last executing test programs: 5.338109305s ago: executing program 3 (id=377): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x6}, 0x9c01, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x1, 0x0, 0x0, 0x0, 0x43}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100000000000000", @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) socket$kcm(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x29, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000018010000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 5.150042864s ago: executing program 3 (id=380): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xc}, 0x828, 0x0, 0x0, 0x0, 0x80000001, 0x2, 0x0, 0x0, 0x0, 0x0, 0xb88}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x254080, 0x0) close(r2) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async, rerun: 64) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}) (async, rerun: 64) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x7, 0x4, 0x900, 0x6, 0x28, 0x1}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x9, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x3}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x1b}}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000f80)={r4}, 0xc) (async) ioctl$TUNGETVNETLE(r2, 0x40107446, &(0x7f0000000180)) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x5, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4005, 0x0, 0x0, 0x0, 0x7}, [@generic={0x6b, 0x1, 0x1, 0xb7}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$TUNGETVNETLE(r1, 0x40107446, &(0x7f0000000180)) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xc, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000006110670000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x80) (rerun: 32) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) (async) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x7c, &(0x7f00000000c0)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000400110000000a600e41b0000900ac00060411000000160012000a00037c0248035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) (async) socket$kcm(0x22, 0x3, 0x0) (async) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) (async, rerun: 64) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf62}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) r6 = socket$kcm(0x10, 0x7, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x300, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef434000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0) 4.067630725s ago: executing program 3 (id=386): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89fd, &(0x7f0000000900)={'sit0\x00', @random="0000230c1100"}) r1 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x48, &(0x7f0000000100), 0x120) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"/2832], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff4f}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r2, 0x18000000000002a0, 0x81, 0x0, &(0x7f0000000380)="88000000000000002a5b8b6ccd1a751d5378188aa558445d1f410adcbeeb7808a6d54372a9e6f4a1b7d3c92c30a8d877a191d62d854466111cfdf75bda8e16921c4f5bdf18e8fa46161dc579987ca7c5a569d9dbfb85bee1d69fd781666cb43652c9cd50de129f87b878dffd6e66636741ffcae9afc12fdc3cf2a9782c5a0c453f", 0x0, 0x3ff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$kcm(0x2, 0x2, 0x73) sendmsg$inet(r3, &(0x7f0000000500)={&(0x7f0000000300)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000340)='+', 0x34000}], 0x1}, 0x900000000000000) 3.720659422s ago: executing program 0 (id=389): sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x13, &(0x7f0000000100), 0x120) r1 = socket$kcm(0x10, 0x5, 0x4) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120c000200080001400400446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}, {&(0x7f0000000400)="98a50f50e6947d6c5ea157676cdd6b9bd64889993a148cc7b421921574b1be505055cf80d2c1211343e74de0eaeebd8aa2ca9c14669836ebb48151198e8fc19cdb88d1698c001dbe87c5409094f0cf127b2402dfd268d7ea83fbd5", 0x5b}, {&(0x7f0000000f40)="244d284fae0bf59cc336cda3dbc84fd0acdd3c8e4d362b9301a66aedbb5444b8c623362e164076e69461a51ee118830ee131b3d6c86f05dd82c35602e102395f33deb23379c89987828e894ebd57e21f250551bacce3247d4cdc25b01295db226ad5fcef091eccd597b07237325601850655941c895825013d694145d592201eab07c4c7fbb5e7e6db7ad5388481e873c93140097ad12049e25dc0c4074b2d52fb4774e98eb13237fe7807271ad758a8ced6407aaa4780b83a809acfaae8090b5904b973fae87806e41a65db23527afce9f622626a50ddac308d0fcdbf75745e6b6d3afb0155", 0xe6}, {&(0x7f0000001040)="6962838ba2f7f80aa73904c6cd869069e45b11c694e3d10bcac3f5a159d67cbeaf24a2e133b4f7e4ba222e9a5e84bf2f146f3997bec2f22b95fea989800138b7c2dbcf5b3ce0a491d0cad82ca7cd052683751e57248956ebdfed6b7af92c4001a0edd0996a437e8e088a676afc477879e7fdbeb57809e3950be25b2e48d350879aca483cd7f7d5d3d0cc7a6b29aac0e7664960f4a0970d14b4b3885d12d6c79ee87d8f5055a4a41add6afaecdf65ee4be4da0558e4cda43da9863786cf123a4a31d034b0ea09307d6ad03d77b95a101bbc5667c65b6a8563985f3faee58d57b2f0be4e9c67c690b14f583b84ed7783a581f375c520", 0xf5}], 0x4}, 0x4004) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r2, 0x1, 0x15, &(0x7f0000000000), 0xff7b) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x4, 0xc8}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x400000002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r3, 0x6, 0xe, 0x0, 0x4a) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x4, 0x100, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000e40)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYBLOB="fcffffff000000000000000000000000000000000469c69d8a0053533d1afab1797c56f7aa55d83a1ee55e578afd95d5064aaf78c99250396bf4e2faa35ae8206cfa33ca0c24c134656d808b5fd909a6a1fe918d8e40ef1379394270d3dcfdbcb7a331bd3b231e2a79978840452fd5acb436827edef2656e3567bab10175e6dc09737cf02b094eed228cc561f9b165f67e7b1f8bf312ce98edbd6d410b8fae5df341897da19dab144e0a801284fc", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xd, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000007a0af8ff00000000bfa300000000000007030001f8ffffff18430000fdffffff0000000000000000b70400000000000018250000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff9500000000000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$unix(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x8040) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000100)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) write$cgroup_int(r6, &(0x7f0000000080), 0x12) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r7, &(0x7f0000000080)={&(0x7f00000004c0)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000040)="27031c00ffff14000000002f1eafacf706e105000000894f00000000000b80558de3c69b3728", 0x26}], 0x1}, 0x805) socket$kcm(0x1e, 0x5, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f00000011c0)="0000c9540000000037302b1787e4", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000003702000020febfff7a0af0fff8ff00f869a4f0ff00000000b70600001218d1fe2d640500000000002404000000ffffffd404000040000000b7040000100000206a07f0ff00000000850000002f000000b70000000a00000095000000000000006458c2c62fca868f0399d909a63396c113943219aab9d607000000cb3924b611f5969f62c28b22edf3cf393d14c46cc4f79fd2b316da4f0de8163f6242fa8a23f1740637c48468766af54043000000ec44631ac2622cdcae18c3d14bfbe96dd87235b44174f7c034318508f49f09781dc7a2cfbb9a0f119e31975f551557f05dc2dc2739e2e735d0ab961dac07f4f6d8aa1c3f16765d427c0e01000000fe4c16737d50d2a4bfc463450d524eacf2b734b0289c7a3a16eeca71296746681d61af491e4fa734318e0d72b8dbbc2b2b869af2f87903000000b6ecc7de09a2257e908cd92e664fa7aba7f07474863333c460e34caf0806a7e2575a56fba3eadd8efbd5dae6c024585d972b1bf8c4e872bba38160be9e92b6ddb90fc51b894917b50876b5708e64e70f7d8225da90ce9bc019084873ed07c0c59c4ba053fe77e0d37ccc3318da2e9fefaf025527e734ed1de5d12b4c56ca3b03dc121086061d1f26821a428d28eefa22ead6a3dab9388da53263b81ebe6be197a48a63440000a356240c4e2df57457000100000000000000000000008d2516510b29804b3cc034c19cef0d773f01064709edd63a185cbab8456c25283b9514b220fe401503ff536478088eb9fd932a0703a7bf9ea40429b2d49177824f210a69f8e5227fd32e7d5a2c7ecf57ac64509224090000000000000096e5a55d2c805bf725b9d14756c8cfa292aae0872866cf9fe063317741a0db9081d4393a7f9bcc0917d60a11b4a9ece831660ce625de441cef915eba31255d163f7033045ceb97f8ea006efc5b84f75ca1fb74c9faef444eb12f46b435de87feb2f7f2d7fb659395e4b38178b5c67e6ac100000000000000001b2e77bd5de136fa1bec1a26c622bb9662d9ee70147acc5605aa2318855cb8b918000000c5f265dcb5dce05f94ea051c4e8dcdf37d01ad7aff64f84ce32b841c799f47c2949725285fc50f1dd3f5e264023082eec752704c1f598151aa7d29e0d79522df196278acf327a74777d1f658f50c27020198770ff8ebef9df1b750d56d4d195ad7a267c46b3348b0e03ed33b5bca13cafc304dc6da78d20f029742d8d2f36acfdd331081ca00c1d5c8b7bed2ef603d6e7f1764246aab2d7d531559a971939a038055ac28625ec837f824ff537cd67993a3589be73a18680da50287b9e962b1a0235c290346a21ca5de55c49c78e411c791617000ef8df75411a5d300000000000000e0ffffff004deb8d49806823655735bd6deb49edb2e42f4ed9e6e9080366660b847bf03c144f6796920726dcf29e9a6c808459e82cbb0000000000000000000000000000000000006b5530865aaa7aa6171f66f2bca881a4201588427bb65ed3d5e7a74e9b5ece44067d4a9875a310bc7ec42b844b9eb3c9083560ef5c92b8a01188d615efbf70893d2eaf76517e990021fa5020a71023bca1194ad87cade480ba3dce8f57294e31ca24a8d181210bb6d18ff2c58293c2e314a7447ed3a1c870908aa8e3b33e6a94c7381bce9fa71dcbb758451f247e38d80d66e03d7564a5cddfaf06574b05cefb2670f30c2d501ee625ce3ffc08f15b53d28ce552c1807bc6866f06098a0e5517068aa48f2a82496fe83ee85218fe7f52b48742c7055f2a144c13e9c54be60b0a4f979ef7eb216897875946dc6ca1571930b1cf7c93de103f5289f782ae538e02612c717a76c787a873936eb8dcf1bfe581cc8ef965a0424bc140939e3274e251e519d188f6af680402c49458065dccfcb4f0d4f2ec9cf6fb3cf0a1807e34fb8d0108007734c1d2bc6a9d32d2560a88bad976b6000100002b712e632eeca810fb73fc8aaef94acf8bde18b9149cadc688254eabbe91f943592ccf68e717bcc6852828bd621e3a9dcb1cc6f1a6d1915200d95087838c2dc0a002c3aa554f725b965714144652cdc14761b0236f1a05b7f50f4149057e63d713103b5a6c2919161efc165a2e6981d76d29c95ad9f180135fb8962f59495fd33be3a6d35274941790bc1bd9da5e9c67c39de2c9f6fe35b8f528edbd8ea2a77dccdc3fe247feb121d9440a3ea9012a9d23a7e3110b0f25c5f8bf803d688de4d92b5dfdbd69fb8b426b55c10ba01b5f18b10cce8de3369300000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19}, 0x94) 3.699617823s ago: executing program 3 (id=390): r0 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 3.538329071s ago: executing program 1 (id=391): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x4, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000400)="d8000000140081044e81f782db44b9040a1d08020a003f00040000a118000200fe8000000000000008000f0100810401a80016ea1f0008400304000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee40021146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 3.462086475s ago: executing program 2 (id=392): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x4, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1a, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x3c, '\x00', 0x0, @fallback=0x29, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0xfffff801}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @remote}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x20000000) close(r3) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x800, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\b\x00\x00\x00\f'], 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000400000008000000c00b000001000000", @ANYRES32, @ANYBLOB="0004000000000000000000000010f61224a537000000000000", @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="010000000300"/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000a80), 0x407f, r5, 0x4}, 0x38) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001b40)={0x0, 0x0, 0x0}, 0x0) r6 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r6, 0x1, 0x41, 0x0, 0x0) recvmsg$kcm(r6, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/3, 0x3}, 0x2062) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x107000, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r7) r8 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r8, 0x6, 0xa, &(0x7f0000000100)=r7, 0x4) 3.429544586s ago: executing program 0 (id=393): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x18, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="18080000b838d84c405521c6817e9bdc1ab31c89b40fbbfa24adc780007c21537ed66cba000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000bf9800000000000056080000020000008500000007000000b7000000000000009500000000000000"], &(0x7f0000001140)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfffffc}, 0x94) socket$kcm(0x1e, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0}, 0x10) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xc81e9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x4846, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10305, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x104101, 0x6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8927, &(0x7f0000000cc0)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x13\xec\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50x0}, 0x8) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100480, 0x9, 0x0, 0x4, 0x0, 0x40000009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xea96, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x4, 0xa}, 0x280, 0xc8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x0) close(r7) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000f00)={{r1}, &(0x7f0000000e80), &(0x7f0000000ec0)=r8}, 0x20) write$cgroup_subtree(r8, &(0x7f0000000640)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce810203290800000000000000000000ffffac14140a000000000000000000000000ac1414aa"], 0xfdef) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0x8, &(0x7f0000000840)=ANY=[@ANYRESHEX=r4, @ANYRES32=r4, @ANYRES8=r2], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800003, 0x3fff8001}, 0x0, 0x32, 0x43e1bd74, 0x7, 0x8, 0x7, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x1, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, &(0x7f0000000080)={r7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000bc0)={r8, 0xe0, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000880)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6, &(0x7f00000008c0)=[0x0, 0x0], &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x4a, &(0x7f0000000980)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000a00), &(0x7f0000000a40), 0x8, 0x8f, 0x8, 0x8, &(0x7f0000000a80)}}, 0x10) sendmsg$inet(r11, &(0x7f0000000e40)={&(0x7f0000000240)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000000800)=[{&(0x7f0000000580)="6ae93c004bf4a9542bfbfe56c6f6a9ff6438ecc5e2133bd4beddda704b1389f27bf217f704f977660b721d1ed8", 0x2d}, {&(0x7f0000000780)="00b761e0b5bb7a464ad9d3767607441d2ec1177cfc4685180948e9e68f82a22fa322690b2d9b256f54a2959d2ee81a0044dc96735bf36d8f6f54e6247fc880ab03ce35bede3bdccfdba93b13fae2735970b0", 0x52}], 0x2, &(0x7f0000000c00)=[@ip_retopts={{0x14, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}]}}}, @ip_retopts={{0xe8, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0xe2, 0x0, 0x4, [0x1000, 0x6]}, @ssrr={0x89, 0xb, 0xde, [@empty, @loopback]}, @timestamp={0x44, 0x1c, 0x1a, 0x0, 0x7, [0x4, 0x8, 0x7, 0xe1c, 0x8, 0xb]}, @timestamp={0x44, 0x20, 0x6a, 0x0, 0x0, [0xfffffffc, 0x4, 0xb, 0x3, 0x0, 0x7fff, 0x8]}, @rr={0x7, 0x27, 0xa3, [@empty, @remote, @local, @local, @dev={0xac, 0x14, 0x14, 0x19}, @private=0xa010102, @broadcast, @multicast1, @private=0xa010102]}, @timestamp_prespec={0x44, 0x3c, 0x9d, 0x3, 0x8, [{@rand_addr=0x64010100, 0x2}, {@loopback, 0x8}, {@multicast1, 0x9be2}, {@multicast2, 0x2}, {@local, 0x7}, {@loopback, 0x8}, {@broadcast, 0x200}]}, @ssrr={0x89, 0xb, 0x75, [@private=0xa010102, @empty]}, @noop, @lsrr={0x83, 0x7, 0x67, [@remote]}, @rr={0x7, 0xf, 0x2d, [@multicast2, @broadcast, @local]}]}}}, @ip_retopts={{0x64, 0x0, 0x7, {[@timestamp={0x44, 0x14, 0xec, 0x0, 0x3, [0x200, 0x66, 0x2, 0x1]}, @generic={0x94, 0x3, 'G'}, @cipso={0x86, 0x2e, 0x1, [{0x0, 0x6, "c094a435"}, {0x1, 0x6, "7396fa6b"}, {0x5, 0xd, "1f9b4a2cc78dabbb4249eb"}, {0x6, 0xd, "3b4f02dbaac651ba7a1d56"}, {0x1, 0x2}]}, @timestamp={0x44, 0xc, 0x95, 0x0, 0x5, [0x4b2, 0x80000000]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5a}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x60}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @multicast2}}}, @ip_retopts={{0x14, 0x0, 0x7, {[@noop]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r12, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}], 0x208}, 0x40) r13 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x17, &(0x7f0000000680)=ANY=[@ANYBLOB="060000000000000013f8292566642baba500003aeb2c7938eed297381002e66c0943", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000d716500004000000091904000900000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000008500000057000000bf91000000000000b7020000000000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x2, 0x1f, &(0x7f00000001c0)=""/31, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[r4], &(0x7f0000000300)=[{0x5, 0x1, 0x6, 0x1}], 0x10, 0x6}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, r13) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0813", 0x0, 0xe8a2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.254065915s ago: executing program 1 (id=395): r0 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000005a000000000018110075480ed6957ebfee17febeba06dc34e8d69d031875c8b06d5f08b9a5ea21671f905a2dd49fe3f7e0560a28453aa6e381d98b53313dfa6248a0509fdb1f932738e32dddd43c932b0a274a535362060d60a034e4a4f3f82a24664ca3991cf8dbde9bf3e849a98b2a01d8edb4d146fe2e5e8dafa627f9c398cedae39f4388049e64b9d2058f1501ecebc2b8e157c57685b077ed24f406c9e86d5aea8f70998fad", @ANYRES32, @ANYRESHEX=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x6, 0x9, 0x0, 0x7, 0x18000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x440, 0xc8, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x55) close(r2) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004091) write$cgroup_devices(r2, 0x0, 0xfffffeff) 2.461540522s ago: executing program 3 (id=396): socket$kcm(0xa, 0x2, 0x0) socket$kcm(0x21, 0x2, 0x2) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="96aea3a46b0122f08cad50cc7c44f5255af4209bc34e7cf24778", @ANYRES32, @ANYBLOB="0d00ff0000000000830000000000000045"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31}, 0x94) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffeffffffff}, 0xc001, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x2, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r1, 0x0, 0x8000) sendmsg$inet(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001640)="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", 0x4ad}], 0x1}, 0x48800) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x115905, 0x4, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0x1, 0xffffffffffffffff, 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9e1b4c8161b02", 0x0, 0x0, 0x0}, 0x38) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x845) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a9b80"], 0xfe33) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB='6@\x00\x00H'], 0xfe33) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) r5 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r5, &(0x7f00000017c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)='%', 0x1}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000008400000005000000000000000000060020000000000000008400000002"], 0x38}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000002c0), 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x6}, 0xc001, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x817a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6518f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x6, @perf_config_ext={0x80000000, 0xc}, 0x110, 0x32, 0x43a1bd77, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200a}, 0x0, 0x0, r0, 0xa) socketpair$unix(0x1, 0x1, 0x0, 0x0) 2.438096004s ago: executing program 1 (id=397): socket$kcm(0x10, 0x2, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={0xffffffffffffffff, 0x0, 0x0}, 0x20) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081034e81f783db4cb9040a1d020006007c09e8fc55a10a0015000300142603600e120800060000000441a800080004001040040000000c5c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/213, 0xd5}, {&(0x7f0000000200)='sb#', 0x3}], 0x2}, 0x0) (fail_nth: 2) 2.401385725s ago: executing program 0 (id=398): r0 = socket$kcm(0x2, 0x3, 0x2) close(r0) r1 = socket$kcm(0x2, 0x3, 0x2) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x58, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$inet(r1, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @dev={0xac, 0x14, 0x14, 0x2a}, @remote}}}], 0x20}, 0x48000) sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x4e22, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x10}, @multicast1}}}], 0x20}, 0x0) 1.990738815s ago: executing program 2 (id=399): r0 = socket$kcm(0x10, 0x2, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000002700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x1, 0x2}, {0x9}]}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x44}, 0x28) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000001000000000000f89b3fe6160000007b00000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@func={0x8, 0x0, 0x0, 0xc, 0x4}, @fwd={0x10}, @restrict={0x0, 0x0, 0x0, 0xb, 0x3}]}, {0x0, [0x5f]}}, &(0x7f0000000200)=""/62, 0x3f, 0x3e, 0x0, 0x1aa3, 0x10000}, 0x28) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffe95) (async) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x4612, 0xffffffffffffffff}, 0x114105, 0x6, 0x9, 0x1, 0x0, 0x40000, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0xa) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x7, 0x4, 0x8, 0x5}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x9, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000050000850000001b000000b700000018000000850000005000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r7}, 0xc) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000f80)={r7}, 0xc) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) (async) close(r2) r8 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000e, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_config_ext={0x78, 0x9}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0xf, 0x0, 0x3, 0x0, 0xfae, 0x2c00c, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1008, 0x1, @perf_bp={0x0, 0x1}, 0x91400, 0xca, 0xfffffffd, 0x9, 0xdf1e, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) recvmsg$unix(r1, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r10, &(0x7f0000000000)=ANY=[@ANYRES8=r2], 0x9a) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="d8000000180081054e81f783db4cb9040a1d080006007c02000055a10a0017000600a42603600e1208000600fe80ff00a007a290457f01890500277ce06bbaceac3c940649cc7f5715a9b62f00001fb71b14d6c930dfe1d9d322fe7c2e8771820d16a4683f5aeb4edb360c8c1a8db6751cffe0b5952a0f536ffd77500db798262f3d409c1f40cb9f92b74f51fad9e3bba4d809d5e1cace0d81ed0b764434a19789bf0cffece0b4129ee6ccd4e1ffffffffc2c9b627430600007c388b0dd6e4edef57935d0000000000000073d0e899fdf2431393dfd6cbaf", 0xd8}], 0x1}, 0x48000) 1.906171299s ago: executing program 0 (id=400): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x6}, 0x9c01, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x1, 0x0, 0x0, 0x0, 0x43}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/36, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) socket$kcm(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x29, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000018010000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1.905858879s ago: executing program 1 (id=401): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x42000, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x3, 0x3}, 0x0, 0x10000, 0x9e4, 0x4, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1, 0x100001, 0x5, 0x5, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r3, 0x0, 0x0}, 0x20) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x4008, r0}, 0x18) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xc, 0x5, 0x5, 0xca, 0x47213, 0x1, 0xffff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x3}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0x58, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000840)={r0, 0x20, &(0x7f0000000800)={&(0x7f0000000700)=""/63, 0x3f, 0x0, &(0x7f0000000740)=""/166, 0xa6}}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000880)={0x1, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000008c0), &(0x7f0000000900)=r1}, 0x20) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0xffffffffffffffff, 0x8, 0x10}, 0xc) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r12, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x15}, 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000980)=ANY=[@ANYRES32=r11, @ANYRES32=r13, @ANYBLOB='/\x00'], 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x29, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x6}, @alu={0x4, 0x0, 0xd, 0x7, 0xb, 0xffffffffffffffe0, 0x1b16d76be0c91378}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xb}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @map_fd={0x18, 0x6, 0x1, 0x0, r5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000380)='GPL\x00', 0x1, 0x82, &(0x7f0000000500)=""/130, 0x40f00, 0x0, '\x00', r6, @fallback=0x1e, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0xa, 0x3}, 0x8, 0x10, &(0x7f00000006c0)={0x4, 0x10, 0x5, 0xfffffffa}, 0x10, r7, r1, 0x0, &(0x7f00000009c0)=[r8, r9, r10, r13], 0x0, 0x10, 0x5}, 0x94) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000400)="d8000000140081044e81f782db44b9040a1d08020a000000040000a118000200fe8000000000000008000f0100810401a80016ea1f0008400304000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee40021146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 1.712844428s ago: executing program 2 (id=402): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, 0x0, 0x0}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0xe, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000001000000000000000000000071184e000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0xa, 0x3, 0x106) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x31, 0x0, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x8}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x1e, 0x0, 0x0, 0x20100, 0x0, 0x0, 0x40f00, 0x22, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd}, 0x94) 1.508051748s ago: executing program 0 (id=403): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1c0000005f00071b189da80400008000000000af1f39"], 0xfe33) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x6201, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0030, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_config_ext={0xffffffffffffffff, 0x5d}, 0x10, 0xca, 0x1, 0x0, 0x3, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x6c6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107983, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) close(r4) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(r7, &(0x7f00000002c0)=ANY=[@ANYRES8=r4, @ANYRES8=r8], 0x12) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x18000, 0x0) r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) r11 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_ro(r10, &(0x7f0000000080)='cpuacct.usage_percpu\x00', 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={r11, 0x58, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)=ANY=[@ANYRESOCT=r6, @ANYRES32=r2, @ANYBLOB='/\t\x00\x00\x00\x00\x00\x00\x00\x00\x00\r\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r12, @ANYRES64=r5, @ANYBLOB="00000000030000000100"/28], 0x50) ioctl$TUNSETIFINDEX(r9, 0x400454da, &(0x7f0000000280)=r12) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r13 = perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x6, 0x4a, 0x6, 0x3, 0x0, 0x101, 0x23604, 0xa, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x5, 0x2, @perf_bp={&(0x7f0000000000), 0x6}, 0x8001, 0x5, 0xc8, 0x6, 0x1, 0xfffffbff, 0x400, 0x0, 0xfffffffc, 0x0, 0x10000}, 0x0, 0x6, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r13, 0x4008240b, &(0x7f00000001c0)={0x3, 0x80, 0xf6, 0x33, 0x0, 0x1, 0x0, 0x2, 0x98000, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0xfffffffffffffffb, 0xe99}, 0x109048, 0x8, 0x7, 0x2, 0x9, 0x0, 0x0, 0x0, 0xff, 0x0, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) 726.067256ms ago: executing program 1 (id=404): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xb, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r5 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x10001, 0x0, 0xfffffffc, 0x2}, {0x2}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) recvmsg$unix(r6, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402", 0x11}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r5, 0x84, 0x6e, &(0x7f0000000000)=r8, 0x12) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r9) sendmsg$inet(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d080", 0xfdef}], 0x1, 0x0, 0x0, 0x800300}, 0x20000801) recvmsg(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x312}, 0x40002002) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)="1c0000", 0x3}], 0x1}, 0x0) 660.559089ms ago: executing program 2 (id=405): r0 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000005a000000000018110075480ed6957ebfee17febeba06dc34e8d69d031875c8b06d5f08b9a5ea21671f905a2dd49fe3f7e0560a28453aa6e381d98b53313dfa6248a0509fdb1f932738e32dddd43c932b0a274a535362060d60a034e4a4f3f82a24664ca3991cf8dbde9bf3e849a98b2a01d8edb4d146fe2e5e8dafa627f9c398cedae39f4388049e64b9d2058f1501ecebc2b8e157c57685b077ed24f406c9e86d5aea8f70998fad", @ANYRES32, @ANYRESHEX=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x6, 0x9, 0x0, 0x7, 0x18000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x440, 0xc8, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x55) close(r2) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004091) write$cgroup_devices(r2, 0x0, 0xfffffeff) 419.25381ms ago: executing program 2 (id=406): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x18, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="18080000b838d84c405521c6817e9bdc1ab31c89b40fbbfa24adc780007c21537ed66cba000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000bf9800000000000056080000020000008500000007000000b7000000000000009500000000000000"], &(0x7f0000001140)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfffffc}, 0x94) socket$kcm(0x1e, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0}, 0x10) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xc81e9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x4846, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10305, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x104101, 0x6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8927, &(0x7f0000000cc0)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x13\xec\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xfffffffffffffde3}, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x35, &(0x7f0000000040)=r3, 0x13) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa35f022eb"], 0xcfa4) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f00000006c0)={0x2, 0x80, 0x7, 0x8, 0x17, 0xff, 0x0, 0x7, 0x20140, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340), 0x6}, 0x10002, 0x2, 0x800, 0x6, 0x9, 0xe44, 0x8, 0x0, 0xfdf, 0x0, 0xffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000540)=r4, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, 0x0, 0x10}, 0x20040090) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r8) socket$kcm(0x11, 0xa, 0x300) ioctl$TUNGETVNETLE(r8, 0x8955, &(0x7f0000000040)) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x1, 0x80, 0x3b, 0x9, 0x73, 0x9, 0x0, 0x3, 0x40000, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x9, 0x0, @perf_config_ext={0x6, 0xf62}, 0x200, 0x6, 0x1, 0x7, 0x3ff, 0x1, 0xf000, 0x0, 0x3, 0x0, 0x7}, r9, 0x10, r8, 0x9) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11", 0x3}], 0x1}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x2, 0x6, 0xccd, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$sock(r10, &(0x7f00000009c0)={&(0x7f0000000780)=@pppol2tpv3in6={0x18, 0x1, {0x0, r7, 0x1, 0x4, 0x1, 0x3, {0xa, 0x4e24, 0xf, @private0, 0x4}}}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000800)="db", 0x1}], 0x1, &(0x7f0000000940)=[@mark={{0x14}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}, @mark={{0x14, 0x1, 0x24, 0xf}}], 0x48}, 0x4800) r11 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r11, 0x29, 0x2b, 0x0, 0x108) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@cgroup=r9, 0x1, 0x1, 0x9, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000300)=r5, 0x4) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.88' (ED25519) to the list of known hosts. [ 84.276335][ T5763] cgroup: Unknown subsys name 'net' [ 84.421123][ T5763] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 86.121693][ T5763] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.984520][ T5786] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.993366][ T5786] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.017722][ T5786] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.025887][ T5791] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.034658][ T5791] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.037642][ T5788] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.060757][ T5788] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 88.063329][ T5791] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.075191][ T5788] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.082521][ T5791] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.091556][ T5791] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.100250][ T5791] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 88.101818][ T5789] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.108696][ T5791] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.123458][ T5791] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.123803][ T5789] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.138056][ T5789] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.138316][ T5791] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.153163][ T5791] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.154386][ T5789] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 88.167914][ T5789] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.182109][ T5087] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.196482][ T5789] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 88.205729][ T5789] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.685961][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 88.884815][ T5779] chnl_net:caif_netlink_parms(): no params data found [ 88.897716][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 88.939289][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.947464][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.955489][ T5776] bridge_slave_0: entered allmulticast mode [ 88.963029][ T5776] bridge_slave_0: entered promiscuous mode [ 88.978470][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.985779][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.995752][ T5776] bridge_slave_1: entered allmulticast mode [ 89.004144][ T5776] bridge_slave_1: entered promiscuous mode [ 89.074637][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 89.152179][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.186773][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.268668][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.278125][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.285849][ T5775] bridge_slave_0: entered allmulticast mode [ 89.293435][ T5775] bridge_slave_0: entered promiscuous mode [ 89.302368][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.309612][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.317084][ T5775] bridge_slave_1: entered allmulticast mode [ 89.324315][ T5775] bridge_slave_1: entered promiscuous mode [ 89.354531][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.361846][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.369030][ T5779] bridge_slave_0: entered allmulticast mode [ 89.376451][ T5779] bridge_slave_0: entered promiscuous mode [ 89.385788][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.393103][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.400352][ T5779] bridge_slave_1: entered allmulticast mode [ 89.408232][ T5779] bridge_slave_1: entered promiscuous mode [ 89.427931][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.435253][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.442958][ T5777] bridge_slave_0: entered allmulticast mode [ 89.450061][ T5777] bridge_slave_0: entered promiscuous mode [ 89.461856][ T5776] team0: Port device team_slave_0 added [ 89.468101][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.475947][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.483598][ T5777] bridge_slave_1: entered allmulticast mode [ 89.491158][ T5777] bridge_slave_1: entered promiscuous mode [ 89.532310][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.543774][ T5776] team0: Port device team_slave_1 added [ 89.552114][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.584517][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.597496][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.640277][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.687920][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.709585][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.716970][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.743212][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.765570][ T5775] team0: Port device team_slave_0 added [ 89.775184][ T5775] team0: Port device team_slave_1 added [ 89.784780][ T5779] team0: Port device team_slave_0 added [ 89.794057][ T5779] team0: Port device team_slave_1 added [ 89.826144][ T5777] team0: Port device team_slave_0 added [ 89.838938][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.849338][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.875742][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.909298][ T5777] team0: Port device team_slave_1 added [ 89.961062][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.968085][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.994594][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.007500][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.014680][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.040962][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.076382][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.083585][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.109998][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.128312][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.135501][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.163920][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.176252][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.183666][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.209804][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.222909][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.229922][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.256912][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.257368][ T5791] Bluetooth: hci2: command tx timeout [ 90.273673][ T51] Bluetooth: hci3: command tx timeout [ 90.274235][ T5789] Bluetooth: hci0: command tx timeout [ 90.285478][ T5789] Bluetooth: hci1: command tx timeout [ 90.296956][ T5776] hsr_slave_0: entered promiscuous mode [ 90.303968][ T5776] hsr_slave_1: entered promiscuous mode [ 90.381327][ T5779] hsr_slave_0: entered promiscuous mode [ 90.389002][ T5779] hsr_slave_1: entered promiscuous mode [ 90.396498][ T5779] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.404846][ T5779] Cannot create hsr debugfs directory [ 90.441762][ T5775] hsr_slave_0: entered promiscuous mode [ 90.448457][ T5775] hsr_slave_1: entered promiscuous mode [ 90.455261][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.463355][ T5775] Cannot create hsr debugfs directory [ 90.543331][ T5777] hsr_slave_0: entered promiscuous mode [ 90.549889][ T5777] hsr_slave_1: entered promiscuous mode [ 90.557249][ T5777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.564990][ T5777] Cannot create hsr debugfs directory [ 90.995981][ T5776] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.009558][ T5776] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.026466][ T5776] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.038510][ T5776] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.133291][ T5775] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.155965][ T5775] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.186712][ T5775] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.204350][ T5775] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.249934][ T5779] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.271345][ T5779] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.292550][ T5779] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.303621][ T5779] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.444895][ T5777] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.455234][ T5777] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.467845][ T5777] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.479982][ T5777] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.536314][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.585801][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.647430][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.660139][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.678491][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.726715][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.734176][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.757152][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.764377][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.777239][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.784434][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.806668][ T1140] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.813927][ T1140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.841864][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.874551][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.899138][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.906358][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.968392][ T2983] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.975633][ T2983] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.996222][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.016363][ T5775] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 92.037877][ T1140] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.045077][ T1140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.086687][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.093949][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.311453][ T5791] Bluetooth: hci0: command tx timeout [ 92.318292][ T5789] Bluetooth: hci3: command tx timeout [ 92.326002][ T5789] Bluetooth: hci1: command tx timeout [ 92.333861][ T5791] Bluetooth: hci2: command tx timeout [ 92.610315][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.648697][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.798468][ T5776] veth0_vlan: entered promiscuous mode [ 92.839482][ T5775] veth0_vlan: entered promiscuous mode [ 92.849199][ T5776] veth1_vlan: entered promiscuous mode [ 92.901583][ T5775] veth1_vlan: entered promiscuous mode [ 92.949718][ T5776] veth0_macvtap: entered promiscuous mode [ 92.965381][ T5776] veth1_macvtap: entered promiscuous mode [ 92.976710][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.999032][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.027093][ T5775] veth0_macvtap: entered promiscuous mode [ 93.039731][ T5775] veth1_macvtap: entered promiscuous mode [ 93.058209][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.119975][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.145014][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.156307][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.169314][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.187970][ T5776] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.201726][ T5776] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.211702][ T5776] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.220754][ T5776] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.258347][ T5777] veth0_vlan: entered promiscuous mode [ 93.268916][ T5779] veth0_vlan: entered promiscuous mode [ 93.289665][ T5779] veth1_vlan: entered promiscuous mode [ 93.304009][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.317473][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.338816][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.369987][ T5775] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.380106][ T5775] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.390019][ T5775] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.398833][ T5775] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.417879][ T5777] veth1_vlan: entered promiscuous mode [ 93.564313][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.568914][ T5779] veth0_macvtap: entered promiscuous mode [ 93.584863][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.618867][ T5777] veth0_macvtap: entered promiscuous mode [ 93.644200][ T5779] veth1_macvtap: entered promiscuous mode [ 93.675508][ T5777] veth1_macvtap: entered promiscuous mode [ 93.683938][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.696663][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.746101][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.766177][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.779049][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.789944][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.812460][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.821735][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.829855][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.865619][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.878600][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.888619][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.899171][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.909551][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.925108][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.938589][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.969890][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.010460][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.030828][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.048398][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.070056][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.119240][ T5779] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.128579][ T5779] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.129595][ C1] hrtimer: interrupt took 84362 ns [ 94.139346][ T5779] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.152406][ T5779] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.192578][ T2941] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.201856][ T2941] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.223371][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.263887][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.270223][ T5846] netlink: 'syz.2.3': attribute type 29 has an invalid length. [ 94.286762][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.299501][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.304482][ T5847] netlink: 'syz.2.3': attribute type 29 has an invalid length. [ 94.319725][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.330675][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.342985][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.357426][ T5777] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.367997][ T5777] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.380145][ T5777] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.389506][ T5777] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.399096][ T51] Bluetooth: hci1: command tx timeout [ 94.403901][ T5789] Bluetooth: hci2: command tx timeout [ 94.405441][ T51] Bluetooth: hci3: command tx timeout [ 94.409948][ T5789] Bluetooth: hci0: command tx timeout [ 94.446156][ T5846] netlink: 'syz.2.3': attribute type 29 has an invalid length. [ 94.458934][ T5849] netlink: 'syz.2.3': attribute type 21 has an invalid length. [ 94.491917][ T5849] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3'. [ 94.581687][ T2983] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.589587][ T2983] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.773478][ T2941] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.786377][ T2941] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.861740][ T2941] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.905099][ T2941] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.021019][ T2983] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.029028][ T2983] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.526115][ T5858] netlink: 144 bytes leftover after parsing attributes in process `syz.3.4'. [ 96.236055][ T5858] team0: Port device team_slave_0 removed [ 96.259688][ T5858] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 96.309460][ T5866] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 96.366023][ T5858] syz.3.4 (5858) used greatest stack depth: 19496 bytes left [ 96.447592][ T5869] netlink: 63743 bytes leftover after parsing attributes in process `syz.2.7'. [ 96.471092][ T5789] Bluetooth: hci3: command tx timeout [ 96.472942][ T51] Bluetooth: hci1: command tx timeout [ 96.476588][ T5789] Bluetooth: hci0: command tx timeout [ 96.482236][ T5791] Bluetooth: hci2: command tx timeout [ 96.605637][ T5864] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 96.802364][ T5877] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f [ 96.837424][ T5864] syzkaller0: entered promiscuous mode [ 96.846646][ T5864] syzkaller0: entered allmulticast mode [ 97.442578][ T178] cfg80211: failed to load regulatory.db [ 97.755443][ T5891] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 98.011948][ T5895] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.13'. [ 99.377422][ T5897] netlink: 'syz.1.14': attribute type 29 has an invalid length. [ 100.810087][ T5887] netlink: 'syz.2.11': attribute type 21 has an invalid length. [ 100.822348][ T5887] netlink: 128 bytes leftover after parsing attributes in process `syz.2.11'. [ 100.836841][ T5887] netlink: 'syz.2.11': attribute type 4 has an invalid length. [ 100.845583][ T5887] netlink: 'syz.2.11': attribute type 5 has an invalid length. [ 100.858414][ T5887] netlink: 3 bytes leftover after parsing attributes in process `syz.2.11'. [ 100.951431][ T5897] netlink: 'syz.1.14': attribute type 29 has an invalid length. [ 101.018934][ T5898] netlink: 'syz.1.14': attribute type 29 has an invalid length. [ 101.103318][ T5905] netlink: 'syz.2.16': attribute type 21 has an invalid length. [ 101.111724][ T5905] netlink: 128 bytes leftover after parsing attributes in process `syz.2.16'. [ 101.137020][ T5905] netlink: 'syz.2.16': attribute type 4 has an invalid length. [ 102.219061][ T5924] netlink: 'syz.2.22': attribute type 29 has an invalid length. [ 102.222693][ T5921] netlink: 132 bytes leftover after parsing attributes in process `syz.0.23'. [ 102.306406][ T5925] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.22'. [ 102.348453][ T5924] netlink: 'syz.2.22': attribute type 29 has an invalid length. [ 103.032840][ T5937] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.27'. [ 103.044101][ T5937] netlink: 16126 bytes leftover after parsing attributes in process `syz.0.27'. [ 105.138125][ T5966] lo: entered allmulticast mode [ 105.174230][ T5966] lo: entered promiscuous mode [ 105.199725][ T5966] lo: left allmulticast mode [ 105.783014][ T5976] validate_nla: 3 callbacks suppressed [ 105.783032][ T5976] netlink: 'syz.1.39': attribute type 10 has an invalid length. [ 105.836823][ T5976] team0: Port device netdevsim0 added [ 105.852171][ T5973] netlink: 'syz.1.39': attribute type 10 has an invalid length. [ 106.098206][ T5981] netlink: 60 bytes leftover after parsing attributes in process `syz.2.41'. [ 106.138718][ T5973] team0: Port device netdevsim0 removed [ 106.209421][ T5973] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 106.268683][ T5975] netlink: 'syz.1.39': attribute type 1 has an invalid length. [ 106.303538][ T5975] netlink: 'syz.1.39': attribute type 4 has an invalid length. [ 106.327540][ T5975] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.39'. [ 106.337356][ T5981] netlink: 60 bytes leftover after parsing attributes in process `syz.2.41'. [ 106.407475][ T5986] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.43'. [ 106.479125][ T5986] netlink: 16126 bytes leftover after parsing attributes in process `syz.0.43'. [ 106.895370][ T5984] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 106.922647][ T5984] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 107.398198][ T6004] lo: entered allmulticast mode [ 107.463250][ T6004] lo: entered promiscuous mode [ 107.500196][ T6004] lo: left allmulticast mode [ 107.966869][ T6016] veth0_vlan: entered allmulticast mode [ 108.426861][ T6019] veth0_vlan: left promiscuous mode [ 108.438737][ T6019] veth0_vlan: entered promiscuous mode [ 108.467777][ T6017] warning: `syz.0.59' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 108.802239][ T6025] mac80211_hwsim hwsim9 .3c: renamed from wlan1 (while UP) [ 109.334899][ T6033] Zero length message leads to an empty skb [ 109.724958][ T6046] netlink: 'syz.1.61': attribute type 2 has an invalid length. [ 109.752819][ T6046] FAULT_INJECTION: forcing a failure. [ 109.752819][ T6046] name failslab, interval 1, probability 0, space 0, times 1 [ 109.800602][ T6046] CPU: 1 PID: 6046 Comm: syz.1.61 Not tainted syzkaller #0 [ 109.807916][ T6046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 109.818045][ T6046] Call Trace: [ 109.821374][ T6046] [ 109.824397][ T6046] dump_stack_lvl+0x18c/0x250 [ 109.829161][ T6046] ? show_regs_print_info+0x20/0x20 [ 109.834442][ T6046] ? load_image+0x420/0x420 [ 109.839012][ T6046] ? __might_sleep+0xe0/0xe0 [ 109.843671][ T6046] ? __lock_acquire+0x7d80/0x7d80 [ 109.848768][ T6046] should_fail_ex+0x394/0x4c0 [ 109.853524][ T6046] should_failslab+0x9/0x20 [ 109.858096][ T6046] slab_pre_alloc_hook+0x59/0x300 [ 109.863204][ T6046] kmem_cache_alloc+0x5a/0x2c0 [ 109.868043][ T6046] ? fib_table_insert+0x49f/0x1b00 [ 109.873228][ T6046] fib_table_insert+0x49f/0x1b00 [ 109.878245][ T6046] ? __lock_acquire+0x7d80/0x7d80 [ 109.883341][ T6046] ? l3mdev_fib_table+0x18/0x160 [ 109.888341][ T6046] ? fib_new_table+0x10a/0x2d0 [ 109.893172][ T6046] fib_magic+0x2ce/0x3b0 [ 109.897485][ T6046] ? fib_add_ifaddr+0x5d0/0x5d0 [ 109.902417][ T6046] ? addr_event+0x83/0x470 [ 109.907011][ T6046] fib_add_ifaddr+0x139/0x5d0 [ 109.911765][ T6046] fib_inetaddr_event+0x140/0x1d0 [ 109.916946][ T6046] notifier_call_chain+0x18f/0x380 [ 109.922327][ T6046] blocking_notifier_call_chain+0x6a/0x90 [ 109.928112][ T6046] __inet_insert_ifa+0x9c8/0xbd0 [ 109.933165][ T6046] ? inet_rcu_free_ifa+0xc0/0xc0 [ 109.938158][ T6046] inet_rtm_newaddr+0xb93/0x1a20 [ 109.943150][ T6046] ? inet_netconf_fill_devconf+0x8f0/0x8f0 [ 109.949034][ T6046] ? inet_netconf_fill_devconf+0x8f0/0x8f0 [ 109.954922][ T6046] rtnetlink_rcv_msg+0x843/0xf90 [ 109.959920][ T6046] ? rtnetlink_rcv_msg+0x220/0xf90 [ 109.965083][ T6046] ? perf_trace_run_bpf_submit+0x125/0x1c0 [ 109.970951][ T6046] ? rtnetlink_bind+0x80/0x80 [ 109.975678][ T6046] ? perf_trace_preemptirq_template+0xac/0x330 [ 109.981881][ T6046] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 109.987905][ T6046] ? lock_chain_count+0x20/0x20 [ 109.992801][ T6046] ? __local_bh_enable_ip+0x13a/0x1c0 [ 109.998209][ T6046] ? lockdep_hardirqs_on+0x98/0x150 [ 110.003443][ T6046] ? __local_bh_enable_ip+0x13a/0x1c0 [ 110.008858][ T6046] ? _local_bh_enable+0xa0/0xa0 [ 110.013777][ T6046] ? __dev_queue_xmit+0x272/0x37e0 [ 110.019073][ T6046] ? __dev_queue_xmit+0x1329/0x37e0 [ 110.024333][ T6046] ? __dev_queue_xmit+0x272/0x37e0 [ 110.029497][ T6046] ? ref_tracker_free+0x686/0x830 [ 110.034579][ T6046] netlink_rcv_skb+0x235/0x4c0 [ 110.039801][ T6046] ? rtnetlink_bind+0x80/0x80 [ 110.044531][ T6046] ? netlink_ack+0x1160/0x1160 [ 110.049347][ T6046] ? __lock_acquire+0x7d80/0x7d80 [ 110.054427][ T6046] ? netlink_deliver_tap+0x2e/0x1b0 [ 110.059676][ T6046] netlink_unicast+0x7b1/0x930 [ 110.064505][ T6046] netlink_sendmsg+0x8d0/0xbf0 [ 110.069321][ T6046] ? netlink_getsockopt+0x590/0x590 [ 110.074559][ T6046] ? apparmor_socket_sendmsg+0x8e/0x330 [ 110.080152][ T6046] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 110.085477][ T6046] ? security_socket_sendmsg+0x80/0xa0 [ 110.090969][ T6046] ? netlink_getsockopt+0x590/0x590 [ 110.096251][ T6046] ____sys_sendmsg+0x61b/0x980 [ 110.101198][ T6046] ? __asan_memset+0x22/0x40 [ 110.105848][ T6046] ? __sys_sendmsg_sock+0x30/0x30 [ 110.110923][ T6046] ? __import_iovec+0x5f2/0x850 [ 110.115827][ T6046] ? import_iovec+0x73/0xa0 [ 110.120385][ T6046] ___sys_sendmsg+0x2a6/0x360 [ 110.125122][ T6046] ? __sys_sendmsg+0x2b0/0x2b0 [ 110.129952][ T6046] ? trace_call_bpf+0xc3/0x6c0 [ 110.134792][ T6046] __se_sys_sendmsg+0x1d0/0x2c0 [ 110.139709][ T6046] ? __x64_sys_sendmsg+0x80/0x80 [ 110.144704][ T6046] ? lockdep_hardirqs_on+0x98/0x150 [ 110.150042][ T6046] do_syscall_64+0x55/0xb0 [ 110.154533][ T6046] ? clear_bhb_loop+0x40/0x90 [ 110.159309][ T6046] ? clear_bhb_loop+0x40/0x90 [ 110.164068][ T6046] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 110.170033][ T6046] RIP: 0033:0x7f2f15f9e159 [ 110.174524][ T6046] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.194201][ T6046] RSP: 002b:00007f2f16e94028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 110.202671][ T6046] RAX: ffffffffffffffda RBX: 00007f2f16225fa0 RCX: 00007f2f15f9e159 [ 110.210686][ T6046] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 110.218699][ T6046] RBP: 00007f2f16e94090 R08: 0000000000000000 R09: 0000000000000000 [ 110.226719][ T6046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 110.234728][ T6046] R13: 00007f2f16226038 R14: 00007f2f16225fa0 R15: 00007ffe189296f8 [ 110.242755][ T6046] [ 110.670188][ T6057] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.67'. [ 110.690504][ T6057] netlink: 16126 bytes leftover after parsing attributes in process `syz.3.67'. [ 111.096788][ T6070] netlink: 60 bytes leftover after parsing attributes in process `syz.3.70'. [ 111.259015][ T6070] netlink: 60 bytes leftover after parsing attributes in process `syz.3.70'. [ 111.331410][ T6067] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 111.338511][ T6067] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 112.085291][ T6087] netlink: 'syz.0.72': attribute type 10 has an invalid length. [ 112.099261][ T6086] netlink: 'syz.0.72': attribute type 10 has an invalid length. [ 112.173089][ T6086] team0: Port device netdevsim0 added [ 112.361679][ T6093] lo: entered allmulticast mode [ 112.416263][ T6093] lo: entered promiscuous mode [ 112.454211][ T6093] lo: left allmulticast mode [ 112.463247][ T6080] netlink: 'syz.0.72': attribute type 1 has an invalid length. [ 112.510592][ T6080] netlink: 'syz.0.72': attribute type 4 has an invalid length. [ 112.571571][ T6080] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.72'. [ 113.055805][ T6109] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.80'. [ 113.086951][ T6109] netlink: 16126 bytes leftover after parsing attributes in process `syz.1.80'. [ 114.025186][ T6121] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 114.032522][ T6121] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 114.386538][ T6123] netlink: 'syz.3.88': attribute type 10 has an invalid length. [ 114.509535][ T6128] netlink: 60 bytes leftover after parsing attributes in process `syz.0.85'. [ 114.629233][ T6123] team0: Port device netdevsim0 added [ 114.674627][ T6129] netlink: 'syz.3.88': attribute type 10 has an invalid length. [ 114.831454][ T6129] team0: Port device netdevsim0 removed [ 114.902114][ T6129] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 114.976812][ T6128] netlink: 60 bytes leftover after parsing attributes in process `syz.0.85'. [ 115.080074][ T6130] netlink: 'syz.3.88': attribute type 1 has an invalid length. [ 115.131023][ T6130] netlink: 'syz.3.88': attribute type 4 has an invalid length. [ 115.138687][ T6130] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.88'. [ 116.943017][ T6159] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 116.968083][ T6159] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 117.465997][ T6174] netlink: 'syz.2.100': attribute type 10 has an invalid length. [ 117.506067][ T6174] team0: Port device netdevsim0 added [ 117.619296][ T6168] netlink: 'syz.2.100': attribute type 10 has an invalid length. [ 117.976842][ T6168] team0: Port device netdevsim0 removed [ 118.125759][ T6168] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 118.143713][ T6174] netlink: 'syz.2.100': attribute type 1 has an invalid length. [ 118.161663][ T6174] netlink: 'syz.2.100': attribute type 4 has an invalid length. [ 118.178569][ T6174] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.100'. [ 119.894460][ T6206] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.114'. [ 119.930489][ T6206] netlink: 16126 bytes leftover after parsing attributes in process `syz.3.114'. [ 122.113650][ T6236] netlink: 132 bytes leftover after parsing attributes in process `syz.1.124'. [ 122.648938][ T6241] netlink: 'syz.3.125': attribute type 29 has an invalid length. [ 122.657462][ T6241] netlink: 'syz.3.125': attribute type 29 has an invalid length. [ 122.672370][ T6239] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.127'. [ 122.682205][ T6239] netlink: 16126 bytes leftover after parsing attributes in process `syz.2.127'. [ 122.702452][ T6241] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.125'. [ 122.732386][ T6241] netlink: 'syz.3.125': attribute type 29 has an invalid length. [ 122.749511][ T6241] netlink: 'syz.3.125': attribute type 29 has an invalid length. [ 122.759417][ T6241] netlink: 'syz.3.125': attribute type 29 has an invalid length. [ 124.579687][ T6275] netlink: 'syz.1.139': attribute type 29 has an invalid length. [ 124.610354][ T6275] netlink: 'syz.1.139': attribute type 29 has an invalid length. [ 124.708581][ T6273] netlink: 132 bytes leftover after parsing attributes in process `syz.2.138'. [ 124.727981][ T6275] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.139'. [ 124.763946][ T6275] netlink: 'syz.1.139': attribute type 29 has an invalid length. [ 124.774846][ T6275] netlink: 'syz.1.139': attribute type 29 has an invalid length. [ 124.815050][ T6275] netlink: 'syz.1.139': attribute type 29 has an invalid length. [ 126.115322][ T6312] netlink: 128 bytes leftover after parsing attributes in process `syz.3.150'. [ 126.358898][ T6317] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.151'. [ 127.540325][ T6351] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.164'. [ 129.223311][ T6365] validate_nla: 10 callbacks suppressed [ 129.223329][ T6365] netlink: 'syz.1.168': attribute type 21 has an invalid length. [ 129.258358][ T6365] netlink: 128 bytes leftover after parsing attributes in process `syz.1.168'. [ 129.269446][ T6365] netlink: 'syz.1.168': attribute type 4 has an invalid length. [ 129.286989][ T6365] netlink: 'syz.1.168': attribute type 5 has an invalid length. [ 129.304324][ T6365] netlink: 3 bytes leftover after parsing attributes in process `syz.1.168'. [ 129.616413][ T6376] netlink: 'syz.1.172': attribute type 21 has an invalid length. [ 129.637202][ T6376] netlink: 128 bytes leftover after parsing attributes in process `syz.1.172'. [ 129.650498][ T6376] netlink: 'syz.1.172': attribute type 4 has an invalid length. [ 130.079569][ T6387] netlink: 'syz.3.175': attribute type 29 has an invalid length. [ 130.088561][ T6387] netlink: 'syz.3.175': attribute type 29 has an invalid length. [ 130.102646][ T6387] netlink: 'syz.3.175': attribute type 29 has an invalid length. [ 130.900654][ T6395] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.178'. [ 131.057247][ T6404] netlink: 'syz.0.182': attribute type 21 has an invalid length. [ 131.077253][ T6404] netlink: 128 bytes leftover after parsing attributes in process `syz.0.182'. [ 131.088872][ T6404] netlink: 'syz.0.182': attribute type 4 has an invalid length. [ 131.121597][ T6404] netlink: 3 bytes leftover after parsing attributes in process `syz.0.182'. [ 131.501419][ T6413] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f [ 131.656773][ T6416] netlink: 63743 bytes leftover after parsing attributes in process `syz.0.188'. [ 132.472473][ T6428] netlink: 128 bytes leftover after parsing attributes in process `syz.0.190'. [ 133.275781][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.283345][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.515142][ T6441] netlink: 128 bytes leftover after parsing attributes in process `syz.3.196'. [ 133.531502][ T6441] netlink: 3 bytes leftover after parsing attributes in process `syz.3.196'. [ 133.892350][ T6442] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.194'. [ 134.153854][ T6451] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f [ 134.264311][ T6459] netlink: 63743 bytes leftover after parsing attributes in process `syz.3.201'. [ 134.342631][ T6452] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 134.434094][ T6452] syzkaller0: entered promiscuous mode [ 134.439796][ T6452] syzkaller0: entered allmulticast mode [ 137.316716][ T6475] netlink: 63743 bytes leftover after parsing attributes in process `syz.1.215'. [ 138.333873][ T6480] netlink: 144 bytes leftover after parsing attributes in process `syz.2.208'. [ 138.533926][ T6480] team0: Port device team_slave_0 removed [ 138.558425][ T6480] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 138.663450][ T6491] validate_nla: 9 callbacks suppressed [ 138.663563][ T6491] netlink: 'syz.1.211': attribute type 29 has an invalid length. [ 138.699214][ T6493] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f [ 138.711929][ T6496] netlink: 'syz.1.211': attribute type 29 has an invalid length. [ 138.728562][ T6491] netlink: 'syz.1.211': attribute type 29 has an invalid length. [ 138.908554][ T6491] netlink: 'syz.1.211': attribute type 21 has an invalid length. [ 138.919053][ T6491] netlink: 164 bytes leftover after parsing attributes in process `syz.1.211'. [ 139.169198][ T6497] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 139.360075][ T6497] syzkaller0: entered promiscuous mode [ 139.380137][ T6497] syzkaller0: entered allmulticast mode [ 139.394417][ T6511] Illegal XDP return value 16128 on prog (id 185) dev N/A, expect packet loss! [ 142.333574][ T6508] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.220'. [ 142.758225][ T6529] netlink: 144 bytes leftover after parsing attributes in process `syz.1.226'. [ 143.210857][ T6537] netlink: 'syz.3.229': attribute type 29 has an invalid length. [ 143.278348][ T6539] netlink: 'syz.3.229': attribute type 29 has an invalid length. [ 143.311496][ T6529] team0: Port device team_slave_0 removed [ 143.336736][ T6529] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 143.421540][ T6537] netlink: 'syz.3.229': attribute type 29 has an invalid length. [ 143.497623][ T6540] netlink: 'syz.3.229': attribute type 21 has an invalid length. [ 143.527277][ T6540] netlink: 164 bytes leftover after parsing attributes in process `syz.3.229'. [ 143.601236][ T6529] syz.1.226 (6529) used greatest stack depth: 19144 bytes left [ 147.512703][ T6574] netlink: 144 bytes leftover after parsing attributes in process `syz.0.241'. [ 147.741443][ T6574] team0: Port device team_slave_0 removed [ 147.748185][ T6574] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 148.975284][ T6607] Q6\bY4: renamed from lo (while UP) [ 149.389767][ T6615] FAULT_INJECTION: forcing a failure. [ 149.389767][ T6615] name failslab, interval 1, probability 0, space 0, times 0 [ 149.429326][ T6615] CPU: 0 PID: 6615 Comm: syz.1.257 Not tainted syzkaller #0 [ 149.436718][ T6615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 149.446832][ T6615] Call Trace: [ 149.450152][ T6615] [ 149.453127][ T6615] dump_stack_lvl+0x18c/0x250 [ 149.457894][ T6615] ? show_regs_print_info+0x20/0x20 [ 149.463153][ T6615] ? load_image+0x420/0x420 [ 149.467722][ T6615] ? __might_sleep+0xe0/0xe0 [ 149.472377][ T6615] ? __lock_acquire+0x7d80/0x7d80 [ 149.477553][ T6615] should_fail_ex+0x394/0x4c0 [ 149.482327][ T6615] should_failslab+0x9/0x20 [ 149.486889][ T6615] slab_pre_alloc_hook+0x59/0x300 [ 149.491984][ T6615] ? __lock_acquire+0x7d80/0x7d80 [ 149.497160][ T6615] kmem_cache_alloc_node+0x5e/0x310 [ 149.502421][ T6615] ? __alloc_skb+0x103/0x2c0 [ 149.507170][ T6615] __alloc_skb+0x103/0x2c0 [ 149.511702][ T6615] netlink_sendmsg+0x66a/0xbf0 [ 149.516544][ T6615] ? netlink_getsockopt+0x590/0x590 [ 149.521828][ T6615] ? netlink_getsockopt+0x590/0x590 [ 149.527098][ T6615] ____sys_sendmsg+0x61b/0x980 [ 149.531941][ T6615] ? __asan_memset+0x22/0x40 [ 149.536614][ T6615] ? __sys_sendmsg_sock+0x30/0x30 [ 149.541711][ T6615] ? __import_iovec+0x5f2/0x850 [ 149.546807][ T6615] ? import_iovec+0x73/0xa0 [ 149.551404][ T6615] ___sys_sendmsg+0x2a6/0x360 [ 149.556187][ T6615] ? __sys_sendmsg+0x2b0/0x2b0 [ 149.561075][ T6615] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 149.566905][ T6615] __se_sys_sendmsg+0x1d0/0x2c0 [ 149.571847][ T6615] ? __x64_sys_sendmsg+0x80/0x80 [ 149.576856][ T6615] ? lockdep_hardirqs_on+0x98/0x150 [ 149.582140][ T6615] ? audit_tree_destroy_watch+0x20/0x20 [ 149.587889][ T6615] do_syscall_64+0x55/0xb0 [ 149.592385][ T6615] ? clear_bhb_loop+0x40/0x90 [ 149.597359][ T6615] ? clear_bhb_loop+0x40/0x90 [ 149.602207][ T6615] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 149.608172][ T6615] RIP: 0033:0x7f2f15f9e159 [ 149.612667][ T6615] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 149.633027][ T6615] RSP: 002b:00007f2f16e94028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 149.641501][ T6615] RAX: ffffffffffffffda RBX: 00007f2f16225fa0 RCX: 00007f2f15f9e159 [ 149.649601][ T6615] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 149.657616][ T6615] RBP: 00007f2f16e94090 R08: 0000000000000000 R09: 0000000000000000 [ 149.665633][ T6615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 149.673650][ T6615] R13: 00007f2f16226038 R14: 00007f2f16225fa0 R15: 00007ffe189296f8 [ 149.681801][ T6615] [ 152.184189][ T6645] FAULT_INJECTION: forcing a failure. [ 152.184189][ T6645] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 152.223327][ T6645] CPU: 1 PID: 6645 Comm: syz.1.268 Not tainted syzkaller #0 [ 152.230761][ T6645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 152.240876][ T6645] Call Trace: [ 152.244242][ T6645] [ 152.247229][ T6645] dump_stack_lvl+0x18c/0x250 [ 152.251992][ T6645] ? show_regs_print_info+0x20/0x20 [ 152.257297][ T6645] ? load_image+0x420/0x420 [ 152.261875][ T6645] ? __might_fault+0xaa/0x120 [ 152.266614][ T6645] ? __lock_acquire+0x7d80/0x7d80 [ 152.271710][ T6645] should_fail_ex+0x394/0x4c0 [ 152.276457][ T6645] _copy_from_user+0x2f/0xe0 [ 152.281107][ T6645] generic_map_update_batch+0x58c/0x800 [ 152.286728][ T6645] ? rcu_read_unlock+0xa0/0xa0 [ 152.291567][ T6645] ? __fdget+0x180/0x210 [ 152.295885][ T6645] ? rcu_read_unlock+0xa0/0xa0 [ 152.300799][ T6645] bpf_map_do_batch+0x3f2/0x600 [ 152.305760][ T6645] ? bpf_lsm_key_free+0x10/0x10 [ 152.310703][ T6645] __sys_bpf+0x381/0x890 [ 152.315007][ T6645] ? read_tsc+0x9/0x20 [ 152.319221][ T6645] ? bpf_link_show_fdinfo+0x560/0x560 [ 152.324693][ T6645] ? lock_chain_count+0x20/0x20 [ 152.329603][ T6645] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 152.335647][ T6645] __x64_sys_bpf+0x7c/0x90 [ 152.340124][ T6645] do_syscall_64+0x55/0xb0 [ 152.344580][ T6645] ? clear_bhb_loop+0x40/0x90 [ 152.349337][ T6645] ? clear_bhb_loop+0x40/0x90 [ 152.354054][ T6645] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 152.359983][ T6645] RIP: 0033:0x7f2f15f9e159 [ 152.364437][ T6645] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 152.384104][ T6645] RSP: 002b:00007f2f16e94028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 152.392574][ T6645] RAX: ffffffffffffffda RBX: 00007f2f16225fa0 RCX: 00007f2f15f9e159 [ 152.400604][ T6645] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a [ 152.408631][ T6645] RBP: 00007f2f16e94090 R08: 0000000000000000 R09: 0000000000000000 [ 152.416753][ T6645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 152.424788][ T6645] R13: 00007f2f16226038 R14: 00007f2f16225fa0 R15: 00007ffe189296f8 [ 152.432909][ T6645] [ 152.683550][ T5789] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 157.055514][ T6694] FAULT_INJECTION: forcing a failure. [ 157.055514][ T6694] name failslab, interval 1, probability 0, space 0, times 0 [ 157.140917][ T6694] CPU: 1 PID: 6694 Comm: syz.1.285 Not tainted syzkaller #0 [ 157.148346][ T6694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 157.158501][ T6694] Call Trace: [ 157.161867][ T6694] [ 157.164888][ T6694] dump_stack_lvl+0x18c/0x250 [ 157.169679][ T6694] ? show_regs_print_info+0x20/0x20 [ 157.174975][ T6694] ? load_image+0x420/0x420 [ 157.179595][ T6694] ? verify_lock_unused+0x140/0x140 [ 157.184892][ T6694] ? perf_trace_lock_acquire+0x342/0x400 [ 157.190628][ T6694] should_fail_ex+0x394/0x4c0 [ 157.195428][ T6694] should_failslab+0x9/0x20 [ 157.200030][ T6694] slab_pre_alloc_hook+0x59/0x300 [ 157.205353][ T6694] ? __asan_memset+0x22/0x40 [ 157.210053][ T6694] kmem_cache_alloc_node+0x5e/0x310 [ 157.215336][ T6694] ? __alloc_skb+0x103/0x2c0 [ 157.220014][ T6694] __alloc_skb+0x103/0x2c0 [ 157.224549][ T6694] _sctp_make_chunk+0x5b/0x430 [ 157.229405][ T6694] sctp_make_init+0x5e7/0xf80 [ 157.234181][ T6694] ? sctp_addto_chunk+0x220/0x220 [ 157.239282][ T6694] ? kernel_text_address+0xa0/0xd0 [ 157.244466][ T6694] ? __kernel_text_address+0xd/0x30 [ 157.249739][ T6694] ? stack_trace_save+0x100/0x100 [ 157.254834][ T6694] ? arch_stack_walk+0x160/0x190 [ 157.259908][ T6694] sctp_sf_do_prm_asoc+0xcf/0x3e0 [ 157.265018][ T6694] sctp_do_sm+0x23b/0x5b80 [ 157.269499][ T6694] ? sctp_cname+0x110/0x110 [ 157.274068][ T6694] ? perf_trace_preemptirq_template+0x269/0x330 [ 157.280418][ T6694] ? kasan_set_track+0x4e/0x70 [ 157.285249][ T6694] ? __kasan_kmalloc+0x8f/0xa0 [ 157.290072][ T6694] ? sctp_stream_init_ext+0x57/0x170 [ 157.295426][ T6694] ? sctp_sendmsg_to_asoc+0x12cc/0x17f0 [ 157.301051][ T6694] ? sctp_generate_t3_rtx_event+0x340/0x340 [ 157.307027][ T6694] ? __se_sys_sendmsg+0x1d0/0x2c0 [ 157.312115][ T6694] ? do_syscall_64+0x55/0xb0 [ 157.316769][ T6694] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 157.322998][ T6694] ? __sk_mem_raise_allocated+0x97b/0x11e0 [ 157.328894][ T6694] sctp_primitive_ASSOCIATE+0x95/0xc0 [ 157.334355][ T6694] sctp_sendmsg_to_asoc+0x1009/0x17f0 [ 157.339868][ T6694] ? sctp_sendmsg_check_sflags+0x2d0/0x2d0 [ 157.345743][ T6694] ? __sctp_connect+0xd80/0xd80 [ 157.350659][ T6694] ? __local_bh_enable_ip+0x13a/0x1c0 [ 157.356109][ T6694] ? _local_bh_enable+0xa0/0xa0 [ 157.361038][ T6694] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 157.366925][ T6694] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 157.372895][ T6694] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 157.378516][ T6694] ? security_sctp_bind_connect+0x89/0xb0 [ 157.384314][ T6694] sctp_sendmsg+0x1afa/0x27b0 [ 157.389101][ T6694] ? sctp_getsockopt+0xb60/0xb60 [ 157.394122][ T6694] ? aa_af_perm+0x330/0x330 [ 157.398711][ T6694] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 157.405200][ T6694] ? sock_rps_record_flow+0x19/0x3f0 [ 157.410568][ T6694] ? inet_sendmsg+0x7e/0x2a0 [ 157.415215][ T6694] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 157.420573][ T6694] ? inet_send_prepare+0x250/0x250 [ 157.425747][ T6694] ____sys_sendmsg+0x61b/0x980 [ 157.430597][ T6694] ? __asan_memset+0x22/0x40 [ 157.435290][ T6694] ? __sys_sendmsg_sock+0x30/0x30 [ 157.440415][ T6694] ? __import_iovec+0x5f2/0x850 [ 157.445380][ T6694] ? import_iovec+0x73/0xa0 [ 157.449960][ T6694] ___sys_sendmsg+0x2a6/0x360 [ 157.454719][ T6694] ? __sys_sendmsg+0x2b0/0x2b0 [ 157.459612][ T6694] ? trace_call_bpf+0xc3/0x6c0 [ 157.464508][ T6694] __se_sys_sendmsg+0x1d0/0x2c0 [ 157.469437][ T6694] ? __x64_sys_sendmsg+0x80/0x80 [ 157.474496][ T6694] ? lockdep_hardirqs_on+0x98/0x150 [ 157.479849][ T6694] do_syscall_64+0x55/0xb0 [ 157.484328][ T6694] ? clear_bhb_loop+0x40/0x90 [ 157.489069][ T6694] ? clear_bhb_loop+0x40/0x90 [ 157.493905][ T6694] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 157.499858][ T6694] RIP: 0033:0x7f2f15f9e159 [ 157.504361][ T6694] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 157.524047][ T6694] RSP: 002b:00007f2f16e94028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 157.532528][ T6694] RAX: ffffffffffffffda RBX: 00007f2f16225fa0 RCX: 00007f2f15f9e159 [ 157.540553][ T6694] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000004 [ 157.548666][ T6694] RBP: 00007f2f16e94090 R08: 0000000000000000 R09: 0000000000000000 [ 157.556693][ T6694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 157.564836][ T6694] R13: 00007f2f16226038 R14: 00007f2f16225fa0 R15: 00007ffe189296f8 [ 157.572942][ T6694] [ 159.443504][ T6707] netlink: 'syz.1.290': attribute type 3 has an invalid length. [ 159.520683][ T6707] netlink: 'syz.1.290': attribute type 16 has an invalid length. [ 159.595038][ T6707] netlink: 'syz.1.290': attribute type 18 has an invalid length. [ 159.702300][ T6707] netlink: 'syz.1.290': attribute type 20 has an invalid length. [ 159.710233][ T6707] netlink: 'syz.1.290': attribute type 25 has an invalid length. [ 159.941917][ T6722] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 160.184437][ T6719] netlink: 'syz.0.292': attribute type 10 has an invalid length. [ 160.233632][ T6719] netlink: 40 bytes leftover after parsing attributes in process `syz.0.292'. [ 160.330749][ T6719] batman_adv: batadv0: Adding interface: virt_wifi0 [ 160.338459][ T6719] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.416620][ T6719] batman_adv: batadv0: Interface activated: virt_wifi0 [ 160.564637][ T6711] syzkaller0: entered promiscuous mode [ 160.678924][ T6711] syzkaller0: entered allmulticast mode [ 162.450921][ T6740] netlink: 'syz.1.299': attribute type 4 has an invalid length. [ 163.872245][ T6746] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 163.956367][ T6746] syzkaller0: entered promiscuous mode [ 164.005510][ T6746] syzkaller0: entered allmulticast mode [ 164.081408][ T6748] FAULT_INJECTION: forcing a failure. [ 164.081408][ T6748] name failslab, interval 1, probability 0, space 0, times 0 [ 164.153297][ T6748] CPU: 0 PID: 6748 Comm: syz.2.305 Not tainted syzkaller #0 [ 164.160812][ T6748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 164.170956][ T6748] Call Trace: [ 164.174324][ T6748] [ 164.177340][ T6748] dump_stack_lvl+0x18c/0x250 [ 164.182144][ T6748] ? show_regs_print_info+0x20/0x20 [ 164.187724][ T6748] ? load_image+0x420/0x420 [ 164.192341][ T6748] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 164.198637][ T6748] should_fail_ex+0x394/0x4c0 [ 164.203449][ T6748] should_failslab+0x9/0x20 [ 164.208061][ T6748] slab_pre_alloc_hook+0x59/0x300 [ 164.213227][ T6748] kmem_cache_alloc_node+0x5e/0x310 [ 164.218548][ T6748] ? __alloc_skb+0x103/0x2c0 [ 164.223255][ T6748] __alloc_skb+0x103/0x2c0 [ 164.227784][ T6748] rtmsg_ifa+0xf9/0x1f0 [ 164.232524][ T6748] __inet_del_ifa+0xa98/0x1090 [ 164.237462][ T6748] inetdev_event+0x653/0x1610 [ 164.242284][ T6748] ? devinet_exit_net+0x220/0x220 [ 164.247853][ T6748] notifier_call_chain+0x18f/0x380 [ 164.253102][ T6748] dev_set_mtu_ext+0x463/0x680 [ 164.257989][ T6748] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 164.264176][ T6748] ? dev_validate_mtu+0x170/0x170 [ 164.269311][ T6748] ? is_bpf_text_address+0x6d/0x2a0 [ 164.274637][ T6748] ? is_bpf_text_address+0x28f/0x2a0 [ 164.280034][ T6748] ? is_bpf_text_address+0x26/0x2a0 [ 164.285381][ T6748] do_setlink+0x842/0x3f40 [ 164.289946][ T6748] ? arch_stack_walk+0x160/0x190 [ 164.295064][ T6748] ? nlmsg_parse_deprecated_strict+0x110/0x110 [ 164.301330][ T6748] ? stack_trace_save+0xaa/0x100 [ 164.306374][ T6748] ? stack_trace_snprint+0xf0/0xf0 [ 164.311687][ T6748] ? __nla_validate+0x50/0x50 [ 164.316573][ T6748] ? validate_linkmsg+0x719/0x910 [ 164.321708][ T6748] rtnl_newlink+0x1848/0x2170 [ 164.326531][ T6748] ? rtnl_newlink+0x4a1/0x2170 [ 164.331439][ T6748] ? rtnl_setlink+0x4e0/0x4e0 [ 164.336218][ T6748] ? __rwlock_init+0x150/0x150 [ 164.341102][ T6748] ? do_raw_spin_unlock+0x121/0x230 [ 164.346431][ T6748] ? __mutex_lock+0x923/0xc80 [ 164.351216][ T6748] ? __mutex_lock+0x4d2/0xc80 [ 164.356084][ T6748] ? rtnl_setlink+0x4e0/0x4e0 [ 164.360862][ T6748] rtnetlink_rcv_msg+0x843/0xf90 [ 164.365904][ T6748] ? rtnetlink_rcv_msg+0x220/0xf90 [ 164.371289][ T6748] ? rtnetlink_bind+0x80/0x80 [ 164.376113][ T6748] ? perf_tp_event+0x13f5/0x1550 [ 164.381213][ T6748] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 164.387147][ T6748] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 164.393024][ T6748] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 164.399102][ T6748] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 164.406412][ T6748] ? lock_chain_count+0x20/0x20 [ 164.411383][ T6748] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 164.417638][ T6748] ? lockdep_hardirqs_on+0x98/0x150 [ 164.422942][ T6748] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 164.429229][ T6748] ? netlink_rcv_skb+0x142/0x4c0 [ 164.434272][ T6748] ? kasan_check_range+0x1b1/0x290 [ 164.439522][ T6748] netlink_rcv_skb+0x235/0x4c0 [ 164.444441][ T6748] ? rtnetlink_bind+0x80/0x80 [ 164.449227][ T6748] ? netlink_ack+0x1160/0x1160 [ 164.454136][ T6748] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 164.460442][ T6748] netlink_unicast+0x7b1/0x930 [ 164.465347][ T6748] netlink_sendmsg+0x8d0/0xbf0 [ 164.470241][ T6748] ? netlink_getsockopt+0x590/0x590 [ 164.475548][ T6748] ? apparmor_socket_sendmsg+0x8e/0x330 [ 164.481209][ T6748] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 164.486666][ T6748] ? security_socket_sendmsg+0x80/0xa0 [ 164.492213][ T6748] ? netlink_getsockopt+0x590/0x590 [ 164.497513][ T6748] ____sys_sendmsg+0x61b/0x980 [ 164.502402][ T6748] ? lockdep_hardirqs_on+0x98/0x150 [ 164.507686][ T6748] ? __sys_sendmsg_sock+0x30/0x30 [ 164.512842][ T6748] ? ___sys_sendmsg+0x28b/0x360 [ 164.517789][ T6748] ___sys_sendmsg+0x2a6/0x360 [ 164.522550][ T6748] ? __sys_sendmsg+0x2b0/0x2b0 [ 164.527508][ T6748] __se_sys_sendmsg+0x1d0/0x2c0 [ 164.532462][ T6748] ? __x64_sys_sendmsg+0x80/0x80 [ 164.537541][ T6748] do_syscall_64+0x55/0xb0 [ 164.542034][ T6748] ? clear_bhb_loop+0x40/0x90 [ 164.546822][ T6748] ? clear_bhb_loop+0x40/0x90 [ 164.551595][ T6748] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 164.557557][ T6748] RIP: 0033:0x7f3944b9e159 [ 164.562042][ T6748] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 164.581750][ T6748] RSP: 002b:00007f3945a8e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 164.590367][ T6748] RAX: ffffffffffffffda RBX: 00007f3944e25fa0 RCX: 00007f3944b9e159 [ 164.598523][ T6748] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000003 [ 164.606673][ T6748] RBP: 00007f3945a8e090 R08: 0000000000000000 R09: 0000000000000000 [ 164.614862][ T6748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 164.622903][ T6748] R13: 00007f3944e26038 R14: 00007f3944e25fa0 R15: 00007ffca1ad29f8 [ 164.631012][ T6748] [ 164.847198][ T6748] netlink: 128 bytes leftover after parsing attributes in process `syz.2.305'. [ 164.875037][ T6748] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. Stopping sshd: stopped /usr/sbin/sshd (pid 5532) OK Stopping crond: stopped /usr/sbin/crond (pid 5515) OK Stopping dhcpcd... stopped /sbin/dhcpcd (pid 5436) Stopping network: [ 170.543647][ T6756] netlink: 'syz.3.306': attribute type 2 has an invalid length. [ 170.553065][ T6756] netlink: 'syz.3.306': attribute type 8 has an invalid length. [ 170.567783][ T6756] netlink: 132 bytes leftover after parsing attributes in process `syz.3.306'. [ 170.579563][ T6774] netlink: 'syz.0.309': attribute type 4 has an invalid length. [ 170.603953][ T6774] FAULT_INJECTION: forcing a failure. [ 170.603953][ T6774] name failslab, interval 1, probability 0, space 0, times 0 [ 170.638523][ T6774] CPU: 1 PID: 6774 Comm: syz.0.309 Not tainted syzkaller #0 [ 170.645917][ T6774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 170.656040][ T6774] Call Trace: [ 170.659408][ T6774] [ 170.662387][ T6774] dump_stack_lvl+0x18c/0x250 [ 170.667135][ T6774] ? show_regs_print_info+0x20/0x20 [ 170.672400][ T6774] ? load_image+0x420/0x420 [ 170.676977][ T6774] ? __might_sleep+0xe0/0xe0 [ 170.681638][ T6774] ? __lock_acquire+0x7d80/0x7d80 [ 170.686739][ T6774] should_fail_ex+0x394/0x4c0 [ 170.691495][ T6774] should_failslab+0x9/0x20 [ 170.696086][ T6774] slab_pre_alloc_hook+0x59/0x300 [ 170.701187][ T6774] ? fib_create_info+0xa8d/0x2390 [ 170.706431][ T6774] ? fib_create_info+0xa8d/0x2390 [ 170.711523][ T6774] __kmem_cache_alloc_node+0x53/0x250 [ 170.716974][ T6774] ? fib_create_info+0xa8d/0x2390 [ 170.722108][ T6774] __kmalloc+0xa7/0x240 [ 170.726372][ T6774] fib_create_info+0xa8d/0x2390 [ 170.731320][ T6774] fib_table_insert+0xc6/0x1b00 [ 170.736314][ T6774] ? fib_trie_table+0x138/0x1c0 [ 170.741281][ T6774] ? fib_new_table+0x27f/0x2d0 [ 170.746207][ T6774] inet_rtm_newroute+0x14b/0x240 [ 170.751232][ T6774] ? rcu_read_unlock+0xa0/0xa0 [ 170.756087][ T6774] ? rcu_read_unlock+0xa0/0xa0 [ 170.760924][ T6774] rtnetlink_rcv_msg+0x843/0xf90 [ 170.765938][ T6774] ? rtnetlink_rcv_msg+0x220/0xf90 [ 170.771127][ T6774] ? rtnetlink_bind+0x80/0x80 [ 170.775983][ T6774] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 170.782123][ T6774] ? lock_chain_count+0x20/0x20 [ 170.787053][ T6774] ? __local_bh_enable_ip+0x13a/0x1c0 [ 170.792509][ T6774] ? lockdep_hardirqs_on+0x98/0x150 [ 170.797786][ T6774] ? __local_bh_enable_ip+0x13a/0x1c0 [ 170.803245][ T6774] ? _local_bh_enable+0xa0/0xa0 [ 170.808163][ T6774] ? __dev_queue_xmit+0x272/0x37e0 [ 170.813337][ T6774] ? __dev_queue_xmit+0x1329/0x37e0 [ 170.818592][ T6774] ? __dev_queue_xmit+0x272/0x37e0 [ 170.823786][ T6774] ? ref_tracker_free+0x686/0x830 [ 170.828889][ T6774] netlink_rcv_skb+0x235/0x4c0 [ 170.833716][ T6774] ? rtnetlink_bind+0x80/0x80 [ 170.838461][ T6774] ? netlink_ack+0x1160/0x1160 [ 170.843311][ T6774] ? __lock_acquire+0x7d80/0x7d80 [ 170.848405][ T6774] ? netlink_deliver_tap+0x2e/0x1b0 [ 170.853680][ T6774] netlink_unicast+0x7b1/0x930 [ 170.858822][ T6774] netlink_sendmsg+0x8d0/0xbf0 [ 170.863655][ T6774] ? netlink_getsockopt+0x590/0x590 [ 170.868922][ T6774] ? apparmor_socket_sendmsg+0x8e/0x330 [ 170.874541][ T6774] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 170.879895][ T6774] ? security_socket_sendmsg+0x80/0xa0 [ 170.885426][ T6774] ? netlink_getsockopt+0x590/0x590 [ 170.890690][ T6774] ____sys_sendmsg+0x61b/0x980 [ 170.895560][ T6774] ? __asan_memset+0x22/0x40 [ 170.900221][ T6774] ? __sys_sendmsg_sock+0x30/0x30 [ 170.905319][ T6774] ? __import_iovec+0x5f2/0x850 [ 170.910239][ T6774] ? import_iovec+0x73/0xa0 [ 170.914817][ T6774] ___sys_sendmsg+0x2a6/0x360 [ 170.919559][ T6774] ? get_pid_task+0x20/0x1e0 [ 170.924228][ T6774] ? __sys_sendmsg+0x2b0/0x2b0 [ 170.929075][ T6774] ? __lock_acquire+0x7d80/0x7d80 [ 170.934212][ T6774] __se_sys_sendmsg+0x1d0/0x2c0 [ 170.939157][ T6774] ? __x64_sys_sendmsg+0x80/0x80 [ 170.944170][ T6774] ? lockdep_hardirqs_on+0x98/0x150 [ 170.949433][ T6774] do_syscall_64+0x55/0xb0 [ 170.953912][ T6774] ? clear_bhb_loop+0x40/0x90 [ 170.958711][ T6774] ? clear_bhb_loop+0x40/0x90 [ 170.963472][ T6774] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 170.969427][ T6774] RIP: 0033:0x7fa82779e159 [ 170.973899][ T6774] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.993574][ T6774] RSP: 002b:00007fa82875b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 171.002049][ T6774] RAX: ffffffffffffffda RBX: 00007fa827a25fa0 RCX: 00007fa82779e159 [ 171.010065][ T6774] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 171.018079][ T6774] RBP: 00007fa82875b090 R08: 0000000000000000 R09: 0000000000000000 [ 171.026089][ T6774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 171.034100][ T6774] R13: 00007fa827a26038 R14: 00007fa827a25fa0 R15: 00007ffd39470708 [ 171.042121][ T6774] OK Stopping iptables: [ 172.567122][ T6827] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.325'. OK [ 172.623491][ T6827] bridge_slave_1: default FDB implementation only supports local addresses Stopping system message bus: [ 173.611438][ T6862] netlink: 'syz.3.333': attribute type 10 has an invalid length. [ 173.667459][ T6862] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.677412][ T6862] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.822923][ T6862] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.830255][ T6862] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.839664][ T6862] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.847140][ T6862] bridge0: port 1(bridge_slave_0) entered forwarding state done [ 173.902153][ T6862] bond0: (slave bridge0): Enslaving as an active interface with an up link Stopping klogd: [ 175.961619][ T6906] netlink: 'syz.2.346': attribute type 29 has an invalid length. [ 175.989641][ T6906] netlink: 'syz.2.346': attribute type 29 has an invalid length. [ 176.054264][ T6914] netlink: 'syz.2.346': attribute type 29 has an invalid length. [ 176.154756][ T6906] netlink: 'syz.2.346': attribute type 29 has an invalid length. [ 176.165531][ T6906] netlink: 'syz.2.346': attribute type 29 has an invalid length. OK [ 176.303146][ T6919] netlink: 'syz.1.349': attribute type 8 has an invalid length. [ 176.330168][ T6919] netlink: 156 bytes leftover after parsing attributes in process `syz.1.349'. Stopping acpid: [ 176.468451][ T6925] netlink: 164 bytes leftover after parsing attributes in process `syz.0.352'. [ 176.942264][ T6940] netlink: 'syz.0.356': attribute type 13 has an invalid length. [ 176.960314][ T6941] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.356'. [ 176.972713][ T6940] netlink: 168 bytes leftover after parsing attributes in process `syz.0.356'. [ 177.037426][ T6946] FAULT_INJECTION: forcing a failure. [ 177.037426][ T6946] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 177.051535][ T6946] CPU: 1 PID: 6946 Comm: syz.3.358 Not tainted syzkaller #0 [ 177.058896][ T6946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 177.069023][ T6946] Call Trace: [ 177.072355][ T6946] [ 177.075345][ T6946] dump_stack_lvl+0x18c/0x250 [ 177.080106][ T6946] ? show_regs_print_info+0x20/0x20 [ 177.085380][ T6946] ? load_image+0x420/0x420 [ 177.089959][ T6946] ? __lock_acquire+0x7d80/0x7d80 [ 177.095054][ T6946] ? snprintf+0xe9/0x140 [ 177.099540][ T6946] should_fail_ex+0x394/0x4c0 [ 177.104301][ T6946] _copy_to_user+0x2f/0xa0 [ 177.108786][ T6946] simple_read_from_buffer+0xe7/0x150 [ 177.114242][ T6946] proc_fail_nth_read+0x1e8/0x260 [ 177.119359][ T6946] ? proc_fault_inject_write+0x360/0x360 [ 177.125109][ T6946] ? fsnotify_perm+0x271/0x5e0 [ 177.129927][ T6946] ? proc_fault_inject_write+0x360/0x360 [ 177.135633][ T6946] vfs_read+0x298/0x990 [ 177.139852][ T6946] ? kernel_read+0x1e0/0x1e0 [ 177.144504][ T6946] ? __fget_files+0x28/0x460 [ 177.149159][ T6946] ? __fget_files+0x3fc/0x460 [ 177.153900][ T6946] ? __fdget_pos+0x2a3/0x330 [ 177.158547][ T6946] ? ksys_read+0x74/0x260 [ 177.162928][ T6946] ksys_read+0x151/0x260 [ 177.167305][ T6946] ? vfs_write+0x9a0/0x9a0 [ 177.171765][ T6946] ? lockdep_hardirqs_on+0x98/0x150 [ 177.177092][ T6946] do_syscall_64+0x55/0xb0 [ 177.181554][ T6946] ? clear_bhb_loop+0x40/0x90 [ 177.186272][ T6946] ? clear_bhb_loop+0x40/0x90 [ 177.190987][ T6946] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 177.196922][ T6946] RIP: 0033:0x7f94b6d5e98e [ 177.201480][ T6946] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 177.221119][ T6946] RSP: 002b:00007f94b4ff5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 177.229564][ T6946] RAX: ffffffffffffffda RBX: 00007f94b4ff66c0 RCX: 00007f94b6d5e98e [ 177.237572][ T6946] RDX: 000000000000000f RSI: 00007f94b4ff60a0 RDI: 0000000000000008 [ 177.245587][ T6946] RBP: 00007f94b4ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 177.253853][ T6946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 177.261852][ T6946] R13: 00007f94b7026038 R14: 00007f94b7025fa0 R15: 00007ffd779f44e8 [ 177.269981][ T6946] [ 177.411166][ T6951] netlink: 16054 bytes leftover after parsing attributes in process `syz.3.361'. [ 177.422945][ T6952] netlink: 'syz.0.360': attribute type 1 has an invalid length. [ 177.447868][ T6952] netlink: 191376 bytes leftover after parsing attributes in process `syz.0.360'. [ 177.630189][ T6957] bridge0: entered promiscuous mode [ 177.635644][ T6957] bridge0: entered allmulticast mode [ 177.806325][ T6965] FAULT_INJECTION: forcing a failure. [ 177.806325][ T6965] name failslab, interval 1, probability 0, space 0, times 0 [ 177.836419][ T6965] CPU: 1 PID: 6965 Comm: syz.1.367 Not tainted syzkaller #0 [ 177.843900][ T6965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 177.854021][ T6965] Call Trace: [ 177.857355][ T6965] [ 177.860349][ T6965] dump_stack_lvl+0x18c/0x250 [ 177.865113][ T6965] ? show_regs_print_info+0x20/0x20 [ 177.870396][ T6965] ? load_image+0x420/0x420 [ 177.874970][ T6965] ? __might_sleep+0xe0/0xe0 [ 177.879639][ T6965] ? __lock_acquire+0x7d80/0x7d80 [ 177.884754][ T6965] should_fail_ex+0x394/0x4c0 [ 177.889501][ T6965] should_failslab+0x9/0x20 [ 177.894113][ T6965] slab_pre_alloc_hook+0x59/0x300 [ 177.899208][ T6965] ? tomoyo_encode+0x2ad/0x570 [ 177.904044][ T6965] ? tomoyo_encode+0x2ad/0x570 [ 177.908874][ T6965] __kmem_cache_alloc_node+0x53/0x250 [ 177.914320][ T6965] ? tomoyo_encode+0x2ad/0x570 [ 177.919125][ T6965] __kmalloc+0xa7/0x240 [ 177.923338][ T6965] tomoyo_encode+0x2ad/0x570 [ 177.927975][ T6965] tomoyo_realpath_from_path+0x57c/0x5c0 [ 177.933642][ T6965] ? tomoyo_domain+0xd6/0x120 [ 177.938353][ T6965] tomoyo_path_number_perm+0x248/0x5e0 [ 177.943849][ T6965] ? tomoyo_path_number_perm+0x217/0x5e0 [ 177.949555][ T6965] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 177.955079][ T6965] ? trace_call_bpf+0xc3/0x6c0 [ 177.959897][ T6965] ? trace_call_bpf+0xc3/0x6c0 [ 177.964719][ T6965] ? trace_call_bpf+0x5e9/0x6c0 [ 177.969642][ T6965] ? __fget_files+0x28/0x460 [ 177.974302][ T6965] security_file_ioctl+0x70/0xa0 [ 177.979314][ T6965] __se_sys_ioctl+0x48/0x170 [ 177.983956][ T6965] do_syscall_64+0x55/0xb0 [ 177.988453][ T6965] ? clear_bhb_loop+0x40/0x90 [ 177.993277][ T6965] ? clear_bhb_loop+0x40/0x90 [ 177.998021][ T6965] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 178.003966][ T6965] RIP: 0033:0x7f2f15f9e159 [ 178.008417][ T6965] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 178.028142][ T6965] RSP: 002b:00007f2f16e94028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 178.036596][ T6965] RAX: ffffffffffffffda RBX: 00007f2f16225fa0 RCX: 00007f2f15f9e159 [ 178.044615][ T6965] RDX: 0000000000000000 RSI: 00000000000089ed RDI: 0000000000000003 [ 178.052627][ T6965] RBP: 00007f2f16e94090 R08: 0000000000000000 R09: 0000000000000000 [ 178.060630][ T6965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.068711][ T6965] R13: 00007f2f16226038 R14: 00007f2f16225fa0 R15: 00007ffe189296f8 [ 178.076728][ T6965] OK [ 178.175456][ T6972] netlink: 'syz.0.369': attribute type 46 has an invalid length. [ 178.230684][ T6972] netlink: 'syz.0.369': attribute type 46 has an invalid length. [ 178.247734][ T6965] ERROR: Out of memory at tomoyo_realpath_from_path. [ 178.272787][ T6972] netlink: 763 bytes leftover after parsing attributes in process `syz.0.369'. Stopping syslogd: stopped /sbin/syslogd (pid 5124) OK [ 178.612453][ T6985] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.374'. umount: can't remount debugfs read-only [ 179.105427][ T7004] IPv6: NLM_F_CREATE should be specified when creating new route [ 179.738606][ T7013] bridge_slave_1: left allmulticast mode [ 179.750480][ T7013] bridge_slave_1: left promiscuous mode [ 179.791240][ T7013] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.861289][ T7013] bridge_slave_0: left allmulticast mode [ 179.867143][ T7013] bridge_slave_0: left promiscuous mode [ 179.914223][ T7013] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.338415][ T7020] team0 (unregistering): Port device team_slave_1 removed [ 180.721141][ T7034] netlink: 132 bytes leftover after parsing attributes in process `syz.1.391'. [ 181.802245][ T7049] FAULT_INJECTION: forcing a failure. [ 181.802245][ T7049] name failslab, interval 1, probability 0, space 0, times 0 [ 181.860779][ T7049] CPU: 0 PID: 7049 Comm: syz.1.397 Not tainted syzkaller #0 [ 181.868170][ T7049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 181.878280][ T7049] Call Trace: [ 181.881690][ T7049] [ 181.884679][ T7049] dump_stack_lvl+0x18c/0x250 [ 181.889424][ T7049] ? show_regs_print_info+0x20/0x20 [ 181.894684][ T7049] ? load_image+0x420/0x420 [ 181.899251][ T7049] ? __might_sleep+0xe0/0xe0 [ 181.903940][ T7049] ? __lock_acquire+0x7d80/0x7d80 [ 181.909029][ T7049] should_fail_ex+0x394/0x4c0 [ 181.913780][ T7049] should_failslab+0x9/0x20 [ 181.918344][ T7049] slab_pre_alloc_hook+0x59/0x300 [ 181.923460][ T7049] ? __lock_acquire+0x7d80/0x7d80 [ 181.928553][ T7049] kmem_cache_alloc_node+0x5e/0x310 [ 181.933836][ T7049] ? __alloc_skb+0x103/0x2c0 [ 181.938465][ T7049] __alloc_skb+0x103/0x2c0 [ 181.942954][ T7049] netlink_sendmsg+0x66a/0xbf0 [ 181.947766][ T7049] ? netlink_getsockopt+0x590/0x590 [ 181.952999][ T7049] ? apparmor_socket_sendmsg+0x8e/0x330 [ 181.958669][ T7049] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 181.964003][ T7049] ? security_socket_sendmsg+0x80/0xa0 [ 181.969587][ T7049] ? netlink_getsockopt+0x590/0x590 [ 181.974880][ T7049] ____sys_sendmsg+0x61b/0x980 [ 181.979797][ T7049] ? __asan_memset+0x22/0x40 [ 181.984444][ T7049] ? __sys_sendmsg_sock+0x30/0x30 [ 181.989512][ T7049] ? __import_iovec+0x3fa/0x850 [ 181.994501][ T7049] ? import_iovec+0x73/0xa0 [ 181.999053][ T7049] ___sys_sendmsg+0x2a6/0x360 [ 182.003773][ T7049] ? get_pid_task+0x20/0x1e0 [ 182.008583][ T7049] ? __sys_sendmsg+0x2b0/0x2b0 [ 182.013399][ T7049] ? __lock_acquire+0x7d80/0x7d80 [ 182.018497][ T7049] __se_sys_sendmsg+0x1d0/0x2c0 [ 182.023383][ T7049] ? __x64_sys_sendmsg+0x80/0x80 [ 182.028373][ T7049] ? lockdep_hardirqs_on+0x98/0x150 [ 182.033611][ T7049] do_syscall_64+0x55/0xb0 [ 182.038064][ T7049] ? clear_bhb_loop+0x40/0x90 [ 182.042785][ T7049] ? clear_bhb_loop+0x40/0x90 [ 182.047504][ T7049] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 182.053434][ T7049] RIP: 0033:0x7f2f15f9e159 [ 182.057876][ T7049] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 182.077553][ T7049] RSP: 002b:00007f2f16e94028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 182.086005][ T7049] RAX: ffffffffffffffda RBX: 00007f2f16225fa0 RCX: 00007f2f15f9e159 [ 182.094005][ T7049] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 182.102005][ T7049] RBP: 00007f2f16e94090 R08: 0000000000000000 R09: 0000000000000000 [ 182.109999][ T7049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 182.117995][ T7049] R13: 00007f2f16226038 R14: 00007f2f16225fa0 R15: 00007ffe189296f8 [ 182.126093][ T7049] [ 182.276625][ T5789] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 182.285092][ T7055] validate_nla: 3 callbacks suppressed [ 182.285107][ T7055] netlink: 'syz.2.399': attribute type 23 has an invalid length. [ 182.309104][ T7055] netlink: 168 bytes leftover after parsing attributes in process `syz.2.399'. [ 182.330832][ T5789] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 182.339672][ T5789] Bluetooth: hci3: Injecting HCI hardware error event [ 182.348701][ T5789] Bluetooth: hci3: hardware error 0x00 [ 182.524830][ T7065] netlink: 132 bytes leftover after parsing attributes in process `syz.1.401'. [ 182.712865][ T7061] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.396'. [ 183.180444][ T51] Bluetooth: hci0: ISO packet for unknown connection handle 12 umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! Sent SIGTERM to all processes [ 184.390698][ T5789] Bluetooth: hci3: Opcode 0x0c03 failed: -110 Connection to 10.128.0.88 closed by remote host. Sent SIGKILL to all processes Requesting system poweroff [ 185.634110][ T42] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.760486][ T42] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.837692][ T42] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.933858][ T42] bond0: (slave netdevsim0): Releasing backup interface [ 185.945896][ T42] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.560536][ T7095] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 186.579081][ T7095] ACPI: PM: Preparing to enter system sleep state S5 [ 186.590022][ T7095] kvm: exiting hardware virtualization [ 186.596662][ T7095] reboot: Power down serialport: VM disconnected.