last executing test programs: 37.256125265s ago: executing program 2 (id=3422): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={0x0, 0xffffffffffffffff, 0x0, 0x16, &(0x7f0000000000)='/proc/net/\x01?\fX\a0\x04\x00\x00\x82q\xee'}, 0x30) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000d03190000000000000000000203000000000000000000000b020000000000"], 0x0, 0x3e}, 0x28) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000400)="d8000000140081044e81f782db44b9040a1d08020a000000040000a118000200fe8000000000000008000f0100810401a80016ea1f0008400304000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee40021146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 36.864701828s ago: executing program 2 (id=3426): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x14, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071121d000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x30, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x1f, 0x0, 0x1, 0x2000, 0x10000}, 0x28) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd63"], 0xfdef) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x52}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0xb, 0x6, 0x2, 0x0, 0x0, 0xffff, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x2, 0x1}, 0x40, 0x0, 0x0, 0x5, 0x7, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0xfb90}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x8) sendmsg$inet(r3, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r2, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2f00020b, 0xe, 0x0, &(0x7f0000000240)="63ecedf7b98637fa929140ac5ea1", 0x0, 0xefdf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair(0x1f, 0x800, 0x6, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000000e40)={&(0x7f0000000340)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000d80)=[{&(0x7f0000000380)="d79c5a9ce30eced7ada0b3c079250c4f1d51de9d38b14ffd83f85ef748cb87d3db40e1138e92879e9b57dc512089a922778ad61dcf3aca6c1eb73198e415f3b1eb717c664f9f84c5a1", 0x49}, {&(0x7f0000000bc0)="9ac621155eee37d63d5346ae004248bd3d20d5b1eaa6c710bd505390ec8aa3f45bfc4c604860201de134604d2f5625bb8bd34dcfe04e5960ba037780a14546754c63ef2a2e6176c2670a2b849eedb1ea6b82ac1009d75582d36805f1e1aef23895422a9225e8f5287e4a5769f1d681a1cca0183e8d7746a2ab424e920dfad311d7117b971151bd7f6b5ff81971d5724208ce68861db42c198cd3973826fdb0a1df299aea87a1dfdae24e701bc0dbbb21626a3f8237c74f75d9aaf623336d7e2d36af6fc467c14672293a213845d9aade2fb81ccb3ec72a07b1a05250869d389ca75011063e65baaafad779de68c393", 0xef}, {&(0x7f0000000cc0)="0fcd22004e1abf4f674eef534dfbdc632dd563bb457b04cf112f6d486b37056425e124f325dd64720fdd2fcb850962836ae954e43e5911b817daca2ea32f3dc90ea9a863829944cf549fb2fcf9dc7122f2332c2afb8f9012b00252e9a6db795c59a47d78525d730f97dd5ab5f9e0dd88ce0ed17328c42fca379fb7e5308970783130947be06264b9a750dc9ea6a777f87e7027144170c66e0522c3e975b41f3eb1890eb5107d31a7f56662fcd201", 0xae}], 0x3, &(0x7f0000000540)=[@ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xac}}, @ip_retopts={{0x78, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x44, 0xb5, 0x3, 0x2, [{@rand_addr=0x64010100, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}, {@private=0xa010100, 0x5}, {@remote, 0x5}, {@remote, 0x800}, {@loopback, 0x4}, {@multicast2, 0x12}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}]}, @timestamp={0x44, 0x8, 0xf7, 0x0, 0x2, [0x6]}, @lsrr={0x83, 0x1b, 0x9c, [@private=0xa010102, @rand_addr=0x64010100, @multicast1, @rand_addr=0x64010102, @multicast2, @private=0xa010101]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x80}}], 0xc0}, 0x40) setsockopt$sock_attach_bpf(r3, 0x1, 0x41, &(0x7f0000000040)=r4, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$kcm(0x10, 0x2, 0x10) 36.76620363s ago: executing program 1 (id=3428): gettid() openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x4811}, 0xf8) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'batadv_slave_1\x00', 0x400}) r0 = socket$kcm(0x10, 0x2, 0x10) recvmsg$kcm(r0, 0x0, 0x40000000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x2, 0x0) socket$kcm(0xa, 0x3, 0x0) 36.621345395s ago: executing program 4 (id=3429): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = getpid() perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0xc, 0x8, 0x7fff, 0x7fffffff, 0x0, 0x0, 0x5}, r1, 0xffffffffffffffff, r0, 0xa) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0x22, 0x0, &(0x7f0000000600)="3d25ff005b19c4cbe601709b080041fe7a8a047963817ba0af112187b35b1bf32219", 0x0, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="8dffffff00"}) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x0, 0x1, 0x0, 0x81, 0x0, 0x5ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000008, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x2, 0x0, 0x68d1}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0xa, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000100000001000"], 0x0, 0x2a}, 0x28) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x80, 0x0, 0x0, 0x0, 0x18, 0x68000000}, 0x0) r6 = socket$kcm(0xa, 0x5, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001380)={r5, 0x58, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000002280)=ANY=[@ANYBLOB="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"/3636], &(0x7f0000000040)='GPL\x00', 0x9, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', r7, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x6, 0x3, 0x6322, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="61123000000000006113100000000000bf2000000000000016000200071b48013d030100000000009500000000000000bc26000000000000bf67000000000000070200000fff07276702000003000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r9 = socket$kcm(0x10, 0x2, 0x4) close(r9) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000aadf0000850000002200000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r11, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="d2ff030060010000009e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r6, 0x29, 0x22, &(0x7f0000000100)=r8, 0x120) sendmsg$kcm(r5, &(0x7f0000000440)={&(0x7f0000000080)=@in6={0xa, 0x4e20, 0x0, @private0}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x00'], 0x28}, 0x0) 36.587353206s ago: executing program 0 (id=3430): socket$kcm(0x10, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x242140, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000080)=0xffffad5a) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x106080, 0x0, 0x4000000, 0x1}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000000)) 35.781097962s ago: executing program 0 (id=3431): perf_event_open(0x0, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, 0x0, 0x5}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110c230000) ioctl$TUNSETOFFLOAD(r0, 0x40047440, 0xf0ff1f00000000) 35.720624953s ago: executing program 3 (id=3432): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x10, 0xf, &(0x7f0000000500)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffe}, {{0x18, 0x1, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000000}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a0, &(0x7f00000000c0)='.9\xb7\xa8(\x05\xb6\xbc\xdc\x11\x85\xb2\xda\xda%\x00\xe9\a\xd9\x12s\x03\x00\xd0O\x87\x8fI\xa5\xbbHd\xfd\x19l\xca\x89\x8e)P\x18\x14\'\x81\n\x02\\\xca\f\xc30p{\x94\xd8wn>\btn\xc3\xfd\xca\x0f\xdb\xab\xae\x04\x0e*\xb4\x06@v\xfd\x86\x9d\xb7\x801\x80\x9a\xc0N,\x8d\x13\x11eJ\x10CQ\xb9ab\xf311\xf9\x03\xd5\xec\x9fa7S\x8b\xdan\xd9W#\x06&P)\x1ak~LB\xa4\f@\xff\xb2]\xddk\xa9\xbd}\xefp}\x90\xd0\xdb\xcc\xf9\xe8\":O\f\x98D\xf07\\F\b\xe2\x82\xfa\xe3L\xb5\x8d\xe3\x87\xa6v\x9a\xb6\xf4\x80\x85\";\xe5\xdf\xa2\xbd\xf9}\\\xbe?\x93|\xcbg\x1c~\xb6Y\xaa\xf3\xd6%\x89\xe4\x1b\xb6.f\x12\xe5\xabm \xb6\\\xb9T\fZma\xb9\xd7xzS\xd3\x8b\x02Qj\xf5\xb7X\xc6\b\x19.\xae\xdd\xa9\xd0\xf2\xdc\x1f\xf1z\v\xf9\xc3\xf0V5D&a\xf6^\x94\x19\xe0\b\xf0\xdcD{(\x1b\xf9|\xe9\xa1]\xdc\xe8\xb8\xdb\xd5<2\x96\'s\xe7\x84\x82\xea\xbb\xff\xb7\xb8%-?\x83\x9cwOe|\xb4\xef\xb6\xf4\xdf\xbf\x1e\xc6OSs\xc4_6H\xde\x9eN\x12\x9cH\x86\x824\xaf\x177\t:\xe3_w-\xbf\x1b\x14\xc7\x1d\xb4\x99\x1f\xadf\x9e\xc7X\x040\x9e^ \xc9m\x9ek\x86\t\x9f \xc8\xcf\xf5\x80(\xd9l\x91\xf7x\x7f\xaa\xd9\xd4nO\xa0\xa0M6\v.\xd8[\xc9\xa4` \x8e\x1a\xb9\xd5\xa1B\xe5\xcd\xc1\xefPHG-\xf5\x0e\xec\x13l\xd1`A/\xef\xa6\xe7\f\x8c') r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x5, 0x3, 0x9fa, 0x85, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r2}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r2}, 0x38) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0}, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000680)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007200000018110000", @ANYRESOCT, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r4}, 0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x58, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0900000007000000060000000f00000000000400", @ANYRES32=r2, @ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00\x00\bM\x00\x00\x00\x00\x00', @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="0c00000004000000000000000000000000000000000000be6a"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x19, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000000000100000000000900000018110000", @ANYRES32=r3, @ANYBLOB="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"], &(0x7f0000000740)='GPL\x00', 0x0, 0x8a, &(0x7f0000000840)=""/138, 0x41100, 0x0, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000940)={0x0, 0x9, 0x9, 0x9c}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000a00)=[{0x0, 0x5, 0xf}, {0x0, 0x5, 0x0, 0x5}, {0x4, 0x4, 0x1, 0xb}, {0x3, 0xffffffff, 0xe, 0x9}, {0x1, 0x4, 0x5, 0x4}], 0x10, 0x9}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r6}, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x4, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000ff000000000000090000002c0000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000640)={&(0x7f0000000000)={0x2a, 0x0, @broadcast}, 0x10, 0x0}, 0x0) close(r7) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000015006bab9e3fe3d86e17aa31026b876c1d0000007ea60847160af36504000a0038001d000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f4d4930400e7861000bdd7fcf50ea1e190b4714751d0c9", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8800) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="d8000000100081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e1209000d0000000401a80016000a00144006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 35.681460034s ago: executing program 2 (id=3433): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1100000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="0000000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00\x00\x00\x00\x00\x00 \x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000000000000000000000800000018110000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b70400000000000085000000330000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="b400000000000000dd0a00000000000063010400000000009500000000000000a9ee398ac8f6eae2f0e1ad8a95c87887dcfaf5fc136bd45f44ffc5bbfd42296fe3d2e5a9c93b7e26ac76168ec8f364c16e2463fb5f93f9e2604b21a56cb8e4b5524462bf777bd1fae45d06e2ba39d2737bc2b7739ef5972eacd89e59791ffcdda8ec7043d4f550efcaad5403d1ba360dbd8d28a876cb28d1f56ec919a32eec71116373825f742013bbfeb2f36c493e2c4536bb8862d2195b76d5d70285684449f1565f53310dbd0960944ba42005a107a0d7bb4aae2056b3a71fc73b06472b9a877dd7087bc5e7173cc0cd66eb2ca76c73ac2165ea8b1c9ffe247e9c9a9524373a2baa2afc39a141eef584c001b72d7c63d3013884fe0addac02ba36be8dcb7038e945ca03a519"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) recvmsg$unix(r1, &(0x7f0000000740)={&(0x7f0000000400), 0x6e, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/105, 0x69}, {&(0x7f0000000640)=""/67, 0x43}], 0x2, &(0x7f0000000700)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r2 = socket$kcm(0x2, 0x922000000001, 0x106) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) setsockopt$sock_attach_bpf(r2, 0x6, 0x24, &(0x7f0000000000)=r3, 0xff7b) r4 = socket$kcm(0x29, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000040), 0xc) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x19, 0x0, 0x0) r5 = socket$kcm(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r6, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) close(r5) socket$kcm(0xa, 0x922000000003, 0x11) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000500)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x9c5c}, 0x94) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) 35.626529046s ago: executing program 1 (id=3434): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, @perf_config_ext={0x0, 0xff}, 0x4140, 0x0, 0x8, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x48, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x1, 0x1, 0x0, 0x12, 0x0, 0x0, 0xfffd, 0x0, 0x2}, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) sendmsg$inet(r1, &(0x7f00000007c0)={&(0x7f0000000040)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000240)="cc", 0x1}], 0x1}, 0x24044851) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x11, &(0x7f0000000000)=r2, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x604, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000400"/28], 0x48) 35.464966961s ago: executing program 4 (id=3435): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/ipc\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000d00)='ns/ipc\x00') close(r0) 35.251158058s ago: executing program 3 (id=3436): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x100000001, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x120a0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2b8, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x21, 0x2, 0x2) r4 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r4, 0xc008240a, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23}, 0x94) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe92f5f45114c79f7}, 0x1003b9, 0x7, 0x2000, 0xa, 0x1, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r5, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0xd, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32, @ANYBLOB, @ANYRES16], &(0x7f0000000300)='GPL\x00', 0x2, 0x100a, &(0x7f0000002500)=""/4106, 0x0, 0x5}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f0000000040)}, 0x20) setsockopt$sock_attach_bpf(r3, 0x107, 0x2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000020000000000c0000000c003be322e4c7e2dd3340000000000d000000000030612e5f5f5f"], &(0x7f00000004c0)=""/164, 0x2d, 0xa4, 0x1}, 0x28) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f90624fc60040011000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 35.249750218s ago: executing program 0 (id=3446): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x1e, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1ff}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_fd={0x18, 0x5, 0x1, 0x0, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x4}, @map_fd={0x18, 0x1}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='GPL\x00', 0x0, 0xa6, &(0x7f0000000300)=""/166, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x0, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000400)=[0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000440)=[{0x3, 0x2, 0xf}, {0x5, 0x2, 0xd, 0x1}, {0x2, 0x4, 0xc, 0x2}, {0x0, 0x4, 0x5, 0x3}, {0x4, 0x2, 0x3, 0x2}], 0x10, 0x5}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000640)={r0, r1}, 0xc) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000190081054e81f782db4cb9040220080000000000000000070a000a000900142603600e1208001e0000050401d559e0e0df7fc07963acc3038ebba8000400027c035c0461c1d67f6f94007134cf6efb8001a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c3f5aeb4edbb57a5025ccca9e008026f6e6ddba61f5fad95667e006dcdf639500bfeb789d00000000000000d5e1cace81ed6c117ab5d6d69bda4039e81f86f60f0bffece0b42a9ecbee5de6ccd40dd6e4ed", 0xd8}], 0x1}, 0x14) 35.206028609s ago: executing program 4 (id=3437): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0xf6}, 0x0, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xffffdfff00000001}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="1400000020000b0fd25a806c8c6f94f90124fc60", 0x14}], 0x1}, 0x4000010) perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB="00000000000000000000e9010020000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x6, 0x6, 0x0, 0x0, 0x0, 0xd0688, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffffc0}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair(0xa, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000200)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan1\x00', 0x800}) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 35.104894742s ago: executing program 2 (id=3438): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r1, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f3, &(0x7f0000000080)) 35.102557903s ago: executing program 0 (id=3439): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/time_for_children\x00') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000003c0)='cpuset.cpu_exclusive\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f00000002c0)=0x3, 0x12) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0700000004000000180000008e02000000000000eace20de2f02fb4c99ce962c38a1cec2189f49bee2efe8a4270420ce2e8140546745cd403c72d282737b3c4f269bdc883a5bba3187f28b2bba2c638369a5ab5aa424e03ec9f53ea940756903395d059bc4a85582de928b34c31737a93ebfbb59fde2b2aebaec11446d89a351448f78063f3fe4bdad72614ae9179ae3be4b30920e8f1a00"/164, @ANYRES32, @ANYRES32=0x0], 0x48) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) r6 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x3e, &(0x7f0000000380)=r5, 0xfffffffffffffd4d) write$cgroup_pressure(r5, &(0x7f0000000240)={'full', 0x20, 0x9, 0x20, 0xfffffffffffffff8}, 0x2f) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x29, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d08007b490d4f1e81f8d815000100fe80000000000000080005007a010401a80016002000104004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000600)={0x0, 0x21, &(0x7f0000000040)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73f72cc9f0ba1f848390000005e100602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x20000800) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0xffffffffffffffff, 0xffffffffffffffff}, 0x0, &(0x7f0000000080)}, 0x20) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x19, 0x10, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000004308000018110000", @ANYRES32=r4, @ANYBLOB="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", @ANYRES32=r10, @ANYBLOB="0000000000000000184100000300000000000000000000009500000000000000"], &(0x7f00000007c0)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x50, '\x00', 0x0, @cgroup_sockopt=0x16, r3, 0x8, &(0x7f0000000800)={0xa, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, r7, 0x4, &(0x7f0000000840)=[r10, r4, r10, r4, r10], &(0x7f0000000880)=[{0x4, 0x3, 0x8}, {0x3, 0x4, 0xe, 0xc}, {0x5, 0x3, 0x9, 0xa}, {0x3, 0x4, 0x1, 0x8}], 0x10, 0x6c}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000980)=@o_path={&(0x7f0000000200)='./file0\x00', r11, 0x4000, r0}, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000001680)={'team0\x00', 0x200}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x8101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x58c8, 0x200000000, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xa}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r12 = socket$kcm(0x22, 0x2, 0x21) setsockopt$sock_attach_bpf(r12, 0x6, 0x16, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRESDEC=r8], 0x0, 0x51, 0x0, 0x0, 0x2}, 0x28) 33.980757268s ago: executing program 1 (id=3440): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, @perf_bp={0x0}, 0xa40, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x2, 0x4, 0x1}, 0x50) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340)=0xffffffffffffffff, 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000440)={0x0, r0}, 0x8) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000540)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000080000850000002d00000018110000", @ANYRES32=r0, @ANYRESDEC], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x22180, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) socket$kcm(0xa, 0x2, 0x73) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r4, &(0x7f0000000500), 0x0}, 0x20) r5 = socket$kcm(0xa, 0x2, 0x0) socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r5, 0x0, 0x4, 0x0, 0x0) close(0xffffffffffffffff) r6 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188e6b62aa73f72cc9f0ba1f8483d0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r6, &(0x7f00000017c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x80fe, 0x7, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x12, 0x2}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000004c0)="7f", 0x1}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000084000000070000007f00000000000000b8"], 0xd0}, 0x480c4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000001c0), 0x45) close(0xffffffffffffffff) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) 33.498688162s ago: executing program 2 (id=3441): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = socket$kcm(0x10, 0x2, 0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x410300, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000aecd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad94ed406f21caf5adcf920569c00cc1199684fa75814709fea019af247c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c1faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6fab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b79db2e3d5986c82b5aa94e539b204d58f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c7160ec83070000020000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72b0000000000001cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2cc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78ac02ca3cdf6a662db1c9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad943e392955f4f979ea13201bafedcd2063d11dd665647223c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd89346cfbb5567e54d3504723177d356c4604b7a492ecec37e83efceefd7ca2533659edc8be05cc85451c6a14507434eb54b6f43caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffca9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a294351c5356c1d06c92cf8ce3c7c56cd31121624d74517fd3666277f670e812b28e2f30d035cee5d0e77a3c7220000000000000005a474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f034b8d3ebce68663ef5af469abe75b314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041e12282ce24463aaf28345bd168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f09000000000000004fc4bda3453602004535a976eacd3adaa4d2ee6fe0d072ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d401adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb40f7f02f750d6c977a191852c9ae031db044b2353199546609f9f69a6cfefdf879d447df53f3b9b70d10355b00300000000000000553d18a6cc50feeb7bfad9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f58fab987baab97a9bfbd8f185b5631820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe527340935aa3c0b4f3f45b418a18217747ae442e31560e5b741445ea2a1acee2a81425ff000000d2a0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51423b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f88735fce5115dc83ed73d8ee4a91322608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf5000000000000fa08ad0631c4b839688b22c4da2a6bc4cf45854d221a2d5f96bc64647f15daa2ba79cd0f4254ed55217912ef84bd2927df82fc061aef2920c49b2a90886da75561173fa186cb7ee86dd4285c4721eb428c953296bb2f5d825da54dbef07c1b349b4901e093d13e6b9a0000009b5b22e887bc061d40bcaf0aa18623fd9b7179ccc692ba74b531b65c4decf9d080a8ac7e82d4cde1267aa64b2a94fd87a009e6742c2ddc3a9d7eccbb1831b1fa218277c2814a91cab7cb59c697166d6f1bb1a360470000000000000000000000000000000000000000000000000000f9f9b4ce7e871f507084c8c88e0652decbe579b03ed84ea94597dd1059620a050f69ea03b99b4e19d35f4a3b54e96ae2172effecec80f6baa4bf69a6ebf5392882df78b0983e662dc0cb64b77f3f006b6b25443197ae93f0be6de5a703d003f00720943c0e4b33af00000000000000000021a688b2d7007fcc4b59f719afb0b3b7e0aee306ca70fe42bf4984a68f40e1fc043a03a17e4744359b87dc27c82d51cbeb64e52a28daeb6a78d6fe06181ecc840000"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, &(0x7f0000000040)=@raw=[@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xec4}}], &(0x7f0000000180)='syzkaller\x00', 0x2, 0x79, &(0x7f0000000440)=""/121, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0xd, 0x1, 0x6}, 0x10, 0x0, 0x0, 0xa, &(0x7f00000005c0)=[r3, r3, r3, r3], &(0x7f0000000700)=[{0x0, 0x3, 0xd, 0x5}, {0x1, 0x4, 0x7, 0x2}, {0x1, 0x2, 0x10, 0x6}, {0x5, 0x1, 0x3, 0x1}, {0x2, 0x4, 0x0, 0x2}, {0x3, 0x4, 0xd, 0xc}, {0x4, 0x5, 0x0, 0xa}, {0x3, 0x4, 0xa, 0x7}, {0x5, 0x1, 0x783, 0x8}, {0x2, 0x2, 0xf, 0x5}], 0x10, 0xbc98}, 0x94) r4 = socket$kcm(0xa, 0x7, 0x0) recvmsg$kcm(r4, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x43) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r5, 0x5421, 0x604000000000000) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, &(0x7f0000000040)=""/155, 0x1000000, 0x9b, 0x1}, 0x20) sendmsg$inet(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000012006b03000000d86e6c1d000a847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r6 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r6, &(0x7f0000000240)=ANY=[@ANYBLOB="e5450000120091ef"], 0xfe33) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=ANY=[@ANYBLOB="0600000004000000be7000005c"], 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x60, 0x60, 0x7, [@union={0xa, 0x7, 0x0, 0x5, 0x1, 0x4, [{0x6, 0x3}, {0xa, 0x3, 0x8000}, {0x10, 0x1, 0x1}, {0x1, 0x1, 0x5}, {0x3, 0x5, 0xffff}, {0xf, 0x4, 0x4}, {0xe, 0x3, 0xa70e}]}]}, {0x0, [0x30, 0x5f, 0x30, 0x5f, 0x61]}}, &(0x7f0000000600)=""/224, 0x7f, 0xe0, 0x1, 0x6, 0x10000, @value=r3}, 0x28) 33.360606697s ago: executing program 4 (id=3442): socket$kcm(0x10, 0x400000002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x20, &(0x7f0000000bc0)={&(0x7f0000000a80)=""/11, 0xb, 0x0, &(0x7f0000000ac0)=""/219, 0xdb}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0x3, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r1, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000d80)}, 0x0, 0x0, 0x25, 0x8, 0x2, 0xfffffffc, 0x0, 0x0, 0x8}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0xc2ba, 0x4, 0x4000000, 0x106e, 0xa641}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x20, 0x3, &(0x7f0000001240)=ANY=[], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) close(0xffffffffffffffff) socketpair(0x25, 0x6, 0x5, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r7, &(0x7f0000000100)={&(0x7f0000000a80)=@hci={0x1f, 0x300, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000013c0)="62031400d70000000010122f1eafbcf72be12b30087f5c582d26116642c4", 0x1e}], 0x1}, 0x4041) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x1, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = syz_clone(0xa0800, 0x0, 0x0, &(0x7f0000000740), &(0x7f0000000780), 0x0) perf_event_open(&(0x7f0000000600)={0x5, 0x80, 0x9, 0x80, 0xc, 0x99, 0x0, 0x4, 0xfc918, 0xd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x4, 0x5}, 0x3005, 0x5, 0x5, 0x5, 0x0, 0x4, 0x187c, 0x0, 0x8001, 0x0, 0x5414}, r8, 0x2, 0xffffffffffffffff, 0x1) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x36}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c040, 0x7, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 33.108899365s ago: executing program 3 (id=3443): r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8916, &(0x7f0000000040)={'lo\x00', @random="021f1400"}) 32.96083578s ago: executing program 0 (id=3444): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x14, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071121d000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x30, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x1f, 0x0, 0x1, 0x2000, 0x10000}, 0x28) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd63"], 0xfdef) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x52}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0xb, 0x6, 0x2, 0x0, 0x0, 0xffff, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x2, 0x1}, 0x40, 0x0, 0x0, 0x5, 0x7, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0xfb90}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x8) sendmsg$inet(r3, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r2, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2f00020b, 0xe, 0x0, &(0x7f0000000240)="63ecedf7b98637fa929140ac5ea1", 0x0, 0xefdf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair(0x1f, 0x800, 0x6, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000000e40)={&(0x7f0000000340)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000d80)=[{&(0x7f0000000380)="d79c5a9ce30eced7ada0b3c079250c4f1d51de9d38b14ffd83f85ef748cb87d3db40e1138e92879e9b57dc512089a922778ad61dcf3aca6c1eb73198e415f3b1eb717c664f9f84c5a1", 0x49}, {&(0x7f0000000bc0)="9ac621155eee37d63d5346ae004248bd3d20d5b1eaa6c710bd505390ec8aa3f45bfc4c604860201de134604d2f5625bb8bd34dcfe04e5960ba037780a14546754c63ef2a2e6176c2670a2b849eedb1ea6b82ac1009d75582d36805f1e1aef23895422a9225e8f5287e4a5769f1d681a1cca0183e8d7746a2ab424e920dfad311d7117b971151bd7f6b5ff81971d5724208ce68861db42c198cd3973826fdb0a1df299aea87a1dfdae24e701bc0dbbb21626a3f8237c74f75d9aaf623336d7e2d36af6fc467c14672293a213845d9aade2fb81ccb3ec72a07b1a05250869d389ca75011063e65baaafad779de68c393", 0xef}, {&(0x7f0000000cc0)="0fcd22004e1abf4f674eef534dfbdc632dd563bb457b04cf112f6d486b37056425e124f325dd64720fdd2fcb850962836ae954e43e5911b817daca2ea32f3dc90ea9a863829944cf549fb2fcf9dc7122f2332c2afb8f9012b00252e9a6db795c59a47d78525d730f97dd5ab5f9e0dd88ce0ed17328c42fca379fb7e5308970783130947be06264b9a750dc9ea6a777f87e7027144170c66e0522c3e975b41f3eb1890eb5107d31a7f56662fcd201", 0xae}], 0x3, &(0x7f0000000540)=[@ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xac}}, @ip_retopts={{0x78, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x44, 0xb5, 0x3, 0x2, [{@rand_addr=0x64010100, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}, {@private=0xa010100, 0x5}, {@remote, 0x5}, {@remote, 0x800}, {@loopback, 0x4}, {@multicast2, 0x12}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}]}, @timestamp={0x44, 0x8, 0xf7, 0x0, 0x2, [0x6]}, @lsrr={0x83, 0x1b, 0x9c, [@private=0xa010102, @rand_addr=0x64010100, @multicast1, @rand_addr=0x64010102, @multicast2, @private=0xa010101]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x80}}], 0xc0}, 0x40) setsockopt$sock_attach_bpf(r3, 0x1, 0x41, &(0x7f0000000040)=r4, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$kcm(0x10, 0x2, 0x10) 32.94465075s ago: executing program 1 (id=3445): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x323, 0xc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x1e, 0x4, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="f8", 0x1}], 0x1}, 0x5744935563dc5412) sendmsg$kcm(r0, &(0x7f00000006c0)={0x0, 0xffffffffffffff16, 0x0}, 0x44080) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000900)="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", 0x148}], 0x1}, 0x44000) sendmsg(r0, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003140)=[{&(0x7f0000002d80)="0f", 0x1}, {0x0, 0x2}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x4d}, {0x0}], 0x9}, 0x0) 31.98633071s ago: executing program 1 (id=3447): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x10, 0xf, &(0x7f0000000500)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffe}, {{0x18, 0x1, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000000}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a0, &(0x7f00000000c0)='.9\xb7\xa8(\x05\xb6\xbc\xdc\x11\x85\xb2\xda\xda%\x00\xe9\a\xd9\x12s\x03\x00\xd0O\x87\x8fI\xa5\xbbHd\xfd\x19l\xca\x89\x8e)P\x18\x14\'\x81\n\x02\\\xca\f\xc30p{\x94\xd8wn>\btn\xc3\xfd\xca\x0f\xdb\xab\xae\x04\x0e*\xb4\x06@v\xfd\x86\x9d\xb7\x801\x80\x9a\xc0N,\x8d\x13\x11eJ\x10CQ\xb9ab\xf311\xf9\x03\xd5\xec\x9fa7S\x8b\xdan\xd9W#\x06&P)\x1ak~LB\xa4\f@\xff\xb2]\xddk\xa9\xbd}\xefp}\x90\xd0\xdb\xcc\xf9\xe8\":O\f\x98D\xf07\\F\b\xe2\x82\xfa\xe3L\xb5\x8d\xe3\x87\xa6v\x9a\xb6\xf4\x80\x85\";\xe5\xdf\xa2\xbd\xf9}\\\xbe?\x93|\xcbg\x1c~\xb6Y\xaa\xf3\xd6%\x89\xe4\x1b\xb6.f\x12\xe5\xabm \xb6\\\xb9T\fZma\xb9\xd7xzS\xd3\x8b\x02Qj\xf5\xb7X\xc6\b\x19.\xae\xdd\xa9\xd0\xf2\xdc\x1f\xf1z\v\xf9\xc3\xf0V5D&a\xf6^\x94\x19\xe0\b\xf0\xdcD{(\x1b\xf9|\xe9\xa1]\xdc\xe8\xb8\xdb\xd5<2\x96\'s\xe7\x84\x82\xea\xbb\xff\xb7\xb8%-?\x83\x9cwOe|\xb4\xef\xb6\xf4\xdf\xbf\x1e\xc6OSs\xc4_6H\xde\x9eN\x12\x9cH\x86\x824\xaf\x177\t:\xe3_w-\xbf\x1b\x14\xc7\x1d\xb4\x99\x1f\xadf\x9e\xc7X\x040\x9e^ \xc9m\x9ek\x86\t\x9f \xc8\xcf\xf5\x80(\xd9l\x91\xf7x\x7f\xaa\xd9\xd4nO\xa0\xa0M6\v.\xd8[\xc9\xa4` \x8e\x1a\xb9\xd5\xa1B\xe5\xcd\xc1\xefPHG-\xf5\x0e\xec\x13l\xd1`A/\xef\xa6\xe7\f\x8c') r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x5, 0x3, 0x9fa, 0x85, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r2}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r2}, 0x38) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0}, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000680)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007200000018110000", @ANYRESOCT, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r4}, 0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x58, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0900000007000000060000000f00000000000400", @ANYRES32=r2, @ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00\x00\bM\x00\x00\x00\x00\x00', @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="0c00000004000000000000000000000000000000000000be6a"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x19, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000000000100000000000900000018110000", @ANYRES32=r3, @ANYBLOB="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"], &(0x7f0000000740)='GPL\x00', 0x0, 0x8a, &(0x7f0000000840)=""/138, 0x41100, 0x0, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000940)={0x0, 0x9, 0x9, 0x9c}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000a00)=[{0x0, 0x5, 0xf}, {0x0, 0x5, 0x0, 0x5}, {0x4, 0x4, 0x1, 0xb}, {0x3, 0xffffffff, 0xe, 0x9}, {0x1, 0x4, 0x5, 0x4}], 0x10, 0x9}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r6}, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x4, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000ff000000000000090000002c0000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000640)={&(0x7f0000000000)={0x2a, 0x0, @broadcast}, 0x10, 0x0}, 0x0) close(r7) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000015006bab9e3fe3d86e17aa31026b876c1d0000007ea60847160af36504000a0038001d000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f4d4930400e7861000bdd7fcf50ea1e190b4714751d0c9", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8800) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="d8000000100081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e1209000d0000000401a80016000a00144006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 31.9861539s ago: executing program 3 (id=3448): r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000000)=@l2tp6={0xa, 0xf5ff, 0x0, @dev, 0x6, 0x10000}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000940)="a010", 0x2}], 0x1}, 0xd0a0) 31.763768457s ago: executing program 4 (id=3449): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0xc8, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce81ea038800fe08000e40000200875a65969ff57b00ff020000000000000000000000000001e2607e15e697ab"], 0xfdef) 31.425767887s ago: executing program 3 (id=3450): socketpair$unix(0x1, 0x1, 0x0, 0x0) socket$kcm(0x29, 0x7, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0x1}, 0x201, 0x0, 0xc2ba, 0x0, 0x4000000, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000280)={r2}, 0x8) perf_event_open$cgroup(&(0x7f0000000180)={0x0, 0x80, 0x1, 0xe, 0x7f, 0xff, 0x0, 0x8, 0xc0c81, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000000), 0x2}, 0x80, 0x27, 0x5, 0x1, 0xf, 0xffffffff, 0x3, 0x0, 0x9d, 0x0, 0x8}, r2, 0xc, r0, 0x1) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)="2e00000038000511d25a80698c63940d0124fc602f6e35400a000200001ec00037153e370a00018025581d00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x8010) 31.268681242s ago: executing program 2 (id=3451): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRES32], 0x48) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="2d64657669636573202d696f202b72646d612006667265657a6572c9148ea571f5ac30c8e640204e696f207ec9c132f201c6941f124237295b3cddc388c5b1438137c8e134c221d435d5dffec6d5522eb8d8aeeb555fb5120701e200495526f469ca80324c181ef965e4ba0e642dedaa1678d32f2715b4fc4c04d6a0caa20e2c882bd93f3a01a664890487d5cd6bb55cbf61ed62975136c10dc13d32676e18c77947a11b07bcd441b19ae647f153e5e93c17389242115aad2e1191717496a1728dbd1db1a8d250c3219ed61d"], 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36}, 0x94) socketpair(0x2a, 0x6, 0x81, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) perf_event_open$cgroup(&(0x7f0000000040)={0x0, 0x80, 0xb2, 0xe0, 0x3, 0x0, 0x0, 0x9, 0x1c440, 0x9, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x405, 0x0, @perf_config_ext={0x1000, 0x6ba3b734}, 0x10, 0x8, 0x2, 0x8, 0x10001, 0x6, 0xdb7d, 0x0, 0x7, 0x0, 0x8000}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f00000001c0)={r1, r0}, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}, 0x105bcc, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f00000002c0)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000500eab556a705251ec6a394ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20040000) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r5, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r0}, &(0x7f0000000240), &(0x7f0000000400)}, 0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r3, 0xc008240a, &(0x7f00000002c0)=ANY=[@ANYBLOB="04000000000b18e9f8b9912e98612a257d3600000000000000"]) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], 0x0}, 0x94) r6 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r6, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r6, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b8825fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8b06, 0x0) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r8, 0xc004743e, 0x110e22fff6) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r9, 0x4004743d, 0x110e22fff6) write$cgroup_type(r9, &(0x7f0000000280), 0xfffffeed) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) 31.187159965s ago: executing program 4 (id=3452): socket$kcm(0x10, 0x2, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x81, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1224, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x29, 0x7, 0x0) r3 = socket$kcm(0x29, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000480)={r3}) socketpair$unix(0x1, 0x5, 0x0, 0x0) r4 = socket$kcm(0x11, 0x3, 0x300) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r5, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0x10, &(0x7f0000000b40)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001a00), 0x101d0}], 0x4}, 0x0) recvmsg(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000b80)=""/4096, 0x1000}], 0x8}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0, &(0x7f0000000200)=[{}], 0x8, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0xb6, 0x8, 0x0, 0x0}}, 0x10) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r8, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000004c0)={r6, 0xffffffffffffffff}, 0x4) r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000009c0)=@o_path={&(0x7f0000000980)='./file0\x00', 0x0, 0x10, r4}, 0x18) r12 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a80)=@bpf_ext={0x1c, 0x1c, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, {}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x547f}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r10}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000006c0)='syzkaller\x00', 0xa9, 0x85, &(0x7f0000000840)=""/133, 0x41000, 0x9, '\x00', r7, 0x0, r9, 0x8, &(0x7f0000000900)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000940)={0x7, 0xb, 0x6, 0x3}, 0x10, 0x149a7, r1, 0x1, &(0x7f0000000a00)=[r11], &(0x7f0000000a40)=[{0x4, 0x5, 0xa, 0x1}], 0x10, 0x1ff}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r12, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000000)=[0x0, 0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) r13 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="140000002d000b02d25a806f8c6394f9031a04000a74010005350300000000000080", 0x22}], 0x1}, 0x0) 31.132038707s ago: executing program 1 (id=3453): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r1, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f3, &(0x7f0000000080)) 31.0179183s ago: executing program 3 (id=3454): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x100000001, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x120a0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2b8, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x21, 0x2, 0x2) r4 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r4, 0xc008240a, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23}, 0x94) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe92f5f45114c79f7}, 0x1003b9, 0x7, 0x2000, 0xa, 0x1, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r5, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0xd, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32, @ANYBLOB, @ANYRES16], &(0x7f0000000300)='GPL\x00', 0x2, 0x100a, &(0x7f0000002500)=""/4106, 0x0, 0x5}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f0000000040)}, 0x20) setsockopt$sock_attach_bpf(r3, 0x107, 0x2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000020000000000c0000000c003be322e4c7e2dd3340000000000d000000000030612e5f5f5f5f"], &(0x7f00000004c0)=""/164, 0x2d, 0xa4, 0x1}, 0x28) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f90624fc60040011000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 16.129488486s ago: executing program 32 (id=3451): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRES32], 0x48) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="2d64657669636573202d696f202b72646d612006667265657a6572c9148ea571f5ac30c8e640204e696f207ec9c132f201c6941f124237295b3cddc388c5b1438137c8e134c221d435d5dffec6d5522eb8d8aeeb555fb5120701e200495526f469ca80324c181ef965e4ba0e642dedaa1678d32f2715b4fc4c04d6a0caa20e2c882bd93f3a01a664890487d5cd6bb55cbf61ed62975136c10dc13d32676e18c77947a11b07bcd441b19ae647f153e5e93c17389242115aad2e1191717496a1728dbd1db1a8d250c3219ed61d"], 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36}, 0x94) socketpair(0x2a, 0x6, 0x81, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) perf_event_open$cgroup(&(0x7f0000000040)={0x0, 0x80, 0xb2, 0xe0, 0x3, 0x0, 0x0, 0x9, 0x1c440, 0x9, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x405, 0x0, @perf_config_ext={0x1000, 0x6ba3b734}, 0x10, 0x8, 0x2, 0x8, 0x10001, 0x6, 0xdb7d, 0x0, 0x7, 0x0, 0x8000}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f00000001c0)={r1, r0}, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}, 0x105bcc, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f00000002c0)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000500eab556a705251ec6a394ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20040000) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r5, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r0}, &(0x7f0000000240), &(0x7f0000000400)}, 0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r3, 0xc008240a, &(0x7f00000002c0)=ANY=[@ANYBLOB="04000000000b18e9f8b9912e98612a257d3600000000000000"]) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], 0x0}, 0x94) r6 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r6, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r6, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b8825fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8b06, 0x0) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r8, 0xc004743e, 0x110e22fff6) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r9, 0x4004743d, 0x110e22fff6) write$cgroup_type(r9, &(0x7f0000000280), 0xfffffeed) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) 15.98219489s ago: executing program 33 (id=3452): socket$kcm(0x10, 0x2, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x81, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1224, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x29, 0x7, 0x0) r3 = socket$kcm(0x29, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000480)={r3}) socketpair$unix(0x1, 0x5, 0x0, 0x0) r4 = socket$kcm(0x11, 0x3, 0x300) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r5, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0x10, &(0x7f0000000b40)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001a00), 0x101d0}], 0x4}, 0x0) recvmsg(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000b80)=""/4096, 0x1000}], 0x8}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0, &(0x7f0000000200)=[{}], 0x8, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0xb6, 0x8, 0x0, 0x0}}, 0x10) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r8, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000004c0)={r6, 0xffffffffffffffff}, 0x4) r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000009c0)=@o_path={&(0x7f0000000980)='./file0\x00', 0x0, 0x10, r4}, 0x18) r12 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a80)=@bpf_ext={0x1c, 0x1c, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, {}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x547f}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r10}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000006c0)='syzkaller\x00', 0xa9, 0x85, &(0x7f0000000840)=""/133, 0x41000, 0x9, '\x00', r7, 0x0, r9, 0x8, &(0x7f0000000900)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000940)={0x7, 0xb, 0x6, 0x3}, 0x10, 0x149a7, r1, 0x1, &(0x7f0000000a00)=[r11], &(0x7f0000000a40)=[{0x4, 0x5, 0xa, 0x1}], 0x10, 0x1ff}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r12, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000000)=[0x0, 0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) r13 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="140000002d000b02d25a806f8c6394f9031a04000a74010005350300000000000080", 0x22}], 0x1}, 0x0) 15.6746805s ago: executing program 0 (id=3457): r0 = socket$kcm(0x11, 0x2, 0x300) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000580)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12t\x02\x006\xe3\xd7\\b\x00\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x01\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(\x04\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x02\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x04.\x9aL\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x4000}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f3, &(0x7f0000000080)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond0\x00', 0x4000}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8993, &(0x7f0000000080)) r4 = perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x9e, 0xd, 0x2, 0xe, 0x0, 0xffffffffffffffff, 0x2c001, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x2, @perf_config_ext={0x1ff, 0x4000000000000}, 0x10100, 0x3, 0x6, 0x3, 0x6, 0x7, 0x2, 0x0, 0x9, 0x0, 0x4}, 0x0, 0x10, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f0000000200)=0x5) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x1f, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef438000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0) 15.585640542s ago: executing program 34 (id=3453): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r1, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f3, &(0x7f0000000080)) 15.463435346s ago: executing program 35 (id=3454): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x100000001, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x120a0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2b8, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x21, 0x2, 0x2) r4 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r4, 0xc008240a, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23}, 0x94) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe92f5f45114c79f7}, 0x1003b9, 0x7, 0x2000, 0xa, 0x1, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r5, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0xd, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32, @ANYBLOB, @ANYRES16], &(0x7f0000000300)='GPL\x00', 0x2, 0x100a, &(0x7f0000002500)=""/4106, 0x0, 0x5}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f0000000040)}, 0x20) setsockopt$sock_attach_bpf(r3, 0x107, 0x2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000020000000000c0000000c003be322e4c7e2dd3340000000000d000000000030612e5f5f5f5f"], &(0x7f00000004c0)=""/164, 0x2d, 0xa4, 0x1}, 0x28) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f90624fc60040011000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 0s ago: executing program 36 (id=3457): r0 = socket$kcm(0x11, 0x2, 0x300) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000580)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12t\x02\x006\xe3\xd7\\b\x00\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x01\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(\x04\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x02\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x04.\x9aL\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x4000}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f3, &(0x7f0000000080)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond0\x00', 0x4000}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8993, &(0x7f0000000080)) r4 = perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x9e, 0xd, 0x2, 0xe, 0x0, 0xffffffffffffffff, 0x2c001, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x2, @perf_config_ext={0x1ff, 0x4000000000000}, 0x10100, 0x3, 0x6, 0x3, 0x6, 0x7, 0x2, 0x0, 0x9, 0x0, 0x4}, 0x0, 0x10, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f0000000200)=0x5) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x1f, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef438000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0) kernel console output (not intermixed with test programs): 4.003484][T12796] netlink: 'syz.4.2755': attribute type 39 has an invalid length. [ 624.184961][T12801] netlink: 'syz.1.2756': attribute type 39 has an invalid length. [ 624.360194][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.366555][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.505732][T12808] netlink: 'syz.4.2759': attribute type 27 has an invalid length. [ 625.912030][T12831] netlink: 'syz.4.2768': attribute type 39 has an invalid length. [ 625.940554][T12838] netlink: 'syz.0.2767': attribute type 10 has an invalid length. [ 626.007922][T12838] device geneve0 entered promiscuous mode [ 627.106124][T12865] netlink: 'syz.0.2779': attribute type 27 has an invalid length. [ 627.317701][T12873] netlink: 'syz.4.2782': attribute type 39 has an invalid length. [ 630.491795][T12887] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2786'. [ 630.777232][T12885] netlink: 'syz.4.2787': attribute type 3 has an invalid length. [ 630.793369][T12885] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2787'. [ 630.858840][T12895] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.2790'. [ 631.426465][T12908] netlink: 'syz.1.2795': attribute type 39 has an invalid length. [ 631.727039][T12903] netlink: 'syz.2.2794': attribute type 3 has an invalid length. [ 631.737912][T12903] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2794'. [ 632.602839][T12925] netlink: 'syz.4.2801': attribute type 3 has an invalid length. [ 632.652950][T12925] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2801'. [ 634.215780][T12953] netlink: 'syz.4.2811': attribute type 3 has an invalid length. [ 634.260031][T12953] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2811'. [ 634.704288][T12974] netlink: 'syz.0.2819': attribute type 39 has an invalid length. [ 635.155884][T12974] device hsr_slave_1 left promiscuous mode [ 636.405293][T13006] netlink: 'syz.4.2827': attribute type 3 has an invalid length. [ 636.417371][T13006] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2827'. [ 637.068992][T13019] netlink: 'syz.2.2831': attribute type 21 has an invalid length. [ 637.088126][T13019] IPv6: NLM_F_CREATE should be specified when creating new route [ 637.389731][T13035] netlink: 'syz.3.2835': attribute type 27 has an invalid length. [ 637.419341][T13035] netlink: 2418 bytes leftover after parsing attributes in process `syz.3.2835'. [ 638.321409][T13047] netlink: 830 bytes leftover after parsing attributes in process `syz.4.2838'. [ 639.082726][T13059] netlink: 'syz.0.2842': attribute type 3 has an invalid length. [ 639.156685][T13061] netlink: 'syz.4.2843': attribute type 3 has an invalid length. [ 639.178207][T13059] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2842'. [ 639.183338][T13061] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2843'. [ 639.894734][T13087] netlink: 'syz.0.2850': attribute type 16 has an invalid length. [ 639.988802][T13087] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2850'. [ 640.038551][T13080] delete_channel: no stack [ 640.587566][T13103] netlink: 'syz.4.2854': attribute type 3 has an invalid length. [ 640.607401][T13103] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2854'. [ 641.223546][T13114] netlink: 'syz.1.2858': attribute type 3 has an invalid length. [ 641.256653][T13106] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2856'. [ 641.273913][T13114] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2858'. [ 641.456267][T13119] netlink: 'syz.2.2860': attribute type 3 has an invalid length. [ 641.492894][T13119] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2860'. [ 642.348749][T13138] netlink: 'syz.1.2868': attribute type 3 has an invalid length. [ 642.382646][T13138] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2868'. [ 643.652298][T13163] netlink: 'syz.4.2877': attribute type 3 has an invalid length. [ 643.694644][T13163] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2877'. [ 643.739861][T13168] netlink: 'syz.0.2875': attribute type 10 has an invalid length. [ 643.761557][T13159] delete_channel: no stack [ 644.488005][T13187] netlink: 'syz.4.2882': attribute type 27 has an invalid length. [ 644.611686][T13185] netlink: 'syz.3.2881': attribute type 3 has an invalid length. [ 644.632272][T13185] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2881'. [ 644.915500][T13196] netlink: 'syz.1.2884': attribute type 27 has an invalid length. [ 645.774699][T13223] netlink: 'syz.1.2893': attribute type 3 has an invalid length. [ 645.789969][T13223] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2893'. [ 645.833292][T13227] FAULT_INJECTION: forcing a failure. [ 645.833292][T13227] name failslab, interval 1, probability 0, space 0, times 0 [ 645.889608][T13227] CPU: 1 PID: 13227 Comm: syz.2.2895 Not tainted syzkaller #0 [ 645.897164][T13227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 645.907271][T13227] Call Trace: [ 645.910759][T13227] [ 645.913718][T13227] dump_stack_lvl+0x188/0x24e [ 645.918459][T13227] ? show_regs_print_info+0x12/0x12 [ 645.923716][T13227] ? load_image+0x400/0x400 [ 645.928271][T13227] ? __might_sleep+0xd0/0xd0 [ 645.932902][T13227] ? __lock_acquire+0x7d10/0x7d10 [ 645.937978][T13227] should_fail_ex+0x399/0x4d0 [ 645.942682][T13227] should_failslab+0x5/0x20 [ 645.947222][T13227] slab_pre_alloc_hook+0x59/0x310 [ 645.952287][T13227] kmem_cache_alloc_node+0x5a/0x320 [ 645.957498][T13227] ? __alloc_skb+0xfc/0x7e0 [ 645.962037][T13227] __alloc_skb+0xfc/0x7e0 [ 645.966381][T13227] ? netlink_autobind+0xda/0x300 [ 645.971335][T13227] netlink_sendmsg+0x654/0xbd0 [ 645.976143][T13227] ? netlink_getsockopt+0x550/0x550 [ 645.981361][T13227] ? aa_sock_msg_perm+0x94/0x150 [ 645.986312][T13227] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 645.991607][T13227] ? security_socket_sendmsg+0x7c/0xa0 [ 645.997083][T13227] ? netlink_getsockopt+0x550/0x550 [ 646.002300][T13227] ____sys_sendmsg+0x5be/0x970 [ 646.007093][T13227] ? __sys_sendmsg_sock+0x30/0x30 [ 646.012151][T13227] ? __import_iovec+0x315/0x500 [ 646.017019][T13227] ? import_iovec+0x6f/0xa0 [ 646.021540][T13227] ___sys_sendmsg+0x2a2/0x360 [ 646.026248][T13227] ? __sys_sendmsg+0x290/0x290 [ 646.031056][T13227] ? __lock_acquire+0x7d10/0x7d10 [ 646.036129][T13227] __se_sys_sendmsg+0x1bb/0x2a0 [ 646.041006][T13227] ? __x64_sys_sendmsg+0x80/0x80 [ 646.045995][T13227] ? lockdep_hardirqs_on+0x94/0x140 [ 646.051211][T13227] do_syscall_64+0x4c/0xa0 [ 646.055641][T13227] ? clear_bhb_loop+0x60/0xb0 [ 646.060331][T13227] ? clear_bhb_loop+0x60/0xb0 [ 646.065021][T13227] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 646.070927][T13227] RIP: 0033:0x7f6ca979ce59 [ 646.075352][T13227] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 646.094989][T13227] RSP: 002b:00007f6caa678028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 646.103434][T13227] RAX: ffffffffffffffda RBX: 00007f6ca9a15fa0 RCX: 00007f6ca979ce59 [ 646.111416][T13227] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 646.119397][T13227] RBP: 00007f6caa678090 R08: 0000000000000000 R09: 0000000000000000 [ 646.127375][T13227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 646.135362][T13227] R13: 00007f6ca9a16038 R14: 00007f6ca9a15fa0 R15: 00007ffea2261ab8 [ 646.143367][T13227] [ 646.347379][T13232] netlink: 'syz.2.2896': attribute type 27 has an invalid length. [ 646.582683][T13243] netlink: 'syz.1.2899': attribute type 27 has an invalid length. [ 647.859027][T13268] netlink: 'syz.0.2910': attribute type 3 has an invalid length. [ 647.880984][T13268] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2910'. [ 648.520395][ T8570] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.563145][T13293] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 648.574024][T13293] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 648.583268][T13293] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 648.598011][T13293] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 648.614621][T13293] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 648.622936][T13293] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 648.668201][ T8570] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.810450][ T8570] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.827407][T13296] netlink: 'syz.1.2919': attribute type 10 has an invalid length. [ 648.872281][T13296] team0: Port device wlan1 removed [ 648.973015][T13292] delete_channel: no stack [ 649.000913][ T8570] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.799393][T13325] netlink: 'syz.4.2925': attribute type 3 has an invalid length. [ 649.813236][T13325] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2925'. [ 650.680611][T13293] Bluetooth: hci4: command 0x0409 tx timeout [ 652.538934][T13291] chnl_net:caif_netlink_parms(): no params data found [ 652.705352][T13339] netlink: 'syz.3.2928': attribute type 21 has an invalid length. [ 652.740507][T13339] netlink: 'syz.3.2928': attribute type 1 has an invalid length. [ 652.748315][T13339] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2928'. [ 652.758339][ T4285] Bluetooth: hci4: command 0x041b tx timeout [ 652.978097][T13291] bridge0: port 1(bridge_slave_0) entered blocking state [ 652.985831][T13291] bridge0: port 1(bridge_slave_0) entered disabled state [ 652.994617][T13291] device bridge_slave_0 entered promiscuous mode [ 653.004862][T13291] bridge0: port 2(bridge_slave_1) entered blocking state [ 653.014150][T13291] bridge0: port 2(bridge_slave_1) entered disabled state [ 653.023059][T13291] device bridge_slave_1 entered promiscuous mode [ 653.116624][T13291] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 653.158213][T13291] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 653.732715][T13291] team0: Port device team_slave_0 added [ 653.831438][T13291] team0: Port device team_slave_1 added [ 653.944200][T13369] netlink: 'syz.3.2933': attribute type 16 has an invalid length. [ 653.964951][T13291] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 653.976398][T13369] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2933'. [ 654.000585][T13291] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 654.098254][T13291] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 654.198887][T13369] netlink: 'syz.3.2933': attribute type 10 has an invalid length. [ 654.245777][T13368] delete_channel: no stack [ 654.335650][T13291] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 654.343172][T13291] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 654.388017][T13291] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 654.400145][T13375] netlink: 'syz.4.2935': attribute type 10 has an invalid length. [ 654.451022][T13375] team0: Port device wlan1 removed [ 654.538054][T13372] delete_channel: no stack [ 654.562032][T13382] netlink: 'syz.0.2936': attribute type 41 has an invalid length. [ 654.775019][T13388] netlink: 'syz.3.2938': attribute type 2 has an invalid length. [ 654.780569][T13386] netlink: 'syz.1.2937': attribute type 3 has an invalid length. [ 654.797600][T13386] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2937'. [ 654.810817][T13388] netlink: 'syz.3.2938': attribute type 1 has an invalid length. [ 654.821583][T13388] netlink: 170140 bytes leftover after parsing attributes in process `syz.3.2938'. [ 654.840366][T13293] Bluetooth: hci4: command 0x040f tx timeout [ 654.981005][T13291] device hsr_slave_0 entered promiscuous mode [ 654.988410][T13291] device hsr_slave_1 entered promiscuous mode [ 654.995964][T13291] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 655.004803][T13291] Cannot create hsr debugfs directory [ 655.135884][ T8570] team0: Port device wlan1 removed [ 655.736790][T13403] netlink: 16399 bytes leftover after parsing attributes in process `syz.0.2943'. [ 655.956877][T13402] netlink: 'syz.3.2942': attribute type 3 has an invalid length. [ 655.982527][T13402] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2942'. [ 656.066373][ T8570] device hsr_slave_0 left promiscuous mode [ 656.097456][ T8570] device hsr_slave_1 left promiscuous mode [ 656.138641][ T8570] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 656.159803][ T8570] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 656.200699][ T8570] device bridge_slave_1 left promiscuous mode [ 656.208521][ T8570] bridge0: port 2(bridge_slave_1) entered disabled state [ 656.282396][ T8570] device bridge_slave_0 left promiscuous mode [ 656.335209][ T8570] bridge0: port 1(bridge_slave_0) entered disabled state [ 656.400998][ T8570] device veth1_vlan left promiscuous mode [ 656.417764][ T8570] device veth0_vlan left promiscuous mode [ 656.917438][T13293] Bluetooth: hci4: command 0x0419 tx timeout [ 657.236079][ T8570] team0 (unregistering): Port device team_slave_1 removed [ 657.279484][ T8570] team0 (unregistering): Port device team_slave_0 removed [ 657.624424][ T8570] team0 (unregistering): Port device dummy0 removed [ 658.302605][T13434] netlink: 'syz.0.2958': attribute type 3 has an invalid length. [ 658.333324][T13434] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2958'. [ 658.730999][T13440] delete_channel: no stack [ 658.823967][T13445] netlink: 'syz.4.2951': attribute type 3 has an invalid length. [ 658.940326][T13445] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2951'. [ 659.008631][T13444] netlink: 'syz.3.2949': attribute type 10 has an invalid length. [ 659.033578][T13444] team0: Port device wlan1 removed [ 659.428032][T13291] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 659.491259][T13291] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 659.517321][T13291] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 659.570449][T13291] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 660.306240][T13291] 8021q: adding VLAN 0 to HW filter on device bond0 [ 660.364807][ T8570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 660.478543][ T8570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 660.519286][T13291] 8021q: adding VLAN 0 to HW filter on device team0 [ 660.782851][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 660.809051][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 660.905445][ T4434] bridge0: port 1(bridge_slave_0) entered blocking state [ 660.912687][ T4434] bridge0: port 1(bridge_slave_0) entered forwarding state [ 661.004754][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 661.076116][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 661.126480][ T4434] bridge0: port 2(bridge_slave_1) entered blocking state [ 661.133733][ T4434] bridge0: port 2(bridge_slave_1) entered forwarding state [ 661.241516][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 661.339284][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 661.422001][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 661.548918][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 661.702820][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 661.821606][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 661.929146][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 662.001878][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 662.088565][T13493] device wlan1 entered promiscuous mode [ 662.132836][T13494] netlink: 'syz.0.2963': attribute type 3 has an invalid length. [ 662.158884][T13492] netlink: 'syz.3.2964': attribute type 3 has an invalid length. [ 662.199931][T13494] netlink: 114680 bytes leftover after parsing attributes in process `syz.0.2963'. [ 662.216152][T13492] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2964'. [ 662.320191][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 662.328968][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 662.414380][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 662.467922][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 662.565959][T13291] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 662.850468][T13502] netlink: 'syz.1.2965': attribute type 5 has an invalid length. [ 662.898167][T13502] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2965'. [ 663.533054][T13505] netlink: 'syz.0.2967': attribute type 3 has an invalid length. [ 663.549737][T13505] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2967'. [ 663.904292][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 663.914302][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 663.952835][T13291] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 663.987912][T13524] netlink: 'syz.3.2971': attribute type 3 has an invalid length. [ 664.020321][T13524] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2971'. [ 664.067970][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 664.078035][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 664.153989][T13291] device veth0_vlan entered promiscuous mode [ 664.234748][ T8570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 664.255507][ T8570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 664.298108][ T8570] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 664.355048][ T8570] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 664.825137][T13545] netlink: 'syz.4.2975': attribute type 3 has an invalid length. [ 664.844194][T13545] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2975'. [ 667.117309][T13524] netlink: 'syz.3.2971': attribute type 10 has an invalid length. [ 667.136448][T13524] team0: Port device wlan1 added [ 667.191113][T13291] device veth1_vlan entered promiscuous mode [ 667.284115][ T8578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 667.297257][ T8578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 667.338163][T13291] device veth0_macvtap entered promiscuous mode [ 667.367434][T13291] device veth1_macvtap entered promiscuous mode [ 667.439452][T13291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 667.450957][T13291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 667.462900][T13291] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 667.507356][ T8564] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 667.525093][ T8564] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 667.564532][ T8564] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 667.594214][ T8564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 667.684819][T13291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 667.760256][T13291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 667.853536][T13291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 667.905661][T13291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 667.911524][T13564] netlink: 'syz.4.2979': attribute type 3 has an invalid length. [ 667.925584][T13564] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2979'. [ 667.940644][T13291] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 667.949260][T13558] device wlan1 entered promiscuous mode [ 667.969373][T13561] netlink: 'syz.3.2977': attribute type 3 has an invalid length. [ 667.982918][T13561] netlink: 114680 bytes leftover after parsing attributes in process `syz.3.2977'. [ 668.093553][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 668.129328][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 668.193327][T13291] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.203173][T13291] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.229575][T13291] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.263250][T13291] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.343896][T13575] netlink: 'syz.1.2982': attribute type 27 has an invalid length. [ 668.567088][ T8564] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 668.600536][ T8564] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 668.630203][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 668.721484][ T8564] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 668.729395][ T8564] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 668.764768][ T8576] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 669.008649][T13595] netlink: 'syz.4.2989': attribute type 3 has an invalid length. [ 669.035484][T13595] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2989'. [ 669.239956][T13608] netlink: 'syz.0.2988': attribute type 3 has an invalid length. [ 669.258597][T13608] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2988'. [ 672.125138][T13656] netlink: 'syz.4.2991': attribute type 16 has an invalid length. [ 672.140430][T13656] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2991'. [ 672.172610][T13656] netlink: 'syz.4.2991': attribute type 10 has an invalid length. [ 672.511884][ T4285] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 672.582158][ T4285] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 672.605681][ T4285] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 672.640895][ T4285] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 672.648917][ T4285] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 672.656868][ T4285] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 672.878539][T13653] delete_channel: no stack [ 672.959734][T13656] team0: Port device macvlan0 added [ 673.357853][T13661] chnl_net:caif_netlink_parms(): no params data found [ 673.543577][T13671] netlink: 'syz.0.2994': attribute type 3 has an invalid length. [ 673.600002][T13671] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2994'. [ 673.907745][T13661] bridge0: port 1(bridge_slave_0) entered blocking state [ 673.976132][T13661] bridge0: port 1(bridge_slave_0) entered disabled state [ 674.035586][T13661] device bridge_slave_0 entered promiscuous mode [ 674.105307][T13661] bridge0: port 2(bridge_slave_1) entered blocking state [ 674.132794][T13661] bridge0: port 2(bridge_slave_1) entered disabled state [ 674.154341][T13661] device bridge_slave_1 entered promiscuous mode [ 674.201828][T13661] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 674.214173][T13661] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 674.246767][T13661] team0: Port device team_slave_0 added [ 674.255753][T13661] team0: Port device team_slave_1 added [ 674.283298][T13661] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 674.290519][T13661] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 674.354009][T13661] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 674.428394][T13661] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 674.435654][T13661] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 674.467019][T13661] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 674.670291][T13293] Bluetooth: hci5: command 0x0409 tx timeout [ 674.727832][T13661] device hsr_slave_0 entered promiscuous mode [ 674.745366][T13661] device hsr_slave_1 entered promiscuous mode [ 674.768952][T13661] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 674.818542][T13661] Cannot create hsr debugfs directory [ 675.026921][T13695] netlink: 'syz.3.3003': attribute type 3 has an invalid length. [ 675.044183][T13695] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3003'. [ 675.493765][T13661] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.655536][T13715] netlink: 'syz.3.3006': attribute type 3 has an invalid length. [ 675.668101][T13712] netlink: 'syz.0.3008': attribute type 16 has an invalid length. [ 675.704526][T13715] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3006'. [ 675.734526][T13712] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3008'. [ 675.747626][T13661] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.771339][T13721] netlink: 'syz.0.3008': attribute type 10 has an invalid length. [ 675.806830][T13711] delete_channel: no stack [ 676.002432][T13661] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 676.221824][T13661] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 676.245695][T13719] netlink: 'syz.4.3010': attribute type 3 has an invalid length. [ 676.295302][T13719] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3010'. [ 676.749882][T13293] Bluetooth: hci5: command 0x041b tx timeout [ 677.480754][T13730] netlink: 'syz.2.3014': attribute type 27 has an invalid length. [ 677.551296][T13661] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 677.637571][T13661] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 677.653199][T13661] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 677.715544][T13661] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 678.040742][T13661] 8021q: adding VLAN 0 to HW filter on device bond0 [ 678.071738][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 678.126773][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 678.192649][T13661] 8021q: adding VLAN 0 to HW filter on device team0 [ 678.229860][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 678.249131][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 678.252028][T13746] netlink: 'syz.4.3018': attribute type 3 has an invalid length. [ 678.261241][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 678.272390][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 678.293639][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 678.306239][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 678.314307][T13746] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3018'. [ 678.332763][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 678.339989][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 678.380865][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 678.389223][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 678.412498][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 678.448572][ T8564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 678.472441][ T8564] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 678.509410][ T8564] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 678.574460][ T8564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 678.611856][ T8564] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 678.683943][ T8564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 678.721881][ T8564] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 678.755922][ T8576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 678.777700][ T8576] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 678.802585][T13661] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 678.829945][T13293] Bluetooth: hci5: command 0x040f tx timeout [ 679.694069][T13771] netlink: 'syz.2.3024': attribute type 3 has an invalid length. [ 679.750433][T13771] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3024'. [ 680.176716][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 680.216287][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 680.239040][T13661] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 680.300471][ T8564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 680.312366][ T8564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 680.400605][ T8564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 680.415651][ T8564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 680.453193][T13661] device veth0_vlan entered promiscuous mode [ 680.496660][ T8564] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 680.533408][ T8564] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 680.580720][T13661] device veth1_vlan entered promiscuous mode [ 680.680390][T13661] device veth0_macvtap entered promiscuous mode [ 680.710304][ T8564] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 680.738502][ T8564] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 680.777368][ T8564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 680.811772][ T8564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 680.838129][ T8564] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 680.912777][T13293] Bluetooth: hci5: command 0x0419 tx timeout [ 680.956463][T13661] device veth1_macvtap entered promiscuous mode [ 681.054287][T13661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 681.076931][T13661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 681.087067][T13661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 681.097983][T13661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 681.113616][T13661] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 681.124439][T13661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 681.135301][T13661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 681.166010][T13661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 681.187589][T13661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 681.197936][T13661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 681.211528][T13661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 681.235354][T13661] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 681.247062][ T8570] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 681.266066][ T8570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 681.277323][ T8570] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 681.293569][ T8570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 681.312009][T13799] netlink: 'syz.3.3034': attribute type 3 has an invalid length. [ 681.334972][T13799] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3034'. [ 681.337522][T13661] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.356577][T13661] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.367032][T13661] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.385462][T13661] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.617821][ T8576] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 681.659116][ T8576] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 681.680118][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 681.775237][ T8570] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 681.807750][ T8570] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 681.872318][ T8578] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 682.210878][T13826] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.3040'. [ 682.335725][T13819] device pim6reg1 entered promiscuous mode [ 683.688470][T13840] netlink: 'syz.4.3045': attribute type 3 has an invalid length. [ 683.729182][T13840] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3045'. [ 684.250955][ T4285] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 684.269348][ T4285] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 684.286930][ T4285] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 684.296655][ T4285] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 684.304659][ T4285] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 684.313222][ T4285] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 684.439307][ T8566] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 684.901979][ T8566] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 685.112034][T13855] netlink: 'syz.1.3049': attribute type 3 has an invalid length. [ 685.140730][T13855] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3049'. [ 685.218910][ T8566] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 685.389005][ T8566] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 685.794012][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.800411][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.915802][T13851] chnl_net:caif_netlink_parms(): no params data found [ 686.353955][T13293] Bluetooth: hci0: command 0x0409 tx timeout [ 686.620125][T13890] netlink: 'syz.4.3059': attribute type 3 has an invalid length. [ 686.652431][T13890] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3059'. [ 687.335199][T13903] netlink: 'syz.4.3062': attribute type 3 has an invalid length. [ 687.391831][T13903] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3062'. [ 687.996812][T13851] bridge0: port 1(bridge_slave_0) entered blocking state [ 688.006837][T13851] bridge0: port 1(bridge_slave_0) entered disabled state [ 688.043010][T13907] netlink: 'syz.0.3061': attribute type 3 has an invalid length. [ 688.071460][T13851] device bridge_slave_0 entered promiscuous mode [ 688.080859][T13907] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3061'. [ 688.139587][T13851] bridge0: port 2(bridge_slave_1) entered blocking state [ 688.163858][T13851] bridge0: port 2(bridge_slave_1) entered disabled state [ 688.190917][T13851] device bridge_slave_1 entered promiscuous mode [ 688.429887][T13293] Bluetooth: hci0: command 0x041b tx timeout [ 689.077682][T13851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 689.121468][T13851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 689.307064][T13851] team0: Port device team_slave_0 added [ 689.505052][T13851] team0: Port device team_slave_1 added [ 689.765235][T13851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 689.779817][T13851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 689.837102][T13851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 689.871556][T13851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 689.888803][T13851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 690.001241][T13851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 690.328128][T13952] netlink: 'syz.0.3075': attribute type 3 has an invalid length. [ 690.337153][ T8566] team0: Port device wlan1 removed [ 690.373732][T13952] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3075'. [ 690.509745][T13293] Bluetooth: hci0: command 0x040f tx timeout [ 691.064280][T13851] device hsr_slave_0 entered promiscuous mode [ 691.091188][T13851] device hsr_slave_1 entered promiscuous mode [ 691.117330][T13851] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 691.147115][T13851] Cannot create hsr debugfs directory [ 691.212924][ T8566] device hsr_slave_0 left promiscuous mode [ 691.226295][ T8566] device hsr_slave_1 left promiscuous mode [ 691.271093][ T8566] device bridge_slave_1 left promiscuous mode [ 691.302078][ T8566] bridge0: port 2(bridge_slave_1) entered disabled state [ 691.358280][ T8566] device bridge_slave_0 left promiscuous mode [ 691.382988][ T8566] bridge0: port 1(bridge_slave_0) entered disabled state [ 691.515247][ T8566] device veth1_vlan left promiscuous mode [ 691.525571][ T8566] device veth0_vlan left promiscuous mode [ 692.590561][T13293] Bluetooth: hci0: command 0x0419 tx timeout [ 692.853028][ T8566] team0 (unregistering): Port device team_slave_1 removed [ 692.886590][T14012] netlink: 'syz.4.3089': attribute type 3 has an invalid length. [ 692.896811][T14012] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3089'. [ 692.934415][ T8566] team0 (unregistering): Port device team_slave_0 removed [ 693.634627][T14016] netlink: 'syz.1.3091': attribute type 3 has an invalid length. [ 693.709317][T14016] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3091'. [ 694.209565][T14028] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.3093'. [ 694.391476][T14025] device pim6reg1 entered promiscuous mode [ 696.312788][T13851] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 696.372220][T13851] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 696.403250][T13851] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 696.470756][T14091] netlink: 'syz.2.3103': attribute type 3 has an invalid length. [ 696.494783][T13851] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 696.517705][T14091] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3103'. [ 696.896909][T13851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 697.046885][ T8566] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 697.070541][ T8566] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 697.114004][T13851] 8021q: adding VLAN 0 to HW filter on device team0 [ 697.141016][T14108] netlink: 'syz.2.3108': attribute type 29 has an invalid length. [ 697.177635][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 697.202275][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 697.268158][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 697.275504][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 697.329801][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 697.356777][ T8564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 697.376275][ T8564] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 697.426269][ T8564] bridge0: port 2(bridge_slave_1) entered blocking state [ 697.433534][ T8564] bridge0: port 2(bridge_slave_1) entered forwarding state [ 697.550505][ T8564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 697.592342][ T8564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 697.661110][ T8564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 697.716810][ T8564] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 697.746379][ T8564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 697.770789][ T8564] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 697.802601][ T8564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 697.831639][ T8564] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 697.890151][T13851] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 697.931981][T13851] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 697.960266][ T8564] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 697.970119][ T8564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 698.018473][ T8564] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 698.482866][T14130] netlink: 'syz.0.3113': attribute type 3 has an invalid length. [ 698.549333][T14128] netlink: 'syz.1.3112': attribute type 3 has an invalid length. [ 698.560987][T14130] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3113'. [ 698.600238][T14128] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3112'. [ 699.035112][T14144] netlink: 'syz.4.3115': attribute type 3 has an invalid length. [ 699.052842][T14144] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3115'. [ 699.799995][ T8578] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 699.850074][ T8578] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 700.038370][T13851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 700.219022][ T8576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 700.240699][ T8576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 700.303956][ T8578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 700.314897][ T8578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 700.338503][T13851] device veth0_vlan entered promiscuous mode [ 700.362440][ T8578] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 700.382913][T14165] FAULT_INJECTION: forcing a failure. [ 700.382913][T14165] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 700.400314][ T8578] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 700.405360][T14165] CPU: 0 PID: 14165 Comm: syz.1.3121 Not tainted syzkaller #0 [ 700.415073][T14165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 700.425176][T14165] Call Trace: [ 700.428495][T14165] [ 700.431475][T14165] dump_stack_lvl+0x188/0x24e [ 700.436222][T14165] ? show_regs_print_info+0x12/0x12 [ 700.441484][T14165] ? load_image+0x400/0x400 [ 700.446047][T14165] ? __might_fault+0xa6/0x120 [ 700.450793][T14165] should_fail_ex+0x399/0x4d0 [ 700.455540][T14165] copyout+0x1b/0x120 [ 700.459584][T14165] _copy_to_iter+0x48b/0x1040 [ 700.464354][T14165] ? iov_iter_init+0x1f0/0x1f0 [ 700.469181][T14165] ? __local_bh_enable_ip+0x136/0x1c0 [ 700.474615][T14165] ? lockdep_hardirqs_on+0x94/0x140 [ 700.479908][T14165] ? __local_bh_enable_ip+0x136/0x1c0 [ 700.485336][T14165] ? page_copy_sane+0x194/0x390 [ 700.490233][T14165] copy_page_to_iter+0xac/0x170 [ 700.495121][T14165] __sk_msg_recvmsg+0x2ee/0xce0 [ 700.500051][T14165] unix_bpf_recvmsg+0x5ae/0xde0 [ 700.505050][T14165] ? unix_stream_bpf_update_proto+0x2f0/0x2f0 [ 700.511153][T14165] ? wait_woken+0x1c0/0x1c0 [ 700.515688][T14165] ? __might_fault+0xa6/0x120 [ 700.520381][T14165] ? aa_sock_msg_perm+0x94/0x150 [ 700.525344][T14165] ? bpf_lsm_socket_recvmsg+0x5/0x10 [ 700.530646][T14165] ? security_socket_recvmsg+0x85/0xb0 [ 700.536129][T14165] ? unix_dgram_recvmsg+0x6d/0xd0 [ 700.541176][T14165] ? unix_dgram_sendmsg+0x16e0/0x16e0 [ 700.546572][T14165] ____sys_recvmsg+0x2cb/0x5e0 [ 700.551386][T14165] ? __sys_recvmsg_sock+0x40/0x40 [ 700.556558][T14165] ? import_iovec+0x6f/0xa0 [ 700.561090][T14165] ___sys_recvmsg+0x212/0x590 [ 700.565802][T14165] ? __sys_recvmsg+0x290/0x290 [ 700.570600][T14165] ? common_file_perm+0x171/0x1c0 [ 700.575672][T14165] ? __fget_files+0x43d/0x4b0 [ 700.580410][T14165] __x64_sys_recvmsg+0x205/0x2e0 [ 700.585379][T14165] ? ___sys_recvmsg+0x590/0x590 [ 700.590286][T14165] ? lockdep_hardirqs_on+0x94/0x140 [ 700.595525][T14165] do_syscall_64+0x4c/0xa0 [ 700.599973][T14165] ? clear_bhb_loop+0x60/0xb0 [ 700.604668][T14165] ? clear_bhb_loop+0x60/0xb0 [ 700.609370][T14165] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 700.615286][T14165] RIP: 0033:0x7f093739ce59 [ 700.619720][T14165] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 700.639348][T14165] RSP: 002b:00007f0938182028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 700.647782][T14165] RAX: ffffffffffffffda RBX: 00007f0937615fa0 RCX: 00007f093739ce59 [ 700.655770][T14165] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000000000000005 [ 700.663758][T14165] RBP: 00007f0938182090 R08: 0000000000000000 R09: 0000000000000000 [ 700.671747][T14165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 700.679735][T14165] R13: 00007f0937616038 R14: 00007f0937615fa0 R15: 00007ffcf9a3a428 [ 700.687753][T14165] [ 700.730596][T14164] sctp: [Deprecated]: syz.2.3120 (pid 14164) Use of int in maxseg socket option. [ 700.730596][T14164] Use struct sctp_assoc_value instead [ 700.753324][T13851] device veth1_vlan entered promiscuous mode [ 700.827069][ T8578] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 701.027119][ T8570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 701.047955][ T8570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 701.063323][T13851] device veth0_macvtap entered promiscuous mode [ 701.075763][T13851] device veth1_macvtap entered promiscuous mode [ 701.152752][T13851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 701.197601][T13851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 701.265123][T13851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 701.298279][T13851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 701.314779][T13851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 701.340761][T13851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 701.361331][T13851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 701.373086][T13851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 701.383863][T13851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 701.397944][T13851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 701.429149][T13851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 701.447587][T13851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 701.458559][T13851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 701.469321][T13851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 701.480629][T13851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 701.508057][T13851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 701.527568][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 701.550940][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 701.587357][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 701.680948][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 701.787125][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 701.921989][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 701.973601][T14193] netlink: 'syz.4.3127': attribute type 3 has an invalid length. [ 702.000834][T14188] netlink: 14463 bytes leftover after parsing attributes in process `syz.2.3125'. [ 702.010756][T14193] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3127'. [ 702.081874][T13851] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.130838][T13851] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.184133][T13851] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.204671][T13851] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.351428][T14197] netlink: 'syz.1.3128': attribute type 3 has an invalid length. [ 702.423965][T14197] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3128'. [ 702.549789][ T8570] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 702.568364][ T8570] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 702.748148][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 702.818656][T14206] netlink: 'syz.2.3129': attribute type 3 has an invalid length. [ 702.845080][ T8570] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 702.856948][ T8570] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 702.857547][T14206] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3129'. [ 702.888978][T13997] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 704.276722][T14224] device syzkaller0 entered promiscuous mode [ 704.638489][T13293] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 704.650366][T13293] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 704.663431][T13293] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 704.687485][T13293] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 704.696072][T13293] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 704.714399][T13293] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 706.754693][ T4285] Bluetooth: hci1: command 0x0409 tx timeout [ 707.161135][ T9] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 707.444119][ T9] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 707.686373][T14270] netlink: 'syz.1.3142': attribute type 3 has an invalid length. [ 707.755479][ T9] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 707.782499][T14270] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3142'. [ 707.949167][T14273] netlink: 'syz.2.3144': attribute type 3 has an invalid length. [ 708.013176][T14273] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3144'. [ 708.017015][ T9] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 708.264414][T14289] FAULT_INJECTION: forcing a failure. [ 708.264414][T14289] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 708.319947][T14289] CPU: 0 PID: 14289 Comm: syz.3.3146 Not tainted syzkaller #0 [ 708.327497][T14289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 708.337593][T14289] Call Trace: [ 708.340901][T14289] [ 708.343871][T14289] dump_stack_lvl+0x188/0x24e [ 708.348603][T14289] ? show_regs_print_info+0x12/0x12 [ 708.353844][T14289] ? load_image+0x400/0x400 [ 708.358400][T14289] ? __lock_acquire+0x7d10/0x7d10 [ 708.363483][T14289] should_fail_ex+0x399/0x4d0 [ 708.368211][T14289] _copy_from_user+0x2c/0x170 [ 708.372932][T14289] bpf_prog_test_run_skb+0x262/0x12a0 [ 708.378351][T14289] ? __fget_files+0x28/0x4b0 [ 708.382987][T14289] ? __fget_files+0x28/0x4b0 [ 708.387626][T14289] ? __fget_files+0x43d/0x4b0 [ 708.392331][T14289] ? cpu_online+0xa0/0xa0 [ 708.396678][T14289] bpf_prog_test_run+0x31e/0x390 [ 708.401639][T14289] __sys_bpf+0x62b/0x780 [ 708.405903][T14289] ? bpf_link_show_fdinfo+0x380/0x380 [ 708.411304][T14289] ? lock_chain_count+0x20/0x20 [ 708.416195][T14289] __x64_sys_bpf+0x78/0x90 [ 708.420648][T14289] do_syscall_64+0x4c/0xa0 [ 708.425113][T14289] ? clear_bhb_loop+0x60/0xb0 [ 708.429817][T14289] ? clear_bhb_loop+0x60/0xb0 [ 708.434537][T14289] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 708.440466][T14289] RIP: 0033:0x7f83c8d9ce59 [ 708.444909][T14289] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 708.464634][T14289] RSP: 002b:00007f83c9c17028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 708.473074][T14289] RAX: ffffffffffffffda RBX: 00007f83c9015fa0 RCX: 00007f83c8d9ce59 [ 708.481057][T14289] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 708.489045][T14289] RBP: 00007f83c9c17090 R08: 0000000000000000 R09: 0000000000000000 [ 708.497053][T14289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 708.505036][T14289] R13: 00007f83c9016038 R14: 00007f83c9015fa0 R15: 00007ffc914cd018 [ 708.513040][T14289] [ 708.792018][T14252] chnl_net:caif_netlink_parms(): no params data found [ 708.838471][ T4285] Bluetooth: hci1: command 0x041b tx timeout [ 709.410187][T14252] bridge0: port 1(bridge_slave_0) entered blocking state [ 709.444116][T14252] bridge0: port 1(bridge_slave_0) entered disabled state [ 709.460957][T14252] device bridge_slave_0 entered promiscuous mode [ 709.491328][T14252] bridge0: port 2(bridge_slave_1) entered blocking state [ 709.538718][T14252] bridge0: port 2(bridge_slave_1) entered disabled state [ 709.567843][T14252] device bridge_slave_1 entered promiscuous mode [ 709.764832][T14336] netlink: 'syz.1.3152': attribute type 46 has an invalid length. [ 709.808819][T14336] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3152'. [ 710.226975][T14252] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 710.361634][T14252] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 710.923877][ T4285] Bluetooth: hci1: command 0x040f tx timeout [ 711.064139][T14252] team0: Port device team_slave_0 added [ 711.100712][T14252] team0: Port device team_slave_1 added [ 711.289294][T14343] netlink: 'syz.3.3157': attribute type 3 has an invalid length. [ 711.299921][T14343] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3157'. [ 711.386838][T14252] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 711.429742][T14252] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 711.569949][T14252] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 712.372209][T14359] netlink: 'syz.4.3160': attribute type 27 has an invalid length. [ 712.395480][T14252] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 712.419104][T14252] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 712.487713][T14252] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 712.882543][T14252] device hsr_slave_0 entered promiscuous mode [ 712.906838][T14252] device hsr_slave_1 entered promiscuous mode [ 712.941874][T14252] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 712.955123][T14252] Cannot create hsr debugfs directory [ 712.993060][T13293] Bluetooth: hci1: command 0x0419 tx timeout [ 713.615123][T14401] sock: sock_timestamping_bind_phc: sock not bind to device [ 714.126032][T14400] netlink: 'syz.2.3171': attribute type 3 has an invalid length. [ 714.151101][T14400] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3171'. [ 714.329905][ T9] device hsr_slave_0 left promiscuous mode [ 714.348441][ T9] device bridge_slave_1 left promiscuous mode [ 714.357164][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 714.423726][ T9] device bridge_slave_0 left promiscuous mode [ 714.459829][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 714.578966][ T9] device veth1_vlan left promiscuous mode [ 714.590987][ T9] device veth0_vlan left promiscuous mode [ 717.052663][T14421] netlink: 'syz.3.3176': attribute type 10 has an invalid length. [ 717.063043][T14421] netlink: 9279 bytes leftover after parsing attributes in process `syz.3.3176'. [ 717.242728][T14427] netlink: 'syz.2.3177': attribute type 27 has an invalid length. [ 718.587622][T14252] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 718.685642][T14458] sock: sock_timestamping_bind_phc: sock not bind to device [ 718.867431][T14452] netlink: 'syz.4.3184': attribute type 3 has an invalid length. [ 718.921334][T14452] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3184'. [ 718.999734][T14252] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 719.075115][T14252] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 719.198117][T14252] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 720.082669][T14476] netlink: 'syz.1.3188': attribute type 3 has an invalid length. [ 720.152584][T14476] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3188'. [ 720.554063][T14252] 8021q: adding VLAN 0 to HW filter on device bond0 [ 720.700998][ T8574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 720.720785][ T8574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 720.784649][T14252] 8021q: adding VLAN 0 to HW filter on device team0 [ 720.856352][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 720.882278][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 720.934889][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 720.942149][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 720.986935][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 721.019209][T14494] netlink: 'syz.1.3193': attribute type 10 has an invalid length. [ 721.056795][T14494] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 721.113966][ T8576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 721.143335][ T8576] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 721.206693][ T8576] bridge0: port 2(bridge_slave_1) entered blocking state [ 721.213915][ T8576] bridge0: port 2(bridge_slave_1) entered forwarding state [ 721.267246][ T8576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 721.310986][ T8578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 721.337921][ T8578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 721.377761][ T8578] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 721.418651][ T8578] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 721.461670][T13997] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 721.498288][T13997] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 721.566424][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 721.585383][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 721.636470][T13997] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 721.657293][T13997] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 722.432019][T14523] netlink: 'syz.3.3198': attribute type 21 has an invalid length. [ 723.107023][T14526] netlink: 'syz.2.3199': attribute type 3 has an invalid length. [ 723.180836][T14526] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3199'. [ 723.446332][T13997] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 723.466415][T13997] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 723.495058][T14252] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 723.584376][T14538] sock: sock_timestamping_bind_phc: sock not bind to device [ 723.631181][T13997] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 723.653700][T13997] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 723.802455][T14543] netlink: 'syz.2.3203': attribute type 27 has an invalid length. [ 723.830564][ T8576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 723.842905][ T8576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 723.894174][T14252] device veth0_vlan entered promiscuous mode [ 723.914746][ T8576] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 723.924366][ T8576] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 723.978473][T14252] device veth1_vlan entered promiscuous mode [ 724.073255][ T8578] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 724.091368][ T8578] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 724.117241][ T8578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 724.158632][ T8578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 724.189163][T14252] device veth0_macvtap entered promiscuous mode [ 724.241749][T14252] device veth1_macvtap entered promiscuous mode [ 724.294720][T14252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 724.325211][T14252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 724.342492][T14252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 724.373810][T14252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 724.409051][T14252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 724.456738][T14252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 724.518069][T14252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 724.557083][T14252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 724.607156][T14252] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 724.651411][ T8576] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 724.667239][ T8576] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 724.707824][ T8576] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 724.747045][ T8576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 724.787691][T14252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 724.827510][T14252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 724.863601][T14252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 724.890367][T14252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 724.914545][T14252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 724.935200][T14252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 724.946642][T14252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 724.958524][T14252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 724.968747][T14252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 724.979647][T14252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 724.994685][T14252] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 725.007178][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 725.016922][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 725.052111][T14252] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.089833][T14252] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.108866][T14252] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.146407][T14252] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.284883][ T8578] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 725.304023][ T8578] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 725.312090][ T4434] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 725.322805][ T4434] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 725.362401][ T8576] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 725.396669][ T8576] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 725.679714][T14589] netlink: 'syz.3.3226': attribute type 33 has an invalid length. [ 725.687601][T14589] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3226'. [ 726.171470][T14602] sock: sock_timestamping_bind_phc: sock not bind to device [ 726.182908][T14600] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3218'. [ 727.072716][T14604] netlink: 'syz.1.3219': attribute type 27 has an invalid length. [ 727.288310][ T4285] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 727.310646][ T4285] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 727.323206][ T4285] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 727.334333][ T4285] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 727.361472][ T4285] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 727.369093][ T4285] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 727.597598][ T8576] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.134865][ T8576] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.145878][T14616] netlink: 'syz.3.3221': attribute type 3 has an invalid length. [ 728.156664][T14616] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3221'. [ 728.321953][ T8576] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.513615][ T8576] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.727757][T14632] netlink: 'syz.1.3229': attribute type 2 has an invalid length. [ 728.840013][T14632] netlink: 142576 bytes leftover after parsing attributes in process `syz.1.3229'. [ 729.401456][T13293] Bluetooth: hci2: command 0x0409 tx timeout [ 729.470165][ T8576] tipc: Left network mode [ 729.502264][T14641] netlink: 'syz.1.3230': attribute type 7 has an invalid length. [ 729.520626][T14641] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3230'. [ 729.828643][T14613] chnl_net:caif_netlink_parms(): no params data found [ 730.759990][T14662] netlink: 'syz.3.3234': attribute type 27 has an invalid length. [ 730.881606][T14613] bridge0: port 1(bridge_slave_0) entered blocking state [ 730.888805][T14613] bridge0: port 1(bridge_slave_0) entered disabled state [ 730.911167][T14613] device bridge_slave_0 entered promiscuous mode [ 731.008925][T14613] bridge0: port 2(bridge_slave_1) entered blocking state [ 731.026639][T14613] bridge0: port 2(bridge_slave_1) entered disabled state [ 731.039309][T14613] device bridge_slave_1 entered promiscuous mode [ 731.324137][T14613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 731.469926][T13293] Bluetooth: hci2: command 0x041b tx timeout [ 731.529065][T14613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 731.566245][T14681] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3237'. [ 731.799051][T14688] netlink: 'syz.0.3246': attribute type 27 has an invalid length. [ 732.444496][T14613] team0: Port device team_slave_0 added [ 732.461202][T14687] netlink: 'syz.3.3237': attribute type 46 has an invalid length. [ 732.479399][T14687] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3237'. [ 732.574588][T14613] team0: Port device team_slave_1 added [ 732.858168][T14613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 732.869856][T14613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 732.949671][T14613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 732.999740][T14613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 733.006872][T14613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 733.081158][T14613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 733.476084][T14613] device hsr_slave_0 entered promiscuous mode [ 733.544136][T14613] device hsr_slave_1 entered promiscuous mode [ 733.550677][T13293] Bluetooth: hci2: command 0x040f tx timeout [ 733.626266][T14613] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 733.673268][T14613] Cannot create hsr debugfs directory [ 733.755109][ T8576] device hsr_slave_0 left promiscuous mode [ 733.784342][ T8576] device hsr_slave_1 left promiscuous mode [ 733.834187][ T8576] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 733.869881][ T8576] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 733.960708][ T8576] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 733.972252][ T8576] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 734.042231][ T8576] batman_adv: batadv0: Interface deactivated: macvlan1 [ 734.049205][ T8576] batman_adv: batadv0: Removing interface: macvlan1 [ 734.120184][T14703] netlink: 'syz.0.3238': attribute type 3 has an invalid length. [ 734.128011][T14703] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3238'. [ 734.194689][ T8576] device bridge_slave_1 left promiscuous mode [ 734.209851][ T8576] bridge0: port 2(bridge_slave_1) entered disabled state [ 734.251039][ T8576] device bridge_slave_0 left promiscuous mode [ 734.257378][ T8576] bridge0: port 1(bridge_slave_0) entered disabled state [ 734.319109][ T8576] device veth1_vlan left promiscuous mode [ 734.347786][ T8576] device veth0_vlan left promiscuous mode [ 735.314416][ T8576] team0 (unregistering): Port device macvlan0 removed [ 735.635260][T13293] Bluetooth: hci2: command 0x0419 tx timeout [ 736.165937][ T8576] team0 (unregistering): Port device team_slave_1 removed [ 736.258092][ T8576] team0 (unregistering): Port device team_slave_0 removed [ 738.868956][T14759] netlink: 'syz.3.3255': attribute type 3 has an invalid length. [ 738.889797][T14759] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3255'. [ 738.942015][T14613] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 738.977132][T14613] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 739.160322][T14613] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 739.342949][T14780] netlink: 'syz.3.3260': attribute type 29 has an invalid length. [ 739.351660][T14613] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 739.400030][T14778] netlink: 'syz.2.3257': attribute type 27 has an invalid length. [ 739.474069][T14780] netlink: 'syz.3.3260': attribute type 29 has an invalid length. [ 739.524673][T14783] netlink: 'syz.3.3260': attribute type 29 has an invalid length. [ 739.614612][T14786] netlink: 'syz.3.3260': attribute type 29 has an invalid length. [ 739.796875][T14790] netlink: 'syz.0.3262': attribute type 10 has an invalid length. [ 739.837622][T14790] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3262'. [ 739.908633][T14795] netlink: 'syz.3.3263': attribute type 10 has an invalid length. [ 739.918693][T14791] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3262'. [ 739.932887][T14795] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3263'. [ 740.160210][T14791] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 740.305677][T14791] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 740.460525][T14791] bond0 (unregistering): Released all slaves [ 740.570581][T14790] netlink: 'syz.0.3262': attribute type 10 has an invalid length. [ 740.636646][T14790] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3262'. [ 740.663630][T14613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 740.772277][T14795] netlink: 'syz.3.3263': attribute type 10 has an invalid length. [ 740.792560][T14795] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3263'. [ 740.814703][T14798] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3263'. [ 741.324132][T14798] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 741.421142][T14798] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 741.469024][T14798] bond0 (unregistering): Released all slaves [ 741.530347][T14825] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3268'. [ 741.586096][T14826] FAULT_INJECTION: forcing a failure. [ 741.586096][T14826] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 741.629961][T14613] 8021q: adding VLAN 0 to HW filter on device team0 [ 741.667955][T14825] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3268'. [ 741.679714][T14826] CPU: 0 PID: 14826 Comm: syz.1.3268 Not tainted syzkaller #0 [ 741.685728][ T8570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 741.687218][T14826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 741.687233][T14826] Call Trace: [ 741.695843][ T8570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 741.704512][T14826] [ 741.704524][T14826] dump_stack_lvl+0x188/0x24e [ 741.704563][T14826] ? show_regs_print_info+0x12/0x12 [ 741.708971][ T8570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 741.715052][T14826] ? load_image+0x400/0x400 [ 741.715103][T14826] ? __lock_acquire+0x7d10/0x7d10 [ 741.715137][T14826] should_fail_ex+0x399/0x4d0 [ 741.719613][ T8570] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 741.722745][T14826] _copy_from_user+0x2c/0x170 [ 741.728533][ T8570] bridge0: port 1(bridge_slave_0) entered blocking state [ 741.736090][T14826] iovec_from_user+0x143/0x360 [ 741.736122][T14826] __import_iovec+0x6d/0x500 [ 741.736153][T14826] import_iovec+0x6f/0xa0 [ 741.740758][ T8570] bridge0: port 1(bridge_slave_0) entered forwarding state [ 741.745673][T14826] ___sys_sendmsg+0x252/0x360 [ 741.795616][T14826] ? __sys_sendmsg+0x290/0x290 [ 741.800430][T14826] ? __lock_acquire+0x7d10/0x7d10 [ 741.805500][T14826] __se_sys_sendmsg+0x1bb/0x2a0 [ 741.810382][T14826] ? __x64_sys_sendmsg+0x80/0x80 [ 741.815349][T14826] ? lockdep_hardirqs_on+0x94/0x140 [ 741.820562][T14826] do_syscall_64+0x4c/0xa0 [ 741.824991][T14826] ? clear_bhb_loop+0x60/0xb0 [ 741.829686][T14826] ? clear_bhb_loop+0x60/0xb0 [ 741.834500][T14826] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 741.840408][T14826] RIP: 0033:0x7f093739ce59 [ 741.844842][T14826] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 741.864458][T14826] RSP: 002b:00007f09355f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 741.872886][T14826] RAX: ffffffffffffffda RBX: 00007f0937616090 RCX: 00007f093739ce59 [ 741.880871][T14826] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 741.888854][T14826] RBP: 00007f09355f6090 R08: 0000000000000000 R09: 0000000000000000 [ 741.896836][T14826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 741.904818][T14826] R13: 00007f0937616128 R14: 00007f0937616090 R15: 00007ffcf9a3a428 [ 741.912816][T14826] [ 741.980745][ T8570] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 742.200970][ T8566] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 742.222517][ T8566] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 742.292201][ T8566] bridge0: port 2(bridge_slave_1) entered blocking state [ 742.299631][ T8566] bridge0: port 2(bridge_slave_1) entered forwarding state [ 742.566122][ T8566] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 742.626750][ T8566] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 742.663818][T14837] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3271'. [ 742.747620][ T8566] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 742.786554][ T8566] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 742.819134][ T8566] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 742.839626][ T8570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 742.857926][ T8570] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 742.992956][T13997] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 743.031935][T13997] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 743.126684][T14848] FAULT_INJECTION: forcing a failure. [ 743.126684][T14848] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 743.145610][ T8564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 743.164882][ T8564] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 743.173539][T14848] CPU: 1 PID: 14848 Comm: syz.0.3282 Not tainted syzkaller #0 [ 743.181046][T14848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 743.191143][T14848] Call Trace: [ 743.194450][T14848] [ 743.197418][T14848] dump_stack_lvl+0x188/0x24e [ 743.202150][T14848] ? show_regs_print_info+0x12/0x12 [ 743.207401][T14848] ? load_image+0x400/0x400 [ 743.211952][T14848] ? __lock_acquire+0x7d10/0x7d10 [ 743.217035][T14848] ? lockdep_hardirqs_on+0x94/0x140 [ 743.222468][T14848] should_fail_ex+0x399/0x4d0 [ 743.227187][T14848] _copy_from_user+0x2c/0x170 [ 743.231910][T14848] __copy_msghdr+0x3b7/0x580 [ 743.236534][T14848] ___sys_sendmsg+0x210/0x360 [ 743.241243][T14848] ? __sys_sendmsg+0x290/0x290 [ 743.246066][T14848] __se_sys_sendmsg+0x1bb/0x2a0 [ 743.250943][T14848] ? __x64_sys_sendmsg+0x80/0x80 [ 743.255920][T14848] do_syscall_64+0x4c/0xa0 [ 743.260353][T14848] ? clear_bhb_loop+0x60/0xb0 [ 743.265054][T14848] ? clear_bhb_loop+0x60/0xb0 [ 743.269746][T14848] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 743.275654][T14848] RIP: 0033:0x7ff766d9ce59 [ 743.280428][T14848] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 743.300046][T14848] RSP: 002b:00007ff767d35028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 743.308471][T14848] RAX: ffffffffffffffda RBX: 00007ff767015fa0 RCX: 00007ff766d9ce59 [ 743.316465][T14848] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000006 [ 743.324536][T14848] RBP: 00007ff767d35090 R08: 0000000000000000 R09: 0000000000000000 [ 743.332514][T14848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 743.340519][T14848] R13: 00007ff767016038 R14: 00007ff767015fa0 R15: 00007ffce7f293a8 [ 743.348516][T14848] [ 743.407886][T14613] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 743.873083][T14865] FAULT_INJECTION: forcing a failure. [ 743.873083][T14865] name failslab, interval 1, probability 0, space 0, times 0 [ 743.939029][T14865] CPU: 1 PID: 14865 Comm: syz.2.3277 Not tainted syzkaller #0 [ 743.946584][T14865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 743.956768][T14865] Call Trace: [ 743.960067][T14865] [ 743.963012][T14865] dump_stack_lvl+0x188/0x24e [ 743.967748][T14865] ? show_regs_print_info+0x12/0x12 [ 743.972973][T14865] ? load_image+0x400/0x400 [ 743.977583][T14865] ? __might_sleep+0xd0/0xd0 [ 743.982271][T14865] ? __lock_acquire+0x7d10/0x7d10 [ 743.987322][T14865] should_fail_ex+0x399/0x4d0 [ 743.992012][T14865] should_failslab+0x5/0x20 [ 743.996526][T14865] slab_pre_alloc_hook+0x59/0x310 [ 744.001569][T14865] ? bpf_prog_test_run_skb+0x234/0x12a0 [ 744.007130][T14865] __kmem_cache_alloc_node+0x4f/0x260 [ 744.012516][T14865] ? bpf_prog_test_run_skb+0x234/0x12a0 [ 744.018085][T14865] __kmalloc+0xa0/0x240 [ 744.022262][T14865] bpf_prog_test_run_skb+0x234/0x12a0 [ 744.027649][T14865] ? __fget_files+0x28/0x4b0 [ 744.032254][T14865] ? __fget_files+0x28/0x4b0 [ 744.036863][T14865] ? __fget_files+0x43d/0x4b0 [ 744.041565][T14865] ? cpu_online+0xa0/0xa0 [ 744.045907][T14865] bpf_prog_test_run+0x31e/0x390 [ 744.050874][T14865] __sys_bpf+0x62b/0x780 [ 744.055132][T14865] ? bpf_link_show_fdinfo+0x380/0x380 [ 744.060528][T14865] ? lock_chain_count+0x20/0x20 [ 744.065398][T14865] __x64_sys_bpf+0x78/0x90 [ 744.069828][T14865] do_syscall_64+0x4c/0xa0 [ 744.074257][T14865] ? clear_bhb_loop+0x60/0xb0 [ 744.078952][T14865] ? clear_bhb_loop+0x60/0xb0 [ 744.083647][T14865] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 744.089550][T14865] RIP: 0033:0x7f8c0bb9ce59 [ 744.093972][T14865] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 744.113590][T14865] RSP: 002b:00007f8c0cab0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 744.122013][T14865] RAX: ffffffffffffffda RBX: 00007f8c0be15fa0 RCX: 00007f8c0bb9ce59 [ 744.129997][T14865] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 744.137980][T14865] RBP: 00007f8c0cab0090 R08: 0000000000000000 R09: 0000000000000000 [ 744.145980][T14865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 744.153957][T14865] R13: 00007f8c0be16038 R14: 00007f8c0be15fa0 R15: 00007ffff63cced8 [ 744.161950][T14865] [ 744.434673][ T8576] device hsr_slave_0 left promiscuous mode [ 744.468882][ T8576] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 744.509559][ T8576] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 744.534185][ T8576] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 744.545131][ T8576] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 744.601809][ T8576] batman_adv: batadv0: Interface deactivated: vlan1 [ 744.608558][ T8576] batman_adv: batadv0: Removing interface: vlan1 [ 744.917851][ T8576] device bridge_slave_1 left promiscuous mode [ 744.926419][ T8576] bridge0: port 2(bridge_slave_1) entered disabled state [ 744.970132][T14878] validate_nla: 6 callbacks suppressed [ 744.970249][T14878] netlink: 'syz.3.3280': attribute type 3 has an invalid length. [ 745.016633][T14884] FAULT_INJECTION: forcing a failure. [ 745.016633][T14884] name failslab, interval 1, probability 0, space 0, times 0 [ 745.050501][ T8576] device bridge_slave_0 left promiscuous mode [ 745.057684][ T8576] bridge0: port 1(bridge_slave_0) entered disabled state [ 745.089889][T14878] __nla_validate_parse: 1 callbacks suppressed [ 745.089954][T14878] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3280'. [ 745.120274][T14884] CPU: 0 PID: 14884 Comm: syz.1.3281 Not tainted syzkaller #0 [ 745.127841][T14884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 745.137960][T14884] Call Trace: [ 745.141294][T14884] [ 745.144273][T14884] dump_stack_lvl+0x188/0x24e [ 745.149038][T14884] ? show_regs_print_info+0x12/0x12 [ 745.154311][T14884] ? load_image+0x400/0x400 [ 745.158878][T14884] ? __might_sleep+0xd0/0xd0 [ 745.163528][T14884] ? __lock_acquire+0x7d10/0x7d10 [ 745.168594][T14884] should_fail_ex+0x399/0x4d0 [ 745.173313][T14884] should_failslab+0x5/0x20 [ 745.177838][T14884] slab_pre_alloc_hook+0x59/0x310 [ 745.182910][T14884] kmem_cache_alloc_node+0x5a/0x320 [ 745.188134][T14884] ? perf_event_alloc+0x154/0x21b0 [ 745.193282][T14884] perf_event_alloc+0x154/0x21b0 [ 745.198258][T14884] ? _raw_spin_unlock+0x24/0x40 [ 745.203137][T14884] ? alloc_fd+0x58f/0x630 [ 745.207508][T14884] ? find_lively_task_by_vpid+0x19/0x290 [ 745.213169][T14884] ? find_lively_task_by_vpid+0x19/0x290 [ 745.218844][T14884] __se_sys_perf_event_open+0x6fd/0x1ec0 [ 745.224503][T14884] ? __fget_files+0x43d/0x4b0 [ 745.229228][T14884] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 745.234937][T14884] ? lockdep_hardirqs_on+0x94/0x140 [ 745.240158][T14884] ? __x64_sys_perf_event_open+0x1c/0xc0 [ 745.245834][T14884] do_syscall_64+0x4c/0xa0 [ 745.250278][T14884] ? clear_bhb_loop+0x60/0xb0 [ 745.254979][T14884] ? clear_bhb_loop+0x60/0xb0 [ 745.259688][T14884] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 745.265605][T14884] RIP: 0033:0x7f093739ce59 [ 745.270048][T14884] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 745.289677][T14884] RSP: 002b:00007f09355f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 745.298119][T14884] RAX: ffffffffffffffda RBX: 00007f0937616090 RCX: 00007f093739ce59 [ 745.306202][T14884] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000500 [ 745.314197][T14884] RBP: 00007f09355f6090 R08: 0000000000000000 R09: 0000000000000000 [ 745.322189][T14884] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 745.330181][T14884] R13: 00007f0937616128 R14: 00007f0937616090 R15: 00007ffcf9a3a428 [ 745.338241][T14884] [ 745.390802][ T8576] device veth1_vlan left promiscuous mode [ 745.396747][ T8576] device veth0_vlan left promiscuous mode [ 746.063336][T14890] netlink: 'syz.0.3284': attribute type 3 has an invalid length. [ 746.074725][T14890] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3284'. [ 746.825349][ T8576] team0 (unregistering): Port device team_slave_1 removed [ 746.891808][ T8576] team0 (unregistering): Port device team_slave_0 removed [ 747.250918][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.257318][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.406251][ T8566] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 747.414540][ T8566] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 747.441681][T14613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 748.908004][T14950] FAULT_INJECTION: forcing a failure. [ 748.908004][T14950] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 748.953819][T14950] CPU: 1 PID: 14950 Comm: syz.3.3294 Not tainted syzkaller #0 [ 748.961375][T14950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 748.971479][T14950] Call Trace: [ 748.974802][T14950] [ 748.977767][T14950] dump_stack_lvl+0x188/0x24e [ 748.982501][T14950] ? show_regs_print_info+0x12/0x12 [ 748.987750][T14950] ? load_image+0x400/0x400 [ 748.992299][T14950] ? __lock_acquire+0x7d10/0x7d10 [ 748.997382][T14950] should_fail_ex+0x399/0x4d0 [ 749.002106][T14950] _copy_from_user+0x2c/0x170 [ 749.006836][T14950] kstrtouint_from_user+0xda/0x170 [ 749.012097][T14950] ? kstrtol_from_user+0x190/0x190 [ 749.017292][T14950] proc_fail_nth_write+0x8b/0x200 [ 749.022388][T14950] ? proc_fail_nth_read+0x220/0x220 [ 749.027635][T14950] ? common_file_perm+0x171/0x1c0 [ 749.032708][T14950] ? proc_fail_nth_read+0x220/0x220 [ 749.037950][T14950] vfs_write+0x2e6/0xa30 [ 749.042254][T14950] ? file_end_write+0x250/0x250 [ 749.047150][T14950] ? __fget_files+0x28/0x4b0 [ 749.051782][T14950] ? __fget_files+0x28/0x4b0 [ 749.056421][T14950] ? __fget_files+0x43d/0x4b0 [ 749.061163][T14950] ? __fdget_pos+0x2ae/0x360 [ 749.065814][T14950] ? ksys_write+0x71/0x250 [ 749.070287][T14950] ksys_write+0x14c/0x250 [ 749.074667][T14950] ? __ia32_sys_read+0x80/0x80 [ 749.079486][T14950] ? lockdep_hardirqs_on+0x94/0x140 [ 749.084740][T14950] do_syscall_64+0x4c/0xa0 [ 749.089206][T14950] ? clear_bhb_loop+0x60/0xb0 [ 749.093936][T14950] ? clear_bhb_loop+0x60/0xb0 [ 749.098679][T14950] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 749.104618][T14950] RIP: 0033:0x7f83c8d5d68e [ 749.109071][T14950] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 749.128727][T14950] RSP: 002b:00007f83c9bf5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 749.137280][T14950] RAX: ffffffffffffffda RBX: 00007f83c9bf66c0 RCX: 00007f83c8d5d68e [ 749.145298][T14950] RDX: 0000000000000001 RSI: 00007f83c9bf60a0 RDI: 0000000000000006 [ 749.153322][T14950] RBP: 00007f83c9bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 749.161426][T14950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 749.169529][T14950] R13: 00007f83c9016128 R14: 00007f83c9016090 R15: 00007ffc914cd018 [ 749.177589][T14950] [ 749.664460][ T8566] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 749.684045][ T8566] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 749.863802][ T8564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 749.901107][ T8564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 750.033919][ T8564] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 750.106327][T14961] netlink: 'syz.2.3297': attribute type 3 has an invalid length. [ 750.108479][ T8564] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 750.130305][T14961] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3297'. [ 750.134884][T14968] FAULT_INJECTION: forcing a failure. [ 750.134884][T14968] name failslab, interval 1, probability 0, space 0, times 0 [ 750.196969][T14613] device veth0_vlan entered promiscuous mode [ 750.206798][T14968] CPU: 0 PID: 14968 Comm: syz.1.3299 Not tainted syzkaller #0 [ 750.214340][T14968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 750.225053][T14968] Call Trace: [ 750.228362][T14968] [ 750.231325][T14968] dump_stack_lvl+0x188/0x24e [ 750.236063][T14968] ? show_regs_print_info+0x12/0x12 [ 750.241319][T14968] ? load_image+0x400/0x400 [ 750.245877][T14968] ? __might_sleep+0xd0/0xd0 [ 750.250516][T14968] ? __lock_acquire+0x7d10/0x7d10 [ 750.255600][T14968] should_fail_ex+0x399/0x4d0 [ 750.260325][T14968] should_failslab+0x5/0x20 [ 750.260946][T14613] device veth1_vlan entered promiscuous mode [ 750.264859][T14968] slab_pre_alloc_hook+0x59/0x310 [ 750.275935][T14968] ? prepend_path+0xa68/0xc20 [ 750.280776][T14968] ? tomoyo_encode+0x27e/0x540 [ 750.285590][T14968] __kmem_cache_alloc_node+0x4f/0x260 [ 750.291059][T14968] ? tomoyo_encode+0x27e/0x540 [ 750.295881][T14968] __kmalloc+0xa0/0x240 [ 750.300112][T14968] tomoyo_encode+0x27e/0x540 [ 750.304784][T14968] tomoyo_realpath_from_path+0x58e/0x5d0 [ 750.310507][T14968] ? tomoyo_path_number_perm+0x205/0x650 [ 750.316220][T14968] tomoyo_path_number_perm+0x22f/0x650 [ 750.321730][T14968] ? preempt_schedule_common+0xd0/0xd0 [ 750.327312][T14968] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 750.332982][T14968] ? ktime_get+0x7b/0x270 [ 750.337454][T14968] ? preempt_schedule_notrace_thunk+0x16/0x18 [ 750.343631][T14968] ? __fget_files+0x28/0x4b0 [ 750.348280][T14968] ? __fget_files+0x28/0x4b0 [ 750.352940][T14968] security_file_ioctl+0x6c/0xa0 [ 750.357941][T14968] __se_sys_ioctl+0x48/0x170 [ 750.362590][T14968] do_syscall_64+0x4c/0xa0 [ 750.367061][T14968] ? clear_bhb_loop+0x60/0xb0 [ 750.371787][T14968] ? clear_bhb_loop+0x60/0xb0 [ 750.376526][T14968] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 750.382476][T14968] RIP: 0033:0x7f093739ce59 [ 750.387023][T14968] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 750.395714][T14846] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 750.406914][T14968] RSP: 002b:00007f0938182028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 750.406947][T14968] RAX: ffffffffffffffda RBX: 00007f0937615fa0 RCX: 00007f093739ce59 [ 750.406962][T14968] RDX: 0000200000000080 RSI: 00000000400454ca RDI: 0000000000000005 [ 750.406976][T14968] RBP: 00007f0938182090 R08: 0000000000000000 R09: 0000000000000000 [ 750.406988][T14968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 750.407000][T14968] R13: 00007f0937616038 R14: 00007f0937615fa0 R15: 00007ffcf9a3a428 [ 750.407035][T14968] [ 750.455995][T14968] ERROR: Out of memory at tomoyo_realpath_from_path. [ 750.528172][T14971] FAULT_INJECTION: forcing a failure. [ 750.528172][T14971] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 750.559739][T14971] CPU: 0 PID: 14971 Comm: syz.0.3300 Not tainted syzkaller #0 [ 750.567308][T14971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 750.577404][T14971] Call Trace: [ 750.580725][T14971] [ 750.583703][T14971] dump_stack_lvl+0x188/0x24e [ 750.588441][T14971] ? show_regs_print_info+0x12/0x12 [ 750.593705][T14971] ? load_image+0x400/0x400 [ 750.598261][T14971] ? __lock_acquire+0x7d10/0x7d10 [ 750.603345][T14971] should_fail_ex+0x399/0x4d0 [ 750.608070][T14971] _copy_from_user+0x2c/0x170 [ 750.612801][T14971] __copy_msghdr+0x3b7/0x580 [ 750.617440][T14971] ___sys_sendmsg+0x210/0x360 [ 750.622168][T14971] ? __sys_sendmsg+0x290/0x290 [ 750.626996][T14971] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 750.632788][T14971] __se_sys_sendmsg+0x1bb/0x2a0 [ 750.637781][T14971] ? __x64_sys_sendmsg+0x80/0x80 [ 750.642788][T14971] ? syscall_enter_from_user_mode+0x2a/0x80 [ 750.648733][T14971] do_syscall_64+0x4c/0xa0 [ 750.653201][T14971] ? clear_bhb_loop+0x60/0xb0 [ 750.657923][T14971] ? clear_bhb_loop+0x60/0xb0 [ 750.662640][T14971] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 750.668593][T14971] RIP: 0033:0x7ff766d9ce59 [ 750.673075][T14971] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 750.692737][T14971] RSP: 002b:00007ff767d35028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 750.701179][T14971] RAX: ffffffffffffffda RBX: 00007ff767015fa0 RCX: 00007ff766d9ce59 [ 750.709164][T14971] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000006 [ 750.717157][T14971] RBP: 00007ff767d35090 R08: 0000000000000000 R09: 0000000000000000 [ 750.725165][T14971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 750.733149][T14971] R13: 00007ff767016038 R14: 00007ff767015fa0 R15: 00007ffce7f293a8 [ 750.741184][T14971] [ 750.797413][T14846] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 750.821103][T14846] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 750.856911][T14846] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 750.870134][T14613] device veth0_macvtap entered promiscuous mode [ 751.031008][T14846] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 751.055889][T14613] device veth1_macvtap entered promiscuous mode [ 751.126966][T14613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 751.164058][T14613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 751.191849][T14613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 751.225167][T14613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 751.267439][T14613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 751.325665][T14613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 751.405302][T14613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 751.428657][T14613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 751.504041][T14613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 751.588358][ T8564] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 751.606334][ T8564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 751.628369][T14613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 751.655843][T14613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 751.682870][T14613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 751.696992][T14613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 751.707326][T14613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 751.719568][T14613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 751.729871][T14613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 751.748267][T14613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 751.762317][T14613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 751.770642][ T8564] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 751.781399][ T8564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 751.800322][T14613] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.870991][T14613] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.889498][T14613] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.908499][T14613] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.150668][ T8576] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 754.158561][ T8576] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 754.331124][T14846] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 754.359248][ T8576] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 754.379498][ T8576] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 754.411748][T13997] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 754.846865][T15012] netlink: 'syz.2.3306': attribute type 3 has an invalid length. [ 754.898025][T15012] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3306'. [ 754.934199][T15011] netlink: 'syz.0.3307': attribute type 3 has an invalid length. [ 754.967272][T15011] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3307'. [ 755.020922][T15024] FAULT_INJECTION: forcing a failure. [ 755.020922][T15024] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 755.059659][T15024] CPU: 0 PID: 15024 Comm: syz.1.3309 Not tainted syzkaller #0 [ 755.067203][T15024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 755.077314][T15024] Call Trace: [ 755.080625][T15024] [ 755.083594][T15024] dump_stack_lvl+0x188/0x24e [ 755.088332][T15024] ? show_regs_print_info+0x12/0x12 [ 755.093582][T15024] ? load_image+0x400/0x400 [ 755.098141][T15024] ? __lock_acquire+0x7d10/0x7d10 [ 755.103232][T15024] should_fail_ex+0x399/0x4d0 [ 755.107969][T15024] _copy_from_user+0x2c/0x170 [ 755.112694][T15024] iovec_from_user+0x143/0x360 [ 755.117504][T15024] __import_iovec+0x6d/0x500 [ 755.122144][T15024] import_iovec+0x6f/0xa0 [ 755.126519][T15024] ___sys_sendmsg+0x252/0x360 [ 755.131257][T15024] ? __sys_sendmsg+0x290/0x290 [ 755.136097][T15024] ? __lock_acquire+0x7d10/0x7d10 [ 755.141220][T15024] __se_sys_sendmsg+0x1bb/0x2a0 [ 755.146131][T15024] ? __x64_sys_sendmsg+0x80/0x80 [ 755.151135][T15024] ? lockdep_hardirqs_on+0x94/0x140 [ 755.156376][T15024] do_syscall_64+0x4c/0xa0 [ 755.160828][T15024] ? clear_bhb_loop+0x60/0xb0 [ 755.165541][T15024] ? clear_bhb_loop+0x60/0xb0 [ 755.170277][T15024] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 755.176255][T15024] RIP: 0033:0x7f093739ce59 [ 755.180686][T15024] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 755.200306][T15024] RSP: 002b:00007f0938182028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 755.208735][T15024] RAX: ffffffffffffffda RBX: 00007f0937615fa0 RCX: 00007f093739ce59 [ 755.216715][T15024] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 755.224703][T15024] RBP: 00007f0938182090 R08: 0000000000000000 R09: 0000000000000000 [ 755.232685][T15024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 755.240665][T15024] R13: 00007f0937616038 R14: 00007f0937615fa0 R15: 00007ffcf9a3a428 [ 755.248659][T15024] [ 755.563934][T15027] netlink: 'syz.3.3311': attribute type 3 has an invalid length. [ 755.677648][T15027] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3311'. [ 755.790931][T15045] sock: sock_timestamping_bind_phc: sock not bind to device [ 756.565775][T15064] device bond_slave_1 entered promiscuous mode [ 756.963606][T15064] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 757.140831][T15076] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3322'. [ 757.458264][T15077] netlink: 'syz.2.3322': attribute type 7 has an invalid length. [ 757.684462][T15077] netlink: 191184 bytes leftover after parsing attributes in process `syz.2.3322'. [ 758.583736][T15087] IPv6: pim6reg1: Disabled Multicast RS [ 758.635912][T15085] netlink: 'syz.1.3324': attribute type 3 has an invalid length. [ 758.729806][T15085] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3324'. [ 759.622736][T15110] sock: sock_timestamping_bind_phc: sock not bind to device [ 760.991115][T15120] netlink: 'syz.4.3331': attribute type 3 has an invalid length. [ 760.999248][T15120] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3331'. [ 761.027626][T15127] device syzkaller0 entered promiscuous mode [ 761.897626][T15148] netlink: 'syz.3.3339': attribute type 3 has an invalid length. [ 761.915059][T15148] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3339'. [ 763.882892][T15145] device bond_slave_1 entered promiscuous mode [ 763.985549][T15150] device syzkaller0 entered promiscuous mode [ 764.238839][T15171] sock: sock_timestamping_bind_phc: sock not bind to device [ 764.313661][T15173] FAULT_INJECTION: forcing a failure. [ 764.313661][T15173] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 764.359777][T15173] CPU: 1 PID: 15173 Comm: syz.2.3345 Not tainted syzkaller #0 [ 764.367316][T15173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 764.377441][T15173] Call Trace: [ 764.380732][T15173] [ 764.383673][T15173] dump_stack_lvl+0x188/0x24e [ 764.388374][T15173] ? show_regs_print_info+0x12/0x12 [ 764.393676][T15173] ? load_image+0x400/0x400 [ 764.398194][T15173] ? __lock_acquire+0x7d10/0x7d10 [ 764.403252][T15173] ? snprintf+0xe5/0x140 [ 764.407517][T15173] should_fail_ex+0x399/0x4d0 [ 764.412226][T15173] _copy_to_user+0x2c/0x130 [ 764.416746][T15173] simple_read_from_buffer+0xe3/0x150 [ 764.422129][T15173] proc_fail_nth_read+0x1a6/0x220 [ 764.427167][T15173] ? proc_fault_inject_write+0x310/0x310 [ 764.432818][T15173] ? fsnotify_perm+0x248/0x550 [ 764.437597][T15173] ? proc_fault_inject_write+0x310/0x310 [ 764.443246][T15173] vfs_read+0x2de/0xa00 [ 764.447426][T15173] ? kernel_read+0x1e0/0x1e0 [ 764.452031][T15173] ? __fget_files+0x28/0x4b0 [ 764.456645][T15173] ? __fget_files+0x28/0x4b0 [ 764.461248][T15173] ? __fget_files+0x43d/0x4b0 [ 764.465949][T15173] ? __fdget_pos+0x2ae/0x360 [ 764.470556][T15173] ? ksys_read+0x71/0x250 [ 764.474909][T15173] ksys_read+0x14c/0x250 [ 764.479258][T15173] ? vfs_write+0xa30/0xa30 [ 764.483692][T15173] ? lockdep_hardirqs_on+0x94/0x140 [ 764.488906][T15173] do_syscall_64+0x4c/0xa0 [ 764.493341][T15173] ? clear_bhb_loop+0x60/0xb0 [ 764.498047][T15173] ? clear_bhb_loop+0x60/0xb0 [ 764.502768][T15173] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 764.508690][T15173] RIP: 0033:0x7f8c0bb5d68e [ 764.513135][T15173] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 764.532758][T15173] RSP: 002b:00007f8c0caaffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 764.541183][T15173] RAX: ffffffffffffffda RBX: 00007f8c0cab06c0 RCX: 00007f8c0bb5d68e [ 764.549164][T15173] RDX: 000000000000000f RSI: 00007f8c0cab00a0 RDI: 0000000000000006 [ 764.557145][T15173] RBP: 00007f8c0cab0090 R08: 0000000000000000 R09: 0000000000000000 [ 764.565129][T15173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 764.573109][T15173] R13: 00007f8c0be16038 R14: 00007f8c0be15fa0 R15: 00007ffff63cced8 [ 764.581120][T15173] [ 765.383765][T15179] netlink: 'syz.3.3347': attribute type 3 has an invalid length. [ 765.394193][T15179] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3347'. [ 768.870862][T15217] sock: sock_timestamping_bind_phc: sock not bind to device [ 769.417385][T15236] netlink: 'syz.0.3360': attribute type 3 has an invalid length. [ 769.466431][T15236] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3360'. [ 770.936599][T15270] FAULT_INJECTION: forcing a failure. [ 770.936599][T15270] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 771.054778][T15270] CPU: 0 PID: 15270 Comm: syz.3.3369 Not tainted syzkaller #0 [ 771.062326][T15270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 771.072414][T15270] Call Trace: [ 771.075715][T15270] [ 771.078667][T15270] dump_stack_lvl+0x188/0x24e [ 771.083388][T15270] ? show_regs_print_info+0x12/0x12 [ 771.088621][T15270] ? load_image+0x400/0x400 [ 771.093163][T15270] ? __lock_acquire+0x7d10/0x7d10 [ 771.098232][T15270] should_fail_ex+0x399/0x4d0 [ 771.102942][T15270] _copy_to_user+0x2c/0x130 [ 771.107479][T15270] bpf_verifier_vlog+0x172/0x390 [ 771.112460][T15270] __btf_verifier_log+0xdf/0x130 [ 771.117439][T15270] ? btf_check_sec_info+0x350/0x350 [ 771.122673][T15270] ? __virt_addr_valid+0x188/0x540 [ 771.127843][T15270] ? btf_parse_hdr+0x1e0/0x7e0 [ 771.132641][T15270] btf_parse_hdr+0x49a/0x7e0 [ 771.137266][T15270] btf_new_fd+0x3c6/0x780 [ 771.141634][T15270] __sys_bpf+0x612/0x780 [ 771.145910][T15270] ? bpf_link_show_fdinfo+0x380/0x380 [ 771.151333][T15270] ? lock_chain_count+0x20/0x20 [ 771.156228][T15270] __x64_sys_bpf+0x78/0x90 [ 771.160681][T15270] do_syscall_64+0x4c/0xa0 [ 771.165142][T15270] ? clear_bhb_loop+0x60/0xb0 [ 771.169853][T15270] ? clear_bhb_loop+0x60/0xb0 [ 771.174565][T15270] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 771.180493][T15270] RIP: 0033:0x7f83c8d9ce59 [ 771.184940][T15270] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 771.204573][T15270] RSP: 002b:00007f83c9c17028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 771.213027][T15270] RAX: ffffffffffffffda RBX: 00007f83c9015fa0 RCX: 00007f83c8d9ce59 [ 771.221056][T15270] RDX: 0000000000000028 RSI: 0000200000000700 RDI: 0000000000000012 [ 771.229067][T15270] RBP: 00007f83c9c17090 R08: 0000000000000000 R09: 0000000000000000 [ 771.237062][T15270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 771.245061][T15270] R13: 00007f83c9016038 R14: 00007f83c9015fa0 R15: 00007ffc914cd018 [ 771.253112][T15270] [ 771.984610][T15281] netlink: 'syz.3.3372': attribute type 3 has an invalid length. [ 772.060942][T15281] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3372'. [ 772.284337][T15293] sock: sock_timestamping_bind_phc: sock not bind to device [ 773.789152][T15295] device sit0 entered promiscuous mode [ 773.808884][T15295] FAULT_INJECTION: forcing a failure. [ 773.808884][T15295] name failslab, interval 1, probability 0, space 0, times 0 [ 773.824285][T15295] CPU: 0 PID: 15295 Comm: syz.1.3377 Not tainted syzkaller #0 [ 773.831828][T15295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 773.841938][T15295] Call Trace: [ 773.845264][T15295] [ 773.848241][T15295] dump_stack_lvl+0x188/0x24e [ 773.852985][T15295] ? br_get_link_af_size_filtered+0x8e/0xc20 [ 773.859092][T15295] ? show_regs_print_info+0x12/0x12 [ 773.864345][T15295] ? load_image+0x400/0x400 [ 773.868895][T15295] should_fail_ex+0x399/0x4d0 [ 773.873622][T15295] should_failslab+0x5/0x20 [ 773.878177][T15295] slab_pre_alloc_hook+0x59/0x310 [ 773.883262][T15295] ? br_netlink_fini+0x30/0x30 [ 773.888094][T15295] kmem_cache_alloc_node+0x5a/0x320 [ 773.893356][T15295] ? __alloc_skb+0xfc/0x7e0 [ 773.897943][T15295] __alloc_skb+0xfc/0x7e0 [ 773.902330][T15295] rtmsg_ifinfo_build_skb+0x80/0x190 [ 773.907675][T15295] rtmsg_ifinfo+0xc4/0x200 [ 773.912164][T15295] __dev_notify_flags+0xef/0x310 [ 773.917218][T15295] ? __dev_change_flags+0x6a0/0x6a0 [ 773.922480][T15295] ? __dev_change_flags+0x4d0/0x6a0 [ 773.927746][T15295] ? dev_get_flags+0x1c0/0x1c0 [ 773.932556][T15295] ? rcu_is_watching+0x11/0xa0 [ 773.937365][T15295] ? trace_contention_end+0x5f/0x170 [ 773.942671][T15295] dev_change_flags+0xe4/0x1a0 [ 773.947453][T15295] dev_ifsioc+0x130/0xd40 [ 773.951867][T15295] ? dev_ioctl+0xe80/0xe80 [ 773.956322][T15295] ? apparmor_capable+0x12c/0x190 [ 773.961383][T15295] ? full_name_hash+0x8e/0xe0 [ 773.966126][T15295] ? dev_load+0x1d/0x1e0 [ 773.970401][T15295] ? dev_load+0x1d/0x1e0 [ 773.974681][T15295] dev_ioctl+0x55e/0xe80 [ 773.978961][T15295] sock_do_ioctl+0x245/0x320 [ 773.983592][T15295] ? sock_show_fdinfo+0xb0/0xb0 [ 773.988510][T15295] sock_ioctl+0x4d2/0x710 [ 773.992870][T15295] ? sock_poll+0x410/0x410 [ 773.997341][T15295] ? bpf_lsm_file_ioctl+0x5/0x10 [ 774.002308][T15295] ? security_file_ioctl+0x7c/0xa0 [ 774.007453][T15295] ? sock_poll+0x410/0x410 [ 774.011897][T15295] __se_sys_ioctl+0xfa/0x170 [ 774.016524][T15295] do_syscall_64+0x4c/0xa0 [ 774.020969][T15295] ? clear_bhb_loop+0x60/0xb0 [ 774.025674][T15295] ? clear_bhb_loop+0x60/0xb0 [ 774.030386][T15295] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 774.036308][T15295] RIP: 0033:0x7f093739ce59 [ 774.040749][T15295] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 774.060398][T15295] RSP: 002b:00007f0938182028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 774.068844][T15295] RAX: ffffffffffffffda RBX: 00007f0937615fa0 RCX: 00007f093739ce59 [ 774.076837][T15295] RDX: 0000200000000040 RSI: 0000000000008914 RDI: 0000000000000005 [ 774.084831][T15295] RBP: 00007f0938182090 R08: 0000000000000000 R09: 0000000000000000 [ 774.092820][T15295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 774.100813][T15295] R13: 00007f0937616038 R14: 00007f0937615fa0 R15: 00007ffcf9a3a428 [ 774.108850][T15295] [ 774.910052][ T4285] Bluetooth: hci4: command 0x0406 tx timeout [ 774.918131][T15323] €: renamed from virt_wifi0 [ 774.990577][T15325] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3386'. [ 775.021972][T15325] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3386'. [ 775.041992][T15332] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3386'. [ 775.555837][T15335] sock: sock_timestamping_bind_phc: sock not bind to device [ 775.564216][T15322] delete_channel: no stack [ 775.611343][T15331] netlink: 'syz.1.3388': attribute type 3 has an invalid length. [ 775.639902][T15331] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3388'. [ 775.962184][T15343] netlink: 134056 bytes leftover after parsing attributes in process `syz.3.3390'. [ 778.311263][T15378] netlink: 1057 bytes leftover after parsing attributes in process `syz.1.3400'. [ 778.359257][T15379] netlink: 1057 bytes leftover after parsing attributes in process `syz.1.3400'. [ 778.872063][T15398] FAULT_INJECTION: forcing a failure. [ 778.872063][T15398] name failslab, interval 1, probability 0, space 0, times 0 [ 778.896940][T15398] CPU: 1 PID: 15398 Comm: syz.3.3406 Not tainted syzkaller #0 [ 778.904487][T15398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 778.914590][T15398] Call Trace: [ 778.917904][T15398] [ 778.920870][T15398] dump_stack_lvl+0x188/0x24e [ 778.925598][T15398] ? show_regs_print_info+0x12/0x12 [ 778.930845][T15398] ? load_image+0x400/0x400 [ 778.935391][T15398] ? verify_lock_unused+0x140/0x140 [ 778.940643][T15398] should_fail_ex+0x399/0x4d0 [ 778.945364][T15398] should_failslab+0x5/0x20 [ 778.949904][T15398] slab_pre_alloc_hook+0x59/0x310 [ 778.954992][T15398] kmem_cache_alloc+0x56/0x2f0 [ 778.959812][T15398] ? skb_clone+0x1e7/0x370 [ 778.964283][T15398] skb_clone+0x1e7/0x370 [ 778.968578][T15398] __netlink_deliver_tap+0x3ed/0x800 [ 778.973937][T15398] ? netlink_deliver_tap+0x2e/0x1b0 [ 778.979184][T15398] netlink_deliver_tap+0x19c/0x1b0 [ 778.984348][T15398] netlink_unicast+0x728/0x8d0 [ 778.989171][T15398] netlink_sendmsg+0x8ad/0xbd0 [ 778.993992][T15398] ? netlink_getsockopt+0x550/0x550 [ 778.999247][T15398] ? aa_sock_msg_perm+0x94/0x150 [ 779.004222][T15398] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 779.009541][T15398] ? security_socket_sendmsg+0x7c/0xa0 [ 779.015032][T15398] ? netlink_getsockopt+0x550/0x550 [ 779.020256][T15398] ____sys_sendmsg+0x5be/0x970 [ 779.025060][T15398] ? __sys_sendmsg_sock+0x30/0x30 [ 779.030095][T15398] ? __import_iovec+0x315/0x500 [ 779.034971][T15398] ? import_iovec+0x6f/0xa0 [ 779.039483][T15398] ___sys_sendmsg+0x2a2/0x360 [ 779.044189][T15398] ? __sys_sendmsg+0x290/0x290 [ 779.048988][T15398] ? __lock_acquire+0x7d10/0x7d10 [ 779.054071][T15398] __se_sys_sendmsg+0x1bb/0x2a0 [ 779.058950][T15398] ? __x64_sys_sendmsg+0x80/0x80 [ 779.063924][T15398] ? lockdep_hardirqs_on+0x94/0x140 [ 779.069146][T15398] do_syscall_64+0x4c/0xa0 [ 779.073602][T15398] ? clear_bhb_loop+0x60/0xb0 [ 779.078316][T15398] ? clear_bhb_loop+0x60/0xb0 [ 779.083030][T15398] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 779.088955][T15398] RIP: 0033:0x7f83c8d9ce59 [ 779.093383][T15398] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 779.113032][T15398] RSP: 002b:00007f83c9c17028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 779.121496][T15398] RAX: ffffffffffffffda RBX: 00007f83c9015fa0 RCX: 00007f83c8d9ce59 [ 779.129498][T15398] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000006 [ 779.137487][T15398] RBP: 00007f83c9c17090 R08: 0000000000000000 R09: 0000000000000000 [ 779.145474][T15398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 779.153458][T15398] R13: 00007f83c9016038 R14: 00007f83c9015fa0 R15: 00007ffc914cd018 [ 779.161486][T15398] [ 781.186482][T15396] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3403'. [ 781.537763][T15420] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.3409'. [ 785.392737][T15429] netlink: 112 bytes leftover after parsing attributes in process `syz.4.3414'. [ 787.616065][T15449] netlink: 'syz.0.3419': attribute type 3 has an invalid length. [ 787.706911][T15449] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3419'. [ 787.813184][T15454] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3422'. [ 787.909889][T15457] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 787.915956][T15457] syzkaller1: linktype set to 825 [ 788.250442][T15470] sock: sock_timestamping_bind_phc: sock not bind to device [ 789.410858][T15487] bridge0: port 2(bridge_slave_1) entered disabled state [ 789.424157][T15487] bridge0: port 1(bridge_slave_0) entered disabled state [ 789.680667][T15495] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3446'. [ 791.014865][T15506] netlink: 'syz.0.3439': attribute type 16 has an invalid length. [ 791.275921][T15498] netlink: 'syz.3.3436': attribute type 3 has an invalid length. [ 791.284598][T15498] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3436'. [ 791.310059][T15506] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3439'. [ 791.504264][T15504] delete_channel: no stack [ 791.820092][T15521] netlink: 'syz.4.3442': attribute type 39 has an invalid length. [ 791.954562][T15519] netlink: 17861 bytes leftover after parsing attributes in process `syz.2.3441'. [ 793.558392][T15536] sock: sock_timestamping_bind_phc: sock not bind to device [ 793.619170][T15545] netlink: 'syz.3.3450': attribute type 2 has an invalid length. [ 795.419793][T13293] Bluetooth: hci5: command 0x0406 tx timeout [ 808.677972][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.684465][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.444460][T15572] netlink: 'syz.0.3457': attribute type 10 has an invalid length. [ 810.479563][T15572] netlink: 55 bytes leftover after parsing attributes in process `syz.0.3457'. [ 810.576318][T15576] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 810.585397][T15576] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 810.596232][T15576] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 810.606746][T15576] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 810.616826][T15576] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 810.626270][T15576] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 810.635666][T15576] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 810.643548][T15576] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 810.652335][T15576] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 810.661880][T15576] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 810.672270][T15576] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 810.680078][T15576] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 810.688222][T15576] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 810.697561][T15576] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 810.706215][T15576] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 810.714120][T15576] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 810.721651][T15576] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 810.734173][T15576] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 810.742901][T15576] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 810.823142][T15576] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 810.831656][T15576] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 810.840533][T15576] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 810.849872][T15576] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 810.857384][T15576] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 812.769752][T15583] Bluetooth: hci3: command 0x0409 tx timeout [ 812.869790][T15583] Bluetooth: hci6: command 0x0409 tx timeout [ 812.876265][T15583] Bluetooth: hci8: command 0x0409 tx timeout [ 812.919695][T15583] Bluetooth: hci7: command 0x0409 tx timeout [ 814.869808][T15583] Bluetooth: hci3: command 0x041b tx timeout [ 814.919764][T15583] Bluetooth: hci8: command 0x041b tx timeout [ 814.925837][T15583] Bluetooth: hci6: command 0x041b tx timeout [ 815.019581][T15583] Bluetooth: hci7: command 0x041b tx timeout [ 816.919644][T15583] Bluetooth: hci3: command 0x040f tx timeout [ 817.019852][T15583] Bluetooth: hci6: command 0x040f tx timeout [ 817.025969][T15583] Bluetooth: hci8: command 0x040f tx timeout [ 817.069625][T15583] Bluetooth: hci7: command 0x040f tx timeout [ 819.019658][T15583] Bluetooth: hci3: command 0x0419 tx timeout [ 819.069650][T15583] Bluetooth: hci8: command 0x0419 tx timeout [ 819.075741][T15583] Bluetooth: hci6: command 0x0419 tx timeout [ 819.169754][T15583] Bluetooth: hci7: command 0x0419 tx timeout [ 825.210194][T15576] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 825.219339][T15576] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 825.231978][T15576] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 825.242531][T15576] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 825.251636][T15576] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 825.259151][T15576] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 827.319761][T15576] Bluetooth: hci9: command 0x0409 tx timeout [ 829.419687][T15583] Bluetooth: hci9: command 0x041b tx timeout [ 831.269700][T15583] Bluetooth: hci1: command 0x0406 tx timeout [ 831.469680][T15583] Bluetooth: hci9: command 0x040f tx timeout [ 833.569658][T15583] Bluetooth: hci9: command 0x0419 tx timeout [ 851.719663][T15576] Bluetooth: hci2: command 0x0406 tx timeout [ 869.490832][T15583] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 869.500470][T15583] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 869.508717][T15583] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 869.517551][T15583] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 869.529233][T15583] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 869.537972][T15583] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 869.710243][T15583] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 869.723855][T15583] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 869.732240][T15583] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 869.742429][T15583] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 869.750437][T15583] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 869.757945][T15583] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 870.123483][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.129930][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.469873][T15570] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 871.483817][T15570] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 871.492024][T15570] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 871.502108][T15570] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 871.510368][T15570] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 871.519233][T15570] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 871.570020][T15583] Bluetooth: hci10: command 0x0409 tx timeout [ 871.819697][T15583] Bluetooth: hci11: command 0x0409 tx timeout [ 872.226128][T15583] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 872.237012][T15583] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 872.245710][T15583] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 872.254079][T15583] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 872.262390][T15583] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 872.273965][T15583] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 873.569802][T15583] Bluetooth: hci13: command 0x0409 tx timeout [ 873.670350][T15583] Bluetooth: hci10: command 0x041b tx timeout [ 873.869929][T15583] Bluetooth: hci11: command 0x041b tx timeout [ 874.370019][T15583] Bluetooth: hci12: command 0x0409 tx timeout [ 875.669736][T15583] Bluetooth: hci13: command 0x041b tx timeout [ 875.719883][T15583] Bluetooth: hci10: command 0x040f tx timeout [ 875.969840][T15583] Bluetooth: hci11: command 0x040f tx timeout [ 876.469889][T15583] Bluetooth: hci12: command 0x041b tx timeout [ 877.719729][T15583] Bluetooth: hci13: command 0x040f tx timeout [ 877.819994][T15583] Bluetooth: hci10: command 0x0419 tx timeout [ 878.069889][T15583] Bluetooth: hci11: command 0x0419 tx timeout [ 878.519961][T15583] Bluetooth: hci12: command 0x040f tx timeout [ 879.819683][T15583] Bluetooth: hci13: command 0x0419 tx timeout [ 880.619897][T15583] Bluetooth: hci12: command 0x0419 tx timeout [ 885.652741][T15576] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 885.662233][T15576] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 885.674551][T15576] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 885.684033][T15576] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 885.692389][T15576] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 885.699946][T15576] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 887.719731][T15583] Bluetooth: hci14: command 0x0409 tx timeout [ 889.819733][T15583] Bluetooth: hci14: command 0x041b tx timeout [ 891.869907][T15583] Bluetooth: hci14: command 0x040f tx timeout [ 893.969822][T15583] Bluetooth: hci14: command 0x0419 tx timeout [ 898.969429][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 898.976438][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P15547 [ 898.984269][ C1] (detected by 1, t=10505 jiffies, g=108501, q=2073 ncpus=2) [ 898.991744][ C1] task:syz.2.3451 state:R running task stack:21968 pid:15547 ppid:13291 flags:0x0000400c [ 899.003105][ C1] Call Trace: [ 899.006410][ C1] [ 899.009366][ C1] ? mark_lock+0x94/0x320 [ 899.013732][ C1] ? __lock_acquire+0x12f4/0x7d10 [ 899.018786][ C1] ? perf_tp_event+0xc30/0xc30 [ 899.023596][ C1] ? tracing_gen_ctx_irq_test+0xc9/0x150 [ 899.029371][ C1] ? perf_swevent_event+0x1c6/0x570 [ 899.034599][ C1] ? perf_trace_buf_update+0xa8/0x230 [ 899.040040][ C1] ? perf_tp_event+0xc30/0xc30 [ 899.044831][ C1] ? perf_swevent_event+0x1c6/0x570 [ 899.050057][ C1] ? perf_trace_buf_alloc+0x300/0x300 [ 899.055451][ C1] ? perf_trace_buf_update+0xa8/0x230 [ 899.060849][ C1] ? perf_tp_event+0xc30/0xc30 [ 899.065648][ C1] ? perf_tp_event+0xaac/0xc30 [ 899.070450][ C1] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 899.076310][ C1] ? migrate_enable+0x148/0x220 [ 899.081227][ C1] ? trace_call_bpf+0xbf/0x6b0 [ 899.086019][ C1] ? trace_call_bpf+0xbf/0x6b0 [ 899.090896][ C1] ? trace_call_bpf+0xbf/0x6b0 [ 899.095692][ C1] ? __bpf_trace_bpf_trace_printk+0x20/0x20 [ 899.101612][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 899.107632][ C1] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 899.113395][ C1] ? perf_trace_preemptirq_template+0x268/0x320 [ 899.119695][ C1] ? irqentry_enter+0x33/0x50 [ 899.124396][ C1] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 899.131620][ C1] ? ct_irq_exit_irqson+0x113/0x170 [ 899.136854][ C1] ? rcu_is_watching+0x11/0xa0 [ 899.141650][ C1] ? sysvec_apic_timer_interrupt+0x80/0xc0 [ 899.147484][ C1] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 899.153686][ C1] ? __rcu_read_unlock+0xd0/0xd0 [ 899.158684][ C1] ? __rcu_read_unlock+0x78/0xd0 [ 899.163646][ C1] ? rcu_read_unlock+0x85/0xa0 [ 899.168496][ C1] ? rawv6_send_hdrinc+0xf03/0x16c0 [ 899.173724][ C1] ? rawv6_send_hdrinc+0xb41/0x16c0 [ 899.178959][ C1] ? rawv6_probe_proto_opt+0x300/0x300 [ 899.184450][ C1] ? rawv6_push_pending_frames+0x8d0/0x8d0 [ 899.190466][ C1] ? rawv6_sendmsg+0x11b3/0x1700 [ 899.195431][ C1] ? perf_trace_run_bpf_submit+0x124/0x1c0 [ 899.201302][ C1] ? compat_rawv6_ioctl+0x60/0x60 [ 899.206440][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 899.212462][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 899.217702][ C1] ? inet_sendmsg+0x5a/0x2f0 [ 899.222320][ C1] ? inet_sendmsg+0x78/0x2f0 [ 899.226933][ C1] ? inet_send_prepare+0x260/0x260 [ 899.232060][ C1] ? ____sys_sendmsg+0x5be/0x970 [ 899.237029][ C1] ? __sanitizer_cov_trace_pc+0x3e/0x60 [ 899.242613][ C1] ? __sys_sendmsg_sock+0x30/0x30 [ 899.247672][ C1] ? __import_iovec+0x315/0x500 [ 899.252553][ C1] ? import_iovec+0x6f/0xa0 [ 899.257080][ C1] ? ___sys_sendmsg+0x2a2/0x360 [ 899.261968][ C1] ? __sys_sendmsg+0x290/0x290 [ 899.266809][ C1] ? __se_sys_sendmsg+0x1bb/0x2a0 [ 899.271865][ C1] ? __x64_sys_sendmsg+0x80/0x80 [ 899.276853][ C1] ? syscall_enter_from_user_mode+0x2a/0x80 [ 899.282775][ C1] ? do_syscall_64+0x4c/0xa0 [ 899.287390][ C1] ? clear_bhb_loop+0x60/0xb0 [ 899.292091][ C1] ? clear_bhb_loop+0x60/0xb0 [ 899.296797][ C1] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 899.302908][ C1] [ 899.305943][ C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 10486 jiffies! g108501 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 899.318371][ C1] rcu: Possible timer handling issue on cpu=0 timer-softirq=61736 [ 899.326288][ C1] rcu: rcu_preempt kthread starved for 10487 jiffies! g108501 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 899.337779][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 899.347763][ C1] rcu: RCU grace-period kthread stack dump: [ 899.353667][ C1] task:rcu_preempt state:I stack:26864 pid:16 ppid:2 flags:0x00004000 [ 899.362905][ C1] Call Trace: [ 899.366199][ C1] [ 899.369151][ C1] __schedule+0x11d1/0x40e0 [ 899.373699][ C1] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 899.379620][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 899.385545][ C1] ? __sched_text_start+0x8/0x8 [ 899.390420][ C1] ? __mod_timer+0x91e/0xd00 [ 899.395040][ C1] schedule+0xb9/0x180 [ 899.399134][ C1] schedule_timeout+0x184/0x2d0 [ 899.404008][ C1] ? console_conditional_schedule+0x40/0x40 [ 899.409917][ C1] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 899.415833][ C1] ? update_process_times+0x1b0/0x1b0 [ 899.421235][ C1] ? prepare_to_swait_event+0x335/0x350 [ 899.426814][ C1] rcu_gp_fqs_loop+0x303/0x1340 [ 899.431696][ C1] ? rcu_gp_kthread+0x3b0/0x3b0 [ 899.436568][ C1] ? dyntick_save_progress_counter+0x2b0/0x2b0 [ 899.442746][ C1] ? rcu_gp_init+0x14e0/0x14e0 [ 899.447529][ C1] ? rcu_gp_cleanup+0xb41/0xc90 [ 899.452399][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 899.457617][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 899.462840][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 899.468059][ C1] rcu_gp_kthread+0x99/0x3b0 [ 899.472681][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 899.477817][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 899.483734][ C1] ? __kthread_parkme+0x162/0x1c0 [ 899.488965][ C1] kthread+0x29d/0x330 [ 899.493051][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 899.498181][ C1] ? kthread_blkcg+0xd0/0xd0 [ 899.502790][ C1] ret_from_fork+0x1f/0x30 [ 899.507332][ C1] [ 899.510365][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 899.516703][ C1] Sending NMI from CPU 1 to CPUs 0: [ 899.521935][ C0] NMI backtrace for cpu 0 [ 899.521945][ C0] CPU: 0 PID: 15547 Comm: syz.2.3451 Not tainted syzkaller #0 [ 899.521960][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 899.521967][ C0] RIP: 0010:trace_call_bpf+0x0/0x6b0 [ 899.521989][ C0] Code: 66 2e 0f 1f 84 00 00 00 00 00 41 56 53 48 89 f3 49 89 fe e8 52 56 f6 ff 4c 89 f7 48 89 de 5b 41 5e e9 44 62 00 00 0f 1f 40 00 <55> 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 e4 e0 48 81 ec c0 00 [ 899.522002][ C0] RSP: 0018:ffffc90000007be0 EFLAGS: 00000046 [ 899.522016][ C0] RAX: 1ffffd1ffff9aa00 RBX: ffffffff8cb804a0 RCX: ffff88802f4a5940 [ 899.522026][ C0] RDX: 0000000000000100 RSI: ffffe8ffffcd5000 RDI: ffffffff8cb80420 [ 899.522037][ C0] RBP: 0000000000000014 R08: 0000000000000001 R09: ffff8880b8e35558 [ 899.522046][ C0] R10: dffffc0000000000 R11: ffffed10171c6b02 R12: ffffe8ffffcd5000 [ 899.522057][ C0] R13: ffffffff8cb80420 R14: ffff8880b8e35558 R15: dffffc0000000000 [ 899.522068][ C0] FS: 00007f8c0cab06c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 899.522081][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 899.522091][ C0] CR2: 00007f8c0bbea540 CR3: 0000000050fac000 CR4: 00000000003506f0 [ 899.522106][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 899.522115][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 899.522124][ C0] Call Trace: [ 899.522130][ C0] [ 899.522135][ C0] perf_trace_run_bpf_submit+0x79/0x1c0 [ 899.522168][ C0] perf_trace_preemptirq_template+0x268/0x320 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 899.522190][ C0] ? asm_sysvec_irq_work+0x16/0x20 [ 899.522209][ C0] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 899.522229][ C0] ? __irq_exit_rcu+0x147/0x230 [ 899.522244][ C0] ? irq_exit_rcu+0x20/0x20 [ 899.522259][ C0] ? asm_sysvec_irq_work+0x16/0x20 [ 899.522277][ C0] trace_irq_enable_rcuidle+0xd3/0x140 [ 899.522298][ C0] trace_hardirqs_on+0x24/0x40 [ 899.522315][ C0] asm_sysvec_irq_work+0x16/0x20 [ 899.522332][ C0] RIP: 0010:handle_softirqs+0x1c8/0x930 [ 899.522347][ C0] Code: 89 7c 24 44 0f b7 db 48 c7 c7 80 0f 8b 8a e8 2f 90 de 08 65 66 c7 05 15 25 b4 7e 00 00 e8 50 74 39 00 fb 49 c7 c6 c0 a0 80 8c <89> 5c 24 4c b8 ff ff ff ff 0f bc 44 24 4c 41 89 c5 41 ff c5 0f 84 [ 899.522359][ C0] RSP: 0018:ffffc90000007e00 EFLAGS: 00000286 [ 899.522371][ C0] RAX: 11fb42e869582c00 RBX: 0000000000000200 RCX: 11fb42e869582c00 [ 899.522381][ C0] RDX: dffffc0000000000 RSI: ffffffff8a8c19a0 RDI: ffffffff8adf1ba0 [ 899.522391][ C0] RBP: ffffc90000007f30 R08: ffff8880b8e3580b R09: 1ffff110171c6b01 [ 899.522402][ C0] R10: dffffc0000000000 R11: ffffed10171c6b02 R12: dffffc0000000000 [ 899.522413][ C0] R13: 0000000000000000 R14: ffffffff8c80a0c0 R15: 000000000000000a [ 899.522432][ C0] ? kvm_sched_clock_read+0x14/0x40 [ 899.522449][ C0] ? clockevents_program_event+0x22c/0x310 [ 899.522516][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 899.522532][ C0] ? do_softirq+0x210/0x210 [ 899.522551][ C0] __irq_exit_rcu+0x13b/0x230 [ 899.522564][ C0] ? irq_exit_rcu+0x20/0x20 [ 899.522583][ C0] irq_exit_rcu+0x5/0x20 [ 899.522595][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 899.522611][ C0] [ 899.522616][ C0] [ 899.522621][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 899.522639][ C0] RIP: 0010:rcu_read_unlock_special+0x0/0x510 [ 899.522654][ C0] Code: b6 46 66 00 eb b0 44 89 f1 80 e1 07 80 c1 03 38 c1 7c 94 49 89 fd 4c 89 f7 e8 9c 46 66 00 4c 89 ef eb 84 0f 1f 80 00 00 00 00 <55> 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 e4 e0 48 81 ec c0 00 [ 899.522667][ C0] RSP: 0018:ffffc900033375d8 EFLAGS: 00000202 [ 899.522679][ C0] RAX: 0000000000000000 RBX: ffff88802f4a5d7c RCX: 0000000000080000 [ 899.522689][ C0] RDX: ffffc9001c0bf000 RSI: 000000000002fe3b RDI: ffff88802f4a5940 [ 899.522699][ C0] RBP: ffffc90003337788 R08: ffffffff8e1ffbef R09: 1ffffffff1c3ff7d [ 899.522709][ C0] R10: dffffc0000000000 R11: fffffbfff1c3ff7e R12: 1ffff11005e94baf [ 899.522719][ C0] R13: 0000000000000000 R14: ffff88802f4a5d80 R15: dffffc0000000000 [ 899.522737][ C0] __rcu_read_unlock+0x78/0xd0 [ 899.522753][ C0] rcu_read_unlock+0x85/0xa0 [ 899.522773][ C0] rawv6_send_hdrinc+0xf03/0x16c0 [ 899.522795][ C0] ? rawv6_send_hdrinc+0xb41/0x16c0 [ 899.522820][ C0] ? rawv6_probe_proto_opt+0x300/0x300 [ 899.522841][ C0] ? rawv6_push_pending_frames+0x8d0/0x8d0 [ 899.522867][ C0] rawv6_sendmsg+0x11b3/0x1700 [ 899.522887][ C0] ? perf_trace_run_bpf_submit+0x124/0x1c0 [ 899.522913][ C0] ? compat_rawv6_ioctl+0x60/0x60 [ 899.522932][ C0] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 899.522957][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 899.522979][ C0] ? inet_sendmsg+0x5a/0x2f0 [ 899.522993][ C0] ? inet_sendmsg+0x78/0x2f0 [ 899.523007][ C0] ? inet_send_prepare+0x260/0x260 [ 899.523020][ C0] ____sys_sendmsg+0x5be/0x970 [ 899.523043][ C0] ? __sanitizer_cov_trace_pc+0x3e/0x60 [ 899.523060][ C0] ? __sys_sendmsg_sock+0x30/0x30 [ 899.523079][ C0] ? __import_iovec+0x315/0x500 [ 899.523099][ C0] ? import_iovec+0x6f/0xa0 [ 899.523115][ C0] ___sys_sendmsg+0x2a2/0x360 [ 899.523138][ C0] ? __sys_sendmsg+0x290/0x290 [ 899.523187][ C0] __se_sys_sendmsg+0x1bb/0x2a0 [ 899.523209][ C0] ? __x64_sys_sendmsg+0x80/0x80 [ 899.523237][ C0] ? syscall_enter_from_user_mode+0x2a/0x80 [ 899.523254][ C0] do_syscall_64+0x4c/0xa0 [ 899.523273][ C0] ? clear_bhb_loop+0x60/0xb0 [ 899.523291][ C0] ? clear_bhb_loop+0x60/0xb0 [ 899.523309][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 899.523326][ C0] RIP: 0033:0x7f8c0bb9ce59 [ 899.523338][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 899.523349][ C0] RSP: 002b:00007f8c0cab0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 899.523363][ C0] RAX: ffffffffffffffda RBX: 00007f8c0be15fa0 RCX: 00007f8c0bb9ce59 [ 899.523374][ C0] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 899.523383][ C0] RBP: 00007f8c0bc32d6f R08: 0000000000000000 R09: 0000000000000000 [ 899.523392][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 899.523401][ C0] R13: 00007f8c0be16038 R14: 00007f8c0be15fa0 R15: 00007ffff63cced8 [ 899.523418][ C0]