last executing test programs: 5.720130545s ago: executing program 1 (id=4655): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000030000000200000003"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x11, 0xc, &(0x7f0000000800)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000009}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x61800, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x8c}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x80) r2 = openat$cgroup_ro(r0, &(0x7f0000000080)='blkio.bfq.io_queued\x00', 0x75324cc7ada9, 0x0) syz_clone(0x20243400, 0x0, 0x1b, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000030000000000000003000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000006000000850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000004000000850000007500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r3}, 0xc) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180200000400ffff00000000010000008500000036000000850000002a00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0x0, &(0x7f0000000040)="f7edad00"/14, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) syz_clone(0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000aecd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad94ed406f21caf5adcf920569c00cc1199684fa75814709fea019af247c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c1faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6fab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b79db2e3d5986c82b5aa94e539b204d58f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c7160ec83070000020000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72b0000000000001cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2cc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78ac02ca3cdf6a662db1c9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad943e392955f4f979ea13201bafedcd2063d11dd665647223c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd89346cfbb5567e54d3504723177d356c4604b7a492ecec37e83efceefd7ca2533659edc8be05cc85451c6a14507434eb54b6f43caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffca9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a294351c5356c1d06c92cf8ce3c7c56cd31121624d74517fd3666277f670e812b28e2f30d035cee5d0e77a3c7220000000000000005a474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f034b8d3ebce68663ef5af469abe75b314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041e12282ce24463aaf28345bd168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f09000000000000004fc4bda3453602004535a976eacd3adaa4d2ee6fe0d072ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d401adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb40f7f02f750d6c977a191852c9ae031db044b2353199546609f9f69a6cfefdf879d447df53f3b9b70d10355b00300000000000000553d18a6cc50feeb7bfad9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f58fab987baab97a9bfbd8f185b5631820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe527340935aa3c0b4f3f45b418a18217747ae442e31560e5b741445ea2a1acee2a81425ff000000d2a0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51423b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f88735fce5115dc83ed73d8ee4a91322608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf5000000000000fa08ad0631c4b839688b22c4da2a6bc4cf45854d221a2d5f96bc64647f15daa2ba79cd0f4254ed55217912ef84bd2927df82fc061aef2920c49b2a90886da75561173fa186cb7ee86dd4285c4721eb428c953296bb2f5d825da54dbef07c1b349b4901e093d13e6b9a0000009b5b22e887bc061d40bcaf0aa18623fd9b7179ccc692ba74b531b65c4decf9d080a8ac7e82d4cde1267aa64b2a94fd87a009e6742c2ddc3a9d7eccbb1831b1fa218277c2814a91cab7cb59c697166d6f1bb1a360470000000000000000000000000000000000000000000000000000f9f9b4ce7e871f507084c8c88e0652decbe579b03ed84ea94597dd1059620a050f69ea03b99b4e19d35f4a3b54e96ae2172effecec80f6baa4bf69a6ebf5392882df78b0983e662dc0cb64b77f3f006b6b25443197ae93f0be6de5a703d003f00720943c0e4b33af00000000000000000021a688b2d7007fcc4b59f719afb0b3b7e0aee306ca70fe42bf4984a68f40e1fc043a03a17e4744359b87dc27c82d51cbeb64e52a28daeb6a78d6fe06181ecc840000"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r7 = socket$kcm(0x2, 0x1000000000000002, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x800008f, &(0x7f00000001c0), 0x0, 0x10, &(0x7f0000000200), &(0x7f00000002c0), 0x8, 0xe1, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) sendmsg$inet(r7, &(0x7f0000000b40)={&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @loopback, @loopback}}}], 0x20}, 0xe900) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r2, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)=r6}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x22, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@map_idx_val={0x18, 0xa, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xee0b}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @exit, @jmp={0x5, 0x0, 0x5, 0x3, 0x8, 0x30, 0xfffffffffffffff0}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x10}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x5, 0xa3, &(0x7f00000002c0)=""/163, 0x41100, 0x21, '\x00', r8, 0x0, r2, 0x8, &(0x7f0000000380)={0xa, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r2, r9, r2, r2], 0x0, 0x10, 0x3}, 0x94) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x3, r5, 0xc) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4814) 5.574806028s ago: executing program 0 (id=4656): socket$kcm(0x21, 0x2, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x108ea5, 0xc78, 0x0, 0x0, 0x0, 0x0, 0xae7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002000000851000000600000018020000", @ANYRES32, @ANYBLOB="0000000000000000660002000000fffe180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) 4.6755424s ago: executing program 0 (id=4661): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x922000000003, 0x11) socket$kcm(0x10, 0x2, 0x4) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0, 0x4}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xe70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000800000004000000000000120000000003000000000000080100000000000000000000020200000000002e2e5f"], 0x0, 0x44, 0x0, 0x0, 0x0, 0x0, @void, @value=0x20000000}, 0x20) r2 = socket$kcm(0x18, 0x0, 0x0) recvmsg$kcm(r2, 0x0, 0x40000002) bpf$ENABLE_STATS(0x20, &(0x7f00000001c0), 0x4) recvmsg$kcm(r1, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="1400000034000b47564cb628140600000700", 0x12}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x10) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@var={0x102, 0x0, 0x0, 0xe, 0x2}]}}, &(0x7f0000000480)=""/171, 0x2a, 0xab, 0x1}, 0x28) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) 4.172617062s ago: executing program 1 (id=4664): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x65ed}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000f7ff0000850000006100000095a1752f98bb3363d666ccc3c3014391d14d4d2b2acae38af9436a71ac847615acea3d53d82c03c330207fe502a432"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x3fffc}, 0x0, 0xffffffffffff7fff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="1400000016000bdc8c000000a715ec8b08b04c463a", 0x15}], 0x1}, 0x4000000) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x8}, 0x1918, 0x20000, 0xc2ba, 0x5, 0x4000000, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000aecd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad94ed406f21caf5adcf920569c00cc1199684fa75814709fea019af247c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c1faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6fab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b79db2e3d5986c82b5aa94e539b204d58f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c7160ec83070000020000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72b0000000000001cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2cc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78ac02ca3cdf6a662db1c9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad943e392955f4f979ea13201bafedcd2063d11dd665647223c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd89346cfbb5567e54d3504723177d356c4604b7a492ecec37e83efceefd7ca2533659edc8be05cc85451c6a14507434eb54b6f43caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffca9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a294351c5356c1d06c92cf8ce3c7c56cd31121624d74517fd3666277f670e812b28e2f30d035cee5d0e77a3c7220000000000000005a474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f034b8d3ebce68663ef5af469abe75b314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041e12282ce24463aaf28345bd168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f09000000000000004fc4bda3453602004535a976eacd3adaa4d2ee6fe0d072ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d401adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb40f7f02f750d6c977a191852c9ae031db044b2353199546609f9f69a6cfefdf879d447df53f3b9b70d10355b00300000000000000553d18a6cc50feeb7bfad9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f58fab987baab97a9bfbd8f185b5631820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe527340935aa3c0b4f3f45b418a18217747ae442e31560e5b741445ea2a1acee2a81425ff000000d2a0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51423b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f88735fce5115dc83ed73d8ee4a91322608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf5000000000000fa08ad0631c4b839688b22c4da2a6bc4cf45854d221a2d5f96bc64647f15daa2ba79cd0f4254ed55217912ef84bd2927df82fc061aef2920c49b2a90886da75561173fa186cb7ee86dd4285c4721eb428c953296bb2f5d825da54dbef07c1b349b4901e093d13e6b9a0000009b5b22e887bc061d40bcaf0aa18623fd9b7179ccc692ba74b531b65c4decf9d080a8ac7e82d4cde1267aa64b2a94fd87a009e6742c2ddc3a9d7eccbb1831b1fa218277c2814a91cab7cb59c697166d6f1bb1a360470000000000000000000000000000000000000000000000000000f9f9b4ce7e871f507084c8c88e0652decbe579b03ed84ea94597dd1059620a050f69ea03b99b4e19d35f4a3b54e96ae2172effecec80f6baa4bf69a6ebf5392882df78b0983e662dc0cb64b77f3f006b6b25443197ae93f0be6de5a703d003f00720943c0e4b33af00000000000000000021a688b2d7007fcc4b59f719afb0b3b7e0aee306ca70fe42bf4984a68f40e1fc043a03a17e4744359b87dc27c82d51cbeb64e52a28daeb6a78d6fe06181ecc840000"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000032000b07d25a806f8c6394f90824fc60", 0x14}], 0x1}, 0x0) 3.515379367s ago: executing program 1 (id=4669): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2112, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x657a, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000003c0)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe800011000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0) (fail_nth: 2) 2.97558956s ago: executing program 0 (id=4672): perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$kcm(0xa, 0x2, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000200)='syz0\x00', 0x200002, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)}], 0x1, 0x0, 0x0, 0x900}, 0x60) recvmsg(r0, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x40000100) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@const]}}, &(0x7f0000000580)=""/211, 0x26, 0xd3, 0x1}, 0x28) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) 2.829296833s ago: executing program 4 (id=4674): socket$kcm(0x2b, 0x1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22}, [@printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x40000000}, {0x85, 0x0, 0x0, 0x62}}]}, 0x0, 0x5}, 0x94) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000001000000bfa30000000000000703000030feffff720af0fff8ffffff61a4f0ff000000002d040000000000003d400300000000006504000001ed00007913000e000000006c440000000000007a0ab0fe000000007b13000000000000b5000000000000009500000000000000023bc065b7a379d17cf9333379fc9e94af05000000f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a715bc5181554a090f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128c4e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e655400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d0800af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d390dd65be2467b373eafd9aa58f2077184b6a89adaf17b0a6041bdef728d236619074d6ebdf098bc908f523d228a40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c5da18ec0ae564162a27afea62d84f3a10746443d64364f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b93d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d710b651f898ba749e40bc6980fe78683ac5c0c31030699ddd71063be9261b2e1aab1675b34a220488c126aeef5f510a8f1aded94a129e4aec6ffc3a15d96c2ea3e2e04cfe0e669e51731b2875353193f82ade69d0540059fe6c7fe7cd86975023cb08cc7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed82641687f3b3a70bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c5538a294270a1ad10c80fef7c24c87afce829ba0f85da6d888f18ea40ab959f6074ab2a4009b9e5f07ab513cdc6c0e57fb1c1ca571380d7b4ead35a655e0b4a26b702396df7e0cbe02b6e4114f244a9bf93f05beb72f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba5823a34a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a9b702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b728fe26e37037f27f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d0a874c74b777df005c55fc30511d00000000c85265b2bd83d64a532869d708000000000000007baa5b6a682b50f0937f778af083e055f6138a757ebd0ed91114a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a9037d2283c42efc54fa84323a56edbd287eba77f35c35d91f3c62a0ca74836a640224de85f2b4a5fee500bbc584328a6a7a4628c4378c9b71dff64075b74a6520adb187b40d2cccbcb08c0634ee74658d3e23bf511c8b0bf1b69d2b3782b3f481c314e7bd4615dbbf24c06ac95bd639e68d0e6aa7f0d07bf69a93365f803f0144af37236ea133c2255b0613bf8ba1d538e06c2411e8d70053b712084fd0e313de9bb19266e49a3a2190cb039c6f89610acd896319b9c8d1b8aac2eaa5a4f8be7419a09e3fb5be3be2fcdadd2299839cc40e684e6e2b4e1385fde7a0babcb0be672110268a34dad364fddee69e564119cebb6940c6356ff83ca527c573d700000000000000c6299263e6d9097f225de969485bce3d7dc471c0669bb6a467cf0de54dfcc1857048fe22a19dbb1b3cb9babaa839f1f6e817a62d95a5b971ff96a5c66c338c6f2a2da4644519f40761402e9c81013d76c7152c95ba5efa24ce1930f23a2277f057ffb6b0144f3b434a2adc456ef4d2fbdf7c6238c2bb00ffcf2d23d68cb9b027f3b225ec4e09b089f7956b66c5692b46ea03abb6a404c8ccceaa4ba4161409fcb54b86eaca26b2a0c4b81f7b71cbfcef"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 2.736215916s ago: executing program 1 (id=4675): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000030000000200000003"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x11, 0xc, &(0x7f0000000800)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000009}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x61800, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x8c}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x80) r2 = openat$cgroup_ro(r0, &(0x7f0000000080)='blkio.bfq.io_queued\x00', 0x75324cc7ada9, 0x0) syz_clone(0x20243400, 0x0, 0x1b, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000030000000000000003000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000006000000850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000004000000850000007500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r3}, 0xc) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180200000400ffff00000000010000008500000036000000850000002a00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0x0, &(0x7f0000000040)="f7edad00"/14, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) syz_clone(0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000aecd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad94ed406f21caf5adcf920569c00cc1199684fa75814709fea019af247c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c1faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6fab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b79db2e3d5986c82b5aa94e539b204d58f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c7160ec83070000020000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72b0000000000001cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2cc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78ac02ca3cdf6a662db1c9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad943e392955f4f979ea13201bafedcd2063d11dd665647223c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd89346cfbb5567e54d3504723177d356c4604b7a492ecec37e83efceefd7ca2533659edc8be05cc85451c6a14507434eb54b6f43caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffca9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a294351c5356c1d06c92cf8ce3c7c56cd31121624d74517fd3666277f670e812b28e2f30d035cee5d0e77a3c7220000000000000005a474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f034b8d3ebce68663ef5af469abe75b314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041e12282ce24463aaf28345bd168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f09000000000000004fc4bda3453602004535a976eacd3adaa4d2ee6fe0d072ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d401adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb40f7f02f750d6c977a191852c9ae031db044b2353199546609f9f69a6cfefdf879d447df53f3b9b70d10355b00300000000000000553d18a6cc50feeb7bfad9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f58fab987baab97a9bfbd8f185b5631820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe527340935aa3c0b4f3f45b418a18217747ae442e31560e5b741445ea2a1acee2a81425ff000000d2a0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51423b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f88735fce5115dc83ed73d8ee4a91322608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf5000000000000fa08ad0631c4b839688b22c4da2a6bc4cf45854d221a2d5f96bc64647f15daa2ba79cd0f4254ed55217912ef84bd2927df82fc061aef2920c49b2a90886da75561173fa186cb7ee86dd4285c4721eb428c953296bb2f5d825da54dbef07c1b349b4901e093d13e6b9a0000009b5b22e887bc061d40bcaf0aa18623fd9b7179ccc692ba74b531b65c4decf9d080a8ac7e82d4cde1267aa64b2a94fd87a009e6742c2ddc3a9d7eccbb1831b1fa218277c2814a91cab7cb59c697166d6f1bb1a360470000000000000000000000000000000000000000000000000000f9f9b4ce7e871f507084c8c88e0652decbe579b03ed84ea94597dd1059620a050f69ea03b99b4e19d35f4a3b54e96ae2172effecec80f6baa4bf69a6ebf5392882df78b0983e662dc0cb64b77f3f006b6b25443197ae93f0be6de5a703d003f00720943c0e4b33af00000000000000000021a688b2d7007fcc4b59f719afb0b3b7e0aee306ca70fe42bf4984a68f40e1fc043a03a17e4744359b87dc27c82d51cbeb64e52a28daeb6a78d6fe06181ecc840000"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r7 = socket$kcm(0x2, 0x1000000000000002, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x800008f, &(0x7f00000001c0), 0x0, 0x10, &(0x7f0000000200), &(0x7f00000002c0), 0x8, 0xe1, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) sendmsg$inet(r7, &(0x7f0000000b40)={&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @loopback, @loopback}}}], 0x20}, 0xe900) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r2, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)=r6}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x22, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@map_idx_val={0x18, 0xa, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xee0b}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @exit, @jmp={0x5, 0x0, 0x5, 0x3, 0x8, 0x30, 0xfffffffffffffff0}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x10}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x5, 0xa3, &(0x7f00000002c0)=""/163, 0x41100, 0x21, '\x00', r8, 0x0, r2, 0x8, &(0x7f0000000380)={0xa, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r2, r9, r2, r2], 0x0, 0x10, 0x3}, 0x94) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x3, r5, 0xc) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4814) 2.58201633s ago: executing program 4 (id=4676): socket$kcm(0x2, 0x200000000000001, 0x106) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x1002, 0x3}, 0x1a2d, 0x0, 0x3ff, 0x6, 0x9, 0x3, 0x8000, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="18120000", @ANYRES32=r0, @ANYBLOB="00005e0000000000b703000000000000850000000c000000d9169c860000000018290000e800bf2c5de880947a7398b0bf5560fcb2f95775e6c7eab944f822ca1a4dd47df00e25eaa84ff3cfcf38dd98d5735fe7f51b88fbc0242660cbbf5374e923f5badb0876c6688637601db747f558172df81855a2f7308e5589d7429eb1c408d1664862b9bc9cb8a07013041b95b29891e2c2f28b27e30f3e5fa262d3bc8bfca6346ca710420b4c85e4b6a03369f3", @ANYRES32=0x1, @ANYBLOB="000000004e0000001864000005000000000000001800000018380000020000000000000000000000186300000f00000000000000050000008510000003000000"], &(0x7f00000006c0)='GPL\x00', 0x1, 0x33, &(0x7f0000000700)=""/51, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000780)={0x4, 0x8, 0x0, 0x9}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[0x1, 0x1, 0xffffffffffffffff, r0, 0x1, 0x1, 0x1], &(0x7f0000000800)=[{0x3, 0x4, 0xf, 0x7}], 0x10, 0x165}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x0, 0x0, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x94) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f00000005c0)={0x0, 0x80, 0x7, 0x6, 0x3, 0x2, 0x0, 0x3, 0x1c, 0x8, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0xc4, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8400, 0x200, 0x942, 0x3, 0x5e32, 0x0, 0x9, 0x0, 0xf}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000200)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703110000001f03000000010000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84d0f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x324, 0x0, 0x0, 0x1f00c00e}, 0x4014) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time\x00', 0x26e1, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="a60a00000000000061118000000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8b0f, &(0x7f0000000000)={'wlan1\x00'}) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18003a7227880000000000000861ffff611228000000000000d9eb25a67149eb"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="364000001a00913a"], 0x82d7) recvmsg(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000002200)=""/4096, 0x7ffff000}, {&(0x7f0000003200)=""/4073, 0xfe9}], 0x2}, 0x0) recvmsg(r5, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) r6 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x3e, &(0x7f00000002c0)=r4, 0x161) sendmsg$inet(r6, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, 0x0}, 0x20000000) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) 2.188434148s ago: executing program 2 (id=4679): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x8}, 0x1918, 0x20000, 0xc2ba, 0x5, 0x4000000, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000032000b07d25a806f8c6394f90824fc60", 0x14}], 0x1}, 0x0) (fail_nth: 4) 2.187476008s ago: executing program 0 (id=4680): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2112, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$kcm(0x10, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x10e, 0xb, &(0x7f0000000200), 0xf) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x6) perf_event_open(0x0, 0x0, 0xf, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x1f}, 0x107412, 0x0, 0x0, 0x3d603c7d87ed2789, 0x22c000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r5, 0xc008240a, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x6, 0x0, 0x8003fffe, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={0x0, 0x1}, 0x8807, 0x0, 0x2, 0x8, 0x0, 0x76385604, 0xffff, 0x0, 0x2, 0x0, 0x74}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) recvmsg$unix(r6, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x15}, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0x12, &(0x7f00000008c0)=r8, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff200000000021000aac141419e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = getpid() perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x7, 0x0, 0x0, 0x657a, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x9}, 0x910, 0x400000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, r9, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r10 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r10, 0x890b, &(0x7f0000000000)) 2.12953985s ago: executing program 3 (id=4681): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)='%pS \x00'}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000240), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x1b, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@alu={0x4, 0x0, 0x0, 0x6, 0x9, 0x8, 0x10}, @alu={0x4, 0x1, 0xa, 0x3, 0x7, 0xc, 0x4}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}]}, &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xea96, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x10, 0xc8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f91324", 0x12}], 0x1}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}], 0x10}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000001a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@alu={0x7, 0x0, 0x3, 0x0, 0x0, 0x1}]}, &(0x7f0000001a40)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) close(0x3) r4 = socket$kcm(0x29, 0x7, 0x0) recvmsg$kcm(r4, &(0x7f0000001e80)={0x0, 0xffffffcc, &(0x7f0000001d80), 0x2, &(0x7f0000001dc0)=""/176, 0xb0}, 0x0) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r5, &(0x7f0000000240)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004000) sendmsg$inet(r5, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002940)=[{&(0x7f0000000800)}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x894b, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x89a2, &(0x7f0000000040)={'bridge0\x00', @random="1400"}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000028000000c"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_MAP_CONST_STR_FREEZE(0x14, &(0x7f0000000040)={r1}, 0xb) 1.962129754s ago: executing program 2 (id=4682): r0 = socket$kcm(0x2b, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2112, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x657a, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/syz1\x00', 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000100)=r3, 0x12) r6 = openat$cgroup_ro(r4, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000040)=0x1, 0x12) setsockopt$sock_attach_bpf(r0, 0x6, 0x4, 0x0, 0x0) r7 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20004, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d32, 0x8100, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x58c8, 0x4, 0xfffffffc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r8, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="180200ec00002a9000000000000004009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000bcfffff400000000000000008500000041000000850000007d00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$kcm(0x10, 0x2, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000e00)=ANY=[@ANYRESHEX=r7], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x8, 0x0, 0xffffff0c}, 0x94) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f00000002c0)=r10, 0x4) sendmsg$kcm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000003c0)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6cc", 0xb8}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240)={r11}, 0x4) r12 = socket$kcm(0x10, 0x2, 0x0) setsockopt$sock_attach_bpf(r12, 0x10e, 0x8, 0x0, 0x0) 1.791907248s ago: executing program 3 (id=4683): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c000000f800002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], &(0x7f00000005c0)='GPL\x00'}, 0x90) 1.555151523s ago: executing program 3 (id=4684): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2112, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x657a, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000003c0)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe800011000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0) 1.334424568s ago: executing program 4 (id=4685): r0 = socket$kcm(0x1e, 0x4, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9125b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x200, 0xc2ba, 0x4, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80840, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000080)={'veth1_vlan\x00', @multicast}) r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[], 0x101d0) sendmsg$kcm(r2, &(0x7f0000000040)={&(0x7f00000000c0)=@tipc=@name={0x1e, 0x2, 0x3, {{0x41}, 0x5}}, 0x80, 0x0, 0x0, &(0x7f0000000900)=ANY=[], 0x1458}, 0x48800) r3 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) close(0x3) 1.29529032s ago: executing program 2 (id=4686): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000004"], 0x50) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000140), &(0x7f0000000100)}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000140), &(0x7f0000000100)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r0, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x10, &(0x7f00000003c0)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x1005, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x22) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000071121a00000000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000071121a00000000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20488, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x10000, 0x1, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1) (async) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20488, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x10000, 0x1, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1) recvmsg$unix(r3, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[@ANYRES8=r4, @ANYBLOB="3eca", @ANYRES32=r5], 0x9a) ioctl$TUNSETSTEERINGEBPF(r6, 0x800454e0, &(0x7f0000000200)=r2) (async) ioctl$TUNSETSTEERINGEBPF(r6, 0x800454e0, &(0x7f0000000200)=r2) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000003500)={&(0x7f0000000440)="5d54cded6bf8a395c95148283bd12419559cf04ebdb3e13c7a21da291e52ea436da88d6b1792573f4d82e46f18519b544a74f7c97eed7dbf1c4f59495dd642431c5ab8259266cd44a26c11c04d4fed543263d78dbe5f6170617e4833a053f886c7f4f0540a498c921e1286e4596f194e149af623107c22627aeff14478485dc0e57043a06565f2208a954d7d6089ab2e2bff922063835cf1dba4e76061f1899675216a550d3bc970dd5836fcf3bc703e85350a6fdc678fa4d8bb6cc7dc08e699a895709f9515887a600de4b7dbe6e8901ff665768ab53bc7622878b632ac1ad437157ae1741b", &(0x7f0000000540)=""/149, &(0x7f0000000600), &(0x7f0000002500)="18bde126ae916cb1c816dc231ca551fb24e56aef51a6eb6bea54edb2a2d0762d96a5afc515cbef9808bf1339d6860089261dd51e65027efce4ee4914dcf2a1b0df0729333ba6c9044fe9fcd1354c700c2d982c412947ef79d848fa88ba95be7bb7550b9760cc42747f2fdd8aab44eb2785187430eb5b04c52ffcdec01cd9103c6a3b18ec741457a62d28a9a05ddb2990ed5d58836ac3112ecc74551396d25faa9b25d65f832f684ec43ff53ebb5ca60df2b4768730feab258a2f040aa8dd5790339d361c8ccb1389b98daec280063787eb78c61f5a39067db0fda157131c783e38352f429704da24a121c7096f9033ccbc58894f32fe61b8be4e96f66bc045bfc1503ae281f17d3eba845d9291ec1eae60b8c701b63db1e742c5b50e312f86b2177f22055cf10f2205114db03045f47cdd8a48be8d9b8d231fc6533ce12044396fbc4e047343a74899c4608d632e5c9731c7d628acdbe8fde28436df62271e42f7863c922d60833bbee51105282f33a4d90b23f803596fd73ed07706c57c68047d2209c3ed9f3c413f51d708de6ec453aa12c98304066c96f4af0d18b8af767edb615522015840d04b1cce9f706c15a3c6f5ddfcf1e9fcadf03151b58c0b4afa3f558c0346905f1c87097838abfbd6de58278d8b27d657a6a7cb14921bef20869b866fea2fd75c68f7a0eee6cf5b7a3824a978d0a7fcf7faaf376f456af93c61f8bbeaaab3b55a53946335f6575c49db35e3bb8ff0bdbaed1c12ba5a854e5c5c3396c337de1dcd55c0fe327ceb39151f5bacefc29a7179898313f5058c172e849cd3efbe4943d65586483f096e8d3a1871853730798ec203dd64162528d095745513ed84ba198cb113bfa75284b422422761768d3819cb6d90ab98b3d59e5cca4a88d138c4f2f17797520a4d8dc6068e2152406ec56c9c212f8965b4fa7f1fa35bd3460429cd0bbc7ff181426429bba31707a37f69f1d2191946a488342ee8ccf9d28d3ec9335e7cdccdbcfcf97732d013b385785e4b558f1965c99512bb384019701402a07e7d84cf506b726e45800ee3f40adaad410628dd4db485b82f06155efa09fbff104abc3aa4752aa111062e156e421ba85edbe483986dded4aeed7c796cff475a0446737bcad53a61bcd548d5fab51d71e49b7e536155459963774e558bef86c675961bab4b1c6595bfe3eadd252221bcabfc95a31c3eaacab44dfc69ab68b821f6cd7c873bf7a812477ef62d1c15a4c16b00cf76c8cdd9820b6639c24966d27f473cd07fde5cc9f9ca1b395592475ed45116103eea8eeb6dd1ff764b7057b4b26db436e59016c9e25617506b31fcf2df12cbee40b5d1e469836bb22a5399d1dfec2c90ff2a4ccdb768d3c1d81ccb9097380b9c4d54d48179617baff21c7673179b8c95e0f06ea803d60fe253e3f318090c147234dc692421e4c45b6f39170c32ed115244abed24f1cdd2cd0a3cf6fbe5fcbd3bed8c5a0236ec0b4684a17289ac077a62eefbd019d9aa8c45a407f7271db2abee3f8f5df02a814271ce45e4e5f5cd4c931f414825a1139c9bf8ce5b9783bd7045521a90865fd221dca5c8cfd6d716fe90f8d9129606139083df243b5875dce3e98f42957df66fa4b28cf053f3c18ec1c1cea845b912982bc2e6b10b0144f8d1bfe375e3e9e0274fb70c445090a2aba69c597df3fd79a8e971fc83a0d0427470929bfcb63e9978cb6d6459b5b60c6cc3dfade80856988bc69313a0e1d2eaaa5abc3c97dd216b13331e4aa9558f8388b0a2ef57a2614880f09c02338a3cdfb4bdbc1e45a46828227a6ab699e71ce614c89463b61fce4ddc88db6313b880fd04072b98e9332253da9acc9f987abf2e43789a08a989547968bd1ff90a1ad1d4029693c8b890e3d511eaa6b5b80998a59a367a3fab01cb36ab8f2665d91f9126fbf529e1d3c70155a728fa9602ca5ba7cd79abeac84532976601364be8e37834b3fb812966b7e644f39009efdf6b955cbc505eb3647df63acbb779ac420ec5d75c0d142324eedf1d8ae6814dd538d276da137c0b00da78a9c4112cdd2f660d3c9e404ab89727bdb1c6a5521c643bc2c610f1f8ce92a4c886186ef88979fd76220d3b3aa87bc18b61ffc588dd7a73601a267bda9a9960d7ec874d88b0910829e19999ef8d7d42103248f73c0d59e73da994eaa24c340f87bf4073e59cb28cc72eb103094a349a8951b88eb32efce5976d29950655e4b6ea8a279b72e86b2811f839e0c5efdc2b03b6f418af3b707d316c60977784366094b9e5f43e89a8d012a4ba0c6a57a8cf22b0fa07ff607ce5527f384d3ad5cef7b8cf287433368dfdaf576508673745ca7b1fa3ac85d8bd71907faf15e97df9809190d1393510e706894807aa8fee1155a8787d3c86be9027039224f02c566b498ff2b926df4fa86dbb8fe72066979b873a4bcaa0b7f4ac053e243a2f3924cb2d2ed1414a847657bcb19faaf9803b64109b372acafbe8dd6dbf05e3ce09e2ed34d4238dc2ab3ae87cb758ebe65f4f7d8240fe3b3e59cd0022aad48836f26d817bbcb91bb9f3bfad2a2ab21a27859f0373a9008aadd83f51689833f290b0f1528a3315174ca15410cfd042c8e6d19d330622febe45e51c3dfbac9aa9dcd01d923d7483a7911be3c6ac5de6291cb5bc299f89b73450aad771c5b7276d4e702077761cfe39d56a1318fde2578663e52308f04b9369f414cbb14d2bf3d0001110c19944e4dcc3a58ff28f45921642dea10ddd55a37b78eeed1a7fab247e82ea3befdd8b5308a4a25fde224efe884dd1ff1d6d9e371ab4bce11903148909920b2fdccd1fa04c01eb9fd8253af11fbb58a0dcb17222624b3963e2ed196eef09ade5b95a4a67efa3773df6a2441c12f7f12dd1cc525f0a0e108172bbf2926c68f15f2af62b0410671b89340e5e4915d3ef8a953f2c835e6ed657fb6ff03aa313f61844cbf9c16e8337523cc78ba56f2c382bb3deec33daa0291cc770e9f6bda2816afd0af2a94b46f5772467dc453398694d60a270bd7ae39e75ca0356f2d0cc69eaccb15ec92b1aec5c6438f4682a7699a4bb00c8d58ded0467f8b06b0cec8db9c9daf27b732fdcdc7ff3c34565d496efee3cc45038fd8bfe160d24fba5298dc71402a2963a97b90197be2c246631e9d9920a128d855b07041f4430a2864bc3239ff7d63cc6ab4eeb4adec95b7a9170c950fa57ecc34dd1d9a91068a4e907083852206d42435b975b206a6b3521187ff8be3a61d3c8a475620864fa35680c3f4e5d7760bf0b85e95db9ee2e4bdab2d3ff8de66442f6a4c75cc88f733298784ef7bab7c3116ecde3e42d14ad0e9b34244e5a29df03238b6a6c14bffbcd6e74790f266088017af686da12987fc9d4dd1df2ffed3e092de8a414f699cf3b657c2606ebc91c5b8b766ea34c9ff5b5701a566b6c5d75b1e97603593dc5fd6be6f8db68ec2fef16df222f411536c9f233f3be2aedcffcf139b815f81a7ba05def42a4b4812cb148f7ca186fc5c26b0b25c2df4af0b38b59ca8b4191725d755491b5a10a50092711c75bc51b1c1c278829ea31e62b904369a6babf199c970abc2c7aa3818bea3e3cc886f261cc3856faba2ce6aa462f7610bebb498575a01690b4a403bae89bc5b5db6c46d5412ab3f8bdb6dd3f6bca1697dac042cb77bd03b7546cbe02dc5a05058ef7906634edc9645154d0eed36c2ae573b90647c71b2e1bfea5e10907b47346f2c703a763b70317e06665a7e0f3b2e70b8806074dcd8b11363dce7c1cf619421995032e4904f81850386bb09b2af59fbaf94cc59ebb90305984106faf375736206cad56960550a3db1331071cca1c23f1804b4b09851fc0b0d6742928f7c2a53c80ae8c1d8157e59188acf214249c6ec3db698d3ac9195ddbf12bc916a2125585e5779ef6aa51dd7f084e46c651d1fd9eb4602d14cc883375b6a3fac11e0bb69883973f0d5fdc7091c36a92be4f3b77395485096ef134fc2448f3faace9c6b1a878bde143a2c47cc19d7d96c5fa294b10e370651972cd394480d97d364107dd4328ab8ca940187d49c5350efd3347c85260d13a779d92b36c5a8d230e41af6e410b1527b133504f347d9d9f4369883cea682a0b0c5dec6c2420b4c21e41b2be6df5e6bff67b1865c4093c5b6380380fe7e0f1ccbdbc3791919f2f26685f3b646c9dde7ad94bca2b647dd36a988e3b7ac28ad9c21592d2bf1754225767a4cb9619775a5de3884ff49dcdc873166600f08de195a426ecbcbd62b78e97bb308028e4317eb52c2f7f8a78325d98278c54fccb883eb464f31638d65a703a75b567b11fcdf67563ddbfbb2733e090cabd0f456ead7cb1baadbdccb23577ecbe6f98324151c34acbdafc59be0392e4ae3843913cea0a303eb8f6563262a8ce9fed0bf0a6d6fe8d8241faf6237567040d7aabae9802414723b4fd45f8ed47c0f93c70104f45c19e73ce974ddf5205d45284516e2a8b908bc8c7c305f33737853b091e63a8313d6b36bf55aa22015f1f8d35d88d7eafc05d7cf9326dd1820c19b66986c606784726ba862189e6628d03929244af1e72e4a6950766c8d14586da1f0cd52d42c5323c7a19aab3257cfb024b1a8cd71f1f7fa72b6e9a85316c4ae46a2fa91a85910fdea91f040df5cd6829c1b1cf3a2131f61d70bd60d80e88a20cd07ec2746979ded4b9b596f14c08618c0492d958316b18fffb829d6f929b5d09888c634bc61d3a993212934e545e288b115bdd5b0eabdffd14e438d84beacda986c18dc876b38800db9096755e80a86e2071eaaaa5070312590a756facc7702923193044312f424ea700248e08627f061034b3a965d44e3090a8cabc95d34db2be1836f9e6e86cd32d8c4484a371cdfd8064542f46199757dd03f89a2bfc7e966194121cb5293c6a9e95767c320791094dfe32d827d8b3bfc34c398de473859c44420186ba349a96d9e6579b456ee5ca44a748c0966cd03e996786ced3d93f1a44fed9f9cc05de752243d35e8f6ec8ad65a23f90fa775ecc9ae0b095ac24f3d088fd163bd800acd0683be9c456e1f23a9b0bf985ff423cf4668c74ad466e60c931d028f2d08cc9fc884a773a3d5b0f746f897cf02d5bc16185efcff506e2f5e3bb9183c28c8c600c2d936fb00ba882f535dabe5951b468edf4f2c96cd0cebb1e2488230a789b7d67ef19c69ca38d573ae6325e9ff2ade1fdfc64ccd6c47f4f3d75a867f5fb291e1a0b8d0289bf27b7fcea01a972e3f018aa8c24e376e64b406dea8c55fb0545a61998d7f91c0f93018c100d43aa1ff771601f9bda6e697ac88a45bd0f811ee976268d5b9a19e0e948d72196b02b114abf625e9cec4bd27df421d3620bf1f1d3d706fdef12a8cf32f9cd4f1c8b57a98d635b6e55b0a5e19b877f16ec694609429d1853bb6996f73a278663cdac34aebda642d8cf04ba0addbc124771393b4b317eb70e10409a2a4171abe3bda747114f33f46a22d0a8a7874079a418a302823c396b808afdc4c26e0cb7958bcca4f483a9d1c98d6c7d38adb55273f84f27d2308922a28be31575315bbfb0fde05575909b78ea8c8859370096e0c7497e24bc2c47140f8fb22035ec0b6099530475a0da2633ff43654d748dd13ebe77c920256cf1f43b229a41f78fba60dfd536fa02095700240d47a6e37fbc24a5405174d9614618604329e2d1e880d8bef96674556c1907cf58172fec2e9b06f0579096137d1eedefa2218fbda07b74852891520a882ab40af6893ea54ec85b6261394081e6f801f0e5d1e3ac72a5d47d48c5901ebc0161", 0x80, r1}, 0x38) 1.217789191s ago: executing program 3 (id=4687): r0 = socket$kcm(0x2b, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2112, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x657a, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/syz1\x00', 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000100)=r3, 0x12) r6 = openat$cgroup_ro(r4, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000040)=0x1, 0x12) setsockopt$sock_attach_bpf(r0, 0x6, 0x4, 0x0, 0x0) r7 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20004, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d32, 0x8100, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x58c8, 0x4, 0xfffffffc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r8, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="180200ec00002a9000000000000004009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000bcfffff400000000000000008500000041000000850000007d00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$kcm(0x10, 0x2, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000e00)=ANY=[@ANYRESHEX=r7], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x8, 0x0, 0xffffff0c}, 0x94) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f00000002c0)=r10, 0x4) sendmsg$kcm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000003c0)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f", 0xcc}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240)={r11}, 0x4) r12 = socket$kcm(0x10, 0x2, 0x0) setsockopt$sock_attach_bpf(r12, 0x10e, 0x8, 0x0, 0x0) 1.064577715s ago: executing program 1 (id=4688): perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10}, 0x8, 0x8000000000ca, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0xffffff7e, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48283, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xb0142, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x90}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1509, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x4, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85feff0fc9"], 0x0}, 0x94) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r5], 0x12) 996.390336ms ago: executing program 2 (id=4689): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000022003505d25a806f8c6394f90224fc60", 0x14}], 0x1}, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x140, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x5601, 0x0, 0x0, 0x1, 0x8, 0x0, 0x6, 0x0, 0x0, 0x0, 0x800000004136}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xb, 0x830d}, 0x0, 0xd1, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r1, 0x0, 0xf, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711211000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24}, 0x94) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) close(0x3) close(0x4) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) close(0x4) 995.278966ms ago: executing program 0 (id=4690): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xeb, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffe}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000feffffff0000000000040000851000000200000085000000230000009500000000000000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_clone(0x20027080, 0x0, 0x0, &(0x7f0000002480), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x28}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x17}}]}, 0x0, 0x1}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d80000001e0081054e81f782db4cb9040a1d080006007c095dd2086518000a800000000003600e1208000f0000000406a80016c0080009", 0x37}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000190091c8b14a0778a8123d181d"], 0xfe33) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r4, 0x0, 0x40080) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000005f40)={r3, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000005c80)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000005cc0)=[0x0], &(0x7f0000005d00), 0x0, 0xe8, &(0x7f00000002c0)=[{}, {}], 0x10, 0x10, &(0x7f0000005d80), &(0x7f0000005dc0), 0x8, 0x3e, 0x8, 0x8, &(0x7f0000005e00)}}, 0x10) sendmsg$inet(r4, &(0x7f0000006000)={&(0x7f0000000540)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f0000005bc0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000005a40)="30a7b9208ef2093700c85128164572285441cbd9b9ac9c9ac488c761698e1e2b9eb3c29440fc0a49e8419e785863a6d19103925442c75f9e3fc972a0d09402c9aab695616db326feabbbe502f4529ae290ce6cb1f5c928b9aabc1ca5ef1f5d569db594590f28815e4cd453f6e1d889630363473dbcd6e0c14289862baa6ba83fd3edaf5820dabd7fccc9fc659a0bde6bafd784aeff8378e6a9ab830072b1a3fb226db0d85b2c757f5572fd", 0xab}, {&(0x7f0000005b40)="3c3401d91d68eb11bbb8cb1702b5d1f2ff19895f16e3aa01f0ef546d49e30f82d30d0210", 0x24}, {&(0x7f0000005b80)="f6080a9a9d", 0x5}], 0x6, &(0x7f0000005f80)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @local, @multicast2}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}], 0x50}, 0x20008000) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xfa, '\x00', r5, r6, 0x5, 0x4, 0x5}, 0x50) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[], 0xfe8a) 974.221067ms ago: executing program 4 (id=4691): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000aecd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad94ed406f21caf5adcf920569c00cc1199684fa75814709fea019af247c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c1faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6fab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b79db2e3d5986c82b5aa94e539b204d58f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c7160ec83070000020000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72b0000000000001cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2cc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78ac02ca3cdf6a662db1c9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad943e392955f4f979ea13201bafedcd2063d11dd665647223c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd89346cfbb5567e54d3504723177d356c4604b7a492ecec37e83efceefd7ca2533659edc8be05cc85451c6a14507434eb54b6f43caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffca9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a294351c5356c1d06c92cf8ce3c7c56cd31121624d74517fd3666277f670e812b28e2f30d035cee5d0e77a3c7220000000000000005a474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f034b8d3ebce68663ef5af469abe75b314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041e12282ce24463aaf28345bd168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f09000000000000004fc4bda3453602004535a976eacd3adaa4d2ee6fe0d072ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d401adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb40f7f02f750d6c977a191852c9ae031db044b2353199546609f9f69a6cfefdf879d447df53f3b9b70d10355b00300000000000000553d18a6cc50feeb7bfad9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f58fab987baab97a9bfbd8f185b5631820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe527340935aa3c0b4f3f45b418a18217747ae442e31560e5b741445ea2a1acee2a81425ff000000d2a0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51423b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f88735fce5115dc83ed73d8ee4a91322608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf5000000000000fa08ad0631c4b839688b22c4da2a6bc4cf45854d221a2d5f96bc64647f15daa2ba79cd0f4254ed55217912ef84bd2927df82fc061aef2920c49b2a90886da75561173fa186cb7ee86dd4285c4721eb428c953296bb2f5d825da54dbef07c1b349b4901e093d13e6b9a0000009b5b22e887bc061d40bcaf0aa18623fd9b7179ccc692ba74b531b65c4decf9d080a8ac7e82d4cde1267aa64b2a94fd87a009e6742c2ddc3a9d7eccbb1831b1fa218277c2814a91cab7cb59c697166d6f1bb1a360470000000000000000000000000000000000000000000000000000f9f9b4ce7e871f507084c8c88e0652decbe579b03ed84ea94597dd1059620a050f69ea03b99b4e19d35f4a3b54e96ae2172effecec80f6baa4bf69a6ebf5392882df78b0983e662dc0cb64b77f3f006b6b25443197ae93f0be6de5a703d003f00720943c0e4b33af00000000000000000021a688b2d7007fcc4b59f719afb0b3b7e0aee306ca70fe42bf4984a68f40e1fc043a03a17e4744359b87dc27c82d51cbeb64e52a28daeb6a78d6fe06181ecc840000"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) getpid() setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000003c0)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe80003f000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0) recvmsg$kcm(r0, &(0x7f0000000e40)={&(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000880)=""/162, 0xa2}, {&(0x7f0000000940)=""/195, 0xc3}, {&(0x7f0000000a40)=""/107, 0x6b}, {&(0x7f0000000ac0)=""/212, 0xd4}, {&(0x7f0000000bc0)=""/151, 0x97}, {&(0x7f0000000c80)=""/49, 0x31}], 0x6, &(0x7f0000000d40)=""/249, 0xf9}, 0x40000001) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x2, 0x0, 0x0, 0x0, 0x400006, 0x12101, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x7}, 0x828, 0x100000001, 0x0, 0x0, 0x0, 0xc00000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8983, &(0x7f0000000080)) 831.96218ms ago: executing program 3 (id=4692): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0xf6}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r1}, 0xc) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x29, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x34, &(0x7f00000000c0), 0x54) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="000000feff0000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xee, &(0x7f0000000580)=""/238}, 0x94) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) 434.76361ms ago: executing program 3 (id=4693): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r1 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x90) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x9, 0x0, 0x0, 0xd2cf, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xbe}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) setsockopt$sock_attach_bpf(r2, 0x1, 0xd, &(0x7f0000000080), 0x24) close(r2) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x50}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x41) syz_clone(0x2800, &(0x7f0000000380)="6f52be73b22faf1fe95f0c72286fade9283a92e478aaa53f02bfb3bdafda86f0a9ce688d3f729b6cb5f2ff2272a0d1c44e66e278d710de7373d1499d06dd195ffe6fa26bc6d06f6f8d6ff18ba969b1e5c167cd266dbccf4c178105eb249b49e1a5727ddad0766d80d9ebf58028892c5656e9ca94b154ff1d08e950b52a5032cfde1ec184e85c0ad04ae11401429ca28ddec7793c0a136348fe1f207271f01b73f8e7d8", 0xa3, &(0x7f0000000800), &(0x7f0000000840), &(0x7f0000000940)="19cbfdadb2f1504b037dd97423d8fb26f36d53ed4dd078e4031081734b3cc39b29e2487d9afcb8cd579dd707a8e9e4cf9c9026de5189326efbfa2b38d8b191fc5932794125dfd9014373a652ee1c4b50d52b8b9a328e035e14d86049c077677127081d0ed366920823b8fe9902eaa5f67e6e233e9a4328699788bcab5f646715c173c6056a1e36dfde8a89f800ee647b1f90c94b610af7") recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000300)=""/70, 0x46}, {&(0x7f0000000440)=""/203, 0xcb}, {&(0x7f0000003a40)=""/4103, 0x1007}, {&(0x7f0000000700)=""/202, 0xca}, {&(0x7f0000000ac0)=""/145, 0x91}, {&(0x7f0000000000)=""/81, 0x51}, {&(0x7f0000000600)=""/198, 0xca}, {&(0x7f0000002080)=""/207, 0xcf}, {&(0x7f0000000540)=""/92, 0xa3}], 0x9}, 0x40000020) r4 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x14, 0x4, 0x4, 0x20002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) sendmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)="d800000010008104687da3aa7143a0b8c81f080b21000000e8fe55a19c9d8714060014000000001208000a0043000040a80012001600054006000d000360107134cf6ee08000a0e408e8d8ef52a9d765dd11683296b7947968c7c0b7a196e6f66100000000000000000000003a17b259b640cce85107000014bbba2379bdbb26887321ace48051f2373a24cbd99f0c59b23c28b7be", 0x95}, {&(0x7f0000000bc0)="aa581ff83dac4a519b67538bfa897e210c31e1c78d2d8de1498e01601b446808358248cf2d795634b12c4ce81c38765fa04eaab78e0d3122d0db5efb9428a0e5c5badf", 0x43}], 0x2}, 0x20000050) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x11200, 0x2000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f96d24fc60040011000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 352.851082ms ago: executing program 4 (id=4694): socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f00000008c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0xfffffffd}}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x1e, 0x4, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x1001, 0x2, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext, 0x51f5, 0x0, 0xfffffffc, 0x0, 0x0, 0xd}, 0x0, 0xc, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x2d, &(0x7f0000000040), 0x4) socket$kcm(0x10, 0x2, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d006a10000000e8fe55a118001500060014b9c3600e1209000a0044000000a80016000a", 0x35}], 0x1}, 0x4) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg(r4, &(0x7f0000000640)={&(0x7f0000000040)=@pptp={0x18, 0x2, {0x3, @broadcast}}, 0x80, 0x0}, 0x20000800) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x45, &(0x7f0000000440)=[{&(0x7f0000000000)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe5538250015000600149b0000001208000313eba96240a8002b", 0x33}], 0x1}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0xfe33) 346.516562ms ago: executing program 2 (id=4695): socket$kcm(0x21, 0x2, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x108ea5, 0xc78, 0x0, 0x0, 0x0, 0x0, 0xae7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002000000851000000600000018020000", @ANYRES32, @ANYBLOB="0000000000000000660002000000b0ff180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) 100.195178ms ago: executing program 2 (id=4696): socket$kcm(0x2, 0x200000000000001, 0x106) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x1002, 0x3}, 0x1a2d, 0x0, 0x3ff, 0x6, 0x9, 0x3, 0x8000, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="18120000", @ANYRES32=r0, @ANYBLOB="00005e0000000000b703000000000000850000000c000000d9169c860000000018290000e800bf2c5de880947a7398b0bf5560fcb2f95775e6c7eab944f822ca1a4dd47df00e25eaa84ff3cfcf38dd98d5735fe7f51b88fbc0242660cbbf5374e923f5badb0876c6688637601db747f558172df81855a2f7308e5589d7429eb1c408d1664862b9bc9cb8a07013041b95b29891e2c2f28b27e30f3e5fa262d3bc8bfca6346ca710420b4c85e4b6a03369f3", @ANYRES32=0x1, @ANYBLOB="000000004e0000001864000005000000000000001800000018380000020000000000000000000000186300000f00000000000000050000008510000003000000"], &(0x7f00000006c0)='GPL\x00', 0x1, 0x33, &(0x7f0000000700)=""/51, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000780)={0x4, 0x8, 0x0, 0x9}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[0x1, 0x1, 0xffffffffffffffff, r0, 0x1, 0x1, 0x1], &(0x7f0000000800)=[{0x3, 0x4, 0xf, 0x7}], 0x10, 0x165}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x0, 0x0, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x94) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f00000005c0)={0x0, 0x80, 0x7, 0x6, 0x3, 0x2, 0x0, 0x3, 0x1c, 0x8, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0xc4, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8400, 0x200, 0x942, 0x3, 0x5e32, 0x0, 0x9, 0x0, 0xf}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000200)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703110000001f03000000010000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84d0f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x324, 0x0, 0x0, 0x1f00c00e}, 0x4014) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time\x00', 0x26e1, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="a60a00000000000061118000000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8b0f, &(0x7f0000000000)={'wlan1\x00'}) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18003a7227880000000000000861ffff611228000000000000d9eb25a67149eb"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="364000001a00913a"], 0x82d7) recvmsg(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000002200)=""/4096, 0x7ffff000}, {&(0x7f0000003200)=""/4073, 0xfe9}], 0x2}, 0x0) recvmsg(r5, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) r6 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x3e, &(0x7f00000002c0)=r4, 0x161) sendmsg$inet(r6, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, 0x0}, 0x20000000) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) 73.662108ms ago: executing program 4 (id=4697): perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$kcm(0xa, 0x2, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000200)='syz0\x00', 0x200002, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)}], 0x1, 0x0, 0x0, 0x900}, 0x60) recvmsg(r0, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x40000100) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@const]}}, &(0x7f0000000580)=""/211, 0x26, 0xd3, 0x1}, 0x28) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) 59.820359ms ago: executing program 1 (id=4698): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x8}, 0x1918, 0x20000, 0xc2ba, 0x5, 0x4000000, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000aecd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad94ed406f21caf5adcf920569c00cc1199684fa75814709fea019af247c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c1faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6fab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b79db2e3d5986c82b5aa94e539b204d58f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c7160ec83070000020000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72b0000000000001cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2cc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78ac02ca3cdf6a662db1c9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad943e392955f4f979ea13201bafedcd2063d11dd665647223c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd89346cfbb5567e54d3504723177d356c4604b7a492ecec37e83efceefd7ca2533659edc8be05cc85451c6a14507434eb54b6f43caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffca9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a294351c5356c1d06c92cf8ce3c7c56cd31121624d74517fd3666277f670e812b28e2f30d035cee5d0e77a3c7220000000000000005a474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f034b8d3ebce68663ef5af469abe75b314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041e12282ce24463aaf28345bd168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f09000000000000004fc4bda3453602004535a976eacd3adaa4d2ee6fe0d072ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d401adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb40f7f02f750d6c977a191852c9ae031db044b2353199546609f9f69a6cfefdf879d447df53f3b9b70d10355b00300000000000000553d18a6cc50feeb7bfad9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f58fab987baab97a9bfbd8f185b5631820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe527340935aa3c0b4f3f45b418a18217747ae442e31560e5b741445ea2a1acee2a81425ff000000d2a0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51423b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f88735fce5115dc83ed73d8ee4a91322608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf5000000000000fa08ad0631c4b839688b22c4da2a6bc4cf45854d221a2d5f96bc64647f15daa2ba79cd0f4254ed55217912ef84bd2927df82fc061aef2920c49b2a90886da75561173fa186cb7ee86dd4285c4721eb428c953296bb2f5d825da54dbef07c1b349b4901e093d13e6b9a0000009b5b22e887bc061d40bcaf0aa18623fd9b7179ccc692ba74b531b65c4decf9d080a8ac7e82d4cde1267aa64b2a94fd87a009e6742c2ddc3a9d7eccbb1831b1fa218277c2814a91cab7cb59c697166d6f1bb1a360470000000000000000000000000000000000000000000000000000f9f9b4ce7e871f507084c8c88e0652decbe579b03ed84ea94597dd1059620a050f69ea03b99b4e19d35f4a3b54e96ae2172effecec80f6baa4bf69a6ebf5392882df78b0983e662dc0cb64b77f3f006b6b25443197ae93f0be6de5a703d003f00720943c0e4b33af00000000000000000021a688b2d7007fcc4b59f719afb0b3b7e0aee306ca70fe42bf4984a68f40e1fc043a03a17e4744359b87dc27c82d51cbeb64e52a28daeb6a78d6fe06181ecc840000"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000032000b07d25a806f8c6394f90824fc60", 0x14}], 0x1}, 0x0) (fail_nth: 5) 0s ago: executing program 0 (id=4699): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000030000000200000003"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x11, 0xc, &(0x7f0000000800)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000009}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x61800, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x8c}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x80) r2 = openat$cgroup_ro(r0, &(0x7f0000000080)='blkio.bfq.io_queued\x00', 0x75324cc7ada9, 0x0) syz_clone(0x20243400, 0x0, 0x1b, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000030000000000000003000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000006000000850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000004000000850000007500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r3}, 0xc) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180200000400ffff00000000010000008500000036000000850000002a00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0x0, &(0x7f0000000040)="f7edad00"/14, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) syz_clone(0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r7 = socket$kcm(0x2, 0x1000000000000002, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x800008f, &(0x7f00000001c0), 0x0, 0x10, &(0x7f0000000200), &(0x7f00000002c0), 0x8, 0xe1, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) sendmsg$inet(r7, &(0x7f0000000b40)={&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @loopback, @loopback}}}], 0x20}, 0xe900) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r2, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)=r6}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x22, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@map_idx_val={0x18, 0xa, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xee0b}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @exit, @jmp={0x5, 0x0, 0x5, 0x3, 0x8, 0x30, 0xfffffffffffffff0}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x10}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x5, 0xa3, &(0x7f00000002c0)=""/163, 0x41100, 0x21, '\x00', r8, 0x0, r2, 0x8, &(0x7f0000000380)={0xa, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r2, r9, r2, r2], 0x0, 0x10, 0x3}, 0x94) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x3, r5, 0xc) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4814) kernel console output (not intermixed with test programs): evsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.938062][T14429] team0: Port device team_slave_0 added [ 589.983675][T14429] team0: Port device team_slave_1 added [ 590.072251][ T4809] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.124896][T14429] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 590.156249][T14429] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 590.210486][T14429] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 590.263253][T14429] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 590.270229][T14429] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 590.353476][T14429] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 590.391928][ T4280] Bluetooth: hci4: command 0x0409 tx timeout [ 590.690956][T14429] device hsr_slave_0 entered promiscuous mode [ 590.703465][T14429] device hsr_slave_1 entered promiscuous mode [ 590.732236][T14429] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 590.753910][T14429] Cannot create hsr debugfs directory [ 590.773818][T14480] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 590.799105][ T4809] device 0 left promiscuous mode [ 591.704964][T14521] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3051'. [ 592.471286][ T4280] Bluetooth: hci4: command 0x041b tx timeout [ 592.756865][T14537] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 592.764474][T14537] IPv6: NLM_F_CREATE should be set when creating new route [ 592.771854][T14537] IPv6: NLM_F_CREATE should be set when creating new route [ 592.779295][T14537] IPv6: NLM_F_CREATE should be set when creating new route [ 592.873488][T14429] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 592.914376][T14429] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 593.121547][T14429] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 593.207897][T14429] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 593.275805][ T4809] device hsr_slave_0 left promiscuous mode [ 593.301657][ T4809] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 593.327456][ T4809] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 593.349437][ T4809] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 593.384570][ T4809] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 593.470716][ T4809] device veth1_macvtap left promiscuous mode [ 593.488090][ T4809] device veth0_macvtap left promiscuous mode [ 593.512903][ T4809] device veth1_vlan left promiscuous mode [ 593.544693][ T4809] device veth0_vlan left promiscuous mode [ 593.992705][ T4809] device geneve1 left promiscuous mode [ 594.018871][ T4809] team0 (unregistering): Port device geneve1 removed [ 594.550917][ T4280] Bluetooth: hci4: command 0x040f tx timeout [ 594.677890][ T4809] device team_slave_1 left promiscuous mode [ 594.685530][ T4809] team0 (unregistering): Port device team_slave_1 removed [ 594.718690][ T4809] device team_slave_0 left promiscuous mode [ 594.728932][ T4809] team0 (unregistering): Port device team_slave_0 removed [ 594.822762][ T4809] device bridge_slave_1 left promiscuous mode [ 594.829590][ T4809] team0 (unregistering): Port device bridge_slave_1 removed [ 595.020237][T14587] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 595.027523][T14587] IPv6: NLM_F_CREATE should be set when creating new route [ 595.039322][T14591] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 595.061068][T14591] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 595.081186][T14591] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 595.283924][T14598] netlink: 'syz.2.3069': attribute type 4 has an invalid length. [ 595.297198][T14429] 8021q: adding VLAN 0 to HW filter on device bond0 [ 595.298864][T14598] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3069'. [ 595.391290][ T4812] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 595.421845][ T4812] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 595.464028][T14429] 8021q: adding VLAN 0 to HW filter on device team0 [ 595.535914][ T4806] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 595.548387][ T4806] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 595.581430][ T4806] bridge0: port 1(bridge_slave_0) entered blocking state [ 595.588564][ T4806] bridge0: port 1(bridge_slave_0) entered forwarding state [ 595.645658][T14605] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3072'. [ 595.667815][T14603] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 595.712188][ T4806] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 595.740608][ T4806] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 595.777255][ T4806] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 595.806518][ T4806] bridge0: port 2(bridge_slave_1) entered blocking state [ 595.813713][ T4806] bridge0: port 2(bridge_slave_1) entered forwarding state [ 595.892522][ T4806] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 595.915613][ T4806] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 595.949518][ T4806] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 595.983186][ T4806] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 596.017173][ T4806] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 596.045963][ T4806] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 596.089538][ T4806] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 596.127227][ T4806] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 596.149665][ T4806] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 596.170575][ T4806] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 596.184316][ T4806] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 596.236381][T14429] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 596.250315][T14625] syzkaller0: tun_chr_ioctl cmd 2147767519 [ 596.633179][ T4280] Bluetooth: hci4: command 0x0419 tx timeout [ 597.501346][ T4821] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 597.519456][ T4821] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 597.599263][T14429] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 597.821705][ T4806] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 597.840367][ T4806] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 597.900674][T14652] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 597.942698][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 597.963051][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 597.994320][T14429] device veth0_vlan entered promiscuous mode [ 598.015753][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 598.032898][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 598.070258][T14429] device veth1_vlan entered promiscuous mode [ 598.144222][ T4796] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 598.161885][ T4796] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 598.289220][ T4796] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 598.312614][ T4796] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 598.346056][T14429] device veth0_macvtap entered promiscuous mode [ 598.396844][T14429] device veth1_macvtap entered promiscuous mode [ 598.534382][T14429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 598.568190][T14429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 598.588613][T14429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 598.609939][T14429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 598.630573][T14429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 598.656582][T14429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 598.677409][T14429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 598.698569][T14429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 598.724304][T14429] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 598.759393][ T4809] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 598.772877][ T4809] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 598.782271][ T4809] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 598.818804][ T4809] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 598.839882][T14429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 598.852837][T14429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 598.863380][T14429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 598.900680][T14429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 598.921060][T14429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 598.942234][T14429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 598.966998][T14429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 598.998530][T14429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 599.031505][T14429] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 599.053728][ T4796] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 599.083908][ T4796] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 599.159943][T14429] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.189432][T14429] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.218621][T14429] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.235675][T14429] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.528704][ T4809] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 599.553370][ T4809] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 599.610426][ T6126] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 599.681748][ T4809] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 599.699703][ T4809] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 599.721134][ T6126] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 600.002206][T14693] netlink: 65185 bytes leftover after parsing attributes in process `syz.1.3021'. [ 600.238393][T14704] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 600.246007][T14704] IPv6: NLM_F_CREATE should be set when creating new route [ 600.282945][T14694] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 601.656260][ T4821] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.693436][ T4288] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 601.703617][ T4288] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 601.715560][ T4288] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 601.738945][ T4288] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 601.752059][ T4288] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 601.761248][ T4288] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 601.819521][T14740] netlink: 16083 bytes leftover after parsing attributes in process `syz.2.3114'. [ 602.004447][T14735] netlink: 202920 bytes leftover after parsing attributes in process `syz.0.3112'. [ 602.051654][T14746] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 602.059078][T14746] IPv6: NLM_F_CREATE should be set when creating new route [ 602.066661][T14746] IPv6: NLM_F_CREATE should be set when creating new route [ 602.074183][T14746] IPv6: NLM_F_CREATE should be set when creating new route [ 602.158233][ T4821] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.242977][T14748] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 602.293305][ T4821] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.431338][ T4821] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.821015][ T4821] device 0 left promiscuous mode [ 602.946520][ T4821] tipc: Left network mode [ 602.987543][T14738] chnl_net:caif_netlink_parms(): no params data found [ 603.592005][T14738] bridge0: port 1(bridge_slave_0) entered blocking state [ 603.599172][T14738] bridge0: port 1(bridge_slave_0) entered disabled state [ 603.636039][T14738] device bridge_slave_0 entered promiscuous mode [ 603.711664][T14738] bridge0: port 2(bridge_slave_1) entered blocking state [ 603.724694][T14738] bridge0: port 2(bridge_slave_1) entered disabled state [ 603.763473][T14738] device bridge_slave_1 entered promiscuous mode [ 603.782910][T14792] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 603.790442][T14792] IPv6: NLM_F_CREATE should be set when creating new route [ 603.835380][ T4280] Bluetooth: hci0: command 0x0409 tx timeout [ 604.017417][T14738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 604.205316][T14738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 604.387413][T14738] team0: Port device team_slave_0 added [ 604.406734][T14803] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 604.477295][T14738] team0: Port device team_slave_1 added [ 604.554913][T14738] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 604.578065][T14738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 604.677107][T14738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 604.818156][T14738] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 604.830816][T14738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 604.879176][T14738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 605.367413][T14829] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 605.374989][T14829] IPv6: NLM_F_CREATE should be set when creating new route [ 605.448988][T14738] device hsr_slave_0 entered promiscuous mode [ 605.497866][T14738] device hsr_slave_1 entered promiscuous mode [ 605.785025][ T4821] device hsr_slave_0 left promiscuous mode [ 605.805051][ T4821] device hsr_slave_1 left promiscuous mode [ 605.843392][ T4821] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 605.864291][ T4821] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 605.911104][ T4280] Bluetooth: hci0: command 0x041b tx timeout [ 605.916504][ T4821] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 605.990417][ T4821] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 606.082426][ T4821] device bridge_slave_1 left promiscuous mode [ 606.089190][ T4821] bridge0: port 2(bridge_slave_1) entered disabled state [ 606.182142][ T4821] device bridge_slave_0 left promiscuous mode [ 606.192999][ T4821] bridge0: port 1(bridge_slave_0) entered disabled state [ 606.282257][ T4821] device veth1_macvtap left promiscuous mode [ 606.289650][ T4821] device veth0_macvtap left promiscuous mode [ 606.299967][ T4821] device veth1_vlan left promiscuous mode [ 606.305834][ T4821] device veth0_vlan left promiscuous mode [ 606.800310][ T4821] team0 (unregistering): Port device geneve1 removed [ 607.175631][ T4821] team0 (unregistering): Port device macvlan0 removed [ 607.771848][ T4821] team0 (unregistering): Port device team_slave_1 removed [ 607.852699][ T4821] team0 (unregistering): Port device team_slave_0 removed [ 607.997931][ T4280] Bluetooth: hci0: command 0x040f tx timeout [ 608.375663][T14851] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 608.391569][T14845] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 608.398906][T14845] IPv6: NLM_F_CREATE should be set when creating new route [ 608.645411][T14880] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 608.652967][T14880] IPv6: NLM_F_CREATE should be set when creating new route [ 608.754726][T14884] netlink: 180 bytes leftover after parsing attributes in process `syz.0.3148'. [ 608.875382][T14886] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3149'. [ 609.562422][T14905] netlink: 'syz.1.3154': attribute type 10 has an invalid length. [ 609.751515][T14905] team0: Port device wlan1 added [ 609.807692][T14892] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 609.812186][T14917] netlink: 'syz.2.3155': attribute type 3 has an invalid length. [ 609.837125][T14917] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3155'. [ 609.951169][T14915] netlink: 'syz.2.3155': attribute type 2 has an invalid length. [ 609.977909][T14915] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3155'. [ 610.026003][T14738] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 610.071415][ T4280] Bluetooth: hci0: command 0x0419 tx timeout [ 610.084049][T14738] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 610.163810][T14738] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 610.207293][T14738] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 610.332429][T14926] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 610.455526][T14738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 610.536070][T14934] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 610.543683][T14934] IPv6: NLM_F_CREATE should be set when creating new route [ 610.596503][T14738] 8021q: adding VLAN 0 to HW filter on device team0 [ 610.623173][ T4796] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 610.672421][ T4796] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 610.715703][ T4796] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 610.742440][ T4796] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 610.765473][ T4796] bridge0: port 1(bridge_slave_0) entered blocking state [ 610.772690][ T4796] bridge0: port 1(bridge_slave_0) entered forwarding state [ 610.799021][ T4796] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 610.829590][ T4796] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 610.854219][ T4796] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 610.886048][ T4796] bridge0: port 2(bridge_slave_1) entered blocking state [ 610.893229][ T4796] bridge0: port 2(bridge_slave_1) entered forwarding state [ 610.916290][ T4796] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 610.989518][ T4796] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 611.059713][ T4821] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 611.110854][ T4821] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 611.161884][ T4821] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 611.177963][ T4821] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 611.186685][ T4821] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 611.214760][T14951] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3163'. [ 611.248609][ T4821] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 611.277690][ T4821] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 611.299124][ T4821] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 611.317055][ T4821] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 611.329648][T14950] netlink: 65185 bytes leftover after parsing attributes in process `syz.1.3166'. [ 611.343211][T14738] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 611.354167][T14946] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 612.060397][T14978] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 612.067978][T14978] IPv6: NLM_F_CREATE should be set when creating new route [ 612.227541][ T4821] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 612.248752][ T4821] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 612.304572][T14738] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 612.409285][ T6126] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 612.433906][ T6126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 612.488275][T14992] netlink: 65185 bytes leftover after parsing attributes in process `syz.2.3179'. [ 612.538734][ T6126] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 612.569283][ T6126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 612.644043][T14989] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 612.681780][ T6126] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 612.700366][ T6126] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 612.733487][T14738] device veth0_vlan entered promiscuous mode [ 612.797055][T14738] device veth1_vlan entered promiscuous mode [ 612.934703][T14738] device veth0_macvtap entered promiscuous mode [ 612.955409][ T4796] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 612.984597][ T4796] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 613.022083][ T4796] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 613.055309][T14738] device veth1_macvtap entered promiscuous mode [ 613.190482][T14738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 613.241203][T14738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 613.281020][T14738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 613.330306][T14738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 613.377474][T14738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 613.418961][T14738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 613.462457][T14738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 613.521444][T14738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 613.555948][T14738] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 613.604327][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 613.627891][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 613.637796][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 613.710054][T15026] netlink: 65185 bytes leftover after parsing attributes in process `syz.1.3190'. [ 613.761873][T14738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 613.781011][T14738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 613.831166][T14738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 613.889404][T14738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 613.950264][T14738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 614.038002][T14738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 614.068727][T14738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 614.097345][T14738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 614.121091][T14738] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 614.256564][ T4809] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 614.266971][ T4809] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 614.294892][T14738] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.314471][T14738] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.349849][T14738] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.368911][T14738] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.385845][T15033] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 615.544386][ T4821] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 615.580319][ T4821] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 615.746234][ T4821] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 616.111220][ T4809] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 616.128529][ T4809] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 616.281023][ T4806] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 616.836799][T15099] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 617.986147][ T4288] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 617.996568][ T4288] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 618.007491][ T4288] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 618.050387][ T4288] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 618.060228][ T4288] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 618.075407][ T4288] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 618.179987][ T4821] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.424267][ T4821] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.726514][ T4821] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.052579][ T4821] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.135182][T15160] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 619.142639][T15160] IPv6: NLM_F_CREATE should be set when creating new route [ 619.150087][T15160] IPv6: NLM_F_CREATE should be set when creating new route [ 619.157600][T15160] IPv6: NLM_F_CREATE should be set when creating new route [ 619.230477][T15158] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 619.568162][ T4821] device 0 left promiscuous mode [ 619.685682][T15137] chnl_net:caif_netlink_parms(): no params data found [ 619.707836][T15183] netlink: 56863 bytes leftover after parsing attributes in process `syz.4.3224'. [ 619.734486][ T4821] device 0 left promiscuous mode [ 619.779962][T15189] delete_channel: no stack [ 619.851897][ T4821] tipc: Left network mode [ 620.154146][ T4280] Bluetooth: hci1: command 0x0409 tx timeout [ 620.319715][T15137] bridge0: port 1(bridge_slave_0) entered blocking state [ 620.335452][T15137] bridge0: port 1(bridge_slave_0) entered disabled state [ 620.387840][T15137] device bridge_slave_0 entered promiscuous mode [ 620.452487][T15204] netlink: 'syz.3.3228': attribute type 2 has an invalid length. [ 620.466087][T15204] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3228'. [ 620.498451][T15206] tipc: Started in network mode [ 620.506323][T15206] tipc: Node identity 9215a268, cluster identity 4711 [ 620.541448][T15206] tipc: Node number set to 2450891368 [ 620.652720][T15137] bridge0: port 2(bridge_slave_1) entered blocking state [ 620.686137][T15137] bridge0: port 2(bridge_slave_1) entered disabled state [ 620.707492][T15137] device bridge_slave_1 entered promiscuous mode [ 620.947597][T15137] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 620.977986][T15227] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3237'. [ 621.088364][T15137] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 621.343310][T15137] team0: Port device team_slave_0 added [ 621.416236][T15137] team0: Port device team_slave_1 added [ 621.425070][T15245] syz.3.3241[15245] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 621.425168][T15245] syz.3.3241[15245] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 621.510622][T15245] netlink: 'syz.3.3241': attribute type 10 has an invalid length. [ 621.554608][T15245] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 621.636504][T15245] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 621.681636][T15137] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 621.693173][T15137] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 621.724372][T15137] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 621.823015][T15253] netlink: 'syz.4.3245': attribute type 2 has an invalid length. [ 621.860969][T15253] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3245'. [ 621.932618][T15137] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 621.948285][T15137] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 622.046340][T15137] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 622.237380][ T4280] Bluetooth: hci1: command 0x041b tx timeout [ 622.859143][T15137] device hsr_slave_0 entered promiscuous mode [ 622.882444][T15137] device hsr_slave_1 entered promiscuous mode [ 622.931970][T15137] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 622.939645][T15137] Cannot create hsr debugfs directory [ 623.818734][T15281] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 624.058904][ T4821] device hsr_slave_0 left promiscuous mode [ 624.155301][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.161761][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.242975][ T4821] device hsr_slave_1 left promiscuous mode [ 624.255368][ T4821] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 624.272827][ T4821] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 624.292097][ T4821] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 624.299563][ T4821] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 624.320822][ T4280] Bluetooth: hci1: command 0x040f tx timeout [ 624.458393][ T4821] device bridge_slave_1 left promiscuous mode [ 624.491346][ T4821] bridge0: port 2(bridge_slave_1) entered disabled state [ 624.512810][ T4821] bridge0: port 1(bridge_slave_0) entered disabled state [ 624.586150][ T4821] device veth1_macvtap left promiscuous mode [ 624.627349][ T4821] device veth0_macvtap left promiscuous mode [ 624.640574][ T4821] device veth1_vlan left promiscuous mode [ 624.658084][ T4821] device veth0_vlan left promiscuous mode [ 625.118789][ T4821] team0 (unregistering): Port device geneve1 removed [ 625.885478][ T4821] team0 (unregistering): Port device team_slave_1 removed [ 626.392015][ T4280] Bluetooth: hci1: command 0x0419 tx timeout [ 626.721056][T15295] netlink: 65185 bytes leftover after parsing attributes in process `syz.1.3254'. [ 626.751713][T15304] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 626.758961][T15304] IPv6: NLM_F_CREATE should be set when creating new route [ 626.871201][T15306] netlink: 'syz.2.3257': attribute type 22 has an invalid length. [ 626.905824][T15306] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3257'. [ 627.965625][T15333] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 628.049545][T15137] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 628.093585][T15137] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 628.157358][T15137] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 628.204129][T15137] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 628.378828][T15351] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 628.386482][T15351] IPv6: NLM_F_CREATE should be set when creating new route [ 628.419560][T15354] netlink: 65185 bytes leftover after parsing attributes in process `syz.2.3268'. [ 628.472360][T15357] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 628.586791][T15137] 8021q: adding VLAN 0 to HW filter on device bond0 [ 628.651189][ T4821] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 628.666845][ T4821] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 628.704966][T15137] 8021q: adding VLAN 0 to HW filter on device team0 [ 628.734237][T15362] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.3270'. [ 628.751729][ T4812] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 628.791969][ T4812] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 628.822559][ T4812] bridge0: port 1(bridge_slave_0) entered blocking state [ 628.829710][ T4812] bridge0: port 1(bridge_slave_0) entered forwarding state [ 628.902387][ T4812] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 628.949559][ T4812] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 628.979108][ T4812] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 629.020194][ T4812] bridge0: port 2(bridge_slave_1) entered blocking state [ 629.027395][ T4812] bridge0: port 2(bridge_slave_1) entered forwarding state [ 629.094458][ T4812] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 629.112950][ T4812] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 629.266718][ T4821] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 629.351689][ T4821] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 629.360321][ T4821] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 629.451829][ T4821] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 629.535578][T15137] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 629.618811][T15137] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 629.656613][ T4821] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 629.668320][ T4821] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 629.698181][ T4821] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 629.732893][ T4821] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 629.758336][ T4821] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 629.782385][ T4821] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 629.799485][T15382] netlink: 'syz.4.3277': attribute type 10 has an invalid length. [ 629.818483][T15382] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3277'. [ 630.220745][T15400] netlink: 65185 bytes leftover after parsing attributes in process `syz.3.3280'. [ 630.499980][T15406] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 630.508503][T15406] IPv6: NLM_F_CREATE should be set when creating new route [ 630.581685][T15408] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 630.797113][ T4821] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 630.879591][ T4821] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 630.926206][T15137] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 631.063694][ T4821] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 631.079656][ T4821] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 631.130601][ T4812] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 631.150304][ T4812] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 631.186686][ T4812] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 631.218730][ T4812] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 631.250602][T15137] device veth0_vlan entered promiscuous mode [ 631.302768][T15137] device veth1_vlan entered promiscuous mode [ 631.399967][ T6126] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 631.441570][ T6126] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 631.481485][ T6126] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 631.531212][ T6126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 631.564224][T15137] device veth0_macvtap entered promiscuous mode [ 631.627409][T15137] device veth1_macvtap entered promiscuous mode [ 631.705822][T15137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 631.730450][T15137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 631.789432][T15137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 631.830469][T15137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 631.870102][T15137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 631.898095][T15137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 631.916919][T15137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 631.937830][T15137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 631.956663][T15137] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 631.978272][T15137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 632.002734][T15137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 632.034213][T15137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 632.053116][T15137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 632.067669][T15137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 632.081046][T15137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 632.091291][T15137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 632.119245][T15137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 632.137426][T15137] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 632.145030][T15448] netlink: 'syz.4.3290': attribute type 22 has an invalid length. [ 632.161905][T15448] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3290'. [ 632.186458][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 632.205192][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 632.225660][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 632.249687][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 632.273310][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 632.293518][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 632.322185][T15453] netlink: 'syz.2.3291': attribute type 10 has an invalid length. [ 632.336965][T15453] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3291'. [ 632.361681][T15137] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.371179][T15137] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.389498][T15137] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.400999][T15137] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.435790][T15457] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 632.609459][ T4821] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 632.620822][ T4821] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 632.665160][ T4821] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 632.709500][ T4821] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 632.751532][ T4821] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 632.784241][ T4821] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 633.504013][T15482] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 633.511604][T15482] IPv6: NLM_F_CREATE should be set when creating new route [ 636.068045][T15498] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 636.075530][T15498] IPv6: NLM_F_CREATE should be set when creating new route [ 636.083140][T15498] IPv6: NLM_F_CREATE should be set when creating new route [ 636.090646][T15498] IPv6: NLM_F_CREATE should be set when creating new route [ 636.162855][T15501] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 636.607703][T15507] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 636.615008][T15507] IPv6: NLM_F_CREATE should be set when creating new route [ 636.844849][T15525] netlink: 134056 bytes leftover after parsing attributes in process `syz.1.3302'. [ 638.164769][T15550] netlink: 65185 bytes leftover after parsing attributes in process `syz.2.3317'. [ 638.277201][T15552] netlink: 'syz.0.3319': attribute type 6 has an invalid length. [ 638.331240][T15552] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.3319'. [ 638.537566][T15560] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 638.544941][T15560] IPv6: NLM_F_CREATE should be set when creating new route [ 638.834143][T15569] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3325'. [ 638.895855][T15566] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 638.903158][T15566] IPv6: NLM_F_CREATE should be set when creating new route [ 639.009128][T15564] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 639.579696][T15586] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3332'. [ 639.831013][T15588] netlink: 65185 bytes leftover after parsing attributes in process `syz.1.3331'. [ 639.970206][T15592] netlink: 134056 bytes leftover after parsing attributes in process `syz.3.3333'. [ 640.674531][T15608] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3338'. [ 641.515736][T15628] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 641.524589][T15628] IPv6: NLM_F_CREATE should be set when creating new route [ 641.584540][T15631] netlink: 65185 bytes leftover after parsing attributes in process `syz.3.3347'. [ 641.683113][T15632] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 642.047511][T15634] mac80211_hwsim hwsim19 ªªªªªªõUÁMVµ"˜: renamed from wlan0 [ 642.546596][T15645] netlink: 'syz.0.3352': attribute type 2 has an invalid length. [ 642.570215][T15645] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3352'. [ 642.613672][T15650] netlink: 'syz.1.3354': attribute type 2 has an invalid length. [ 643.316763][T15671] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 643.571722][T15679] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 643.739470][T15674] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 644.648160][T15698] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 644.711114][T15706] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 644.907708][T15717] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3378'. [ 645.113166][T15726] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 645.120879][T15726] IPv6: NLM_F_CREATE should be set when creating new route [ 646.079233][T15740] mac80211_hwsim hwsim25 ªªªªªªõUÁMVµ"˜: renamed from wlan0 [ 647.517283][T15745] netlink: 'syz.3.3382': attribute type 10 has an invalid length. [ 647.601192][T15745] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3382'. [ 647.721855][T15745] device team0 entered promiscuous mode [ 647.806103][T15745] device team_slave_0 entered promiscuous mode [ 647.839158][T15745] device team_slave_1 entered promiscuous mode [ 647.977106][T15745] bridge0: port 3(team0) entered blocking state [ 648.025564][T15745] bridge0: port 3(team0) entered disabled state [ 648.180371][T15745] bridge0: port 3(team0) entered blocking state [ 648.187048][T15745] bridge0: port 3(team0) entered forwarding state [ 648.256077][T15753] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 648.445662][T15759] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 649.089257][T15762] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3395'. [ 649.127118][T15763] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 649.134815][T15763] IPv6: NLM_F_CREATE should be set when creating new route [ 651.176849][T15780] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3399'. [ 651.852866][T15780] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 652.012403][T15780] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 652.062416][T15780] bond0 (unregistering): Released all slaves [ 654.022571][T15799] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 654.682827][T15796] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 655.595864][T15807] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3409'. [ 656.194658][T15811] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 656.202288][T15811] IPv6: NLM_F_CREATE should be set when creating new route [ 658.620508][T15830] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 658.675380][T15836] netlink: 65185 bytes leftover after parsing attributes in process `syz.0.3421'. [ 659.640855][T15840] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3423'. [ 660.282498][T15850] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 660.290038][T15850] IPv6: NLM_F_CREATE should be set when creating new route [ 661.732475][T15859] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 661.893628][T15870] netlink: 65185 bytes leftover after parsing attributes in process `syz.0.3433'. [ 661.983396][T15871] netlink: 'syz.2.3432': attribute type 2 has an invalid length. [ 662.669578][T15874] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 665.309597][T15896] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 665.318052][T15896] IPv6: NLM_F_CREATE should be set when creating new route [ 666.243260][T15901] netlink: 'syz.2.3445': attribute type 29 has an invalid length. [ 666.321353][T15901] netlink: 'syz.2.3445': attribute type 29 has an invalid length. [ 666.461399][T15901] netlink: 'syz.2.3445': attribute type 29 has an invalid length. [ 666.522154][T15907] netlink: 'syz.2.3445': attribute type 29 has an invalid length. [ 666.709463][T15907] netlink: 'syz.2.3445': attribute type 29 has an invalid length. [ 666.894938][T15919] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 666.902724][T15919] IPv6: NLM_F_CREATE should be set when creating new route [ 667.332318][T15920] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 667.339842][T15920] IPv6: NLM_F_CREATE should be set when creating new route [ 667.443494][T15924] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 668.334487][T15941] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 668.341962][T15941] IPv6: NLM_F_CREATE should be set when creating new route [ 668.728417][T15953] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 669.653417][T15970] netlink: 176 bytes leftover after parsing attributes in process `syz.2.3468'. [ 670.159250][T15986] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 670.991591][T15994] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 671.144325][T16018] netlink: 'syz.2.3484': attribute type 2 has an invalid length. [ 671.177214][T16018] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3484'. [ 671.286517][T16020] netlink: 'syz.0.3485': attribute type 29 has an invalid length. [ 671.477765][T16020] netlink: 'syz.0.3485': attribute type 29 has an invalid length. [ 671.497069][T16025] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 671.869068][T16038] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 671.876728][T16038] IPv6: NLM_F_CREATE should be set when creating new route [ 672.523165][T16057] netlink: 'syz.0.3498': attribute type 2 has an invalid length. [ 672.594773][T16057] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3498'. [ 672.876021][T16070] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 673.462146][T16091] netlink: 'syz.0.3511': attribute type 10 has an invalid length. [ 673.683347][T16091] team0: Device wg1 is of different type [ 674.037115][T16109] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 674.044649][T16109] IPv6: NLM_F_CREATE should be set when creating new route [ 675.137557][T16139] netlink: 'syz.0.3527': attribute type 275 has an invalid length. [ 675.415514][T16155] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 675.423155][T16155] IPv6: NLM_F_CREATE should be set when creating new route [ 677.114391][T16190] netlink: 'syz.2.3540': attribute type 21 has an invalid length. [ 677.200863][T16190] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3540'. [ 679.933154][T16206] netlink: 'syz.2.3546': attribute type 2 has an invalid length. [ 679.974131][T16206] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3546'. [ 680.090619][T16211] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 680.411310][T16223] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 680.418809][T16223] IPv6: NLM_F_CREATE should be set when creating new route [ 680.458523][T16218] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 680.811501][T16246] FAULT_INJECTION: forcing a failure. [ 680.811501][T16246] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 680.891035][T16246] CPU: 1 PID: 16246 Comm: syz.1.3561 Not tainted syzkaller #0 [ 680.898550][T16246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 680.908625][T16246] Call Trace: [ 680.911913][T16246] [ 680.914858][T16246] dump_stack_lvl+0x188/0x24e [ 680.919564][T16246] ? show_regs_print_info+0x12/0x12 [ 680.924781][T16246] ? load_image+0x410/0x410 [ 680.929301][T16246] ? __lock_acquire+0x7c40/0x7c40 [ 680.934360][T16246] should_fail_ex+0x390/0x4c0 [ 680.939061][T16246] _copy_from_user+0x2c/0x170 [ 680.943750][T16246] ___sys_sendmsg+0x1c3/0x360 [ 680.948449][T16246] ? __sys_sendmsg+0x2a0/0x2a0 [ 680.953247][T16246] ? __lock_acquire+0x7c40/0x7c40 [ 680.958320][T16246] __se_sys_sendmsg+0x1c3/0x2b0 [ 680.963204][T16246] ? __x64_sys_sendmsg+0x80/0x80 [ 680.968171][T16246] ? lockdep_hardirqs_on+0x94/0x140 [ 680.973379][T16246] do_syscall_64+0x4c/0xa0 [ 680.977789][T16246] ? clear_bhb_loop+0x60/0xb0 [ 680.982459][T16246] ? clear_bhb_loop+0x60/0xb0 [ 680.987129][T16246] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 680.993012][T16246] RIP: 0033:0x7f8c97f9de59 [ 680.997418][T16246] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 681.017013][T16246] RSP: 002b:00007f8c98dfd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 681.025423][T16246] RAX: ffffffffffffffda RBX: 00007f8c98225fa0 RCX: 00007f8c97f9de59 [ 681.033389][T16246] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 681.041352][T16246] RBP: 00007f8c98dfd090 R08: 0000000000000000 R09: 0000000000000000 [ 681.049313][T16246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 681.057276][T16246] R13: 00007f8c98226038 R14: 00007f8c98225fa0 R15: 00007fff63233258 [ 681.065252][T16246] [ 682.550901][ T4288] Bluetooth: hci5: command 0x0406 tx timeout [ 683.694779][T16226] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3556'. [ 683.715362][T16241] bridge0: port 4(gretap0) entered blocking state [ 683.731452][T16241] bridge0: port 4(gretap0) entered disabled state [ 683.738977][T16241] device gretap0 entered promiscuous mode [ 683.756895][T16241] bridge0: port 4(gretap0) entered blocking state [ 683.763790][T16241] bridge0: port 4(gretap0) entered forwarding state [ 683.816573][T16256] netlink: 'syz.0.3564': attribute type 2 has an invalid length. [ 683.836239][T16256] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3564'. [ 683.848517][T16266] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 683.861585][T16269] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 683.869092][T16269] IPv6: NLM_F_CREATE should be set when creating new route [ 684.229303][T16275] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 684.320526][T16289] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 684.781889][T16307] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 684.789925][T16307] IPv6: NLM_F_CREATE should be set when creating new route [ 684.905855][T16297] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3582'. [ 684.965916][T16308] netlink: 'syz.1.3584': attribute type 2 has an invalid length. [ 684.987214][T16308] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3584'. [ 685.073909][T16303] bridge0: port 3(gretap0) entered blocking state [ 685.111466][T16303] bridge0: port 3(gretap0) entered disabled state [ 685.146754][T16316] netlink: 15231 bytes leftover after parsing attributes in process `syz.4.3588'. [ 685.150729][T16303] device gretap0 entered promiscuous mode [ 685.187224][T16303] bridge0: port 3(gretap0) entered blocking state [ 685.194460][T16303] bridge0: port 3(gretap0) entered forwarding state [ 685.454592][T16326] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 685.592652][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.599239][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.690330][T16327] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 685.827181][T16342] netlink: 'syz.2.3598': attribute type 16 has an invalid length. [ 685.840638][T16342] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3598'. [ 685.996076][T16349] FAULT_INJECTION: forcing a failure. [ 685.996076][T16349] name failslab, interval 1, probability 0, space 0, times 0 [ 686.027359][T16349] CPU: 0 PID: 16349 Comm: syz.1.3601 Not tainted syzkaller #0 [ 686.034872][T16349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 686.042770][T16351] netlink: 188 bytes leftover after parsing attributes in process `syz.0.3602'. [ 686.044925][T16349] Call Trace: [ 686.044936][T16349] [ 686.044943][T16349] dump_stack_lvl+0x188/0x24e [ 686.064862][T16349] ? show_regs_print_info+0x12/0x12 [ 686.070176][T16349] ? load_image+0x410/0x410 [ 686.074707][T16349] ? __might_sleep+0xd0/0xd0 [ 686.079317][T16349] ? __lock_acquire+0x7c40/0x7c40 [ 686.084366][T16349] should_fail_ex+0x390/0x4c0 [ 686.089053][T16349] should_failslab+0x5/0x20 [ 686.093601][T16349] slab_pre_alloc_hook+0x59/0x300 [ 686.098645][T16349] kmem_cache_alloc_node+0x5a/0x310 [ 686.103838][T16349] ? __alloc_skb+0xf9/0x7d0 [ 686.108337][T16349] __alloc_skb+0xf9/0x7d0 [ 686.112664][T16349] netlink_sendmsg+0x654/0xbd0 [ 686.117430][T16349] ? netlink_getsockopt+0x550/0x550 [ 686.122624][T16349] ? apparmor_socket_sendmsg+0x8a/0x330 [ 686.128169][T16349] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 686.133448][T16349] ? security_socket_sendmsg+0x7c/0xa0 [ 686.138988][T16349] ? netlink_getsockopt+0x550/0x550 [ 686.144182][T16349] ____sys_sendmsg+0x5ed/0x9a0 [ 686.148950][T16349] ? __sys_sendmsg_sock+0x30/0x30 [ 686.153967][T16349] ? __import_iovec+0x306/0x510 [ 686.158817][T16349] ? import_iovec+0x6f/0xa0 [ 686.163316][T16349] ___sys_sendmsg+0x2a2/0x360 [ 686.167988][T16349] ? __sys_sendmsg+0x2a0/0x2a0 [ 686.172759][T16349] ? __lock_acquire+0x7c40/0x7c40 [ 686.177794][T16349] __se_sys_sendmsg+0x1c3/0x2b0 [ 686.182637][T16349] ? ct_nmi_exit+0x145/0x1c0 [ 686.187232][T16349] ? __x64_sys_sendmsg+0x80/0x80 [ 686.192260][T16349] ? lockdep_hardirqs_on+0x94/0x140 [ 686.197448][T16349] do_syscall_64+0x4c/0xa0 [ 686.201859][T16349] ? clear_bhb_loop+0x60/0xb0 [ 686.206529][T16349] ? clear_bhb_loop+0x60/0xb0 [ 686.211203][T16349] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 686.217089][T16349] RIP: 0033:0x7f8c97f9de59 [ 686.221501][T16349] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 686.241107][T16349] RSP: 002b:00007f8c98dfd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 686.249521][T16349] RAX: ffffffffffffffda RBX: 00007f8c98225fa0 RCX: 00007f8c97f9de59 [ 686.257481][T16349] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 686.265443][T16349] RBP: 00007f8c98dfd090 R08: 0000000000000000 R09: 0000000000000000 [ 686.273406][T16349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 686.281370][T16349] R13: 00007f8c98226038 R14: 00007f8c98225fa0 R15: 00007fff63233258 [ 686.289347][T16349] [ 686.584967][T16358] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3604'. [ 686.662642][T16359] bridge0: port 3(gretap0) entered blocking state [ 686.669169][T16359] bridge0: port 3(gretap0) entered disabled state [ 686.696336][T16359] device gretap0 entered promiscuous mode [ 686.723784][T16359] bridge0: port 3(gretap0) entered blocking state [ 686.730343][T16359] bridge0: port 3(gretap0) entered forwarding state [ 687.218064][T16391] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 687.290015][T16393] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3615'. [ 687.309300][T16393] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 687.334904][T16393] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 687.586177][T16406] netlink: 'syz.0.3621': attribute type 7 has an invalid length. [ 687.611043][T16406] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3621'. [ 687.727601][T16408] netlink: 'syz.4.3622': attribute type 1 has an invalid length. [ 688.269468][T16419] bridge0: port 3(gretap0) entered blocking state [ 688.283587][T16419] bridge0: port 3(gretap0) entered disabled state [ 688.315645][T16419] device gretap0 entered promiscuous mode [ 688.326795][T16419] bridge0: port 3(gretap0) entered blocking state [ 688.333389][T16419] bridge0: port 3(gretap0) entered forwarding state [ 688.758203][T16448] netlink: 'syz.3.3634': attribute type 3 has an invalid length. [ 688.766217][T16448] __nla_validate_parse: 2 callbacks suppressed [ 688.766230][T16448] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3634'. [ 689.028503][T16459] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 689.519373][T16477] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.3643'. [ 690.580582][T16511] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 691.035648][T16525] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 691.362852][T16537] device syzkaller0 entered promiscuous mode [ 691.697530][T16546] netlink: 'syz.1.3669': attribute type 2 has an invalid length. [ 691.736001][T16546] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3669'. [ 691.800971][T16544] netlink: 'syz.4.3668': attribute type 3 has an invalid length. [ 691.839853][T16544] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3668'. [ 692.065358][T16551] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 692.359839][T16557] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 693.073208][T16577] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3678'. [ 693.101149][T16577] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 693.158894][T16577] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 693.547229][T16594] FAULT_INJECTION: forcing a failure. [ 693.547229][T16594] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 693.591067][T16594] CPU: 1 PID: 16594 Comm: syz.1.3685 Not tainted syzkaller #0 [ 693.598577][T16594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 693.608651][T16594] Call Trace: [ 693.611942][T16594] [ 693.614887][T16594] dump_stack_lvl+0x188/0x24e [ 693.619597][T16594] ? show_regs_print_info+0x12/0x12 [ 693.624815][T16594] ? load_image+0x410/0x410 [ 693.629339][T16594] ? __lock_acquire+0x7c40/0x7c40 [ 693.634392][T16594] ? perf_trace_preemptirq_template+0x268/0x320 [ 693.640659][T16594] should_fail_ex+0x390/0x4c0 [ 693.645360][T16594] _copy_from_user+0x2c/0x170 [ 693.650057][T16594] get_user_ifreq+0x67/0x170 [ 693.654669][T16594] sock_ioctl+0x61f/0x700 [ 693.659018][T16594] ? sock_poll+0x420/0x420 [ 693.663465][T16594] ? sock_poll+0x420/0x420 [ 693.667897][T16594] __se_sys_ioctl+0xfa/0x170 [ 693.672507][T16594] do_syscall_64+0x4c/0xa0 [ 693.676932][T16594] ? clear_bhb_loop+0x60/0xb0 [ 693.681620][T16594] ? clear_bhb_loop+0x60/0xb0 [ 693.686320][T16594] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 693.692231][T16594] RIP: 0033:0x7f8c97f9de59 [ 693.696659][T16594] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 693.716629][T16594] RSP: 002b:00007f8c98dfd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 693.725064][T16594] RAX: ffffffffffffffda RBX: 00007f8c98225fa0 RCX: 00007f8c97f9de59 [ 693.733058][T16594] RDX: 0000200000000080 RSI: 00000000000089f0 RDI: 0000000000000006 [ 693.741047][T16594] RBP: 00007f8c98dfd090 R08: 0000000000000000 R09: 0000000000000000 [ 693.749028][T16594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 693.757017][T16594] R13: 00007f8c98226038 R14: 00007f8c98225fa0 R15: 00007fff63233258 [ 693.765023][T16594] [ 694.054966][T16602] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 694.192137][T16607] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 694.588148][T16621] netlink: 'syz.2.3694': attribute type 2 has an invalid length. [ 694.616126][T16621] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3694'. [ 695.875390][T16628] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 696.644366][T16653] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 696.703158][T16654] netlink: 'syz.1.3704': attribute type 2 has an invalid length. [ 697.911061][ T4280] Bluetooth: hci3: command 0x0406 tx timeout [ 699.302918][T16673] netlink: 'syz.1.3708': attribute type 2 has an invalid length. [ 699.325764][T16673] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3708'. [ 699.742706][T16691] netlink: 'syz.4.3716': attribute type 1 has an invalid length. [ 699.812120][T16691] netlink: 112865 bytes leftover after parsing attributes in process `syz.4.3716'. [ 700.383155][T16710] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 701.122803][T16735] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3732'. [ 701.144598][T16735] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 701.195064][T16735] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 701.490409][T16746] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 702.024016][T16769] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3743'. [ 702.132350][T16776] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3745'. [ 702.295163][T16776] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 702.380453][T16776] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 702.513962][T16776] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 702.573304][T16776] bond0 (unregistering): Released all slaves [ 702.799336][T16796] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 703.008615][T16798] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 703.172011][T16807] netlink: 'syz.2.3753': attribute type 1 has an invalid length. [ 703.179981][T16807] netlink: 'syz.2.3753': attribute type 3 has an invalid length. [ 703.245430][T16807] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3753'. [ 703.844102][T16800] delete_channel: no stack [ 706.023098][T16808] netlink: 'syz.2.3753': attribute type 12 has an invalid length. [ 706.051374][T16808] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3753'. [ 706.060689][T16814] netlink: 'syz.1.3757': attribute type 10 has an invalid length. [ 706.080896][T16814] netlink: 'syz.1.3757': attribute type 19 has an invalid length. [ 706.089030][T16814] netlink: 14536 bytes leftover after parsing attributes in process `syz.1.3757'. [ 706.508423][T16833] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 706.589368][T16836] netlink: 'syz.4.3765': attribute type 29 has an invalid length. [ 706.612946][T16836] netlink: 'syz.4.3765': attribute type 29 has an invalid length. [ 706.663129][T16839] netlink: 'syz.4.3765': attribute type 29 has an invalid length. [ 706.767754][T16842] bridge0: port 1(bridge_slave_0) entered disabled state [ 706.943620][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 706.972783][ T4334] bridge0: port 1(bridge_slave_0) entered blocking state [ 706.980026][ T4334] bridge0: port 1(bridge_slave_0) entered forwarding state [ 707.288161][T16859] netlink: 'syz.1.3774': attribute type 2 has an invalid length. [ 707.337343][T16859] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3774'. [ 707.382121][T16863] netlink: 'syz.3.3784': attribute type 29 has an invalid length. [ 707.583600][T16877] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3775'. [ 708.001760][T16877] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 708.109455][T16877] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 708.136585][T16877] bond0 (unregistering): Released all slaves [ 708.423295][T16889] device syzkaller0 entered promiscuous mode [ 710.737593][T16910] validate_nla: 2 callbacks suppressed [ 710.737608][T16910] netlink: 'syz.1.3787': attribute type 2 has an invalid length. [ 710.772654][T16910] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3787'. [ 711.122775][T16926] netlink: 'syz.1.3793': attribute type 29 has an invalid length. [ 711.147749][T16926] netlink: 'syz.1.3793': attribute type 29 has an invalid length. [ 711.158231][T16935] netlink: 'syz.1.3793': attribute type 29 has an invalid length. [ 711.455382][T16945] netlink: 'syz.4.3798': attribute type 29 has an invalid length. [ 711.486429][T16945] netlink: 'syz.4.3798': attribute type 29 has an invalid length. [ 711.545904][T16942] netlink: 'syz.4.3798': attribute type 29 has an invalid length. [ 712.314026][T16958] netlink: 'syz.1.3804': attribute type 2 has an invalid length. [ 712.363378][T16958] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3804'. [ 712.716423][T16978] netlink: 'syz.2.3809': attribute type 10 has an invalid length. [ 712.999032][T16978] team0: Device wg1 is of different type [ 713.271097][ T4288] Bluetooth: hci4: command 0x0406 tx timeout [ 713.483641][T17003] netlink: 'syz.3.3819': attribute type 2 has an invalid length. [ 713.533508][T17003] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3819'. [ 714.291439][T17027] team0: Port device geneve1 added [ 714.425443][T17032] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.3830'. [ 718.834234][T17101] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.3855'. [ 718.939485][T17101] netlink: 6955 bytes leftover after parsing attributes in process `syz.3.3855'. [ 719.067261][T17103] sctp: [Deprecated]: syz.0.3854 (pid 17103) Use of struct sctp_assoc_value in delayed_ack socket option. [ 719.067261][T17103] Use struct sctp_sack_info instead [ 719.530694][T17109] validate_nla: 3 callbacks suppressed [ 719.530711][T17109] netlink: 'syz.2.3858': attribute type 2 has an invalid length. [ 719.571206][T17109] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3858'. [ 719.844143][T17116] FAULT_INJECTION: forcing a failure. [ 719.844143][T17116] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 719.890432][T17116] CPU: 0 PID: 17116 Comm: syz.4.3860 Not tainted syzkaller #0 [ 719.897942][T17116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 719.908014][T17116] Call Trace: [ 719.911310][T17116] [ 719.914257][T17116] dump_stack_lvl+0x188/0x24e [ 719.918976][T17116] ? show_regs_print_info+0x12/0x12 [ 719.924205][T17116] ? load_image+0x410/0x410 [ 719.928741][T17116] ? __lock_acquire+0x7c40/0x7c40 [ 719.933795][T17116] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 719.939548][T17116] should_fail_ex+0x390/0x4c0 [ 719.944263][T17116] _copy_from_user+0x2c/0x170 [ 719.948973][T17116] ___sys_sendmsg+0x1c3/0x360 [ 719.953696][T17116] ? __sys_sendmsg+0x2a0/0x2a0 [ 719.957045][T17112] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 719.958505][T17116] ? __lock_acquire+0x7c40/0x7c40 [ 719.958585][T17116] __se_sys_sendmsg+0x1c3/0x2b0 [ 719.975684][T17116] ? __x64_sys_sendmsg+0x80/0x80 [ 719.980686][T17116] ? lockdep_hardirqs_on+0x94/0x140 [ 719.985917][T17116] do_syscall_64+0x4c/0xa0 [ 719.990356][T17116] ? clear_bhb_loop+0x60/0xb0 [ 719.995049][T17116] ? clear_bhb_loop+0x60/0xb0 [ 719.999733][T17116] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 720.005628][T17116] RIP: 0033:0x7f16c139de59 [ 720.010043][T17116] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 720.029642][T17116] RSP: 002b:00007f16c22d9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 720.038058][T17116] RAX: ffffffffffffffda RBX: 00007f16c1625fa0 RCX: 00007f16c139de59 [ 720.046048][T17116] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 720.054017][T17116] RBP: 00007f16c22d9090 R08: 0000000000000000 R09: 0000000000000000 [ 720.062069][T17116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 720.070034][T17116] R13: 00007f16c1626038 R14: 00007f16c1625fa0 R15: 00007ffe85fce9c8 [ 720.078024][T17116] [ 720.222442][T17130] FAULT_INJECTION: forcing a failure. [ 720.222442][T17130] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 720.237634][T17131] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 720.244888][T17131] IPv6: NLM_F_CREATE should be set when creating new route [ 720.253023][T17130] CPU: 1 PID: 17130 Comm: syz.1.3865 Not tainted syzkaller #0 [ 720.260513][T17130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 720.270573][T17130] Call Trace: [ 720.273861][T17130] [ 720.276805][T17130] dump_stack_lvl+0x188/0x24e [ 720.281509][T17130] ? show_regs_print_info+0x12/0x12 [ 720.286728][T17130] ? load_image+0x410/0x410 [ 720.291253][T17130] ? __lock_acquire+0x7c40/0x7c40 [ 720.296304][T17130] should_fail_ex+0x390/0x4c0 [ 720.301005][T17130] _copy_from_user+0x2c/0x170 [ 720.305691][T17130] ___sys_sendmsg+0x1c3/0x360 [ 720.310390][T17130] ? __sys_sendmsg+0x2a0/0x2a0 [ 720.315191][T17130] ? __lock_acquire+0x7c40/0x7c40 [ 720.320247][T17130] __se_sys_sendmsg+0x1c3/0x2b0 [ 720.325287][T17130] ? __x64_sys_sendmsg+0x80/0x80 [ 720.330255][T17130] ? lockdep_hardirqs_on+0x94/0x140 [ 720.335469][T17130] do_syscall_64+0x4c/0xa0 [ 720.339906][T17130] ? clear_bhb_loop+0x60/0xb0 [ 720.344592][T17130] ? clear_bhb_loop+0x60/0xb0 [ 720.349268][T17130] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 720.355159][T17130] RIP: 0033:0x7f8c97f9de59 [ 720.359568][T17130] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 720.379172][T17130] RSP: 002b:00007f8c98dfd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 720.387584][T17130] RAX: ffffffffffffffda RBX: 00007f8c98225fa0 RCX: 00007f8c97f9de59 [ 720.395546][T17130] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 720.403509][T17130] RBP: 00007f8c98dfd090 R08: 0000000000000000 R09: 0000000000000000 [ 720.411468][T17130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 720.419437][T17130] R13: 00007f8c98226038 R14: 00007f8c98225fa0 R15: 00007fff63233258 [ 720.427494][T17130] [ 720.609432][T17138] netlink: 'syz.3.3868': attribute type 39 has an invalid length. [ 720.820876][T17141] netlink: 'syz.3.3868': attribute type 39 has an invalid length. [ 720.833809][T17148] netlink: 65185 bytes leftover after parsing attributes in process `syz.0.3872'. [ 720.846512][T17153] sctp: [Deprecated]: syz.4.3874 (pid 17153) Use of struct sctp_assoc_value in delayed_ack socket option. [ 720.846512][T17153] Use struct sctp_sack_info instead [ 720.861561][T17149] netlink: 'syz.2.3873': attribute type 2 has an invalid length. [ 720.883906][T17149] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3873'. [ 721.121109][T17162] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 721.374003][T17160] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 721.391712][T17170] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 721.415908][T17172] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 721.769682][T17188] FAULT_INJECTION: forcing a failure. [ 721.769682][T17188] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 721.789966][T17188] CPU: 1 PID: 17188 Comm: syz.1.3887 Not tainted syzkaller #0 [ 721.797460][T17188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 721.807524][T17188] Call Trace: [ 721.810806][T17188] [ 721.813742][T17188] dump_stack_lvl+0x188/0x24e [ 721.818443][T17188] ? show_regs_print_info+0x12/0x12 [ 721.823661][T17188] ? load_image+0x410/0x410 [ 721.828184][T17188] ? __lock_acquire+0x7c40/0x7c40 [ 721.833315][T17188] should_fail_ex+0x390/0x4c0 [ 721.838021][T17188] _copy_from_user+0x2c/0x170 [ 721.842716][T17188] iovec_from_user+0x143/0x360 [ 721.847504][T17188] __import_iovec+0x6c/0x510 [ 721.852122][T17188] import_iovec+0x6f/0xa0 [ 721.856476][T17188] ___sys_sendmsg+0x252/0x360 [ 721.861175][T17188] ? __sys_sendmsg+0x2a0/0x2a0 [ 721.865975][T17188] ? __lock_acquire+0x7c40/0x7c40 [ 721.871035][T17188] __se_sys_sendmsg+0x1c3/0x2b0 [ 721.875913][T17188] ? __x64_sys_sendmsg+0x80/0x80 [ 721.880879][T17188] ? lockdep_hardirqs_on+0x94/0x140 [ 721.886091][T17188] do_syscall_64+0x4c/0xa0 [ 721.890525][T17188] ? clear_bhb_loop+0x60/0xb0 [ 721.895218][T17188] ? clear_bhb_loop+0x60/0xb0 [ 721.899918][T17188] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 721.905828][T17188] RIP: 0033:0x7f8c97f9de59 [ 721.910250][T17188] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 721.929862][T17188] RSP: 002b:00007f8c98dfd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 721.938272][T17188] RAX: ffffffffffffffda RBX: 00007f8c98225fa0 RCX: 00007f8c97f9de59 [ 721.946236][T17188] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 721.954196][T17188] RBP: 00007f8c98dfd090 R08: 0000000000000000 R09: 0000000000000000 [ 721.962153][T17188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 721.970110][T17188] R13: 00007f8c98226038 R14: 00007f8c98225fa0 R15: 00007fff63233258 [ 721.978085][T17188] [ 722.477720][T17201] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 722.485116][T17201] IPv6: NLM_F_CREATE should be set when creating new route [ 722.797236][T17205] sctp: [Deprecated]: syz.1.3892 (pid 17205) Use of struct sctp_assoc_value in delayed_ack socket option. [ 722.797236][T17205] Use struct sctp_sack_info instead [ 724.867550][T17197] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 724.878759][T17214] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 724.890254][T17216] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 725.071102][T17219] netlink: 65185 bytes leftover after parsing attributes in process `syz.4.3897'. [ 725.163175][T17224] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 725.180928][T17222] tipc: Started in network mode [ 725.185815][T17222] tipc: Node identity 9215a268, cluster identity 4711 [ 725.240903][T17222] tipc: Node number set to 2450891368 [ 725.254632][T17226] netlink: 65185 bytes leftover after parsing attributes in process `syz.0.3901'. [ 725.393299][T17232] netlink: 65185 bytes leftover after parsing attributes in process `syz.4.3904'. [ 725.543958][T17237] netlink: 'syz.0.3906': attribute type 39 has an invalid length. [ 725.827721][T17241] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 725.852243][T17248] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 726.021343][T17256] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 726.084727][T17258] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 726.156529][T17258] device syzkaller0 entered promiscuous mode [ 726.332522][T17264] netlink: 65185 bytes leftover after parsing attributes in process `syz.3.3914'. [ 726.576856][T17281] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 726.592440][T17275] netlink: 'syz.3.3920': attribute type 2 has an invalid length. [ 726.601431][T17275] netlink: 'syz.3.3920': attribute type 8 has an invalid length. [ 726.688174][T17275] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3920'. [ 726.830310][T17286] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 726.933308][T17291] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 726.984310][T17292] netlink: 'syz.0.3924': attribute type 2 has an invalid length. [ 727.012177][T17292] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3924'. [ 727.194353][T17296] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.3925'. [ 727.279220][T17296] netlink: 6955 bytes leftover after parsing attributes in process `syz.4.3925'. [ 727.290097][T17297] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.3926'. [ 728.004884][T17304] netlink: 'syz.3.3928': attribute type 39 has an invalid length. [ 728.573249][T17330] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 728.630852][ T4280] Bluetooth: hci0: command 0x0406 tx timeout [ 728.642007][T17332] device syzkaller0 entered promiscuous mode [ 729.313800][T17334] netlink: 'syz.3.3939': attribute type 1 has an invalid length. [ 729.338359][T17334] netlink: 62739 bytes leftover after parsing attributes in process `syz.3.3939'. [ 729.390706][T17341] netlink: 'syz.1.3941': attribute type 2 has an invalid length. [ 729.670257][T17348] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 730.359297][T17358] __nla_validate_parse: 2 callbacks suppressed [ 730.359315][T17358] netlink: 6955 bytes leftover after parsing attributes in process `syz.1.3944'. [ 731.261091][T17372] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 731.859317][T17384] netlink: 'syz.0.3954': attribute type 11 has an invalid length. [ 731.890473][T17384] netlink: 176 bytes leftover after parsing attributes in process `syz.0.3954'. [ 732.611757][T17391] FAULT_INJECTION: forcing a failure. [ 732.611757][T17391] name failslab, interval 1, probability 0, space 0, times 0 [ 732.652123][T17391] CPU: 1 PID: 17391 Comm: syz.2.3957 Not tainted syzkaller #0 [ 732.659628][T17391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 732.669684][T17391] Call Trace: [ 732.672955][T17391] [ 732.675882][T17391] dump_stack_lvl+0x188/0x24e [ 732.680566][T17391] ? show_regs_print_info+0x12/0x12 [ 732.685757][T17391] ? load_image+0x410/0x410 [ 732.690252][T17391] ? __might_sleep+0xd0/0xd0 [ 732.694835][T17391] ? __lock_acquire+0x7c40/0x7c40 [ 732.699854][T17391] should_fail_ex+0x390/0x4c0 [ 732.704527][T17391] should_failslab+0x5/0x20 [ 732.709023][T17391] slab_pre_alloc_hook+0x59/0x300 [ 732.714040][T17391] ? __lock_acquire+0x138a/0x7c40 [ 732.719065][T17391] ? tomoyo_realpath_from_path+0xe2/0x5c0 [ 732.724779][T17391] __kmem_cache_alloc_node+0x4f/0x270 [ 732.730143][T17391] ? tomoyo_realpath_from_path+0xe2/0x5c0 [ 732.735852][T17391] __kmalloc+0xa3/0x240 [ 732.740006][T17391] tomoyo_realpath_from_path+0xe2/0x5c0 [ 732.745545][T17391] ? tomoyo_domain+0xd2/0x120 [ 732.750222][T17391] ? tomoyo_path_number_perm+0x205/0x650 [ 732.755843][T17391] tomoyo_path_number_perm+0x22f/0x650 [ 732.761292][T17391] ? trace_event_raw_event_lock_acquire+0x290/0x290 [ 732.767874][T17391] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 732.773327][T17391] ? ksys_write+0x1ce/0x260 [ 732.777827][T17391] ? common_file_perm+0x171/0x1c0 [ 732.782873][T17391] ? __fget_files+0x28/0x460 [ 732.787464][T17391] security_file_ioctl+0x6c/0xa0 [ 732.792393][T17391] __se_sys_ioctl+0x48/0x170 [ 732.796983][T17391] do_syscall_64+0x4c/0xa0 [ 732.801400][T17391] ? clear_bhb_loop+0x60/0xb0 [ 732.806070][T17391] ? clear_bhb_loop+0x60/0xb0 [ 732.810741][T17391] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 732.816633][T17391] RIP: 0033:0x7f759a39de59 [ 732.821770][T17391] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 732.841822][T17391] RSP: 002b:00007f759b2b0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 732.850239][T17391] RAX: ffffffffffffffda RBX: 00007f759a625fa0 RCX: 00007f759a39de59 [ 732.858227][T17391] RDX: 0000200000000180 RSI: 000000004010744d RDI: 0000000000000004 [ 732.866190][T17391] RBP: 00007f759b2b0090 R08: 0000000000000000 R09: 0000000000000000 [ 732.874414][T17391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 732.882378][T17391] R13: 00007f759a626038 R14: 00007f759a625fa0 R15: 00007ffca84459c8 [ 732.890360][T17391] [ 733.256877][T17391] ERROR: Out of memory at tomoyo_realpath_from_path. [ 733.586698][T17409] FAULT_INJECTION: forcing a failure. [ 733.586698][T17409] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 733.651383][T17409] CPU: 1 PID: 17409 Comm: syz.4.3963 Not tainted syzkaller #0 [ 733.658892][T17409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 733.668958][T17409] Call Trace: [ 733.672246][T17409] [ 733.675191][T17409] dump_stack_lvl+0x188/0x24e [ 733.679891][T17409] ? show_regs_print_info+0x12/0x12 [ 733.685109][T17409] ? load_image+0x410/0x410 [ 733.689631][T17409] ? __might_fault+0xa6/0x120 [ 733.694340][T17409] should_fail_ex+0x390/0x4c0 [ 733.699050][T17409] copyin+0x1b/0x120 [ 733.702961][T17409] _copy_from_iter+0x447/0x1130 [ 733.707829][T17409] ? copyout_mc+0x110/0x110 [ 733.712425][T17409] ? __virt_addr_valid+0x188/0x540 [ 733.717724][T17409] ? __virt_addr_valid+0x188/0x540 [ 733.722853][T17409] ? __virt_addr_valid+0x467/0x540 [ 733.727982][T17409] ? __phys_addr_symbol+0x2b/0x70 [ 733.733021][T17409] ? __check_object_size+0x4f6/0xa70 [ 733.738329][T17409] netlink_sendmsg+0x755/0xbd0 [ 733.743115][T17409] ? netlink_getsockopt+0x550/0x550 [ 733.748327][T17409] ? apparmor_socket_sendmsg+0x8a/0x330 [ 733.753887][T17409] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 733.759170][T17409] ? security_socket_sendmsg+0x7c/0xa0 [ 733.764624][T17409] ? netlink_getsockopt+0x550/0x550 [ 733.769822][T17409] ____sys_sendmsg+0x5ed/0x9a0 [ 733.774592][T17409] ? __sys_sendmsg_sock+0x30/0x30 [ 733.779615][T17409] ? __import_iovec+0x306/0x510 [ 733.784483][T17409] ? import_iovec+0x6f/0xa0 [ 733.788990][T17409] ___sys_sendmsg+0x2a2/0x360 [ 733.793671][T17409] ? __sys_sendmsg+0x2a0/0x2a0 [ 733.798455][T17409] ? __lock_acquire+0x7c40/0x7c40 [ 733.803490][T17409] __se_sys_sendmsg+0x1c3/0x2b0 [ 733.808335][T17409] ? __x64_sys_sendmsg+0x80/0x80 [ 733.813277][T17409] ? lockdep_hardirqs_on+0x94/0x140 [ 733.818469][T17409] do_syscall_64+0x4c/0xa0 [ 733.822876][T17409] ? clear_bhb_loop+0x60/0xb0 [ 733.827546][T17409] ? clear_bhb_loop+0x60/0xb0 [ 733.832217][T17409] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 733.838100][T17409] RIP: 0033:0x7f16c139de59 [ 733.842508][T17409] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 733.862101][T17409] RSP: 002b:00007f16c22d9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 733.870517][T17409] RAX: ffffffffffffffda RBX: 00007f16c1625fa0 RCX: 00007f16c139de59 [ 733.878478][T17409] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 733.886436][T17409] RBP: 00007f16c22d9090 R08: 0000000000000000 R09: 0000000000000000 [ 733.894396][T17409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 733.902355][T17409] R13: 00007f16c1626038 R14: 00007f16c1625fa0 R15: 00007ffe85fce9c8 [ 733.910325][T17409] [ 734.199161][T17421] device syzkaller0 entered promiscuous mode [ 734.222522][T17425] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 734.239697][T17429] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 734.254021][T17427] netlink: 'syz.1.3967': attribute type 2 has an invalid length. [ 734.281057][T17427] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3967'. [ 734.481053][T17431] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.3969'. [ 734.532591][T17433] netlink: 'syz.2.3969': attribute type 39 has an invalid length. [ 734.634052][T17436] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 737.279093][T17465] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 737.562733][T17475] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 737.681800][T17479] sctp: [Deprecated]: syz.0.3985 (pid 17479) Use of struct sctp_assoc_value in delayed_ack socket option. [ 737.681800][T17479] Use struct sctp_sack_info instead [ 738.207691][T17492] FAULT_INJECTION: forcing a failure. [ 738.207691][T17492] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 738.260839][T17492] CPU: 1 PID: 17492 Comm: syz.2.3991 Not tainted syzkaller #0 [ 738.268340][T17492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 738.278402][T17492] Call Trace: [ 738.281690][T17492] [ 738.284640][T17492] dump_stack_lvl+0x188/0x24e [ 738.289341][T17492] ? show_regs_print_info+0x12/0x12 [ 738.294559][T17492] ? load_image+0x410/0x410 [ 738.299077][T17492] ? __might_fault+0xa6/0x120 [ 738.303782][T17492] should_fail_ex+0x390/0x4c0 [ 738.308485][T17492] copyin+0x1b/0x120 [ 738.312396][T17492] _copy_from_iter+0x559/0x1130 [ 738.317267][T17492] ? copyout_mc+0x110/0x110 [ 738.321788][T17492] ? __virt_addr_valid+0x188/0x540 [ 738.326917][T17492] ? __virt_addr_valid+0x188/0x540 [ 738.332045][T17492] ? __virt_addr_valid+0x467/0x540 [ 738.337175][T17492] ? __phys_addr_symbol+0x2b/0x70 [ 738.342223][T17492] ? __check_object_size+0x4f6/0xa70 [ 738.347527][T17492] netlink_sendmsg+0x755/0xbd0 [ 738.352313][T17492] ? netlink_getsockopt+0x550/0x550 [ 738.357528][T17492] ? apparmor_socket_sendmsg+0x8a/0x330 [ 738.363094][T17492] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 738.368395][T17492] ? security_socket_sendmsg+0x7c/0xa0 [ 738.373869][T17492] ? netlink_getsockopt+0x550/0x550 [ 738.379090][T17492] ____sys_sendmsg+0x5ed/0x9a0 [ 738.383882][T17492] ? __sys_sendmsg_sock+0x30/0x30 [ 738.388920][T17492] ? __import_iovec+0x306/0x510 [ 738.393791][T17492] ? import_iovec+0x6f/0xa0 [ 738.398316][T17492] ___sys_sendmsg+0x2a2/0x360 [ 738.403014][T17492] ? __sys_sendmsg+0x2a0/0x2a0 [ 738.407803][T17492] ? __lock_acquire+0x7c40/0x7c40 [ 738.412841][T17492] __se_sys_sendmsg+0x1c3/0x2b0 [ 738.417688][T17492] ? __x64_sys_sendmsg+0x80/0x80 [ 738.422633][T17492] ? lockdep_hardirqs_on+0x94/0x140 [ 738.427823][T17492] do_syscall_64+0x4c/0xa0 [ 738.432230][T17492] ? clear_bhb_loop+0x60/0xb0 [ 738.436897][T17492] ? clear_bhb_loop+0x60/0xb0 [ 738.441564][T17492] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 738.447453][T17492] RIP: 0033:0x7f759a39de59 [ 738.451861][T17492] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 738.471457][T17492] RSP: 002b:00007f759b2b0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 738.479864][T17492] RAX: ffffffffffffffda RBX: 00007f759a625fa0 RCX: 00007f759a39de59 [ 738.487825][T17492] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 738.495783][T17492] RBP: 00007f759b2b0090 R08: 0000000000000000 R09: 0000000000000000 [ 738.503744][T17492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 738.511705][T17492] R13: 00007f759a626038 R14: 00007f759a625fa0 R15: 00007ffca84459c8 [ 738.519678][T17492] [ 739.160433][T17494] device syzkaller0 entered promiscuous mode [ 739.496863][T17519] sctp: [Deprecated]: syz.4.3998 (pid 17519) Use of struct sctp_assoc_value in delayed_ack socket option. [ 739.496863][T17519] Use struct sctp_sack_info instead [ 742.345429][T17521] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 742.862918][T17557] sctp: [Deprecated]: syz.1.4010 (pid 17557) Use of struct sctp_assoc_value in delayed_ack socket option. [ 742.862918][T17557] Use struct sctp_sack_info instead [ 743.796475][T17576] netlink: 'syz.4.4014': attribute type 10 has an invalid length. [ 743.973563][T17576] device hsr0 entered promiscuous mode [ 743.991155][ T4288] Bluetooth: hci1: command 0x0406 tx timeout [ 744.022597][T17576] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 744.035012][T17576] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 744.045934][T17576] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 744.058899][T17576] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 744.066478][T17573] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 744.793938][T17582] device syzkaller0 entered promiscuous mode [ 744.816520][T17588] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 744.834456][T17581] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 745.082263][T17602] sctp: [Deprecated]: syz.4.4022 (pid 17602) Use of struct sctp_assoc_value in delayed_ack socket option. [ 745.082263][T17602] Use struct sctp_sack_info instead [ 746.654933][T17593] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 747.036034][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.042404][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.237033][T17630] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 747.451893][T17636] netlink: 65185 bytes leftover after parsing attributes in process `syz.0.4035'. [ 750.163410][T17647] netlink: 'syz.2.4037': attribute type 21 has an invalid length. [ 750.191817][T17656] netlink: 'syz.4.4040': attribute type 2 has an invalid length. [ 750.208971][T17656] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4040'. [ 750.680840][T17666] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 750.722666][T17660] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 751.033632][T17675] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4047'. [ 751.321249][T17687] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.4051'. [ 751.433746][T17675] team0: Port device team_slave_0 removed [ 751.597258][T17677] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4047'. [ 751.634397][T17688] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.4050'. [ 751.681045][T17690] netlink: 'syz.3.4050': attribute type 10 has an invalid length. [ 751.725318][T17690] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4050'. [ 752.877919][T17720] netlink: 65185 bytes leftover after parsing attributes in process `syz.3.4061'. [ 755.008417][T17768] netlink: 'syz.0.4074': attribute type 3 has an invalid length. [ 755.016307][T17768] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.4074'. [ 755.588464][T17780] netlink: 'syz.1.4078': attribute type 10 has an invalid length. [ 755.741453][T17780] device hsr0 entered promiscuous mode [ 755.919608][T17786] netlink: 172 bytes leftover after parsing attributes in process `syz.2.4084'. [ 756.065694][T17790] netlink: 65185 bytes leftover after parsing attributes in process `syz.1.4085'. [ 756.255798][T17792] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.4087'. [ 759.217407][T17830] netlink: 'syz.1.4099': attribute type 1 has an invalid length. [ 759.235603][T17829] delete_channel: no stack [ 759.245982][T17830] netlink: 112865 bytes leftover after parsing attributes in process `syz.1.4099'. [ 759.892032][T17847] sctp: [Deprecated]: syz.2.4104 (pid 17847) Use of struct sctp_assoc_value in delayed_ack socket option. [ 759.892032][T17847] Use struct sctp_sack_info instead [ 759.892836][T17849] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 759.932619][T17853] netlink: 180 bytes leftover after parsing attributes in process `syz.1.4106'. [ 759.964005][T17853] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4106'. [ 760.281764][T17860] netlink: 65185 bytes leftover after parsing attributes in process `syz.2.4109'. [ 760.565018][T17858] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 761.915231][T17886] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4119'. [ 761.957652][T17886] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 762.859752][T17901] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.4122'. [ 762.904325][T17900] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 763.108034][T17901] netlink: 6955 bytes leftover after parsing attributes in process `syz.4.4122'. [ 765.012987][T17941] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.4137'. [ 765.188051][T17941] netlink: 6955 bytes leftover after parsing attributes in process `syz.4.4137'. [ 765.691427][T17947] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 765.698963][T17947] IPv6: NLM_F_CREATE should be set when creating new route [ 765.706272][T17947] IPv6: NLM_F_CREATE should be set when creating new route [ 765.713611][T17947] IPv6: NLM_F_CREATE should be set when creating new route [ 765.792253][T17951] netlink: 180 bytes leftover after parsing attributes in process `syz.0.4139'. [ 765.839297][T17951] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4139'. [ 767.111907][T17968] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4142'. [ 767.281583][T17970] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4142'. [ 767.301908][T17970] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 767.358245][T17971] netlink: 'syz.3.4143': attribute type 21 has an invalid length. [ 768.742437][T18000] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.4152'. [ 768.824785][T18000] netlink: 6955 bytes leftover after parsing attributes in process `syz.2.4152'. [ 769.115154][T18013] netlink: 'syz.1.4157': attribute type 13 has an invalid length. [ 769.140877][T18013] netlink: 172 bytes leftover after parsing attributes in process `syz.1.4157'. [ 769.180529][T18013] erspan0: refused to change device tx_queue_len [ 769.722487][T18035] batman_adv: batadv0: adding TT local entry ba:a7:8f:6a:ff:ff to non-existent VLAN 815 [ 770.172222][T18030] netlink: 65185 bytes leftover after parsing attributes in process `syz.2.4162'. [ 770.294359][T18039] netlink: 'syz.1.4166': attribute type 3 has an invalid length. [ 770.321227][T18045] netlink: 65185 bytes leftover after parsing attributes in process `syz.4.4167'. [ 770.342799][T18039] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.4166'. [ 770.796327][T18054] netlink: 'syz.4.4170': attribute type 46 has an invalid length. [ 771.142865][T18062] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.4172'. [ 771.298564][T18062] netlink: 6955 bytes leftover after parsing attributes in process `syz.4.4172'. [ 771.440474][T18063] netlink: 'syz.1.4173': attribute type 2 has an invalid length. [ 771.482854][T18063] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4173'. [ 772.145447][T18071] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 772.192931][T18067] netlink: 'syz.0.4176': attribute type 10 has an invalid length. [ 772.211811][T18067] netlink: 55 bytes leftover after parsing attributes in process `syz.0.4176'. [ 773.534580][T18083] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 773.580904][T18085] netlink: 164 bytes leftover after parsing attributes in process `syz.2.4177'. [ 773.612126][T18091] netlink: 'syz.4.4181': attribute type 10 has an invalid length. [ 773.771440][T18091] bridge0: port 2(bridge_slave_1) entered disabled state [ 773.795821][T18091] device bridge_slave_1 left promiscuous mode [ 773.802250][T18091] bridge0: port 2(bridge_slave_1) entered disabled state [ 773.813371][T18091] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 773.864080][T18099] netlink: 188 bytes leftover after parsing attributes in process `syz.0.4184'. [ 774.160664][T18108] netlink: 'syz.1.4186': attribute type 2 has an invalid length. [ 774.211140][T18108] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4186'. [ 775.514782][T18134] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 776.022219][T18141] netlink: 'syz.4.4199': attribute type 2 has an invalid length. [ 776.054596][T18141] __nla_validate_parse: 2 callbacks suppressed [ 776.054643][T18141] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4199'. [ 776.730096][T18158] netlink: 'syz.1.4204': attribute type 3 has an invalid length. [ 776.830852][T18158] netlink: 173820 bytes leftover after parsing attributes in process `syz.1.4204'. [ 777.002448][T18169] netlink: 'syz.4.4208': attribute type 10 has an invalid length. [ 777.949671][T18179] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.4207'. [ 777.949771][T18178] netlink: 'syz.1.4211': attribute type 12 has an invalid length. [ 777.988456][T18178] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4211'. [ 778.021706][T18180] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 778.110903][T18179] netlink: 6955 bytes leftover after parsing attributes in process `syz.2.4207'. [ 778.429041][T18185] netlink: 'syz.4.4212': attribute type 2 has an invalid length. [ 778.463745][T18185] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4212'. [ 779.989570][T18225] netlink: 65185 bytes leftover after parsing attributes in process `syz.4.4222'. [ 780.778424][T18241] netlink: 'syz.1.4228': attribute type 2 has an invalid length. [ 780.824614][T18241] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4228'. [ 780.909779][T18245] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 781.969206][T18273] netlink: 65185 bytes leftover after parsing attributes in process `syz.4.4238'. [ 781.997270][T18275] netlink: 61967 bytes leftover after parsing attributes in process `syz.1.4239'. [ 782.363931][T18287] netlink: 'syz.2.4242': attribute type 2 has an invalid length. [ 782.465733][T18287] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4242'. [ 783.678630][T18324] netlink: 65185 bytes leftover after parsing attributes in process `syz.2.4254'. [ 784.178719][T18332] netlink: 65185 bytes leftover after parsing attributes in process `syz.2.4257'. [ 784.267180][T18334] netlink: 'syz.1.4258': attribute type 2 has an invalid length. [ 784.343738][T18334] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4258'. [ 785.106935][T18353] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.4263'. [ 785.455029][T18353] netlink: 6955 bytes leftover after parsing attributes in process `syz.2.4263'. [ 786.511331][T18368] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 786.973297][T18377] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4271'. [ 786.990252][T18376] netlink: 65185 bytes leftover after parsing attributes in process `syz.3.4272'. [ 787.077515][T18377] netlink: 'syz.1.4271': attribute type 9 has an invalid length. [ 787.120922][T18377] netlink: 207496 bytes leftover after parsing attributes in process `syz.1.4271'. [ 787.191464][T18380] netlink: 'syz.4.4273': attribute type 10 has an invalid length. [ 787.199316][T18380] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4273'. [ 787.237358][T18380] netlink: 'syz.4.4273': attribute type 10 has an invalid length. [ 787.278237][T18380] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4273'. [ 788.098626][T18409] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.4280'. [ 788.180674][T18409] netlink: 6955 bytes leftover after parsing attributes in process `syz.4.4280'. [ 788.273777][T18411] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 789.613961][T18436] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4290'. [ 789.722672][T18438] netlink: 'syz.2.4290': attribute type 25 has an invalid length. [ 789.771197][T18438] netlink: 'syz.2.4290': attribute type 6 has an invalid length. [ 790.172729][T18446] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 790.811168][T18466] netlink: 65185 bytes leftover after parsing attributes in process `syz.2.4300'. [ 790.936791][T18468] netlink: 'syz.3.4301': attribute type 2 has an invalid length. [ 791.071360][T18468] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4301'. [ 792.307992][T18493] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 792.969303][T18510] __nla_validate_parse: 2 callbacks suppressed [ 792.969320][T18510] netlink: 65185 bytes leftover after parsing attributes in process `syz.3.4316'. [ 793.062770][T18507] netlink: 'syz.2.4315': attribute type 2 has an invalid length. [ 793.095419][T18507] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4315'. [ 793.587201][T18522] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.4319'. [ 793.691015][T18522] netlink: 6955 bytes leftover after parsing attributes in process `syz.1.4319'. [ 794.349992][T18539] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 795.458103][T18558] netlink: 'syz.3.4332': attribute type 2 has an invalid length. [ 795.522310][T18558] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4332'. [ 795.564270][T18562] netlink: 65185 bytes leftover after parsing attributes in process `syz.0.4334'. [ 796.076123][T18573] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.4337'. [ 796.083932][T18574] netlink: 65185 bytes leftover after parsing attributes in process `syz.2.4339'. [ 796.167978][T18575] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 796.220915][T18573] netlink: 6955 bytes leftover after parsing attributes in process `syz.4.4337'. [ 796.816404][T18581] netlink: 'syz.0.4340': attribute type 39 has an invalid length. [ 797.247433][T18581] device hsr_slave_1 left promiscuous mode [ 798.085449][T18608] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 798.215467][T18613] netlink: 65185 bytes leftover after parsing attributes in process `syz.3.4352'. [ 798.687656][T18624] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.4356'. [ 798.770930][T18624] netlink: 6955 bytes leftover after parsing attributes in process `syz.2.4356'. [ 798.786711][T18623] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.4355'. [ 798.855395][T18623] netlink: 6955 bytes leftover after parsing attributes in process `syz.3.4355'. [ 799.870437][T18630] netlink: 65185 bytes leftover after parsing attributes in process `syz.0.4358'. [ 800.048228][T18635] device syzkaller0 entered promiscuous mode [ 803.925722][T18651] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 803.927136][T18666] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.4369'. [ 803.942760][T18650] netlink: 'syz.4.4364': attribute type 10 has an invalid length. [ 803.958642][T18650] team0: Device hsr_slave_0 failed to register rx_handler [ 804.012215][T18663] netlink: 'syz.1.4368': attribute type 2 has an invalid length. [ 804.020090][T18663] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4368'. [ 804.119899][T18666] netlink: 6955 bytes leftover after parsing attributes in process `syz.3.4369'. [ 804.288132][T18674] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.4371'. [ 804.420634][T18674] netlink: 6955 bytes leftover after parsing attributes in process `syz.0.4371'. [ 805.249828][T18686] netlink: 65185 bytes leftover after parsing attributes in process `syz.3.4374'. [ 805.730743][T18702] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 806.252903][T18708] netlink: 'syz.0.4383': attribute type 10 has an invalid length. [ 806.355204][T18708] team0: Device hsr_slave_0 failed to register rx_handler [ 806.457538][T18715] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.4384'. [ 806.667417][T18715] netlink: 6955 bytes leftover after parsing attributes in process `syz.3.4384'. [ 807.314345][T18717] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4386'. [ 807.335109][T18717] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4386'. [ 807.373144][T18717] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 807.551487][T18728] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 807.974811][T18746] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 808.052683][T18747] netlink: 'syz.4.4394': attribute type 2 has an invalid length. [ 808.115184][T18749] netlink: 'syz.1.4397': attribute type 25 has an invalid length. [ 808.125878][T18749] netlink: 'syz.1.4397': attribute type 3 has an invalid length. [ 808.130065][T18745] netlink: 'syz.0.4396': attribute type 3 has an invalid length. [ 808.493433][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.499857][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.344739][T18764] __nla_validate_parse: 4 callbacks suppressed [ 809.344756][T18764] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.4400'. [ 809.406776][T18764] netlink: 6955 bytes leftover after parsing attributes in process `syz.0.4400'. [ 809.792468][T18786] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 809.799758][T18786] IPv6: NLM_F_CREATE should be set when creating new route [ 809.971948][T18793] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 810.038228][T18781] netlink: 'syz.3.4404': attribute type 21 has an invalid length. [ 810.155585][T18781] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4404'. [ 810.699513][T18817] netlink: 65185 bytes leftover after parsing attributes in process `syz.0.4415'. [ 812.366473][T18852] netlink: 'syz.0.4429': attribute type 25 has an invalid length. [ 812.390229][T18852] netlink: 'syz.0.4429': attribute type 3 has an invalid length. [ 812.416513][T18852] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4429'. [ 814.597423][T18840] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 814.610350][T18855] netlink: 'syz.3.4431': attribute type 39 has an invalid length. [ 814.723654][T18886] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.4442'. [ 814.735818][T18886] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 814.813684][T18890] netlink: 'syz.1.4443': attribute type 11 has an invalid length. [ 814.847172][T18890] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4443'. [ 815.426938][T18912] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 815.726319][T18923] netlink: 'syz.0.4455': attribute type 11 has an invalid length. [ 815.750872][T18923] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4455'. [ 815.850359][T18924] netlink: 'syz.0.4455': attribute type 11 has an invalid length. [ 815.886608][T18924] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4455'. [ 816.005347][T18932] netlink: 'syz.3.4457': attribute type 25 has an invalid length. [ 816.017090][T18924] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 816.091531][T18932] netlink: 'syz.3.4457': attribute type 3 has an invalid length. [ 816.100413][T18932] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4457'. [ 816.316428][T18944] netlink: 'syz.1.4460': attribute type 2 has an invalid length. [ 816.379004][T18944] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4460'. [ 816.773616][T18959] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 817.797774][T18980] netlink: 'syz.2.4472': attribute type 49 has an invalid length. [ 817.936147][T18986] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 817.943451][T18986] IPv6: NLM_F_CREATE should be set when creating new route [ 818.032785][T18992] netlink: 'syz.2.4476': attribute type 2 has an invalid length. [ 818.054559][T18992] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4476'. [ 818.101406][T18989] netlink: 'syz.4.4475': attribute type 25 has an invalid length. [ 818.201010][T18989] netlink: 'syz.4.4475': attribute type 3 has an invalid length. [ 818.234615][T18989] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4475'. [ 818.793870][T19014] device syzkaller0 entered promiscuous mode [ 818.866878][T19014] netlink: 'syz.0.4483': attribute type 2 has an invalid length. [ 818.901025][T19014] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4483'. [ 818.910246][T19021] netlink: 'syz.1.4487': attribute type 39 has an invalid length. [ 822.450267][T19031] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 822.457598][T19031] IPv6: NLM_F_CREATE should be set when creating new route [ 822.486766][T19049] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.4497'. [ 822.502641][T19049] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 823.993677][T19094] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 824.001048][T19094] IPv6: NLM_F_CREATE should be set when creating new route [ 825.565131][T19153] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.4530'. [ 825.641166][T19153] netlink: 6955 bytes leftover after parsing attributes in process `syz.4.4530'. [ 825.899607][ T4288] Bluetooth: hci1: unexpected event 0x30 length: 15 > 3 [ 825.903543][T19158] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4531'. [ 825.931301][T19158] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4531'. [ 825.957874][T19158] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4531'. [ 826.400669][T19169] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 827.408386][T19206] netlink: 'syz.3.4549': attribute type 21 has an invalid length. [ 827.426812][T19206] IPv6: NLM_F_CREATE should be specified when creating new route [ 827.483501][T19206] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 827.490916][T19206] IPv6: NLM_F_CREATE should be set when creating new route [ 827.498251][T19206] IPv6: NLM_F_CREATE should be set when creating new route [ 827.505626][T19206] IPv6: NLM_F_CREATE should be set when creating new route [ 827.658014][T19211] netlink: 'syz.3.4549': attribute type 2 has an invalid length. [ 827.881840][T19205] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 827.899900][T19211] netlink: 'syz.3.4549': attribute type 21 has an invalid length. [ 827.910556][T19211] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4549'. [ 827.930094][T19211] netlink: 'syz.3.4549': attribute type 5 has an invalid length. [ 828.493523][T19227] netlink: 'syz.2.4554': attribute type 1 has an invalid length. [ 828.586133][T19227] netlink: 'syz.2.4554': attribute type 3 has an invalid length. [ 828.652036][T19227] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4554'. [ 829.112989][T19220] delete_channel: no stack [ 831.705473][T19249] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 831.791010][T19246] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 831.991030][ T4280] Bluetooth: hci1: command 0x0406 tx timeout [ 832.620094][T19270] netlink: 'syz.4.4568': attribute type 3 has an invalid length. [ 832.664978][T19270] netlink: 'syz.4.4568': attribute type 1 has an invalid length. [ 832.697855][T19270] netlink: 120 bytes leftover after parsing attributes in process `syz.4.4568'. [ 833.310049][T19290] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.4573'. [ 833.361282][T19290] netlink: 6955 bytes leftover after parsing attributes in process `syz.0.4573'. [ 833.457564][T19292] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 833.464898][T19292] IPv6: NLM_F_CREATE should be set when creating new route [ 833.495607][T19296] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 833.756526][T19301] netlink: 'syz.1.4580': attribute type 2 has an invalid length. [ 833.779821][T19301] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4580'. [ 834.877831][T19328] device pim6reg1 entered promiscuous mode [ 834.920659][T19328] netlink: 65185 bytes leftover after parsing attributes in process `syz.2.4590'. [ 835.122179][T19330] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 835.131058][T19330] IPv6: NLM_F_CREATE should be set when creating new route [ 835.160203][T19332] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 835.442779][T19336] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4594'. [ 835.589782][T19348] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.4596'. [ 835.672526][T19348] netlink: 6955 bytes leftover after parsing attributes in process `syz.0.4596'. [ 836.723166][T19368] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 838.158936][T19399] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.4614'. [ 838.251210][T19399] netlink: 6955 bytes leftover after parsing attributes in process `syz.4.4614'. [ 838.913424][T19415] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 839.967853][T19434] netlink: 'syz.2.4627': attribute type 10 has an invalid length. [ 841.293984][T19453] netlink: 'syz.1.4631': attribute type 2 has an invalid length. [ 841.302129][T19453] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4631'. [ 841.598967][T19465] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 841.682117][ T4280] Bluetooth: hci4: unexpected event 0x30 length: 15 > 3 [ 842.263190][T19478] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 842.619705][T19490] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 842.687087][T19493] FAULT_INJECTION: forcing a failure. [ 842.687087][T19493] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 842.731076][T19493] CPU: 1 PID: 19493 Comm: syz.2.4647 Not tainted syzkaller #0 [ 842.738581][T19493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 842.748645][T19493] Call Trace: [ 842.751931][T19493] [ 842.754878][T19493] dump_stack_lvl+0x188/0x24e [ 842.759581][T19493] ? show_regs_print_info+0x12/0x12 [ 842.764794][T19493] ? load_image+0x410/0x410 [ 842.769317][T19493] ? __lock_acquire+0x7c40/0x7c40 [ 842.774360][T19493] ? mark_lock+0x94/0x320 [ 842.778710][T19493] should_fail_ex+0x390/0x4c0 [ 842.783405][T19493] _copy_from_user+0x2c/0x170 [ 842.788096][T19493] ___sys_sendmsg+0x1c3/0x360 [ 842.792795][T19493] ? __sys_sendmsg+0x2a0/0x2a0 [ 842.797619][T19493] __se_sys_sendmsg+0x1c3/0x2b0 [ 842.802489][T19493] ? ct_nmi_exit+0x145/0x1c0 [ 842.807094][T19493] ? __x64_sys_sendmsg+0x80/0x80 [ 842.812074][T19493] ? lockdep_hardirqs_on+0x94/0x140 [ 842.817470][T19493] do_syscall_64+0x4c/0xa0 [ 842.821906][T19493] ? clear_bhb_loop+0x60/0xb0 [ 842.826599][T19493] ? clear_bhb_loop+0x60/0xb0 [ 842.831307][T19493] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 842.837216][T19493] RIP: 0033:0x7f759a39de59 [ 842.841644][T19493] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 842.861259][T19493] RSP: 002b:00007f759b2b0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 842.869685][T19493] RAX: ffffffffffffffda RBX: 00007f759a625fa0 RCX: 00007f759a39de59 [ 842.877666][T19493] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 842.885644][T19493] RBP: 00007f759b2b0090 R08: 0000000000000000 R09: 0000000000000000 [ 842.893624][T19493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 842.901607][T19493] R13: 00007f759a626038 R14: 00007f759a625fa0 R15: 00007ffca84459c8 [ 842.909603][T19493] [ 842.956097][T19497] netlink: 'syz.4.4648': attribute type 29 has an invalid length. [ 842.981198][T19497] netlink: 'syz.4.4648': attribute type 29 has an invalid length. [ 843.000961][T19497] netlink: 'syz.4.4648': attribute type 29 has an invalid length. [ 843.029786][T19497] netlink: 'syz.4.4648': attribute type 29 has an invalid length. [ 843.048666][T19497] netlink: 'syz.4.4648': attribute type 29 has an invalid length. [ 843.069060][T19497] netlink: 'syz.4.4648': attribute type 29 has an invalid length. [ 843.091465][T19497] netlink: 'syz.4.4648': attribute type 10 has an invalid length. [ 843.106712][T19497] netlink: 'syz.4.4648': attribute type 19 has an invalid length. [ 843.115034][T19497] netlink: 156 bytes leftover after parsing attributes in process `syz.4.4648'. [ 843.269137][T19505] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 843.696193][T19511] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 844.414062][T19531] FAULT_INJECTION: forcing a failure. [ 844.414062][T19531] name failslab, interval 1, probability 0, space 0, times 0 [ 844.447464][T19531] CPU: 0 PID: 19531 Comm: syz.3.4659 Not tainted syzkaller #0 [ 844.454976][T19531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 844.465061][T19531] Call Trace: [ 844.468372][T19531] [ 844.471333][T19531] dump_stack_lvl+0x188/0x24e [ 844.476063][T19531] ? show_regs_print_info+0x12/0x12 [ 844.481308][T19531] ? load_image+0x410/0x410 [ 844.485866][T19531] ? __might_sleep+0xd0/0xd0 [ 844.490494][T19531] ? __lock_acquire+0x7c40/0x7c40 [ 844.495577][T19531] should_fail_ex+0x390/0x4c0 [ 844.500309][T19531] should_failslab+0x5/0x20 [ 844.504855][T19531] slab_pre_alloc_hook+0x59/0x300 [ 844.509935][T19531] kmem_cache_alloc_node+0x5a/0x310 [ 844.515169][T19531] ? __alloc_skb+0xf9/0x7d0 [ 844.519729][T19531] __alloc_skb+0xf9/0x7d0 [ 844.524113][T19531] netlink_sendmsg+0x654/0xbd0 [ 844.528942][T19531] ? netlink_getsockopt+0x550/0x550 [ 844.534190][T19531] ? apparmor_socket_sendmsg+0x8a/0x330 [ 844.539782][T19531] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 844.545109][T19531] ? security_socket_sendmsg+0x7c/0xa0 [ 844.550601][T19531] ? netlink_getsockopt+0x550/0x550 [ 844.555843][T19531] ____sys_sendmsg+0x5ed/0x9a0 [ 844.560669][T19531] ? __sys_sendmsg_sock+0x30/0x30 [ 844.565721][T19531] ? __import_iovec+0x306/0x510 [ 844.570636][T19531] ? import_iovec+0x6f/0xa0 [ 844.575192][T19531] ___sys_sendmsg+0x2a2/0x360 [ 844.579926][T19531] ? __sys_sendmsg+0x2a0/0x2a0 [ 844.584778][T19531] ? __lock_acquire+0x7c40/0x7c40 [ 844.589929][T19531] __se_sys_sendmsg+0x1c3/0x2b0 [ 844.594824][T19531] ? __x64_sys_sendmsg+0x80/0x80 [ 844.599867][T19531] ? lockdep_hardirqs_on+0x94/0x140 [ 844.605114][T19531] do_syscall_64+0x4c/0xa0 [ 844.609566][T19531] ? clear_bhb_loop+0x60/0xb0 [ 844.614287][T19531] ? clear_bhb_loop+0x60/0xb0 [ 844.619012][T19531] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 844.624939][T19531] RIP: 0033:0x7fab23f9de59 [ 844.629390][T19531] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 844.649038][T19531] RSP: 002b:00007fab24d92028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 844.657490][T19531] RAX: ffffffffffffffda RBX: 00007fab24225fa0 RCX: 00007fab23f9de59 [ 844.665493][T19531] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 844.673491][T19531] RBP: 00007fab24d92090 R08: 0000000000000000 R09: 0000000000000000 [ 844.681488][T19531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 844.689486][T19531] R13: 00007fab24226038 R14: 00007fab24225fa0 R15: 00007ffda1e95bf8 [ 844.697531][T19531] [ 845.094117][T19537] netlink: 'syz.4.4662': attribute type 19 has an invalid length. [ 845.140964][T19537] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4662'. [ 845.170154][T19534] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 845.277224][T19542] netlink: 'syz.2.4663': attribute type 2 has an invalid length. [ 845.293161][T19542] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4663'. [ 845.424429][T19548] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 845.757380][ T4288] Bluetooth: hci3: unexpected event 0x30 length: 15 > 3 [ 845.824806][T19558] netlink: 'syz.3.4667': attribute type 10 has an invalid length. [ 846.098361][T19561] FAULT_INJECTION: forcing a failure. [ 846.098361][T19561] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 846.188552][T19561] CPU: 0 PID: 19561 Comm: syz.1.4669 Not tainted syzkaller #0 [ 846.196068][T19561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 846.206133][T19561] Call Trace: [ 846.209423][T19561] [ 846.212362][T19561] dump_stack_lvl+0x188/0x24e [ 846.217070][T19561] ? show_regs_print_info+0x12/0x12 [ 846.222375][T19561] ? load_image+0x410/0x410 [ 846.226900][T19561] ? __lock_acquire+0x7c40/0x7c40 [ 846.231950][T19561] should_fail_ex+0x390/0x4c0 [ 846.236655][T19561] _copy_from_user+0x2c/0x170 [ 846.241347][T19561] iovec_from_user+0x143/0x360 [ 846.246140][T19561] __import_iovec+0x6c/0x510 [ 846.250757][T19561] import_iovec+0x6f/0xa0 [ 846.255110][T19561] ___sys_sendmsg+0x252/0x360 [ 846.259813][T19561] ? __sys_sendmsg+0x2a0/0x2a0 [ 846.264648][T19561] __se_sys_sendmsg+0x1c3/0x2b0 [ 846.269518][T19561] ? __x64_sys_sendmsg+0x80/0x80 [ 846.274485][T19561] ? lockdep_hardirqs_on+0x94/0x140 [ 846.279705][T19561] do_syscall_64+0x4c/0xa0 [ 846.284136][T19561] ? clear_bhb_loop+0x60/0xb0 [ 846.288833][T19561] ? clear_bhb_loop+0x60/0xb0 [ 846.293531][T19561] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 846.299443][T19561] RIP: 0033:0x7f8c97f9de59 [ 846.303871][T19561] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 846.323491][T19561] RSP: 002b:00007f8c98dfd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 846.331922][T19561] RAX: ffffffffffffffda RBX: 00007f8c98225fa0 RCX: 00007f8c97f9de59 [ 846.339907][T19561] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 846.347895][T19561] RBP: 00007f8c98dfd090 R08: 0000000000000000 R09: 0000000000000000 [ 846.355878][T19561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 846.363861][T19561] R13: 00007f8c98226038 R14: 00007f8c98225fa0 R15: 00007fff63233258 [ 846.371869][T19561] [ 846.694778][ T4288] Bluetooth: hci3: unexpected event 0x30 length: 15 > 3 [ 846.987477][T19585] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 847.369360][T19594] bridge0: port 5(batadv0) entered blocking state [ 847.377761][T19594] bridge0: port 5(batadv0) entered disabled state [ 847.398890][T19594] device batadv0 entered promiscuous mode [ 847.405105][ T4812] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 847.414657][ T4812] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 847.832743][ T4280] Bluetooth: hci4: command 0x0406 tx timeout [ 848.004924][T19606] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 848.578896][T19621] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 848.719317][ T4280] Bluetooth: hci3: command 0x0406 tx timeout [ 848.943040][T19628] netlink: 'syz.0.4690': attribute type 10 has an invalid length. [ 848.956962][ T4280] Bluetooth: hci4: unexpected event 0x30 length: 15 > 3 [ 848.978896][T19628] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.4690'. [ 849.165021][T19636] netlink: 'syz.4.4694': attribute type 2 has an invalid length. [ 849.179558][T19636] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4694'. [ 849.235895][T19638] netlink: 140 bytes leftover after parsing attributes in process `syz.3.4693'. [ 849.355366][T19637] netlink: 'syz.3.4693': attribute type 3 has an invalid length. [ 849.424904][T19637] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.4693'. [ 849.832278][ T4288] ------------[ cut here ]------------ [ 849.838094][ T4288] WARNING: CPU: 0 PID: 4288 at net/bluetooth/hci_conn.c:668 hci_conn_timeout+0x24f/0x450 [ 849.848075][ T4288] Modules linked in: [ 849.852072][ T4288] CPU: 0 PID: 4288 Comm: kworker/u5:8 Not tainted syzkaller #0 [ 849.859629][ T4288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 849.870021][ T4288] Workqueue: hci3 hci_conn_timeout [ 849.875225][ T4288] RIP: 0010:hci_conn_timeout+0x24f/0x450 [ 849.880932][ T4288] Code: 21 8e e8 84 33 9b f8 48 8b 35 c5 0d e9 04 bf 08 00 00 00 48 89 da 5b 41 5c 41 5d 41 5e 41 5f 5d e9 76 0d 1c f8 e8 71 0d 4a f8 <0f> 0b e9 35 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c dd fd [ 849.901443][ T4288] RSP: 0018:ffffc90003e77c08 EFLAGS: 00010293 [ 849.907537][ T4288] RAX: ffffffff8938142f RBX: ffff88802960e330 RCX: ffff88802f121e00 [ 849.915594][ T4288] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 849.923623][ T4288] RBP: 00000000ffffffff R08: ffff88802960e013 R09: 1ffff110052c1c02 [ 849.931664][ T4288] R10: dffffc0000000000 R11: ffffed10052c1c03 R12: ffffffff81557724 [ 849.939920][ T4288] R13: dffffc0000000000 R14: ffff88802960e000 R15: ffff88802960e010 [ 849.947961][ T4288] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 849.956936][ T4288] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 849.963588][ T4288] CR2: 0000001b2d323ffc CR3: 0000000065cdb000 CR4: 00000000003506f0 [ 849.971612][ T4288] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 849.979607][ T4288] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 849.987638][ T4288] Call Trace: [ 849.990956][ T4288] [ 849.993899][ T4288] ? process_one_work+0x7b4/0x1160 [ 849.999041][ T4288] process_one_work+0x8ab/0x1160 [ 850.004067][ T4288] ? worker_detach_from_pool+0x240/0x240 [ 850.009719][ T4288] ? _raw_spin_lock_irq+0x86/0xf0 [ 850.014817][ T4288] ? _raw_spin_lock_irq+0xb7/0xf0 [ 850.019860][ T4288] ? _raw_spin_lock_irqsave+0x100/0x100 [ 850.025485][ T4288] ? wq_worker_running+0x97/0x190 [ 850.030537][ T4288] worker_thread+0xaf5/0x12a0 [ 850.035296][ T4288] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 850.041260][ T4288] kthread+0x29d/0x330 [ 850.045348][ T4288] ? worker_clr_flags+0x1a0/0x1a0 [ 850.050392][ T4288] ? kthread_blkcg+0xd0/0xd0 [ 850.055050][ T4288] ret_from_fork+0x1f/0x30 [ 850.059505][ T4288] [ 850.062604][ T4288] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 850.069890][ T4288] CPU: 0 PID: 4288 Comm: kworker/u5:8 Not tainted syzkaller #0 [ 850.077441][ T4288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 850.087504][ T4288] Workqueue: hci3 hci_conn_timeout [ 850.092639][ T4288] Call Trace: [ 850.095922][ T4288] [ 850.098858][ T4288] dump_stack_lvl+0x188/0x24e [ 850.103550][ T4288] ? memcpy+0x3c/0x60 [ 850.107543][ T4288] ? show_regs_print_info+0x12/0x12 [ 850.112759][ T4288] ? load_image+0x410/0x410 [ 850.117296][ T4288] panic+0x2d3/0x710 [ 850.121215][ T4288] ? bpf_jit_dump+0xd0/0xd0 [ 850.125730][ T4288] ? ret_from_fork+0x1f/0x30 [ 850.130341][ T4288] __warn+0x2f8/0x4f0 [ 850.134339][ T4288] ? hci_conn_timeout+0x24f/0x450 [ 850.139377][ T4288] ? hci_conn_timeout+0x24f/0x450 [ 850.144412][ T4288] report_bug+0x2ba/0x4f0 [ 850.148756][ T4288] ? hci_conn_timeout+0x24f/0x450 [ 850.153798][ T4288] handle_bug+0x3a/0x70 [ 850.157966][ T4288] exc_invalid_op+0x16/0x40 [ 850.162478][ T4288] asm_exc_invalid_op+0x16/0x20 [ 850.167326][ T4288] RIP: 0010:hci_conn_timeout+0x24f/0x450 [ 850.172955][ T4288] Code: 21 8e e8 84 33 9b f8 48 8b 35 c5 0d e9 04 bf 08 00 00 00 48 89 da 5b 41 5c 41 5d 41 5e 41 5f 5d e9 76 0d 1c f8 e8 71 0d 4a f8 <0f> 0b e9 35 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c dd fd [ 850.192557][ T4288] RSP: 0018:ffffc90003e77c08 EFLAGS: 00010293 [ 850.198617][ T4288] RAX: ffffffff8938142f RBX: ffff88802960e330 RCX: ffff88802f121e00 [ 850.206584][ T4288] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 850.214541][ T4288] RBP: 00000000ffffffff R08: ffff88802960e013 R09: 1ffff110052c1c02 [ 850.222523][ T4288] R10: dffffc0000000000 R11: ffffed10052c1c03 R12: ffffffff81557724 [ 850.230492][ T4288] R13: dffffc0000000000 R14: ffff88802960e000 R15: ffff88802960e010 [ 850.238461][ T4288] ? process_one_work+0x7b4/0x1160 [ 850.243577][ T4288] ? hci_conn_timeout+0x24f/0x450 [ 850.248601][ T4288] ? hci_conn_timeout+0x24f/0x450 [ 850.253614][ T4288] ? process_one_work+0x7b4/0x1160 [ 850.258717][ T4288] process_one_work+0x8ab/0x1160 [ 850.263664][ T4288] ? worker_detach_from_pool+0x240/0x240 [ 850.269285][ T4288] ? _raw_spin_lock_irq+0x86/0xf0 [ 850.274305][ T4288] ? _raw_spin_lock_irq+0xb7/0xf0 [ 850.279319][ T4288] ? _raw_spin_lock_irqsave+0x100/0x100 [ 850.284856][ T4288] ? wq_worker_running+0x97/0x190 [ 850.289879][ T4288] worker_thread+0xaf5/0x12a0 [ 850.294563][ T4288] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 850.300450][ T4288] kthread+0x29d/0x330 [ 850.304502][ T4288] ? worker_clr_flags+0x1a0/0x1a0 [ 850.309526][ T4288] ? kthread_blkcg+0xd0/0xd0 [ 850.314104][ T4288] ret_from_fork+0x1f/0x30 [ 850.318520][ T4288] [ 850.321786][ T4288] Kernel Offset: disabled [ 850.326136][ T4288] Rebooting in 86400 seconds..