd: 2, kernel module: 1. User-space ksmbd should terminate. [ 683.358755][T15898] validate_nla: 14 callbacks suppressed [ 683.358770][T15898] netlink: 'syz.3.3674': attribute type 2 has an invalid length. [ 683.374833][T15898] netlink: 'syz.3.3674': attribute type 8 has an invalid length. [ 683.382685][T15898] __nla_validate_parse: 5 callbacks suppressed [ 683.382697][T15898] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3674'. [ 683.398863][T15900] netlink: 'syz.3.3674': attribute type 2 has an invalid length. [ 683.407895][T15900] netlink: 'syz.3.3674': attribute type 8 has an invalid length. [ 683.415714][T15900] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3674'. [ 683.433991][T15905] netlink: 14 bytes leftover after parsing attributes in process `syz.5.3673'. [ 683.492893][T15917] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3679'. [ 683.514939][T15904] netlink: 'syz.3.3674': attribute type 10 has an invalid length. [ 683.533006][T15913] netlink: 'syz.0.3678': attribute type 2 has an invalid length. [ 683.551530][T15913] netlink: 'syz.0.3678': attribute type 8 has an invalid length. [ 683.568447][T15913] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3678'. [ 683.595477][T15914] netlink: 'syz.0.3678': attribute type 2 has an invalid length. [ 683.639370][T15914] netlink: 'syz.0.3678': attribute type 8 has an invalid length. [ 683.664277][T15914] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3678'. [ 683.714481][T15915] netlink: 'syz.0.3678': attribute type 10 has an invalid length. [ 683.730580][T15919] netlink: 14548 bytes leftover after parsing attributes in process `syz.3.3680'. [ 683.757758][T15921] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3681'. [ 683.779917][T15921] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3681'. [ 683.951773][T15928] netlink: 85736 bytes leftover after parsing attributes in process `syz.2.3682'. [ 684.720691][T15931] syz.4.3685 (15931) used greatest stack depth: 15728 bytes left [ 685.741314][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.747700][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.968617][T16041] device syzkaller0 entered promiscuous mode [ 688.694065][T16064] validate_nla: 23 callbacks suppressed [ 688.694100][T16064] netlink: 'syz.2.3731': attribute type 1 has an invalid length. [ 688.710619][T16064] __nla_validate_parse: 13 callbacks suppressed [ 688.710650][T16064] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.3731'. [ 690.692232][T16049] netlink: 'syz.5.3727': attribute type 2 has an invalid length. [ 690.703383][T16049] netlink: 'syz.5.3727': attribute type 8 has an invalid length. [ 690.713291][T16049] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3727'. [ 690.729410][T16050] netlink: 'syz.5.3727': attribute type 2 has an invalid length. [ 690.738292][T16050] netlink: 'syz.5.3727': attribute type 8 has an invalid length. [ 690.762821][T16050] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3727'. [ 690.778620][T16054] netlink: 'syz.5.3727': attribute type 10 has an invalid length. [ 690.797681][T16070] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 690.819317][T16070] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 690.820263][T16067] : port 1(ip6gretap0) entered blocking state [ 690.828911][T16070] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 690.867717][T16067] : port 1(ip6gretap0) entered disabled state [ 690.878606][T16067] device ip6gretap0 entered promiscuous mode [ 691.114173][T16090] netlink: 4079 bytes leftover after parsing attributes in process `syz.5.3739'. [ 691.320923][T16100] netlink: 4068 bytes leftover after parsing attributes in process `syz.3.3741'. [ 691.544374][T16112] netlink: 'syz.5.3746': attribute type 4 has an invalid length. [ 691.564267][T16112] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.3746'. [ 691.847552][T16118] netlink: 'syz.5.3748': attribute type 16 has an invalid length. [ 691.857376][T16118] netlink: 164 bytes leftover after parsing attributes in process `syz.5.3748'. [ 691.908401][T16122] netlink: 'syz.2.3750': attribute type 2 has an invalid length. [ 691.942659][T16122] netlink: 'syz.2.3750': attribute type 8 has an invalid length. [ 691.963342][T16122] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3750'. [ 691.998703][T16122] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3750'. [ 692.103243][T16129] device bridge_slave_1 left promiscuous mode [ 692.117286][T16129] bridge0: port 2(bridge_slave_1) entered disabled state [ 692.161133][T16129] device bridge_slave_0 left promiscuous mode [ 692.186591][T16129] bridge0: port 1(bridge_slave_0) entered disabled state [ 692.388733][T16129] bond0: (slave bridge0): Releasing backup interface [ 692.506233][T16130] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3752'. [ 692.889645][ T46] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 694.676997][T16208] validate_nla: 10 callbacks suppressed [ 694.677034][T16208] netlink: 'syz.4.3778': attribute type 2 has an invalid length. [ 694.709198][T16208] netlink: 'syz.4.3778': attribute type 8 has an invalid length. [ 694.759281][T16208] __nla_validate_parse: 2 callbacks suppressed [ 694.760137][T16208] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3778'. [ 694.858985][T16212] netlink: 'syz.4.3778': attribute type 2 has an invalid length. [ 694.892034][T16212] netlink: 'syz.4.3778': attribute type 8 has an invalid length. [ 694.929150][T16212] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3778'. [ 694.969928][T16208] netlink: 'syz.4.3778': attribute type 10 has an invalid length. [ 695.023685][T16224] tap0: tun_chr_ioctl cmd 1074025677 [ 695.059426][T16224] tap0: linktype set to 823 [ 695.433257][T16238] netlink: 'syz.4.3786': attribute type 3 has an invalid length. [ 695.445668][T16239] netlink: 'syz.2.3787': attribute type 3 has an invalid length. [ 695.556504][T16239] netlink: 118424 bytes leftover after parsing attributes in process `syz.2.3787'. [ 695.574131][T16238] netlink: 118424 bytes leftover after parsing attributes in process `syz.4.3786'. [ 698.063089][ T4277] Bluetooth: hci0: command 0x0406 tx timeout [ 698.143195][T16249] netlink: 'syz.0.3790': attribute type 2 has an invalid length. [ 698.171911][T16249] netlink: 'syz.0.3790': attribute type 8 has an invalid length. [ 698.219297][T16249] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3790'. [ 698.238732][T16250] netlink: 'syz.0.3790': attribute type 2 has an invalid length. [ 698.255869][T16250] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3790'. [ 698.340383][T16253] netlink: 5 bytes leftover after parsing attributes in process `syz.4.3792'. [ 698.343565][ T4301] tipc: Subscription rejected, illegal request [ 702.090786][T16266] validate_nla: 4 callbacks suppressed [ 702.090802][T16266] netlink: 'syz.5.3796': attribute type 2 has an invalid length. [ 702.104591][T16266] netlink: 'syz.5.3796': attribute type 8 has an invalid length. [ 702.112579][T16266] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3796'. [ 702.122190][T16267] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3795'. [ 702.134462][T16273] netlink: 'syz.5.3796': attribute type 2 has an invalid length. [ 702.173752][T16273] netlink: 'syz.5.3796': attribute type 8 has an invalid length. [ 702.196405][T16273] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3796'. [ 702.222936][T16277] netlink: 'syz.5.3796': attribute type 10 has an invalid length. [ 702.352966][T16308] netlink: 'syz.0.3804': attribute type 3 has an invalid length. [ 702.377386][T16308] netlink: 118424 bytes leftover after parsing attributes in process `syz.0.3804'. [ 702.634224][T16314] netlink: 'syz.5.3806': attribute type 3 has an invalid length. [ 702.650854][T16314] netlink: 118424 bytes leftover after parsing attributes in process `syz.5.3806'. [ 702.830430][T16319] netlink: 'syz.3.3807': attribute type 3 has an invalid length. [ 703.045619][T16319] netlink: 118424 bytes leftover after parsing attributes in process `syz.3.3807'. [ 704.895488][T16305] netlink: 'syz.2.3805': attribute type 2 has an invalid length. [ 704.904583][T16305] netlink: 'syz.2.3805': attribute type 8 has an invalid length. [ 704.914841][T16305] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3805'. [ 704.925512][T16307] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3805'. [ 705.212908][T16323] device wg2 entered promiscuous mode [ 705.272759][T16332] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3812'. [ 705.591597][T16346] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3825'. [ 705.604223][T16343] device bridge_slave_1 left promiscuous mode [ 705.624014][T16343] bridge0: port 2(bridge_slave_1) entered disabled state [ 705.672902][T16343] device bridge_slave_0 left promiscuous mode [ 705.688315][T16343] bridge0: port 1(bridge_slave_0) entered disabled state [ 705.810807][T16343] bond0: (slave bridge0): Releasing backup interface [ 708.304751][ T4279] Bluetooth: hci1: command 0x0406 tx timeout [ 708.807343][T16373] __nla_validate_parse: 6 callbacks suppressed [ 708.807354][T16373] netlink: 830 bytes leftover after parsing attributes in process `syz.2.3824'. [ 708.839704][T16383] netlink: 763 bytes leftover after parsing attributes in process `syz.2.3824'. [ 709.123473][T16396] validate_nla: 19 callbacks suppressed [ 709.123489][T16396] netlink: 'syz.4.3830': attribute type 16 has an invalid length. [ 709.219309][T16396] netlink: 'syz.4.3830': attribute type 3 has an invalid length. [ 709.237196][T16396] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3830'. [ 709.245623][T16397] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 709.287271][T16397] net_ratelimit: 3547 callbacks suppressed [ 709.287316][T16397] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 709.376928][T16400] netlink: 'syz.5.3833': attribute type 2 has an invalid length. [ 709.406227][T16400] netlink: 'syz.5.3833': attribute type 8 has an invalid length. [ 709.446972][T16400] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3833'. [ 709.555399][T16403] netlink: 'syz.5.3833': attribute type 2 has an invalid length. [ 709.587137][T16403] netlink: 'syz.5.3833': attribute type 8 has an invalid length. [ 709.604498][T16410] FAULT_INJECTION: forcing a failure. [ 709.604498][T16410] name failslab, interval 1, probability 0, space 0, times 0 [ 709.631478][T16403] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3833'. [ 709.645888][T16410] CPU: 0 PID: 16410 Comm: syz.3.3836 Not tainted syzkaller #0 [ 709.653426][T16410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 709.663524][T16410] Call Trace: [ 709.666815][T16410] [ 709.669764][T16410] dump_stack_lvl+0x188/0x24e [ 709.674465][T16410] ? show_regs_print_info+0x12/0x12 [ 709.679683][T16410] ? load_image+0x400/0x400 [ 709.684214][T16410] ? __lock_acquire+0x7d10/0x7d10 [ 709.689267][T16410] ? lockdep_init_map_type+0x98/0x8d0 [ 709.694757][T16410] should_fail_ex+0x399/0x4d0 [ 709.699461][T16410] should_failslab+0x5/0x20 [ 709.703975][T16410] slab_pre_alloc_hook+0x59/0x310 [ 709.704151][T16415] netlink: 'syz.0.3835': attribute type 10 has an invalid length. [ 709.709008][T16410] kmem_cache_alloc_lru+0x49/0x2e0 [ 709.721905][T16410] ? __d_alloc+0x31/0x700 [ 709.726238][T16410] __d_alloc+0x31/0x700 [ 709.730418][T16410] ? alloc_file+0x499/0x5f0 [ 709.734913][T16410] d_alloc_pseudo+0x19/0x70 [ 709.739492][T16410] alloc_file_pseudo+0xe0/0x200 [ 709.744348][T16410] ? alloc_empty_file_noaccount+0x80/0x80 [ 709.750069][T16410] ? put_pid+0xc3/0x120 [ 709.754222][T16410] ? init_peercred+0x273/0x310 [ 709.759003][T16410] sock_alloc_file+0xb3/0x240 [ 709.763709][T16410] __sys_socketpair+0x372/0x540 [ 709.768576][T16410] __x64_sys_socketpair+0x97/0xb0 [ 709.773610][T16410] do_syscall_64+0x4c/0xa0 [ 709.778029][T16410] ? clear_bhb_loop+0x60/0xb0 [ 709.782705][T16410] ? clear_bhb_loop+0x60/0xb0 [ 709.787383][T16410] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 709.793274][T16410] RIP: 0033:0x7fe4faf9ce59 [ 709.797683][T16410] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 709.817281][T16410] RSP: 002b:00007fe4fbe42028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 709.825781][T16410] RAX: ffffffffffffffda RBX: 00007fe4fb215fa0 RCX: 00007fe4faf9ce59 [ 709.833748][T16410] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000001 [ 709.841714][T16410] RBP: 00007fe4fbe42090 R08: 0000000000000000 R09: 0000000000000000 [ 709.849687][T16410] R10: 00002000000029c0 R11: 0000000000000246 R12: 0000000000000002 [ 709.857667][T16410] R13: 00007fe4fb216038 R14: 00007fe4fb215fa0 R15: 00007ffe8b493a18 [ 709.865644][T16410] [ 709.890760][T16405] netlink: 'syz.5.3833': attribute type 10 has an invalid length. [ 709.898817][T16406] netlink: 'syz.0.3835': attribute type 2 has an invalid length. [ 709.929465][T16406] netlink: 'syz.0.3835': attribute type 8 has an invalid length. [ 709.937487][T16406] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3835'. [ 709.994515][T16414] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3835'. [ 713.226998][T16457] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3850'. [ 713.249130][T16460] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3850'. [ 713.459058][T16467] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3853'. [ 714.151481][T16484] device syzkaller0 entered promiscuous mode [ 714.874438][T16502] validate_nla: 15 callbacks suppressed [ 714.874458][T16502] netlink: 'syz.4.3863': attribute type 10 has an invalid length. [ 714.917278][T16502] team0: Device macvlan0 is up. Set it down before adding it as a team port [ 717.536485][T16519] netlink: 'syz.5.3868': attribute type 2 has an invalid length. [ 717.544513][T16519] netlink: 'syz.5.3868': attribute type 8 has an invalid length. [ 717.556897][T16519] __nla_validate_parse: 1 callbacks suppressed [ 717.556907][T16519] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3868'. [ 717.573723][T16523] netlink: 'syz.5.3868': attribute type 2 has an invalid length. [ 717.581997][T16523] netlink: 'syz.5.3868': attribute type 8 has an invalid length. [ 717.589987][T16523] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3868'. [ 717.609425][T16525] netlink: 'syz.5.3868': attribute type 10 has an invalid length. [ 717.884390][T16534] netlink: 'syz.0.3869': attribute type 3 has an invalid length. [ 717.905728][T16534] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3869'. [ 718.515778][T16551] FAULT_INJECTION: forcing a failure. [ 718.515778][T16551] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 718.539595][T16551] CPU: 0 PID: 16551 Comm: syz.3.3876 Not tainted syzkaller #0 [ 718.547131][T16551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 718.557315][T16551] Call Trace: [ 718.560626][T16551] [ 718.563585][T16551] dump_stack_lvl+0x188/0x24e [ 718.568323][T16551] ? show_regs_print_info+0x12/0x12 [ 718.573559][T16551] ? load_image+0x400/0x400 [ 718.578116][T16551] ? __lock_acquire+0x7d10/0x7d10 [ 718.583212][T16551] should_fail_ex+0x399/0x4d0 [ 718.587937][T16551] _copy_from_user+0x2c/0x170 [ 718.592652][T16551] generic_map_update_batch+0x4a1/0x810 [ 718.598263][T16551] ? rcu_read_unlock+0xa0/0xa0 [ 718.603078][T16551] ? __fdget+0x17c/0x200 [ 718.607367][T16551] ? rcu_read_unlock+0xa0/0xa0 [ 718.612184][T16551] bpf_map_do_batch+0x466/0x600 [ 718.617081][T16551] __sys_bpf+0x6f7/0x780 [ 718.621369][T16551] ? bpf_link_show_fdinfo+0x380/0x380 [ 718.626805][T16551] ? lock_chain_count+0x20/0x20 [ 718.631709][T16551] __x64_sys_bpf+0x78/0x90 [ 718.636169][T16551] do_syscall_64+0x4c/0xa0 [ 718.640705][T16551] ? clear_bhb_loop+0x60/0xb0 [ 718.645425][T16551] ? clear_bhb_loop+0x60/0xb0 [ 718.650142][T16551] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 718.656078][T16551] RIP: 0033:0x7fe4faf9ce59 [ 718.660524][T16551] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 718.680212][T16551] RSP: 002b:00007fe4fbe42028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 718.688668][T16551] RAX: ffffffffffffffda RBX: 00007fe4fb215fa0 RCX: 00007fe4faf9ce59 [ 718.696680][T16551] RDX: 0000000000000038 RSI: 0000200000000300 RDI: 000000000000001a [ 718.704704][T16551] RBP: 00007fe4fbe42090 R08: 0000000000000000 R09: 0000000000000000 [ 718.712691][T16551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 718.720686][T16551] R13: 00007fe4fb216038 R14: 00007fe4fb215fa0 R15: 00007ffe8b493a18 [ 718.728706][T16551] [ 718.940791][T16556] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3877'. [ 718.979790][T16559] netlink: 'syz.2.3878': attribute type 16 has an invalid length. [ 718.988407][T16559] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3878'. [ 719.128895][T16559] netlink: 'syz.2.3878': attribute type 10 has an invalid length. [ 719.150109][T16559] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3878'. [ 719.169647][T16559] device bond0 entered promiscuous mode [ 719.196601][T16559] device bond_slave_0 entered promiscuous mode [ 719.221608][T16559] device bond_slave_1 entered promiscuous mode [ 719.773339][T16583] netlink: 'syz.4.3886': attribute type 2 has an invalid length. [ 722.592781][T16567] netlink: 'syz.5.3880': attribute type 2 has an invalid length. [ 722.600712][T16567] netlink: 'syz.5.3880': attribute type 8 has an invalid length. [ 722.608443][T16567] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3880'. [ 722.617677][T16568] netlink: 'syz.5.3880': attribute type 2 has an invalid length. [ 722.626080][T16568] netlink: 'syz.5.3880': attribute type 8 has an invalid length. [ 722.649158][T16568] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3880'. [ 722.658455][T16573] netlink: 'syz.5.3880': attribute type 10 has an invalid length. [ 723.913861][ T4737] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 726.457172][T16633] netlink: 'syz.2.3900': attribute type 2 has an invalid length. [ 726.469320][T16633] netlink: 'syz.2.3900': attribute type 8 has an invalid length. [ 726.477350][T16633] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3900'. [ 726.487050][T16638] netlink: 'syz.2.3900': attribute type 2 has an invalid length. [ 726.509366][T16638] netlink: 'syz.2.3900': attribute type 8 has an invalid length. [ 726.523548][T16638] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3900'. [ 726.535866][T16640] netlink: 'syz.2.3900': attribute type 10 has an invalid length. [ 726.823400][T16657] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3908'. [ 727.006257][T16671] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3913'. [ 727.118585][T16671] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3913'. [ 727.166375][T16676] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3915'. [ 727.698187][T16695] validate_nla: 5 callbacks suppressed [ 727.698221][T16695] netlink: 'syz.4.3921': attribute type 2 has an invalid length. [ 727.735470][T16695] netlink: 'syz.4.3921': attribute type 8 has an invalid length. [ 727.770823][T16695] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3921'. [ 727.806974][T16704] netlink: 'syz.4.3921': attribute type 2 has an invalid length. [ 727.877402][T16704] netlink: 'syz.4.3921': attribute type 8 has an invalid length. [ 727.919405][T16704] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3921'. [ 727.989309][T16695] netlink: 'syz.4.3921': attribute type 10 has an invalid length. [ 728.180417][T16709] device syzkaller0 entered promiscuous mode [ 728.407318][T16720] netlink: 'syz.4.3928': attribute type 2 has an invalid length. [ 728.429429][T16720] netlink: 'syz.4.3928': attribute type 8 has an invalid length. [ 728.452335][T16720] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3928'. [ 728.505349][T16724] netlink: 'syz.4.3928': attribute type 2 has an invalid length. [ 728.587502][T16724] netlink: 'syz.4.3928': attribute type 8 has an invalid length. [ 728.669930][T16724] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3928'. [ 728.780550][T16720] netlink: 'syz.4.3928': attribute type 10 has an invalid length. [ 728.790612][ T4277] Bluetooth: hci3: command 0x0406 tx timeout [ 729.304978][T16729] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.3931'. [ 729.382792][T16734] netlink: 184904 bytes leftover after parsing attributes in process `syz.2.3930'. [ 731.656986][T16757] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3938'. [ 731.698378][T16757] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3938'. [ 731.845972][T16763] FAULT_INJECTION: forcing a failure. [ 731.845972][T16763] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 731.911198][T16763] CPU: 0 PID: 16763 Comm: syz.3.3941 Not tainted syzkaller #0 [ 731.918812][T16763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 731.928917][T16763] Call Trace: [ 731.932233][T16763] [ 731.935191][T16763] dump_stack_lvl+0x188/0x24e [ 731.940001][T16763] ? show_regs_print_info+0x12/0x12 [ 731.945242][T16763] ? load_image+0x400/0x400 [ 731.949780][T16763] ? __might_fault+0xa6/0x120 [ 731.954520][T16763] should_fail_ex+0x399/0x4d0 [ 731.959208][T16763] copyin+0x1b/0x120 [ 731.963108][T16763] _copy_from_iter+0x447/0x1130 [ 731.967968][T16763] ? copyout_mc+0x110/0x110 [ 731.972465][T16763] ? __virt_addr_valid+0x188/0x540 [ 731.977586][T16763] ? __virt_addr_valid+0x188/0x540 [ 731.982703][T16763] ? __virt_addr_valid+0x465/0x540 [ 731.987820][T16763] ? __check_object_size+0x500/0xa40 [ 731.993109][T16763] netlink_sendmsg+0x755/0xbd0 [ 731.997891][T16763] ? netlink_getsockopt+0x550/0x550 [ 732.003101][T16763] ? aa_sock_msg_perm+0x94/0x150 [ 732.008056][T16763] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 732.013342][T16763] ? security_socket_sendmsg+0x7c/0xa0 [ 732.018814][T16763] ? netlink_getsockopt+0x550/0x550 [ 732.024197][T16763] ____sys_sendmsg+0x5be/0x970 [ 732.029065][T16763] ? __sys_sendmsg_sock+0x30/0x30 [ 732.034093][T16763] ? __import_iovec+0x315/0x500 [ 732.038955][T16763] ? import_iovec+0x6f/0xa0 [ 732.043464][T16763] ___sys_sendmsg+0x2a2/0x360 [ 732.048149][T16763] ? __sys_sendmsg+0x290/0x290 [ 732.052947][T16763] ? trace_call_bpf+0xbf/0x6b0 [ 732.057747][T16763] __se_sys_sendmsg+0x1bb/0x2a0 [ 732.062605][T16763] ? __x64_sys_sendmsg+0x80/0x80 [ 732.067560][T16763] ? lockdep_hardirqs_on+0x94/0x140 [ 732.072778][T16763] do_syscall_64+0x4c/0xa0 [ 732.077196][T16763] ? clear_bhb_loop+0x60/0xb0 [ 732.081965][T16763] ? clear_bhb_loop+0x60/0xb0 [ 732.086653][T16763] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 732.092549][T16763] RIP: 0033:0x7fe4faf9ce59 [ 732.096974][T16763] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 732.116584][T16763] RSP: 002b:00007fe4fbe42028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 732.125003][T16763] RAX: ffffffffffffffda RBX: 00007fe4fb215fa0 RCX: 00007fe4faf9ce59 [ 732.133064][T16763] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 732.141037][T16763] RBP: 00007fe4fbe42090 R08: 0000000000000000 R09: 0000000000000000 [ 732.149010][T16763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 732.157044][T16763] R13: 00007fe4fb216038 R14: 00007fe4fb215fa0 R15: 00007ffe8b493a18 [ 732.165041][T16763] [ 732.248884][T16770] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3942'. [ 732.263397][T16770] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3942'. [ 732.713795][T16780] device wlan1 entered promiscuous mode [ 732.810078][T16784] validate_nla: 14 callbacks suppressed [ 732.810145][T16784] netlink: 'syz.3.3948': attribute type 4 has an invalid length. [ 732.843438][T16784] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3948'. [ 733.089828][T16788] netlink: 'syz.4.3949': attribute type 3 has an invalid length. [ 733.097632][T16788] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3949'. [ 733.123493][T16793] IPv6: Can't replace route, no match found [ 733.268039][T16800] netlink: 'syz.2.3954': attribute type 2 has an invalid length. [ 733.275876][T16799] netlink: 'syz.0.3953': attribute type 16 has an invalid length. [ 733.275906][T16799] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3953'. [ 733.313614][T16800] netlink: 'syz.2.3954': attribute type 8 has an invalid length. [ 733.346954][T16800] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3954'. [ 733.379169][T16801] netlink: 'syz.2.3954': attribute type 2 has an invalid length. [ 733.386946][T16801] netlink: 'syz.2.3954': attribute type 8 has an invalid length. [ 733.413594][T16801] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3954'. [ 733.435115][T16800] netlink: 'syz.2.3954': attribute type 10 has an invalid length. [ 733.604481][T16809] netlink: 'syz.2.3958': attribute type 2 has an invalid length. [ 733.619934][T16809] netlink: 'syz.2.3958': attribute type 8 has an invalid length. [ 733.627903][T16809] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3958'. [ 733.644898][T16809] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3958'. [ 733.950311][T16819] netlink: 13695 bytes leftover after parsing attributes in process `syz.2.3962'. [ 734.486051][T16835] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3968'. [ 734.506089][T16835] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3968'. [ 738.990777][T16920] device bridge_slave_1 left promiscuous mode [ 739.004469][T16920] bridge0: port 2(bridge_slave_1) entered disabled state [ 739.071169][T16920] device bridge_slave_0 left promiscuous mode [ 739.078782][T16920] bridge0: port 1(bridge_slave_0) entered disabled state [ 739.356285][T16920] bond0: (slave bridge0): Releasing backup interface [ 739.487052][T16923] __nla_validate_parse: 14 callbacks suppressed [ 739.487069][T16923] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3997'. [ 739.718941][T16948] validate_nla: 25 callbacks suppressed [ 739.718957][T16948] netlink: 'syz.4.4008': attribute type 3 has an invalid length. [ 742.715507][T14622] tipc: Subscription rejected, illegal request [ 745.891004][T17007] netlink: 'syz.3.4029': attribute type 10 has an invalid length. [ 745.903099][T17015] netlink: 'syz.5.4032': attribute type 17 has an invalid length. [ 745.911230][T17015] netlink: 148 bytes leftover after parsing attributes in process `syz.5.4032'. [ 745.920935][T17018] netlink: 'syz.4.4033': attribute type 2 has an invalid length. [ 745.949214][T17018] netlink: 'syz.4.4033': attribute type 8 has an invalid length. [ 745.969494][T17018] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4033'. [ 745.978782][T17019] netlink: 'syz.4.4033': attribute type 2 has an invalid length. [ 746.046966][T17019] netlink: 'syz.4.4033': attribute type 8 has an invalid length. [ 746.064539][T17019] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4033'. [ 746.086313][T17020] netlink: 'syz.4.4033': attribute type 10 has an invalid length. [ 746.099383][T17022] netlink: 'syz.2.4036': attribute type 2 has an invalid length. [ 746.120545][T17022] netlink: 'syz.2.4036': attribute type 8 has an invalid length. [ 746.189547][T17022] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4036'. [ 746.214821][T17027] netlink: 'syz.2.4036': attribute type 2 has an invalid length. [ 746.275961][T17027] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4036'. [ 746.310317][T17031] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4038'. [ 746.386049][T17035] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.4039'. [ 746.510165][T17035] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4039'. [ 746.558564][T17035] device team0 entered promiscuous mode [ 746.579287][T17035] device team_slave_0 entered promiscuous mode [ 746.639621][T17035] device team_slave_1 entered promiscuous mode [ 746.696189][T17035] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 747.189623][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.196058][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.497182][T17058] netlink: 170140 bytes leftover after parsing attributes in process `syz.4.4046'. [ 747.535128][T17045] device syzkaller0 entered promiscuous mode [ 749.520564][T17063] netlink: 160 bytes leftover after parsing attributes in process `syz.5.4047'. [ 749.537751][T17063] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 749.552244][T17063] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 751.353064][T17107] validate_nla: 16 callbacks suppressed [ 751.353082][T17107] netlink: 'syz.4.4063': attribute type 10 has an invalid length. [ 751.500182][T17110] netlink: 'syz.4.4065': attribute type 2 has an invalid length. [ 751.508206][T17110] netlink: 'syz.4.4065': attribute type 8 has an invalid length. [ 751.586142][T17110] __nla_validate_parse: 5 callbacks suppressed [ 751.586174][T17110] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4065'. [ 751.619717][T17115] netlink: 'syz.5.4068': attribute type 2 has an invalid length. [ 751.642934][T17115] netlink: 'syz.5.4068': attribute type 8 has an invalid length. [ 751.681246][T17115] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4068'. [ 751.705740][T17110] netlink: 'syz.4.4065': attribute type 2 has an invalid length. [ 751.719568][T17110] netlink: 'syz.4.4065': attribute type 8 has an invalid length. [ 751.740067][T17110] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4065'. [ 751.756561][T17115] netlink: 'syz.5.4068': attribute type 2 has an invalid length. [ 751.772635][T17115] netlink: 'syz.5.4068': attribute type 8 has an invalid length. [ 751.789962][T17115] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4068'. [ 751.839673][T17116] netlink: 'syz.4.4065': attribute type 10 has an invalid length. [ 752.147915][T17138] device geneve0 entered promiscuous mode [ 753.314215][ T4737] tipc: Subscription rejected, illegal request [ 753.800621][T17172] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4083'. [ 753.856736][T17173] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4083'. [ 754.379201][ T4279] Bluetooth: hci4: command 0x0406 tx timeout [ 754.959238][ T4737] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 757.005326][T17180] validate_nla: 7 callbacks suppressed [ 757.005343][T17180] netlink: 'syz.3.4085': attribute type 2 has an invalid length. [ 757.018736][T17180] netlink: 'syz.3.4085': attribute type 8 has an invalid length. [ 757.026573][T17180] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4085'. [ 757.035863][T17183] netlink: 'syz.3.4085': attribute type 2 has an invalid length. [ 757.044154][T17183] netlink: 'syz.3.4085': attribute type 8 has an invalid length. [ 757.059140][T17183] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4085'. [ 757.068350][T17184] netlink: 'syz.3.4085': attribute type 10 has an invalid length. [ 757.117559][T17209] : port 1(ip6gretap0) entered blocking state [ 757.135542][T17209] : port 1(ip6gretap0) entered disabled state [ 757.176137][T17209] device ip6gretap0 entered promiscuous mode [ 757.253710][T17216] netlink: 'syz.2.4096': attribute type 10 has an invalid length. [ 757.285571][T17216] team0: Device macvlan0 is up. Set it down before adding it as a team port [ 758.270115][ T4337] tipc: Subscription rejected, illegal request [ 760.093374][T17276] FAULT_INJECTION: forcing a failure. [ 760.093374][T17276] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 760.116255][T17276] CPU: 1 PID: 17276 Comm: syz.0.4115 Not tainted syzkaller #0 [ 760.123791][T17276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 760.133880][T17276] Call Trace: [ 760.137199][T17276] [ 760.140165][T17276] dump_stack_lvl+0x188/0x24e [ 760.144894][T17276] ? show_regs_print_info+0x12/0x12 [ 760.150140][T17276] ? load_image+0x400/0x400 [ 760.154710][T17276] ? __lock_acquire+0x7d10/0x7d10 [ 760.159810][T17276] should_fail_ex+0x399/0x4d0 [ 760.164722][T17276] _copy_from_user+0x2c/0x170 [ 760.169460][T17276] generic_map_update_batch+0x4f3/0x810 [ 760.175083][T17276] ? rcu_read_unlock+0xa0/0xa0 [ 760.179902][T17276] ? __fdget+0x17c/0x200 [ 760.184261][T17276] ? rcu_read_unlock+0xa0/0xa0 [ 760.189222][T17276] bpf_map_do_batch+0x466/0x600 [ 760.194375][T17276] __sys_bpf+0x6f7/0x780 [ 760.198846][T17276] ? bpf_link_show_fdinfo+0x380/0x380 [ 760.204280][T17276] ? lock_chain_count+0x20/0x20 [ 760.209151][T17276] __x64_sys_bpf+0x78/0x90 [ 760.213575][T17276] do_syscall_64+0x4c/0xa0 [ 760.217987][T17276] ? clear_bhb_loop+0x60/0xb0 [ 760.222729][T17276] ? clear_bhb_loop+0x60/0xb0 [ 760.227413][T17276] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 760.233308][T17276] RIP: 0033:0x7f43cff9ce59 [ 760.237746][T17276] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 760.257359][T17276] RSP: 002b:00007f43d0d82028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 760.265786][T17276] RAX: ffffffffffffffda RBX: 00007f43d0215fa0 RCX: 00007f43cff9ce59 [ 760.273900][T17276] RDX: 0000000000000038 RSI: 0000200000000300 RDI: 000000000000001a [ 760.281893][T17276] RBP: 00007f43d0d82090 R08: 0000000000000000 R09: 0000000000000000 [ 760.289873][T17276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 760.297852][T17276] R13: 00007f43d0216038 R14: 00007f43d0215fa0 R15: 00007ffe86ae42f8 [ 760.305837][T17276] [ 760.695332][T17286] netlink: 'syz.0.4119': attribute type 1 has an invalid length. [ 760.707070][T17286] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.4119'. [ 760.720925][T17286] netlink: 'syz.0.4119': attribute type 29 has an invalid length. [ 762.236308][T17255] netlink: 'syz.5.4108': attribute type 2 has an invalid length. [ 762.244220][T17255] netlink: 'syz.5.4108': attribute type 8 has an invalid length. [ 762.253238][T17255] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4108'. [ 762.262556][T17264] netlink: 'syz.5.4108': attribute type 2 has an invalid length. [ 762.270943][T17264] netlink: 'syz.5.4108': attribute type 8 has an invalid length. [ 762.278786][T17264] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4108'. [ 762.288481][T17266] netlink: 'syz.5.4108': attribute type 10 has an invalid length. [ 762.299757][T17286] netlink: 'syz.0.4119': attribute type 29 has an invalid length. [ 762.547643][ T27] INFO: task syz.1.3297:14698 blocked for more than 143 seconds. [ 762.604892][ T27] Not tainted syzkaller #0 [ 762.646558][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 762.703963][ T27] task:syz.1.3297 state:D stack:23408 pid:14698 ppid:13913 flags:0x00004006 [ 762.768339][ T27] Call Trace: [ 762.796914][ T27] [ 762.813012][T17309] netlink: 122896 bytes leftover after parsing attributes in process `syz.5.4123'. [ 762.828960][ T27] __schedule+0x11d1/0x40e0 [ 762.873029][ T27] ? __mutex_lock+0x1ab/0xaf0 [ 762.908619][ T27] ? __sched_text_start+0x8/0x8 [ 762.938762][ T27] ? task_work_cancel+0xa1/0x220 [ 762.974496][ T27] ? task_work_cancel_func+0x210/0x210 [ 762.986308][T17309] ieee80211 !!!: Selected rate control algorithm 'minstrel_ht' [ 763.009362][ T27] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 763.033650][ T27] ? _free_event+0xfd/0x10a0 [ 763.054460][ T27] schedule+0xb9/0x180 [ 763.060653][T17309] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 763.074434][ T27] _free_event+0x171/0x10a0 [ 763.083052][ T27] ? perf_mmap+0x13d0/0x13d0 [ 763.096777][T17309] CPU: 1 PID: 17309 Comm: syz.5.4123 Not tainted syzkaller #0 [ 763.104300][T17309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 763.114383][T17309] Call Trace: [ 763.117676][T17309] [ 763.120620][T17309] dump_stack_lvl+0x188/0x24e [ 763.125339][T17309] ? show_regs_print_info+0x12/0x12 [ 763.130567][T17309] ? load_image+0x400/0x400 [ 763.135177][T17309] sysfs_warn_dup+0x8a/0xa0 [ 763.139710][T17309] sysfs_do_create_link_sd+0xc0/0x110 [ 763.145116][T17309] device_add+0x7f6/0x1000 [ 763.149585][T17309] wiphy_register+0x1d9f/0x2ac0 [ 763.154572][T17309] ? cfg80211_event_work+0x40/0x40 [ 763.159708][T17309] ? minstrel_ht_alloc+0x894/0xa20 [ 763.164855][T17309] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 763.170949][T17309] ieee80211_register_hw+0x2d00/0x39f0 [ 763.176437][T17309] ? ieee80211_register_hw+0xec1/0x39f0 [ 763.181999][T17309] ? ieee80211_register_hw+0xec1/0x39f0 [ 763.187568][T17309] ? ieee80211_tasklet_handler+0x20/0x20 [ 763.193213][T17309] ? lockdep_hardirqs_on+0x94/0x140 [ 763.198443][T17309] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 763.204645][T17309] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 763.210409][T17309] hwsim_new_radio_nl+0xafa/0xce0 [ 763.215466][T17309] genl_family_rcv_msg_doit+0x22a/0x330 [ 763.221035][T17309] ? end_current_label_crit_section+0x170/0x170 [ 763.227315][T17309] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 763.233345][T17309] ? bpf_lsm_capable+0x5/0x10 [ 763.238060][T17309] ? security_capable+0x85/0xb0 [ 763.242954][T17309] genl_rcv_msg+0x604/0x790 [ 763.247501][T17309] ? genl_bind+0x360/0x360 [ 763.251940][T17309] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 763.258307][T17309] netlink_rcv_skb+0x1fb/0x450 [ 763.263091][T17309] ? genl_bind+0x360/0x360 [ 763.267617][T17309] ? netlink_ack+0x1170/0x1170 [ 763.272403][T17309] ? lockdep_hardirqs_on+0x94/0x140 [ 763.277633][T17309] ? down_read+0x1a8/0x2d0 [ 763.282071][T17309] genl_rcv+0x24/0x40 [ 763.286074][T17309] netlink_unicast+0x74d/0x8d0 [ 763.290870][T17309] netlink_sendmsg+0x8ad/0xbd0 [ 763.295837][T17309] ? netlink_getsockopt+0x550/0x550 [ 763.301072][T17309] ? netlink_getsockopt+0x550/0x550 [ 763.306304][T17309] ____sys_sendmsg+0x5be/0x970 [ 763.311101][T17309] ? __sys_sendmsg_sock+0x30/0x30 [ 763.316147][T17309] ? __import_iovec+0x315/0x500 [ 763.321035][T17309] ? import_iovec+0x6f/0xa0 [ 763.325564][T17309] ___sys_sendmsg+0x2a2/0x360 [ 763.330302][T17309] ? __sys_sendmsg+0x290/0x290 [ 763.335297][T17309] ? ktime_get_real_ts64+0x440/0x440 [ 763.340636][T17309] __se_sys_sendmsg+0x1bb/0x2a0 [ 763.345511][T17309] ? __x64_sys_sendmsg+0x80/0x80 [ 763.350481][T17309] ? lockdep_hardirqs_on+0x94/0x140 [ 763.355708][T17309] do_syscall_64+0x4c/0xa0 [ 763.360134][T17309] ? clear_bhb_loop+0x60/0xb0 [ 763.364826][T17309] ? clear_bhb_loop+0x60/0xb0 [ 763.369529][T17309] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 763.375454][T17309] RIP: 0033:0x7f593a59ce59 [ 763.379888][T17309] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 763.399869][T17309] RSP: 002b:00007f59387b4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 763.408314][T17309] RAX: ffffffffffffffda RBX: 00007f593a816180 RCX: 00007f593a59ce59 [ 763.416300][T17309] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 763.424284][T17309] RBP: 00007f593a632d6f R08: 0000000000000000 R09: 0000000000000000 [ 763.432268][T17309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 763.440254][T17309] R13: 00007f593a816218 R14: 00007f593a816180 R15: 00007ffecfc55bd8 [ 763.448270][T17309] [ 763.478542][ T27] ? perf_mmap+0x13d0/0x13d0 [ 763.507608][ T27] perf_event_release_kernel+0x83e/0x8d0 [ 763.518812][ T27] ? __might_sleep+0xd0/0xd0 [ 763.533749][ T27] ? calc_timer_values+0x410/0x410 [ 763.538981][ T27] ? perf_mmap+0x13d0/0x13d0 [ 763.555387][ T27] perf_release+0x37/0x40 [ 763.560685][ T27] __fput+0x22c/0x920 [ 763.564725][ T27] task_work_run+0x1d0/0x260 [ 763.579312][ T27] ? task_work_cancel+0x220/0x220 [ 763.584439][ T27] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 763.590432][ T27] ? _raw_spin_unlock+0x40/0x40 [ 763.595412][ T27] get_signal+0x11a6/0x1350 [ 763.601076][ T27] ? add_device_randomness+0xc2/0x100 [ 763.606713][ T27] ? crng_reseed+0x190/0x190 [ 763.613838][ T27] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 763.620743][ T27] arch_do_signal_or_restart+0xc4/0x1350 [ 763.626456][ T27] ? create_io_thread+0x170/0x170 [ 763.631905][ T27] ? __might_sleep+0xd0/0xd0 [ 763.636547][ T27] ? get_sigframe_size+0x10/0x10 [ 763.641857][ T27] ? __x64_sys_clone+0x1a7/0x220 [ 763.647547][ T27] ? exit_to_user_mode_loop+0x3b/0x110 [ 763.653592][ T27] exit_to_user_mode_loop+0x70/0x110 [ 763.658924][ T27] exit_to_user_mode_prepare+0xee/0x180 [ 763.665109][ T27] syscall_exit_to_user_mode+0x16/0x40 [ 763.671648][ T27] do_syscall_64+0x58/0xa0 [ 763.676103][ T27] ? clear_bhb_loop+0x60/0xb0 [ 763.682154][ T27] ? clear_bhb_loop+0x60/0xb0 [ 763.686896][ T27] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 763.695865][ T27] RIP: 0033:0x7fb5eeb9ce59 [ 763.702140][ T27] RSP: 002b:00007fb5efa43fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 763.710948][ T27] RAX: fffffffffffffffc RBX: 00007fb5eee15fa0 RCX: 00007fb5eeb9ce59 [ 763.718957][ T27] RDX: 0000200000000280 RSI: 00002000000001e0 RDI: 0000000040204000 [ 763.727329][ T27] RBP: 00007fb5eec32d6f R08: 0000200000001100 R09: 0000200000001100 [ 763.735635][ T27] R10: 0000200000000300 R11: 0000000000000206 R12: 0000000000000000 [ 763.744036][ T27] R13: 00007fb5eee16038 R14: 00007fb5eee15fa0 R15: 00007ffe546946b8 [ 763.753208][ T27] [ 763.756333][ T27] [ 763.756333][ T27] Showing all locks held in the system: [ 763.765137][ T27] 1 lock held by rcu_tasks_kthre/12: [ 763.773139][ T27] #0: ffffffff8cb2e7f0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00 [ 763.796300][ T27] 1 lock held by rcu_tasks_trace/13: [ 763.807388][ T27] #0: ffffffff8cb2f010 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00 [ 763.819836][ T27] 1 lock held by khungtaskd/27: [ 763.824720][ T27] #0: ffffffff8cb2de60 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 763.835384][ T27] 1 lock held by syslogd/3621: [ 763.849742][ T27] #0: ffff8880b8e3ab18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x26/0x140 [ 763.869173][ T27] 2 locks held by getty/4027: [ 763.879264][ T27] #0: ffff88802ff9a098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 763.899248][ T27] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x429/0x1390 [ 763.930504][ T27] 2 locks held by kworker/0:4/4317: [ 763.948416][ T27] #0: ffff888017472138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 763.978880][ T27] #1: ffffc900047b7d00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 764.013462][ T27] 3 locks held by kworker/u4:7/4497: [ 764.018799][ T27] #0: ffff888017479138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 764.049360][ T27] #1: ffffc90005477d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 764.061784][ T27] #2: ffffffff8dd4abe8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xa/0x50 [ 764.070989][ T27] 2 locks held by syz.2.4121/17294: [ 764.076323][ T27] #0: ffffffff8dd4abe8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3d/0x1b0 [ 764.085534][ T27] #1: ffffffff8cb33b38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x2ec/0x890 [ 764.096616][ T27] 2 locks held by syz.3.4122/17296: [ 764.102015][ T27] #0: ffffffff8cb82fe8 (event_mutex){+.+.}-{3:3}, at: perf_trace_destroy+0x2a/0x140 [ 764.111757][ T27] #1: ffffffff8cb33b38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3c0/0x890 [ 764.122826][ T27] 1 lock held by syz.5.4123/17301: [ 764.128136][ T27] #0: ffffffff8cb82fe8 (event_mutex){+.+.}-{3:3}, at: perf_trace_destroy+0x2a/0x140 [ 764.137746][ T27] [ 764.140375][ T27] ============================================= [ 764.140375][ T27] [ 764.148963][ T27] NMI backtrace for cpu 1 [ 764.153317][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 764.160530][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 764.170591][ T27] Call Trace: [ 764.173955][ T27] [ 764.176880][ T27] dump_stack_lvl+0x188/0x24e [ 764.181652][ T27] ? ct_irq_enter_irqson+0x170/0x170 [ 764.187011][ T27] ? show_regs_print_info+0x12/0x12 [ 764.192472][ T27] ? load_image+0x400/0x400 [ 764.196981][ T27] ? vprintk_emit+0x59f/0x6a0 [ 764.201689][ T27] ? nmi_cpu_backtrace+0x1cb/0x460 [ 764.206802][ T27] nmi_cpu_backtrace+0x3e6/0x460 [ 764.211741][ T27] ? nmi_trigger_cpumask_backtrace+0x450/0x450 [ 764.217890][ T27] ? _printk+0xda/0x130 [ 764.222044][ T27] ? load_image+0x400/0x400 [ 764.226554][ T27] ? load_image+0x400/0x400 [ 764.231057][ T27] ? nmi_trigger_cpumask_backtrace+0xf3/0x450 [ 764.237207][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 764.243435][ T27] nmi_trigger_cpumask_backtrace+0x1d4/0x450 [ 764.249431][ T27] watchdog+0xeee/0xf30 [ 764.253650][ T27] ? watchdog+0x1ed/0xf30 [ 764.258021][ T27] kthread+0x29d/0x330 [ 764.262227][ T27] ? hungtask_pm_notify+0x40/0x40 [ 764.267345][ T27] ? kthread_blkcg+0xd0/0xd0 [ 764.271938][ T27] ret_from_fork+0x1f/0x30 [ 764.276547][ T27] [ 764.280274][ T27] Sending NMI from CPU 1 to CPUs 0: [ 764.285638][ C0] NMI backtrace for cpu 0 [ 764.285648][ C0] CPU: 0 PID: 17301 Comm: syz.5.4123 Not tainted syzkaller #0 [ 764.285663][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 764.285672][ C0] RIP: 0010:update_blocked_averages+0xc67/0x1580 [ 764.285699][ C0] Code: 9f b5 75 00 4d 8b 24 24 4c 03 a4 24 a0 00 00 00 4c 89 e0 48 c1 e8 03 42 80 3c 30 00 74 08 4c 89 e7 e8 7d b5 75 00 4d 8b 24 24 <4d> 85 e4 0f 84 c3 00 00 00 49 8d bc 24 80 00 00 00 48 89 f8 48 c1 [ 764.285712][ C0] RSP: 0018:ffffc9000d407320 EFLAGS: 00000046 [ 764.285732][ C0] RAX: 1ffff110286d1ef8 RBX: ffff888026b50000 RCX: 0000000000000000 [ 764.285744][ C0] RDX: 0000000000000000 RSI: ffffffff8adf2040 RDI: ffffffff8adf2000 [ 764.285754][ C0] RBP: ffffc9000d407498 R08: ffffffff8e2029ef R09: 1ffffffff1c4053d [ 764.285765][ C0] R10: dffffc0000000000 R11: fffffbfff1c4053e R12: ffff888026b50400 [ 764.285776][ C0] R13: ffff888026b50140 R14: dffffc0000000000 R15: ffff888026b50180 [ 764.285788][ C0] FS: 0000555583f36500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 764.285801][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 764.285812][ C0] CR2: 0000200001000000 CR3: 000000002556a000 CR4: 00000000003506f0 [ 764.285825][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 764.285834][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 764.285843][ C0] Call Trace: [ 764.285848][ C0] [ 764.285862][ C0] ? rebalance_domains+0xa10/0xa10 [ 764.285882][ C0] ? __sched_clock_gtod_offset+0xe0/0xe0 [ 764.285901][ C0] ? sched_balance_newidle+0x258/0x13b0 [ 764.285918][ C0] ? do_raw_spin_unlock+0x11d/0x230 [ 764.285934][ C0] ? sched_balance_newidle+0x258/0x13b0 [ 764.285951][ C0] sched_balance_newidle+0x55b/0x13b0 [ 764.285971][ C0] ? dequeue_entity+0x7f9/0x1250 [ 764.285989][ C0] ? sched_balance_newidle+0x258/0x13b0 [ 764.286009][ C0] ? rcu_is_watching+0x11/0xa0 [ 764.286034][ C0] pick_next_task_fair+0x23e/0x680 [ 764.286054][ C0] __schedule+0x689/0x40e0 [ 764.286077][ C0] ? __sched_text_start+0x8/0x8 [ 764.286096][ C0] schedule+0xb9/0x180 [ 764.286108][ C0] schedule_timeout+0xbd/0x2d0 [ 764.286125][ C0] ? console_conditional_schedule+0x40/0x40 [ 764.286141][ C0] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 764.286162][ C0] ? lock_chain_count+0x20/0x20 [ 764.286179][ C0] ? _raw_spin_lock_irq+0xb7/0xf0 [ 764.286197][ C0] ? _raw_spin_lock_irqsave+0x100/0x100 [ 764.286215][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 764.286233][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 764.286250][ C0] ? wait_for_completion+0x276/0x5a0 [ 764.286265][ C0] wait_for_completion+0x2c7/0x5a0 [ 764.286284][ C0] ? io_schedule+0xd0/0xd0 [ 764.286296][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 764.286316][ C0] ? debug_object_active_state+0x6a/0x380 [ 764.286337][ C0] __synchronize_srcu+0x2b9/0x350 [ 764.286358][ C0] ? synchronize_srcu_expedited+0x20/0x20 [ 764.286378][ C0] ? rcu_read_lock_any_held+0x130/0x130 [ 764.286399][ C0] ? ktime_get_mono_fast_ns+0x199/0x1b0 [ 764.286418][ C0] ? synchronize_srcu+0x192/0x1b0 [ 764.286438][ C0] perf_trace_event_unreg+0xbf/0x1b0 [ 764.286455][ C0] perf_trace_destroy+0x9a/0x140 [ 764.286470][ C0] ? perf_swevent_read+0x10/0x10 [ 764.286487][ C0] _free_event+0xd25/0x10a0 [ 764.286504][ C0] ? perf_mmap+0x13d0/0x13d0 [ 764.286520][ C0] perf_event_release_kernel+0x83e/0x8d0 [ 764.286540][ C0] ? __might_sleep+0xd0/0xd0 [ 764.286554][ C0] ? calc_timer_values+0x410/0x410 [ 764.286576][ C0] ? perf_mmap+0x13d0/0x13d0 [ 764.286592][ C0] perf_release+0x37/0x40 [ 764.286608][ C0] __fput+0x22c/0x920 [ 764.286627][ C0] task_work_run+0x1d0/0x260 [ 764.286652][ C0] ? task_work_cancel+0x220/0x220 [ 764.286672][ C0] ? exit_to_user_mode_loop+0x3b/0x110 [ 764.286695][ C0] exit_to_user_mode_loop+0xe6/0x110 [ 764.286721][ C0] exit_to_user_mode_prepare+0xee/0x180 [ 764.286741][ C0] syscall_exit_to_user_mode+0x16/0x40 [ 764.286759][ C0] do_syscall_64+0x58/0xa0 [ 764.286772][ C0] ? clear_bhb_loop+0x60/0xb0 [ 764.286792][ C0] ? clear_bhb_loop+0x60/0xb0 [ 764.286812][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 764.286832][ C0] RIP: 0033:0x7f593a59ce59 [ 764.286844][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 764.286856][ C0] RSP: 002b:00007ffecfc55d38 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 764.286871][ C0] RAX: 0000000000000000 RBX: 00007f593a817da0 RCX: 00007f593a59ce59 [ 764.286881][ C0] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 764.286889][ C0] RBP: 00007f593a817da0 R08: 0000000000000006 R09: 0000000000000000 [ 764.286898][ C0] R10: 00007f593a817cb0 R11: 0000000000000246 R12: 00000000000ba6a9 [ 764.286909][ C0] R13: 00007f593a81609c R14: 00000000000ba677 R15: 00007f593a816090 [ 764.286926][ C0] [ 764.822882][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 764.829775][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 764.837003][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 764.847163][ T27] Call Trace: [ 764.850453][ T27] [ 764.853401][ T27] dump_stack_lvl+0x188/0x24e [ 764.858107][ T27] ? memcpy+0x3c/0x60 [ 764.862118][ T27] ? show_regs_print_info+0x12/0x12 [ 764.867333][ T27] ? load_image+0x400/0x400 [ 764.871846][ T27] panic+0x2e5/0x730 [ 764.875851][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 764.881478][ T27] ? bpf_jit_dump+0xd0/0xd0 [ 764.885990][ T27] ? __irq_work_queue_local+0x12c/0x190 [ 764.891567][ T27] ? nmi_trigger_cpumask_backtrace+0x35b/0x450 [ 764.897716][ T27] ? nmi_trigger_cpumask_backtrace+0x360/0x450 [ 764.903870][ T27] watchdog+0xf2d/0xf30 [ 764.908031][ T27] ? watchdog+0x1ed/0xf30 [ 764.912365][ T27] kthread+0x29d/0x330 [ 764.916429][ T27] ? hungtask_pm_notify+0x40/0x40 [ 764.921451][ T27] ? kthread_blkcg+0xd0/0xd0 [ 764.926030][ T27] ret_from_fork+0x1f/0x30 [ 764.930471][ T27] [ 764.933800][ T27] Kernel Offset: disabled [ 764.938124][ T27] Rebooting in 86400 seconds..