last executing test programs: 22.646067064s ago: executing program 3 (id=8824): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x13, &(0x7f0000001d00)=ANY=[@ANYBLOB="1800000003000000000000000240000018010000696c6c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fbffffff8500000006000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000740c0000850000000600000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x16c11857ed136dc7, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r0}, 0xc) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x1200, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cgroup.events\x00', 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000800000000000085000000ae000000950000000000000058456cb1c7be0fa19da5b213b9996ae1022e5e821f2a07f4e04c7a0fbafe8648f87d662b6abfdc45"], &(0x7f0000000000)='GPL\x00', 0x1, 0x87, &(0x7f0000000480)=""/135, 0x0, 0x29}, 0x94) socketpair(0x28, 0x4, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x6, 0x0, 0xa4) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000b80)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|C\b\x00\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdd\x85\xaac{\x8c\x8ffp`-\xcd\xf6jh\xbf\x9c\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\x8b\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca^\xf9\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x96\x86\xdb\xa9\xd3\x01\xb2\xc7\xf8G\x069\x90,\xda\xf6\xc5\xcd\xec\xa3B\xc3\"4\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\x7f\xec\xb2\xc5E\x00\xdd\xf2e\xa8\xf1<\xb2\xc82\xbf=o\x00`\xc1A\'\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x92\xbb\xe3Y\x97\xc2') bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/20, @ANYRES32=0x1], 0x48) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) socket$kcm(0xa, 0x5, 0x0) r4 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000300)=' ', 0x1}], 0x1}, 0x1) r5 = socket$kcm(0x21, 0x2, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[], 0x0, 0x26}, 0x28) socket$kcm(0x2, 0x200000000000001, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x10c002, 0xac59}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a"], 0xfe33) r6 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="364000001a00913a"], 0x82d7) recvmsg(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000002200)=""/4096, 0x7ffff000}, {&(0x7f0000003200)=""/4073, 0xfe9}], 0x2}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) sendmsg$sock(r5, &(0x7f00000001c0)={&(0x7f0000000000)=@llc={0x1a, 0x0, 0x4, 0x2, 0x6, 0x7, @random="528d0e25c3df"}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000080)="0686d739b858cce5e086f1e57eed41054ac84eca9efd7315e6e7ac426b520281015ecbce6fccdb78ee5b090aa9569f3de7e2dd75e2552303777b23bba8972a174ecf1b7787", 0x45}], 0x1}, 0x44810) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001000000b7050000000000006a0a00ff00000000850000000a000000b70000000000000095000000000000009cc6b3fcd62c7d376238975d43a4505f80fc88943c4f0cf08e467b592f868ee30a0e8c1bf176db2a6b2f01806fd3d5707bfd2d84aaa3b1d4e984c46ea7e2a447a36f5662403e1b2be4cc7c2683908a0d411a9872971c7c77f0979b34e1ad837ff0d10b97163c1d6d0e196bf02f46c7953ab1abda45cbe8d0d23abff0feef91bfa0f76b74635fc9f9de9ca3c0ec8cb9bf4e418d076df4c7df0a70f2bdf4000000000000b0c2940dd8e263aa743f7555193161f45346b1004006000000e1ffff8816326d7d25c32aac1c7d5b5be399f6609876b5887437a172fbc02a74135b29194e533583412dff048f0000000000000007b2728a0481e9f0da43bb6cfb851cd364ff19ffcafe3e64be033c9d2f002cc9d6ddb88d2f313c1c13caec04a347383420336bec88c24a9fb6a6991ddb737d527d6acb15426415b6e8b14fdfa2c6e94bd0339454c13ad3e328a100000000b515a1000000000000000eb2e9c15b6c8f6198282df27badac8500"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x37}, 0x94) 22.382705782s ago: executing program 3 (id=8828): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xdffce052b68f3b15}, 0x10c002, 0xac61}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x1c092, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0xb3e, 0xfffffffffffffff8}, 0x840, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f06558", 0x0, 0x1c1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="190000a2ea4cbf91bee7d7000400000004"], 0x50) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000300)=@o_path={&(0x7f00000002c0)='./file0\x00', 0x0, 0x10, r0}, 0x18) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8937, &(0x7f0000000cc0)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00l \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50xffffffffffffffff}) close(0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8983, &(0x7f0000000080)) 9.256502408s ago: executing program 2 (id=8893): r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="bb", 0x1}], 0x1, &(0x7f0000000100)}, 0x0) 9.051763484s ago: executing program 2 (id=8894): r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x7000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1e00000000000000010000000700000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000008000000000000000000000000000000000000001b64df03eb0781b638465c48a08629da"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x2000002, 0xe, 0x4b, &(0x7f0000000000)="1fdea750919711971e01b4f61aaa80df623cff855476aa6310ff55d2639d9c306988c937cc1c555cd46b1ddc1683fe3946c2a2509bd5d0c000263f8de9ebcfc97b70fcc623cc95147567b39406b3459c3b2a4e842837ea009d8643805343645e2662cd0bf6544585931583f96842650609fdb8633ff047", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x4110, 0x0, 0x0, 0x5, 0x0, 0x9}, 0x0, 0x0, r0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000380)=@hci={0x1f, 0xa888, 0x9}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000080)="27030200f00f00000600002fb9088965c7297a05a2019e6bafed88a839ffffffffe1053742e0e4650058f700000088641100114408000300b8bf4a31accb", 0x3e}, {&(0x7f0000002500)="4fc9316bdf97a94aa4c01a71f2b55527cb347f01679ab78becd1455755985051a9b55a7c5e6cb0a37cd9c92a4b8e06a53af164e81ae37d251ce1818e9e6973374feaab4d2422070084af233d99a2dd7106672e6520a5ab0801d45a30bc7923756426ed6029cea34be70fd52bfbde2bb1171c48961a58bc64c2dafc47263af31c8d405d712a94a8f88b4e74d1e510c60100010000000000b6d31f118703445f42717726b721981296ae4348b0767e6b67335a9da9d3d4936b861ea72bb996e01bb88357f9bed242d7c1bd6b09940e23a2f9903cd9925d22f8112f9741e5658b5e62a4b23a292c858fcb8362e401d3", 0xee}, {&(0x7f00000001c0)="b6986e54ee7137807146de0ab782b34caded5e870ee7caf6296abeb8a420c3316d8feddfc875d2cb880b7880d6ce92860ccd4f7d6a5f4ae59c2ef4178d2a6e151b9177cfe4a70abc1e1267d0993ebb2a6d21ee884efb8ffba185c10803067b80f3428de425c426dd3cc9eddeab744f710419fde96d", 0x75}, {&(0x7f0000000880)="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", 0xfffffc69}, {&(0x7f0000002400)="e20650bb69f596a001a9396df3e895da88d97ebd178d47b9119f9232ea20b1637429669dc4d0c0cf864240df51aff34230940425976a91424886f7569ab0a0ed75f495341eee79791236e5437400cf79a8e84ed65e993f6897444bb5d86d94215b781ae9918681a67968825e9f5fed8e3cf996d276f78c75101b6e188cc3b29c44b07b85c76fe40f20727d081a440ce84ced2c1d50c6879b422b03412a20f6d2d4b9226a87c0fe4de731da5c6a6edb4972a2f3e7966db1e8ff048f5b61600611bbbc0905a9a9c23fa6db92243e178f7793e83e82ead265afe54086", 0xdb}, {&(0x7f0000001400)="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", 0xbed}], 0x6}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0xffffffffffffffff) 8.432434884s ago: executing program 0 (id=8897): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x0, 0x5}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000a40)=""/4072, 0xfe8}], 0x1}, 0x40010080) write$cgroup_subtree(r2, &(0x7f0000001ec0)=ANY=[@ANYBLOB="004000003a00913a74067388481f9c0e0a"], 0xfe33) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@datasec={0x2, 0x1, 0x0, 0xf, 0x1, [{0x3, 0x101}], 'H'}, @datasec={0x0, 0x0, 0x0, 0xf, 0x3, [], "7472e9"}]}, {0x0, [0x0, 0x2e]}}, &(0x7f00000003c0)=""/4096, 0x44, 0x1000, 0x1}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0xffff, @broadcast}, 0x3, 0x4, 0x102}}, 0x80, 0x0}, 0x20004000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8001c00180081064e81f782db44b9b545c7910006007c09e8fe55a10a0017", 0x1f}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f7d28344b904020000", 0x2}], 0x1}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="0439000020"], 0x33fe0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) write$cgroup_devices(r0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0309004d8871ef2885634a8270e7112b00000000000000000000000000ac141401827511d5b4d3a9f536f45ae68ab6086c21"], 0xee8a) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(r5, &(0x7f0000000200)=ANY=[@ANYRES8=r6], 0x12) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000c3a0f8ffe100000095"], &(0x7f0000000000)='syzkaller\x00', 0x6, 0x8c, &(0x7f00000005c0)=""/140, 0x0, 0x0, '\x00', 0x0, 0x25, r5}, 0x94) 7.874429601s ago: executing program 2 (id=8900): r0 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x1, 0x45, &(0x7f00000008c0), 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x4, 0x9}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x1, r1}, 0x50) r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r2}, &(0x7f0000000840), &(0x7f0000000340)=r1}, 0x20) close(r1) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r2, &(0x7f0000000900)}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000001a00007be2c56c05b2fe79a0cc0006000000850000009700"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0x14, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x5, &(0x7f00000001c0)=@framed={{}, [@ldst={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a7fbb}, @ldst={0x6, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffffe, 0xa000000}]}, &(0x7f0000000000)='syzkaller\x00', 0x2, 0xf4252, &(0x7f0000000100)=""/147}, 0x80) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) r5 = perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0xf}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000004080000000000000003000000000000000000000002000000000000000000000000000002000000000000000000000004"], 0x0, 0x56}, 0x28) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000540)=""/191}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x0, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000000000000000f9ffffff8500000028000000180100002020702500000000d04d9884be2f"], 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32, @ANYBLOB="10001d000000faff947b72fb9900000045"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f1, &(0x7f0000000080)) bpf$TOKEN_CREATE(0x24, &(0x7f0000000600)={0x0, r5}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x2, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="183800000000006ea4f43000040000fe17100000", @ANYRESOCT=r3, @ANYBLOB="00040000000000009500000000710000"], &(0x7f0000000040)='syzkaller\x00', 0xd90, 0xee, &(0x7f0000000340)=""/238}, 0x94) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x2, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp, 0x11ffa, 0x4, 0x98, 0x0, 0x2, 0xfffff275, 0x8001, 0x0, 0x2, 0x0, 0x400000020}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8932, &(0x7f0000000080)) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x202, 0x0) 4.967408073s ago: executing program 0 (id=8906): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20008810) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r0 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0xfffffffffff7f800, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f00000005c0)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x129, 0x0, @perf_bp={0x0, 0x1}, 0x1000, 0x2, 0x0, 0x3}, 0x0, 0xffffffffffffffff, r0, 0x8) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0x1}, 0x201, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x8, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) socket$kcm(0x10, 0x2, 0x0) (async) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="d80000001c0081044e81ffffffffb9040a1d08030e000000e8fea4a1180015000600142603600e1208000f0700810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) (async) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="d80000001c0081044e81ffffffffb9040a1d08030e000000e8fea4a1180015000600142603600e1208000f0700810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000006c0)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x40, 0x4, 0x3}}, 0x80, 0x0}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) (async) close(r5) recvmsg$unix(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x10}}], 0x10}, 0x1c0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB=','], 0x9a) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="12000000040000"], 0x50) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)=ANY=[@ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="05"], 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000000740)=@phonet, 0x80, &(0x7f0000001e40)=[{&(0x7f00000007c0)=""/237, 0xed}, {&(0x7f00000008c0)=""/79, 0x4f}, {&(0x7f0000000980)=""/191, 0xbf}, {&(0x7f0000000a40)=""/14, 0xe}, {&(0x7f0000000a80)=""/63, 0x3f}, {&(0x7f0000000ac0)=""/160, 0xa0}, {&(0x7f0000000b80)=""/143, 0x8f}, {&(0x7f0000000c40)=""/4096, 0x1000}, {&(0x7f0000001c40)=""/202, 0xca}, {&(0x7f0000001d40)=""/232, 0xe8}], 0xa, &(0x7f0000001f00)=""/21, 0x15}, 0x120) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000500)=ANY=[@ANYRES32=r0, @ANYRES32, @ANYBLOB="00000000000002000000000097ad6fedad699ef75dd8d85f38fe75c5f89f269c06914fc99e60ea077a98ebce43e1b5ad5a1cebae8a7558551cf6578b65b1ffb36e6b269683ecfb50d9ca593b43f9c35b042ffa4d97c808de3ad751b90d4c4e8671e2172e5d3745ef56b53979bca186b5f7f409233452ea89a2cef8a6760334e29a76b88b", @ANYRES32=r7, @ANYBLOB, @ANYRES64], 0x20) socket$kcm(0x2, 0x5, 0x84) (async) r8 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r8, 0x84, 0x11, 0x0, 0x0) (async) setsockopt$sock_attach_bpf(r8, 0x84, 0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000002c0), 0x4) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x38) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x38) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) 4.965071494s ago: executing program 2 (id=8908): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1000000000000}, 0x104080, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x50) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000540)={@map=r0, 0x9, 0x0, 0x8, &(0x7f0000000380)=[0x0], 0x1, 0x0, &(0x7f00000003c0)=[0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000640)={{r0, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000600)='%-010d \x00'}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000680)={0x10000, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000580)={@fallback=r3, r1, 0x1c, 0x2030, 0x0, @void, @void, @value=r4, @void, r2}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="170000000000000004"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, r5, 0x4}, 0x38) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socket$kcm(0x10, 0x2, 0x10) r7 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f0000001540)=@in6={0xa, 0x4e20, 0x0, @mcast2}, 0x80, 0x0}, 0x400b8c8) socket$kcm(0x28, 0x1, 0x0) getpid() openat$ppp(0xffffffffffffff9c, &(0x7f0000000300), 0x84401, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000002000000040000000900000000000000", @ANYRES32, @ANYBLOB="00000000000000000017e27a9c39e5112c000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000002000000010018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r8}, &(0x7f0000000200), &(0x7f0000000280)}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400)={r9}, 0xc) ioctl$SIOCSIFHWADDR(r6, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00\x00\x00\x00 '}) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000210081044e81f782db44b904020000000080000000001500100014000000000009000d2000000401a80016000a000e4006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee062e1c547cbc7225e6756cfb39b0590b4800089e408e8d8ef52b49816277cf4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db701000000eafad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d939acd92954b43370e970100", 0xd8}], 0x1}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) 4.640223104s ago: executing program 0 (id=8909): r0 = getpid() socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$kcm(0x10, 0x3, 0x10) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90124fc60", 0x14}], 0x1}, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)}, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000011c0)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r3}, 0x8) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)={[{0x2b, 'cpu'}]}, 0x5) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="61153c00000000006113780000000000bfa000000000000007000000ee0016055e03010000000000250500000000000069163e0000000000bf07000000000000260507000fff0720670600003f000000140600000ee6ffd0bf500000000000002f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05002000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d00c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932fb3bba54b3a6aa57f1ad2e99e0e67ab9ff16d20000009f0f53acbb40b4f8e2738270001562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631822a11dc3c693962895496d4f6e9cc54db6c7205a6b26f92121ef53e553acdf42068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710eec53f1b11cced7bc3c8da0c44d2fbf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db80300c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f8709d87b27f8a5d9121fdc058447b728f134f72062fc4b1ca0780b1a7af137ff7b4ff139604faf0453b65586f65c7943d56b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61940aabc86b94f8cbde4d47060400e722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d154672fea96aedf346279ec00000000000000000000d535d41b0067f01e2e54b9154d876020b669640ead4ca44631fadf7c4ac39a1b331dbdcd52b36df021b731ef1f92330d347f88ced5c1aaadbcdd8d2257e3a9a7c7494fadf9be36f7a2474ee6e9446fa1fd486f85d672a77dc5bd21463994d49f12016305a1e394d292b66840fe32b40ad665d241a8b8a32b3100450c32832789aa8a096f41201b585cd76631c88cf958e9e9047f5af1730c5e83db12460a0768fd4b62be6c41eed307048bac8d1f7f164574241e06027654b248dcc38749eee0c1ee7c61b3f6411a559c3d45637b11e440ed5a99109b8e71d28c3d677af5f0499c6d3fc6a129775056958c9df824ebe5fa9fb306b24a8a8334910627d03efe69d4b61c4345f048c5da8aca16cea848fa77d2507c920a6bd654b00e07789382ed902c80deeff2fd5c78f42e4353e5360c3e55962efd1331e6736eaf4ee27736fa54803ee8ec1a15266ffcd8b30368740b584c2559e691e542cab3d49db327db62328f159d1e0900b3e23e84dedcd1377aa15dbeab7db181bd66980c3557c7d9f7377fcb6023accb5c368a121acf70e5f4c3f2a0ea07011c7166c23d28c0a7101b8b09736ecd34aa9dc1b498"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) r4 = perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x1c842, 0x0, 0x7fffffff, 0x2, 0x3cd, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, r0, 0x0, 0xffffffffffffffff, 0x2) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r5, &(0x7f0000002200)={&(0x7f00000004c0)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4000010}, 0x891) r6 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r6, 0x88, 0x67, 0x0, 0x0) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair(0x1d, 0xa, 0x0, &(0x7f0000000040)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000020646c2500000000002020207b1af8ff00000000bfa10000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x2400, 0x6) 4.180820468s ago: executing program 2 (id=8911): r0 = perf_event_open(&(0x7f0000000100)={0x3, 0xfffffffffffffe75, 0x6, 0x1, 0x7, 0x0, 0x0, 0xffff, 0x14015, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x20, 0x0, @perf_bp={&(0x7f00000001c0), 0x6}, 0x0, 0xf, 0x10000, 0x1, 0xd9, 0x1, 0x7, 0x0, 0x4, 0x0, 0x200bc5}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0x9, r0, 0x4) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 32) sendmsg$tipc(r1, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x0) (rerun: 32) r2 = socket$kcm(0x2, 0x5, 0x84) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x6, @perf_config_ext, 0x10c012, 0x89, 0x2, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) r3 = socket$kcm(0x10, 0x3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.swap.events\x00', 0x26e1, 0x0) (async, rerun: 64) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) (async, rerun: 64) recvmsg(0xffffffffffffffff, 0x0, 0x40) (async) write$cgroup_subtree(r3, &(0x7f0000001ec0)=ANY=[@ANYBLOB="13120000120091ef04e9befbbd00005c0a"], 0xfe33) (async) recvmsg$kcm(r3, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000039c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/233, 0xe9}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/87, 0x57}, {&(0x7f0000000400)=""/211, 0xd3}, {&(0x7f0000000b00)=""/157, 0xffffff8c}, {&(0x7f00000008c0)=""/210, 0xd2}, {&(0x7f0000000280)=""/209, 0xd1}], 0x8}, 0x0) recvmsg$kcm(r3, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x42) bpf$MAP_CREATE(0x0, 0x0, 0x50) (async, rerun: 32) r5 = socket$kcm(0x22, 0x2, 0x21) (rerun: 32) close(r5) recvmsg$kcm(r3, &(0x7f0000000cc0)={0x0, 0x0, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x801c581f, &(0x7f0000000040)=0xff57000000000600) (async) r6 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000540)='cpu==0||!') (async) ioctl$TUNSETVNETHDRSZ(r4, 0x400454d8, &(0x7f0000000080)=0x10001) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00e0364e4045f91f6c789eddfeb69fbcfd994100", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x80000005}, {0x2}]}, 0x94) (async) sendmsg$inet(r2, &(0x7f00000029c0)={&(0x7f0000000100)={0x2, 0x0, @private=0xa010101}, 0x10, 0x0}, 0x4000040) (async) sendmsg$inet(r2, &(0x7f00000000c0)={&(0x7f0000001040)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000140)="97", 0x1}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) 3.934952436s ago: executing program 2 (id=8914): syz_clone(0x10e50e6400, 0x0, 0x18, 0x0, 0x0, 0x0) syz_clone(0x10e50e6400, 0x0, 0x18, 0x0, 0x0, 0x0) (async) 3.705204433s ago: executing program 0 (id=8916): r0 = socket$kcm(0xa, 0x5, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x5) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x1200, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010511000b001c000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x2}, 0x0, 0x0, 0xfffffffd, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) recvmsg(r0, &(0x7f0000001ec0)={&(0x7f0000000340)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000001e00)=[{&(0x7f0000000400)=""/115, 0x73}, {&(0x7f0000000c40)=""/4096, 0x1000}, {&(0x7f0000001c40)=""/158, 0x9e}, {&(0x7f0000001d00)=""/105, 0x69}, {&(0x7f0000001d80)=""/75, 0x4b}], 0x5, &(0x7f0000001e80)=""/6, 0x6}, 0x141) socket$kcm(0x21, 0x2, 0x2) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0x0, r3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x8c}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000b80)=ANY=[@ANYBLOB="9feb010018000000060000000c0000004ce484bf84730c0000000200000000000000000000faaccb3fee8543cbe35b91216c0905cfdec9f485f4605064d9bdc702dd28efb26f90e5689689b3ca46c71f3d5d29c79d70a261f47e2d84d9b55ec83f75c96dce1e605163e8"], 0x0, 0x26}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000029000b05d25a806f8c6394f90424fc60", 0x14}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRESDEC, @ANYBLOB="43da2e"], 0x48) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b705000000000000850000007b00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000700)={r8}, 0xc) close(r6) socket$kcm(0x2b, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @random="6f4913451e8b"}) 2.800664502s ago: executing program 4 (id=8918): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x1c, 0x1, 0x0, 0xff, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x8000000000000000}, 0x8210, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f00000005c0), 0x0, 0xf004, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161) r3 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x4, @perf_config_ext={0x101, 0x830d}, 0x30, 0x2, 0x8, 0x4, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000000)={r3}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000200), 0x4) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x6, &(0x7f0000000100)=[{&(0x7f0000000380)="5c00000012006bab9a3fe3d86e17aa0a076b876c1d0048007ea60864160af36504001a0038001d00e517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb000011d600a0680d4bbd6df1db6f1078bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$kcm(0xa, 0x6, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000780)="e6b24acc3c74770761b96f61ea58bd370fac26484858a71482f74c643667faf38711b047160b243d0d9b137a7a1bd7ba15f01be3437554", 0x0, 0x0, 0x0, 0xffffffffffffff6a, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfd}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="11000000040000000400000005"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r5, 0xffffffffffffffff, 0x521}, 0x57) recvmsg$kcm(r3, &(0x7f0000000340)={&(0x7f00000001c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x80, &(0x7f0000000800)=[{}, {&(0x7f00000004c0)=""/253, 0xfd}, {&(0x7f0000000680)=""/206, 0xce}, {&(0x7f0000001040)=""/4096, 0x1000}], 0x4, &(0x7f0000000880)=""/102, 0x66}, 0x40012100) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002f40)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x3, 0x0, 0x0, &(0x7f0000000200)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000540)="d2b7010000001f91cdfa02e0864c", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x11, 0x200000000000002, 0x300) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000300)=r8, 0x4) socket$kcm(0xa, 0x3, 0x3a) 1.844142772s ago: executing program 1 (id=8919): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0xe4a8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x1, 0x0, 0x7, 0x3}, {0x10000002, 0x20, 0x400084, 0x3}]}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0xe4a8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x1, 0x0, 0x7, 0x3}, {0x10000002, 0x20, 0x400084, 0x3}]}, 0x94) r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) (async) close(r0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5800000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac008600200f6ff0200050005c05e776189eab556a705251e618294ff0051f60a84c9f4d4938037e786c6c953000000000100000000", 0x58}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) (async) close(r3) recvmsg$unix(r2, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x64, &(0x7f0000000000)=r4, 0x10) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000140)=[{&(0x7f00000005c0)="df", 0x1}], 0x1}, 0x0) 1.811250543s ago: executing program 4 (id=8920): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x12000) sendmsg$unix(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="1c", 0x1}], 0x1, &(0x7f0000000500)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}, 0x41) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2b, 0x1, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x101}, 0x104046}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r2 = socket$kcm(0x10, 0x2, 0x10) (async) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) recvmsg$kcm(r3, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000a00)=""/221, 0xdd}, {&(0x7f00000008c0)=""/261, 0x105}, {&(0x7f0000003140)=""/4050, 0xfd2}, {&(0x7f00000014c0)=""/260, 0x104}, {&(0x7f0000000400)=""/183, 0xb7}, {&(0x7f0000000340)=""/176, 0xb0}, {&(0x7f0000000e80)=""/251, 0xfb}, {&(0x7f0000000bc0)=""/76, 0x4c}, {&(0x7f00000006c0)=""/180, 0xb4}, {&(0x7f00000005c0)=""/158, 0x9e}, {&(0x7f00000002c0)=""/78, 0x4e}, {&(0x7f0000000000)=""/62, 0x3e}, {&(0x7f0000000680)=""/59, 0x3b}, {&(0x7f0000000780)=""/224, 0xe0}, {&(0x7f0000000b00)=""/170, 0xaa}, {&(0x7f0000000d00)=""/242, 0xf2}], 0x10}, 0x0) (async) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000340)="1400000020000b0fd25a806c8c6f94f901a12182", 0x14}], 0x1}, 0x4000010) 1.782756694s ago: executing program 0 (id=8921): r0 = socket$kcm(0x11, 0xa, 0x300) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f00000017c0)={0x2, 0x4e20, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x19}, @empty}}}], 0x20}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000005"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="c50a0000000000007910480000000000610438000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000940)='E', 0x1}], 0x1, &(0x7f00000011c0)=ANY=[], 0x368}, 0x20044000) recvmsg$kcm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000011c0)=""/4096, 0x1000}], 0x1}, 0x0) sendmsg$sock(r0, &(0x7f0000000600)={&(0x7f0000000000)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x4}, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @default, @bcast]}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000140)="bccba8daf7c83b453297df05f661d62a0afc0f1cf3e292cb8d862c9d1235d59c29d158d71fdece72e6780bb2284f82772f0b23a494510b4b309ec496b81f87c430fa6aec1085fed04714f4e2677e99d4adbece9306c73c48b59134c3624412fe2dfb8a24c9f6c2e0d16e5fc0c6ab278a0c3d2c602fbedbc4f67e1e97866de09d7b2fa0a156f23af3ab5a1d375f202a58152f71594b7fd6239c7e369980223f4628f5dd3e8e760618bfba9651b86071979b9467a3cf08b3e0b79ba577535f791b4a9cfc37d655ccf8a9eec69ca95882571ab59a2258f8298065bbf6fded7efa5d8a9982b9f74178c649ee2d", 0xeb}, {&(0x7f0000000240)="c54d42feb57cd5882af5a64df1a6d9b9520e87b6c4b181388e46cf6da8f17bb426060db92d661e7200a5a484e46109e1d68a8eba50dc98d737b10ce9619e7ce5e525783c815bfc836b851e7d07db3a91afd6a7a3e7fdde5af041b98035210bd4f16fb01e113aaf63b32d577830b8c2bf9d9372a4dd76b3ef80c8fd945c68569fb09e097a5138764a94f0ac7a15fd9002b87c96e729fdb723850f231192059b339e1efcb36f8b6d90a7e6e31e47225a1556b3b56a9c5a8dfd70f62344c93f329de967", 0xc2}], 0x2, &(0x7f0000000500)=[@mark={{0x14, 0x1, 0x24, 0xa}}, @mark={{0x14, 0x1, 0x24, 0x7d9}}, @txtime={{0x18, 0x1, 0x3d, 0x9c}}, @txtime={{0x18}}, @mark={{0x14}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}, @mark={{0x14}}, @mark={{0x14, 0x1, 0x24, 0xd7b}}, @mark={{0x14, 0x1, 0x24, 0xee}}], 0xd8}, 0x20000000) 1.733495226s ago: executing program 3 (id=8834): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r1, &(0x7f0000000440)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000180)="8900", 0x2}, {&(0x7f0000000640)="25b2b3cbea4056eb9d315d760d7e9dfcd937", 0x12}], 0x2, 0x0, 0x0, 0x900}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x2, 0x4, 0x6, 0xb, 0x0, 0xffffffffffffffff, 0x40}, 0x50) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x6d, 0xfc, 0x5, 0x2, 0x0, 0x2, 0x8251d, 0x5, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7ff, 0x1, @perf_config_ext={0x4, 0xfffffffffffffffa}, 0x2000, 0x5, 0xfffffff9, 0x7, 0x9, 0x5018, 0x9, 0x0, 0x57, 0x0, 0x4}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0x9) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380), 0xc) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d08000b000000e8fe55a1180015000600142603600e1209000d0000000401a80016000a00014006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfe33) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000001c0)={0x0, 0x2a, &(0x7f0000000700)=[{&(0x7f0000000040)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="03000000", 0x4}], 0x2}, 0x40) syz_clone(0x160480, 0x0, 0x0, 0x0, 0x0, 0x0) 1.628019459s ago: executing program 1 (id=8922): socket$kcm(0xa, 0x2, 0x3a) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f0000000380)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x2, 0x18, &(0x7f00000008c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x65ed, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x200000000}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="00000000040000090000000000000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000c200000638af8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r4, 0x0, 0x0}, 0x10) perf_event_open(&(0x7f0000001700)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x1}, 0x8806, 0x3, 0x634e, 0x0, 0x0, 0x1, 0xfff6, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r6 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r6, 0x1, 0x2, &(0x7f00000002c0), 0x4) sendmsg$inet(r6, &(0x7f0000000300)={&(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000440)="9b", 0x1}], 0x1}, 0x4000044) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x2000000000000070, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000403000000000000fcffff018500bd08bc0000001801000020646c2400000000002000401007010000f8ffffffb702000008000000b70300000f00000085000000060000009500"/89], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f0000000680), &(0x7f0000000700)=r7}, 0x20) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r9}, 0xc) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r10, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x4000) 1.60078924s ago: executing program 4 (id=8923): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRESOCT], 0x50) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001418030000120800040043000000a8001600a400014020000b00feffff7fb94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) 1.503075643s ago: executing program 1 (id=8924): r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="bb", 0x1}], 0x1, &(0x7f0000000100)=[{0x10, 0x84, 0x2}], 0x10}, 0x0) 1.360039618s ago: executing program 1 (id=8925): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x5, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x4, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="5c00000015006b03000000d86e6c1d000a117ea6ea6567e71b59000af32c6e020075f800250002000f00000017d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f4d4938037e786a6d0bdd70000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xa}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r3, 0x29, 0x38, 0x0, 0x1300) close(0xffffffffffffffff) close(r2) close(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b15, 0x0) close(0xffffffffffffffff) 1.359494538s ago: executing program 4 (id=8926): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x2}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x20) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x442, 0x0) ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f0000000100)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000bf0000000000000000008500000020000000850000000500000095"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc0, &(0x7f0000002380)=""/192}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xf, 0x0, &(0x7f0000000780)="9b6f5bff000000de500cf0ad4f3127", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000300)={r4}, 0xc) r5 = openat$cgroup_int(r0, &(0x7f0000001180)='pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000480)=ANY=[@ANYBLOB='-', @ANYRESHEX, @ANYRESDEC], 0x8b) r6 = socket$kcm(0x10, 0x3, 0x10) openat$cgroup(0xffffffffffffffff, &(0x7f0000000200)='syz1\x00', 0x200002, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xa000000, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000015000b63d25a80648c2594f90924fc60", 0x14}], 0x1}, 0x0) 1.350198428s ago: executing program 3 (id=8927): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000a80)="d80000001d0081044e81f777db44b904021d0802feffff7f040000a1bc0001000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c16fb4007134cf6ee08000a0e408e8d8ef075c11503c6bbace801bcb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322107c9fd6", 0x81}, {&(0x7f00000006c0)="54f6d4d87eb3f140c5", 0x9}, {&(0x7f0000000980)="027a64c0072ebbb1512b328dda11b4efd4ba07fc642b7e012bea071dbbdea51e41958755533ccce04d3e635cbe848495e723490d8e93db224d82d4fbfe76bd22fd358cd467795ad7febfc220d72f", 0x4e}], 0x3, 0x0, 0x0, 0x7400}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x3000c085) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x15, 0x0, 0x2, 0xfffffffd}]}) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r1}, 0x0, 0x0}, 0x20) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa88"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040033, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000ff0f00000000000000000000180100002020780000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000800850000000600000085000000a000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.252574871s ago: executing program 1 (id=8928): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x3, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x11, 0x4, 0x4, 0x2, 0x0, 0x1, 0x1000000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@call={0x85, 0x0, 0x0, 0x23}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}, [@call={0x85, 0x0, 0x0, 0x7}]}, 0x0, 0x2}, 0x94) syz_clone(0x40100000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000fffffff700000000faffffff8500000005"], 0x0, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x29, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0x10, 0x2, 0x10) close(r4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x98, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x402, 0x3, 0x0, 0x0, 0x400, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0xfd, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(r3, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x7, 0xc272}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000d40)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket$kcm(0x23, 0x5, 0x0) write$cgroup_pressure(r5, 0x0, 0xeaff) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) 336.01687ms ago: executing program 0 (id=8929): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x2, &(0x7f0000000480)=ANY=[@ANYBLOB="850000008c00000006120000", @ANYRES32], &(0x7f0000000200)='syzkaller\x00'}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0xe, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) write$cgroup_subtree(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc12082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) write$cgroup_subtree(r2, &(0x7f00000004c0)=ANY=[], 0xfdef) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000017c0)={r0, 0xe0, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000014c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x5, &(0x7f0000001500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x44, &(0x7f00000015c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000001600), &(0x7f0000001640), 0x8, 0xe4, 0x8, 0x8, &(0x7f0000001680)}}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f00000001c0)=r2, 0x4) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001800), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001880)={0x4, 0x0}, 0x8) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000018c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001980)={{0x1, 0xffffffffffffffff}, &(0x7f0000001900), &(0x7f0000001940)=r0}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0xfc, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x14080, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x408, 0xca, 0x0, 0x2, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) r11 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r11, 0x40042408, r12) close(r10) recvmsg$unix(r9, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r13, &(0x7f0000000040)=ANY=[@ANYRES8=r10, @ANYBLOB='>^\"'], 0x9a) r14 = bpf$MAP_CREATE(0x0, &(0x7f00000019c0)=@bloom_filter={0x1e, 0x6, 0x9, 0x5, 0x8000, 0xffffffffffffffff, 0xaf5a, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x2, 0xa}, 0x50) r15 = bpf$MAP_CREATE(0x0, &(0x7f0000001a40)=@bloom_filter={0x1e, 0x5, 0x2, 0x3, 0x41050, 0xffffffffffffffff, 0xc44c, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0xa}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001b00)=@bpf_lsm={0x1d, 0x23, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x86d, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xa323}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffffc}, @exit, @alu={0x7, 0x0, 0x8, 0x5, 0x9, 0x50, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @ldst={0x0, 0x0, 0x4, 0x6, 0x9}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @exit, @map_fd={0x18, 0x9, 0x1, 0x0, r3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x1000, &(0x7f00000004c0)=""/4096, 0x41100, 0x87, '\x00', r4, 0x1b, r5, 0x8, &(0x7f0000001840)={0x0, 0x4}, 0x8, 0x10, 0x0, 0x0, r6, 0x0, 0x0, &(0x7f0000001ac0)=[r7, r8, r14, r15], 0x0, 0x10, 0x4}, 0x94) 335.49567ms ago: executing program 3 (id=8930): perf_event_open(&(0x7f0000000500)={0x2, 0x19, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x91c, 0x4156, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffff8}, 0x12640, 0x0, 0xfffffffe, 0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext, 0x0, 0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10005ff}, 0x0, 0x403, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x11, 0xa, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) socket$kcm(0x11, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007110ae000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) 334.6596ms ago: executing program 4 (id=8931): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="b90103616908068c3c270040e700", 0x0, 0x8104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)=0x1, 0x12) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1e, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x19}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x6f) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000140)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', r3}, 0x94) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=r3, @ANYRES32=0x0, @ANYBLOB="00000000051000200000100000eeffffffffffffff00000000000000"], 0x50) (async) perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="61158800000000006113500000000000bfa000000000000007000000ee0016055e0301000000000064050000000000006916340000000000bf07000000000000260507000fff07206706000020000000470600000ee60060bf500000000000002f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05002000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ace0600006e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc0da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d00c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932fb3bba54b3a6aa57f1ad2e99e0e67ab9ff16d20000009f0f53acbb40b4f8e2738270001562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000815266b2c9e1bfadc7498e9dda5d000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631822a11dc3c693962895496d4f6e9cc54db6c7205a6b26f92121ef53e553acdf42068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710eec53f1b11cced7bc3c8da0c44d2fbf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db80300c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f8709d87b27f8a5d9121fdc058447b728f134f72062fc4b1ca0780b1a7af137ff7b4ff139604faf0453b65586f65c7943d56b52f06c870edf0c5d744b5272b44c23480b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61940aabc86b94f8cbde4d47060400e722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d154672fea96aedf346279ec00000000000000000000d535d41b0067f01e2e54b9154d876020b669640ead4ca44631fadf7c4ac39a1b331dbdcd52b36df021b731ef1f92330d347f88ced5c1aaadbcdd8d2257e3a9a7c7494fadf9be36f7a2334ee6e9446fa1fd486f85d672a77dc5bd21463994d49f12016305a1e394d292b66840fe32b40ad665d241a8b8a32b3100450c32832789aa8a096f41201b585cd76631c88cf958e9e9047f5af1730c5e83db12460a0768fd4b62be6c41eed307048bac8d1f7f164574241e06027654b248dcc38749eee0c1ee7c61b3f6411a559c3d45637b11e440ed5a99109b8e71d28c3d677af5f0499c6d3fc6a129775056958c9df824ebe5fa9fb306b24a8a8334910627d03efe69d4b61c4345f048c5da8aca16cea848fa77d2507c920a6bd654b00e07789382ed902c80deeff2fd5c78f42e4353e5360c3e55962efd1331e6736eaf4ee27736fa54803ee8ec1a15266ffcd8b30368740b584c2559e691e542cab3d49db327db62328f159d1e0900b3e23e84dedcd1377aa15dbeab7db181bd66980c3557c7d9f7377fcb6023accb5c368a121acf70e5f4c3f2a0ea07011c7149ea979cab2ee65cf7ffa29152b7a8fed89575e6e6fd77d4d9463d21775abac886ee6a1f2d7d8523840438a73d6307a87e2f525867fc3af7ab74520a773ae26bae74cdd405a211e8833e1ba523cde51d04a7ca6732"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) (async) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)) (async) sendmsg$unix(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f00000001c0)='D', 0x33fe0}], 0x1}, 0x20000040) (async) sendmsg(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$unix(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x30048894) (async) close(r4) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) socket$kcm(0xa, 0x3, 0x73) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x200000000000, 0x80420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x5, 0x9c, &(0x7f0000000000)=""/156}, 0x94) (async) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f95224fc60040011000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xa, 0x8, &(0x7f00000005c0)=ANY=[@ANYBLOB="180800000000000000000000000000001812006cd2257f18c4ab6c82cd5514f96f314b0017d3c083ad9f8ddd5f2c0c03598865ac867978b1", @ANYRESDEC=r5, @ANYBLOB="0000000000000000b703000000000000850000000c0000f5c2000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 199.950424ms ago: executing program 4 (id=8932): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x4002, 0x7, 0x0, 0x1, 0x400}, 0x50) (async, rerun: 64) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) (rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd}, 0x39) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r0}, &(0x7f0000000140), &(0x7f0000000380)}, 0x20) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYRES8=r2], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000009c0)="ec", 0x1}], 0x1, &(0x7f0000000780)=ANY=[@ANYBLOB="1400000000000000"], 0x18}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x12, 0x4d, 0x4000004, 0x2}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2d0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x10c002, 0xac5d, 0x10000200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000500), &(0x7f0000000000)=""/7, 0x2}, 0x20) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x401c5820, &(0x7f0000000000)=0x818) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x22a82, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x50) (async) perf_event_open(&(0x7f00000003c0)={0x3, 0x80, 0x4e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffff, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'geneve0\x00', 0x8000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x8090) (async) recvmsg$unix(r6, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (async) r8 = socket$kcm(0xa, 0x2, 0x88) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r8, 0x1, 0x3e, &(0x7f00000002c0)=r9, 0x4) 109.820167ms ago: executing program 3 (id=8933): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x40, 0x6, 0x8}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r0}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r0, 0x58, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x9, [@enum64={0x6, 0x1, 0x0, 0x13, 0x0, 0xa, [{0x6, 0x6, 0xe568}]}]}, {0x0, [0x6f, 0x30, 0x2e, 0x61, 0x30, 0x5f, 0x2e]}}, &(0x7f00000002c0)=""/108, 0x39, 0x6c, 0x3, 0x3ff, 0x10000}, 0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x2}]}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}, @restrict={0x0, 0x0, 0x0, 0x4}]}}, 0x0, 0x4a}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0xa, '\x00', r2, r3, 0x4, 0x2, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000000), &(0x7f0000000200)}, 0x20) 0s ago: executing program 1 (id=8934): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\b', @ANYRES32], 0x48) r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[], &(0x7f0000000100)=""/228, 0x42, 0xe4, 0x7}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f00000001c0)=0xa00, &(0x7f0000000200)}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ebffffff000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b0000000000000000"], 0x50) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0xff, 0x0, 0x9, 0x2212, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x7ffc, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0xa, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0)={0xffffffffffffffff}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r4, 0x0, 0x12, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') kernel console output (not intermixed with test programs): [T29874] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 1079.063758][T29874] netlink_rcv_skb+0x1fb/0x450 [ 1079.068515][T29874] ? genl_bind+0x360/0x360 [ 1079.072926][T29874] ? netlink_ack+0x1170/0x1170 [ 1079.077688][T29874] ? down_read+0x1a8/0x2d0 [ 1079.082099][T29874] genl_rcv+0x24/0x40 [ 1079.086071][T29874] netlink_unicast+0x74d/0x8d0 [ 1079.090834][T29874] netlink_sendmsg+0x8ad/0xbd0 [ 1079.095597][T29874] ? netlink_getsockopt+0x550/0x550 [ 1079.100790][T29874] ? aa_sock_msg_perm+0x94/0x150 [ 1079.105722][T29874] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1079.110999][T29874] ? security_socket_sendmsg+0x7c/0xa0 [ 1079.116449][T29874] ? netlink_getsockopt+0x550/0x550 [ 1079.121637][T29874] ____sys_sendmsg+0x5be/0x970 [ 1079.126402][T29874] ? __sys_sendmsg_sock+0x30/0x30 [ 1079.131415][T29874] ? __import_iovec+0x315/0x500 [ 1079.136266][T29874] ? import_iovec+0x6f/0xa0 [ 1079.140762][T29874] ___sys_sendmsg+0x2a2/0x360 [ 1079.145434][T29874] ? __sys_sendmsg+0x290/0x290 [ 1079.150224][T29874] __se_sys_sendmsg+0x1bb/0x2a0 [ 1079.155074][T29874] ? __x64_sys_sendmsg+0x80/0x80 [ 1079.160016][T29874] ? lockdep_hardirqs_on+0x94/0x140 [ 1079.165210][T29874] do_syscall_64+0x4c/0xa0 [ 1079.169618][T29874] ? clear_bhb_loop+0x60/0xb0 [ 1079.174291][T29874] ? clear_bhb_loop+0x60/0xb0 [ 1079.178962][T29874] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1079.184846][T29874] RIP: 0033:0x7fbea399ce59 [ 1079.189254][T29874] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1079.208849][T29874] RSP: 002b:00007fbea4806028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1079.217252][T29874] RAX: ffffffffffffffda RBX: 00007fbea3c15fa0 RCX: 00007fbea399ce59 [ 1079.225218][T29874] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 1079.233183][T29874] RBP: 00007fbea3a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 1079.241145][T29874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1079.249107][T29874] R13: 00007fbea3c16038 R14: 00007fbea3c15fa0 R15: 00007ffe97110888 [ 1079.257084][T29874] [ 1079.374604][T29882] netlink: 'syz.2.6815': attribute type 10 has an invalid length. [ 1079.382625][T29882] __nla_validate_parse: 4 callbacks suppressed [ 1079.382673][T29882] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6815'. [ 1079.407729][T29882] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 1079.537615][T29894] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6818'. [ 1079.568790][T29894] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6818'. [ 1079.875331][T29894] netlink: 33 bytes leftover after parsing attributes in process `syz.1.6818'. [ 1080.324031][T29917] netlink: 144 bytes leftover after parsing attributes in process `syz.4.6824'. [ 1080.530781][T29923] netlink: 'syz.4.6827': attribute type 39 has an invalid length. [ 1080.540858][T29923] netlink: 'syz.4.6827': attribute type 10 has an invalid length. [ 1080.825474][T29938] mac80211_hwsim hwsim56 ªªªªªª: renamed from wlan0 [ 1081.357177][T29967] netlink: 'syz.0.6836': attribute type 3 has an invalid length. [ 1081.487269][T29967] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.6836'. [ 1081.889683][T29979] netlink: 'syz.4.6840': attribute type 30 has an invalid length. [ 1081.944045][ T4283] Bluetooth: hci4: command 0x0406 tx timeout [ 1082.664152][T10804] wlan1: Trigger new scan to find an IBSS to join [ 1084.804389][T30009] netlink: 156 bytes leftover after parsing attributes in process `syz.1.6849'. [ 1085.427143][T30044] netlink: 'syz.0.6861': attribute type 25 has an invalid length. [ 1085.446662][T30044] netlink: 'syz.0.6861': attribute type 29 has an invalid length. [ 1085.466373][T30044] netlink: 5 bytes leftover after parsing attributes in process `syz.0.6861'. [ 1086.745163][ T56] wlan1: Trigger new scan to find an IBSS to join [ 1086.867702][ T56] wlan1: Creating new IBSS network, BSSID fe:f2:db:06:76:7c [ 1087.082557][T30119] netlink: 'syz.3.6881': attribute type 11 has an invalid length. [ 1087.533458][T30132] netlink: 128 bytes leftover after parsing attributes in process `syz.2.6885'. [ 1087.555156][T30132] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1087.656351][T30132] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1088.036861][T30149] netlink: 'syz.3.6889': attribute type 21 has an invalid length. [ 1088.066305][T30149] netlink: 'syz.3.6889': attribute type 1 has an invalid length. [ 1088.222827][T30160] netlink: 14 bytes leftover after parsing attributes in process `syz.0.6895'. [ 1088.254178][T30160] openvswitch: netlink: Flow key attr not present in new flow. [ 1088.403331][T30170] netlink: 'syz.3.6897': attribute type 4 has an invalid length. [ 1088.422157][T30170] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.6897'. [ 1088.422948][T30172] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.6898'. [ 1088.504065][T30171] netlink: 'syz.4.6894': attribute type 1 has an invalid length. [ 1088.848820][T30186] delete_channel: no stack [ 1088.853847][T30186] delete_channel: no stack [ 1088.899742][T30195] netlink: 144 bytes leftover after parsing attributes in process `syz.2.6905'. [ 1088.969271][T30188] netlink: 196 bytes leftover after parsing attributes in process `syz.3.6904'. [ 1089.010073][T30188] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1089.102404][T30186] netlink: 196 bytes leftover after parsing attributes in process `syz.3.6904'. [ 1089.124716][T30186] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1089.462394][T30202] netlink: 194236 bytes leftover after parsing attributes in process `syz.1.6906'. [ 1089.496862][T30202] netlink: zone id is out of range [ 1089.502468][T30202] netlink: zone id is out of range [ 1089.522234][T30202] netlink: zone id is out of range [ 1089.548306][T30202] netlink: zone id is out of range [ 1089.577148][T30202] netlink: zone id is out of range [ 1089.607604][T30202] netlink: zone id is out of range [ 1089.632099][T30202] netlink: zone id is out of range [ 1089.656510][T30202] netlink: get zone limit has 8 unknown bytes [ 1090.468946][T30224] netlink: 'syz.2.6913': attribute type 41 has an invalid length. [ 1091.079935][T30226] netlink: 'syz.2.6914': attribute type 1 has an invalid length. [ 1091.251115][T30241] netlink: 'syz.3.6920': attribute type 3 has an invalid length. [ 1091.294665][T30241] netlink: 163968 bytes leftover after parsing attributes in process `syz.3.6920'. [ 1091.691439][T30272] netlink: 'syz.1.6924': attribute type 3 has an invalid length. [ 1091.801380][T30272] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.6924'. [ 1091.834156][T30275] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6939'. [ 1091.947753][T30279] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1091.989846][T30283] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6929'. [ 1092.090674][T30284] device bridge_slave_1 left promiscuous mode [ 1092.104245][T30284] bridge0: port 2(bridge_slave_1) entered disabled state [ 1092.128684][T30284] device bridge_slave_0 left promiscuous mode [ 1092.135259][T30284] bridge0: port 1(bridge_slave_0) entered disabled state [ 1092.185224][ T4284] Bluetooth: hci1: command 0x0406 tx timeout [ 1092.608924][T30288] netlink: 'syz.0.6930': attribute type 1 has an invalid length. [ 1092.828555][T30299] netlink: 'syz.4.6933': attribute type 10 has an invalid length. [ 1092.846097][T30299] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6933'. [ 1092.881469][T30299] netlink: 'syz.4.6933': attribute type 10 has an invalid length. [ 1092.891531][T30299] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6933'. [ 1092.960256][ T4284] Bluetooth: hci3: ISO packet for unknown connection handle 2366 [ 1092.971282][T30312] netlink: 'syz.1.6938': attribute type 1 has an invalid length. [ 1094.080506][T30311] netlink: 'syz.2.6940': attribute type 3 has an invalid length. [ 1094.305404][T30326] netlink: 'syz.3.6944': attribute type 10 has an invalid length. [ 1094.321999][T30326] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6944'. [ 1094.368239][T30326] device ipvlan1 entered promiscuous mode [ 1094.420358][T30326] net_ratelimit: 1 callbacks suppressed [ 1094.420377][T30326] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1094.883248][T30326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1095.010948][T30326] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1095.032617][T30338] IPv6: NLM_F_CREATE should be specified when creating new route [ 1095.685218][T30368] netlink: 144 bytes leftover after parsing attributes in process `syz.2.6955'. [ 1095.929170][T30371] validate_nla: 2 callbacks suppressed [ 1095.929222][T30371] netlink: 'syz.0.6956': attribute type 10 has an invalid length. [ 1098.568592][T30371] team0: Device wg1 is of different type [ 1098.605211][T30372] netlink: 'syz.1.6957': attribute type 10 has an invalid length. [ 1098.631838][T30372] team0: Device hsr_slave_0 failed to register rx_handler [ 1098.937513][T30390] netlink: 60583 bytes leftover after parsing attributes in process `syz.1.6961'. [ 1098.951002][T30390] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6961'. [ 1099.038571][T30401] netlink: 'syz.0.6965': attribute type 39 has an invalid length. [ 1099.349090][T30414] netlink: 'syz.3.6971': attribute type 27 has an invalid length. [ 1099.374294][T30414] netlink: 164 bytes leftover after parsing attributes in process `syz.3.6971'. [ 1099.980396][T30441] device bond_slave_1 entered promiscuous mode [ 1100.161790][ T4284] Bluetooth: hci3: ISO packet too small [ 1100.199073][T30448] device pim6reg1 entered promiscuous mode [ 1100.291122][T30455] netlink: 'syz.1.6981': attribute type 3 has an invalid length. [ 1100.359792][T30455] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.6981'. [ 1101.806039][T30495] netlink: 'syz.3.6992': attribute type 17 has an invalid length. [ 1101.817379][T30495] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6992'. [ 1101.827142][T30495] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1101.843113][T30498] device sit0 entered promiscuous mode [ 1101.960661][T30505] netlink: 202920 bytes leftover after parsing attributes in process `syz.3.6994'. [ 1102.222418][T30520] netlink: 'syz.4.6999': attribute type 13 has an invalid length. [ 1102.243528][T30520] netlink: 152 bytes leftover after parsing attributes in process `syz.4.6999'. [ 1102.424365][ T4283] Bluetooth: hci0: command 0x0406 tx timeout [ 1102.880474][T30538] syzkaller0: tun_chr_ioctl cmd 2147767520 [ 1102.979442][T30548] netlink: 'syz.2.7006': attribute type 3 has an invalid length. [ 1103.035490][T30548] netlink: 'syz.2.7006': attribute type 1 has an invalid length. [ 1103.082315][T30548] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.7006'. [ 1103.859302][T30598] Ÿë: port 1(gretap0) entered blocking state [ 1103.877173][T30598] Ÿë: port 1(gretap0) entered disabled state [ 1103.893389][T30598] device gretap0 entered promiscuous mode [ 1103.948037][T30598] Ÿë: port 2(veth0_to_team) entered blocking state [ 1103.964941][T30598] Ÿë: port 2(veth0_to_team) entered disabled state [ 1103.992389][T30598] device veth0_to_team entered promiscuous mode [ 1104.085673][T30612] netlink: 175 bytes leftover after parsing attributes in process `syz.3.7024'. [ 1104.107528][T30616] netlink: 'syz.3.7024': attribute type 10 has an invalid length. [ 1104.588152][T30645] netlink: 'syz.3.7031': attribute type 10 has an invalid length. [ 1105.717066][T30698] netlink: 'syz.4.7046': attribute type 39 has an invalid length. [ 1107.266916][T30746] mac80211_hwsim hwsim61 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1107.298511][T30746] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7059'. [ 1107.809287][T30765] netlink: 128 bytes leftover after parsing attributes in process `syz.4.7067'. [ 1107.834139][T30765] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1107.858225][T30765] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1107.894385][T30763] netlink: 'syz.0.7066': attribute type 17 has an invalid length. [ 1107.916422][T30763] netlink: 152 bytes leftover after parsing attributes in process `syz.0.7066'. [ 1107.959695][T30763] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1108.007894][T30763] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1108.359649][T30774] netlink: 'syz.1.7070': attribute type 10 has an invalid length. [ 1108.391838][T30774] netlink: 55 bytes leftover after parsing attributes in process `syz.1.7070'. [ 1110.707868][T30793] netlink: 'syz.4.7075': attribute type 21 has an invalid length. [ 1111.125364][T30812] netlink: 'syz.1.7081': attribute type 2 has an invalid length. [ 1111.197423][T30812] netlink: 'syz.1.7081': attribute type 8 has an invalid length. [ 1111.246884][T30812] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7081'. [ 1111.474157][T30822] netlink: 'syz.3.7082': attribute type 10 has an invalid length. [ 1111.663448][T30828] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7085'. [ 1111.735960][T30831] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7087'. [ 1112.816487][T30843] device syzkaller0 entered promiscuous mode [ 1112.836953][T30845] device pim6reg1 entered promiscuous mode [ 1113.559736][T30894] sctp: [Deprecated]: syz.1.7101 (pid 30894) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1113.559736][T30894] Use struct sctp_sack_info instead [ 1113.622073][T30897] netlink: 'syz.4.7106': attribute type 6 has an invalid length. [ 1113.639020][T30897] netlink: 168 bytes leftover after parsing attributes in process `syz.4.7106'. [ 1113.983636][T30918] netlink: 'syz.4.7111': attribute type 3 has an invalid length. [ 1114.047515][T30918] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.7111'. [ 1114.485962][T30929] netlink: 'syz.2.7114': attribute type 1 has an invalid length. [ 1114.569958][T30931] netlink: 'syz.2.7114': attribute type 1 has an invalid length. [ 1114.781718][T30943] netlink: 'syz.3.7117': attribute type 29 has an invalid length. [ 1114.831777][T30943] netlink: 'syz.3.7117': attribute type 29 has an invalid length. [ 1114.860377][T30945] netlink: 'syz.3.7117': attribute type 29 has an invalid length. [ 1114.938935][T30945] netlink: 'syz.3.7117': attribute type 29 has an invalid length. [ 1114.977999][T30946] netlink: 'syz.3.7117': attribute type 29 has an invalid length. [ 1114.980297][T30948] netlink: 134056 bytes leftover after parsing attributes in process `syz.0.7118'. [ 1115.270926][T30959] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.7121'. [ 1115.602366][T30968] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7124'. [ 1115.643340][T30968] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7124'. [ 1115.684733][T30971] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7124'. [ 1115.715844][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.722189][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.972790][T30977] tc_dump_action: action bad kind [ 1116.121086][T30984] netlink: 'syz.2.7131': attribute type 33 has an invalid length. [ 1116.370289][T30991] __nla_validate_parse: 12 callbacks suppressed [ 1116.370306][T30991] netlink: 1010 bytes leftover after parsing attributes in process `syz.0.7132'. [ 1116.827364][T31008] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7137'. [ 1117.032839][T31016] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7137'. [ 1117.693814][T31031] netlink: 191184 bytes leftover after parsing attributes in process `syz.2.7146'. [ 1118.545473][T31056] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 1118.551780][T31056] syzkaller0: linktype set to 776 [ 1118.629097][T31066] netlink: 16170 bytes leftover after parsing attributes in process `syz.2.7154'. [ 1119.603785][T31070] validate_nla: 5 callbacks suppressed [ 1119.603804][T31070] netlink: 'syz.2.7154': attribute type 13 has an invalid length. [ 1119.642634][T31070] netlink: 152 bytes leftover after parsing attributes in process `syz.2.7154'. [ 1119.672882][T31070] syz_tun: refused to change device tx_queue_len [ 1119.705845][T31070] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1120.168945][T31084] netlink: 'syz.3.7161': attribute type 3 has an invalid length. [ 1120.194420][T31084] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.7161'. [ 1120.476112][T31094] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7163'. [ 1120.851219][T31108] raw_sendmsg: syz.2.7165 forgot to set AF_INET. Fix it! [ 1121.112917][T31114] netlink: 'syz.3.7170': attribute type 1 has an invalid length. [ 1121.154098][T31114] netlink: 131740 bytes leftover after parsing attributes in process `syz.3.7170'. [ 1123.033609][T31164] netlink: 'syz.1.7186': attribute type 2 has an invalid length. [ 1123.058404][T31164] netlink: 10 bytes leftover after parsing attributes in process `syz.1.7186'. [ 1126.568597][T31196] netlink: 'syz.0.7194': attribute type 21 has an invalid length. [ 1126.593107][T31196] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7194'. [ 1126.605093][T31196] netlink: 'syz.0.7194': attribute type 1 has an invalid length. [ 1126.731273][T31205] netlink: 'syz.2.7198': attribute type 11 has an invalid length. [ 1126.761076][T31205] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.7198'. [ 1127.597097][T31204] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1127.812233][T31221] device pim6reg1 entered promiscuous mode [ 1127.872619][T31236] netlink: 'syz.3.7205': attribute type 29 has an invalid length. [ 1127.894484][T31236] netlink: 'syz.3.7205': attribute type 29 has an invalid length. [ 1127.911409][T31231] netlink: 'syz.3.7205': attribute type 29 has an invalid length. [ 1127.934929][T31239] netlink: 'syz.3.7205': attribute type 29 has an invalid length. [ 1128.016771][T31243] ÿÿÿÿÿÿÿ: port 1(team0) entered blocking state [ 1128.029221][T31243] ÿÿÿÿÿÿÿ: port 1(team0) entered disabled state [ 1128.041855][T31243] device team0 entered promiscuous mode [ 1128.047630][T31243] device team_slave_0 entered promiscuous mode [ 1128.057018][T31243] device team_slave_1 entered promiscuous mode [ 1128.063579][T31243] device bond0 entered promiscuous mode [ 1128.069835][T31243] device bond_slave_1 entered promiscuous mode [ 1128.084231][T31243] device bridge_slave_1 entered promiscuous mode [ 1128.338835][T31261] netlink: 'syz.3.7214': attribute type 21 has an invalid length. [ 1128.358155][T31261] IPv6: NLM_F_CREATE should be specified when creating new route [ 1128.366985][T31261] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1128.374414][T31261] IPv6: NLM_F_CREATE should be set when creating new route [ 1128.381759][T31261] IPv6: NLM_F_CREATE should be set when creating new route [ 1128.389256][T31261] IPv6: NLM_F_CREATE should be set when creating new route [ 1128.987573][T31308] netlink: 188 bytes leftover after parsing attributes in process `syz.0.7228'. [ 1129.024587][T31308] ksmbd: Daemon and kernel module version mismatch. ksmbd: 2, kernel module: 1. User-space ksmbd should terminate. [ 1129.076865][T31308] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7228'. [ 1129.194570][T31315] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7230'. [ 1132.351250][T31375] netlink: 14 bytes leftover after parsing attributes in process `syz.1.7244'. [ 1132.523583][T31375] device hsr_slave_0 left promiscuous mode [ 1132.579227][T31375] device hsr_slave_1 left promiscuous mode [ 1132.952217][T31378] netlink: 14 bytes leftover after parsing attributes in process `syz.1.7244'. [ 1132.976174][T31393] netlink: 'syz.3.7247': attribute type 21 has an invalid length. [ 1132.995942][T31393] netlink: 'syz.3.7247': attribute type 1 has an invalid length. [ 1134.419415][T31444] device wlan1 entered promiscuous mode [ 1134.683044][T31452] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.7264'. [ 1134.732799][T31452] netlink: 6332 bytes leftover after parsing attributes in process `syz.1.7264'. [ 1134.775438][T31448] netlink: 'syz.0.7265': attribute type 10 has an invalid length. [ 1135.141994][T31458] netlink: 64859 bytes leftover after parsing attributes in process `syz.4.7268'. [ 1135.976195][T31460] netlink: 'syz.1.7269': attribute type 7 has an invalid length. [ 1136.084723][T31469] device veth1_macvtap left promiscuous mode [ 1136.284128][T31473] netlink: 'syz.2.7270': attribute type 27 has an invalid length. [ 1136.312850][T31485] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7275'. [ 1136.316587][T31465] delete_channel: no stack [ 1136.396080][T31487] netlink: 152 bytes leftover after parsing attributes in process `syz.4.7276'. [ 1136.688782][T31502] FAULT_INJECTION: forcing a failure. [ 1136.688782][T31502] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1136.750571][T31502] CPU: 0 PID: 31502 Comm: syz.4.7280 Not tainted syzkaller #0 [ 1136.758109][T31502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1136.768189][T31502] Call Trace: [ 1136.771486][T31502] [ 1136.774430][T31502] dump_stack_lvl+0x188/0x24e [ 1136.779127][T31502] ? show_regs_print_info+0x12/0x12 [ 1136.784344][T31502] ? load_image+0x400/0x400 [ 1136.788874][T31502] ? __lock_acquire+0x7d10/0x7d10 [ 1136.793920][T31502] ? ktime_get+0x7b/0x270 [ 1136.798260][T31502] should_fail_ex+0x399/0x4d0 [ 1136.802934][T31502] _copy_from_user+0x2c/0x170 [ 1136.807611][T31502] perf_copy_attr+0x174/0x850 [ 1136.812326][T31502] __se_sys_perf_event_open+0xf5/0x1ec0 [ 1136.817863][T31502] ? clockevents_program_event+0x22c/0x310 [ 1136.823735][T31502] ? ct_nmi_exit+0x145/0x1c0 [ 1136.828322][T31502] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 1136.833960][T31502] ? lockdep_hardirqs_on+0x94/0x140 [ 1136.839153][T31502] ? __x64_sys_perf_event_open+0x1c/0xc0 [ 1136.844778][T31502] do_syscall_64+0x4c/0xa0 [ 1136.849184][T31502] ? clear_bhb_loop+0x60/0xb0 [ 1136.853857][T31502] ? clear_bhb_loop+0x60/0xb0 [ 1136.858536][T31502] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1136.864429][T31502] RIP: 0033:0x7fc1e259ce59 [ 1136.868839][T31502] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1136.888440][T31502] RSP: 002b:00007fc1e3520028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1136.896847][T31502] RAX: ffffffffffffffda RBX: 00007fc1e2816090 RCX: 00007fc1e259ce59 [ 1136.904811][T31502] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000480 [ 1136.912775][T31502] RBP: 00007fc1e3520090 R08: 0000000000000008 R09: 0000000000000000 [ 1136.920741][T31502] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 1136.928709][T31502] R13: 00007fc1e2816128 R14: 00007fc1e2816090 R15: 00007ffe885c98d8 [ 1136.936688][T31502] [ 1139.644541][T31540] netlink: 'syz.3.7291': attribute type 1 has an invalid length. [ 1139.652626][T31540] netlink: 116376 bytes leftover after parsing attributes in process `syz.3.7291'. [ 1139.760975][T31549] netlink: 'syz.4.7293': attribute type 28 has an invalid length. [ 1139.793979][T31549] netlink: 'syz.4.7293': attribute type 3 has an invalid length. [ 1139.815214][T31549] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7293'. [ 1140.039728][T31563] netlink: 'syz.2.7296': attribute type 2 has an invalid length. [ 1140.180482][T31568] netlink: 'syz.0.7299': attribute type 17 has an invalid length. [ 1140.220208][T31568] netlink: 'syz.0.7299': attribute type 16 has an invalid length. [ 1140.254039][T31568] netlink: 152 bytes leftover after parsing attributes in process `syz.0.7299'. [ 1140.294913][T31570] netlink: 'syz.3.7300': attribute type 22 has an invalid length. [ 1140.533414][T31583] netlink: 'syz.4.7305': attribute type 5 has an invalid length. [ 1140.571988][T31583] netlink: 176 bytes leftover after parsing attributes in process `syz.4.7305'. [ 1140.770440][T31583] netlink: 14 bytes leftover after parsing attributes in process `syz.4.7305'. [ 1140.834678][T31583] device hsr_slave_0 left promiscuous mode [ 1140.905918][T31583] device hsr_slave_1 left promiscuous mode [ 1141.895725][T31604] netlink: 'syz.4.7310': attribute type 10 has an invalid length. [ 1141.903602][T31604] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7310'. [ 1142.061558][T31612] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7311'. [ 1142.160879][T31618] netlink: 'syz.0.7312': attribute type 39 has an invalid length. [ 1142.298223][T31613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1142.336398][T31613] device batadv0 entered promiscuous mode [ 1142.342737][T31613] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1142.476404][T31635] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.7315'. [ 1142.634143][T10810] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1142.643466][T10810] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1142.859507][T31639] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7316'. [ 1142.913105][T31642] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7316'. [ 1143.158432][T31663] netlink: 10 bytes leftover after parsing attributes in process `syz.3.7323'. [ 1143.645510][T31685] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1146.461644][T31721] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1146.483047][T31721] validate_nla: 6 callbacks suppressed [ 1146.483087][T31721] netlink: 'syz.3.7339': attribute type 6 has an invalid length. [ 1147.039029][T31737] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 1147.055343][T31737] syzkaller0: Linktype set failed because interface is up [ 1147.291031][T31749] netlink: 'syz.0.7346': attribute type 10 has an invalid length. [ 1147.319769][T31749] __nla_validate_parse: 3 callbacks suppressed [ 1147.319785][T31749] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7346'. [ 1150.238337][T31771] netlink: 'syz.0.7346': attribute type 10 has an invalid length. [ 1150.784319][T31799] netlink: 'syz.2.7358': attribute type 2 has an invalid length. [ 1150.830433][T31799] netlink: 'syz.2.7358': attribute type 8 has an invalid length. [ 1150.855508][T31799] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7358'. [ 1151.873197][T31818] netlink: 'syz.4.7365': attribute type 9 has an invalid length. [ 1151.904162][T31818] netlink: 61951 bytes leftover after parsing attributes in process `syz.4.7365'. [ 1151.953291][T31820] netlink: 'syz.4.7365': attribute type 29 has an invalid length. [ 1151.959961][T31825] netlink: 'syz.2.7367': attribute type 10 has an invalid length. [ 1152.029342][T31820] netlink: 'syz.4.7365': attribute type 29 has an invalid length. [ 1152.074781][T31818] netlink: 'syz.4.7365': attribute type 29 has an invalid length. [ 1152.100020][T31820] netlink: 'syz.4.7365': attribute type 29 has an invalid length. [ 1152.130769][T31818] netlink: 'syz.4.7365': attribute type 29 has an invalid length. [ 1152.402118][T31839] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7373'. [ 1152.878818][T31854] netlink: 'syz.2.7377': attribute type 1 has an invalid length. [ 1152.931590][T31854] netlink: 112865 bytes leftover after parsing attributes in process `syz.2.7377'. [ 1152.976517][T31854] device syzkaller0 left promiscuous mode [ 1153.129620][T31858] netlink: 'syz.1.7379': attribute type 10 has an invalid length. [ 1153.140256][T31858] netlink: 2 bytes leftover after parsing attributes in process `syz.1.7379'. [ 1153.213114][T31858] team0: Port device bond0 removed [ 1153.246085][T31858] bridge0: port 2(bond0) entered blocking state [ 1153.253756][T31858] bridge0: port 2(bond0) entered disabled state [ 1153.266237][T31859] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.7378'. [ 1153.290175][T31865] netlink: 'syz.4.7378': attribute type 16 has an invalid length. [ 1153.309031][T31865] netlink: 152 bytes leftover after parsing attributes in process `syz.4.7378'. [ 1153.350440][T31856] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.7378'. [ 1153.421168][T31871] netlink: 156 bytes leftover after parsing attributes in process `syz.0.7392'. [ 1153.962494][T31891] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7389'. [ 1153.993728][T31891] device dummy0 entered promiscuous mode [ 1154.028222][T31891] bridge0: port 4(dummy0) entered blocking state [ 1154.045706][T31891] bridge0: port 4(dummy0) entered disabled state [ 1154.078157][T31891] bridge0: port 4(dummy0) entered blocking state [ 1154.084931][T31891] bridge0: port 4(dummy0) entered forwarding state [ 1154.240151][T31902] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.7394'. [ 1154.426139][ T4284] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1154.438026][ T4284] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1154.445916][ T4284] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1154.458149][ T4284] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1154.466532][ T4284] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1154.473788][ T4284] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1154.563384][T12359] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1154.682512][T12359] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1154.764347][T12359] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1155.272071][T12359] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1155.728028][T31938] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7409'. [ 1155.757821][T31912] chnl_net:caif_netlink_parms(): no params data found [ 1156.080715][T31912] bridge0: port 1(bridge_slave_0) entered blocking state [ 1156.113981][T31912] bridge0: port 1(bridge_slave_0) entered disabled state [ 1156.122504][T31912] device bridge_slave_0 entered promiscuous mode [ 1156.163481][T31912] bridge0: port 2(bridge_slave_1) entered blocking state [ 1156.190138][T31912] bridge0: port 2(bridge_slave_1) entered disabled state [ 1156.212521][T31912] device bridge_slave_1 entered promiscuous mode [ 1156.309343][T31958] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 1156.504147][ T4283] Bluetooth: hci2: command 0x0409 tx timeout [ 1156.514937][T31912] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1156.531016][T31912] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1156.579068][T31912] team0: Port device team_slave_0 added [ 1156.663174][T31912] team0: Port device team_slave_1 added [ 1156.780856][T31912] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1156.792899][T31912] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1156.848426][T31912] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1156.928651][T31912] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1156.935820][T31912] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1157.105539][T31912] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1157.568814][T31999] __nla_validate_parse: 1 callbacks suppressed [ 1157.568830][T31999] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.7414'. [ 1157.730761][T31912] device hsr_slave_0 entered promiscuous mode [ 1157.739307][T31912] device hsr_slave_1 entered promiscuous mode [ 1157.748240][T31912] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1157.757245][T31912] Cannot create hsr debugfs directory [ 1157.774162][T32018] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7418'. [ 1157.826350][T32021] validate_nla: 4 callbacks suppressed [ 1157.826369][T32021] netlink: 'syz.0.7417': attribute type 2 has an invalid length. [ 1157.854876][T32021] netlink: 'syz.0.7417': attribute type 8 has an invalid length. [ 1157.862683][T32021] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7417'. [ 1158.090503][T12359] device gretap0 left promiscuous mode [ 1158.120855][T12359] Ÿë: port 1(gretap0) entered disabled state [ 1158.585455][ T4283] Bluetooth: hci2: command 0x041b tx timeout [ 1158.839126][T32042] netlink: 'syz.3.7424': attribute type 21 has an invalid length. [ 1158.862654][T32042] netlink: 'syz.3.7424': attribute type 1 has an invalid length. [ 1158.913688][T32042] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7424'. [ 1159.038953][T32042] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7424'. [ 1159.260090][T12359] team0: Port device wlan1 removed [ 1159.542381][T32068] netlink: 'syz.1.7428': attribute type 3 has an invalid length. [ 1159.566241][T32062] netlink: 72 bytes leftover after parsing attributes in process `syz.1.7428'. [ 1159.584369][T32068] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.7428'. [ 1160.664045][ T4283] Bluetooth: hci2: command 0x040f tx timeout [ 1160.995978][T12359] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1161.013805][T12359] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1161.037216][T12359] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1161.045053][T12359] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1161.053715][T12359] bridge0: port 3(bond0) entered disabled state [ 1161.061865][T12359] device bridge_slave_1 left promiscuous mode [ 1161.069754][T12359] bridge0: port 2(bridge_slave_1) entered disabled state [ 1161.096001][T12359] device bridge_slave_0 left promiscuous mode [ 1161.102239][T12359] bridge0: port 1(bridge_slave_0) entered disabled state [ 1161.181195][T12359] device veth1_macvtap left promiscuous mode [ 1161.252395][T32085] netlink: 5 bytes leftover after parsing attributes in process `syz.0.7433'. [ 1161.275285][T32085] netlink: 'syz.0.7433': attribute type 1 has an invalid length. [ 1161.518626][T32096] netlink: 'syz.1.7436': attribute type 2 has an invalid length. [ 1162.744157][ T4283] Bluetooth: hci2: command 0x0419 tx timeout [ 1163.544740][T12359] team0 (unregistering): Port device team_slave_1 removed [ 1163.580070][T12359] team0 (unregistering): Port device C removed [ 1163.612179][T12359] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1163.621123][T12359] device bond_slave_1 left promiscuous mode [ 1163.786603][T12359] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 1163.799322][T12359] device batadv0 left promiscuous mode [ 1163.867460][T12359] bond0 (unregistering): Released all slaves [ 1164.107519][T31912] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1164.143112][T31912] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1164.195993][T31912] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1164.220829][T31912] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1164.238315][T32107] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.7439'. [ 1164.255248][T32115] netlink: 'syz.2.7442': attribute type 17 has an invalid length. [ 1164.263558][T32115] netlink: 'syz.2.7442': attribute type 16 has an invalid length. [ 1164.282179][T32115] netlink: 152 bytes leftover after parsing attributes in process `syz.2.7442'. [ 1164.478482][T32123] netlink: 'syz.0.7445': attribute type 21 has an invalid length. [ 1164.497249][T32123] IPv6: NLM_F_CREATE should be specified when creating new route [ 1164.839696][T32121] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7444'. [ 1164.929051][T31912] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1165.007872][T10810] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1165.029059][T10810] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1165.090328][T31912] 8021q: adding VLAN 0 to HW filter on device team0 [ 1165.188219][T10803] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1165.207557][T10803] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1165.233219][T10803] bridge0: port 1(bridge_slave_0) entered blocking state [ 1165.240448][T10803] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1165.264932][T32154] netlink: 'syz.3.7449': attribute type 2 has an invalid length. [ 1165.293539][T10803] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1165.321393][T10803] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1165.350759][T10803] bridge0: port 2(bridge_slave_1) entered blocking state [ 1165.357984][T10803] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1165.498743][T32154] device .*! entered promiscuous mode [ 1165.559752][T10803] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1165.574534][T10803] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1165.776760][T10803] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1165.907808][T10803] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1165.919000][T10803] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1165.928187][T10803] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1165.947958][T10803] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1165.976597][T10803] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1166.011683][T10803] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1166.040253][T10803] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1166.073219][T31912] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1166.086415][T10803] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1166.098881][T10803] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1166.238295][T32178] device syzkaller0 entered promiscuous mode [ 1168.501420][T32208] netlink: 'syz.1.7461': attribute type 12 has an invalid length. [ 1168.513806][T32208] netlink: 14585 bytes leftover after parsing attributes in process `syz.1.7461'. [ 1168.536383][T32215] netlink: 'syz.3.7463': attribute type 7 has an invalid length. [ 1168.642871][T10800] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1168.651665][T10800] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1168.692365][T31912] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1168.997636][T32236] syz.3.7467[32236] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1168.997776][T32236] syz.3.7467[32236] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1169.087495][T32238] netlink: 'syz.1.7468': attribute type 1 has an invalid length. [ 1169.892247][T12359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1169.908439][T12359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1169.935428][T12359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1169.965568][T12359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1169.980263][T31912] device veth0_vlan entered promiscuous mode [ 1169.988774][T12359] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1170.000133][T12359] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1170.014516][T31912] device veth1_vlan entered promiscuous mode [ 1170.087961][ T9676] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1170.103422][ T9676] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1170.125340][ T9676] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1170.137641][ T9676] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1170.149249][T31912] device veth0_macvtap entered promiscuous mode [ 1170.166976][T31912] device veth1_macvtap entered promiscuous mode [ 1170.191748][T31912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1170.205736][T31912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1170.219742][T31912] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1170.240763][ T9676] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1170.252621][ T9676] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1170.273790][ T9676] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1170.283606][ T9676] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1170.306087][T31912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1170.332360][T31912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1170.356952][T31912] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1170.396890][ T9676] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1170.416645][ T9676] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1170.438237][T31912] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1170.453107][T31912] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1170.462962][T31912] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1170.474865][T31912] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1170.637130][T12359] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1170.666306][T12359] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1170.702099][ T9676] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1170.788797][ T9676] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1170.815473][ T9676] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1170.854209][ T9676] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1171.078666][T32313] netlink: 'syz.4.7388': attribute type 39 has an invalid length. [ 1171.102278][T32313] device veth0_macvtap left promiscuous mode [ 1171.335080][T32324] netlink: 'syz.1.7487': attribute type 21 has an invalid length. [ 1171.366981][T32324] IPv6: NLM_F_CREATE should be specified when creating new route [ 1171.586098][T32328] netlink: 'syz.2.7489': attribute type 21 has an invalid length. [ 1171.605003][T32327] delete_channel: no stack [ 1171.992812][T32343] netlink: 'syz.2.7492': attribute type 3 has an invalid length. [ 1172.023985][T32343] netlink: 13435 bytes leftover after parsing attributes in process `syz.2.7492'. [ 1172.100261][T32341] netlink: 'syz.1.7491': attribute type 10 has an invalid length. [ 1172.193026][T32341] device veth1_macvtap left promiscuous mode [ 1172.280853][T32351] device syzkaller0 entered promiscuous mode [ 1172.336708][T32354] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.7495'. [ 1172.408917][T32352] netlink: 1034 bytes leftover after parsing attributes in process `syz.2.7495'. [ 1172.479275][T32354] bridge0: port 4(dummy0) entered disabled state [ 1172.486220][T32354] bridge0: port 3(hsr0) entered disabled state [ 1172.492899][T32354] bridge0: port 2(bridge_slave_1) entered disabled state [ 1172.501201][T32354] bridge0: port 1(bridge_slave_0) entered disabled state [ 1172.709105][T32368] delete_channel: no stack [ 1172.782384][T32378] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.7501'. [ 1172.802151][T32378] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.7501'. [ 1172.828327][T32373] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.7501'. [ 1172.847172][T32381] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.7501'. [ 1172.885178][T32384] netlink: 'syz.2.7506': attribute type 1 has an invalid length. [ 1172.892976][T32384] netlink: 15999 bytes leftover after parsing attributes in process `syz.2.7506'. [ 1173.321772][T32399] netlink: 'syz.2.7510': attribute type 2 has an invalid length. [ 1174.268692][T32418] sctp: [Deprecated]: syz.2.7516 (pid 32418) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1174.268692][T32418] Use struct sctp_sack_info instead [ 1175.833134][T32438] delete_channel: no stack [ 1176.585474][T32458] delete_channel: no stack [ 1176.590025][T32458] delete_channel: no stack [ 1176.845501][T32471] netlink: 'syz.1.7530': attribute type 39 has an invalid length. [ 1176.888874][T32471] device veth0_macvtap left promiscuous mode [ 1177.156209][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.162613][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.291730][T32491] netlink: 'syz.4.7536': attribute type 4 has an invalid length. [ 1177.307997][T32491] netlink: 168 bytes leftover after parsing attributes in process `syz.4.7536'. [ 1177.496765][T32498] netlink: 'syz.0.7538': attribute type 27 has an invalid length. [ 1177.845223][T32498] bond0: (slave bond_slave_0): Releasing backup interface [ 1178.122536][T32509] netlink: 212168 bytes leftover after parsing attributes in process `syz.2.7543'. [ 1178.380808][T32519] netlink: 'syz.2.7543': attribute type 10 has an invalid length. [ 1178.602141][T32519] device hsr0 left promiscuous mode [ 1178.635247][T32519] bridge0: port 3(hsr0) entered disabled state [ 1179.050324][T32524] device syzkaller0 entered promiscuous mode [ 1179.750822][T32542] netlink: 'syz.0.7550': attribute type 39 has an invalid length. [ 1181.569799][T32564] tap0: tun_chr_ioctl cmd 1074025677 [ 1181.577739][T32564] tap0: linktype set to 1 [ 1181.720535][T32568] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.7557'. [ 1181.808363][T32570] netlink: 'syz.3.7558': attribute type 10 has an invalid length. [ 1181.907222][T32570] team0: Device veth1_vlan failed to register rx_handler [ 1182.772281][T32610] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.7571'. [ 1182.896531][T32611] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.7570'. [ 1183.064696][T32608] netlink: 152 bytes leftover after parsing attributes in process `syz.0.7570'. [ 1183.397060][T32637] delete_channel: no stack [ 1183.404040][T32637] delete_channel: no stack [ 1183.547234][ T4289] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 1185.123450][ T4283] Bluetooth: hci3: ISO packet for unknown connection handle 2622 [ 1185.496991][T32674] netlink: 152 bytes leftover after parsing attributes in process `syz.2.7587'. [ 1185.625590][T32687] netlink: 'syz.1.7591': attribute type 17 has an invalid length. [ 1185.633471][T32687] netlink: 'syz.1.7591': attribute type 16 has an invalid length. [ 1185.729345][T32687] netlink: 152 bytes leftover after parsing attributes in process `syz.1.7591'. [ 1185.832422][T32695] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7594'. [ 1185.919676][T32700] netlink: 'syz.1.7596': attribute type 10 has an invalid length. [ 1186.017041][T32700] device geneve1 entered promiscuous mode [ 1186.051336][T32700] team0: Port device geneve1 added [ 1186.695539][T32727] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7611'. [ 1186.722414][T32727] netlink: 'syz.0.7611': attribute type 8 has an invalid length. [ 1186.820087][ T4283] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 1187.765074][T32727] netlink: 'syz.0.7611': attribute type 2 has an invalid length. [ 1187.777150][T32732] netlink: 14546 bytes leftover after parsing attributes in process `syz.2.7602'. [ 1187.990586][T32747] netlink: 'syz.0.7604': attribute type 3 has an invalid length. [ 1187.991243][T32748] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.7607'. [ 1188.028941][T32747] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.7604'. [ 1188.147077][T32752] wlan1: mtu greater than device maximum [ 1188.281152][T32761] netlink: 'syz.1.7612': attribute type 4 has an invalid length. [ 1188.725995][ T305] device syzkaller0 entered promiscuous mode [ 1188.882912][ T312] device syzkaller0 entered promiscuous mode [ 1190.873486][ T332] device syzkaller0 entered promiscuous mode [ 1194.338948][ T468] device syzkaller0 entered promiscuous mode [ 1194.439807][ T4289] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 1195.737635][ T4289] Bluetooth: hci1: ISO packet for unknown connection handle 2622 [ 1195.802774][ T4289] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 1196.795397][ T536] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.7706'. [ 1197.747419][ T479] device syzkaller0 left promiscuous mode [ 1197.975433][ T562] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.7713'. [ 1198.041000][ T565] device syzkaller0 entered promiscuous mode [ 1198.060532][ T567] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7717'. [ 1198.415846][ T576] netlink: 'syz.1.7720': attribute type 2 has an invalid length. [ 1198.426441][ T576] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.7720'. [ 1201.012471][ T606] IPv6: Can't replace route, no match found [ 1201.083567][ T606] netlink: 'syz.0.7728': attribute type 33 has an invalid length. [ 1201.095374][ T606] netlink: 152 bytes leftover after parsing attributes in process `syz.0.7728'. [ 1201.117257][ T613] netlink: 'syz.4.7731': attribute type 10 has an invalid length. [ 1201.125809][ T613] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1201.145227][ T613] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1201.165242][ T613] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 1201.178701][ T605] tun0: tun_chr_ioctl cmd 21731 [ 1201.241631][ T616] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.7732'. [ 1201.272694][ T611] device syzkaller0 entered promiscuous mode [ 1201.311402][ T616] delete_channel: no stack [ 1203.523070][ T661] netlink: 10 bytes leftover after parsing attributes in process `syz.4.7743'. [ 1203.918501][ T679] device syzkaller0 entered promiscuous mode [ 1205.734088][ T705] device lo entered promiscuous mode [ 1208.803460][ T827] netlink: 'syz.4.7816': attribute type 2 has an invalid length. [ 1208.858161][ T827] netlink: 17267 bytes leftover after parsing attributes in process `syz.4.7816'. [ 1210.451316][ T816] device sit0 entered promiscuous mode [ 1210.470614][ T820] syzkaller1: tun_chr_ioctl cmd 1074025692 [ 1210.498888][ T847] netlink: 175 bytes leftover after parsing attributes in process `syz.4.7822'. [ 1210.531491][ T848] netlink: 'syz.4.7822': attribute type 10 has an invalid length. [ 1210.683202][ T857] delete_channel: no stack [ 1210.691730][ T857] delete_channel: no stack [ 1210.702912][ T857] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.7825'. [ 1210.751744][ T857] delete_channel: no stack [ 1210.763691][ T857] delete_channel: no stack [ 1210.830865][ T867] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.7827'. [ 1210.952788][ T875] netlink: 'syz.4.7827': attribute type 3 has an invalid length. [ 1210.954648][ T873] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7829'. [ 1210.971456][ T875] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.7827'. [ 1210.979206][ T873] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7829'. [ 1210.990964][ T876] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7829'. [ 1212.108024][ T936] netlink: 'syz.1.7840': attribute type 3 has an invalid length. [ 1212.153704][ T936] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.7840'. [ 1212.263130][ T945] netlink: 194236 bytes leftover after parsing attributes in process `syz.2.7841'. [ 1212.281673][ T945] netlink: zone id is out of range [ 1212.292609][ T945] netlink: zone id is out of range [ 1212.303546][ T945] netlink: zone id is out of range [ 1212.316398][ T945] netlink: zone id is out of range [ 1212.326445][ T945] netlink: zone id is out of range [ 1212.341982][ T945] netlink: zone id is out of range [ 1212.357298][ T945] netlink: zone id is out of range [ 1212.371392][ T945] netlink: zone id is out of range [ 1212.384405][ T945] netlink: zone id is out of range [ 1212.398511][ T945] netlink: zone id is out of range [ 1212.539875][ T951] netlink: 'syz.3.7843': attribute type 9 has an invalid length. [ 1213.279604][ T964] netlink: 'syz.2.7847': attribute type 2 has an invalid length. [ 1215.145813][ T997] netlink: 'syz.1.7857': attribute type 2 has an invalid length. [ 1215.775724][ T997] __nla_validate_parse: 3 callbacks suppressed [ 1215.775745][ T997] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.7857'. [ 1216.231896][ T1013] netlink: 14 bytes leftover after parsing attributes in process `syz.2.7859'. [ 1216.271301][ T1013] device veth0_macvtap left promiscuous mode [ 1217.088541][ T1038] tap0: tun_chr_ioctl cmd 1074025677 [ 1217.103431][ T1038] tap0: linktype set to 270 [ 1219.027011][ T1085] netlink: 'syz.1.7888': attribute type 4 has an invalid length. [ 1222.090911][ T1177] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7930'. [ 1222.222940][ T1187] netlink: 'syz.4.7934': attribute type 29 has an invalid length. [ 1222.242867][ T1187] netlink: 'syz.4.7934': attribute type 29 has an invalid length. [ 1222.260140][ T1187] netlink: 'syz.4.7934': attribute type 29 has an invalid length. [ 1222.278875][ T1187] netlink: 'syz.4.7934': attribute type 29 has an invalid length. [ 1222.454047][ T1199] netlink: 'syz.2.7939': attribute type 10 has an invalid length. [ 1222.471585][ T1199] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7939'. [ 1224.717127][ T1214] device syzkaller0 entered promiscuous mode [ 1227.418156][ T1259] netlink: 'syz.2.7964': attribute type 29 has an invalid length. [ 1227.463968][ T1259] netlink: 'syz.2.7964': attribute type 29 has an invalid length. [ 1227.475528][ T1269] netlink: 'syz.2.7964': attribute type 29 has an invalid length. [ 1227.623644][ T1276] netlink: 'syz.2.7970': attribute type 29 has an invalid length. [ 1227.664300][ T1276] netlink: 'syz.2.7970': attribute type 29 has an invalid length. [ 1227.700840][ T1276] netlink: 'syz.2.7970': attribute type 29 has an invalid length. [ 1227.733096][ T1276] netlink: 'syz.2.7970': attribute type 29 has an invalid length. [ 1228.044409][ T4283] Bluetooth: hci1: unexpected event 0x09 length: 15 > 3 [ 1228.797931][ T1346] netlink: 'syz.0.7999': attribute type 3 has an invalid length. [ 1228.842691][ T1346] netlink: 'syz.0.7999': attribute type 1 has an invalid length. [ 1228.867849][ T1346] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.7999'. [ 1229.364110][ T1363] tun0: tun_chr_ioctl cmd 1074812117 [ 1230.508986][ T1421] netlink: 144 bytes leftover after parsing attributes in process `syz.2.8033'. [ 1230.543287][ T1425] netlink: 'syz.3.8034': attribute type 12 has an invalid length. [ 1230.586328][ T1425] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8034'. [ 1230.621278][ T1428] tun0: tun_chr_ioctl cmd 1074025681 [ 1231.253735][ T1466] IPv6: pim6reg1: Disabled Multicast RS [ 1231.785174][ T1497] TCP: TCP_TX_DELAY enabled [ 1231.922168][ T1506] netlink: 128 bytes leftover after parsing attributes in process `syz.2.8068'. [ 1231.933016][ T1506] netlink: 3 bytes leftover after parsing attributes in process `syz.2.8068'. [ 1232.193224][ T1515] device syzkaller0 entered promiscuous mode [ 1232.389038][ T4283] Bluetooth: hci4: Malformed HCI Event [ 1232.773096][ T1549] validate_nla: 14 callbacks suppressed [ 1232.773115][ T1549] netlink: 'syz.2.8091': attribute type 29 has an invalid length. [ 1232.804867][ T1549] netlink: 'syz.2.8091': attribute type 29 has an invalid length. [ 1232.828583][ T1553] netlink: 'syz.2.8091': attribute type 29 has an invalid length. [ 1232.865736][ T1549] netlink: 'syz.2.8091': attribute type 29 has an invalid length. [ 1232.971977][ T1559] netlink: 'syz.2.8094': attribute type 29 has an invalid length. [ 1232.983227][ T1559] netlink: 'syz.2.8094': attribute type 29 has an invalid length. [ 1232.994040][ T1559] netlink: 'syz.2.8094': attribute type 29 has an invalid length. [ 1233.098515][ T1561] netlink: 'syz.1.8093': attribute type 12 has an invalid length. [ 1233.109636][ T1561] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8093'. [ 1233.376516][ T1573] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8100'. [ 1233.757361][ T1599] netlink: 'syz.0.8111': attribute type 29 has an invalid length. [ 1233.806724][ T1599] netlink: 'syz.0.8111': attribute type 29 has an invalid length. [ 1234.151790][ T1614] netlink: 128 bytes leftover after parsing attributes in process `syz.0.8116'. [ 1234.265230][ T1630] netlink: 14 bytes leftover after parsing attributes in process `syz.2.8120'. [ 1235.081041][ T1652] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.8126'. [ 1236.488119][ T4289] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1236.504094][ T4289] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1236.512733][ T4289] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1236.520759][ T4289] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1236.528763][ T4289] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1236.536104][ T4289] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1236.718219][ T1686] bridge0: port 2(bridge_slave_1) entered disabled state [ 1236.727686][ T1686] bridge0: port 1(bridge_slave_0) entered disabled state [ 1237.034662][T10803] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1237.196733][T10803] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1237.292806][ T1711] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.8145'. [ 1237.343601][ T1710] delete_channel: no stack [ 1237.371439][T10803] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1237.528280][ T1721] netlink: 399 bytes leftover after parsing attributes in process `syz.3.8149'. [ 1237.550001][ T1721] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.8149'. [ 1237.633177][T10803] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1237.709120][ T1688] chnl_net:caif_netlink_parms(): no params data found [ 1237.772332][ T1728] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.8150'. [ 1237.803505][ T1728] net_ratelimit: 40 callbacks suppressed [ 1237.803519][ T1728] netlink: zone id is out of range [ 1237.935464][ T1688] bridge0: port 1(bridge_slave_0) entered blocking state [ 1237.943276][ T1688] bridge0: port 1(bridge_slave_0) entered disabled state [ 1237.972560][ T1688] device bridge_slave_0 entered promiscuous mode [ 1238.018340][ T1688] bridge0: port 2(bridge_slave_1) entered blocking state [ 1238.027984][ T1688] bridge0: port 2(bridge_slave_1) entered disabled state [ 1238.046179][ T1688] device bridge_slave_1 entered promiscuous mode [ 1238.141093][ T1743] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8154'. [ 1238.222015][ T1688] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1238.383179][ T1744] device wlan1 entered promiscuous mode [ 1238.391309][ T1688] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1238.466284][ T1688] team0: Port device team_slave_0 added [ 1238.506878][ T1688] team0: Port device team_slave_1 added [ 1238.592531][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.598919][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.725453][ T1688] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1238.744055][ T4283] Bluetooth: hci5: command 0x0409 tx timeout [ 1238.744222][ T1688] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1238.873917][ T1688] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1239.047715][ T1767] netlink: 2 bytes leftover after parsing attributes in process `syz.0.8159'. [ 1239.065388][ T1767] device batadv_slave_1 entered promiscuous mode [ 1239.088628][ T1688] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1239.098656][ T1688] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1239.155461][ T1688] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1239.384616][ T1688] device hsr_slave_0 entered promiscuous mode [ 1239.404413][ T1688] device hsr_slave_1 entered promiscuous mode [ 1239.434001][ T1688] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1239.441620][ T1688] Cannot create hsr debugfs directory [ 1239.522809][ T1800] netlink: 14975 bytes leftover after parsing attributes in process `syz.4.8165'. [ 1240.419463][ T1828] validate_nla: 7 callbacks suppressed [ 1240.419499][ T1828] netlink: 'syz.3.8172': attribute type 29 has an invalid length. [ 1240.445282][ T1828] netlink: 'syz.3.8172': attribute type 29 has an invalid length. [ 1240.465351][ T1828] netlink: 'syz.3.8172': attribute type 29 has an invalid length. [ 1240.554269][ T1828] netlink: 'syz.3.8172': attribute type 29 has an invalid length. [ 1240.603751][ T1835] netlink: 'syz.3.8172': attribute type 29 has an invalid length. [ 1240.824086][ T4289] Bluetooth: hci5: command 0x041b tx timeout [ 1241.402847][ T1688] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1241.439341][ T1688] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1241.483564][ T1688] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1241.506743][ T1688] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1241.619604][ T1864] netlink: 'syz.3.8178': attribute type 3 has an invalid length. [ 1241.654069][ T1864] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.8178'. [ 1241.808002][ T1864] delete_channel: no stack [ 1241.812727][ T1864] delete_channel: no stack [ 1241.932013][ T1688] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1241.986032][ T1817] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1241.994869][ T1817] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1242.171633][ T1688] 8021q: adding VLAN 0 to HW filter on device team0 [ 1242.189069][ T1880] netlink: 52 bytes leftover after parsing attributes in process `syz.0.8183'. [ 1242.226246][ T1878] netlink: 'syz.2.8182': attribute type 12 has an invalid length. [ 1242.252549][ T1878] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8182'. [ 1242.438373][T27336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1242.457912][T27336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1242.484734][T27336] bridge0: port 1(bridge_slave_0) entered blocking state [ 1242.491912][T27336] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1242.549250][T10803] device team0 left promiscuous mode [ 1242.554855][T10803] device team_slave_0 left promiscuous mode [ 1242.561355][T10803] device team_slave_1 left promiscuous mode [ 1242.588116][T10803] device bridge_slave_1 left promiscuous mode [ 1242.598228][T10803] device geneve1 left promiscuous mode [ 1242.618773][T10803] ÿÿÿÿÿÿÿ: port 1(team0) entered disabled state [ 1242.668991][T10803] bridge0: port 2(bond0) entered disabled state [ 1242.700291][T10803] device bridge_slave_0 left promiscuous mode [ 1242.713449][T10803] bridge0: port 1(bridge_slave_0) entered disabled state [ 1242.904212][ T4289] Bluetooth: hci5: command 0x040f tx timeout [ 1243.216575][T10803] team0 (unregistering): Port device geneve1 removed [ 1243.296290][T10803] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 1243.864844][T10803] team0 (unregistering): Port device team_slave_1 removed [ 1244.044699][T10803] team0 (unregistering): Port device team_slave_0 removed [ 1244.194513][T10803] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1244.225774][T10803] device bond_slave_1 left promiscuous mode [ 1244.345854][T10803] team0 (unregistering): Port device bridge_slave_1 removed [ 1244.551584][T10803] bond0 (unregistering): Released all slaves [ 1244.641320][T27336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1244.649314][T27336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1244.659237][T27336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1244.668534][T27336] bridge0: port 2(bridge_slave_1) entered blocking state [ 1244.675644][T27336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1244.704199][T10808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1244.766836][ T1816] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1244.808268][ T1816] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1244.828260][ T1816] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1244.841360][ T1816] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1244.852672][ T1816] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1244.878159][ T1926] device wlan1 entered promiscuous mode [ 1244.889709][ T1688] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1244.908446][ T1688] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1244.924015][ T1926] netlink: 'syz.4.8192': attribute type 3 has an invalid length. [ 1244.952106][ T1926] netlink: 114680 bytes leftover after parsing attributes in process `syz.4.8192'. [ 1244.983411][ T1816] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1244.993468][ T4289] Bluetooth: hci5: command 0x0419 tx timeout [ 1245.000476][ T1816] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1245.012931][ T1816] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1245.022503][ T1816] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1245.036152][ T1816] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1245.052000][ T1816] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1245.221514][ T1943] netlink: 156 bytes leftover after parsing attributes in process `syz.4.8195'. [ 1245.586241][ T1955] netlink: 'syz.4.8198': attribute type 21 has an invalid length. [ 1245.830256][T10802] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1245.848029][T10802] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1245.887206][ T1688] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1245.945866][T10802] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1245.956774][T10802] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1245.986040][T10802] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1245.997514][T10802] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1246.032553][ T1688] device veth0_vlan entered promiscuous mode [ 1246.044370][T10802] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1246.060806][T10802] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1246.087286][ T1688] device veth1_vlan entered promiscuous mode [ 1246.149543][T27331] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1246.162724][T27331] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1246.187929][T27331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1246.218562][T27331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1246.239785][ T1688] device veth0_macvtap entered promiscuous mode [ 1246.262633][ T1688] device veth1_macvtap entered promiscuous mode [ 1246.308449][ T1688] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1246.325973][T27331] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1246.335019][T27331] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1246.343071][T27331] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1246.355348][T27331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1246.369171][ T1688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1246.381402][ T1688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1246.394242][ T1688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1246.410478][ T1688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1246.422366][ T1688] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1246.448356][T27331] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1246.460641][T27331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1246.472271][ T1688] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1246.485244][ T1688] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1246.496697][ T1688] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1246.507138][ T1688] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1246.710448][T27331] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1246.733968][T27331] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1246.759312][T10803] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1246.790481][T27331] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1246.809771][T27331] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1246.845994][T10803] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1246.929817][ T1993] netlink: 'syz.3.8209': attribute type 39 has an invalid length. [ 1247.102118][ T2007] netlink: 'syz.2.8212': attribute type 12 has an invalid length. [ 1247.122835][ T2007] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8212'. [ 1247.158727][ T2002] tun0: tun_chr_ioctl cmd 1074025675 [ 1247.178187][ T2002] tun0: persist enabled [ 1247.183811][ T2002] tun0: tun_chr_ioctl cmd 1074025675 [ 1247.198123][ T2002] tun0: persist enabled [ 1248.518177][ T2059] netlink: 'syz.3.8229': attribute type 153 has an invalid length. [ 1248.533192][ T2059] netlink: 69544 bytes leftover after parsing attributes in process `syz.3.8229'. [ 1248.813456][ T2069] netlink: 'syz.2.8232': attribute type 21 has an invalid length. [ 1248.831483][ T2069] netlink: 'syz.2.8232': attribute type 6 has an invalid length. [ 1248.841630][ T2069] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8232'. [ 1249.545508][ T2092] netlink: 'syz.4.8238': attribute type 21 has an invalid length. [ 1249.553636][ T2092] netlink: 'syz.4.8238': attribute type 20 has an invalid length. [ 1249.983845][ T2102] netlink: 'syz.0.8242': attribute type 39 has an invalid length. [ 1250.128642][ T2105] netlink: 'syz.1.8243': attribute type 10 has an invalid length. [ 1250.515946][ T2105] team0 (unregistering): Port device team_slave_0 removed [ 1250.560199][ T2105] team0 (unregistering): Port device team_slave_1 removed [ 1251.006744][ T2140] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8252'. [ 1251.292790][ T2153] device syzkaller0 entered promiscuous mode [ 1252.485717][ T2166] delete_channel: no stack [ 1252.660287][ T2184] netlink: 'syz.4.8267': attribute type 153 has an invalid length. [ 1252.669130][ T2184] netlink: 69544 bytes leftover after parsing attributes in process `syz.4.8267'. [ 1255.503110][ T2208] netlink: 64 bytes leftover after parsing attributes in process `syz.4.8274'. [ 1255.622906][ T2216] netlink: 'syz.3.8276': attribute type 21 has an invalid length. [ 1255.692077][ T2210] bridge0: port 3(ip6gretap0) entered blocking state [ 1255.706475][ T2210] bridge0: port 3(ip6gretap0) entered disabled state [ 1255.763233][ T2210] device ip6gretap0 entered promiscuous mode [ 1256.203076][ T2237] netlink: 'syz.4.8282': attribute type 39 has an invalid length. [ 1256.680792][ T2261] netlink: 'syz.0.8289': attribute type 10 has an invalid length. [ 1256.722319][ T2261] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8289'. [ 1256.754044][ T2261] device dummy0 entered promiscuous mode [ 1256.809880][ T2261] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 1256.882480][ T2264] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8288'. [ 1258.175930][ T2305] netlink: 'syz.3.8298': attribute type 10 has an invalid length. [ 1258.255935][ T2305] device wg1 entered promiscuous mode [ 1258.271833][ T2321] netlink: 1057 bytes leftover after parsing attributes in process `syz.2.8299'. [ 1258.287802][ T2305] team0: Device wg1 is of different type [ 1258.333212][ T2310] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8299'. [ 1258.345212][ T2310] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8299'. [ 1259.007890][ T2342] netlink: 'syz.3.8309': attribute type 2 has an invalid length. [ 1259.057804][ T2342] netlink: 17 bytes leftover after parsing attributes in process `syz.3.8309'. [ 1262.988368][ T2394] delete_channel: no stack [ 1263.139123][ T2418] netlink: 64 bytes leftover after parsing attributes in process `syz.3.8327'. [ 1263.383645][ T2422] device syzkaller0 entered promiscuous mode [ 1263.889418][ T2439] netlink: 168 bytes leftover after parsing attributes in process `syz.4.8333'. [ 1263.921951][ T2439] device veth1_macvtap left promiscuous mode [ 1264.011811][ T2451] delete_channel: no stack [ 1264.021948][ T2451] delete_channel: no stack [ 1264.049562][ T2448] device veth1_macvtap entered promiscuous mode [ 1264.066742][ T2448] device macsec0 entered promiscuous mode [ 1265.049758][ T2495] netlink: 'syz.1.8347': attribute type 17 has an invalid length. [ 1265.073379][ T2495] netlink: 'syz.1.8347': attribute type 16 has an invalid length. [ 1265.082169][ T2495] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8347'. [ 1265.388697][ T2519] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.8354'. [ 1266.262771][ T2574] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8366'. [ 1266.583316][ T2575] netlink: 'syz.1.8366': attribute type 19 has an invalid length. [ 1266.789270][ T2596] netdevsim netdevsim2: Direct firmware load for .net/syz1 failed with error -2 [ 1266.804896][ T2596] netdevsim netdevsim2: Falling back to sysfs fallback for: .net/syz1 [ 1266.979407][ T2607] netlink: 61299 bytes leftover after parsing attributes in process `syz.3.8375'. [ 1267.045100][ T2614] netlink: 'syz.1.8377': attribute type 10 has an invalid length. [ 1267.052973][ T2614] netlink: 55 bytes leftover after parsing attributes in process `syz.1.8377'. [ 1267.464408][ T2629] device syzkaller0 entered promiscuous mode [ 1270.362335][ T2641] netlink: 180 bytes leftover after parsing attributes in process `syz.2.8384'. [ 1272.420566][ T2671] netlink: 188 bytes leftover after parsing attributes in process `syz.3.8392'. [ 1272.599219][ T2694] netlink: 'syz.2.8395': attribute type 2 has an invalid length. [ 1272.619921][ T2694] netlink: 'syz.2.8395': attribute type 1 has an invalid length. [ 1273.018437][ T2722] netlink: 128 bytes leftover after parsing attributes in process `syz.4.8404'. [ 1273.034640][ T2722] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1273.063405][ T2722] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1273.466749][ T2736] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8408'. [ 1274.616667][ T2782] netlink: 'syz.0.8421': attribute type 3 has an invalid length. [ 1274.655469][ T2782] netlink: 'syz.0.8421': attribute type 1 has an invalid length. [ 1274.706453][ T2782] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.8421'. [ 1274.886071][ T2784] delete_channel: no stack [ 1275.959256][ T2854] netlink: 5 bytes leftover after parsing attributes in process `syz.4.8441'. [ 1276.002872][ T2854] netlink: 'syz.4.8441': attribute type 1 has an invalid length. [ 1276.319372][ T2881] netlink: 'syz.1.8448': attribute type 1 has an invalid length. [ 1276.345667][ T2881] netlink: 15223 bytes leftover after parsing attributes in process `syz.1.8448'. [ 1276.378342][ T2887] netlink: 'syz.3.8449': attribute type 29 has an invalid length. [ 1276.404281][ T2887] netlink: 'syz.3.8449': attribute type 29 has an invalid length. [ 1276.422601][ T2888] netlink: 'syz.3.8449': attribute type 29 has an invalid length. [ 1276.483620][ T2891] netlink: 9275 bytes leftover after parsing attributes in process `syz.4.8451'. [ 1276.547708][ T2898] netlink: 'syz.1.8453': attribute type 33 has an invalid length. [ 1276.583421][ T2898] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8453'. [ 1276.973250][ T2923] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.8462'. [ 1277.019039][ T2927] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.8462'. [ 1277.085900][ T2919] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.8460'. [ 1277.185195][ T2931] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.8464'. [ 1277.201168][ T2931] netlink: 6332 bytes leftover after parsing attributes in process `syz.1.8464'. [ 1277.427877][ T2946] netlink: 'syz.1.8468': attribute type 11 has an invalid length. [ 1277.454018][ T2946] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.8468'. [ 1278.239122][ T2943] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1278.952240][ T2989] validate_nla: 1 callbacks suppressed [ 1278.952273][ T2989] netlink: 'syz.0.8482': attribute type 275 has an invalid length. [ 1279.834333][ T3004] netlink: 'syz.2.8486': attribute type 12 has an invalid length. [ 1280.039464][ T3013] netlink: 'syz.4.8490': attribute type 21 has an invalid length. [ 1280.075685][ T3013] netlink: 'syz.4.8490': attribute type 1 has an invalid length. [ 1280.971364][ T3044] netlink: 'syz.3.8501': attribute type 10 has an invalid length. [ 1281.016525][ T3044] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1281.624607][ T4283] Bluetooth: hci2: command 0x0406 tx timeout [ 1281.787347][ T3064] netlink: 'syz.1.8507': attribute type 10 has an invalid length. [ 1282.511529][ T3064] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1282.613005][ T3065] __nla_validate_parse: 6 callbacks suppressed [ 1282.613022][ T3065] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8507'. [ 1283.391623][ T3086] netlink: 'syz.0.8512': attribute type 3 has an invalid length. [ 1283.451179][ T3086] netlink: 'syz.0.8512': attribute type 1 has an invalid length. [ 1283.503329][ T3103] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.8517'. [ 1283.544044][ T3103] netlink: zone id is out of range [ 1283.551601][ T3103] netlink: zone id is out of range [ 1283.601820][ T3103] netlink: del zone limit has 4 unknown bytes [ 1283.699145][ T3105] netlink: 'syz.2.8516': attribute type 3 has an invalid length. [ 1283.752895][ T3105] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.8516'. [ 1283.999012][ T3116] netlink: 'syz.3.8520': attribute type 21 has an invalid length. [ 1284.747511][ T3143] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.8527'. [ 1284.826059][ T3143] netlink: 6332 bytes leftover after parsing attributes in process `syz.2.8527'. [ 1284.938567][ T3149] device sit0 left promiscuous mode [ 1285.528534][ T3163] netlink: 'syz.2.8532': attribute type 33 has an invalid length. [ 1285.587262][ T3163] netlink: 164 bytes leftover after parsing attributes in process `syz.2.8532'. [ 1286.127537][ T3191] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8541'. [ 1286.686090][ T3207] netlink: 'syz.1.8546': attribute type 2 has an invalid length. [ 1286.842054][ T3213] netlink: 'syz.2.8550': attribute type 21 has an invalid length. [ 1286.866782][ T3213] netlink: 'syz.2.8550': attribute type 1 has an invalid length. [ 1286.876587][ T3213] netlink: 144 bytes leftover after parsing attributes in process `syz.2.8550'. [ 1287.060652][ T3225] netlink: 'syz.3.8554': attribute type 1 has an invalid length. [ 1287.103378][ T3225] netlink: 5 bytes leftover after parsing attributes in process `syz.3.8554'. [ 1287.342957][ T3223] device syzkaller0 entered promiscuous mode [ 1287.502388][ T3251] FAULT_INJECTION: forcing a failure. [ 1287.502388][ T3251] name failslab, interval 1, probability 0, space 0, times 0 [ 1287.569062][ T3251] CPU: 0 PID: 3251 Comm: syz.2.8561 Not tainted syzkaller #0 [ 1287.576500][ T3251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1287.586586][ T3251] Call Trace: [ 1287.589896][ T3251] [ 1287.592866][ T3251] dump_stack_lvl+0x188/0x24e [ 1287.597601][ T3251] ? show_regs_print_info+0x12/0x12 [ 1287.602840][ T3251] ? load_image+0x400/0x400 [ 1287.607397][ T3251] ? __might_sleep+0xd0/0xd0 [ 1287.612115][ T3251] ? __lock_acquire+0x7d10/0x7d10 [ 1287.617194][ T3251] should_fail_ex+0x399/0x4d0 [ 1287.621933][ T3251] should_failslab+0x5/0x20 [ 1287.626533][ T3251] slab_pre_alloc_hook+0x59/0x310 [ 1287.631595][ T3251] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 1287.637413][ T3251] __kmem_cache_alloc_node+0x4f/0x260 [ 1287.642833][ T3251] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 1287.648589][ T3251] __kmalloc+0xa0/0x240 [ 1287.652853][ T3251] tomoyo_realpath_from_path+0xdf/0x5d0 [ 1287.658470][ T3251] ? tomoyo_path_number_perm+0x205/0x650 [ 1287.664143][ T3251] tomoyo_path_number_perm+0x22f/0x650 [ 1287.669649][ T3251] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1287.675160][ T3251] ? ksys_write+0x1c0/0x250 [ 1287.679702][ T3251] ? common_file_perm+0x171/0x1c0 [ 1287.684860][ T3251] ? __fget_files+0x28/0x4b0 [ 1287.689479][ T3251] ? __fget_files+0x28/0x4b0 [ 1287.694111][ T3251] security_file_ioctl+0x6c/0xa0 [ 1287.699089][ T3251] __se_sys_ioctl+0x48/0x170 [ 1287.703708][ T3251] do_syscall_64+0x4c/0xa0 [ 1287.708147][ T3251] ? clear_bhb_loop+0x60/0xb0 [ 1287.712849][ T3251] ? clear_bhb_loop+0x60/0xb0 [ 1287.717549][ T3251] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1287.723474][ T3251] RIP: 0033:0x7f381239ce59 [ 1287.727904][ T3251] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1287.747528][ T3251] RSP: 002b:00007f3813253028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1287.755960][ T3251] RAX: ffffffffffffffda RBX: 00007f3812615fa0 RCX: 00007f381239ce59 [ 1287.763944][ T3251] RDX: 0000200000000080 RSI: 0000000000008932 RDI: 0000000000000005 [ 1287.771929][ T3251] RBP: 00007f3813253090 R08: 0000000000000000 R09: 0000000000000000 [ 1287.779906][ T3251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1287.787890][ T3251] R13: 00007f3812616038 R14: 00007f3812615fa0 R15: 00007ffcde13ef78 [ 1287.795908][ T3251] [ 1287.901404][ T3251] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1288.912391][ T3268] sctp: [Deprecated]: syz.1.8565 (pid 3268) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1288.912391][ T3268] Use struct sctp_sack_info instead [ 1289.077468][ T3276] netlink: 'syz.3.8568': attribute type 3 has an invalid length. [ 1289.088763][ T3276] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.8568'. [ 1290.892453][ T3296] netlink: 'syz.1.8573': attribute type 10 has an invalid length. [ 1291.051291][ T3306] netlink: 'syz.1.8577': attribute type 27 has an invalid length. [ 1291.061524][ T3306] netlink: 164 bytes leftover after parsing attributes in process `syz.1.8577'. [ 1291.330556][ T3322] netlink: 144 bytes leftover after parsing attributes in process `syz.0.8580'. [ 1291.468558][ T3328] netlink: 'syz.0.8585': attribute type 3 has an invalid length. [ 1291.497072][ T3328] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.8585'. [ 1291.523115][ T3328] netlink: 'syz.0.8585': attribute type 3 has an invalid length. [ 1291.544606][ T3326] device syzkaller0 left promiscuous mode [ 1291.563989][ T3328] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.8585'. [ 1291.591249][ T3335] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8586'. [ 1291.621575][ T3335] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8586'. [ 1291.663540][ T3338] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8584'. [ 1291.684800][ T3340] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8586'. [ 1292.357975][ T3367] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.8594'. [ 1292.470311][ T3369] delete_channel: no stack [ 1294.794449][ T3387] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.8596'. [ 1294.831306][ T3387] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 1294.850555][ T3387] CPU: 0 PID: 3387 Comm: syz.0.8596 Not tainted syzkaller #0 [ 1294.857982][ T3387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1294.868054][ T3387] Call Trace: [ 1294.871346][ T3387] [ 1294.874289][ T3387] dump_stack_lvl+0x188/0x24e [ 1294.878989][ T3387] ? show_regs_print_info+0x12/0x12 [ 1294.884206][ T3387] ? load_image+0x400/0x400 [ 1294.888747][ T3387] sysfs_warn_dup+0x8a/0xa0 [ 1294.893273][ T3387] sysfs_do_create_link_sd+0xc0/0x110 [ 1294.898670][ T3387] device_add+0x7f6/0x1000 [ 1294.903119][ T3387] wiphy_register+0x1d9f/0x2ac0 [ 1294.908011][ T3387] ? cfg80211_event_work+0x40/0x40 [ 1294.913137][ T3387] ? minstrel_ht_alloc+0x894/0xa20 [ 1294.918276][ T3387] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1294.924374][ T3387] ieee80211_register_hw+0x2d00/0x39f0 [ 1294.929866][ T3387] ? ieee80211_register_hw+0xec1/0x39f0 [ 1294.935432][ T3387] ? ieee80211_register_hw+0xec1/0x39f0 [ 1294.940995][ T3387] ? ieee80211_tasklet_handler+0x20/0x20 [ 1294.946651][ T3387] ? memset+0x1e/0x40 [ 1294.950648][ T3387] ? __hrtimer_init+0x186/0x270 [ 1294.955521][ T3387] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 1294.961277][ T3387] hwsim_new_radio_nl+0xafa/0xce0 [ 1294.966332][ T3387] genl_family_rcv_msg_doit+0x22a/0x330 [ 1294.971901][ T3387] ? end_current_label_crit_section+0x170/0x170 [ 1294.978177][ T3387] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1294.984103][ T3387] ? bpf_lsm_capable+0x5/0x10 [ 1294.988798][ T3387] ? security_capable+0x85/0xb0 [ 1294.993673][ T3387] genl_rcv_msg+0x604/0x790 [ 1294.998200][ T3387] ? genl_bind+0x360/0x360 [ 1295.002627][ T3387] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 1295.008988][ T3387] netlink_rcv_skb+0x1fb/0x450 [ 1295.013770][ T3387] ? genl_bind+0x360/0x360 [ 1295.018209][ T3387] ? netlink_ack+0x1170/0x1170 [ 1295.023003][ T3387] ? down_read+0x1a8/0x2d0 [ 1295.027443][ T3387] genl_rcv+0x24/0x40 [ 1295.031447][ T3387] netlink_unicast+0x74d/0x8d0 [ 1295.036244][ T3387] netlink_sendmsg+0x8ad/0xbd0 [ 1295.041037][ T3387] ? netlink_getsockopt+0x550/0x550 [ 1295.046251][ T3387] ? aa_sock_msg_perm+0x94/0x150 [ 1295.051203][ T3387] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1295.056502][ T3387] ? security_socket_sendmsg+0x7c/0xa0 [ 1295.061977][ T3387] ? netlink_getsockopt+0x550/0x550 [ 1295.067193][ T3387] ____sys_sendmsg+0x5be/0x970 [ 1295.071987][ T3387] ? __sys_sendmsg_sock+0x30/0x30 [ 1295.077025][ T3387] ? __import_iovec+0x315/0x500 [ 1295.081902][ T3387] ? import_iovec+0x6f/0xa0 [ 1295.086432][ T3387] ___sys_sendmsg+0x2a2/0x360 [ 1295.091122][ T3387] ? __lock_acquire+0x7d10/0x7d10 [ 1295.096169][ T3387] ? __sys_sendmsg+0x290/0x290 [ 1295.100996][ T3387] __se_sys_sendmsg+0x1bb/0x2a0 [ 1295.105864][ T3387] ? __x64_sys_sendmsg+0x80/0x80 [ 1295.110835][ T3387] ? lockdep_hardirqs_on+0x94/0x140 [ 1295.116058][ T3387] do_syscall_64+0x4c/0xa0 [ 1295.120483][ T3387] ? clear_bhb_loop+0x60/0xb0 [ 1295.125180][ T3387] ? clear_bhb_loop+0x60/0xb0 [ 1295.129882][ T3387] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1295.135793][ T3387] RIP: 0033:0x7f83b819ce59 [ 1295.140232][ T3387] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1295.159860][ T3387] RSP: 002b:00007f83b903c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1295.168289][ T3387] RAX: ffffffffffffffda RBX: 00007f83b8416270 RCX: 00007f83b819ce59 [ 1295.176258][ T3387] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 1295.184223][ T3387] RBP: 00007f83b8232d6f R08: 0000000000000000 R09: 0000000000000000 [ 1295.192182][ T3387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1295.200143][ T3387] R13: 00007f83b8416308 R14: 00007f83b8416270 R15: 00007fff351c0f78 [ 1295.208118][ T3387] [ 1295.586128][ T3405] device pim6reg1 entered promiscuous mode [ 1295.684900][ T3407] device syzkaller0 entered promiscuous mode [ 1300.028337][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.034706][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.629066][ T3435] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1300.644096][ T3435] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1300.655862][ T3435] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1300.663266][ T3435] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1300.709594][ T3435] bond0: (slave batadv0): Releasing backup interface [ 1301.382039][ T4289] Bluetooth: hci5: unexpected subevent 0x01 length: 150 > 18 [ 1301.646259][ T4289] Bluetooth: hci2: unexpected subevent 0x0a length: 150 > 30 [ 1301.660814][ T3481] netlink: 202920 bytes leftover after parsing attributes in process `syz.4.8626'. [ 1303.464149][ T4289] Bluetooth: hci5: command 0x2016 tx timeout [ 1303.714709][ T4283] Bluetooth: hci2: command 0x2016 tx timeout [ 1303.772788][ T3510] can: request_module (can-proto-0) failed. [ 1304.032431][ T3529] netlink: 'syz.4.8635': attribute type 29 has an invalid length. [ 1304.048093][ T3529] netlink: 'syz.4.8635': attribute type 29 has an invalid length. [ 1304.921566][ T3564] netlink: 'syz.3.8649': attribute type 10 has an invalid length. [ 1304.950518][ T3564] netlink: 'syz.3.8649': attribute type 11 has an invalid length. [ 1304.971130][ T3564] netlink: 6297 bytes leftover after parsing attributes in process `syz.3.8649'. [ 1305.017643][ T3566] device syzkaller0 entered promiscuous mode [ 1308.082409][ T3589] netlink: 'syz.2.8655': attribute type 2 has an invalid length. [ 1308.090314][ T3589] netlink: 'syz.2.8655': attribute type 8 has an invalid length. [ 1308.098249][ T3589] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8655'. [ 1308.109559][ T3600] netlink: 'syz.1.8661': attribute type 10 has an invalid length. [ 1308.131128][ T3600] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8661'. [ 1308.155067][ T3600] device ipvlan1 entered promiscuous mode [ 1308.176588][ T3600] bridge0: port 3(ipvlan1) entered blocking state [ 1308.183175][ T3600] bridge0: port 3(ipvlan1) entered disabled state [ 1308.198071][ T3600] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1308.462967][ T3630] netlink: 'syz.1.8667': attribute type 7 has an invalid length. [ 1308.487302][ T3630] netlink: 199788 bytes leftover after parsing attributes in process `syz.1.8667'. [ 1309.448632][ T3661] netlink: 44 bytes leftover after parsing attributes in process `syz.4.8677'. [ 1309.458332][ T3631] delete_channel: no stack [ 1309.463028][ T3631] delete_channel: no stack [ 1309.484022][ T3659] netlink: 16154 bytes leftover after parsing attributes in process `syz.2.8665'. [ 1309.504130][ T3631] delete_channel: no stack [ 1309.518789][ T3654] netlink: 'syz.2.8665': attribute type 10 has an invalid length. [ 1309.552714][ T3631] delete_channel: no stack [ 1309.603141][ T3631] delete_channel: no stack [ 1309.663716][ T3654] netlink: 'syz.2.8665': attribute type 19 has an invalid length. [ 1309.674874][ T3631] delete_channel: no stack [ 1309.679548][ T3631] delete_channel: no stack [ 1309.726584][ T3654] netlink: 14536 bytes leftover after parsing attributes in process `syz.2.8665'. [ 1309.810734][ T3631] delete_channel: no stack [ 1309.861416][ T3631] delete_channel: no stack [ 1309.892559][ T3631] delete_channel: no stack [ 1309.938224][ T3631] delete_channel: no stack [ 1309.980140][ T3631] delete_channel: no stack [ 1310.030377][ T3631] delete_channel: no stack [ 1310.080981][ T3631] delete_channel: no stack [ 1310.947943][ T3631] delete_channel: no stack [ 1310.953222][ T3631] delete_channel: no stack [ 1310.974212][ T3631] delete_channel: no stack [ 1310.986652][ T3631] delete_channel: no stack [ 1310.991238][ T3631] delete_channel: no stack [ 1311.021147][ T3631] delete_channel: no stack [ 1311.034285][ T3631] delete_channel: no stack [ 1311.038931][ T3631] delete_channel: no stack [ 1311.053708][ T3631] delete_channel: no stack [ 1311.063934][ T3631] delete_channel: no stack [ 1311.068519][ T3631] delete_channel: no stack [ 1311.087899][ T3684] netlink: 'syz.4.8686': attribute type 29 has an invalid length. [ 1311.104969][ T3631] delete_channel: no stack [ 1311.109547][ T3631] delete_channel: no stack [ 1311.120649][ T3684] netlink: 'syz.4.8686': attribute type 29 has an invalid length. [ 1311.136432][ T3631] delete_channel: no stack [ 1311.140998][ T3631] delete_channel: no stack [ 1311.150629][ T3693] netlink: 'syz.4.8686': attribute type 29 has an invalid length. [ 1311.164208][ T3631] delete_channel: no stack [ 1311.174258][ T3631] delete_channel: no stack [ 1311.182542][ T3695] netlink: 68 bytes leftover after parsing attributes in process `syz.0.8687'. [ 1311.189363][ T3631] delete_channel: no stack [ 1311.197065][ T3684] netlink: 'syz.4.8686': attribute type 29 has an invalid length. [ 1311.211319][ T3631] delete_channel: no stack [ 1311.224371][ T3631] delete_channel: no stack [ 1311.230444][ T3631] delete_channel: no stack [ 1311.232456][ T3684] netlink: 'syz.4.8686': attribute type 29 has an invalid length. [ 1311.235579][ T3631] delete_channel: no stack [ 1311.259669][ T3631] delete_channel: no stack [ 1311.294405][ T3631] delete_channel: no stack [ 1311.299342][ T3631] delete_channel: no stack [ 1311.326239][ T3631] delete_channel: no stack [ 1311.332727][ T3631] delete_channel: no stack [ 1311.353187][ T3631] delete_channel: no stack [ 1311.373255][ T3631] delete_channel: no stack [ 1311.383361][ T3631] delete_channel: no stack [ 1311.395583][ T3631] delete_channel: no stack [ 1311.400199][ T3631] delete_channel: no stack [ 1311.435094][ T3631] delete_channel: no stack [ 1311.439697][ T3631] delete_channel: no stack [ 1311.464772][ T3631] delete_channel: no stack [ 1311.472166][ T3631] delete_channel: no stack [ 1311.482180][ T3631] delete_channel: no stack [ 1311.492267][ T3631] delete_channel: no stack [ 1311.502387][ T3631] delete_channel: no stack [ 1311.512516][ T3631] delete_channel: no stack [ 1311.522640][ T3631] delete_channel: no stack [ 1311.544239][ T3631] delete_channel: no stack [ 1311.548841][ T3631] delete_channel: no stack [ 1311.553400][ T3631] delete_channel: no stack [ 1311.568466][ T3713] netlink: 'syz.2.8693': attribute type 2 has an invalid length. [ 1311.595540][ T3713] netlink: 150884 bytes leftover after parsing attributes in process `syz.2.8693'. [ 1311.605456][ T3631] delete_channel: no stack [ 1311.610048][ T3631] delete_channel: no stack [ 1311.632758][ T3631] delete_channel: no stack [ 1311.641803][ T3631] delete_channel: no stack [ 1311.671030][ T3631] delete_channel: no stack [ 1311.736324][ T3631] delete_channel: no stack [ 1311.774327][ T3631] delete_channel: no stack [ 1311.927084][ T3724] netlink: 'syz.1.8696': attribute type 10 has an invalid length. [ 1312.048647][ T3723] netlink: 'syz.3.8697': attribute type 11 has an invalid length. [ 1312.075613][ T3723] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.8697'. [ 1312.089562][ T3722] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1312.107360][ T3731] sctp: [Deprecated]: syz.0.8700 (pid 3731) Use of int in maxseg socket option. [ 1312.107360][ T3731] Use struct sctp_assoc_value instead [ 1312.141306][ T3735] netlink: 'syz.4.8699': attribute type 1 has an invalid length. [ 1312.141310][ T3733] netlink: 13951 bytes leftover after parsing attributes in process `syz.4.8699'. [ 1313.103982][ T3757] __nla_validate_parse: 1 callbacks suppressed [ 1313.104002][ T3757] netlink: 156 bytes leftover after parsing attributes in process `syz.4.8708'. [ 1313.510644][ T3772] delete_channel: no stack [ 1313.879545][ T3805] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8723'. [ 1313.917049][ T3805] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8723'. [ 1314.002565][ T3806] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.8720'. [ 1314.069471][ T3812] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8725'. [ 1314.583142][ T3834] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8731'. [ 1315.512399][ T3846] validate_nla: 9 callbacks suppressed [ 1315.512419][ T3846] netlink: 'syz.2.8735': attribute type 2 has an invalid length. [ 1315.560000][ T3846] netlink: 'syz.2.8735': attribute type 1 has an invalid length. [ 1315.581594][ T3846] netlink: 170140 bytes leftover after parsing attributes in process `syz.2.8735'. [ 1317.100915][ T3855] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.8737'. [ 1317.147842][ T3855] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 1317.587905][ T3884] delete_channel: no stack [ 1318.887881][ T3914] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1318.918251][ T3913] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.8752'. [ 1319.092672][ T3920] netlink: 10 bytes leftover after parsing attributes in process `syz.4.8755'. [ 1319.382573][ T3928] netlink: 'syz.2.8758': attribute type 21 has an invalid length. [ 1319.404383][ T3918] delete_channel: no stack [ 1319.440239][ T3927] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1319.839109][ T3948] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8763'. [ 1319.858161][ T3948] netlink: 'syz.2.8763': attribute type 16 has an invalid length. [ 1319.908795][ T3948] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8763'. [ 1320.049923][ T3945] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.8762'. [ 1321.727400][ T3975] netlink: 'syz.3.8767': attribute type 10 has an invalid length. [ 1322.141437][ T3975] team0: Device wg1 is of different type [ 1322.599017][ T3992] delete_channel: no stack [ 1322.740825][ T4008] netlink: 'syz.0.8778': attribute type 10 has an invalid length. [ 1322.783444][ T4008] device dummy0 left promiscuous mode [ 1322.842227][ T4008] team0: Port device dummy0 added [ 1323.266031][ T4020] netlink: 'syz.3.8780': attribute type 10 has an invalid length. [ 1323.329885][ T4020] device geneve0 entered promiscuous mode [ 1323.401716][ T4020] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 1323.446103][ T4015] delete_channel: no stack [ 1323.663027][ T4044] netlink: 'syz.4.8786': attribute type 29 has an invalid length. [ 1323.728808][ T4044] netlink: 'syz.4.8786': attribute type 29 has an invalid length. [ 1323.791125][ T4034] netlink: 'syz.4.8786': attribute type 29 has an invalid length. [ 1323.800615][ T4046] netlink: 'syz.4.8786': attribute type 29 has an invalid length. [ 1323.819734][ T4034] netlink: 15487 bytes leftover after parsing attributes in process `syz.4.8786'. [ 1323.841800][ T4034] netlink: 'syz.4.8786': attribute type 27 has an invalid length. [ 1323.947706][ T4034] bond0: (slave bond_slave_0): Releasing backup interface [ 1323.998360][ T4060] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8793'. [ 1324.007726][ T4058] netlink: 'syz.2.8792': attribute type 21 has an invalid length. [ 1324.019332][ T4058] netlink: 'syz.2.8792': attribute type 6 has an invalid length. [ 1324.039455][ T4058] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8792'. [ 1324.059409][ T4062] netlink: 763 bytes leftover after parsing attributes in process `syz.1.8794'. [ 1324.240591][ T4076] netlink: 16162 bytes leftover after parsing attributes in process `syz.3.8797'. [ 1324.278479][ T4076] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8797'. [ 1324.621164][ T4094] can: request_module (can-proto-0) failed. [ 1324.644282][ T4105] netlink: 194236 bytes leftover after parsing attributes in process `syz.3.8803'. [ 1324.685299][ T4105] netlink: zone id is out of range [ 1324.701169][ T4105] netlink: zone id is out of range [ 1324.718464][ T4105] netlink: zone id is out of range [ 1324.734082][ T4105] netlink: zone id is out of range [ 1324.750325][ T4106] ref_ctr_offset mismatch. inode: 0xab9 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1fe [ 1324.785878][ T4105] netlink: zone id is out of range [ 1324.791175][ T4105] netlink: zone id is out of range [ 1324.800274][ T4105] netlink: zone id is out of range [ 1324.808539][ T4105] netlink: zone id is out of range [ 1324.816139][ T4105] netlink: zone id is out of range [ 1324.821581][ T4105] netlink: zone id is out of range [ 1326.630964][ T4163] netlink: 14 bytes leftover after parsing attributes in process `syz.2.8822'. [ 1327.029595][ T4178] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.8827'. [ 1327.856899][ T4192] validate_nla: 3 callbacks suppressed [ 1327.856920][ T4192] netlink: 'syz.1.8831': attribute type 25 has an invalid length. [ 1327.932985][ T4192] netlink: 'syz.1.8831': attribute type 3 has an invalid length. [ 1327.951693][ T4192] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8831'. [ 1328.746300][ T4207] netlink: 'syz.0.8836': attribute type 39 has an invalid length. [ 1329.408011][ T4283] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1329.418341][ T4283] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1329.444157][ T4283] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1329.452720][ T4283] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1329.463205][ T4283] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1329.472130][ T4283] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1329.879267][ T1817] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1330.000881][ T1817] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1330.057757][ T4226] netlink: 'syz.4.8842': attribute type 10 has an invalid length. [ 1330.077547][ T4226] netlink: 55 bytes leftover after parsing attributes in process `syz.4.8842'. [ 1330.160574][ T1817] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1330.303183][ T1817] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1330.894311][ T1817] device .*! left promiscuous mode [ 1330.939462][ T4211] chnl_net:caif_netlink_parms(): no params data found [ 1331.151938][ T4211] bridge0: port 1(bridge_slave_0) entered blocking state [ 1331.159973][ T4211] bridge0: port 1(bridge_slave_0) entered disabled state [ 1331.169720][ T4211] device bridge_slave_0 entered promiscuous mode [ 1331.360919][ T4211] bridge0: port 2(bridge_slave_1) entered blocking state [ 1331.378533][ T4211] bridge0: port 2(bridge_slave_1) entered disabled state [ 1331.401102][ T4211] device bridge_slave_1 entered promiscuous mode [ 1331.505003][ T4211] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1331.544102][ T4283] Bluetooth: hci1: command 0x0409 tx timeout [ 1331.606350][ T4211] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1331.726529][ T4277] netlink: 'syz.4.8854': attribute type 4 has an invalid length. [ 1331.753539][ T4211] team0: Port device team_slave_0 added [ 1331.764744][ T4277] netlink: 'syz.4.8854': attribute type 8 has an invalid length. [ 1331.861879][ T4277] netlink: 109560 bytes leftover after parsing attributes in process `syz.4.8854'. [ 1332.042527][ T4211] team0: Port device team_slave_1 added [ 1332.146520][ T4211] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1332.174565][ T4211] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1332.321364][ T4211] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1332.385369][ T4211] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1332.392400][ T4211] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1332.453163][ T4211] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1332.651443][ T4211] device hsr_slave_0 entered promiscuous mode [ 1332.681706][ T4211] device hsr_slave_1 entered promiscuous mode [ 1332.701366][ T4211] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1332.731486][ T4211] Cannot create hsr debugfs directory [ 1333.623988][ T4283] Bluetooth: hci1: command 0x041b tx timeout [ 1334.233130][ T4349] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.8868'. [ 1334.551206][ T4364] netlink: 'syz.4.8871': attribute type 10 has an invalid length. [ 1334.620994][ T4364] device bridge_slave_1 left promiscuous mode [ 1334.649442][ T4364] bridge0: port 2(bridge_slave_1) entered disabled state [ 1334.668268][ T4371] FAULT_INJECTION: forcing a failure. [ 1334.668268][ T4371] name failslab, interval 1, probability 0, space 0, times 0 [ 1334.688021][ T4364] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1334.708587][ T4371] CPU: 0 PID: 4371 Comm: syz.2.8873 Not tainted syzkaller #0 [ 1334.716019][ T4371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1334.726094][ T4371] Call Trace: [ 1334.729389][ T4371] [ 1334.732330][ T4371] dump_stack_lvl+0x188/0x24e [ 1334.737029][ T4371] ? show_regs_print_info+0x12/0x12 [ 1334.742241][ T4371] ? load_image+0x400/0x400 [ 1334.746765][ T4371] ? __might_sleep+0xd0/0xd0 [ 1334.751384][ T4371] ? __lock_acquire+0x7d10/0x7d10 [ 1334.756425][ T4371] ? mark_lock+0x94/0x320 [ 1334.760771][ T4371] should_fail_ex+0x399/0x4d0 [ 1334.765463][ T4371] should_failslab+0x5/0x20 [ 1334.769986][ T4371] slab_pre_alloc_hook+0x59/0x310 [ 1334.775024][ T4371] ? __get_vm_area_node+0x122/0x330 [ 1334.780325][ T4371] __kmem_cache_alloc_node+0x4f/0x260 [ 1334.785710][ T4371] ? __get_vm_area_node+0x122/0x330 [ 1334.790907][ T4371] kmalloc_node_trace+0x22/0xe0 [ 1334.795763][ T4371] __get_vm_area_node+0x122/0x330 [ 1334.800787][ T4371] __vmalloc_node_range+0x357/0x13b0 [ 1334.806067][ T4371] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 1334.811729][ T4371] ? free_vm_area+0x50/0x50 [ 1334.816232][ T4371] ? end_current_label_crit_section+0x170/0x170 [ 1334.822464][ T4371] ? __lock_acquire+0x7d10/0x7d10 [ 1334.827495][ T4371] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 1334.833036][ T4371] __vmalloc+0x76/0x80 [ 1334.837098][ T4371] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 1334.842638][ T4371] bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 1334.848006][ T4371] ? bpf_lsm_capable+0x5/0x10 [ 1334.852679][ T4371] bpf_prog_alloc+0x1c/0x1b0 [ 1334.857265][ T4371] bpf_prog_load+0x7c9/0x1560 [ 1334.861942][ T4371] ? map_freeze+0x390/0x390 [ 1334.866442][ T4371] ? __might_fault+0xa6/0x120 [ 1334.871122][ T4371] ? __might_fault+0xa6/0x120 [ 1334.875789][ T4371] ? __might_fault+0xc2/0x120 [ 1334.880454][ T4371] ? __might_fault+0xa6/0x120 [ 1334.885123][ T4371] ? bpf_lsm_bpf+0x5/0x10 [ 1334.889444][ T4371] ? security_bpf+0x7a/0xa0 [ 1334.893943][ T4371] __sys_bpf+0x5b8/0x780 [ 1334.898186][ T4371] ? bpf_link_show_fdinfo+0x380/0x380 [ 1334.903564][ T4371] ? lock_chain_count+0x20/0x20 [ 1334.908415][ T4371] __x64_sys_bpf+0x78/0x90 [ 1334.912829][ T4371] do_syscall_64+0x4c/0xa0 [ 1334.917236][ T4371] ? clear_bhb_loop+0x60/0xb0 [ 1334.921907][ T4371] ? clear_bhb_loop+0x60/0xb0 [ 1334.926581][ T4371] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1334.932466][ T4371] RIP: 0033:0x7f381239ce59 [ 1334.936873][ T4371] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1334.956472][ T4371] RSP: 002b:00007f3813253028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1334.964877][ T4371] RAX: ffffffffffffffda RBX: 00007f3812615fa0 RCX: 00007f381239ce59 [ 1334.972839][ T4371] RDX: 0000000000000070 RSI: 0000200000000440 RDI: 0000000000000005 [ 1334.980798][ T4371] RBP: 00007f3813253090 R08: 0000000000000000 R09: 0000000000000000 [ 1334.988756][ T4371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1334.996717][ T4371] R13: 00007f3812616038 R14: 00007f3812615fa0 R15: 00007ffcde13ef78 [ 1335.004688][ T4371] [ 1335.114492][ T4371] syz.2.8873: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 1335.198333][ T4371] CPU: 1 PID: 4371 Comm: syz.2.8873 Not tainted syzkaller #0 [ 1335.205771][ T4371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1335.215839][ T4371] Call Trace: [ 1335.219127][ T4371] [ 1335.222065][ T4371] dump_stack_lvl+0x188/0x24e [ 1335.226757][ T4371] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 1335.233277][ T4371] ? show_regs_print_info+0x12/0x12 [ 1335.238490][ T4371] ? load_image+0x400/0x400 [ 1335.243011][ T4371] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 1335.249447][ T4371] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 1335.255973][ T4371] warn_alloc+0x242/0x330 [ 1335.260350][ T4371] ? __get_vm_area_node+0x122/0x330 [ 1335.265561][ T4371] ? zone_watermark_ok_safe+0x270/0x270 [ 1335.271119][ T4371] ? rcu_is_watching+0x11/0xa0 [ 1335.275980][ T4371] ? __get_vm_area_node+0x318/0x330 [ 1335.281199][ T4371] __vmalloc_node_range+0x37c/0x13b0 [ 1335.286523][ T4371] ? free_vm_area+0x50/0x50 [ 1335.291038][ T4371] ? end_current_label_crit_section+0x170/0x170 [ 1335.297299][ T4371] ? __lock_acquire+0x7d10/0x7d10 [ 1335.302345][ T4371] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 1335.307911][ T4371] __vmalloc+0x76/0x80 [ 1335.311994][ T4371] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 1335.317558][ T4371] bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 1335.322953][ T4371] ? bpf_lsm_capable+0x5/0x10 [ 1335.327655][ T4371] bpf_prog_alloc+0x1c/0x1b0 [ 1335.332265][ T4371] bpf_prog_load+0x7c9/0x1560 [ 1335.336974][ T4371] ? map_freeze+0x390/0x390 [ 1335.341496][ T4371] ? __might_fault+0xa6/0x120 [ 1335.346195][ T4371] ? __might_fault+0xa6/0x120 [ 1335.350883][ T4371] ? __might_fault+0xc2/0x120 [ 1335.355573][ T4371] ? __might_fault+0xa6/0x120 [ 1335.360263][ T4371] ? bpf_lsm_bpf+0x5/0x10 [ 1335.364607][ T4371] ? security_bpf+0x7a/0xa0 [ 1335.369125][ T4371] __sys_bpf+0x5b8/0x780 [ 1335.373384][ T4371] ? bpf_link_show_fdinfo+0x380/0x380 [ 1335.378789][ T4371] ? lock_chain_count+0x20/0x20 [ 1335.383666][ T4371] __x64_sys_bpf+0x78/0x90 [ 1335.388096][ T4371] do_syscall_64+0x4c/0xa0 [ 1335.392521][ T4371] ? clear_bhb_loop+0x60/0xb0 [ 1335.397213][ T4371] ? clear_bhb_loop+0x60/0xb0 [ 1335.401913][ T4371] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1335.407821][ T4371] RIP: 0033:0x7f381239ce59 [ 1335.412250][ T4371] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1335.431878][ T4371] RSP: 002b:00007f3813253028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1335.440315][ T4371] RAX: ffffffffffffffda RBX: 00007f3812615fa0 RCX: 00007f381239ce59 [ 1335.448312][ T4371] RDX: 0000000000000070 RSI: 0000200000000440 RDI: 0000000000000005 [ 1335.456302][ T4371] RBP: 00007f3813253090 R08: 0000000000000000 R09: 0000000000000000 [ 1335.464287][ T4371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1335.472270][ T4371] R13: 00007f3812616038 R14: 00007f3812615fa0 R15: 00007ffcde13ef78 [ 1335.480273][ T4371] [ 1335.704319][ T4283] Bluetooth: hci1: command 0x040f tx timeout [ 1335.707099][ T4369] netlink: 'syz.1.8869': attribute type 2 has an invalid length. [ 1335.769826][ T4369] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.8869'. [ 1335.826112][ T1817] device wlan1 left promiscuous mode [ 1335.859535][ T1817] team0: Port device wlan1 removed [ 1336.041710][ T4376] netlink: 'syz.0.8875': attribute type 1 has an invalid length. [ 1336.065205][ T4371] Mem-Info: [ 1336.068385][ T4371] active_anon:30818 inactive_anon:0 isolated_anon:0 [ 1336.068385][ T4371] active_file:21258 inactive_file:40457 isolated_file:0 [ 1336.068385][ T4371] unevictable:768 dirty:68 writeback:0 [ 1336.068385][ T4371] slab_reclaimable:21844 slab_unreclaimable:99447 [ 1336.068385][ T4371] mapped:38910 shmem:21809 pagetables:723 [ 1336.068385][ T4371] sec_pagetables:0 bounce:0 [ 1336.068385][ T4371] kernel_misc_reclaimable:0 [ 1336.068385][ T4371] free:1290910 free_pcp:4407 free_cma:0 [ 1336.121200][ T4376] netlink: 'syz.0.8875': attribute type 4 has an invalid length. [ 1336.133991][ T4376] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.8875'. [ 1336.169195][ T4371] Node 0 active_anon:127472kB inactive_anon:0kB active_file:85032kB inactive_file:161632kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:156240kB dirty:268kB writeback:0kB shmem:90200kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11076kB pagetables:2892kB sec_pagetables:0kB all_unreclaimable? no [ 1336.227889][ T4371] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1336.263030][ T4371] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1336.304511][ T4371] lowmem_reserve[]: 0 2527 2528 2528 2528 [ 1336.310360][ T4371] Node 0 DMA32 free:1229764kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:131372kB inactive_anon:0kB active_file:85032kB inactive_file:161632kB unevictable:1536kB writepending:268kB present:3129332kB managed:2592944kB mlocked:0kB bounce:0kB free_pcp:6352kB local_pcp:1760kB free_cma:0kB [ 1336.368552][ T4371] lowmem_reserve[]: 0 0 1 1 1 [ 1336.388287][ T4371] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1336.444413][ T4371] lowmem_reserve[]: 0 0 0 0 0 [ 1336.449561][ T4371] Node 1 Normal free:3910452kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:11520kB local_pcp:0kB free_cma:0kB [ 1336.482825][ T4371] lowmem_reserve[]: 0 0 0 0 0 [ 1336.488496][ T4371] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1336.508146][ T4371] Node 0 DMA32: 1367*4kB (UE) 30*8kB (E) 195*16kB (UE) 1330*32kB (UME) 1080*64kB (UE) 663*128kB (UME) 440*256kB (UME) 248*512kB (UME) 165*1024kB (UM) 9*2048kB (UM) 144*4096kB (M) = 1222204kB [ 1336.603968][ T4371] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1336.632931][ T4371] Node 1 Normal: 241*4kB (UME) 60*8kB (UME) 33*16kB (UME) 134*32kB (UE) 53*64kB (UME) 19*128kB (UME) 8*256kB (UM) 4*512kB (UME) 1*1024kB (E) 1*2048kB (E) 950*4096kB (M) = 3910452kB [ 1336.716932][ T4371] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1336.739405][ T4371] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1336.773877][ T4371] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1336.807694][ T4371] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1336.867664][ T4371] 89896 total pagecache pages [ 1336.872607][ T4371] 0 pages in swap cache [ 1336.876875][ T4371] Free swap = 124472kB [ 1336.881031][ T4371] Total swap = 124996kB [ 1336.909068][ T4371] 2097051 pages RAM [ 1336.912929][ T4371] 0 pages HighMem/MovableOnly [ 1336.947888][ T4371] 415214 pages reserved [ 1336.971431][ T4371] 0 pages cma reserved [ 1336.993893][ T1817] device hsr_slave_0 left promiscuous mode [ 1337.016605][ T1817] device hsr_slave_1 left promiscuous mode [ 1337.149285][ T1817] device veth1_macvtap left promiscuous mode [ 1337.167799][ T1817] device veth0_vlan left promiscuous mode [ 1337.182797][ T4398] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8881'. [ 1337.783977][ T4283] Bluetooth: hci1: command 0x0419 tx timeout [ 1337.898049][ T1817] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 1338.588516][ T1817] device team_slave_1 left promiscuous mode [ 1338.601730][ T1817] team0 (unregistering): Port device team_slave_1 removed [ 1338.651525][ T1817] device team_slave_0 left promiscuous mode [ 1338.661108][ T1817] team0 (unregistering): Port device team_slave_0 removed [ 1338.707561][ T1817] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1338.951834][ T1817] bond0 (unregistering): Released all slaves [ 1339.008172][ T4393] netlink: 'syz.4.8880': attribute type 10 has an invalid length. [ 1339.020220][ T4393] device wlan1 left promiscuous mode [ 1339.043979][ T4393] team0: Port device wlan1 added [ 1339.180646][ T4211] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1339.230438][ T4211] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1339.286500][ T4211] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1339.501656][ T4211] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1339.851072][ T4439] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8890'. [ 1339.999334][ T4211] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1340.036773][T10802] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1340.049380][T10802] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1340.087602][ T4211] 8021q: adding VLAN 0 to HW filter on device team0 [ 1340.220563][T10803] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1340.230616][T10803] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1340.241993][T10803] bridge0: port 1(bridge_slave_0) entered blocking state [ 1340.249162][T10803] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1340.334028][T10803] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1340.404462][T10803] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1340.455867][T10803] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1340.492629][T10803] bridge0: port 2(bridge_slave_1) entered blocking state [ 1340.499843][T10803] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1340.547633][T10803] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1340.584917][T10803] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1340.623735][T10803] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1340.658358][T10803] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1340.681895][T10803] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1340.739843][T10803] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1340.765044][T10803] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1340.804323][T10803] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1340.817774][T10803] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1340.928332][T10803] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1340.943636][T10803] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1340.968750][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1341.240728][ T4483] netlink: 14556 bytes leftover after parsing attributes in process `syz.0.8897'. [ 1341.477848][ T4477] device syzkaller0 entered promiscuous mode [ 1341.840441][ T4500] netlink: 14975 bytes leftover after parsing attributes in process `syz.4.8901'. [ 1344.147149][T27336] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1344.155849][T27336] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1344.168025][ T4211] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1344.203493][T10808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1344.214928][T10808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1344.238834][T27336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1344.278698][T27336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1344.315985][ T4211] device veth0_vlan entered promiscuous mode [ 1344.344250][T27336] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1344.362128][T27336] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1344.408397][ T4211] device veth1_vlan entered promiscuous mode [ 1344.460062][T27336] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1344.505700][T27336] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1344.542413][T27336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1344.569820][T27336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1344.615103][ T4211] device veth0_macvtap entered promiscuous mode [ 1344.625481][ T4519] netlink: 'syz.2.8908': attribute type 22 has an invalid length. [ 1344.658930][ T4519] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8908'. [ 1344.685425][ T4211] device veth1_macvtap entered promiscuous mode [ 1344.723310][ T4211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1344.748343][ T4211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1344.764930][ T4211] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1344.774551][T10803] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1344.783626][T10803] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1344.795709][T10803] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1344.807667][T10803] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1344.819888][ T4211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1344.835402][ T4211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1344.867426][ T4211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1344.891826][ T4211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1344.907191][ T4211] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1344.926270][T10802] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1344.937999][T10802] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1344.978460][ T4211] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1344.995174][ T4211] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1345.010340][ T4211] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1345.010539][ T4538] can: request_module (can-proto-0) failed. [ 1345.019570][ T4211] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1345.473943][T10808] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1345.497224][T10808] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1345.519251][T10803] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1346.502000][ T4570] netlink: 'syz.4.8918': attribute type 29 has an invalid length. [ 1347.282596][ T4561] netlink: 'syz.0.8916': attribute type 28 has an invalid length. [ 1347.290632][ T4561] netlink: 2 bytes leftover after parsing attributes in process `syz.0.8916'. [ 1347.320759][ T4570] netlink: 'syz.4.8918': attribute type 29 has an invalid length. [ 1347.351432][T10808] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1347.396272][T10808] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1347.423480][T10808] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1347.589454][ T4581] netlink: 'syz.3.8834': attribute type 13 has an invalid length. [ 1347.602527][ T4581] netlink: 152 bytes leftover after parsing attributes in process `syz.3.8834'. [ 1347.626063][ T4581] syz_tun: refused to change device tx_queue_len [ 1347.632754][ T4581] net_ratelimit: 32 callbacks suppressed [ 1347.632793][ T4581] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1347.661111][ T4588] netlink: 'syz.3.8834': attribute type 10 has an invalid length. [ 1347.706690][ T4588] team0: Port device netdevsim0 added [ 1347.730128][ T4590] netlink: 128 bytes leftover after parsing attributes in process `syz.4.8923'. [ 1347.743967][ T4590] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1349.495220][ C1] [ 1349.495231][ C1] ================================ [ 1349.495236][ C1] WARNING: inconsistent lock state [ 1349.495258][ C1] syzkaller #0 Not tainted [ 1349.495267][ C1] -------------------------------- [ 1349.495272][ C1] inconsistent {INITIAL USE} -> {IN-NMI} usage. [ 1349.495280][ C1] syz.1.8934/4622 [HC1[1]:SC0[0]:HE0:SE1] takes: [ 1349.495298][ C1] ffff88807c5a1a38 (&trie->lock){....}-{2:2}, at: trie_delete_elem+0x90/0x690 [ 1349.495437][ C1] {INITIAL USE} state was registered at: [ 1349.495445][ C1] lock_acquire+0x1bb/0x4a0 [ 1349.495466][ C1] _raw_spin_lock_irqsave+0xb0/0x100 [ 1349.495492][ C1] trie_update_elem+0xc7/0xe80 [ 1349.495509][ C1] bpf_map_update_value+0x59e/0x670 [ 1349.495527][ C1] map_update_elem+0x4d7/0x680 [ 1349.495546][ C1] __sys_bpf+0x4ec/0x780 [ 1349.495564][ C1] __x64_sys_bpf+0x78/0x90 [ 1349.495582][ C1] do_syscall_64+0x4c/0xa0 [ 1349.495596][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1349.495617][ C1] irq event stamp: 1016 [ 1349.495623][ C1] hardirqs last enabled at (1015): [] syscall_enter_from_user_mode+0x21/0x80 [ 1349.495647][ C1] hardirqs last disabled at (1016): [] exc_debug+0x6e/0x130 [ 1349.495667][ C1] softirqs last enabled at (524): [] bpf_prog_load+0x1127/0x1560 [ 1349.495692][ C1] softirqs last disabled at (522): [] bpf_ksym_add+0x29/0x340 [ 1349.495709][ C1] [ 1349.495709][ C1] other info that might help us debug this: [ 1349.495715][ C1] Possible unsafe locking scenario: [ 1349.495715][ C1] [ 1349.495719][ C1] CPU0 [ 1349.495722][ C1] ---- [ 1349.495725][ C1] lock(&trie->lock); [ 1349.495736][ C1] [ 1349.495739][ C1] lock(&trie->lock); [ 1349.495749][ C1] [ 1349.495749][ C1] *** DEADLOCK *** [ 1349.495749][ C1] [ 1349.495753][ C1] no locks held by syz.1.8934/4622. [ 1349.495760][ C1] [ 1349.495760][ C1] stack backtrace: [ 1349.495766][ C1] CPU: 1 PID: 4622 Comm: syz.1.8934 Not tainted syzkaller #0 [ 1349.495781][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1349.495791][ C1] Call Trace: [ 1349.495797][ C1] <#DB> [ 1349.495805][ C1] dump_stack_lvl+0x188/0x24e [ 1349.495826][ C1] ? show_regs_print_info+0x12/0x12 [ 1349.495850][ C1] ? print_usage_bug+0x42a/0x690 [ 1349.495873][ C1] ? verify_lock_unused+0x18/0x140 [ 1349.495899][ C1] lock_acquire+0x2df/0x4a0 [ 1349.495926][ C1] ? trie_delete_elem+0x90/0x690 [ 1349.495950][ C1] ? read_lock_is_recursive+0x10/0x10 [ 1349.495974][ C1] ? llist_add_batch+0x12b/0x180 [ 1349.496001][ C1] _raw_spin_lock_irqsave+0xb0/0x100 [ 1349.496021][ C1] ? trie_delete_elem+0x90/0x690 [ 1349.496042][ C1] ? _raw_spin_lock+0x40/0x40 [ 1349.496060][ C1] ? lock_acquire+0x2df/0x4a0 [ 1349.496089][ C1] trie_delete_elem+0x90/0x690 [ 1349.496124][ C1] bpf_prog_dd9ec7ccafdb8ba4+0x3d/0x41 [ 1349.496146][ C1] bpf_overflow_handler+0x6e8/0x7c0 [ 1349.496169][ C1] ? bpf_overflow_handler+0xd9/0x7c0 [ 1349.496188][ C1] ? perf_swevent_overflow+0x230/0x230 [ 1349.496205][ C1] ? rcu_is_watching+0x11/0xa0 [ 1349.496229][ C1] ? lock_release+0xcf/0x920 [ 1349.496255][ C1] ? __perf_event_account_interrupt+0x187/0x280 [ 1349.496284][ C1] __perf_event_overflow+0x448/0x610 [ 1349.496315][ C1] perf_swevent_overflow+0x19b/0x230 [ 1349.496340][ C1] perf_swevent_event+0x458/0x570 [ 1349.496367][ C1] ? perf_tp_event+0xc30/0xc30 [ 1349.496390][ C1] ? __bpf_trace_bpf_trace_printk+0x20/0x20 [ 1349.496455][ C1] perf_bp_event+0x312/0x3f0 [ 1349.496477][ C1] ? perf_trace_run_bpf_submit+0x124/0x1c0 [ 1349.496513][ C1] ? perf_event_free_bpf_prog+0x110/0x110 [ 1349.496567][ C1] ? atomic_notifier_call_chain+0x2c/0x2b0 [ 1349.496616][ C1] ? read_lock_is_recursive+0x10/0x10 [ 1349.496646][ C1] hw_breakpoint_exceptions_notify+0x152/0x470 [ 1349.496708][ C1] atomic_notifier_call_chain+0x17a/0x2b0 [ 1349.496726][ C1] ? atomic_notifier_call_chain+0x2c/0x2b0 [ 1349.496749][ C1] notify_die+0x141/0x1a0 [ 1349.496771][ C1] ? srcu_init_notifier_head+0x90/0x90 [ 1349.496806][ C1] notify_debug+0x20/0x30 [ 1349.496830][ C1] exc_debug+0xd9/0x130 [ 1349.496851][ C1] asm_exc_debug+0x1a/0x40 [ 1349.496872][ C1] RIP: 0010:copy_user_enhanced_fast_string+0xa/0x40 [ 1349.496891][ C1] Code: ff c9 75 f2 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 8d 0c ca 89 ca eb 20 0f 01 cb 83 fa 40 72 38 89 d1 a4 31 c0 0f 01 ca c3 89 ca eb 0a 90 90 90 90 90 90 90 90 90 90 [ 1349.496905][ C1] RSP: 0018:ffffc90004eb7d48 EFLAGS: 00050202 [ 1349.496919][ C1] RAX: ffffffff84116f01 RBX: 0000000000000050 RCX: 000000000000000f [ 1349.496931][ C1] RDX: 0000000000000050 RSI: 0000200000000301 RDI: ffffc90004eb7e01 [ 1349.496943][ C1] RBP: 0000000000000000 R08: ffffc90004eb7e0f R09: 1ffff920009d6fc1 [ 1349.496955][ C1] R10: dffffc0000000000 R11: fffff520009d6fc2 R12: 00007fffffffefb0 [ 1349.496967][ C1] R13: 0000000000000050 R14: ffffc90004eb7dc0 R15: 00002000000002c0 [ 1349.496985][ C1] ? _copy_from_user+0xc1/0x170 [ 1349.497014][ C1] [ 1349.497019][ C1] [ 1349.497024][ C1] _copy_from_user+0xf4/0x170 [ 1349.497047][ C1] __sys_bpf+0x2ea/0x780 [ 1349.497072][ C1] ? bpf_link_show_fdinfo+0x380/0x380 [ 1349.497110][ C1] ? lock_chain_count+0x20/0x20 [ 1349.497142][ C1] __x64_sys_bpf+0x78/0x90 [ 1349.497163][ C1] do_syscall_64+0x4c/0xa0 [ 1349.497179][ C1] ? clear_bhb_loop+0x60/0xb0 [ 1349.497200][ C1] ? clear_bhb_loop+0x60/0xb0 [ 1349.497225][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1349.497246][ C1] RIP: 0033:0x7f642439ce59 [ 1349.497260][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1349.497273][ C1] RSP: 002b:00007f6425257028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1349.497289][ C1] RAX: ffffffffffffffda RBX: 00007f6424615fa0 RCX: 00007f642439ce59 [ 1349.497301][ C1] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 0000000000000000 [ 1349.497312][ C1] RBP: 00007f6424432d6f R08: 0000000000000000 R09: 0000000000000000 [ 1349.497322][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1349.497332][ C1] R13: 00007f6424616038 R14: 00007f6424615fa0 R15: 00007ffcb1fb6898 [ 1349.497360][ C1]