last executing test programs: 4.370065719s ago: executing program 0 (id=3656): r0 = perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x1, 0x7, 0x64, 0x90, 0x0, 0xffffffffffffffc0, 0x4000, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xffffff1d, 0x4, @perf_config_ext, 0x4000, 0x1, 0x5, 0x4, 0xe15, 0x2, 0x4e, 0x0, 0x3, 0x0, 0x2}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x2000000000000}, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, 0x0, 0xf7ffffffffffffff, r0, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xd, 0x8, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1ff}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x53}, @call={0x85, 0x0, 0x0, 0x20}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffff9}]}, 0x0, 0x80, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000340)={0x4, 0x1, 0x9, 0x101}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r3 = socket$kcm(0xa, 0x2, 0x73) setsockopt$sock_attach_bpf(r3, 0x29, 0x21, 0x0, 0x0) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x40000) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000500), 0x1}, 0x9000, 0xfffffffffffffffd, 0x2, 0x7, 0x1000000, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x66) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x3}, 0x0, 0x2, 0xfffffffe, 0x8, 0x2}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x0, 0x0) mkdir(&(0x7f0000000680)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xf2) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000cc0)=ANY=[], 0x50) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={0x0, 0x0, 0x34}, 0x28) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000800)=@bpf_tracing={0x1a, 0x2, &(0x7f00000008c0)=ANY=[@ANYBLOB="b70000000000000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c05b, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x3, 0x0, &(0x7f0000000a40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000000a80)={0x0, 0x1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000ac0)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000d40)=ANY=[], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x19, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg(0xffffffffffffffff, 0x0, 0x40000140) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000540)=@generic={&(0x7f00000014c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r6}, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x4801}) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000c80)={0x0, 0x18, &(0x7f0000001440)=[{&(0x7f0000001480)="2e00000011008188e6b62aa73f72cc9f0ba1f8483e0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) 3.427338236s ago: executing program 3 (id=3663): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r0) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, 0x0, 0x20040040) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="0f000000040000000400000001"], 0x50) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4004743d, 0x110e22fff6) write$cgroup_type(r0, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, 0x0, 0xfe33) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) recvmsg$kcm(r1, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x10042) 3.326668776s ago: executing program 3 (id=3665): bpf$TOKEN_CREATE(0x24, &(0x7f0000000280), 0x8) r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000ff07006c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008d000000720000009500"/88], 0x0, 0xff, 0x0, 0x0, 0x40f00, 0x64, '\x00', 0x0, @fallback=0x18, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3b, 0x0, 0x0, 0x0, 0x20000}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$kcm(0xa, 0x2, 0x73) recvmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x140) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x3c, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000180)=r3}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{0x1, 0xffffffffffffffff}, &(0x7f0000000600), &(0x7f0000000640)=r3}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000006c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x89, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x3}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000001000)={&(0x7f0000000440)="1a3fe6f09edce914dcff02ba541f524c19e3ca64f7f4bf1b624c3d45", &(0x7f0000000e00)=""/86, &(0x7f0000000e80)="6af7af2035156d28f385028907c71cab6c73d32a115d885d135cd4b41159645edd204e6a15ebbd7afe5d95756c96da1cfd99831aa633c4f85650783b2a03ac08645384e68ca9003277ba1e427e0f7f9555e3d1e6947aa2ccf241d18407e0f7cc32aae50ffb8314ef5e83dc42a94b1c80f3c8fe31bf899c8ec11a6654c7fdfe99db2c4556daf3d45cafe5299d8f21512b1b6f17e3f35c433581260f66fedeeaf0b26bd80546b920f020317204ba168f1d724006a89e547ae80fd1b8831c11f586b15f005497a64d68697137ae4d1461f5d1c2cedd1f652349c14e798e1c48f3a55af8687d24499096def7108909a2f1", &(0x7f0000000f80)="d85d3f0d45bcb321e7bd2be380b05fde545d79940acf92396ae74b2306af964733bfd7a6b6929a6d271f23125a17a39e604afe3e3217268653d7dc67ba84dec5ce7716da961115913c89e2949ea1e3b87fd0ff260a752245fb64ba3449090b9d678a1c417b8d1440d3b95013e6bc39fbc8f12050afc79f44b4", 0x2, r5, 0x4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0xd, 0x4, &(0x7f0000000c80)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0xa4}, [@ldst={0x4}]}, &(0x7f0000000cc0)='GPL\x00', 0x5, 0xd2, &(0x7f00000013c0)=""/210, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) recvmsg$unix(r8, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r9, &(0x7f0000000800), 0xfdef) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000001000000000000000", @ANYRES32=0x1, @ANYBLOB="02a40e0d00000000000000ee679d7d8ceb0352ab1b0000000000000000eca40cd6070000000000000025d60d192b6e2b0b36acae4c62b617335c38941454433a339e1908da88e47f2e372c8bc776f3924afabcbee4b62c635b1b5f7400"/106, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="00000000040000000200"/28], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000001040)=@base={0x9, 0x5, 0x4, 0x100, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x1, 0x15, &(0x7f0000001200)=ANY=[@ANYBLOB="1800000000000000000000000000000061180000000000007a0af8ff0800000018110000", @ANYRES32=r11, @ANYBLOB="00000000000000001508020000007d0018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffff8500000001000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000012c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001300)={r13, 0x0, 0xe, 0x0, &(0x7f0000001380)='\x00'/14, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r14 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000900)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x4c6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x3}, 0x50) r15 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0xffffffffffffffff, 0x4e, 0x18}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x12, 0x16, &(0x7f0000000380)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @call={0x85, 0x0, 0x0, 0x7b}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x2}, @ldst={0x3, 0x0, 0x4, 0x5, 0x9, 0x4, 0xffffffffffffffff}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2d3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}], &(0x7f00000004c0)='GPL\x00', 0x5, 0x90, &(0x7f0000000500)=""/144, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x4, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, &(0x7f00000009c0)=[0x1, r7, r5, r9, r5, r10, r14, r15, 0xffffffffffffffff], &(0x7f0000000a00)=[{0x5, 0x1, 0x2, 0x4}, {0x5, 0x5, 0x7, 0xa}], 0x10, 0x2}, 0x94) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f95524fc60040011000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 3.227718767s ago: executing program 1 (id=3666): r0 = perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x7, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x5, 0xc3, &(0x7f0000000d40)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001180)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001200)=@base={0xd, 0x6, 0x4, 0x9f24, 0x1, r2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001280)={{r3}, &(0x7f00000012c0), &(0x7f0000001300)=r2}, 0x20) close(r2) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001340)={r3, &(0x7f0000001380)}, 0x20) 3.10782229s ago: executing program 0 (id=3677): r0 = perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x1, 0x7, 0x64, 0x90, 0x0, 0xffffffffffffffc0, 0x4000, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xffffff1d, 0x4, @perf_config_ext, 0x4000, 0x1, 0x5, 0x4, 0xe15, 0x2, 0x4e, 0x0, 0x3, 0x0, 0x2}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x2000000000000}, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, 0x0, 0xf7ffffffffffffff, r0, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xd, 0x8, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1ff}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x53}, @call={0x85, 0x0, 0x0, 0x20}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffff9}]}, 0x0, 0x80, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000340)={0x4, 0x1, 0x9, 0x101}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r3 = socket$kcm(0xa, 0x2, 0x73) setsockopt$sock_attach_bpf(r3, 0x29, 0x21, 0x0, 0x0) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x40000) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000500), 0x1}, 0x9000, 0xfffffffffffffffd, 0x2, 0x7, 0x1000000, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x66) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x3}, 0x0, 0x2, 0xfffffffe, 0x8, 0x2}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x0, 0x0) mkdir(&(0x7f0000000680)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xf2) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000cc0)=ANY=[], 0x50) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={0x0, 0x0, 0x34}, 0x28) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000800)=@bpf_tracing={0x1a, 0x2, &(0x7f00000008c0)=ANY=[@ANYBLOB="b70000000000000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c05b, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x3, 0x0, &(0x7f0000000a40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000000a80)={0x0, 0x1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000ac0)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000d40)=ANY=[], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x19, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg(0xffffffffffffffff, 0x0, 0x40000140) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000540)=@generic={&(0x7f00000014c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r6}, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x4801}) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000c80)={0x0, 0x18, &(0x7f0000001440)=[{&(0x7f0000001480)="2e00000011008188e6b62aa73f72cc9f0ba1f8483e0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) 2.946189976s ago: executing program 2 (id=3668): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x13, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x22, 0x2, 0x2, &(0x7f0000000240)) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x8, 0x5, 0x7, 0x8, 0x0, 0x80000001, 0x100, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x8000000000000000, 0x3}, 0x4, 0x1, 0x9, 0x3, 0x800000010000, 0xc, 0x9, 0x0, 0x7f, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x861, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0xf}, 0x401, 0x2, 0xfffffffe, 0x4, 0x5, 0x7, 0x1, 0x0, 0x486, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) close(r0) socket$kcm(0x2, 0x2, 0x73) r1 = bpf$ITER_CREATE(0x21, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x0, 0x4, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000440)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500), 0x200002, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000540), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYRESOCT=0x0], 0x8) sendmsg$inet(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x400c080) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000d80)="48000000150081fb7059ae08060c040002fff903905800000000000000006fabca3b4e7d06a6bd7c00000000030000068a562ad6e74703c48f93bc06020000004603b886a5e54f8f", 0x48}], 0x1}, 0x4000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000e40)={0x3, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x101000, 0x7, 0x8, 0x0, 0x0, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x10001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) close(r5) recvmsg$unix(r4, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000ec0)={0x0, 0x0, 0x0}, 0x0) 2.759213225s ago: executing program 0 (id=3669): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r0, 0x107, 0x8, &(0x7f0000001800), 0x4) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001880)=""/27, 0x1b}, 0x60) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x66) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0xff00) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xf, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x100100, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001940)={0xffffffffffffffff, 0xffffffffffffff32, &(0x7f00000018c0)}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000012c0)={r2, 0x0, 0x6, 0x8, &(0x7f0000001340)='\x00\x00\x00\x00\x00\x00', &(0x7f0000001380)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000013c0)={0x10, 0x4, &(0x7f0000001480)=ANY=[@ANYBLOB="b400000000007a5726f726a972c21d1f24f4fbc8e19a00007941d0561939e68da74e84a02a"], 0x0, 0x2, 0xc3, &(0x7f0000001500)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000001640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x104000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000016c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) sendmsg$inet(r4, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001780)=ANY=[@ANYRES32, @ANYBLOB="e000000164010100000000001c"], 0x68}, 0x804) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000001980), 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000580)="d800000018007b7be00212ba0d0505040a003f00000f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b3162700e06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5005ccca262f3d40fad95667e04adcdf63cc1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e0700000004000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) 2.657601585s ago: executing program 2 (id=3670): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000580)="d800000018007b7be00212ba0d0505040a003f00000f040b067c55a1bc0009001e00069903003f0015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b3162700e06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5005ccca262f3d40fad95667e04adcdf63cc1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e0700000004000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) 2.455692087s ago: executing program 2 (id=3671): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xa, [@struct={0x8, 0x2, 0x0, 0xf, 0x0, 0x81, [{0xe, 0x0, 0x3}, {0x7, 0x3, 0xfffffffd}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x2e]}}, &(0x7f0000000100)=""/249, 0x46, 0xf9, 0x6}, 0x28) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000040)='FROZEN\x00', 0x7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)=@generic={&(0x7f0000000200)='./file0\x00', r2}, 0x18) ioctl$SIOCSIFHWADDR(r2, 0x541b, &(0x7f0000000340)={'vcan0\x00', @multicast}) syz_clone(0x22023500, 0x0, 0x0, 0x0, 0x0, 0x0) 2.438037958s ago: executing program 1 (id=3672): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000001340)=ANY=[@ANYBLOB="33fe00005400911fc2bce1902cb50cc007"], 0xfe33) perf_event_open$cgroup(&(0x7f0000000080)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0xd, 0x1}]}}, 0x0, 0x26}, 0x20) r1 = socket$kcm(0x29, 0x4, 0x0) sendmsg$kcm(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000440)='%!', 0x2}, {&(0x7f0000000480)="26c380ac81dc2c6cac3156b1396c4da9dd619cab0bf5e9190e797538b56e569e141cbd737b4a7038e3dc06aa021b39ae23ba8bf5dd9b62fe50bd9e1bfa3fd6984cf7ba8629d9a8c8384fbc5f09db6af63b50545e26b43f2a5d40c08b982be015040263cf9b0a3238985921510501826313c920f5c6f133d335c18edf9987add5aee2df062f4b77ca602854a7c5b95d10b7d7ef6ca16db9cd5d9e9a816e03583592cca2b22520c0fa6e1b651b009aab201f1b97c53014a2f165c6c55170b75cad7fc88cb7279a0b49a3070c3b74087c39990c2800756bb6c0bf74d541765468e10a57dd1ba53ffdfd4325f4fe62d4122a1b876d075b59406cb0", 0xf9}, {&(0x7f0000000580)="046bdc3b079ac7d2c6d77f678ea38e0bb7788405f683296520b8aca0086fc8aaa38a9fe39399c1f109f9cfa3f82d6bfe15a9c8fe4a71ad46121442499dcb00f7d08c9bf20f16f31de4d91d376c5ac90bc675a8a07ef79f03b3475f538d3d3f8ca30839cf96a27eb5d2322fec1c8470a4995fd07ea742354bb294abe7a442f3df26b79dbb77c8212752dfc4b5006f9d56", 0x90}, {&(0x7f0000000640)="04e2ee54e732d31ff2530959bbf195a13bf840495bbd660df919fccd68467bb053548d66f81db7d93aaa92697da5cfe9da8c1190c1ac792a50bf81015ae42373b52e4c1e4a8e16f31f10776e751a4b9e7ae5672d8c9b1cf267a2d1390f4337261a14c6361a1af6fe8decf5bdb7ddfff629a50c22fa570ff52aa2dce723fff0b78daf498b707e62e1083ed800d78266f9e3775767ad842c6a17512d0084af2d9450f293", 0xa3}], 0x4, &(0x7f0000000740)=[{0xb8, 0x84, 0x724, "520a3d57fa4ad1a4c9e2d3d72861dbe49dd5cdc218946e80eaf4046fce64ffa321dfdfb30c85e4ee79f9f1b11630324d89abbc4c3d6591bd2612effee59a64b5b19522cc8fc3aaedf5fb5f65c17603bdffc2b5dd14739f8b9896ac8df0fb9c747ec0db9b58410f6963975c8cdd8c4c9f7010fd916a3ad98865932691b555b75d01024ff07293cbe46f7f2833fda4ad0657b2df4d60124e619be291f922970d524e"}, {0x88, 0x10d, 0x6, "5b5552d5d4cef954e950063d52a7139c6cb8e6b7785b3adbf16da95111be51881f15443cd1520ff9005bf0682e58db5c9d36563b01b20a8aab850f4b1474dffe9f93f09f58dc183aed2a8c276e76d9170e9fa8cfaf946586b1142f7e1e1408c98933070dcefcac4aa9086cf562a935bf0fdec229aeab75"}, {0x20, 0x1, 0x1, "65518d64c4d98b80bb"}, {0x98, 0x6, 0xffffff81, "7a5f446ad08fd3cfdbee495648aac8c5d86c6a5ac4a2bd82965274d86921a1d8e0ec496f3caa510e3e4d0ce89a9f27c5202e2995809c0d6bd02b227f0a0272a23fe9adefaa7d21c564a538f78a020f95ae3694b587ab0b261de3aac5c5d4593677954ecfb0a436908695db10ebf48521b5f8335da02010c9d0b354969b319135064e02"}, {0xa8, 0x84, 0xa6, "1314159b0012ceb68d3a63ac26d5fe7dcb3a4abfddf2c2127c4e11cc8374858fc9fea9bcfc7dc12ec07d7985fa1d2bf3f80ba190fbc536b2aeff312365dee9c98b64139d09ed35fb14fef22e3f2908260ba2754ce554196199ec4cbe274e992c0d565d7229bbfafc9d5b5c81bcb93be8f144a3d2e87cd23ebf98e9c7d89f18ac0a5484e9641c054731e75b8e10f89ab5061dd3b63b"}], 0x2a0}, 0x4c080) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x0, 0x20}, 0x50) r2 = socket$kcm(0xf, 0x3, 0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000a40)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000ec0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x4480, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000f40)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=@base={0x9, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x1, 0xc, &(0x7f0000001100)=@framed={{}, [@generic={0x7a, 0xa, 0x0, 0xfffffff8}, @map_fd={0x18, 0x1, 0x1, 0x0, r5}, @generic={0x15, 0x1, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r6}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000001180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000001240)='\x00'/14, 0x0, 0x80000004, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001280)={{r6}, &(0x7f00000012c0), &(0x7f0000001300)}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x1, 0xb, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000c40)=r8, 0x4) sendmsg$unix(r3, &(0x7f0000000c80)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0x29, 0x0, 0x0) sendmsg$inet(r2, &(0x7f00000002c0)={0x0, 0x3000000, &(0x7f0000000300)=[{&(0x7f0000000340)="0205000902000000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000cc0)=@base={0xf, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000013006bcd9e3fe3d46e48aa31086b8703130000001f0000000000000005000300182f0a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c902d1938037e73f07d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 2.42310283s ago: executing program 0 (id=3673): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x1b, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x105c43, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000e00), 0x0, 0x10, &(0x7f0000000e40), 0x2ca}, 0x48) perf_event_open(&(0x7f0000000e80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x40034, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0xfffffffe, 0x8}, 0x1b, 0x8, 0x3, 0x1, 0x8, 0xfffffffd, 0x4, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffdfffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40814) recvmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x61, &(0x7f0000000100)=[{&(0x7f0000000fc0)=""/4096, 0x1000}], 0x1}, 0x10100) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc0)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000002040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb0105", 0x1e}], 0x1, 0x0, 0x0, 0xc9e}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="06000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x10, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000280)={&(0x7f00000002c0)=@pptp={0x18, 0x2, {0x3, @rand_addr=0x64010101}}, 0x80, &(0x7f0000000340)=[{0x0}], 0x1, &(0x7f00000007c0)=ANY=[@ANYBLOB="10000000000000000f010000060000001000000000003ed7766f63000016010000320200001000000000000000020100000200000040000000000000000f01000000020000daee842ca8d18ff7ffffffffffffff93fd3649d276118e5fe2c6b9b61191b8153468ad052d79a225374b6cad18fe6400"], 0x70}, 0x2) sendmsg$kcm(r1, 0x0, 0x40) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000480), 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0xfffffffc, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x2d1}, 0x20a8, 0x0, 0x3, 0x0, 0x9, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x20900000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], &(0x7f0000002f80)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002fc0)={r3, 0x18000000000002a0, 0xe2f, 0x60000000, &(0x7f0000003040)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x8, &(0x7f0000003140), &(0x7f0000003180), 0x0, 0x700}, 0x68) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x7, 0x0, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x1, 0x84) sendmsg$kcm(r1, &(0x7f00000005c0)={&(0x7f0000000600)=@l2tp6={0xa, 0x0, 0x4, @local, 0x3, 0x4}, 0x80, &(0x7f0000000680)=[{0x0, 0x21}], 0x1}, 0x4804) bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="0b00000005000000010001000a00afcb25c4d627079d178e0914050001000000", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) 2.240644079s ago: executing program 3 (id=3685): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) perf_event_open(&(0x7f00000003c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8006fffe, 0x9200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x9, 0x3ff}, 0x0, 0xfff, 0x1, 0x2, 0x0, 0x0, 0xd, 0x0, 0xf1a}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000008c0)=r4, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x6000002f, &(0x7f0000000100)="b9ff0f316844268cb89e14f008004ce0007200002000002f77030a89079f03b18000071c1c0300845013f2325f0094090519fa0000880b943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c060000000000005992078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc04308461738190da450296b0ac014968ce23eefc9d4246dd14afbf79a228326c3acc240d7da058fa4806d1f5f7ff40000001600"/249, 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffe}, 0x2c) 1.946077389s ago: executing program 2 (id=3675): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r0) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, 0x0, 0x20040040) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="0f000000040000000400000001"], 0x50) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4004743d, 0x110e22fff6) write$cgroup_type(r0, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, 0x0, 0xfe33) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) recvmsg$kcm(r1, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x10042) 1.886901445s ago: executing program 4 (id=3676): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xa, 0x205, 0xff, 0x7, 0x0, 0x1, 0xd6}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000100)={r2, &(0x7f0000000140), &(0x7f00000006c0)=""/10, 0x2}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1c, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1812"], 0x0, 0x3963, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000340)={'bridge0\x00', 0x1}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r3, &(0x7f0000000b40)={&(0x7f0000000000)=@hci={0x1f, 0x0, 0x2}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000980)="471026f1cee3b206149301d1c332e05e654fa8dd2c871447e47d689571bdb8268f7090e2031288e4f1c92d65fa2802745f431308ace3b79c463acbebc20729c76db66f3f852721b3a0904fe0b573626fed78c0c22a458252643795eb25396a48d5ec97be907b769134b614e03e84c5a7f01f954b68ef04e3970d6794ad1913b318115ce8ca6a61a935c5b6fd442b166036dd1f8770e94b12ec0e7a21", 0x9c}], 0x1, &(0x7f0000000a80)=[{0x20, 0x10a, 0x16, "9b069010067db8897b0a6695cb"}, {0x90, 0x1, 0xfffffffa, "8391b558189e0e94fe1e15864178e25d466c5ac1826eb1b0a464e733ad0644da8423ca914947c1d95202dbf3a082a060c245b4bbb99e0d40962b42b685f8b9c744f3112021d8a64b062492a0e3afaeab771266b44b23fd0ca004e4991b024210a3b0d463cefe020c88d28b8b2ab95a2a2d647e38207c8133f2a8d3d362eaa4"}], 0xb0}, 0x4000) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x200b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a5bd76, 0xb, 0x9, 0x6, 0x9, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r4 = socket$kcm(0xa, 0x2, 0x73) setsockopt$sock_attach_bpf(r4, 0x29, 0x4d, 0x0, 0xfcd8) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x20000003, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000540)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0) recvmsg$kcm(r5, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x10122) perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x4, 0x0, 0x9f, 0xd4, 0x0, 0x2000000, 0x8dde, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x4, @perf_config_ext={0x4, 0xf9}, 0x806, 0xc8, 0x22, 0x4, 0x400, 0x0, 0x0, 0x0, 0x4d9, 0x0, 0x3}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) recvmsg$unix(r6, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)}, 0x40002100) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1000000004000000"], 0x48) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd63fc80fc020c2f00db5b686158bbcfe8875a060300000023000000000000000000000000ac1414aa3a2008"], 0xfdef) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000007c0)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)}, 0x0) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x1, 0xe, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f0000002100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000002140), 0x8, 0x10, &(0x7f0000002180), 0x10}, 0x94) sendmsg$kcm(r1, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000002200)=[{&(0x7f0000002240)="2e00000010008188040f80ec59acbc0413a1810039000000000b0000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x40000) sendmsg$kcm(r0, &(0x7f0000002280)={0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f0000002300)="d80000002000811f4e81f782db44b90402000000e8fe55a1180015000600142603600e1209000a0000000401a80016000a00114006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0808856e408e8d8ef52b49816277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006d8df969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970100040000", 0xd8}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0xe80, 0x0, &(0x7f0000000200)="ffffffff106c3e5e4c5a506bd990", 0x0, 0x6101, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.74715717s ago: executing program 2 (id=3678): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f00000007c0)={&(0x7f0000000440)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000880)="f5d29d424cf07188d97c48f53d241d872943414fc74e9ab8f19d6c1eed194ec102bb296317b4851e2e722c2d7eccbd2c2a435d047bfc474bb34dd8cf4c1037fe8e4e886aa31a2845e41445ae25f1f5dbcb70d07b87a12b70fcdcabe87fd508412b57b4a3bc337aff83f7eef7f6af3292acf00c69838b5a4c196fcc0c751ac1d4b8894d5ff068f35f6ea5dc2fad039e0bb161d3c09739", 0x96}, {&(0x7f0000000500)="bba210695000ed3976b041603462554856c49aecbe00b2274e5f466f06fbd6f9bdb7721c72e9a8cd88064c877070bbaf574de53e77545c46aa920576133c8d64e65ef1418da5e4fa479ae805e071ea3c1eec68dd7d112656905b58c34a7a49ae55e75809217377651746a81bc9394b5a3e02c9058861d7a5c79aed451bc78fa649a46214328a8e157951d8e4b943ad57d85ed386e73a85d74b5eb9af2325c3e7c7063a20ca3f90e55cfcf4a40d47730862bad685d56954", 0xb7}], 0x2, &(0x7f0000000640)=ANY=[@ANYBLOB="11000000000000000000000001000000b280000000000000ac00000000000000000000000700000094040000890b5eac1e0001ac1414aa4434d3a1ffffffff00000031ac1414bb00000004ac141442000000087f00000100000000ac141415000000097f000001000000048803e500443c3b410000000000000004ac141413000000027f000001000000030a010100000000007f00000100000005ac1e0101000000077f0000010000000883175dffffffffac14140ce0000002ac14143bac1414bb010000000000110010000000000000000000010000000900000000000000110000000000000000000000010000000400000000000000"], 0xf8}, 0x20000000) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x110805, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="1400000028000b6394f90509a16dd8e50000cc57", 0x14}], 0x1}, 0x20040000) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f00000002c0)={0x2, 0x4c20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000300)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xf}, @loopback}}}], 0x20}, 0xe900) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xe, &(0x7f0000000940)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000002402000020fe29817a0af0fff8ffffff69a4f0ff00000000b70600000018d1fe2d6405000000000075040000000000400704000000000000b7040000100000206a0700fe000000008500000005000000b70000000a00000095000000000000000000c2c62f6004ad13aa957e2af5e49a53c2868f0399d909a63796c113a80c19aab9d607000000b6c9483be3f0d3253730e714c46cc4f79fd2b316da4f0de8163f6242fa7323f1740637c48468766af540439fce41f144631ac262dcae18c3d1a1fbe96dc86035b44174f7c0620254ab6d285e6b343185089a0f119e31975e551558050800000000000000125d67857f290870093f38153608561a2128a79cce912d1f05de330800a9f5422bee8ca49166f6a587f2f593775afcd071efc5a972f757521b7b38ec273c2ad3e406f8c124f7dc1c4553229a69df4b2780e6da4420d71489fe383e0b5ce08b750502f2b8add8d2dddde19ac050537e973782b4053150580035fb2c579e1b2100000033d1ee8cab6d236f05b1f7b9f78fd5abfe033eb79f7a0b498366f5edfe311258016fbf47d9c85bf5325bf61419372be377022433e20900a262b20bb8b36de7b0e6c5ebfc5baec1ebe58d4af587d33e2935ad68da6e0fea5c21301f5d002b51a5b60fc741cb2c5d4cd5e896774f9293a6435558795043404ac6eafc8310fbcacca7f971b260fd06d4590ded8429fcd1c9a8dbbdedb32675388df363c0bc536e00448208b72405ebf27ddb402e5a2d675aaad92e183cef1eadc1661140fb567b55c72907a1aca75277a5f0022b1e957ba737f10f1161c5ae6e2cc64072ff3b4e76084922242e63d4b7806e30f786cff147e4bc819060678319a0e5534f5a0db52526c30000000000000000000000a63705b1a60525620acca06d57c055059df7651768310c9085c5f86be6ab819506961ad51f18b35fdc3fd4d0a0dbbdcd494ef168931f27748787bee95d739fef7ee67dd21c34647de82707e41d7db6d981a4fcf0bbd3d38ebb7a2489e28c6b28c0f70092ffb016b7766399555f3e6b538c2c862d17e53eaeb2036f9f0ab6e95e71bda4b5bbf53344264ad93bac1207b31d6e9c78181c7fe204c0b7582d1c762857f2a2e0c60f4a4855591a4f70f94df9629e470701103c40c8f6d3a3068091d62b58999e0a046f9509cb8ddc2a9ad4e0f1f85e5f076218b4b931acdff0c34fc5bdbad17ec481f1c9b17727c14e053e315d0d8d03c24ddaba65c5ce5b1aa04d1f767e25662b155d49460ec720d54044ac2856c11407835f341e2614bcae270000000001000000df7f736aab5d713240b2f40ec7be8251eba969686b2670ddc1a84df6ab12ab3e0cf8747837062233935704ebbd943ef0c5fef29513c7c1d6d2611796dccb45bdfd9e6533ad3574be5b9ea70e0c3b41a32067c03f5f8ed147cd0655c90d656f66eaed18a3c284c4f19417b5d91431759356db5d45ea40c9866957105b6252b0c028c672049ce163126f143f5758faf2a43f4c4f45a69b4e9113f85ae531085c11c75edbdee5af454757cdaff396c15ab9b210c202ffaea96d1bac60c6d6c56a4babc659858789bd479334e13e1c7876f95429431e61400815788c1397b260600d78e7513c58d9ac9474d392cc06f789753e1e7ebf5f1b55e2a64b9150c6580bf48e7bff763034801cccf403108d127b959ffc425a563ea2b90fbe779fd7d2ebfe94"], &(0x7f0000000e40)='GPL\x00'}, 0x48) r4 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000e80)=r3, 0x4) write$cgroup_subtree(r2, &(0x7f0000000ec0)=ANY=[], 0xfe33) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000f80)="5c00000052006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038021d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d49380e78ff6a1577ae18c819945fb4e37e70e4509c5", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10) recvmsg$kcm(r5, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f0000001080)=""/4073, 0xfe9}, {&(0x7f0000002080)=""/174, 0xae}], 0x2}, 0x20000000) recvmsg$kcm(r5, &(0x7f0000002140)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r1, &(0x7f0000002180)={0x0, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000021c0)={0x1, 0xe, &(0x7f0000002280)=ANY=[@ANYBLOB="b7000000ff00001fbfa300000000000007030000f0ffffff620af0fff8ffffff79a4f0ff000000002d040200000000001d400200000000004704000001ed000062030000000000001d440000000000007a0a00fe00ffffffc3030000f1000000b5040000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710e4d58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebaa2c598b4fc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d300000080e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d156ae8383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15f279b513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aa0000000000000000832371fe5bc621426d1ed0a4a99702cc1b692c3f0b15629eaf4c12a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbad937f778af083e055f6138a757ebd0ed93517a6b244f9acf41ac5d73a008364e0606a594807031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac42738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c25000000000000000005a7b57f03ca91a01ba2e30ca9be8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998802008f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91ed92cac7c2ccd17d338bbda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922928e000000ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abb8a9982ce68abff28861aac8302d2685"], &(0x7f0000002b40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000002b80), 0x8, 0x10, &(0x7f0000002bc0), 0x10}, 0x94) r6 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r6, &(0x7f0000000800)={&(0x7f0000000840)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xfd}}, 0x10, 0x0}, 0x3000c085) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000ec0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) recvmsg$unix(r7, &(0x7f0000002c40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002c80)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r6, 0x6, 0x17, &(0x7f0000002cc0)=r9, 0x4) syz_clone(0x201000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000002c00)) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000602e0484c9aa8bd9000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) 1.367411859s ago: executing program 1 (id=3679): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = gettid() perf_event_open(&(0x7f00000003c0)={0x6, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0xad55, 0x80090, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000009, 0x3ff}, 0x0, 0x100000000000fff, 0x1, 0x2, 0x8000000002, 0x0, 0xd, 0x0, 0xf1a, 0x0, 0x8}, r1, 0x6, 0xffffffffffffffff, 0x1) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1f, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x0, 0x28, &(0x7f0000000ec0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x75}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x2}, @map_val={0x18, 0x6, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0xd2ba}, @exit, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x675}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1ffc}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @func]}, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="1801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x15917939fc24ceb8}, 0x94) r6 = perf_event_open(&(0x7f0000000740)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xdc101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x1, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r7 = perf_event_open(&(0x7f00000007c0)={0x1, 0x80, 0x17, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf2103, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0}, 0x40, 0x0, 0x0, 0x5, 0x7, 0x1, 0x1}, 0x0, 0xffefffffffffffff, r6, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x7, 0xc, &(0x7f00000009c0)=ANY=[], &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) syz_clone(0x20102400, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x11, 0x10, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800000091000000000000000100000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf01000000000000550901000000000095010000000000001daaf5ff00000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000b80)='GPL\x00', 0x7, 0x1000, &(0x7f0000001f00)=""/4096, 0x41100, 0xd, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x25) close(0x4) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setsockopt$sock_attach_bpf(r2, 0x107, 0x12, &(0x7f00000008c0)=r5, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x6000002f, &(0x7f0000000100)="b9ff0f316844268cb89e14f008004ce000720e002000002f77030a89079f03b18000071c1c0300845013f2325f0094090519fa0000880b943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c060000000000005992078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc04308461738190da450296b0ac014968ce23eefc9d4246dd14afbf79a228326c3acc240d7da058fa4806d1f5f7ff40000001600"/249, 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffe}, 0x2c) close(0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000002f40)={0xffffffffffffffff, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002fc0)={0xffffffffffffffff, 0xe0, &(0x7f0000003000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000003100)=[0x0, 0x0], 0x0, 0x1f, 0x0, 0x0, 0x10, &(0x7f0000003140), &(0x7f0000003180), 0x8, 0xa0, 0x8, 0x8, &(0x7f00000031c0)}}, 0x10) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000003200)={'some', 0x20, 0x2a, 0x20, 0x800}, 0x2f) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000003240)={0xffffffffffffffff, 0xe0, &(0x7f0000003280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000003380)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, &(0x7f00000033c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000003400)=[0x0, 0x0], 0x0, 0x8f, &(0x7f0000003440)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x0, 0x0, 0x0, 0x0, 0x75, 0x8, 0x8, &(0x7f00000034c0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000003500)={0x14, 0x0, 0x0, &(0x7f00000035c0)='syzkaller\x00', 0x9, 0xe0, &(0x7f0000003600)=""/224, 0x40f00, 0xc, '\x00', r11, @fallback=0x3d, 0xffffffffffffffff, 0x8, &(0x7f0000003700)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000003740)={0x5, 0x5, 0x5, 0x7}, 0x10, r12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r13 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000003780)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000037c0)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r13, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000038c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000039c0)={0xf, 0x13, &(0x7f0000000d80)=ANY=[@ANYBLOB="18000000ff0300000000000004000000182b0000", @ANYRES32, @ANYBLOB="0000000000000100405002001e9000008520040000000000181100002e13a71abfcdabe3e4c1d90c4ac3843b0a6d3e8c7a9eeb7e5c389da7254826bb3a9b0ccaafeed6830f8125bb46091fc91e98f0dfaf52f170d4530b59e75cec2148ee8e77a0bbb84bc1e42f77d947523a1e93f17154437df57452c653432a8ce361a87d85a1b6eaa8b82ffcbda993a6d4ff32984b81bfb27008dbcdddbb2225", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000a0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000063b48000f0ffffff184a0000fdffffff00000000000000009500000000000000"], &(0x7f0000000c80)='GPL\x00', 0xffffffff, 0xbc, &(0x7f0000000cc0)=""/188, 0x41100, 0x8, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x8, &(0x7f0000001080)={0x7, 0x3}, 0x8, 0x10, 0x0, 0x0, r12, r10, 0x5, &(0x7f0000003900)=[r9, r13, r9, r5], &(0x7f0000003940)=[{0x4, 0x4, 0xa, 0x3}, {0x4, 0x4, 0x2, 0x8}, {0x0, 0x4, 0x9, 0x6}, {0x4, 0x3, 0xb, 0x7}, {0x5, 0x1, 0x0, 0x5}], 0x10, 0xed3}, 0x94) 1.326163603s ago: executing program 3 (id=3680): r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f00000029c0)={&(0x7f0000000100)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000002780)=[{&(0x7f00000006c0)='{', 0x1}], 0x1}, 0x4000040) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000001040)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000140)="97", 0xffe0}], 0x1}, 0x0) r1 = socket$kcm(0x25, 0x1, 0x0) recvmsg(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000040)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000002c0)={'syzkaller0\x00', @broadcast}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000003c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000000400)=[0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0], 0x0, 0xcc, &(0x7f0000000480)=[{}, {}], 0x10, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0x84, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000300)=r3) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x20000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x0, 0xfffffffffffffffc, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x4, 0x80000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6}, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0xbd0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) 1.280860068s ago: executing program 0 (id=3681): r0 = perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x1, 0x7, 0x64, 0x90, 0x0, 0xffffffffffffffc0, 0x4000, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xffffff1d, 0x4, @perf_config_ext, 0x4000, 0x1, 0x5, 0x4, 0xe15, 0x2, 0x4e, 0x0, 0x3, 0x0, 0x2}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x2000000000000}, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, 0x0, 0xf7ffffffffffffff, r0, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xd, 0x8, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1ff}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x53}, @call={0x85, 0x0, 0x0, 0x20}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffff9}]}, 0x0, 0x80, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000340)={0x4, 0x1, 0x9, 0x101}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r3 = socket$kcm(0xa, 0x2, 0x73) setsockopt$sock_attach_bpf(r3, 0x29, 0x21, 0x0, 0x0) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x40000) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000500), 0x1}, 0x9000, 0xfffffffffffffffd, 0x2, 0x7, 0x1000000, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x66) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x3}, 0x0, 0x2, 0xfffffffe, 0x8, 0x2}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x0, 0x0) mkdir(&(0x7f0000000680)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xf2) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000cc0)=ANY=[], 0x50) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={0x0, 0x0, 0x34}, 0x28) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000800)=@bpf_tracing={0x1a, 0x2, &(0x7f00000008c0)=ANY=[@ANYBLOB="b70000000000000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c05b, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x3, 0x0, &(0x7f0000000a40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f0000000a80)={0x0, 0x1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000ac0)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000d40)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x19, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg(0xffffffffffffffff, 0x0, 0x40000140) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000540)=@generic={&(0x7f00000014c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r7}, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x4801}) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000c80)={0x0, 0x18, &(0x7f0000001440)=[{&(0x7f0000001480)="2e00000011008188e6b62aa73f72cc9f0ba1f8483e0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) 904.205067ms ago: executing program 4 (id=3682): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x13, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x22, 0x2, 0x2, &(0x7f0000000240)) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x8, 0x5, 0x7, 0x8, 0x0, 0x80000001, 0x100, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x8000000000000000, 0x3}, 0x4, 0x1, 0x9, 0x3, 0x800000010000, 0xc, 0x9, 0x0, 0x7f, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x861, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0xf}, 0x401, 0x2, 0xfffffffe, 0x4, 0x5, 0x7, 0x1, 0x0, 0x486, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) close(r0) socket$kcm(0x2, 0x2, 0x73) r1 = bpf$ITER_CREATE(0x21, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x0, 0x4, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000440)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500), 0x200002, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000540), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYRESOCT=0x0], 0x8) sendmsg$inet(r0, &(0x7f00000005c0)={&(0x7f0000000600)={0x2, 0x4e22, @dev}, 0x10, 0x0}, 0x400c080) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000d80)="48000000150081fb7059ae08060c040002fff903905800000000000000006fabca3b4e7d06a6bd7c00000000030000068a562ad6e74703c48f93bc06020000004603b886a5e54f8f", 0x48}], 0x1}, 0x4000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000e40)={0x3, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x101000, 0x7, 0x8, 0x0, 0x0, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x10001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) close(r5) recvmsg$unix(r4, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000ec0)={0x0, 0x0, 0x0}, 0x0) 534.013735ms ago: executing program 4 (id=3683): socket$kcm(0x2c, 0x3, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="5c00000014006b030231a6080c000af32c00009d31fc0000f800250f02000f00e5aa000017d34460bc24eab556bd05251e6182949a2756f475ce36c2d13b48df000000000000ecb8f6ec63c9f4d4938037e786a6d1bdd700e6657594", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x35, &(0x7f0000000040), 0x4) sendmsg$kcm(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000580)="d800000018007b7be00212ba0d0505040a003f00000f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b3162700e06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5005ccca262f3d40fad95667e04adcdf63cc1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e0700000004000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) 406.440328ms ago: executing program 3 (id=3684): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r0, 0x107, 0x8, &(0x7f0000001800), 0x4) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001880)=""/27, 0x1b}, 0x60) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x66) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0xff00) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xf, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x100100, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001940)={0xffffffffffffffff, 0xffffffffffffff32, &(0x7f00000018c0)}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000012c0)={r2, 0x0, 0x6, 0x8, &(0x7f0000001340)='\x00\x00\x00\x00\x00\x00', &(0x7f0000001380)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000013c0)={0x10, 0x4, &(0x7f0000001480)=ANY=[@ANYBLOB="b400000000007a5726f726a972c21d1f24f4fbc8e19a00007941d0561939e68da74e84a02a"], 0x0, 0x2, 0xc3, &(0x7f0000001500)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000001640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x104000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000016c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) sendmsg$inet(r4, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001780)=ANY=[@ANYRES32, @ANYBLOB="e000000164010100000000001c"], 0x68}, 0x804) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000001980), 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000580)="d800000018007b7be00212ba0d0505040a003f00000f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b3162700e06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5005ccca262f3d40fad95667e04adcdf63cc1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e0700000004000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) 405.633528ms ago: executing program 2 (id=3686): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000900), 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3}, 0x50) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907003675f37538e486dd6317ce623900fe800000002000e0865a6596aff57b00000000000000000000000000ac1414"], 0xfe1b) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="850020000000000018100000", @ANYRES32, @ANYBLOB="1700000000000000950000000000000045"], 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x0, 0x3, 0xac, 0xf5, 0x0, 0x3, 0x80, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffff9, 0x2, @perf_bp={&(0x7f0000000040), 0x4}, 0x6002, 0x8, 0xe87e, 0x8, 0x7d0, 0x3, 0xe18, 0x0, 0x0, 0x0, 0x48e3}, 0x0, 0xc, r0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x8, 0x0, 0x100, 0x8020, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x3, 0xfffffffffffffffe}, 0x50) perf_event_open(0x0, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x1c1341, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000a80)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000ac0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000b00), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000b80)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000bc0)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158cf474fec87891f6d76745b686158bbcfe8875afdef00010000000006"], 0x66) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r0, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000540)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, &(0x7f0000000580)=[0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x3d, &(0x7f0000000600)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0xdb, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x1, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000840)={0x4, 0xc, 0x7fff, 0xffff}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000880)=[{0x2, 0xfffffff8, 0x9}, {0x3, 0x1, 0x6, 0x2}, {0x5, 0x4, 0x79b2971b, 0x5}, {0x2, 0x1, 0x1, 0x7}, {0x5, 0x1, 0x3, 0xc}], 0x10, 0x800}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0x6, &(0x7f00000003c0)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x7}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000400)='GPL\x00', 0x5, 0x29e, &(0x7f0000000440)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) socketpair(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)) 392.012889ms ago: executing program 0 (id=3687): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x2, 0x4, 0x49, 0x1, 0x0, 0xffffffffffffffff, 0x2}, 0x50) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x4000045) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180800000000000000000000000000009500000000000000c3be95c373a09c4749fffa35b4090343d37d681597bf583ab3b1257f9121229273d57a1b44d0b83a9f45552483d0a3d474eabd606e7efc26024e3fede73546b48802e99d030300000090713a2c1a90"], 0x0}, 0x94) r3 = socket$kcm(0x2, 0x5, 0x84) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={r1, 0x58, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) setsockopt$sock_attach_bpf(r3, 0x84, 0x76, 0x0, 0x0) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001d00), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001e80)={0x18, 0x27, &(0x7f0000001ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xc4f}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@jmp={0x5, 0x1, 0xb, 0x3, 0x9, 0x100, 0x4}, @alu={0x4, 0x0, 0x1, 0x8, 0x3, 0x50, 0xfffffffffffffff4}, @call={0x85, 0x0, 0x0, 0xc2}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x2}, @ldst={0x3, 0x2, 0x2, 0x1, 0x3, 0x0, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x5}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xb85}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001c00)='GPL\x00', 0x7ff, 0x83, &(0x7f0000001c40)=""/131, 0x41100, 0x24, '\x00', r4, 0x0, r5, 0x8, &(0x7f0000001d40)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000001d80)={0x3, 0x7, 0xfffffff9, 0x1}, 0x10, 0x0, 0x0, 0xa, 0x0, &(0x7f0000001dc0)=[{0x2, 0x3, 0xf, 0x8}, {0x4, 0x4, 0xa, 0x8}, {0x5, 0x4, 0x9, 0x5}, {0x4, 0x5, 0x1, 0xb}, {0x4, 0x4, 0x3, 0x6}, {0x4, 0x1, 0x4}, {0x2, 0x5, 0x9, 0x4}, {0x5, 0x2, 0x8, 0x7}, {0x1, 0x2, 0x8, 0x1}, {0x5, 0x5, 0x9, 0xa}], 0x10, 0xfffffff8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001880)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001900), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001940)={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm=0x1b}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000001a00)={'wlan1\x00', 0x800}) socketpair(0x1, 0x3, 0x0, &(0x7f0000001a40)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001a80)='./cgroup/syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8946, &(0x7f0000001ac0)) sendmsg$kcm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000580)="d800000018007b7be00212ba0d0505040a3f3f00000f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b3162700e06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5005ccca262f3d40fad95667e04adcdf63cc1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e0700000004000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r7, &(0x7f0000001840)={&(0x7f0000000040)=@abs, 0x6e, &(0x7f0000001780)=[{&(0x7f00000000c0)=""/105, 0x69}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/236, 0xec}], 0x3, &(0x7f00000017c0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x60}, 0x20) 339.627065ms ago: executing program 1 (id=3688): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x13, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x22, 0x2, 0x2, &(0x7f0000000240)) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x8, 0x5, 0x7, 0x8, 0x0, 0x80000001, 0x100, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x8000000000000000, 0x3}, 0x4, 0x1, 0x9, 0x3, 0x800000010000, 0xc, 0x9, 0x0, 0x7f, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x861, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0xf}, 0x401, 0x2, 0xfffffffe, 0x4, 0x5, 0x7, 0x1, 0x0, 0x486, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) close(r0) socket$kcm(0x2, 0x2, 0x73) r1 = bpf$ITER_CREATE(0x21, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x0, 0x4, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000440)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500), 0x200002, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000540), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYRESOCT=0x0], 0x8) sendmsg$inet(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x400c080) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000d80)="48000000150081fb7059ae08060c040002fff903905800000000000000006fabca3b4e7d06a6bd7c00000000030000068a562ad6e74703c48f93bc06020000004603b886a5e54f8f", 0x48}], 0x1}, 0x4000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000e40)={0x3, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x101000, 0x7, 0x8, 0x0, 0x0, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x10001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) close(r5) recvmsg$unix(r4, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000ec0)={0x0, 0x0, 0x0}, 0x0) 339.176195ms ago: executing program 4 (id=3689): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r0) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x20040040) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="0f000000040000000400000001"], 0x50) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4004743d, 0x110e22fff6) write$cgroup_type(r0, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, 0x0, 0xfe33) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) recvmsg$kcm(r1, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x10042) 302.411419ms ago: executing program 3 (id=3690): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000001340)=ANY=[@ANYBLOB="33fe00005400911fc2bce1902cb50cc007"], 0xfe33) perf_event_open$cgroup(&(0x7f0000000080)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0xd, 0x1}]}}, 0x0, 0x26}, 0x20) r1 = socket$kcm(0x29, 0x4, 0x0) sendmsg$kcm(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000440)='%!', 0x2}, {&(0x7f0000000480)="26c380ac81dc2c6cac3156b1396c4da9dd619cab0bf5e9190e797538b56e569e141cbd737b4a7038e3dc06aa021b39ae23ba8bf5dd9b62fe50bd9e1bfa3fd6984cf7ba8629d9a8c8384fbc5f09db6af63b50545e26b43f2a5d40c08b982be015040263cf9b0a3238985921510501826313c920f5c6f133d335c18edf9987add5aee2df062f4b77ca602854a7c5b95d10b7d7ef6ca16db9cd5d9e9a816e03583592cca2b22520c0fa6e1b651b009aab201f1b97c53014a2f165c6c55170b75cad7fc88cb7279a0b49a3070c3b74087c39990c2800756bb6c0bf74d541765468e10a57dd1ba53ffdfd4325f4fe62d4122a1b876d075b59406cb0", 0xf9}, {&(0x7f0000000580)="046bdc3b079ac7d2c6d77f678ea38e0bb7788405f683296520b8aca0086fc8aaa38a9fe39399c1f109f9cfa3f82d6bfe15a9c8fe4a71ad46121442499dcb00f7d08c9bf20f16f31de4d91d376c5ac90bc675a8a07ef79f03b3475f538d3d3f8ca30839cf96a27eb5d2322fec1c8470a4995fd07ea742354bb294abe7a442f3df26b79dbb77c8212752dfc4b5006f9d56", 0x90}, {&(0x7f0000000640)="04e2ee54e732d31ff2530959bbf195a13bf840495bbd660df919fccd68467bb053548d66f81db7d93aaa92697da5cfe9da8c1190c1ac792a50bf81015ae42373b52e4c1e4a8e16f31f10776e751a4b9e7ae5672d8c9b1cf267a2d1390f4337261a14c6361a1af6fe8decf5bdb7ddfff629a50c22fa570ff52aa2dce723fff0b78daf498b707e62e1083ed800d78266f9e3775767ad842c6a17512d0084af2d9450f293", 0xa3}], 0x4, &(0x7f0000000740)=[{0xb8, 0x84, 0x724, "520a3d57fa4ad1a4c9e2d3d72861dbe49dd5cdc218946e80eaf4046fce64ffa321dfdfb30c85e4ee79f9f1b11630324d89abbc4c3d6591bd2612effee59a64b5b19522cc8fc3aaedf5fb5f65c17603bdffc2b5dd14739f8b9896ac8df0fb9c747ec0db9b58410f6963975c8cdd8c4c9f7010fd916a3ad98865932691b555b75d01024ff07293cbe46f7f2833fda4ad0657b2df4d60124e619be291f922970d524e"}, {0x88, 0x10d, 0x6, "5b5552d5d4cef954e950063d52a7139c6cb8e6b7785b3adbf16da95111be51881f15443cd1520ff9005bf0682e58db5c9d36563b01b20a8aab850f4b1474dffe9f93f09f58dc183aed2a8c276e76d9170e9fa8cfaf946586b1142f7e1e1408c98933070dcefcac4aa9086cf562a935bf0fdec229aeab75"}, {0x20, 0x1, 0x1, "65518d64c4d98b80bb"}, {0x98, 0x6, 0xffffff81, "7a5f446ad08fd3cfdbee495648aac8c5d86c6a5ac4a2bd82965274d86921a1d8e0ec496f3caa510e3e4d0ce89a9f27c5202e2995809c0d6bd02b227f0a0272a23fe9adefaa7d21c564a538f78a020f95ae3694b587ab0b261de3aac5c5d4593677954ecfb0a436908695db10ebf48521b5f8335da02010c9d0b354969b319135064e02"}, {0xa8, 0x84, 0xa6, "1314159b0012ceb68d3a63ac26d5fe7dcb3a4abfddf2c2127c4e11cc8374858fc9fea9bcfc7dc12ec07d7985fa1d2bf3f80ba190fbc536b2aeff312365dee9c98b64139d09ed35fb14fef22e3f2908260ba2754ce554196199ec4cbe274e992c0d565d7229bbfafc9d5b5c81bcb93be8f144a3d2e87cd23ebf98e9c7d89f18ac0a5484e9641c054731e75b8e10f89ab5061dd3b63b"}], 0x2a0}, 0x4c080) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x0, 0x20}, 0x50) r2 = socket$kcm(0xf, 0x3, 0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000a40)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000ec0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x4480, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000f40)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=@base={0x9, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x1, 0xc, &(0x7f0000001100)=@framed={{}, [@generic={0x7a, 0xa, 0x0, 0xfffffff8}, @map_fd={0x18, 0x1, 0x1, 0x0, r5}, @generic={0x15, 0x1, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r6}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000001180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000001240)='\x00'/14, 0x0, 0x80000004, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001280)={{r6}, &(0x7f00000012c0), &(0x7f0000001300)}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x1, 0xb, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000c40)=r8, 0x4) sendmsg$unix(r3, &(0x7f0000000c80)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0x29, 0x0, 0x0) sendmsg$inet(r2, &(0x7f00000002c0)={0x0, 0x3000000, &(0x7f0000000300)=[{&(0x7f0000000340)="0205000902000000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000cc0)=@base={0xf, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000013006bcd9e3fe3d46e48aa31086b8703130000001f0000000000000005000300182f0a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c902d1938037e73f07d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 256.213023ms ago: executing program 1 (id=3691): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0x7, 0x8}, 0x2010, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x1e, 0x5, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0xe, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0xf}, 0x94) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)="d8000000200081044e81f782db44b90402000000e8fe55a11800150006001c0000000e120900030020000401a80016000a0015400600000003080000004dcf5c0468c18ab35d6e7016bb234841ef52b49816277ce06bf600000069438e6fb599e0ced72a6ba86cf917cbec4c2ee5a7adf4090000001fb791643a5ee4ce1b10d414f00004d9db22fe7c9f8775730d16a4683f1aea4edab57a502581ccca9e020000000100000040fad95667e006d8df969b3ef35ce34d4a13821f4fbb9ad809d561cdce81ed0bffece0b42a00"/216, 0xd8}], 0x1}, 0x30008850) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000640)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000600)={@cgroup=r3, r1, 0x13, 0x2004}, 0x20) sendmsg$kcm(r0, &(0x7f0000000180)={&(0x7f0000000200)=@tipc=@id, 0x80, 0x0}, 0x0) close(r0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) socket$kcm(0x10, 0x2, 0x4) r4 = socket$kcm(0xa, 0x1, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000340)=@o_path={&(0x7f0000000300)='./file0\x00', 0x0, 0xc018, r0}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@func={0x5, 0x0, 0x0, 0xc, 0x3}]}, {0x0, [0x61, 0x2e, 0x5f, 0x61, 0x61, 0x5f]}}, 0x0, 0x2c}, 0x28) sendmsg$kcm(r4, &(0x7f0000001980)={0x0, 0x0, 0x0}, 0x20000001) sendmsg(r4, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a80)}, 0x40001) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) 195.59146ms ago: executing program 4 (id=3692): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0xffffff2d, &(0x7f0000000200)=[{&(0x7f0000000240)="c00e020039000b05d25a806f8c6394f90324fc602f00000008000100feff020037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r1) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000700), 0x253, 0x10, &(0x7f0000000740), 0x19f, 0x0, 0xffffffffffffffff, 0xffffffffffffff74}, 0x48) close(r3) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r5) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0800000004"], 0x50) r7 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f0000000000), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\v'], 0x48) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) r10 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r10, 0x29, 0x11, 0x0, 0x0) close(r8) r11 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r11, 0x10f, 0x87, &(0x7f00000008c0), 0x43) setsockopt$sock_attach_bpf(r9, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) close(r1) 115.811118ms ago: executing program 4 (id=3693): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000001340)=ANY=[@ANYBLOB="33fe00005400911fc2bce1902cb50cc007"], 0xfe33) perf_event_open$cgroup(&(0x7f0000000080)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0xd, 0x1}]}}, 0x0, 0x26}, 0x20) r2 = socket$kcm(0x29, 0x4, 0x0) sendmsg$kcm(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000440)='%!', 0x2}, {&(0x7f0000000480)="26c380ac81dc2c6cac3156b1396c4da9dd619cab0bf5e9190e797538b56e569e141cbd737b4a7038e3dc06aa021b39ae23ba8bf5dd9b62fe50bd9e1bfa3fd6984cf7ba8629d9a8c8384fbc5f09db6af63b50545e26b43f2a5d40c08b982be015040263cf9b0a3238985921510501826313c920f5c6f133d335c18edf9987add5aee2df062f4b77ca602854a7c5b95d10b7d7ef6ca16db9cd5d9e9a816e03583592cca2b22520c0fa6e1b651b009aab201f1b97c53014a2f165c6c55170b75cad7fc88cb7279a0b49a3070c3b74087c39990c2800756bb6c0bf74d541765468e10a57dd1ba53ffdfd4325f4fe62d4122a1b876d075b59406cb0", 0xf9}, {&(0x7f0000000580)="046bdc3b079ac7d2c6d77f678ea38e0bb7788405f683296520b8aca0086fc8aaa38a9fe39399c1f109f9cfa3f82d6bfe15a9c8fe4a71ad46121442499dcb00f7d08c9bf20f16f31de4d91d376c5ac90bc675a8a07ef79f03b3475f538d3d3f8ca30839cf96a27eb5d2322fec1c8470a4995fd07ea742354bb294abe7a442f3df26b79dbb77c8212752dfc4b5006f9d56", 0x90}, {&(0x7f0000000640)="04e2ee54e732d31ff2530959bbf195a13bf840495bbd660df919fccd68467bb053548d66f81db7d93aaa92697da5cfe9da8c1190c1ac792a50bf81015ae42373b52e4c1e4a8e16f31f10776e751a4b9e7ae5672d8c9b1cf267a2d1390f4337261a14c6361a1af6fe8decf5bdb7ddfff629a50c22fa570ff52aa2dce723fff0b78daf498b707e62e1083ed800d78266f9e3775767ad842c6a17512d0084af2d9450f293", 0xa3}], 0x4, &(0x7f0000000740)=[{0xb8, 0x84, 0x724, "520a3d57fa4ad1a4c9e2d3d72861dbe49dd5cdc218946e80eaf4046fce64ffa321dfdfb30c85e4ee79f9f1b11630324d89abbc4c3d6591bd2612effee59a64b5b19522cc8fc3aaedf5fb5f65c17603bdffc2b5dd14739f8b9896ac8df0fb9c747ec0db9b58410f6963975c8cdd8c4c9f7010fd916a3ad98865932691b555b75d01024ff07293cbe46f7f2833fda4ad0657b2df4d60124e619be291f922970d524e"}, {0x88, 0x10d, 0x6, "5b5552d5d4cef954e950063d52a7139c6cb8e6b7785b3adbf16da95111be51881f15443cd1520ff9005bf0682e58db5c9d36563b01b20a8aab850f4b1474dffe9f93f09f58dc183aed2a8c276e76d9170e9fa8cfaf946586b1142f7e1e1408c98933070dcefcac4aa9086cf562a935bf0fdec229aeab75"}, {0x20, 0x1, 0x1, "65518d64c4d98b80bb"}, {0x98, 0x6, 0xffffff81, "7a5f446ad08fd3cfdbee495648aac8c5d86c6a5ac4a2bd82965274d86921a1d8e0ec496f3caa510e3e4d0ce89a9f27c5202e2995809c0d6bd02b227f0a0272a23fe9adefaa7d21c564a538f78a020f95ae3694b587ab0b261de3aac5c5d4593677954ecfb0a436908695db10ebf48521b5f8335da02010c9d0b354969b319135064e02"}, {0xa8, 0x84, 0xa6, "1314159b0012ceb68d3a63ac26d5fe7dcb3a4abfddf2c2127c4e11cc8374858fc9fea9bcfc7dc12ec07d7985fa1d2bf3f80ba190fbc536b2aeff312365dee9c98b64139d09ed35fb14fef22e3f2908260ba2754ce554196199ec4cbe274e992c0d565d7229bbfafc9d5b5c81bcb93be8f144a3d2e87cd23ebf98e9c7d89f18ac0a5484e9641c054731e75b8e10f89ab5061dd3b63b"}], 0x2a0}, 0x4c080) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x0, 0x20}, 0x50) r3 = socket$kcm(0xf, 0x3, 0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000a40)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000ec0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x4480, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000f40)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=@base={0x9, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x1, 0xc, &(0x7f0000001100)=@framed={{}, [@generic={0x7a, 0xa, 0x0, 0xfffffff8}, @map_fd={0x18, 0x1, 0x1, 0x0, r6}, @generic={0x15, 0x1, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r7}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000001180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r8, 0x0, 0xe, 0x0, &(0x7f0000001240)='\x00'/14, 0x0, 0x80000004, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001280)={{r7}, &(0x7f00000012c0), &(0x7f0000001300)}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x1, 0xb, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000c40)=r9, 0x4) sendmsg$unix(r4, &(0x7f0000000c80)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0x29, 0x0, 0x0) sendmsg$inet(r3, &(0x7f00000002c0)={0x0, 0x3000000, &(0x7f0000000300)=[{&(0x7f0000000340)="0205000902000000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) perf_event_open$cgroup(&(0x7f0000000380)={0x5, 0x80, 0x0, 0x3, 0xa, 0x40, 0x0, 0x9, 0x0, 0xa, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xa4, 0x4, @perf_config_ext={0x3, 0x81}, 0x1000c1, 0x1ff, 0xfffffff8, 0x8, 0x6, 0x4, 0x1, 0x0, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0xe, r1, 0xe) r10 = socket$kcm(0x10, 0x2, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000cc0)=@base={0xf, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0xd, 0xb, &(0x7f0000000e00)=@framed={{}, [@generic={0x7a, 0xa, 0x0, 0xfffffff8}, @generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff8}, @map_fd={0x18, 0x2, 0x1, 0x0, r11}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x35}, @generic={0xb7}]}, &(0x7f0000000e80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) sendmsg$inet(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000013006bcd9e3fe3d46e48aa31086b8703130000001f0000000000000005000300182f0a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c902d1938037e73f07d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 0s ago: executing program 1 (id=3694): r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='V?\x00\x00-\x00Y'], 0xfe33) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000580)={r0}) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001c00)={0x1, 0xe, &(0x7f0000001cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000002a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f0000002a40)={0x8, 0x1000000}, 0x8}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000002ac0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000002b00)=r2, 0x4) sendmsg$unix(r4, &(0x7f0000002b40)={0x0, 0xfffffffffffffc5d, 0x0}, 0x40010) close(0xffffffffffffffff) r5 = socket$kcm(0x10, 0x5, 0x4) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open$cgroup(&(0x7f0000000100)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x6, &(0x7f0000000240)=ANY=[@ANYBLOB="05000000000000007111420000000000851000000200000085000003000000"], 0x0, 0x5, 0xc3, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r6, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x47, 0x0}}, 0x10) r7 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000640)=""/4081, 0xff1}, {&(0x7f0000001640)=""/107, 0x6b}, {&(0x7f00000016c0)=""/29, 0x1d}], 0x3}, 0x0) write$cgroup_subtree(r7, &(0x7f0000001700)=ANY=[@ANYBLOB="004000003a00913a74067388481f9c0e0a"], 0xfe33) r8 = socket$kcm(0xa, 0x3, 0x73) sendmsg$sock(r8, &(0x7f0000001740)={&(0x7f0000001780)=@nl=@unspec={0x0, 0x0, 0x0, 0xd8ff}, 0x80, 0x0, 0x0, &(0x7f0000001800)=[@timestamping={{0x14, 0x1, 0x25, 0x3}}], 0x18}, 0x0) recvmsg(r8, &(0x7f0000001840)={0x0, 0x0, 0x0}, 0x2102) close(r5) bpf$PROG_LOAD(0x5, &(0x7f0000001880)={0x12, 0x11, &(0x7f0000001940)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_val={0x18, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001a00)='syzkaller\x00', 0x80000000, 0x7f, &(0x7f0000001a40)=""/127, 0x41100, 0x48, '\x00', 0x0, @cgroup_sock_addr=0x13, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001ac0)={0x1, 0x4, 0xfff, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001b00)=[0xffffffffffffffff, 0x1, 0x1], 0x0, 0x10, 0x7}, 0x94) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001b40)='./cgroup.net/syz0\x00', 0x200002, 0x0) sendmsg$inet(r5, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001bc0)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4004004) recvmsg$unix(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@rights={{0x10}}, @cred={{0x1c}}], 0x30}, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f0000000440), 0x4) close(r1) kernel console output (not intermixed with test programs): name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 424.860999][T13109] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 424.875414][T13109] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 424.893009][T13109] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 424.938559][T13174] CPU: 0 PID: 13174 Comm: syz.4.2973 Not tainted syzkaller #0 [ 424.946096][T13174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 424.956368][T13174] Call Trace: [ 424.959665][T13174] [ 424.962605][T13174] dump_stack_lvl+0x188/0x250 [ 424.967304][T13174] ? show_regs_print_info+0x20/0x20 [ 424.972516][T13174] ? load_image+0x410/0x410 [ 424.977051][T13174] ? __lock_acquire+0x7d40/0x7d40 [ 424.982103][T13174] should_fail+0x383/0x4b0 [ 424.986529][T13174] strncpy_from_user+0x32/0x350 [ 424.991393][T13174] bpf_prog_load+0x1fd/0x14e0 [ 424.996096][T13174] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 425.002090][T13174] ? map_freeze+0x360/0x360 [ 425.006597][T13174] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 425.012756][T13174] ? lockdep_hardirqs_on+0x94/0x140 [ 425.017971][T13174] ? bpf_lsm_audit_rule_free+0x10/0x10 [ 425.023437][T13174] ? bpf_lsm_bpf+0x5/0x10 [ 425.027767][T13174] ? security_bpf+0x7a/0xa0 [ 425.032279][T13174] __sys_bpf+0x532/0x6f0 [ 425.036527][T13174] ? bpf_link_show_fdinfo+0x380/0x380 [ 425.041932][T13174] __x64_sys_bpf+0x78/0x90 [ 425.046355][T13174] do_syscall_64+0x4c/0xa0 [ 425.050775][T13174] ? clear_bhb_loop+0x30/0x80 [ 425.055455][T13174] ? clear_bhb_loop+0x30/0x80 [ 425.060137][T13174] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 425.066030][T13174] RIP: 0033:0x7f12de27bb19 [ 425.070450][T13174] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 425.090231][T13174] RSP: 002b:00007f12dc4d2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 425.098660][T13174] RAX: ffffffffffffffda RBX: 00007f12de501fa0 RCX: 00007f12de27bb19 [ 425.106635][T13174] RDX: 0000000000000048 RSI: 00002000000018c0 RDI: 0000000000000005 [ 425.114611][T13174] RBP: 00007f12dc4d2090 R08: 0000000000000000 R09: 0000000000000000 [ 425.122603][T13174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 425.130578][T13174] R13: 00007f12de502038 R14: 00007f12de501fa0 R15: 00007ffdc9815bd8 [ 425.138571][T13174] [ 425.226312][T13109] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 425.825421][T13186] __nla_validate_parse: 2 callbacks suppressed [ 425.825463][T13186] netlink: 212412 bytes leftover after parsing attributes in process `syz.1.2976'. [ 425.922371][T13186] openvswitch: netlink: Flow key attr not present in new flow. [ 426.391903][ T8862] Bluetooth: hci2: command 0x041b tx timeout [ 426.786544][T13185] netlink: 3752 bytes leftover after parsing attributes in process `syz.4.2977'. [ 426.815061][T13109] device hsr_slave_0 entered promiscuous mode [ 426.823057][T13109] device hsr_slave_1 entered promiscuous mode [ 426.829555][T13109] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 426.837279][T13109] Cannot create hsr debugfs directory [ 426.852382][T13179] netlink: 'syz.0.2975': attribute type 10 has an invalid length. [ 427.151185][T13109] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.217013][T13203] netlink: 'syz.4.2991': attribute type 10 has an invalid length. [ 427.356056][T13109] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.452771][T13212] netlink: 13695 bytes leftover after parsing attributes in process `syz.2.2984'. [ 427.518226][T13109] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.584141][T13218] netlink: 'syz.4.2987': attribute type 21 has an invalid length. [ 427.601746][T13218] netlink: 144 bytes leftover after parsing attributes in process `syz.4.2987'. [ 427.644235][T13109] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.885817][T13222] Dead loop on virtual device ip6_vti0, fix it urgently! [ 428.004223][T13227] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2988'. [ 428.053821][T13227] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 428.173344][T13227] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 428.380229][T13233] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2990'. [ 428.429487][T13233] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 428.472287][T12602] Bluetooth: hci2: command 0x040f tx timeout [ 428.618145][T13224] rxe_eth0 speed is unknown, defaulting to 1000 [ 428.622764][T13109] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 428.742583][T13109] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 428.778469][T13109] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 428.805191][T13109] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 428.966316][T13242] netlink: 3752 bytes leftover after parsing attributes in process `syz.0.2993'. [ 429.151555][T13109] 8021q: adding VLAN 0 to HW filter on device bond0 [ 429.222543][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 429.231108][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 429.262936][T13109] 8021q: adding VLAN 0 to HW filter on device team0 [ 429.295971][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 429.315921][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 429.331166][ T4347] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.338343][ T4347] bridge0: port 1(bridge_slave_0) entered forwarding state [ 429.372497][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 429.393277][T13254] netlink: 'syz.1.2999': attribute type 10 has an invalid length. [ 429.414733][T13254] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2999'. [ 429.483723][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 429.498819][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 429.538188][ T4347] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.545379][ T4347] bridge0: port 2(bridge_slave_1) entered forwarding state [ 429.568545][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 429.590620][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 429.652182][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 429.700768][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 429.710892][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 429.710988][T13264] Dead loop on virtual device ip6_vti0, fix it urgently! [ 429.720648][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 429.748774][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 429.757736][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 429.767610][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 429.784857][T13109] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 429.799192][T13109] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 429.818210][T13265] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3002'. [ 429.833670][T13265] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 429.857262][T13265] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 429.885204][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 429.897599][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 430.130277][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 430.147939][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 430.167580][T13109] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 430.193281][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 430.202538][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 430.235312][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 430.246420][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 430.259502][T13109] device veth0_vlan entered promiscuous mode [ 430.268199][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 430.277531][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 430.295106][T13109] device veth1_vlan entered promiscuous mode [ 430.333329][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 430.342877][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 430.351256][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 430.361819][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 430.374024][T13109] device veth0_macvtap entered promiscuous mode [ 430.403894][T13109] device veth1_macvtap entered promiscuous mode [ 430.421455][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 430.429785][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 430.501354][T13109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 430.531634][T13109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.571508][T12602] Bluetooth: hci2: command 0x0419 tx timeout [ 430.588045][T13109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 430.599112][T13109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.617390][T13109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 430.630100][T13109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.648265][T13109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 430.660537][T13109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.677350][T13109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 430.689959][T13109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.713868][T13109] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 430.773915][T13279] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3003'. [ 430.808523][T13279] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 430.838728][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 430.862587][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 430.894473][T13109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 430.911415][T13109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.931588][T13109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 430.951597][T13109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.971421][T13109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 430.990642][T13109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.010669][T13109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 431.021575][T13109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.117478][T13109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 431.129186][T13109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.140706][T13109] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 431.156927][T13109] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.165841][T13109] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.200775][T13109] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.228395][T13109] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.265353][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 431.290357][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 431.747430][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 431.761418][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 431.806555][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 431.824906][ T4277] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 431.866160][ T4277] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 431.919660][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 432.383692][T13304] netlink: 'syz.0.3010': attribute type 3 has an invalid length. [ 432.384412][T13297] netlink: 'syz.0.3010': attribute type 3 has an invalid length. [ 432.438776][T13297] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3010'. [ 432.513636][T13304] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3010'. [ 432.528384][T13299] netlink: 'syz.3.3011': attribute type 10 has an invalid length. [ 433.016253][T13308] rxe_eth0 speed is unknown, defaulting to 1000 [ 433.416809][T13308] chnl_net:caif_netlink_parms(): no params data found [ 433.564439][T13308] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.573009][T13308] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.581972][T13308] device bridge_slave_0 entered promiscuous mode [ 433.592349][T13308] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.599770][T13308] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.610841][T13308] device bridge_slave_1 entered promiscuous mode [ 433.635358][T13308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 433.647855][T13308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 433.713194][T13308] team0: Port device team_slave_0 added [ 433.724474][T13308] team0: Port device team_slave_1 added [ 433.746685][T13308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 433.756735][T13308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 433.785651][T13308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 433.799044][T13308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 433.806234][T13308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 433.834925][T13308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 433.870020][T13308] device hsr_slave_0 entered promiscuous mode [ 433.877589][T13308] device hsr_slave_1 entered promiscuous mode [ 433.885077][T13308] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 433.893612][T13308] Cannot create hsr debugfs directory [ 433.998127][T13308] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.609167][T13328] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.3017'. [ 434.865860][T13308] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.962525][T12600] Bluetooth: hci4: command 0x0409 tx timeout [ 434.994309][T13308] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.096134][T13308] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.122682][T13339] netlink: 'syz.2.3020': attribute type 39 has an invalid length. [ 435.164834][T13333] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3018'. [ 435.325943][T13308] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 435.384114][T13308] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 435.437905][T13308] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 435.482054][T13308] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 435.894714][T13308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 435.955233][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 436.000457][T13356] FAULT_INJECTION: forcing a failure. [ 436.000457][T13356] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 436.072119][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 436.091933][T13356] CPU: 1 PID: 13356 Comm: syz.0.3024 Not tainted syzkaller #0 [ 436.099450][T13356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 436.109530][T13356] Call Trace: [ 436.112827][T13356] [ 436.115782][T13356] dump_stack_lvl+0x188/0x250 [ 436.120495][T13356] ? show_regs_print_info+0x20/0x20 [ 436.125717][T13356] ? load_image+0x410/0x410 [ 436.130248][T13356] ? __lock_acquire+0x7d40/0x7d40 [ 436.135301][T13356] should_fail+0x383/0x4b0 [ 436.139748][T13356] _copy_to_user+0x2e/0x130 [ 436.144272][T13356] simple_read_from_buffer+0xe3/0x150 [ 436.149679][T13356] proc_fail_nth_read+0x1a6/0x220 [ 436.154732][T13356] ? proc_fault_inject_write+0x310/0x310 [ 436.160402][T13356] ? fsnotify_perm+0x254/0x560 [ 436.165203][T13356] ? proc_fault_inject_write+0x310/0x310 [ 436.170859][T13356] vfs_read+0x2ff/0xd50 [ 436.175041][T13356] ? __lock_acquire+0x7d40/0x7d40 [ 436.180102][T13356] ? kernel_read+0x1e0/0x1e0 [ 436.184747][T13356] ? mutex_lock_nested+0x17/0x20 [ 436.189705][T13356] ? __fdget_pos+0x2bf/0x370 [ 436.194333][T13356] ? ksys_read+0x70/0x260 [ 436.198685][T13356] ksys_read+0x153/0x260 [ 436.202949][T13356] ? vfs_write+0xd70/0xd70 [ 436.207392][T13356] ? lockdep_hardirqs_on+0x94/0x140 [ 436.212633][T13356] do_syscall_64+0x4c/0xa0 [ 436.217068][T13356] ? clear_bhb_loop+0x30/0x80 [ 436.221766][T13356] ? clear_bhb_loop+0x30/0x80 [ 436.226475][T13356] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 436.232385][T13356] RIP: 0033:0x7f3e2bb1634e [ 436.236818][T13356] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 436.256443][T13356] RSP: 002b:00007f3e29d8afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 436.264887][T13356] RAX: ffffffffffffffda RBX: 00007f3e29d8b6c0 RCX: 00007f3e2bb1634e [ 436.272907][T13356] RDX: 000000000000000f RSI: 00007f3e29d8b0a0 RDI: 0000000000000007 [ 436.280903][T13356] RBP: 00007f3e29d8b090 R08: 0000000000000000 R09: 0000000000000000 [ 436.288894][T13356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 436.296891][T13356] R13: 00007f3e2bddc128 R14: 00007f3e2bddc090 R15: 00007ffed3b62338 [ 436.304913][T13356] [ 437.060158][T12596] Bluetooth: hci4: command 0x041b tx timeout [ 438.647087][T13308] 8021q: adding VLAN 0 to HW filter on device team0 [ 438.682857][T13354] netlink: 'syz.4.3025': attribute type 13 has an invalid length. [ 438.711683][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 438.731031][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 438.781659][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 438.788861][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 438.853373][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 438.875640][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 438.884335][T13367] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.3029'. [ 438.935959][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 438.970821][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 438.978095][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 439.028351][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 439.090416][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 439.113790][T12596] Bluetooth: hci4: command 0x040f tx timeout [ 439.143032][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 439.194981][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 439.241849][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 439.291823][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 439.333108][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 439.388878][T13308] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 439.452130][T13308] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 439.503892][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 439.534193][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 439.573187][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 439.621785][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 439.662086][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 439.833526][T13378] netlink: 'syz.3.3032': attribute type 10 has an invalid length. [ 440.220467][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.227207][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.279623][T13378] 8021q: adding VLAN 0 to HW filter on device bond0 [ 440.290172][T13378] team0: Port device bond0 added [ 440.490201][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 440.498179][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 440.510862][T13308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 440.547132][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 440.559337][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 440.595535][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 440.604852][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 440.615180][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 440.623624][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 440.633081][T13308] device veth0_vlan entered promiscuous mode [ 440.649590][T13308] device veth1_vlan entered promiscuous mode [ 440.676019][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 440.687031][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 440.697479][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 440.707704][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 440.720221][T13308] device veth0_macvtap entered promiscuous mode [ 440.734400][T13308] device veth1_macvtap entered promiscuous mode [ 440.755558][T13308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 440.766270][T13308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.776813][T13308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 440.787525][T13308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.797918][T13308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 440.808464][T13308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.819791][T13308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 440.830411][T13308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.840561][T13308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 440.851117][T13308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.861090][T13308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 440.872238][T13308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.884508][T13308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 440.896040][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 440.907705][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 440.919099][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 440.933332][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 440.945862][T13308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 440.959700][T13308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.979817][T13308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 440.991674][T13308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.001906][T13308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 441.013198][T13308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.030974][T13308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 441.045184][T13308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.060836][T13308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 441.077721][T13308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.087779][T13308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 441.108930][T13308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.127615][T13308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 441.139616][T13308] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.157271][T13308] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.167025][T13308] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.180958][T13308] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.201477][T12602] Bluetooth: hci4: command 0x0419 tx timeout [ 441.221208][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 441.247882][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 441.481029][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 441.501673][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 441.578512][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 442.218156][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 442.244246][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 442.270365][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 442.286278][T13423] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.3042'. [ 442.512572][T13429] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3013'. [ 442.557791][T13429] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3013'. [ 442.579798][T13429] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3013'. [ 442.610782][T13429] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3013'. [ 442.640260][T13433] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3045'. [ 442.930018][T13440] netlink: 'syz.3.3048': attribute type 10 has an invalid length. [ 444.302179][T13467] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.3057'. [ 444.315468][T13465] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 444.322147][T13465] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 445.126354][T13479] netlink: 'syz.1.3059': attribute type 10 has an invalid length. [ 445.315046][T13479] 8021q: adding VLAN 0 to HW filter on device bond0 [ 445.386184][T13479] team0: Port device bond0 added [ 445.431285][T13476] rxe_eth0 speed is unknown, defaulting to 1000 [ 445.993837][T13487] netlink: 'syz.0.3062': attribute type 10 has an invalid length. [ 446.687233][T13476] chnl_net:caif_netlink_parms(): no params data found [ 446.793773][T13504] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3067'. [ 446.832922][T13504] netlink: 'syz.1.3067': attribute type 6 has an invalid length. [ 446.886831][T13511] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.3068'. [ 446.887842][T13506] FAULT_INJECTION: forcing a failure. [ 446.887842][T13506] name failslab, interval 1, probability 0, space 0, times 0 [ 447.105016][T13476] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.120048][T13476] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.181015][T13476] device bridge_slave_0 entered promiscuous mode [ 447.188531][T13506] CPU: 1 PID: 13506 Comm: syz.0.3066 Not tainted syzkaller #0 [ 447.196040][T13506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 447.206124][T13506] Call Trace: [ 447.209433][T13506] [ 447.212388][T13506] dump_stack_lvl+0x188/0x250 [ 447.217133][T13506] ? show_regs_print_info+0x20/0x20 [ 447.222558][T13506] ? load_image+0x410/0x410 [ 447.227105][T13506] ? __might_sleep+0xf0/0xf0 [ 447.231732][T13506] ? __lock_acquire+0x7d40/0x7d40 [ 447.236883][T13506] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 447.242091][ T8862] Bluetooth: hci0: command 0x0409 tx timeout [ 447.243508][T13506] should_fail+0x383/0x4b0 [ 447.253924][T13506] should_failslab+0x5/0x20 [ 447.258465][T13506] slab_pre_alloc_hook+0x51/0xc0 [ 447.263446][T13506] __kmalloc+0x6b/0x340 [ 447.267725][T13506] ? bpf_test_init+0xf8/0x1b0 [ 447.272641][T13506] bpf_test_init+0xf8/0x1b0 [ 447.277190][T13506] bpf_prog_test_run_xdp+0x1ca/0x910 [ 447.282530][T13506] ? dev_put+0x70/0x70 [ 447.286668][T13506] ? dev_put+0x70/0x70 [ 447.290781][T13506] bpf_prog_test_run+0x31c/0x390 [ 447.295766][T13506] __sys_bpf+0x5a5/0x6f0 [ 447.300056][T13506] ? bpf_link_show_fdinfo+0x380/0x380 [ 447.305517][T13506] __x64_sys_bpf+0x78/0x90 [ 447.309968][T13506] do_syscall_64+0x4c/0xa0 [ 447.314417][T13506] ? clear_bhb_loop+0x30/0x80 [ 447.319137][T13506] ? clear_bhb_loop+0x30/0x80 [ 447.323854][T13506] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 447.329866][T13506] RIP: 0033:0x7f3e2bb55b19 [ 447.334312][T13506] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 447.353953][T13506] RSP: 002b:00007f3e29dac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 447.362419][T13506] RAX: ffffffffffffffda RBX: 00007f3e2bddbfa0 RCX: 00007f3e2bb55b19 [ 447.370432][T13506] RDX: 0000000000000050 RSI: 0000200000000e00 RDI: 000000000000000a [ 447.378448][T13506] RBP: 00007f3e29dac090 R08: 0000000000000000 R09: 0000000000000000 [ 447.386462][T13506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 447.394662][T13506] R13: 00007f3e2bddc038 R14: 00007f3e2bddbfa0 R15: 00007ffed3b62338 [ 447.402713][T13506] [ 447.504266][T13476] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.521529][T13476] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.529910][T13476] device bridge_slave_1 entered promiscuous mode [ 447.688828][T13476] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 447.744361][T13476] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 447.854069][T13476] team0: Port device team_slave_0 added [ 447.888641][T13476] team0: Port device team_slave_1 added [ 447.959355][T13476] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 447.976737][T13476] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 448.042160][T13476] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 448.073888][T13476] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 448.081264][T13476] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 448.272448][T13476] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 448.867842][T13476] device hsr_slave_0 entered promiscuous mode [ 448.917312][T13476] device hsr_slave_1 entered promiscuous mode [ 448.936141][T13476] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 448.966476][T13476] Cannot create hsr debugfs directory [ 448.987082][T13535] netlink: 'syz.4.3075': attribute type 10 has an invalid length. [ 449.282270][ T8862] Bluetooth: hci0: command 0x041b tx timeout [ 449.898133][T13476] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.977938][T13551] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.3079'. [ 450.042964][T13476] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.131719][T13557] netlink: 'syz.0.3080': attribute type 10 has an invalid length. [ 450.333356][T13476] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.454241][T13476] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.566728][T13565] netlink: 164 bytes leftover after parsing attributes in process `syz.4.3081'. [ 450.843091][T13476] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 450.910934][T13476] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 450.964961][T13476] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 451.062304][T13476] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 451.361721][T12596] Bluetooth: hci0: command 0x040f tx timeout [ 451.394858][T13476] 8021q: adding VLAN 0 to HW filter on device bond0 [ 451.452426][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 451.465858][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 451.497935][T13476] 8021q: adding VLAN 0 to HW filter on device team0 [ 451.535030][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 451.548247][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 451.599954][ T157] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.607158][ T157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 451.655969][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 451.673212][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 451.696842][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 451.716964][ T157] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.724243][ T157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 451.761314][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 451.793025][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 451.815713][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 451.839446][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 451.899045][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 451.910189][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 451.940307][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 451.960521][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 451.978946][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 452.012252][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 452.055704][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 452.095509][T13476] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 452.113470][T13585] netlink: 'syz.0.3089': attribute type 10 has an invalid length. [ 452.383396][T13593] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.3091'. [ 452.523485][T13358] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 452.552093][T13358] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 452.567364][T13476] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 452.618963][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 452.637813][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 452.658747][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 452.689679][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 452.713161][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 452.735690][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 452.757120][T13476] device veth0_vlan entered promiscuous mode [ 452.785590][T13476] device veth1_vlan entered promiscuous mode [ 452.845822][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 452.866067][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 452.886531][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 452.915231][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 452.937842][T13476] device veth0_macvtap entered promiscuous mode [ 452.969199][T13476] device veth1_macvtap entered promiscuous mode [ 453.019928][T13606] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.3094'. [ 453.024312][T13476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 453.060168][T13476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.080598][T13476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 453.101503][T13476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.132889][T13476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 453.153958][T13476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.172218][T13476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 453.193123][T13476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.213390][T13476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 453.238078][T13476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.258355][T13476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 453.277654][T13476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.297935][T13476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 453.320166][T13476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.343416][T13476] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 453.366284][T13608] netlink: 'syz.1.3094': attribute type 46 has an invalid length. [ 453.390930][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 453.409976][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 453.430297][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 453.439786][ T8863] Bluetooth: hci0: command 0x0419 tx timeout [ 453.457196][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 453.479707][T13476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 453.507388][T13476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.528155][T13476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 453.549274][T13476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.569534][T13476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 453.590633][T13476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.611336][T13476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 453.633163][T13476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.654235][T13476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 453.676796][T13476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.697068][T13476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 453.717892][T13476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.738308][T13476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 453.759481][T13476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.812564][T13476] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 453.826380][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 453.862864][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 453.890199][T13476] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.909722][T13476] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.928614][T13476] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.940462][T13476] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.203995][ T4347] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 454.258020][ T4347] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 454.306041][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 454.382786][ T157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 454.412309][ T157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 454.448321][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 454.531290][T13632] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.3102'. [ 454.575247][T13624] netlink: 'syz.0.3100': attribute type 10 has an invalid length. [ 454.799446][T13639] netlink: 'syz.2.3104': attribute type 10 has an invalid length. [ 454.876662][T13639] team0: Port device wlan1 added [ 454.937106][T13638] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 455.351968][T13653] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 455.404315][T13653] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 455.516371][T13664] rxe_eth0 speed is unknown, defaulting to 1000 [ 455.676402][T13673] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.3115'. [ 456.381795][T13679] netlink: 'syz.3.3116': attribute type 10 has an invalid length. [ 456.433051][T13690] netlink: 'syz.1.3119': attribute type 10 has an invalid length. [ 456.561679][T13690] team0: Port device wlan1 added [ 456.569988][T13698] netlink: 'syz.4.3121': attribute type 3 has an invalid length. [ 456.588151][T13698] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3121'. [ 456.594855][T13664] chnl_net:caif_netlink_parms(): no params data found [ 456.624876][T13688] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 456.880703][T13664] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.919252][T13664] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.971579][T13664] device bridge_slave_0 entered promiscuous mode [ 457.086057][T13664] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.182205][T13664] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.244550][T13664] device bridge_slave_1 entered promiscuous mode [ 457.342899][T13711] netlink: 'syz.4.3124': attribute type 12 has an invalid length. [ 457.411664][T13711] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3124'. [ 457.511784][ T9596] Bluetooth: hci3: command 0x0409 tx timeout [ 457.603532][T13664] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 457.658634][T13664] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 457.816928][T13664] team0: Port device team_slave_0 added [ 457.897592][T13664] team0: Port device team_slave_1 added [ 457.993172][T13730] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.3129'. [ 458.023355][T13664] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 458.093353][T13664] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 458.305818][T13664] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 458.402507][T13664] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 458.409533][T13664] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 458.532802][T13664] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 458.654296][T13664] device hsr_slave_0 entered promiscuous mode [ 458.692109][T13664] device hsr_slave_1 entered promiscuous mode [ 458.701614][T13664] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 458.709216][T13664] Cannot create hsr debugfs directory [ 458.750968][T13736] netlink: 'syz.2.3131': attribute type 10 has an invalid length. [ 458.813424][T13740] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.3142'. [ 459.386600][T13742] netlink: 'syz.3.3133': attribute type 10 has an invalid length. [ 459.433340][T13742] team0: Port device wlan1 added [ 459.544852][T13741] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 459.582403][T13754] FAULT_INJECTION: forcing a failure. [ 459.582403][T13754] name failslab, interval 1, probability 0, space 0, times 0 [ 459.595361][ T9593] Bluetooth: hci3: command 0x041b tx timeout [ 459.643658][T13754] CPU: 1 PID: 13754 Comm: syz.1.3137 Not tainted syzkaller #0 [ 459.651274][T13754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 459.661448][T13754] Call Trace: [ 459.664752][T13754] [ 459.667707][T13754] dump_stack_lvl+0x188/0x250 [ 459.672425][T13754] ? show_regs_print_info+0x20/0x20 [ 459.677648][T13754] ? load_image+0x410/0x410 [ 459.682182][T13754] ? __might_sleep+0xf0/0xf0 [ 459.686801][T13754] ? __lock_acquire+0x7d40/0x7d40 [ 459.691863][T13754] should_fail+0x383/0x4b0 [ 459.696317][T13754] should_failslab+0x5/0x20 [ 459.700866][T13754] slab_pre_alloc_hook+0x51/0xc0 [ 459.705830][T13754] kmem_cache_alloc_node_trace+0x4a/0x2f0 [ 459.711579][T13754] ? __get_vm_area_node+0x119/0x2d0 [ 459.716810][T13754] __get_vm_area_node+0x119/0x2d0 [ 459.721873][T13754] __vmalloc_node_range+0xef/0x8b0 [ 459.727012][T13754] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 459.732592][T13754] ? end_current_label_crit_section+0x170/0x170 [ 459.738860][T13754] ? __lock_acquire+0x7d40/0x7d40 [ 459.743919][T13754] ? perf_trace_lock_acquire+0xed/0x3f0 [ 459.749499][T13754] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 459.755158][T13754] __vmalloc+0x76/0x80 [ 459.759260][T13754] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 459.764831][T13754] bpf_prog_alloc_no_stats+0x36/0x2c0 [ 459.770227][T13754] bpf_prog_alloc+0x1a/0x1e0 [ 459.774842][T13754] bpf_prog_load+0x7d1/0x14e0 [ 459.779562][T13754] ? map_freeze+0x360/0x360 [ 459.784088][T13754] ? __might_fault+0xb7/0x110 [ 459.788820][T13754] ? __might_fault+0xb3/0x110 [ 459.793528][T13754] ? bpf_lsm_bpf+0x5/0x10 [ 459.797885][T13754] ? security_bpf+0x7a/0xa0 [ 459.802412][T13754] __sys_bpf+0x532/0x6f0 [ 459.806669][T13754] ? bpf_link_show_fdinfo+0x380/0x380 [ 459.812073][T13754] __x64_sys_bpf+0x78/0x90 [ 459.816494][T13754] do_syscall_64+0x4c/0xa0 [ 459.820913][T13754] ? clear_bhb_loop+0x30/0x80 [ 459.825591][T13754] ? clear_bhb_loop+0x30/0x80 [ 459.830272][T13754] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 459.836165][T13754] RIP: 0033:0x7f242ab01b19 [ 459.840583][T13754] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 459.860235][T13754] RSP: 002b:00007f2428d58028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 459.868656][T13754] RAX: ffffffffffffffda RBX: 00007f242ad87fa0 RCX: 00007f242ab01b19 [ 459.876631][T13754] RDX: 000000000000004a RSI: 00002000000017c0 RDI: 0000000000000005 [ 459.884605][T13754] RBP: 00007f2428d58090 R08: 0000000000000000 R09: 0000000000000000 [ 459.892582][T13754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 459.900554][T13754] R13: 00007f242ad88038 R14: 00007f242ad87fa0 R15: 00007fff84621a38 [ 459.908565][T13754] [ 460.429538][T13664] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.483478][T13755] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3135'. [ 460.516128][T13755] device hsr_slave_0 left promiscuous mode [ 460.532664][T13755] device hsr_slave_1 left promiscuous mode [ 460.550171][T13764] netlink: 'syz.2.3139': attribute type 2 has an invalid length. [ 460.570101][T13764] netlink: 'syz.2.3139': attribute type 1 has an invalid length. [ 460.608812][T13764] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.3139'. [ 460.661164][T13754] syz.1.3137: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 460.693606][T13664] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.715505][T13754] CPU: 1 PID: 13754 Comm: syz.1.3137 Not tainted syzkaller #0 [ 460.723032][T13754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 460.733291][T13754] Call Trace: [ 460.736598][T13754] [ 460.739556][T13754] dump_stack_lvl+0x188/0x250 [ 460.744269][T13754] ? rcu_lock_release+0x5/0x20 [ 460.749060][T13754] ? show_regs_print_info+0x20/0x20 [ 460.754286][T13754] ? load_image+0x410/0x410 [ 460.758829][T13754] warn_alloc+0x245/0x320 [ 460.763200][T13754] ? zone_watermark_ok_safe+0x250/0x250 [ 460.768797][T13754] ? __get_vm_area_node+0x2b5/0x2d0 [ 460.774037][T13754] __vmalloc_node_range+0x2b1/0x8b0 [ 460.779268][T13754] ? end_current_label_crit_section+0x170/0x170 [ 460.785552][T13754] ? __lock_acquire+0x7d40/0x7d40 [ 460.790613][T13754] ? perf_trace_lock_acquire+0xed/0x3f0 [ 460.796197][T13754] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 460.801775][T13754] __vmalloc+0x76/0x80 [ 460.805873][T13754] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 460.811447][T13754] bpf_prog_alloc_no_stats+0x36/0x2c0 [ 460.816850][T13754] bpf_prog_alloc+0x1a/0x1e0 [ 460.821462][T13754] bpf_prog_load+0x7d1/0x14e0 [ 460.826180][T13754] ? map_freeze+0x360/0x360 [ 460.830725][T13754] ? __might_fault+0xb7/0x110 [ 460.835446][T13754] ? __might_fault+0xb3/0x110 [ 460.840326][T13754] ? bpf_lsm_bpf+0x5/0x10 [ 460.844684][T13754] ? security_bpf+0x7a/0xa0 [ 460.849214][T13754] __sys_bpf+0x532/0x6f0 [ 460.853486][T13754] ? bpf_link_show_fdinfo+0x380/0x380 [ 460.858910][T13754] __x64_sys_bpf+0x78/0x90 [ 460.863360][T13754] do_syscall_64+0x4c/0xa0 [ 460.867925][T13754] ? clear_bhb_loop+0x30/0x80 [ 460.872626][T13754] ? clear_bhb_loop+0x30/0x80 [ 460.877336][T13754] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 460.883278][T13754] RIP: 0033:0x7f242ab01b19 [ 460.887728][T13754] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 460.907369][T13754] RSP: 002b:00007f2428d58028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 460.915834][T13754] RAX: ffffffffffffffda RBX: 00007f242ad87fa0 RCX: 00007f242ab01b19 [ 460.923840][T13754] RDX: 000000000000004a RSI: 00002000000017c0 RDI: 0000000000000005 [ 460.931844][T13754] RBP: 00007f2428d58090 R08: 0000000000000000 R09: 0000000000000000 [ 460.939943][T13754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 460.947945][T13754] R13: 00007f242ad88038 R14: 00007f242ad87fa0 R15: 00007fff84621a38 [ 460.955966][T13754] [ 461.041914][T13767] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.3140'. [ 461.053502][T13767] bridge_slave_1: default FDB implementation only supports local addresses [ 461.084965][T13664] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.098955][T13754] Mem-Info: [ 461.102699][T13754] active_anon:280 inactive_anon:31117 isolated_anon:0 [ 461.102699][T13754] active_file:24833 inactive_file:38114 isolated_file:0 [ 461.102699][T13754] unevictable:768 dirty:425 writeback:0 [ 461.102699][T13754] slab_reclaimable:21940 slab_unreclaimable:107508 [ 461.102699][T13754] mapped:39664 shmem:25604 pagetables:631 bounce:0 [ 461.102699][T13754] kernel_misc_reclaimable:0 [ 461.102699][T13754] free:1329881 free_pcp:7597 free_cma:0 [ 461.200562][T13754] Node 0 active_anon:1088kB inactive_anon:123056kB active_file:99128kB inactive_file:152456kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:158956kB dirty:1696kB writeback:0kB shmem:99336kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11912kB pagetables:2524kB all_unreclaimable? no [ 461.239963][T13664] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.252892][T13754] Node 1 active_anon:32kB inactive_anon:512kB active_file:204kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:2080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 461.324834][T13754] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 461.422118][T13754] lowmem_reserve[]: 0 2523 2524 2524 2524 [ 461.457245][T13754] Node 0 DMA32 free:1393632kB min:34648kB low:43308kB high:51968kB reserved_highatomic:0KB active_anon:1088kB inactive_anon:117856kB active_file:99128kB inactive_file:152456kB unevictable:1536kB writepending:1696kB present:3129332kB managed:2590800kB mlocked:0kB bounce:0kB free_pcp:26260kB local_pcp:4648kB free_cma:0kB [ 461.541175][T13664] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 461.562042][T13754] lowmem_reserve[]: 0 0 0 0 0 [ 461.572456][T13664] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 461.576134][T13780] netlink: 'syz.2.3144': attribute type 3 has an invalid length. [ 461.588145][T13754] Node 0 Normal free:8kB min:12kB low:12kB high:12kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:916kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 461.592574][T13664] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 461.622345][T13780] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3144'. [ 461.651491][T13754] lowmem_reserve[]: 0 0 0 0 0 [ 461.666536][T13754] Node 1 Normal free:3915460kB min:55240kB low:69048kB high:82856kB reserved_highatomic:0KB active_anon:32kB inactive_anon:512kB active_file:204kB inactive_file:0kB unevictable:1536kB writepending:4kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:5124kB local_pcp:0kB free_cma:0kB [ 461.701423][ T9596] Bluetooth: hci3: command 0x040f tx timeout [ 461.712985][T13664] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 461.742677][T13787] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.3147'. [ 461.786009][T13754] lowmem_reserve[]: 0 0 0 0 0 [ 461.790806][T13754] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 461.821545][T13754] Node 0 DMA32: 606*4kB (UME) 1093*8kB (ME) 417*16kB (UM) 137*32kB (UM) 11*64kB (UM) 252*128kB (UM) 135*256kB (UM) 61*512kB (UM) 17*1024kB (UME) 3*2048kB (UM) 305*4096kB (UM) = 1393808kB [ 461.887838][T13754] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 461.953671][T13754] Node 1 Normal: 97*4kB (UME) 30*8kB (UE) 23*16kB (UME) 181*32kB (UE) 59*64kB (UME) 25*128kB (UME) 15*256kB (UME) 5*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 949*4096kB (M) = 3915460kB [ 461.963283][T13664] 8021q: adding VLAN 0 to HW filter on device bond0 [ 462.014589][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 462.022451][T13754] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 462.026389][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 462.062938][T13754] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 462.075277][T13664] 8021q: adding VLAN 0 to HW filter on device team0 [ 462.093421][T13754] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 462.109683][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 462.132553][T13754] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 462.134742][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 462.164091][T13754] 86139 total pagecache pages [ 462.168832][T13754] 0 pages in swap cache [ 462.182251][ T157] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.189366][ T157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 462.196142][T13754] Swap cache stats: add 0, delete 0, find 0/0 [ 462.218011][T13754] Free swap = 124996kB [ 462.222303][T13754] Total swap = 124996kB [ 462.247221][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 462.256472][T13754] 2097051 pages RAM [ 462.260356][T13754] 0 pages HighMem/MovableOnly [ 462.277794][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 462.283165][T13754] 415364 pages reserved [ 462.305489][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 462.312856][T13754] 0 pages cma reserved [ 462.338295][ T157] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.345473][ T157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 462.387240][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 462.451514][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 462.482458][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 462.513546][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 462.537134][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 462.569140][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 462.741045][T13664] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 462.790540][T13664] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 462.827424][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 462.844421][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 462.869353][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 462.895156][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 462.917502][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 462.943779][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 462.996134][T13804] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3151'. [ 463.023223][T13804] device hsr_slave_0 left promiscuous mode [ 463.068193][T13804] device hsr_slave_1 left promiscuous mode [ 463.738723][T13814] IPv6: Can't replace route, no match found [ 463.752243][ T9583] Bluetooth: hci3: command 0x0419 tx timeout [ 463.932317][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 463.942455][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 464.028700][T13664] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 464.173659][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 464.202277][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 464.288214][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 464.321221][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 464.355667][T13664] device veth0_vlan entered promiscuous mode [ 464.378570][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 464.392448][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 464.601919][T13664] device veth1_vlan entered promiscuous mode [ 464.683814][T13830] netlink: 'syz.1.3158': attribute type 3 has an invalid length. [ 464.712321][T13830] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3158'. [ 464.738744][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 464.762439][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 464.782240][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 464.862196][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 464.905310][T13664] device veth0_macvtap entered promiscuous mode [ 464.929814][T13664] device veth1_macvtap entered promiscuous mode [ 464.974441][T13843] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.3160'. [ 465.860821][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 465.892517][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 465.922177][T13839] netlink: 'syz.3.3159': attribute type 10 has an invalid length. [ 465.969573][T13664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 466.000594][T13664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.043769][T13664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 466.085513][T13664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.113582][T13664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 466.143709][T13664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.198879][T13664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 466.210034][T13664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.220734][T13664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 466.242938][T13664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.312398][T13664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 466.331449][T13664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.361693][T13664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 466.488332][T13664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.498755][T13664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 466.509664][T13664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.522316][T13664] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 466.532042][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 466.544344][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 466.573936][T13857] netlink: 'syz.3.3166': attribute type 4 has an invalid length. [ 466.657232][T13664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 466.691401][T13664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.712806][T13664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 466.740781][T13664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.764014][T13664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 466.787453][T13664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.814675][T13664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 466.833333][T13664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.856914][T13664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 466.891121][T13664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.924708][T13664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 466.962249][T13664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.030645][T13664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 467.063069][T13664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.097257][T13664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 467.141413][T13664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.168071][T13664] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 467.195743][T13862] netlink: 'syz.1.3168': attribute type 12 has an invalid length. [ 467.231514][T13862] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3168'. [ 467.250065][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 467.275840][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 467.308000][T13664] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.334115][T13664] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.382350][T13881] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.3174'. [ 467.411407][T13664] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.420176][T13664] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.333471][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 468.371874][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 468.379925][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 468.461046][ T4347] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 468.483391][ T4347] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 468.494682][T13898] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3175'. [ 468.635785][T13898] device hsr_slave_0 left promiscuous mode [ 468.683930][T13898] device hsr_slave_1 left promiscuous mode [ 469.633223][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 470.251138][T13917] rxe_eth0 speed is unknown, defaulting to 1000 [ 470.533536][T13921] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.3184'. [ 476.184632][T13990] rxe_eth0 speed is unknown, defaulting to 1000 [ 476.464112][T14002] netlink: 'syz.4.3210': attribute type 10 has an invalid length. [ 476.607924][T14007] netlink: 'syz.0.3212': attribute type 3 has an invalid length. [ 476.642836][T14007] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3212'. [ 477.139559][T14020] netlink: 'syz.3.3216': attribute type 2 has an invalid length. [ 477.147620][T14020] netlink: 'syz.3.3216': attribute type 8 has an invalid length. [ 477.156247][T14020] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3216'. [ 477.170719][T14020] FAULT_INJECTION: forcing a failure. [ 477.170719][T14020] name failslab, interval 1, probability 0, space 0, times 0 [ 477.243921][T14020] CPU: 0 PID: 14020 Comm: syz.3.3216 Not tainted syzkaller #0 [ 477.251464][T14020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 477.261551][T14020] Call Trace: [ 477.264861][T14020] [ 477.267828][T14020] dump_stack_lvl+0x188/0x250 [ 477.272564][T14020] ? show_regs_print_info+0x20/0x20 [ 477.277814][T14020] ? load_image+0x410/0x410 [ 477.282375][T14020] ? __lock_acquire+0x7d40/0x7d40 [ 477.287468][T14020] should_fail+0x383/0x4b0 [ 477.291946][T14020] should_failslab+0x5/0x20 [ 477.296481][T14020] slab_pre_alloc_hook+0x51/0xc0 [ 477.301465][T14020] __kmalloc+0x6b/0x340 [ 477.305651][T14020] ? sock_kmalloc+0x92/0xf0 [ 477.310210][T14020] sock_kmalloc+0x92/0xf0 [ 477.314595][T14020] __ip_mc_join_group+0x36b/0x510 [ 477.319688][T14020] ip_mc_autojoin_config+0x173/0x240 [ 477.325021][T14020] ? inet_set_link_af+0x4a0/0x4a0 [ 477.330122][T14020] inet_rtm_newaddr+0x97e/0x18c0 [ 477.335147][T14020] ? inet_netconf_fill_devconf+0x8a0/0x8a0 [ 477.341061][T14020] ? inet_netconf_fill_devconf+0x8a0/0x8a0 [ 477.346902][T14020] rtnetlink_rcv_msg+0x7f1/0xf10 [ 477.351911][T14020] ? rtnetlink_bind+0x80/0x80 [ 477.356621][T14020] ? migrate_enable+0x13e/0x200 [ 477.361532][T14020] ? trace_call_bpf+0x515/0x5b0 [ 477.366421][T14020] ? _local_bh_enable+0xa0/0xa0 [ 477.371342][T14020] ? __bpf_trace_bpf_trace_printk+0x20/0x20 [ 477.377286][T14020] ? __dev_queue_xmit+0x1b64/0x2e50 [ 477.382554][T14020] ? perf_trace_run_bpf_submit+0x124/0x1c0 [ 477.388414][T14020] ? perf_trace_lock+0x301/0x390 [ 477.393400][T14020] ? __copy_skb_header+0x3ba/0x4f0 [ 477.398562][T14020] ? trace_event_raw_event_lock+0x250/0x250 [ 477.404514][T14020] ? __skb_clone+0x446/0x6c0 [ 477.409161][T14020] netlink_rcv_skb+0x1e9/0x430 [ 477.413966][T14020] ? rtnetlink_bind+0x80/0x80 [ 477.418715][T14020] ? netlink_ack+0xb10/0xb10 [ 477.423403][T14020] netlink_unicast+0x804/0x9e0 [ 477.428277][T14020] netlink_sendmsg+0x8ba/0xbe0 [ 477.433113][T14020] ? netlink_getsockopt+0x570/0x570 [ 477.438343][T14020] ? aa_sock_msg_perm+0x94/0x150 [ 477.443329][T14020] ? apparmor_socket_sendmsg+0x88/0x230 [ 477.448931][T14020] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 477.454245][T14020] ? security_socket_sendmsg+0x7c/0xa0 [ 477.459740][T14020] ? netlink_getsockopt+0x570/0x570 [ 477.464982][T14020] ____sys_sendmsg+0x5be/0x8f0 [ 477.469820][T14020] ? __sys_sendmsg_sock+0x30/0x30 [ 477.474916][T14020] ? import_iovec+0x6f/0xa0 [ 477.479476][T14020] ___sys_sendmsg+0x236/0x2e0 [ 477.484224][T14020] ? __sys_sendmsg+0x290/0x290 [ 477.489076][T14020] ? trace_event_raw_event_lock+0x250/0x250 [ 477.495109][T14020] __se_sys_sendmsg+0x1b7/0x2a0 [ 477.500004][T14020] ? __x64_sys_sendmsg+0x80/0x80 [ 477.504971][T14020] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 477.511125][T14020] ? lockdep_hardirqs_on+0x94/0x140 [ 477.516372][T14020] do_syscall_64+0x4c/0xa0 [ 477.520817][T14020] ? clear_bhb_loop+0x30/0x80 [ 477.525523][T14020] ? clear_bhb_loop+0x30/0x80 [ 477.530239][T14020] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 477.536181][T14020] RIP: 0033:0x7f5cebf0cb19 [ 477.540631][T14020] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 477.560274][T14020] RSP: 002b:00007f5cea163028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 477.568729][T14020] RAX: ffffffffffffffda RBX: 00007f5cec192fa0 RCX: 00007f5cebf0cb19 [ 477.576819][T14020] RDX: 0000000004009044 RSI: 0000200000000780 RDI: 0000000000000003 [ 477.584820][T14020] RBP: 00007f5cea163090 R08: 0000000000000000 R09: 0000000000000000 [ 477.592820][T14020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 477.600817][T14020] R13: 00007f5cec193038 R14: 00007f5cec192fa0 R15: 00007fff0b4c78a8 [ 477.608881][T14020] [ 478.286646][T14016] netlink: 'syz.4.3215': attribute type 3 has an invalid length. [ 478.373756][T14016] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3215'. [ 479.899234][T14049] IPv6: Can't replace route, no match found [ 481.495436][T14092] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.3237'. [ 485.184524][T14155] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.3251'. [ 485.248291][T14157] netlink: 65051 bytes leftover after parsing attributes in process `syz.1.3252'. [ 486.381726][T14162] device wlan1 entered promiscuous mode [ 486.408941][T14157] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3252'. [ 486.461446][T14157] : renamed from caif0 [ 486.539976][T14157] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 486.901938][T14190] netlink: 'syz.4.3260': attribute type 39 has an invalid length. [ 488.163873][T14203] netlink: 'syz.1.3264': attribute type 21 has an invalid length. [ 488.526756][T14224] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3267'. [ 489.302615][T14246] FAULT_INJECTION: forcing a failure. [ 489.302615][T14246] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 489.416998][T14248] netlink: 14975 bytes leftover after parsing attributes in process `syz.4.3274'. [ 489.452376][T14246] CPU: 1 PID: 14246 Comm: syz.0.3275 Not tainted syzkaller #0 [ 489.459909][T14246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 489.469999][T14246] Call Trace: [ 489.473312][T14246] [ 489.476266][T14246] dump_stack_lvl+0x188/0x250 [ 489.480981][T14246] ? show_regs_print_info+0x20/0x20 [ 489.486311][T14246] ? load_image+0x410/0x410 [ 489.490860][T14246] ? __lock_acquire+0x7d40/0x7d40 [ 489.496084][T14246] should_fail+0x383/0x4b0 [ 489.500735][T14246] _copy_from_user+0x2e/0x170 [ 489.505448][T14246] bpf_test_init+0x136/0x1b0 [ 489.510081][T14246] bpf_prog_test_run_skb+0x181/0x1190 [ 489.515492][T14246] ? __fget_files+0x402/0x470 [ 489.520222][T14246] ? cpu_online+0x60/0x60 [ 489.524594][T14246] bpf_prog_test_run+0x31c/0x390 [ 489.529614][T14246] __sys_bpf+0x5a5/0x6f0 [ 489.533885][T14246] ? bpf_link_show_fdinfo+0x380/0x380 [ 489.539314][T14246] __x64_sys_bpf+0x78/0x90 [ 489.543858][T14246] do_syscall_64+0x4c/0xa0 [ 489.548308][T14246] ? clear_bhb_loop+0x30/0x80 [ 489.553008][T14246] ? clear_bhb_loop+0x30/0x80 [ 489.557989][T14246] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 489.563906][T14246] RIP: 0033:0x7fafe8445b19 [ 489.568364][T14246] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 489.588000][T14246] RSP: 002b:00007fafe667b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 489.596464][T14246] RAX: ffffffffffffffda RBX: 00007fafe86cc090 RCX: 00007fafe8445b19 [ 489.604644][T14246] RDX: 0000000000000048 RSI: 0000200000001400 RDI: 000000000000000a [ 489.612645][T14246] RBP: 00007fafe667b090 R08: 0000000000000000 R09: 0000000000000000 [ 489.620650][T14246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 489.629099][T14246] R13: 00007fafe86cc128 R14: 00007fafe86cc090 R15: 00007ffebc35e0d8 [ 489.637254][T14246] [ 491.088224][T14283] FAULT_INJECTION: forcing a failure. [ 491.088224][T14283] name failslab, interval 1, probability 0, space 0, times 0 [ 491.155339][T14283] CPU: 1 PID: 14283 Comm: syz.3.3285 Not tainted syzkaller #0 [ 491.162963][T14283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 491.173062][T14283] Call Trace: [ 491.176378][T14283] [ 491.179416][T14283] dump_stack_lvl+0x188/0x250 [ 491.184126][T14283] ? show_regs_print_info+0x20/0x20 [ 491.189353][T14283] ? load_image+0x410/0x410 [ 491.189384][T14283] ? __might_sleep+0xf0/0xf0 [ 491.189405][T14283] ? __lock_acquire+0x7d40/0x7d40 [ 491.189431][T14283] ? verify_lock_unused+0x140/0x140 [ 491.189457][T14283] should_fail+0x383/0x4b0 [ 491.189484][T14283] should_failslab+0x5/0x20 [ 491.189504][T14283] slab_pre_alloc_hook+0x51/0xc0 [ 491.189534][T14283] __kmalloc+0x6b/0x340 [ 491.189552][T14283] ? bpf_test_init+0xf8/0x1b0 [ 491.189581][T14283] bpf_test_init+0xf8/0x1b0 [ 491.189608][T14283] bpf_prog_test_run_xdp+0x1ca/0x910 [ 491.189636][T14283] ? dev_put+0x70/0x70 [ 491.245706][T14283] ? dev_put+0x70/0x70 [ 491.249821][T14283] bpf_prog_test_run+0x31c/0x390 [ 491.254803][T14283] __sys_bpf+0x5a5/0x6f0 [ 491.259092][T14283] ? bpf_link_show_fdinfo+0x380/0x380 [ 491.264668][T14283] ? rcu_nmi_exit+0x6f/0xf0 [ 491.269224][T14283] __x64_sys_bpf+0x78/0x90 [ 491.273675][T14283] do_syscall_64+0x4c/0xa0 [ 491.278121][T14283] ? clear_bhb_loop+0x30/0x80 [ 491.282825][T14283] ? clear_bhb_loop+0x30/0x80 [ 491.287536][T14283] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 491.293459][T14283] RIP: 0033:0x7f5cebf0cb19 [ 491.297896][T14283] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 491.317530][T14283] RSP: 002b:00007f5cea163028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 491.325990][T14283] RAX: ffffffffffffffda RBX: 00007f5cec192fa0 RCX: 00007f5cebf0cb19 [ 491.333992][T14283] RDX: 0000000000000050 RSI: 0000200000000a40 RDI: 000000000000000a [ 491.342003][T14283] RBP: 00007f5cea163090 R08: 0000000000000000 R09: 0000000000000000 [ 491.350091][T14283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 491.358103][T14283] R13: 00007f5cec193038 R14: 00007f5cec192fa0 R15: 00007fff0b4c78a8 [ 491.366377][T14283] [ 492.924241][T14307] netlink: 'syz.0.3293': attribute type 48 has an invalid length. [ 494.862879][T14347] netlink: 'syz.3.3305': attribute type 11 has an invalid length. [ 494.923393][T14349] FAULT_INJECTION: forcing a failure. [ 494.923393][T14349] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 494.970259][T14349] CPU: 0 PID: 14349 Comm: syz.1.3306 Not tainted syzkaller #0 [ 494.977793][T14349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 494.987883][T14349] Call Trace: [ 494.991191][T14349] [ 494.994151][T14349] dump_stack_lvl+0x188/0x250 [ 494.998861][T14349] ? show_regs_print_info+0x20/0x20 [ 495.004186][T14349] ? load_image+0x410/0x410 [ 495.008719][T14349] ? __lock_acquire+0x7d40/0x7d40 [ 495.013772][T14349] ? mark_lock+0x94/0x320 [ 495.018130][T14349] should_fail+0x383/0x4b0 [ 495.023278][T14349] prepare_alloc_pages+0x1e3/0x5b0 [ 495.028436][T14349] __alloc_pages+0x11b/0x480 [ 495.033059][T14349] ? zone_statistics+0x170/0x170 [ 495.038040][T14349] ? rcu_lock_release+0x5/0x20 [ 495.042835][T14349] ? alloc_pages+0x452/0x560 [ 495.047460][T14349] __pmd_alloc+0xa6/0x750 [ 495.051821][T14349] ? __pud_alloc+0x140/0x140 [ 495.056443][T14349] ? count_memcg_event_mm+0x324/0x370 [ 495.061843][T14349] ? remove_device_exclusive_entry+0xac0/0xac0 [ 495.068030][T14349] ? __lock_acquire+0x13b3/0x7d40 [ 495.073107][T14349] handle_mm_fault+0xbd3/0x4440 [ 495.077999][T14349] ? get_page+0xe0/0xe0 [ 495.082238][T14349] ? vmacache_find+0x4e3/0x590 [ 495.087038][T14349] ? vmacache_update+0xa0/0x100 [ 495.091924][T14349] ? find_vma+0x1df/0x230 [ 495.096282][T14349] do_user_addr_fault+0x494/0xc90 [ 495.101348][T14349] exc_page_fault+0x60/0x100 [ 495.105964][T14349] asm_exc_page_fault+0x22/0x30 [ 495.110849][T14349] RIP: 0010:copy_user_generic_unrolled+0x86/0xc0 [ 495.117203][T14349] Code: 4c 8b 5e 38 4c 89 47 20 4c 89 4f 28 4c 89 57 30 4c 89 5f 38 48 8d 76 40 48 8d 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 <4c> 8b 06 4c 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 [ 495.136838][T14349] RSP: 0018:ffffc900035bfb40 EFLAGS: 00050207 [ 495.142946][T14349] RAX: ffffffff83e98801 RBX: 0000000000000034 RCX: 0000000000000006 [ 495.150944][T14349] RDX: 0000000000000004 RSI: 000000110c230020 RDI: ffffc900035bfbc0 [ 495.158938][T14349] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 495.166937][T14349] R10: dffffc0000000000 R11: fffff520006b7f7e R12: 00007ffffffff000 [ 495.175035][T14349] R13: 000000110c230054 R14: ffffc900035bfbc0 R15: 000000110c230020 [ 495.183054][T14349] ? _copy_from_user+0x61/0x170 [ 495.187949][T14349] _copy_from_user+0xfa/0x170 [ 495.192659][T14349] ip_tunnel_siocdevprivate+0xbe/0x1e0 [ 495.198152][T14349] ? ip_tunnel_update+0xc70/0xc70 [ 495.203220][T14349] ? full_name_hash+0x8e/0xe0 [ 495.207939][T14349] dev_ifsioc+0xa30/0xd50 [ 495.212300][T14349] ? dev_ioctl+0xe30/0xe30 [ 495.216746][T14349] ? full_name_hash+0x8e/0xe0 [ 495.221464][T14349] dev_ioctl+0x5df/0xe30 [ 495.225735][T14349] ? get_user_ifreq+0xc7/0x170 [ 495.230525][T14349] sock_ioctl+0x679/0x700 [ 495.234884][T14349] ? sock_poll+0x420/0x420 [ 495.239324][T14349] ? bpf_lsm_file_ioctl+0x5/0x10 [ 495.244306][T14349] ? security_file_ioctl+0x7c/0xa0 [ 495.249427][T14349] ? sock_poll+0x420/0x420 [ 495.253852][T14349] __se_sys_ioctl+0xfa/0x170 [ 495.258482][T14349] do_syscall_64+0x4c/0xa0 [ 495.262985][T14349] ? clear_bhb_loop+0x30/0x80 [ 495.267666][T14349] ? clear_bhb_loop+0x30/0x80 [ 495.272348][T14349] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 495.278262][T14349] RIP: 0033:0x7f242ab01b19 [ 495.282679][T14349] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 495.302284][T14349] RSP: 002b:00007f2428d58028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 495.310701][T14349] RAX: ffffffffffffffda RBX: 00007f242ad87fa0 RCX: 00007f242ab01b19 [ 495.318674][T14349] RDX: 0000200000000cc0 RSI: 00000000000089f2 RDI: 0000000000000004 [ 495.326829][T14349] RBP: 00007f2428d58090 R08: 0000000000000000 R09: 0000000000000000 [ 495.334800][T14349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 495.342771][T14349] R13: 00007f242ad88038 R14: 00007f242ad87fa0 R15: 00007fff84621a38 [ 495.350773][T14349] [ 495.627243][T14362] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3309'. [ 498.056602][T14380] netlink: 65051 bytes leftover after parsing attributes in process `syz.4.3316'. [ 498.157037][T14382] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.3317'. [ 498.266204][T14385] FAULT_INJECTION: forcing a failure. [ 498.266204][T14385] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 498.387397][T14385] CPU: 0 PID: 14385 Comm: syz.0.3318 Not tainted syzkaller #0 [ 498.394929][T14385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 498.405010][T14385] Call Trace: [ 498.408311][T14385] [ 498.411301][T14385] dump_stack_lvl+0x188/0x250 [ 498.416013][T14385] ? show_regs_print_info+0x20/0x20 [ 498.421326][T14385] ? load_image+0x410/0x410 [ 498.425863][T14385] ? __lock_acquire+0x7d40/0x7d40 [ 498.430922][T14385] should_fail+0x383/0x4b0 [ 498.435369][T14385] _copy_from_iter+0x234/0x1160 [ 498.440248][T14385] ? __lock_acquire+0x7d40/0x7d40 [ 498.445301][T14385] ? copy_mc_pipe_to_iter+0x7d0/0x7d0 [ 498.450705][T14385] ? __virt_addr_valid+0x3c6/0x470 [ 498.455842][T14385] ? __phys_addr_symbol+0x2b/0x70 [ 498.460887][T14385] ? __check_object_size+0x30c/0x410 [ 498.466200][T14385] netlink_sendmsg+0x758/0xbe0 [ 498.470998][T14385] ? netlink_getsockopt+0x570/0x570 [ 498.476216][T14385] ? aa_sock_msg_perm+0x94/0x150 [ 498.481177][T14385] ? apparmor_socket_sendmsg+0x88/0x230 [ 498.486742][T14385] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 498.492050][T14385] ? security_socket_sendmsg+0x7c/0xa0 [ 498.497530][T14385] ? netlink_getsockopt+0x570/0x570 [ 498.502755][T14385] ____sys_sendmsg+0x5be/0x8f0 [ 498.507552][T14385] ? __sys_sendmsg_sock+0x30/0x30 [ 498.512606][T14385] ? import_iovec+0x6f/0xa0 [ 498.517138][T14385] ___sys_sendmsg+0x236/0x2e0 [ 498.521849][T14385] ? __sys_sendmsg+0x290/0x290 [ 498.526681][T14385] __se_sys_sendmsg+0x1b7/0x2a0 [ 498.531556][T14385] ? __x64_sys_sendmsg+0x80/0x80 [ 498.536510][T14385] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 498.542527][T14385] ? lockdep_hardirqs_on+0x94/0x140 [ 498.547751][T14385] do_syscall_64+0x4c/0xa0 [ 498.552187][T14385] ? clear_bhb_loop+0x30/0x80 [ 498.556889][T14385] ? clear_bhb_loop+0x30/0x80 [ 498.561594][T14385] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 498.567508][T14385] RIP: 0033:0x7fafe8445b19 [ 498.571949][T14385] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 498.591580][T14385] RSP: 002b:00007fafe669c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 498.600028][T14385] RAX: ffffffffffffffda RBX: 00007fafe86cbfa0 RCX: 00007fafe8445b19 [ 498.608036][T14385] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 498.616032][T14385] RBP: 00007fafe669c090 R08: 0000000000000000 R09: 0000000000000000 [ 498.624025][T14385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 498.632364][T14385] R13: 00007fafe86cc038 R14: 00007fafe86cbfa0 R15: 00007ffebc35e0d8 [ 498.640373][T14385] [ 501.088927][T14398] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.3323'. [ 501.367277][T14416] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 501.373812][T14416] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 501.604279][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.610708][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.884404][T14428] netlink: 'syz.0.3331': attribute type 10 has an invalid length. [ 502.068464][T14431] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3332'. [ 502.427976][T14441] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.3336'. [ 502.822812][T14448] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3337'. [ 503.648389][T14459] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3341'. [ 503.815764][T14434] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 503.966287][T14467] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3343'. [ 504.048252][T14475] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3347'. [ 504.063537][T14476] FAULT_INJECTION: forcing a failure. [ 504.063537][T14476] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 504.071549][T14475] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 504.093655][T14476] CPU: 0 PID: 14476 Comm: syz.0.3348 Not tainted syzkaller #0 [ 504.101186][T14476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 504.111262][T14476] Call Trace: [ 504.114567][T14476] [ 504.117509][T14476] dump_stack_lvl+0x188/0x250 [ 504.122210][T14476] ? show_regs_print_info+0x20/0x20 [ 504.127417][T14476] ? load_image+0x410/0x410 [ 504.132022][T14476] ? __lock_acquire+0x7d40/0x7d40 [ 504.137060][T14476] should_fail+0x383/0x4b0 [ 504.141573][T14476] _copy_from_user+0x2e/0x170 [ 504.146254][T14476] bpf_test_init+0x136/0x1b0 [ 504.150851][T14476] bpf_prog_test_run_skb+0x181/0x1190 [ 504.156235][T14476] ? __fget_files+0x402/0x470 [ 504.160932][T14476] ? cpu_online+0x60/0x60 [ 504.165281][T14476] bpf_prog_test_run+0x31c/0x390 [ 504.170236][T14476] __sys_bpf+0x5a5/0x6f0 [ 504.174495][T14476] ? bpf_link_show_fdinfo+0x380/0x380 [ 504.179900][T14476] __x64_sys_bpf+0x78/0x90 [ 504.184327][T14476] do_syscall_64+0x4c/0xa0 [ 504.188746][T14476] ? clear_bhb_loop+0x30/0x80 [ 504.193433][T14476] ? clear_bhb_loop+0x30/0x80 [ 504.198114][T14476] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 504.204013][T14476] RIP: 0033:0x7fafe8445b19 [ 504.208432][T14476] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 504.228043][T14476] RSP: 002b:00007fafe667b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 504.236463][T14476] RAX: ffffffffffffffda RBX: 00007fafe86cc090 RCX: 00007fafe8445b19 [ 504.244439][T14476] RDX: 0000000000000050 RSI: 0000200000002c40 RDI: 000000000000000a [ 504.252411][T14476] RBP: 00007fafe667b090 R08: 0000000000000000 R09: 0000000000000000 [ 504.260392][T14476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 504.268367][T14476] R13: 00007fafe86cc128 R14: 00007fafe86cc090 R15: 00007ffebc35e0d8 [ 504.276359][T14476] [ 504.548209][T14472] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 504.570572][T14464] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 504.816131][T14496] netlink: 'syz.1.3349': attribute type 10 has an invalid length. [ 505.038633][T14508] FAULT_INJECTION: forcing a failure. [ 505.038633][T14508] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 505.219069][T14508] CPU: 1 PID: 14508 Comm: syz.4.3354 Not tainted syzkaller #0 [ 505.226611][T14508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 505.236793][T14508] Call Trace: [ 505.240102][T14508] [ 505.243057][T14508] dump_stack_lvl+0x188/0x250 [ 505.247787][T14508] ? show_regs_print_info+0x20/0x20 [ 505.253032][T14508] ? load_image+0x410/0x410 [ 505.257596][T14508] ? __lock_acquire+0x7d40/0x7d40 [ 505.262668][T14508] should_fail+0x383/0x4b0 [ 505.267136][T14508] _copy_from_user+0x2e/0x170 [ 505.271854][T14508] bpf_test_init+0x136/0x1b0 [ 505.276499][T14508] bpf_prog_test_run_skb+0x181/0x1190 [ 505.281915][T14508] ? __fget_files+0x402/0x470 [ 505.286653][T14508] ? cpu_online+0x60/0x60 [ 505.291021][T14508] bpf_prog_test_run+0x31c/0x390 [ 505.296000][T14508] __sys_bpf+0x5a5/0x6f0 [ 505.300275][T14508] ? perf_trace_preemptirq_template+0x2aa/0x360 [ 505.306549][T14508] ? bpf_link_show_fdinfo+0x380/0x380 [ 505.311953][T14508] ? rcu_nmi_exit+0x6f/0xf0 [ 505.316537][T14508] __x64_sys_bpf+0x78/0x90 [ 505.320985][T14508] do_syscall_64+0x4c/0xa0 [ 505.325430][T14508] ? clear_bhb_loop+0x30/0x80 [ 505.330133][T14508] ? clear_bhb_loop+0x30/0x80 [ 505.334842][T14508] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 505.340763][T14508] RIP: 0033:0x7f12de27bb19 [ 505.345209][T14508] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 505.364843][T14508] RSP: 002b:00007f12dc4d2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 505.373302][T14508] RAX: ffffffffffffffda RBX: 00007f12de501fa0 RCX: 00007f12de27bb19 [ 505.381305][T14508] RDX: 0000000000000050 RSI: 0000200000002c40 RDI: 000000000000000a [ 505.389296][T14508] RBP: 00007f12dc4d2090 R08: 0000000000000000 R09: 0000000000000000 [ 505.397291][T14508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 505.405289][T14508] R13: 00007f12de502038 R14: 00007f12de501fa0 R15: 00007ffdc9815bd8 [ 505.413326][T14508] [ 505.499867][T14506] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 505.587112][T14513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 505.618112][T14501] netlink: 'syz.3.3352': attribute type 10 has an invalid length. [ 505.623772][T14516] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.3356'. [ 505.638941][T14501] device hsr0 entered promiscuous mode [ 505.655140][T14501] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 505.671145][T14501] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 505.684093][T14501] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 505.698036][T14501] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 505.806528][T14519] netlink: 21 bytes leftover after parsing attributes in process `syz.2.3357'. [ 505.851553][T14519] ksmbd: Unknown IPC event: 0, ignore. [ 505.935759][T14523] FAULT_INJECTION: forcing a failure. [ 505.935759][T14523] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 505.952134][T14525] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3359'. [ 506.008812][T14523] CPU: 0 PID: 14523 Comm: syz.0.3362 Not tainted syzkaller #0 [ 506.016357][T14523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 506.026451][T14523] Call Trace: [ 506.029755][T14523] [ 506.032713][T14523] dump_stack_lvl+0x188/0x250 [ 506.037431][T14523] ? show_regs_print_info+0x20/0x20 [ 506.042665][T14523] ? load_image+0x410/0x410 [ 506.047221][T14523] ? __lock_acquire+0x7d40/0x7d40 [ 506.052291][T14523] should_fail+0x383/0x4b0 [ 506.056753][T14523] _copy_to_user+0x2e/0x130 [ 506.061282][T14523] simple_read_from_buffer+0xe3/0x150 [ 506.066691][T14523] proc_fail_nth_read+0x1a6/0x220 [ 506.071748][T14523] ? proc_fault_inject_write+0x310/0x310 [ 506.077412][T14523] ? fsnotify_perm+0x254/0x560 [ 506.082195][T14523] ? proc_fault_inject_write+0x310/0x310 [ 506.087854][T14523] vfs_read+0x2ff/0xd50 [ 506.092038][T14523] ? __lock_acquire+0x7d40/0x7d40 [ 506.097085][T14523] ? kernel_read+0x1e0/0x1e0 [ 506.101685][T14523] ? preempt_schedule_irq+0xe6/0x160 [ 506.106997][T14523] ? mutex_lock_nested+0x17/0x20 [ 506.111936][T14523] ? __fdget_pos+0x2bf/0x370 [ 506.116672][T14523] ? ksys_read+0x70/0x260 [ 506.121038][T14523] ksys_read+0x153/0x260 [ 506.125306][T14523] ? vfs_write+0xd70/0xd70 [ 506.129739][T14523] ? syscall_enter_from_user_mode+0x2a/0x70 [ 506.135640][T14523] do_syscall_64+0x4c/0xa0 [ 506.140060][T14523] ? clear_bhb_loop+0x30/0x80 [ 506.144738][T14523] ? clear_bhb_loop+0x30/0x80 [ 506.149421][T14523] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 506.155316][T14523] RIP: 0033:0x7fafe840634e [ 506.159740][T14523] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 506.179352][T14523] RSP: 002b:00007fafe669bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 506.187784][T14523] RAX: ffffffffffffffda RBX: 00007fafe669c6c0 RCX: 00007fafe840634e [ 506.195761][T14523] RDX: 000000000000000f RSI: 00007fafe669c0a0 RDI: 0000000000000005 [ 506.203734][T14523] RBP: 00007fafe669c090 R08: 0000000000000000 R09: 0000000000000000 [ 506.211707][T14523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 506.219677][T14523] R13: 00007fafe86cc038 R14: 00007fafe86cbfa0 R15: 00007ffebc35e0d8 [ 506.227758][T14523] [ 506.385841][T14534] netlink: 'syz.2.3357': attribute type 19 has an invalid length. [ 506.399391][T14534] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3357'. [ 506.601446][T14526] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 506.862480][T14540] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3367'. [ 507.373828][T14556] netlink: 'syz.4.3372': attribute type 10 has an invalid length. [ 507.597975][T14561] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.3373'. [ 507.778794][T14568] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3376'. [ 507.970803][T14569] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.978760][T14569] bridge0: port 1(bridge_slave_0) entered disabled state [ 508.469488][T14590] netlink: 192444 bytes leftover after parsing attributes in process `syz.4.3383'. [ 508.880241][T14598] netlink: 'syz.0.3385': attribute type 10 has an invalid length. [ 508.919328][T14605] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.3389'. [ 508.962834][T14606] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3390'. [ 509.118948][T14613] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3391'. [ 509.416512][T14627] mac80211_hwsim hwsim47 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 509.618011][T14639] netlink: 'syz.0.3401': attribute type 3 has an invalid length. [ 509.639115][T14639] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3401'. [ 510.673798][T14653] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.3403'. [ 511.992526][ T145] wlan1: Trigger new scan to find an IBSS to join [ 512.381563][T14659] netlink: 'syz.3.3404': attribute type 10 has an invalid length. [ 512.669590][T14680] netlink: 'syz.4.3406': attribute type 3 has an invalid length. [ 512.788048][T14680] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3406'. [ 513.216344][T14693] netlink: 21 bytes leftover after parsing attributes in process `syz.3.3413'. [ 513.276486][T14693] ksmbd: Unknown IPC event: 0, ignore. [ 513.412375][T14691] netlink: 'syz.3.3413': attribute type 19 has an invalid length. [ 513.444406][T14691] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3413'. [ 513.486728][T14703] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.3415'. [ 513.771084][T14711] netlink: 'syz.3.3419': attribute type 10 has an invalid length. [ 514.067082][T14731] FAULT_INJECTION: forcing a failure. [ 514.067082][T14731] name failslab, interval 1, probability 0, space 0, times 0 [ 514.122131][T14731] CPU: 1 PID: 14731 Comm: syz.4.3425 Not tainted syzkaller #0 [ 514.129740][T14731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 514.139818][T14731] Call Trace: [ 514.143117][T14731] [ 514.146073][T14731] dump_stack_lvl+0x188/0x250 [ 514.150773][T14731] ? show_regs_print_info+0x20/0x20 [ 514.155988][T14731] ? load_image+0x410/0x410 [ 514.160526][T14731] should_fail+0x383/0x4b0 [ 514.164966][T14731] should_failslab+0x5/0x20 [ 514.169482][T14731] slab_pre_alloc_hook+0x51/0xc0 [ 514.174439][T14731] ? skb_clone+0x1bd/0x350 [ 514.178879][T14731] kmem_cache_alloc+0x3d/0x280 [ 514.183663][T14731] skb_clone+0x1bd/0x350 [ 514.187922][T14731] bpf_clone_redirect+0x166/0x460 [ 514.192974][T14731] bpf_prog_5e3b4e18def6d727+0x56/0x280 [ 514.198532][T14731] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 514.204531][T14731] ? lock_chain_count+0x20/0x20 [ 514.209396][T14731] ? __kasan_slab_alloc+0xa9/0xc0 [ 514.214445][T14731] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 514.220700][T14731] ? lockdep_hardirqs_on+0x94/0x140 [ 514.225911][T14731] ? ktime_get+0x7b/0x270 [ 514.230252][T14731] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 514.236520][T14731] ? ktime_get_real_ts64+0x440/0x440 [ 514.241815][T14731] ? read_lock_is_recursive+0x10/0x10 [ 514.247206][T14731] ? __cant_sleep+0x220/0x220 [ 514.251905][T14731] ? ktime_get+0x247/0x270 [ 514.256342][T14731] bpf_test_run+0x2a8/0x800 [ 514.260901][T14731] ? convert___skb_to_skb+0x4c0/0x4c0 [ 514.266295][T14731] ? eth_get_headlen+0x200/0x200 [ 514.271260][T14731] ? bpf_prog_test_run_skb+0x6c9/0x1190 [ 514.276822][T14731] ? convert___skb_to_skb+0x3d/0x4c0 [ 514.282124][T14731] bpf_prog_test_run_skb+0x9fb/0x1190 [ 514.287530][T14731] ? cpu_online+0x60/0x60 [ 514.291874][T14731] bpf_prog_test_run+0x31c/0x390 [ 514.296853][T14731] __sys_bpf+0x5a5/0x6f0 [ 514.301111][T14731] ? bpf_link_show_fdinfo+0x380/0x380 [ 514.306519][T14731] __x64_sys_bpf+0x78/0x90 [ 514.310955][T14731] do_syscall_64+0x4c/0xa0 [ 514.315400][T14731] ? clear_bhb_loop+0x30/0x80 [ 514.320091][T14731] ? clear_bhb_loop+0x30/0x80 [ 514.324783][T14731] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 514.330691][T14731] RIP: 0033:0x7f12de27bb19 [ 514.335124][T14731] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 514.354741][T14731] RSP: 002b:00007f12dc4d2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 514.363257][T14731] RAX: ffffffffffffffda RBX: 00007f12de501fa0 RCX: 00007f12de27bb19 [ 514.371251][T14731] RDX: 0000000000000028 RSI: 0000200000002b80 RDI: 000000000000000a [ 514.379242][T14731] RBP: 00007f12dc4d2090 R08: 0000000000000000 R09: 0000000000000000 [ 514.387230][T14731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 514.395306][T14731] R13: 00007f12de502038 R14: 00007f12de501fa0 R15: 00007ffdc9815bd8 [ 514.403321][T14731] [ 514.677960][T14746] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.685556][T14746] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.905288][T14752] netlink: 'syz.2.3430': attribute type 4 has an invalid length. [ 514.955016][T14750] netlink: 21 bytes leftover after parsing attributes in process `syz.4.3429'. [ 514.986020][T14750] ksmbd: Unknown IPC event: 0, ignore. [ 515.038683][T14760] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.3435'. [ 515.048666][ T157] wlan1: Trigger new scan to find an IBSS to join [ 515.191163][T14768] netlink: 'syz.4.3429': attribute type 19 has an invalid length. [ 515.382810][T14768] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3429'. [ 515.478663][T14762] netlink: 'syz.2.3433': attribute type 10 has an invalid length. [ 515.527416][T14767] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.3436'. [ 515.601046][T14777] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3437'. [ 515.628125][T14777] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3437'. [ 515.972678][T14795] netlink: 'syz.0.3442': attribute type 21 has an invalid length. [ 516.592176][T14818] sctp: [Deprecated]: syz.4.3453 (pid 14818) Use of int in max_burst socket option deprecated. [ 516.592176][T14818] Use struct sctp_assoc_value instead [ 516.688271][T14816] ksmbd: Unknown IPC event: 0, ignore. [ 516.813020][T14818] netlink: 'syz.4.3453': attribute type 25 has an invalid length. [ 516.864162][T14818] netlink: 'syz.4.3453': attribute type 6 has an invalid length. [ 517.501312][T14845] FAULT_INJECTION: forcing a failure. [ 517.501312][T14845] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 517.542516][T14847] validate_nla: 4 callbacks suppressed [ 517.542536][T14847] netlink: 'syz.0.3462': attribute type 10 has an invalid length. [ 517.555326][T14845] CPU: 1 PID: 14845 Comm: syz.2.3461 Not tainted syzkaller #0 [ 517.563392][T14845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 517.573475][T14845] Call Trace: [ 517.576769][T14845] [ 517.579700][T14845] dump_stack_lvl+0x188/0x250 [ 517.584395][T14845] ? show_regs_print_info+0x20/0x20 [ 517.589623][T14845] ? load_image+0x410/0x410 [ 517.594162][T14845] ? __lock_acquire+0x7d40/0x7d40 [ 517.599208][T14845] should_fail+0x383/0x4b0 [ 517.603650][T14845] _copy_from_user+0x2e/0x170 [ 517.608342][T14845] __sys_bpf+0x26d/0x6f0 [ 517.612594][T14845] ? bpf_link_show_fdinfo+0x380/0x380 [ 517.617994][T14845] __x64_sys_bpf+0x78/0x90 [ 517.622415][T14845] do_syscall_64+0x4c/0xa0 [ 517.626835][T14845] ? clear_bhb_loop+0x30/0x80 [ 517.631514][T14845] ? clear_bhb_loop+0x30/0x80 [ 517.636198][T14845] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 517.642103][T14845] RIP: 0033:0x7fb30ad48b19 [ 517.646525][T14845] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 517.666135][T14845] RSP: 002b:00007fb308f9f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 517.674559][T14845] RAX: ffffffffffffffda RBX: 00007fb30afcefa0 RCX: 00007fb30ad48b19 [ 517.682533][T14845] RDX: 0000000000000020 RSI: 0000200000000380 RDI: 0000000000000002 [ 517.690506][T14845] RBP: 00007fb308f9f090 R08: 0000000000000000 R09: 0000000000000000 [ 517.698564][T14845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 517.706538][T14845] R13: 00007fb30afcf038 R14: 00007fb30afcefa0 R15: 00007ffe5fe05438 [ 517.714525][T14845] [ 517.795156][T14847] __nla_validate_parse: 10 callbacks suppressed [ 517.795178][T14847] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3462'. [ 518.289343][T14857] netlink: 'syz.2.3465': attribute type 10 has an invalid length. [ 518.322629][T14864] netlink: 'syz.4.3467': attribute type 1 has an invalid length. [ 518.330570][T14864] netlink: 5 bytes leftover after parsing attributes in process `syz.4.3467'. [ 518.647887][T14892] netlink: 'syz.0.3473': attribute type 21 has an invalid length. [ 518.818404][T14904] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.3478'. [ 518.875861][T14905] netlink: 'syz.2.3476': attribute type 21 has an invalid length. [ 518.951550][ T9] wlan1: Trigger new scan to find an IBSS to join [ 519.016055][T14911] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3479'. [ 519.368166][T14909] netlink: 'syz.4.3480': attribute type 10 has an invalid length. [ 519.628721][T14930] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 519.783118][T14938] netlink: 65051 bytes leftover after parsing attributes in process `syz.4.3489'. [ 519.861579][T14942] netlink: 65051 bytes leftover after parsing attributes in process `syz.1.3490'. [ 519.956622][ T9] wlan1: Creating new IBSS network, BSSID 42:62:ce:60:4c:25 [ 519.980562][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 521.971159][T14992] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.3504'. [ 522.028588][T14994] netlink: 'syz.3.3503': attribute type 21 has an invalid length. [ 522.090285][T14994] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3503'. [ 522.769017][T15002] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.3515'. [ 522.898753][T15004] netlink: 65051 bytes leftover after parsing attributes in process `syz.3.3505'. [ 523.060413][T15002] device syzkaller0 entered promiscuous mode [ 523.322988][T15010] netlink: 65051 bytes leftover after parsing attributes in process `syz.2.3507'. [ 524.151680][ T8863] Bluetooth: hci5: command 0x0406 tx timeout [ 524.618131][T15031] netlink: 'syz.1.3513': attribute type 10 has an invalid length. [ 525.553390][T15059] netlink: 65051 bytes leftover after parsing attributes in process `syz.2.3521'. [ 525.681205][T15073] netlink: 65051 bytes leftover after parsing attributes in process `syz.0.3523'. [ 525.994736][T15078] device syzkaller0 entered promiscuous mode [ 526.639874][T15088] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3528'. [ 526.654361][T15073] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3523'. [ 526.714270][T15073] : renamed from caif0 [ 526.801495][T15073] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 527.804213][T15116] netlink: 'syz.1.3534': attribute type 1 has an invalid length. [ 528.266828][T15103] netlink: 'syz.3.3530': attribute type 10 has an invalid length. [ 528.777222][T15139] netlink: 65051 bytes leftover after parsing attributes in process `syz.1.3542'. [ 529.554244][T15149] FAULT_INJECTION: forcing a failure. [ 529.554244][T15149] name failslab, interval 1, probability 0, space 0, times 0 [ 529.621452][T15149] CPU: 0 PID: 15149 Comm: syz.2.3543 Not tainted syzkaller #0 [ 529.628977][T15149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 529.639152][T15149] Call Trace: [ 529.642453][T15149] [ 529.645491][T15149] dump_stack_lvl+0x188/0x250 [ 529.650285][T15149] ? show_regs_print_info+0x20/0x20 [ 529.655508][T15149] ? load_image+0x410/0x410 [ 529.660123][T15149] ? __might_sleep+0xf0/0xf0 [ 529.664734][T15149] ? __lock_acquire+0x7d40/0x7d40 [ 529.669787][T15149] should_fail+0x383/0x4b0 [ 529.674236][T15149] should_failslab+0x5/0x20 [ 529.678760][T15149] slab_pre_alloc_hook+0x51/0xc0 [ 529.683725][T15149] __kmalloc_node+0x6d/0x3a0 [ 529.688331][T15149] ? vmemdup_user+0x45/0x170 [ 529.692951][T15149] vmemdup_user+0x45/0x170 [ 529.697396][T15149] map_delete_elem+0x1fb/0x560 [ 529.702183][T15149] ? bpf_lsm_bpf+0x5/0x10 [ 529.706554][T15149] __sys_bpf+0x498/0x6f0 [ 529.710824][T15149] ? bpf_link_show_fdinfo+0x380/0x380 [ 529.716213][T15149] ? rcu_nmi_exit+0x6f/0xf0 [ 529.720759][T15149] __x64_sys_bpf+0x78/0x90 [ 529.725194][T15149] do_syscall_64+0x4c/0xa0 [ 529.729628][T15149] ? clear_bhb_loop+0x30/0x80 [ 529.734325][T15149] ? clear_bhb_loop+0x30/0x80 [ 529.739033][T15149] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 529.744948][T15149] RIP: 0033:0x7fb30ad48b19 [ 529.749384][T15149] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 529.769011][T15149] RSP: 002b:00007fb308f7e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 529.777468][T15149] RAX: ffffffffffffffda RBX: 00007fb30afcf090 RCX: 00007fb30ad48b19 [ 529.785466][T15149] RDX: 0000000000000020 RSI: 0000200000001340 RDI: 0000000000000003 [ 529.793466][T15149] RBP: 00007fb308f7e090 R08: 0000000000000000 R09: 0000000000000000 [ 529.801473][T15149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 529.809556][T15149] R13: 00007fb30afcf128 R14: 00007fb30afcf090 R15: 00007ffe5fe05438 [ 529.817601][T15149] [ 531.692373][T15143] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3542'. [ 531.718890][T15143] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 532.618409][T15178] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3555'. [ 532.650693][T15178] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3555'. [ 532.742390][T15180] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3555'. [ 532.783102][T15182] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3555'. [ 532.979391][T15174] netlink: 'syz.2.3552': attribute type 10 has an invalid length. [ 533.503973][T15200] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3559'. [ 533.552571][T15200] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3559'. [ 533.735307][T15197] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3559'. [ 533.762597][T15206] netlink: 65051 bytes leftover after parsing attributes in process `syz.0.3563'. [ 533.782746][T15200] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3559'. [ 533.831987][T15197] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3559'. [ 534.246167][T15213] FAULT_INJECTION: forcing a failure. [ 534.246167][T15213] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 534.318780][T15213] CPU: 1 PID: 15213 Comm: syz.3.3564 Not tainted syzkaller #0 [ 534.326393][T15213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 534.336744][T15213] Call Trace: [ 534.340052][T15213] [ 534.343005][T15213] dump_stack_lvl+0x188/0x250 [ 534.347723][T15213] ? show_regs_print_info+0x20/0x20 [ 534.350238][T15215] FAULT_INJECTION: forcing a failure. [ 534.350238][T15215] name failslab, interval 1, probability 0, space 0, times 0 [ 534.352949][T15213] ? load_image+0x410/0x410 [ 534.353003][T15213] ? __lock_acquire+0x7d40/0x7d40 [ 534.353028][T15213] ? perf_trace_lock_acquire+0xed/0x3f0 [ 534.353059][T15213] should_fail+0x383/0x4b0 [ 534.353091][T15213] _copy_from_user+0x2e/0x170 [ 534.353116][T15213] kstrtouint_from_user+0xd3/0x220 [ 534.353143][T15213] ? kstrtol_from_user+0x2a0/0x2a0 [ 534.353186][T15213] proc_fail_nth_write+0x8b/0x200 [ 534.353211][T15213] ? proc_fail_nth_read+0x220/0x220 [ 534.353233][T15213] ? common_file_perm+0x171/0x1c0 [ 534.353265][T15213] ? proc_fail_nth_read+0x220/0x220 [ 534.353287][T15213] vfs_write+0x304/0xd70 [ 534.353319][T15213] ? file_end_write+0x250/0x250 [ 534.353363][T15213] ? mutex_lock_nested+0x17/0x20 [ 534.353387][T15213] ? __fdget_pos+0x2bf/0x370 [ 534.353405][T15213] ? ksys_write+0x70/0x260 [ 534.353430][T15213] ksys_write+0x153/0x260 [ 534.353454][T15213] ? __ia32_sys_read+0x80/0x80 [ 534.353480][T15213] ? lockdep_hardirqs_on+0x94/0x140 [ 534.353507][T15213] do_syscall_64+0x4c/0xa0 [ 534.353524][T15213] ? clear_bhb_loop+0x30/0x80 [ 534.353543][T15213] ? clear_bhb_loop+0x30/0x80 [ 534.353566][T15213] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 534.353587][T15213] RIP: 0033:0x7f5cebecd34e [ 534.353608][T15213] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 534.353625][T15213] RSP: 002b:00007f5cea141fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 534.511088][T15213] RAX: ffffffffffffffda RBX: 00007f5cea1426c0 RCX: 00007f5cebecd34e [ 534.519093][T15213] RDX: 0000000000000001 RSI: 00007f5cea1420a0 RDI: 0000000000000006 [ 534.527089][T15213] RBP: 00007f5cea142090 R08: 0000000000000000 R09: 0000000000000000 [ 534.535190][T15213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 534.543190][T15213] R13: 00007f5cec193128 R14: 00007f5cec193090 R15: 00007fff0b4c78a8 [ 534.551225][T15213] [ 534.556895][T15209] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3563'. [ 534.561818][T15215] CPU: 1 PID: 15215 Comm: syz.1.3565 Not tainted syzkaller #0 [ 534.573398][T15215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 534.583486][T15215] Call Trace: [ 534.583501][T15215] [ 534.583511][T15215] dump_stack_lvl+0x188/0x250 [ 534.583546][T15215] ? show_regs_print_info+0x20/0x20 [ 534.583570][T15215] ? load_image+0x410/0x410 [ 534.583598][T15215] ? __might_sleep+0xf0/0xf0 [ 534.583620][T15215] ? __lock_acquire+0x7d40/0x7d40 [ 534.583660][T15215] should_fail+0x383/0x4b0 [ 534.618247][T15215] should_failslab+0x5/0x20 [ 534.623127][T15215] slab_pre_alloc_hook+0x51/0xc0 [ 534.628077][T15215] __kmalloc+0x6b/0x340 [ 534.632242][T15215] ? tomoyo_encode+0x28a/0x550 [ 534.637042][T15215] tomoyo_encode+0x28a/0x550 [ 534.641645][T15215] tomoyo_realpath_from_path+0x5a2/0x5e0 [ 534.647308][T15215] tomoyo_path_number_perm+0x251/0x6b0 [ 534.652775][T15215] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 534.658246][T15215] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 534.664435][T15215] ? __d_lookup_rcu+0x652/0x720 [ 534.669318][T15215] ? lock_chain_count+0x20/0x20 [ 534.674209][T15215] tomoyo_path_mknod+0x147/0x190 [ 534.679163][T15215] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 534.685324][T15215] ? tomoyo_path_symlink+0xf0/0xf0 [ 534.690453][T15215] ? hook_path_mknod+0xea/0x1b0 [ 534.695313][T15215] security_path_mknod+0xec/0x140 [ 534.700344][T15215] path_openat+0xba5/0x2fb0 [ 534.704890][T15215] ? do_filp_open+0x400/0x400 [ 534.709587][T15215] ? lock_is_held_type+0x13a/0x190 [ 534.714710][T15215] do_filp_open+0x1df/0x400 [ 534.719236][T15215] ? vfs_tmpfile+0x300/0x300 [ 534.723857][T15215] ? _raw_spin_unlock+0x24/0x40 [ 534.728713][T15215] ? alloc_fd+0x59e/0x650 [ 534.733065][T15215] do_sys_openat2+0x14b/0x500 [ 534.737758][T15215] ? do_sys_open+0xe0/0xe0 [ 534.742183][T15215] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 534.748358][T15215] __x64_sys_openat+0x135/0x160 [ 534.753219][T15215] do_syscall_64+0x4c/0xa0 [ 534.757640][T15215] ? clear_bhb_loop+0x30/0x80 [ 534.762321][T15215] ? clear_bhb_loop+0x30/0x80 [ 534.767013][T15215] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 534.772912][T15215] RIP: 0033:0x7f242ab01b19 [ 534.777332][T15215] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 534.797037][T15215] RSP: 002b:00007f2428d58028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 534.805463][T15215] RAX: ffffffffffffffda RBX: 00007f242ad87fa0 RCX: 00007f242ab01b19 [ 534.813442][T15215] RDX: 00000000000026e1 RSI: 0000200000000b00 RDI: ffffffffffffff9c [ 534.821417][T15215] RBP: 00007f2428d58090 R08: 0000000000000000 R09: 0000000000000000 [ 534.829389][T15215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 534.837361][T15215] R13: 00007f242ad88038 R14: 00007f242ad87fa0 R15: 00007fff84621a38 [ 534.845352][T15215] [ 534.888457][T15209] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 535.026358][T15215] ERROR: Out of memory at tomoyo_realpath_from_path. [ 535.349344][T15232] netlink: 'syz.0.3572': attribute type 21 has an invalid length. [ 535.392535][T15232] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3572'. [ 535.602119][T15244] netlink: 65051 bytes leftover after parsing attributes in process `syz.2.3577'. [ 537.316538][T15290] netlink: 16399 bytes leftover after parsing attributes in process `syz.1.3588'. [ 537.368366][T15288] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3586'. [ 537.409450][T15288] netlink: get zone limit has 4 unknown bytes [ 537.462765][T15290] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.3588'. [ 537.952142][T15306] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.3590'. [ 537.974544][T15305] netlink: 65051 bytes leftover after parsing attributes in process `syz.4.3591'. [ 539.713394][T15331] netlink: 'syz.1.3596': attribute type 10 has an invalid length. [ 540.027597][T15342] netlink: 'syz.0.3599': attribute type 7 has an invalid length. [ 540.171411][T15342] netlink: 'syz.0.3599': attribute type 1 has an invalid length. [ 540.404763][T15342] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.3599'. [ 541.583208][T15374] netlink: 'syz.2.3607': attribute type 3 has an invalid length. [ 541.603517][T15381] netlink: 65051 bytes leftover after parsing attributes in process `syz.4.3609'. [ 541.611453][T15374] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3607'. [ 542.275334][T15389] netlink: 'syz.1.3612': attribute type 10 has an invalid length. [ 544.641518][ T8862] Bluetooth: hci2: command 0x0406 tx timeout [ 545.426085][T15400] netlink: 'syz.0.3614': attribute type 3 has an invalid length. [ 545.444575][T15400] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3614'. [ 545.816175][T15426] netlink: 65051 bytes leftover after parsing attributes in process `syz.4.3625'. [ 545.865070][T15425] netlink: 134744 bytes leftover after parsing attributes in process `syz.2.3623'. [ 545.869357][T15428] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3626'. [ 546.088607][T15430] netlink: 'syz.0.3627': attribute type 10 has an invalid length. [ 546.218101][T15431] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3625'. [ 546.337316][T15431] : renamed from caif0 [ 548.670123][T15431] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 548.821870][T15451] netlink: 'syz.4.3633': attribute type 3 has an invalid length. [ 548.897901][T15452] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.3634'. [ 548.911680][T15451] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3633'. [ 548.924092][T15456] netlink: 'syz.0.3636': attribute type 2 has an invalid length. [ 548.985798][T15466] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3637'. [ 549.002477][T15466] netlink: get zone limit has 4 unknown bytes [ 549.016450][T15456] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.3636'. [ 549.383029][T15464] netlink: 'syz.3.3639': attribute type 10 has an invalid length. [ 551.269701][T15488] netlink: 65051 bytes leftover after parsing attributes in process `syz.2.3644'. [ 551.285467][T15505] IPv6: Can't replace route, no match found [ 551.390704][T15512] netlink: 'syz.4.3649': attribute type 29 has an invalid length. [ 551.407042][T15512] netlink: 'syz.4.3649': attribute type 29 has an invalid length. [ 551.433837][T15512] netlink: 'syz.4.3649': attribute type 29 has an invalid length. [ 551.489365][T15514] netlink: 'syz.4.3649': attribute type 29 has an invalid length. [ 551.529107][T15512] netlink: 'syz.4.3649': attribute type 29 has an invalid length. [ 551.632487][T15513] netlink: 65051 bytes leftover after parsing attributes in process `syz.2.3650'. [ 551.987781][T15527] netlink: 'syz.1.3655': attribute type 10 has an invalid length. [ 552.195546][T14218] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 552.632357][T15527] device macvlan0 entered promiscuous mode [ 552.723830][T15527] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 552.742394][T15532] netlink: 'syz.1.3655': attribute type 10 has an invalid length. [ 552.758169][T15532] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3655'. [ 552.773828][T15547] FAULT_INJECTION: forcing a failure. [ 552.773828][T15547] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 552.789213][T15529] netlink: 'syz.0.3656': attribute type 10 has an invalid length. [ 552.821528][T15547] CPU: 0 PID: 15547 Comm: syz.2.3662 Not tainted syzkaller #0 [ 552.829060][T15547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 552.839149][T15547] Call Trace: [ 552.842464][T15547] [ 552.845512][T15547] dump_stack_lvl+0x188/0x250 [ 552.850231][T15547] ? show_regs_print_info+0x20/0x20 [ 552.855480][T15547] ? load_image+0x410/0x410 [ 552.860025][T15547] ? __lock_acquire+0x7d40/0x7d40 [ 552.865096][T15547] should_fail+0x383/0x4b0 [ 552.869555][T15547] _copy_from_user+0x2e/0x170 [ 552.874273][T15547] iovec_from_user+0x142/0x370 [ 552.879076][T15547] __import_iovec+0x70/0x490 [ 552.883705][T15547] import_iovec+0x6f/0xa0 [ 552.888068][T15547] ___sys_sendmsg+0x1fd/0x2e0 [ 552.892781][T15547] ? __sys_sendmsg+0x290/0x290 [ 552.897622][T15547] __se_sys_sendmsg+0x1b7/0x2a0 [ 552.902506][T15547] ? __x64_sys_sendmsg+0x80/0x80 [ 552.907483][T15547] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 552.913527][T15547] ? lockdep_hardirqs_on+0x94/0x140 [ 552.918768][T15547] do_syscall_64+0x4c/0xa0 [ 552.923211][T15547] ? clear_bhb_loop+0x30/0x80 [ 552.927916][T15547] ? clear_bhb_loop+0x30/0x80 [ 552.932624][T15547] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 552.938548][T15547] RIP: 0033:0x7fb30ad48b19 [ 552.942985][T15547] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 552.962617][T15547] RSP: 002b:00007fb308f9f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 552.971069][T15547] RAX: ffffffffffffffda RBX: 00007fb30afcefa0 RCX: 00007fb30ad48b19 [ 552.979058][T15547] RDX: 000000000c008080 RSI: 0000200000001080 RDI: 0000000000000003 [ 552.987027][T15547] RBP: 00007fb308f9f090 R08: 0000000000000000 R09: 0000000000000000 [ 552.995004][T15547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 553.002997][T15547] R13: 00007fb30afcf038 R14: 00007fb30afcefa0 R15: 00007ffe5fe05438 [ 553.011016][T15547] [ 553.043411][T15557] netlink: 'syz.3.3665': attribute type 3 has an invalid length. [ 553.061974][T15557] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3665'. [ 553.281170][T15560] netlink: 'syz.0.3677': attribute type 10 has an invalid length. [ 553.804120][T15577] netlink: 65051 bytes leftover after parsing attributes in process `syz.1.3672'. [ 554.731520][T15590] device macvlan0 entered promiscuous mode [ 554.881119][T15590] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 554.891225][T15594] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3676'. [ 555.707171][T15611] IPv6: Can't replace route, no match found [ 555.952921][T15623] netlink: 65051 bytes leftover after parsing attributes in process `syz.3.3690'. [ 555.969423][T15629] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.3692'. [ 555.991120][T15625] IPv6: Can't replace route, no match found [ 556.032922][T15627] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3691'. [ 556.203931][T15636] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.3694'. [ 558.021601][ T1239] unregister_netdevice: waiting for lo to become free. Usage count = 2 [ 558.249534][T15634] netlink: 65051 bytes leftover after parsing attributes in process `syz.4.3693'. [ 558.272596][T15639] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3693'. [ 558.285760][T15639] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 560.001528][ T8862] Bluetooth: hci4: command 0x0406 tx timeout [ 563.034317][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.040658][ T1424] ieee802154 phy1 wpan1: encryption failed: -22