last executing test programs: 5.562817623s ago: executing program 3 (id=2557): socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x104046, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0), 0x22100, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[@cred={{0x1c}}], 0x20}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x200}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 5.329426676s ago: executing program 3 (id=2560): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair(0x10, 0xa, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x0, 0x41, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x820a4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_config_ext, 0xc052, 0x200000000000c8, 0x2, 0x9, 0xfffffffffffffff8, 0x80000000, 0xfffb, 0x0, 0xfffffffc, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x24040014) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd631180fc020c2f00db5b686158bbcfe8875a060300000023000000000000000000000000ac1414aa3a2008"], 0xfdef) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYRESOCT=r2, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="bca417692e991db4047c3a6982c67800000000000000005c7a72e2a96c587287ce5f7fb1522db87203dedcc7f2d824e3a768f2c707c4a64777d4cf7f854481a87ae98bb8752d4c"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071120800000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r4 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@hci={0x1f, 0x3, 0x31}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000380)="b8b28225ea772f0daee8c7c98100", 0xe}], 0x1}, 0x4008014) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200), 0x6) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_type(r5, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r6, &(0x7f0000000280), 0x9) r7 = openat$cgroup_procs(r5, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000c40), 0x12) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f0000000200)=0x1, 0x12) sendmsg$sock(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)="83850135e418e7f2b47390d8be3b2ce66a35fcddefca73678db052974262a3d248ff489fe6584f5bbd92d5d9faab6bd4ec60d0784ad5f7bb0eb9804c09f40737019d4ac3ec9151616f294e8769a8001a194d7b0884deee3e34cbf3ef87a73b4ec35e1281b83fa6c331e7da3a37a01cb379f7e96e963e53c87eabc2c814b91f7abfa23ecd13b95a22a33763e5dcc49876cd4b828448ede8b111e988fe26d1402168735dd438aa73b8ed66438181288230e0430218fb6dcbbd3cfa1b3a4f6c25f9a8ec98aa6d0a75199d2ac6b4abd00a24773943180891", 0xd6}, {&(0x7f0000000180)="08729287ff2aa82669c9902d1b993bcb03556cff9b450377b9b5bf59243d2271ba46fbcf6efc8a4cd15e7de65951845c3fadabec287496a47bf08999a27a41cbaa2c6a1ab20bfa000dc360482fbb990be4a88f64d7596da57cced3bdf2590180df8402233e5d7fb293013fbb04b78fcbd17aa79c1cccd18c8d8e8cbb24da8c0a38c7cb6ded6f3a7c186d3d322d8042d4e3c8c10f7d2bf0ffa44deed0731e93f321ebc99051", 0xa5}, {&(0x7f0000000000)="d71634d751ed288fdfdec05382aae77c2d9c412f", 0x14}, {&(0x7f0000000240)="2e1aea295bbc954ab4f78475", 0xc}, {&(0x7f0000000280)="b9f3e4ba0d52b66854b35c84453c50933c088aecc4792223ce617ad69479cb7e942462f0cdfdd1cdf88b4a771a7b2827aec9fe90f77c0e96643266397fe4cc7adfdb1e6cfd9517a0a90dd8a58581d917931f65b984a934f5e774b5b674c3334f007cbfd15ab44352f5d4f32b38b8d67e76789e44a0c1e042f5c40a989c4e262942d3d1a156a9a4f1b5d86cd1329a2fd90710b0a203b0c13f1b5d5373defc7be10195dc3ed1799ad6c38417732d3a67", 0xaf}, {&(0x7f0000000340)="2a7386f297f34f578ec273a4a3178eff9a11850799d4da7079f65c07a5950ef2267a0a23b25074ef4844344720cfdb26c9fae675fb259ea1e54f6009ce0cfbe10f2be7b55ab9ac84c7f189d2801e2d367da153d15cd6ae973000095331d1e484e6d441b48d042cb3c6de3d85e213c423e3c4246596d69cc54ae96cd3cd94fd3fe62b04871d4c8d9aca188bd3d64bcae52ce46dbb148463afb4eb816dcd7d8cc8631d92ced538081d6aadde2ff59105fa62e73aad2b65d52b", 0xb8}, {&(0x7f0000000400)="e28ef18bfb97f920c7d93cfbe16c9d98422def1ba13e53ef70cc05ba2e0723a02dcbc2cf4a46642956d44c171ea1fdff4e336aa40b661ca19ff6c4b7d41312cc033a9d53bcdbd80d3f76252294e3945a878bebff1866d55faf672e97cb47185c161ee5e3392c042c381293d5e833da3e8cc23fa0f29bb5dfe27c20f5f0be1c0226a02250bbaacc1e24d27ad832a3250a65c15dd7cc5bb6c704812b46391353adadac0d2866fe490f41419653c6046d3237d3", 0xb2}], 0x7}, 0x800) ioctl$SIOCSIFHWADDR(r1, 0x89f0, &(0x7f0000000900)={'bond0\x00', @random="0000330c1100"}) r10 = bpf$ITER_CREATE(0x21, &(0x7f0000000580), 0x8) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000005c0)=r10, 0x4) 4.048507042s ago: executing program 0 (id=2563): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000230000009500040000000000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x11}, 0x94) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[], 0x0, 0x34}, 0x28) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x26e1, 0x0) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000c00)=r2) close(r2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110c23003d) syz_open_procfs$namespace(0x0, &(0x7f0000000780)='ns/pid_for_children\x00') sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000003c0)=@phonet={0x23, 0x0, 0x0, 0x38}, 0x80, 0x0}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x18108, 0x0, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x100c, 0x0, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, 0x0) write$cgroup_subtree(r2, &(0x7f0000000140)=ANY=[], 0xc) r3 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r3, 0x84, 0x14, &(0x7f0000000000), 0x4) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x3000c085) sendmsg$inet(r1, 0x0, 0x52cc) close(r1) recvmsg$unix(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000c80)=""/4096, 0x1000}, {&(0x7f0000000880)=""/198, 0xc6}, {&(0x7f0000000500)=""/110, 0x6e}, {&(0x7f00000006c0)=""/154, 0x9a}, {&(0x7f0000000980)=""/92, 0x5c}, {&(0x7f0000000a00)=""/117, 0x75}, {&(0x7f0000000a80)=""/116, 0x74}, {&(0x7f0000000b00)=""/90, 0x5a}], 0x8, &(0x7f0000001c80)=[@rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x70}, 0x40002060) perf_event_open(&(0x7f0000001d00)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000007044f16c01b1fbfd000000000000008af65f0df9928941994cc8c173fac5688671085a86d143c59fed0e57feb97f422c51d8e63b4ed9e295df3ccd1a55752dfc2f32f14b6c8f0e7413c3e9caaad30dcb412d0f54623f388bb2c63d2b1f7d83cd0cc021867bb4aee9967a6ee83e1b18fd8beca7d7eddcd96634"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x80) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0, {0xa, 0x0, 0x3, @local}}}, 0x80, 0x0}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000380), 0x98) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000100)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000040)}, 0x0) 4.048344082s ago: executing program 3 (id=2564): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000a00)=""/285, 0x11d}, {&(0x7f00000005c0)=""/222, 0xde}, {&(0x7f0000001d40)=""/4043, 0xfcb}, {&(0x7f0000000380)=""/197, 0xc5}, {&(0x7f0000001b40)=""/196, 0xc4}, {&(0x7f0000000480)=""/206, 0xce}, {&(0x7f0000004100)=""/4090, 0xffa}, {&(0x7f0000001c40)=""/214, 0xd6}, {&(0x7f0000000280)=""/216, 0xd8}, {&(0x7f0000000940)=""/192, 0xc0}], 0xa}, 0x40012100) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x240000, 0x4, @perf_bp={0x0}, 0x688, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x311b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x64}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) 3.608664115s ago: executing program 3 (id=2570): perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0xaa, 0x0, 0x0, 0x0, 0x40, 0x0, 0x7, 0x2498, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x4008, 0x9, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x161f, 0x0, @perf_config_ext={0x1, 0x4}, 0x0, 0xc8, 0x0, 0x6, 0xbe20}, 0x0, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x8}, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080), 0x4) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_devices(r2, &(0x7f0000000200)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000000)={'c', ' *:* ', 'w\x00'}, 0x8) r4 = openat$cgroup_devices(r2, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r4, &(0x7f00000000c0)={'c', ' *:* ', 'rwm\x00'}, 0xa) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001b80)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21ca0000cf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f94306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b262341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261e58fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f9ac2f7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe8799fe266e2ccac80fefe750151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa796ea7b156d19612297c63bb20e1e0469f7615f67a9218cbace38f5236821314f76302b98afa93044b83989339ca10e6ae30e70e17a82f03e915b8425e8e7a91614306d2ae0bc3550d856f2d7293672b5673d264fc886b0c8bdf436a0fcd21bf9da7bdca98e34cd6e59b0a7ce4ba1b466561aaa35448dff47bb1d7df23d467689a66"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000014c0)={&(0x7f0000001540)=@tipc=@name={0x1e, 0x2, 0x0, {{0x40, 0x1}}}, 0x80, 0x0}, 0x0) r5 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid\x00') ioctl$TUNSETNOCSUM(r5, 0xb702, 0x0) 3.318839094s ago: executing program 3 (id=2574): socket$kcm(0x29, 0x5, 0x0) (async) r0 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000008c0)="e825e11eacb7c817f94002c8f59fe479fc587b857f1a17a8e35e17038b7f46d7817390cd3f20def0a2623c5f0e5e9da8c466f7b65e023357e577993680ea2c938f6491a5e9f902b6db751fd09f605a0b02a9954d2de4ddd720307aa2a00eb8b4c4be18692418a7ab038ef3d00a17aae56547efa4131eb2f73e5efb6bf685f6c9113528ff241e88af3ca67299d6f693e289f4ca5b32c28b1c8e932bb0bd0a2a21353607e3b4de94b3665bf4d18dac7c2ed3c85350aa9512c682636075430d360d9ad8e3bdb3a3fd7dab49395f74cbd43850984523f43dc1351e2ee6b1126807ef74d0feb7c6707730", 0xe8}, {&(0x7f0000000040)="74b53f7eac53f6de3244476be1f51ee034d46237879927c077c63e56314accc5434c364e9a8cfe800a2522fcf881704d82cead05a19e9290bfb385a9a1c8536a97afd6ba", 0x44}, {&(0x7f0000000140)="4a7fbd95b11dba1d3a179ef49239454c732f8872f80e1b8b55172f51cddec5c3e2a2b1098a91c59ad08019f8bd813303a370", 0x32}, {&(0x7f00000009c0)="82c997df122a159c8106a2fd0f6302fe892d94d00488c8837771dbdf1cc4a37f6ef96cd3d9ccde0387d3c44dd2f0a9632f0f78479fa95e0d2112de47b36382872380f899c462f28005b610fc66db37a70802ab503e72a6a79ea91f047863d709d7582c2e1ce378c0da2b79551fd4d8f5ee79e20bb35d53a5b064d1e0bc3125f8f9e7ca0233e0217e32a321d7", 0x8c}, {&(0x7f0000000a80)="2de230c89f111c1b964f9724f4066a4d774a9ae107c853bf792a56593316fe3fae144097068e6503eb3a63dfb814c01876b943763f5776e96e34aa387ed124653c3ce4962dcfd160b38853087d51e15d41bdb33cd7aa0f0ca6e99a1cb378b5757ffd7aa9eff49adc3ab604a7e18e5a7a2183d1c862c61ffd72badaae88228b19a26fe1e09b6b9271ed1ef597703c2f42f3a0ec6af3df63267147dd69913d1ff7fb", 0xa1}, {&(0x7f0000000b40)="a353c3f97293ec646a36cbf35f3ea52e49e700046a10cba72b75974059a854fb9a39d21aa645c3cf7a207f82e2ab97f67c5b561c8c0de698c3179615ce4736549724a2d942d20f53797a3d5d873194eb7be1a9f0362fa42f2c127ebd41868c127bbf3d0b43b469ab048b67ab54943e249a2dbe99496918ea749e9c7d14f9adfa564bd689cd14023a16e7bafbbd5a5d7af67b5a", 0x93}, {&(0x7f0000000200)="d2a802ad52814e94e8292752c07dd9e305a9f045419b96ac01280be20f4f0c077f313ac2994d3e36dc9370ab0c46943f115a937ab60ba7c9ca3fed3b", 0x3c}], 0x7}, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000008c0)="e825e11eacb7c817f94002c8f59fe479fc587b857f1a17a8e35e17038b7f46d7817390cd3f20def0a2623c5f0e5e9da8c466f7b65e023357e577993680ea2c938f6491a5e9f902b6db751fd09f605a0b02a9954d2de4ddd720307aa2a00eb8b4c4be18692418a7ab038ef3d00a17aae56547efa4131eb2f73e5efb6bf685f6c9113528ff241e88af3ca67299d6f693e289f4ca5b32c28b1c8e932bb0bd0a2a21353607e3b4de94b3665bf4d18dac7c2ed3c85350aa9512c682636075430d360d9ad8e3bdb3a3fd7dab49395f74cbd43850984523f43dc1351e2ee6b1126807ef74d0feb7c6707730", 0xe8}, {&(0x7f0000000040)="74b53f7eac53f6de3244476be1f51ee034d46237879927c077c63e56314accc5434c364e9a8cfe800a2522fcf881704d82cead05a19e9290bfb385a9a1c8536a97afd6ba", 0x44}, {&(0x7f0000000140)="4a7fbd95b11dba1d3a179ef49239454c732f8872f80e1b8b55172f51cddec5c3e2a2b1098a91c59ad08019f8bd813303a370", 0x32}, {&(0x7f00000009c0)="82c997df122a159c8106a2fd0f6302fe892d94d00488c8837771dbdf1cc4a37f6ef96cd3d9ccde0387d3c44dd2f0a9632f0f78479fa95e0d2112de47b36382872380f899c462f28005b610fc66db37a70802ab503e72a6a79ea91f047863d709d7582c2e1ce378c0da2b79551fd4d8f5ee79e20bb35d53a5b064d1e0bc3125f8f9e7ca0233e0217e32a321d7", 0x8c}, {&(0x7f0000000a80)="2de230c89f111c1b964f9724f4066a4d774a9ae107c853bf792a56593316fe3fae144097068e6503eb3a63dfb814c01876b943763f5776e96e34aa387ed124653c3ce4962dcfd160b38853087d51e15d41bdb33cd7aa0f0ca6e99a1cb378b5757ffd7aa9eff49adc3ab604a7e18e5a7a2183d1c862c61ffd72badaae88228b19a26fe1e09b6b9271ed1ef597703c2f42f3a0ec6af3df63267147dd69913d1ff7fb", 0xa1}, {&(0x7f0000000b40)="a353c3f97293ec646a36cbf35f3ea52e49e700046a10cba72b75974059a854fb9a39d21aa645c3cf7a207f82e2ab97f67c5b561c8c0de698c3179615ce4736549724a2d942d20f53797a3d5d873194eb7be1a9f0362fa42f2c127ebd41868c127bbf3d0b43b469ab048b67ab54943e249a2dbe99496918ea749e9c7d14f9adfa564bd689cd14023a16e7bafbbd5a5d7af67b5a", 0x93}, {&(0x7f0000000200)="d2a802ad52814e94e8292752c07dd9e305a9f045419b96ac01280be20f4f0c077f313ac2994d3e36dc9370ab0c46943f115a937ab60ba7c9ca3fed3b", 0x3c}], 0x7}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001500)={0x0, 0x0}, 0x28) (async) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001500)={0x0, 0x0}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000440)={r1, 0x20, &(0x7f0000000400)={0x0, 0x0, 0x0, &(0x7f00000003c0)=""/39, 0x27}}, 0x10) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0x1b, &(0x7f0000000480)=@raw=[@btf_id={0x18, 0x4, 0x3, 0x0, 0x20003}, @tail_call, @ringbuf_query, @map_idx={0x18, 0x8}, @map_val={0x18, 0x3, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7f}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0xc9}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}], &(0x7f0000000580)='syzkaller\x00', 0x800, 0x1000, &(0x7f0000001540)=""/4096, 0x41000, 0x10, '\x00', 0x0, 0x1b, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000600)={0x4, 0xb, 0x1a0000, 0xf7ca}, 0x10, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000680)=[{0x5, 0x5, 0x2, 0xb}, {0x1, 0x2, 0x7, 0x3}], 0x10, 0x663}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r5, 0x58, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, r5, 0x100, '\x00', r6, 0xffffffffffffffff, 0x1, 0x1, 0x4}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000c80)={0x2, 0x4, 0x8, 0x1, 0x80, r4, 0x9, '\x00', r6, r1, 0x5, 0x5, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xe, 0x10, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xa2}, [@generic={0x88, 0x5, 0xd, 0x1, 0x9ea}, @initr0={0x18, 0x0, 0x0, 0x0, 0xc2, 0x0, 0x0, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x800}}, @exit]}, &(0x7f0000000240)='GPL\x00', 0x152, 0x7e, &(0x7f0000000280)=""/126, 0x41100, 0x40, '\x00', 0x0, @fallback=0x4, r1, 0x8, &(0x7f0000000300)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0xa, 0x4, 0xd}, 0x10, r2, r3, 0x7, 0x0, &(0x7f0000000780)=[{0x4, 0x2, 0x1, 0x1}, {0x4, 0x1, 0x5, 0xa}, {0x4, 0x4, 0x10}, {0x4, 0x4, 0x2, 0x8}, {0x1, 0x5, 0x6, 0x1}, {0x2, 0x4, 0xa, 0x5}, {0x3, 0x3, 0x6, 0x3}], 0x10, 0x5}, 0x94) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xe, 0x10, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xa2}, [@generic={0x88, 0x5, 0xd, 0x1, 0x9ea}, @initr0={0x18, 0x0, 0x0, 0x0, 0xc2, 0x0, 0x0, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x800}}, @exit]}, &(0x7f0000000240)='GPL\x00', 0x152, 0x7e, &(0x7f0000000280)=""/126, 0x41100, 0x40, '\x00', 0x0, @fallback=0x4, r1, 0x8, &(0x7f0000000300)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0xa, 0x4, 0xd}, 0x10, r2, r3, 0x7, 0x0, &(0x7f0000000780)=[{0x4, 0x2, 0x1, 0x1}, {0x4, 0x1, 0x5, 0xa}, {0x4, 0x4, 0x10}, {0x4, 0x4, 0x2, 0x8}, {0x1, 0x5, 0x6, 0x1}, {0x2, 0x4, 0xa, 0x5}, {0x3, 0x3, 0x6, 0x3}], 0x10, 0x5}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000002540)=ANY=[@ANYBLOB="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", @ANYRES8=r2, @ANYRESHEX=r7], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x5}, 0x8, 0x10, 0x0, 0x0, r2}, 0x94) sendmsg$inet(r0, &(0x7f0000000340)={0x0, 0x7ffcb000, &(0x7f0000000300)=[{&(0x7f00000000c0)='6', 0x18000}], 0x1f}, 0x0) 3.177566567s ago: executing program 3 (id=2576): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000230000009500040000000000"], &(0x7f0000000180)='GPL\x00', 0x2, 0xe9, &(0x7f0000000240)=""/233, 0x0, 0x11}, 0x80) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x1) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x26e1, 0x0) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000c00)=r2) close(r2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110c23003d) r3 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0x14, &(0x7f0000000000), 0x4) syz_open_procfs$namespace(0x0, 0x0) sendmsg$kcm(r3, &(0x7f00000002c0)={&(0x7f00000003c0)=@phonet={0x23, 0x0, 0x0, 0x38}, 0x80, 0x0}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x18108, 0x0, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x100c, 0x0, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, 0x0) write$cgroup_subtree(r2, &(0x7f0000000140)=ANY=[], 0xc) r4 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r4, 0x84, 0x14, &(0x7f0000000000), 0x4) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x3000c085) sendmsg$inet(r1, 0x0, 0x52cc) close(r1) recvmsg$unix(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000c80)=""/4096, 0x1000}, {&(0x7f0000000880)=""/198, 0xc6}, {&(0x7f0000000500)=""/110, 0x6e}, {0x0}, {&(0x7f0000000980)=""/92, 0x5c}, {0x0}, {&(0x7f0000000a80)=""/116, 0x74}, {&(0x7f0000000b00)=""/90, 0x5a}], 0x8, &(0x7f0000001c80)=[@rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x70}, 0x40002060) perf_event_open(&(0x7f0000001d00)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000007044f16c01b1fbfd000000000000008af65f0df9928941994cc8c173fac5688671085a86d143c59fed0e57feb97f422c51d8e63b4ed9e295df3ccd1a55752dfc2f32f14b6c8f0e7413c3e9caaad30dcb412d0f54623f388bb2c63d2b1f7d83cd0cc021867bb4aee9967a6ee83e1b18fd8beca7d7eddcd96634"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x80) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0, {0xa, 0x0, 0x3, @local}}}, 0x80, 0x0}, 0x0) r5 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r5, 0x84, 0x9, &(0x7f0000000380), 0x98) sendmsg$inet(r5, &(0x7f0000000800)={&(0x7f0000000100)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000040)}, 0x0) 3.132959412s ago: executing program 1 (id=2577): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000120081044e81f782db44b9040a11080211000000040000a118000200e000000000000e1208000f0100810401a80016ea1f000940032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 2.981135007s ago: executing program 0 (id=2578): bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1f00000004000000060000000700000080130000", @ANYRES32, @ANYBLOB="0000000000000000008000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000001"], 0x50) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, 0x0, 0x0) sendmsg$kcm(r0, 0x0, 0x24000008) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f0006", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b9040a", 0x11}], 0x1, 0x0, 0x0, 0x7400}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000580)=ANY=[], 0xfe33) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0xec, 0x4, 0x0, 0xff, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x6}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x440000, 0x0) ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, &(0x7f00000004c0)) syz_open_procfs$namespace(0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000700)={0xffffffff}, 0x8) sendmsg$inet(r4, &(0x7f0000000200)={0x0, 0x48, &(0x7f0000000340)=[{&(0x7f00000002c0)="5c00000014006b03000000d86e6c1d00028440fcffff564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) gettid() ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000080)={0x2, &(0x7f0000000840)=[{0xa4, 0x0, 0x0, 0xfffff03c}, {0x6}]}) r5 = socket$kcm(0xa, 0x1, 0x106) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r6, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) sendmsg$inet(r6, &(0x7f00000000c0)={&(0x7f00000005c0)={0x2, 0x4e24, @local}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000840)="9c", 0x1}], 0x1}, 0x10) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r5, &(0x7f0000000b00)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @dev, 0x5}, 0x80, 0x0}, 0xe07e872420dfef8a) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000180)}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)={0x3, 0x4, 0x4, 0xa, 0x0, r7, 0xe, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x2}, 0x50) 2.980941027s ago: executing program 1 (id=2579): socket$kcm(0x29, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f0000000280), 0x0}, 0x20) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8940, &(0x7f0000000080)) close(0xffffffffffffffff) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="0212970902000000e4a17c45c85686605e85da4a", 0x10}], 0x1}, 0x0) socket$kcm(0x28, 0x1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth0_vlan\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) close(0xffffffffffffffff) socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r1, 0x0, 0x40880) 2.692392635s ago: executing program 1 (id=2583): socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x104046, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0), 0x22100, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[@cred={{0x1c}}], 0x20}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x200}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 2.681029396s ago: executing program 4 (id=2584): perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0xaa, 0x0, 0x0, 0x0, 0x40, 0x0, 0x7, 0x2498, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x4008, 0x9, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x161f, 0x0, @perf_config_ext={0x1, 0x4}, 0x0, 0xc8, 0x0, 0x6, 0xbe20}, 0x0, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x8}, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080), 0x4) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_devices(r2, 0x0, 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000000)={'c', ' *:* ', 'w\x00'}, 0x8) r4 = openat$cgroup_devices(r2, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r4, &(0x7f00000000c0)={'c', ' *:* ', 'rwm\x00'}, 0xa) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000014c0)={&(0x7f0000001540)=@tipc=@name={0x1e, 0x2, 0x0, {{0x40, 0x1}}}, 0x80, 0x0}, 0x0) r5 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid\x00') ioctl$TUNSETNOCSUM(r5, 0xb702, 0x0) 2.449628489s ago: executing program 1 (id=2585): socket$kcm(0x28, 0x1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r4) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd6372ce22fdb911"], 0xfdef) 2.02906555s ago: executing program 4 (id=2587): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x10, 0x2, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x40, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) close(r0) unlink(&(0x7f0000000040)='./file0\x00') r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000", 0x20}], 0x1}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) 1.778046655s ago: executing program 2 (id=2589): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000230000009500040000000000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x11}, 0x94) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[], 0x0, 0x34}, 0x28) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x26e1, 0x0) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000c00)=r2) close(r2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110c23003d) syz_open_procfs$namespace(0x0, &(0x7f0000000780)='ns/pid_for_children\x00') sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000003c0)=@phonet={0x23, 0x0, 0x0, 0x38}, 0x80, 0x0}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x18108, 0x0, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x100c, 0x0, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, 0x0) write$cgroup_subtree(r2, &(0x7f0000000140)=ANY=[], 0xc) r3 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r3, 0x84, 0x14, &(0x7f0000000000), 0x4) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x3000c085) sendmsg$inet(r1, 0x0, 0x52cc) close(r1) recvmsg$unix(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000c80)=""/4096, 0x1000}, {&(0x7f0000000880)=""/198, 0xc6}, {&(0x7f0000000500)=""/110, 0x6e}, {&(0x7f00000006c0)=""/154, 0x9a}, {&(0x7f0000000980)=""/92, 0x5c}, {&(0x7f0000000a00)=""/117, 0x75}, {&(0x7f0000000a80)=""/116, 0x74}, {&(0x7f0000000b00)=""/90, 0x5a}], 0x8, &(0x7f0000001c80)=[@rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x70}, 0x40002060) perf_event_open(&(0x7f0000001d00)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000007044f16c01b1fbfd000000000000008af65f0df9928941994cc8c173fac5688671085a86d143c59fed0e57feb97f422c51d8e63b4ed9e295df3ccd1a55752dfc2f32f14b6c8f0e7413c3e9caaad30dcb412d0f54623f388bb2c63d2b1f7d83cd0cc021867bb4aee9967a6ee83e1b18fd8beca7d7eddcd96634"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x80) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0, {0xa, 0x0, 0x3, @local}}}, 0x80, 0x0}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000380), 0x98) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000100)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000040)}, 0x0) 1.701804292s ago: executing program 4 (id=2590): perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$kcm(r0, &(0x7f0000001580)={&(0x7f0000000080)=@in={0x2, 0x4e21, @remote}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000000)="daa89de1654039", 0x7}, {&(0x7f0000000380)="60926f5e2008bb01ce0ed8970a1dc7883fc76b21f16be59e3da4ed558fed4bc735bb7c200fb37022d6bd4d6950ebbe80145261ad4d70223481285214b142a46e86b777fad9cdd177702e25a400958fc655fe3d633841e25d29cdbfa6b410a8e41bd238ecfd950083bd7d97c2acccf5cce48d6e86fa442dbc5e82cf1705465112c6e42de4933a9ab6493c4040bb613370cbbc156aba91b832358366847d1250be2abec4eb0c3cc48ed3e974ac72d6a60296304b6a5d36619c1e1bcfe0cff571e00da6afd7143df07022edad0f3a22e731", 0xd0}, {&(0x7f0000000240)="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", 0x109}], 0x3}, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast1}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) close(r1) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000004700)=""/4090, 0xffa}, {&(0x7f0000000880)=""/4096, 0xfe7c}, {&(0x7f00000018c0)=""/4154, 0xfffffe5c}, {&(0x7f00000029c0)=""/154, 0x87}], 0x4}, 0x40000000) r4 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r6 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f00000005c0)=r6, 0x12) r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cgroup.kill\x00', 0x0, 0x0) r10 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="1c0000005e007f089e", 0x9}, {&(0x7f0000000140)="373e17aefc020107020010010000000a000000", 0x13}], 0x2}, 0x0) r11 = syz_clone(0x200, &(0x7f00000002c0)="4432b53491261949bc35cc1b039d8e7ffbe7c593cc88cce7c66ab159d9052d61fb9420b34da245a07901f7d2a99e6810d7fbe294785de6d9bd90e95c7c07a3a3f060a62fc6ff8e042add24d013e19821947c59b40af69511e2d0fbec94cc2369ecc64c8cb830b87f5ff8549280e3c4d9923282e228e3632c5a6f34dc1d1af275ad9e1e1eb2446703e0f6d7b9637706acf81632b97b25aee7d3480488abb37889b41513587042ceeda55fe272f690021bcbdad24541", 0xb5, &(0x7f0000000200), &(0x7f00000003c0), &(0x7f0000000400)="ae9167") sendmsg$unix(r5, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000002a80)="3a64c4128decd328d00ed5c020d25b07a17096d352879ae8078711ffbc3afd3695c1a2d4f4a8ca5a5bf27f2cb4b7b0c7bfe6291b88e58efeae846779dfe2e220cee9f13bd0b819679374a44165311ec05a2084d9122da3ca408eed9a0cf031a4ed1255de7a8fc3717c52f40808ee5168283d06fb469fc141c7b79858d8a74c69b04930505489f12efa585dddab6dda6d53f83f736004a504fccdfec8e9e123cb4e48d33815303918aefdc81269ebfdf913326ef026bee154b31f2f1ef30f11a6d7a8d5e5fe16af845570d740479c", 0xce}], 0x1, &(0x7f0000002b80)=[@rights={{0x14, 0x1, 0x1, [r2]}}, @cred={{0x1c, 0x1, 0x2, {r6, 0xee00}}}, @rights={{0x20, 0x1, 0x1, [r2, r9, r2, r2]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @rights={{0x14, 0x1, 0x1, [r3]}}, @rights={{0x20, 0x1, 0x1, [r2, r4, r3, r10]}}, @rights={{0x14, 0x1, 0x1, [r4]}}, @cred={{0x1c, 0x1, 0x2, {r11, 0xffffffffffffffff, 0xee01}}}], 0x108, 0x2404c801}, 0x80) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r9, &(0x7f0000000000)="3e998a2da8c10c734576466aba56a56b5226e304bcf0a0ae6fd7707aee4dfd0b2738e57be9b5b8f42fefcb3448aace08357815e131e63aaed1633375b28b5931747d636305dac0535214863935115aa6d3cd1ba626c3a0daa10b446cb321f7307f8723518f59d421774e725f43211e51991d97e9a2965a237d860931d6b0500ecbd13bc827d6cc8196317c66d4957fbfb6323161b68d21300e2a9a12b72a1e6fd24e4117295299d090a9303c8d6138c350f5", &(0x7f0000000180)=""/196}, 0x20) 1.699891253s ago: executing program 1 (id=2591): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000230000009500040000000000"], &(0x7f0000000180)='GPL\x00', 0x2, 0xe9, &(0x7f0000000240)=""/233, 0x0, 0x11}, 0x80) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x1) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x26e1, 0x0) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000c00)=r2) close(r2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110c23003d) r3 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0x14, &(0x7f0000000000), 0x4) syz_open_procfs$namespace(0x0, 0x0) sendmsg$kcm(r3, &(0x7f00000002c0)={&(0x7f00000003c0)=@phonet={0x23, 0x0, 0x0, 0x38}, 0x80, 0x0}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x18108, 0x0, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x100c, 0x0, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, 0x0) write$cgroup_subtree(r2, &(0x7f0000000140)=ANY=[], 0xc) r4 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r4, 0x84, 0x14, &(0x7f0000000000), 0x4) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x3000c085) sendmsg$inet(r1, 0x0, 0x52cc) close(r1) recvmsg$unix(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000c80)=""/4096, 0x1000}, {&(0x7f0000000880)=""/198, 0xc6}, {&(0x7f00000006c0)=""/154, 0x9a}, {&(0x7f0000000980)=""/92, 0x5c}, {0x0}, {&(0x7f0000000a80)=""/116, 0x74}, {&(0x7f0000000b00)=""/90, 0x5a}], 0x7, &(0x7f0000001c80)=[@rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x70}, 0x40002060) perf_event_open(&(0x7f0000001d00)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000007044f16c01b1fbfd000000000000008af65f0df9928941994cc8c173fac5688671085a86d143c59fed0e57feb97f422c51d8e63b4ed9e295df3ccd1a55752dfc2f32f14b6c8f0e7413c3e9caaad30dcb412d0f54623f388bb2c63d2b1f7d83cd0cc021867bb4aee9967a6ee83e1b18fd8beca7d7eddcd96634"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x80) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0, {0xa, 0x0, 0x3, @local}}}, 0x80, 0x0}, 0x0) r5 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r5, 0x84, 0x9, &(0x7f0000000380), 0x98) sendmsg$inet(r5, &(0x7f0000000800)={&(0x7f0000000100)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000040)}, 0x0) 1.547334268s ago: executing program 0 (id=2592): socket$kcm(0x29, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f0000000280), 0x0}, 0x20) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8940, &(0x7f0000000080)) close(0xffffffffffffffff) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="0212970902000000e4a17c45c85686605e85da4a", 0x10}], 0x1}, 0x0) socket$kcm(0x28, 0x1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth0_vlan\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) close(0xffffffffffffffff) socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r1, 0x0, 0x40880) 1.52798353s ago: executing program 2 (id=2593): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'batadv_slave_0\x00', 0x1}) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1a089, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x1, 0x3}, 0x2019, 0x0, 0x0, 0x9, 0xffb, 0x3, 0x7, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x3, 0xffffffffffffffff, 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000002000000000f0ffff"], 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2c, 0x3, 0x0) socket$kcm(0x2c, 0x3, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef434000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0) 1.379504114s ago: executing program 4 (id=2594): socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x104046, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0), 0x22100, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[@cred={{0x1c}}], 0x20}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x200}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 1.272328565s ago: executing program 2 (id=2595): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x6}, 0x0, 0x0, 0x0, 0x0, 0x46fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x109}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x1, 0x8, 0x0, 0x0, 0x0, 0xfeff, 0x4, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x85c, 0x0, @perf_config_ext={0x101}, 0x120ca, 0xeb, 0x0, 0x5, 0x59f4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 1.262931545s ago: executing program 0 (id=2596): perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0xaa, 0x0, 0x0, 0x0, 0x40, 0x0, 0x7, 0x2498, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x4008, 0x9, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x161f, 0x0, @perf_config_ext={0x1, 0x4}, 0x0, 0xc8, 0x0, 0x6, 0xbe20}, 0x0, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x8}, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080), 0x4) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_devices(r2, 0x0, 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000000)={'c', ' *:* ', 'w\x00'}, 0x8) r4 = openat$cgroup_devices(r2, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r4, &(0x7f00000000c0)={'c', ' *:* ', 'rwm\x00'}, 0xa) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001b80)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21ca0000cf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f94306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b262341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261e58fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f9ac2f7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe8799fe266e2ccac80fefe750151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa796ea7b156d19612297c63bb20e1e0469f7615f67a9218cbace38f5236821314f76302b98afa93044b83989339ca10e6ae30e70e17a82f03e915b8425e8e7a91614306d2ae0bc3550d856f2d7293672b5673d264fc886b0c8bdf436a0fcd21bf9da7bdca98e34cd6e59b0a7ce4ba1b466561aaa35448dff47bb1d7df23d467689a66"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000014c0)={&(0x7f0000001540)=@tipc=@name={0x1e, 0x2, 0x0, {{0x40, 0x1}}}, 0x80, 0x0}, 0x0) r5 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid\x00') ioctl$TUNSETNOCSUM(r5, 0xb702, 0x0) 1.091624262s ago: executing program 4 (id=2597): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, 0x0, 0xff0f000020000080) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8904, &(0x7f0000000080)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffd, 0x6, 0x5, 0xa, 0x8001, 0x0, 0x0, 0x0, 0x4713}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002340)={r5, 0x0, 0xa2, 0x60, &(0x7f0000002080)="399e3db9f02788f5cfa3856ff03be269e0a9bfa23792a10cfd3f74e5133e3fdcaba3104e04b0efc20cf2c29d6f85205bd9408acf605ea39f7a05c3bc5a29ab5eb6b45e671aaecbad266592f88d1da53b236ba98b47a48d0976c5a62f61f6585d02694f1530d296556c9dab33c8935b51a8d867806bc978c0add96f5d0e83d315c06313a525215e9c1a7eae62a841854ebe94faac9609832a288c3cb86e53d81520fe", &(0x7f0000002140)=""/96, 0x0, 0x0, 0x0, 0xa0, &(0x7f00000021c0), &(0x7f0000002280)="c625bf8797f021d98aeecb6b8e33671ec8fec42bb65ccc8317e717f7fc3c894b8ccdefa25bdcd787330e36d46666d9b3c0b9238e8e083b266894a35547baab96081a3e659ccff7f2b54be53f7364dbbe015feb50856d2e2694490100bb57d55230b34b127f9876481561044f335f48a48e8f0d2ea045fc77a00ff31aa4074add57eaaccd587fa766c0f298a8e6b55043c641fd2ab20dd5d0fe53a45769fd51fd", 0x3, 0x0, 0x4}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0x0, 0x0}, 0x10) sendmsg$inet(r2, &(0x7f0000002040)={&(0x7f00000007c0)={0x2, 0x4e20, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000a00)=[@ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}], 0x30}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00'}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f0000000f40)="34b2089652aee70769f6e83d532581966bf98b70e287ae6ab2eb0aad3c975aa42d05753f8a92835741e47284338820ee7428452282db304eba030c0f6cee80570a950871736b992d64ea4d44b907ef6308f8bb01f110c1965d26eba36f2e092e3da5e73b67d2a4c658fd2c14f630344575378705935b2ca9095a8f56ed8d3a71284563e271d78f98bad5347b4b13d297be", &(0x7f0000000180)="ce85e7a790045b24e2befb0577946ad14cdf06f9a5e2c9eab444df5abe82274aa9dc7baef450152883bd270142f402d26fdad4094c7aa85362fb543cee69", 0x800}, 0x38) r6 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}, 0x1, 0x0, 0x0, 0x5, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x9) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001340)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f949c479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a867e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c27578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f826"], &(0x7f0000000000)='GPL\x00', 0x5, 0xcf, &(0x7f0000001000)=""/207}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d649379071c33390e418ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fcb4e0b6eab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afcc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab2e4b380a00d72bc0480f949c479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a662d8bc9c89c9120072a5d00dcdd8595356c9bbcd2b6e558d17879570c8ad943e392955f4f979ea13201bafe4f0f6ea508000000a0c548552b571bed5647323c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151fcda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ecec37e83efceefd7ca2533659edc8bef9cb85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d350000000000000000e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e5a61561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a294650"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="b9ff0b078059268cb89e14f088a82de0ffff200000000067000aac14140ce000000d49e832f0", 0x0, 0x4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x100c, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 969.941614ms ago: executing program 2 (id=2598): perf_event_open(&(0x7f0000000d00)={0x2, 0xfffffffffffffd4a, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbd0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)="db", 0x1}], 0x1}, 0x41) recvmsg(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) sendmsg$inet(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="04", 0x1}], 0x1}, 0x41) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x61) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x18041, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2e0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) write$cgroup_subtree(r5, 0x0, 0xfe33) openat$tun(0xffffffffffffff9c, 0x0, 0x40841, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000500000095"], 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='consume_skb\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='consume_skb\x00', r7}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="5c00000015006b030022", 0xa}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$tipc(r8, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000004340)}, 0x801) ioctl$TUNSETCARRIER(r3, 0x400454e2, &(0x7f0000000080)=0x1) 969.516645ms ago: executing program 0 (id=2599): socketpair(0x1, 0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, 0x0, 0x5}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x4, 0x10, 0x3}, {0x10000002, 0x4, 0xf, 0x6}], 0x10, 0x4000000}, 0x94) r1 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x64, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000000440)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000480)="be", 0x1a000}], 0x1}, 0x0) 829.600048ms ago: executing program 2 (id=2600): socket$kcm(0x28, 0x1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r4) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd6372ce22fdb911"], 0xfdef) 159.518814ms ago: executing program 2 (id=2601): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x10, 0x2, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x40, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) close(r0) unlink(&(0x7f0000000040)='./file0\x00') r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000", 0x20}], 0x1}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) 159.117234ms ago: executing program 4 (id=2602): bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1f00000004000000060000000700000080130000", @ANYRES32, @ANYBLOB="0000000000000000008000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000001"], 0x50) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, 0x0, 0x0) sendmsg$kcm(r0, 0x0, 0x24000008) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f0006", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b9040a", 0x11}], 0x1, 0x0, 0x0, 0x7400}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000580)=ANY=[], 0xfe33) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0xec, 0x4, 0x0, 0xff, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x6}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x440000, 0x0) ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, &(0x7f00000004c0)) syz_open_procfs$namespace(0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000700)={0xffffffff}, 0x8) sendmsg$inet(r4, &(0x7f0000000200)={0x0, 0x48, &(0x7f0000000340)=[{&(0x7f00000002c0)="5c00000014006b03000000d86e6c1d00028440fcffff564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) gettid() ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000080)={0x2, &(0x7f0000000840)=[{0xa4, 0x0, 0x0, 0xfffff03c}, {0x6}]}) r5 = socket$kcm(0xa, 0x1, 0x106) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r6, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) sendmsg$inet(r6, &(0x7f00000000c0)={&(0x7f00000005c0)={0x2, 0x4e24, @local}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000840)="9c", 0x1}], 0x1}, 0x10) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r5, &(0x7f0000000b00)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @dev, 0x5}, 0x80, 0x0}, 0xe07e872420dfef8a) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000180)}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)={0x3, 0x4, 0x4, 0xa, 0x0, r7, 0xe, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x2}, 0x50) 151.001615ms ago: executing program 1 (id=2610): socket$kcm(0x28, 0x1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r4) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd6372ce22fdb911"], 0xfdef) 0s ago: executing program 0 (id=2603): socketpair(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x5, @perf_config_ext={0xffffffffffffffff, 0x8}, 0x9000, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000c63f1de100000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r2}, 0x10) syz_clone(0x160480, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) r4 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r4, 0x84, 0x76, &(0x7f0000000000)=r6, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x29, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x4, 0x4, 0x10, 0x3}, {0x10000002, 0x4, 0xf, 0x6}], 0x10, 0x4000000}, 0x94) r7 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r9) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008103e00f80ecdb4cb9f207c804a00d000000880802fb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x2000000) recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r7, 0x84, 0x64, &(0x7f0000000000)=r11, 0x10) sendmsg$inet(r7, &(0x7f0000000440)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000480)="be", 0x1}], 0x1}, 0x0) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40400, 0x0) ioctl$TUNSETQUEUE(r12, 0x400454d9, &(0x7f0000000180)={'ip_vti0\x00', 0x800}) kernel console output (not intermixed with test programs): device syzkaller0 entered promiscuous mode [ 185.926346][ T7604] sctp: [Deprecated]: syz.0.1215 (pid 7604) Use of int in max_burst socket option deprecated. [ 185.926346][ T7604] Use struct sctp_assoc_value instead [ 185.984076][ T7601] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1214'. [ 186.235774][ T7606] netlink: 'syz.3.1212': attribute type 10 has an invalid length. [ 186.287575][ T7606] team0: Port device wlan1 added [ 186.584516][ T7625] sctp: [Deprecated]: syz.2.1223 (pid 7625) Use of int in max_burst socket option deprecated. [ 186.584516][ T7625] Use struct sctp_assoc_value instead [ 186.623988][ T7628] netlink: 199816 bytes leftover after parsing attributes in process `syz.4.1224'. [ 187.601075][ T7667] netlink: 199816 bytes leftover after parsing attributes in process `syz.3.1238'. [ 187.806226][ T7676] FAULT_INJECTION: forcing a failure. [ 187.806226][ T7676] name failslab, interval 1, probability 0, space 0, times 0 [ 187.819691][ T7676] CPU: 0 PID: 7676 Comm: syz.1.1242 Not tainted syzkaller #0 [ 187.827112][ T7676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 187.837215][ T7676] Call Trace: [ 187.840528][ T7676] [ 187.843487][ T7676] dump_stack_lvl+0x168/0x230 [ 187.848252][ T7676] ? show_regs_print_info+0x20/0x20 [ 187.853479][ T7676] ? load_image+0x3b0/0x3b0 [ 187.858026][ T7676] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 187.864038][ T7676] ? lock_chain_count+0x20/0x20 [ 187.868911][ T7676] ? memset+0x1e/0x40 [ 187.872934][ T7676] should_fail+0x38c/0x4c0 [ 187.877388][ T7676] should_failslab+0x5/0x20 [ 187.881911][ T7676] slab_pre_alloc_hook+0x51/0xc0 [ 187.886874][ T7676] kmem_cache_alloc_trace+0x47/0x2a0 [ 187.892185][ T7676] ? once_disable_jump+0x52/0x1a0 [ 187.897251][ T7676] once_disable_jump+0x52/0x1a0 [ 187.902133][ T7676] inet6_ehashfn+0x4aa/0x4b0 [ 187.906763][ T7676] ? __tcp_v6_send_check+0x330/0x330 [ 187.912076][ T7676] ? rcu_lock_acquire+0x30/0x30 [ 187.916948][ T7676] inet_ehash_insert+0x1cf/0x1070 [ 187.921999][ T7676] ? slab_post_alloc_hook+0x2aa/0x380 [ 187.927401][ T7676] inet_ehash_nolisten+0x2f/0x160 [ 187.932452][ T7676] __inet_hash_connect+0xc15/0xed0 [ 187.937606][ T7676] ? inet_unhash+0x540/0x540 [ 187.942224][ T7676] ? inet6_hash_connect+0x77/0xd0 [ 187.947288][ T7676] tcp_v6_connect+0xeae/0x1920 [ 187.952092][ T7676] ? tcp_v6_pre_connect+0xf0/0xf0 [ 187.957141][ T7676] ? __lock_acquire+0x12d9/0x7c60 [ 187.962202][ T7676] ? tcp_sendmsg_fastopen+0x1d5/0x600 [ 187.967602][ T7676] ? tcp_sendmsg_locked+0x3097/0x3590 [ 187.972995][ T7676] ? tcp_sendmsg+0x2b/0x40 [ 187.977437][ T7676] ? ____sys_sendmsg+0x5a2/0x8c0 [ 187.982417][ T7676] ? ___sys_sendmsg+0x1f0/0x260 [ 187.987286][ T7676] ? __se_sys_sendmsg+0x190/0x250 [ 187.992333][ T7676] ? do_syscall_64+0x4c/0xa0 [ 187.996940][ T7676] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 188.003050][ T7676] __inet_stream_connect+0x293/0xdf0 [ 188.008369][ T7676] ? inet_dgram_connect+0x360/0x360 [ 188.013609][ T7676] tcp_sendmsg_fastopen+0x38f/0x600 [ 188.018841][ T7676] tcp_sendmsg_locked+0x3097/0x3590 [ 188.024065][ T7676] ? aa_sk_perm+0x8f0/0x8f0 [ 188.028611][ T7676] ? lock_chain_count+0x20/0x20 [ 188.033489][ T7676] ? mark_lock+0x94/0x320 [ 188.037851][ T7676] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 188.043861][ T7676] ? lock_chain_count+0x20/0x20 [ 188.048736][ T7676] ? lockdep_hardirqs_on_prepare+0x760/0x760 [ 188.054743][ T7676] ? tcp_free_fastopen_req+0x70/0x70 [ 188.060055][ T7676] ? lock_sock_nested+0x68/0x100 [ 188.065016][ T7676] ? inet6_compat_ioctl+0x380/0x380 [ 188.070249][ T7676] ? inet6_compat_ioctl+0x380/0x380 [ 188.075469][ T7676] tcp_sendmsg+0x2b/0x40 [ 188.079736][ T7676] ____sys_sendmsg+0x5a2/0x8c0 [ 188.084531][ T7676] ? memset+0x1e/0x40 [ 188.088533][ T7676] ? __sys_sendmsg_sock+0x30/0x30 [ 188.093590][ T7676] ? import_iovec+0x6f/0xa0 [ 188.098123][ T7676] ___sys_sendmsg+0x1f0/0x260 [ 188.102838][ T7676] ? __sys_sendmsg+0x250/0x250 [ 188.107638][ T7676] ? vfs_write+0x84d/0xd00 [ 188.112098][ T7676] ? __fdget+0x18b/0x210 [ 188.116366][ T7676] __se_sys_sendmsg+0x190/0x250 [ 188.121255][ T7676] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 188.127477][ T7676] ? __x64_sys_sendmsg+0x80/0x80 [ 188.132449][ T7676] ? syscall_enter_from_user_mode+0x2a/0x70 [ 188.138371][ T7676] do_syscall_64+0x4c/0xa0 [ 188.142815][ T7676] ? clear_bhb_loop+0x30/0x80 [ 188.147510][ T7676] ? clear_bhb_loop+0x30/0x80 [ 188.152212][ T7676] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 188.158133][ T7676] RIP: 0033:0x7fe8b05c8ec9 [ 188.162569][ T7676] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 188.182209][ T7676] RSP: 002b:00007fe8ae830038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 188.190656][ T7676] RAX: ffffffffffffffda RBX: 00007fe8b081ffa0 RCX: 00007fe8b05c8ec9 [ 188.198651][ T7676] RDX: 000000002600c055 RSI: 00002000000000c0 RDI: 0000000000000008 [ 188.206639][ T7676] RBP: 00007fe8ae830090 R08: 0000000000000000 R09: 0000000000000000 [ 188.214628][ T7676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 188.222619][ T7676] R13: 00007fe8b0820038 R14: 00007fe8b081ffa0 R15: 00007ffebd9350f8 [ 188.230633][ T7676] [ 188.344786][ T7685] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 188.352787][ T7685] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 188.570124][ T7698] sctp: [Deprecated]: syz.2.1250 (pid 7698) Use of int in max_burst socket option deprecated. [ 188.570124][ T7698] Use struct sctp_assoc_value instead [ 188.608534][ T7702] netlink: 199816 bytes leftover after parsing attributes in process `syz.0.1253'. [ 188.626819][ T7703] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x31 [ 189.593913][ T7738] netlink: 199816 bytes leftover after parsing attributes in process `syz.3.1265'. [ 189.960892][ T7747] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x31 [ 190.027789][ T7750] sctp: [Deprecated]: syz.4.1270 (pid 7750) Use of int in max_burst socket option deprecated. [ 190.027789][ T7750] Use struct sctp_assoc_value instead [ 190.202940][ T7758] netlink: 'syz.2.1273': attribute type 4 has an invalid length. [ 190.248832][ T7758] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1273'. [ 190.320367][ T7768] sctp: [Deprecated]: syz.1.1274 (pid 7768) Use of int in max_burst socket option deprecated. [ 190.320367][ T7768] Use struct sctp_assoc_value instead [ 190.645656][ T7758] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 191.219188][ T4173] Bluetooth: hci4: command 0x0406 tx timeout [ 191.229718][ T4297] Bluetooth: hci3: command 0x0406 tx timeout [ 191.249279][ T4297] Bluetooth: hci1: command 0x0406 tx timeout [ 191.255383][ T4297] Bluetooth: hci2: command 0x0406 tx timeout [ 191.314661][ T4297] Bluetooth: hci0: command 0x0406 tx timeout [ 192.132299][ T7834] sctp: [Deprecated]: syz.4.1297 (pid 7834) Use of int in max_burst socket option deprecated. [ 192.132299][ T7834] Use struct sctp_assoc_value instead [ 192.882401][ T7859] netlink: 199816 bytes leftover after parsing attributes in process `syz.0.1307'. [ 192.962099][ T7860] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1309'. [ 193.039194][ T7865] netlink: 'syz.1.1309': attribute type 7 has an invalid length. [ 193.046987][ T7865] netlink: 'syz.1.1309': attribute type 6 has an invalid length. [ 193.148494][ T7869] sctp: [Deprecated]: syz.4.1313 (pid 7869) Use of int in max_burst socket option deprecated. [ 193.148494][ T7869] Use struct sctp_assoc_value instead [ 193.176378][ T7870] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1309'. [ 193.604810][ T7890] netlink: 199816 bytes leftover after parsing attributes in process `syz.2.1322'. [ 193.714578][ T7894] netlink: 'syz.4.1324': attribute type 39 has an invalid length. [ 193.761441][ T7896] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x31 [ 193.803816][ T7901] netlink: 'syz.1.1326': attribute type 21 has an invalid length. [ 193.833765][ T7901] netlink: 14541 bytes leftover after parsing attributes in process `syz.1.1326'. [ 194.027969][ T7914] sctp: [Deprecated]: syz.3.1330 (pid 7914) Use of int in max_burst socket option deprecated. [ 194.027969][ T7914] Use struct sctp_assoc_value instead [ 194.131167][ T7911] netlink: 1042 bytes leftover after parsing attributes in process `syz.2.1331'. [ 194.156442][ T7917] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.167905][ T7917] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.264526][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.271005][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.599264][ T7932] netlink: 199816 bytes leftover after parsing attributes in process `syz.3.1337'. [ 194.803198][ T7944] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x31 [ 195.168399][ T7958] sctp: [Deprecated]: syz.2.1348 (pid 7958) Use of int in max_burst socket option deprecated. [ 195.168399][ T7958] Use struct sctp_assoc_value instead [ 195.201214][ T7960] sctp: [Deprecated]: syz.0.1349 (pid 7960) Use of int in max_burst socket option deprecated. [ 195.201214][ T7960] Use struct sctp_assoc_value instead [ 195.298099][ T7968] netlink: 199816 bytes leftover after parsing attributes in process `syz.3.1352'. [ 195.650733][ T7982] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x31 [ 195.778964][ T7990] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x31 [ 196.156049][ T8002] netlink: 199816 bytes leftover after parsing attributes in process `syz.2.1365'. [ 196.353062][ T8014] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1370'. [ 196.567504][ T8023] sctp: [Deprecated]: syz.3.1375 (pid 8023) Use of int in max_burst socket option deprecated. [ 196.567504][ T8023] Use struct sctp_assoc_value instead [ 197.316380][ T8029] netlink: 'syz.2.1374': attribute type 10 has an invalid length. [ 197.393144][ T8029] team0: Device veth1_vlan failed to register rx_handler [ 197.458301][ T8031] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.465836][ T8031] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.784754][ T8051] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x31 [ 197.930802][ T8055] sctp: [Deprecated]: syz.1.1388 (pid 8055) Use of int in max_burst socket option deprecated. [ 197.930802][ T8055] Use struct sctp_assoc_value instead [ 198.184410][ T8074] FAULT_INJECTION: forcing a failure. [ 198.184410][ T8074] name failslab, interval 1, probability 0, space 0, times 0 [ 198.221217][ T8077] sctp: [Deprecated]: syz.2.1397 (pid 8077) Use of int in max_burst socket option deprecated. [ 198.221217][ T8077] Use struct sctp_assoc_value instead [ 198.245348][ T8074] CPU: 1 PID: 8074 Comm: syz.0.1394 Not tainted syzkaller #0 [ 198.252810][ T8074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 198.262902][ T8074] Call Trace: [ 198.266203][ T8074] [ 198.269154][ T8074] dump_stack_lvl+0x168/0x230 [ 198.273873][ T8074] ? show_regs_print_info+0x20/0x20 [ 198.278516][ T8079] __nla_validate_parse: 1 callbacks suppressed [ 198.278553][ T8079] netlink: 199816 bytes leftover after parsing attributes in process `syz.3.1396'. [ 198.279113][ T8074] ? load_image+0x3b0/0x3b0 [ 198.279144][ T8074] ? __might_sleep+0xf0/0xf0 [ 198.279165][ T8074] ? __lock_acquire+0x7c60/0x7c60 [ 198.279191][ T8074] ? __lock_acquire+0x7c60/0x7c60 [ 198.279218][ T8074] should_fail+0x38c/0x4c0 [ 198.279248][ T8074] should_failslab+0x5/0x20 [ 198.279267][ T8074] slab_pre_alloc_hook+0x51/0xc0 [ 198.279291][ T8074] kmem_cache_alloc_trace+0x47/0x2a0 [ 198.279310][ T8074] ? sctp_association_new+0x86/0x24a0 [ 198.279341][ T8074] sctp_association_new+0x86/0x24a0 [ 198.279365][ T8074] ? apparmor_capable+0x12c/0x190 [ 198.348764][ T8074] ? bpf_lsm_capable+0x5/0x10 [ 198.353816][ T8074] ? security_capable+0x85/0xb0 [ 198.358812][ T8074] sctp_connect_new_asoc+0x2bb/0x690 [ 198.364142][ T8074] ? __sctp_connect+0xd20/0xd20 [ 198.369127][ T8074] ? __local_bh_enable_ip+0x12a/0x1b0 [ 198.374656][ T8074] ? _local_bh_enable+0xa0/0xa0 [ 198.379542][ T8074] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 198.385108][ T8074] ? security_sctp_bind_connect+0x85/0xb0 [ 198.390848][ T8074] sctp_sendmsg+0x15e0/0x2950 [ 198.395550][ T8074] ? aa_sk_perm+0x7b4/0x8f0 [ 198.400067][ T8074] ? sctp_getsockopt+0x8a0/0x8a0 [ 198.405018][ T8074] ? aa_af_perm+0x2b0/0x2b0 [ 198.409532][ T8074] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 198.416132][ T8074] ? sock_rps_record_flow+0x17/0x3b0 [ 198.421480][ T8074] ? inet_send_prepare+0x260/0x260 [ 198.426623][ T8074] ? inet_sendmsg+0x78/0x2f0 [ 198.431228][ T8074] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 198.436532][ T8074] ? security_socket_sendmsg+0x7c/0xa0 [ 198.442359][ T8074] ? inet_send_prepare+0x260/0x260 [ 198.447580][ T8074] ____sys_sendmsg+0x5a2/0x8c0 [ 198.452391][ T8074] ? memset+0x1e/0x40 [ 198.456389][ T8074] ? __sys_sendmsg_sock+0x30/0x30 [ 198.461431][ T8074] ? import_iovec+0x6f/0xa0 [ 198.466035][ T8074] ___sys_sendmsg+0x1f0/0x260 [ 198.470725][ T8074] ? __sys_sendmsg+0x250/0x250 [ 198.475510][ T8074] ? vfs_write+0x84d/0xd00 [ 198.479953][ T8074] ? __fdget+0x18b/0x210 [ 198.484206][ T8074] __se_sys_sendmsg+0x190/0x250 [ 198.489076][ T8074] ? __x64_sys_sendmsg+0x80/0x80 [ 198.494026][ T8074] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 198.500028][ T8074] ? lockdep_hardirqs_on+0x94/0x140 [ 198.505240][ T8074] do_syscall_64+0x4c/0xa0 [ 198.509674][ T8074] ? clear_bhb_loop+0x30/0x80 [ 198.514355][ T8074] ? clear_bhb_loop+0x30/0x80 [ 198.519038][ T8074] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 198.524936][ T8074] RIP: 0033:0x7f40bb3feec9 [ 198.529359][ T8074] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 198.549106][ T8074] RSP: 002b:00007f40b9666038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 198.557543][ T8074] RAX: ffffffffffffffda RBX: 00007f40bb655fa0 RCX: 00007f40bb3feec9 [ 198.565536][ T8074] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000003 [ 198.573515][ T8074] RBP: 00007f40b9666090 R08: 0000000000000000 R09: 0000000000000000 [ 198.581494][ T8074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 198.589502][ T8074] R13: 00007f40bb656038 R14: 00007f40bb655fa0 R15: 00007ffc7ec2eda8 [ 198.597502][ T8074] [ 198.643537][ T8080] sctp: [Deprecated]: syz.4.1395 (pid 8080) Use of int in max_burst socket option deprecated. [ 198.643537][ T8080] Use struct sctp_assoc_value instead [ 198.693710][ T8084] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 199.279873][ T8110] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x31 [ 199.316482][ T8112] sctp: [Deprecated]: syz.1.1411 (pid 8112) Use of int in max_burst socket option deprecated. [ 199.316482][ T8112] Use struct sctp_assoc_value instead [ 199.779940][ T8129] netlink: 'syz.0.1416': attribute type 29 has an invalid length. [ 199.797933][ T8129] netlink: 'syz.0.1416': attribute type 29 has an invalid length. [ 199.981167][ T8136] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1418'. [ 199.994044][ T8136] device bond_slave_0 entered promiscuous mode [ 200.000861][ T8136] device bond_slave_1 entered promiscuous mode [ 200.344132][ T8147] sctp: [Deprecated]: syz.2.1422 (pid 8147) Use of int in max_burst socket option deprecated. [ 200.344132][ T8147] Use struct sctp_assoc_value instead [ 200.408164][ T8149] netlink: 199816 bytes leftover after parsing attributes in process `syz.4.1424'. [ 200.662835][ T8157] sctp: [Deprecated]: syz.4.1428 (pid 8157) Use of int in max_burst socket option deprecated. [ 200.662835][ T8157] Use struct sctp_assoc_value instead [ 203.098489][ T8176] netlink: 'syz.4.1432': attribute type 12 has an invalid length. [ 203.108026][ T8176] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1432'. [ 203.247546][ T8178] netlink: 199556 bytes leftover after parsing attributes in process `syz.2.1436'. [ 203.280478][ T8182] netlink: 'syz.4.1437': attribute type 2 has an invalid length. [ 203.333851][ T8182] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1437'. [ 203.368241][ T8185] netlink: 199816 bytes leftover after parsing attributes in process `syz.3.1438'. [ 203.550115][ T8188] netlink: 'syz.0.1439': attribute type 7 has an invalid length. [ 203.593132][ T8193] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x31 [ 203.606898][ T8188] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1439'. [ 203.647302][ T8194] net veth1_virt_wifi : renamed from virt_wifi0 [ 204.447929][ T8220] netlink: 199816 bytes leftover after parsing attributes in process `syz.1.1451'. [ 204.687094][ T8229] netlink: 'syz.0.1454': attribute type 2 has an invalid length. [ 204.797901][ T8229] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1454'. [ 204.934148][ T8231] netlink: 'syz.1.1456': attribute type 7 has an invalid length. [ 204.999075][ T8231] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1456'. [ 205.229893][ T8248] net veth1_virt_wifi : renamed from virt_wifi0 [ 205.647593][ T8258] sctp: [Deprecated]: syz.1.1463 (pid 8258) Use of int in max_burst socket option deprecated. [ 205.647593][ T8258] Use struct sctp_assoc_value instead [ 205.704872][ T8251] netlink: 'syz.0.1462': attribute type 4 has an invalid length. [ 205.936483][ T8262] netlink: 199816 bytes leftover after parsing attributes in process `syz.3.1467'. [ 206.587703][ T8283] netlink: 'syz.4.1475': attribute type 7 has an invalid length. [ 206.636334][ T8285] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x31 [ 206.650851][ T8283] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1475'. [ 206.875332][ T8291] netlink: 199816 bytes leftover after parsing attributes in process `syz.2.1480'. [ 206.984456][ T7026] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 207.599854][ T8317] sctp: [Deprecated]: syz.1.1489 (pid 8317) Use of int in max_burst socket option deprecated. [ 207.599854][ T8317] Use struct sctp_assoc_value instead [ 207.814395][ T8326] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.1493'. [ 207.910007][ T8331] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x31 [ 208.558555][ T8359] netlink: 'syz.3.1506': attribute type 10 has an invalid length. [ 208.673277][ T8359] team0: Device hsr_slave_0 failed to register rx_handler [ 208.961343][ T8372] __nla_validate_parse: 2 callbacks suppressed [ 208.961378][ T8372] netlink: 199556 bytes leftover after parsing attributes in process `syz.1.1513'. [ 209.381788][ T8361] delete_channel: no stack [ 209.393507][ T8396] sctp: [Deprecated]: syz.4.1518 (pid 8396) Use of int in max_burst socket option deprecated. [ 209.393507][ T8396] Use struct sctp_assoc_value instead [ 209.428221][ T8398] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x31 [ 209.592179][ T8403] netlink: 'syz.2.1522': attribute type 1 has an invalid length. [ 209.681690][ T8403] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.1522'. [ 209.983855][ T8412] netlink: 'syz.2.1524': attribute type 10 has an invalid length. [ 210.097084][ T8412] team0: Device hsr_slave_0 failed to register rx_handler [ 210.567090][ T8439] netlink: 197276 bytes leftover after parsing attributes in process `syz.3.1534'. [ 210.576072][ T8430] device syzkaller0 entered promiscuous mode [ 210.729459][ T8431] netlink: 'syz.4.1532': attribute type 39 has an invalid length. [ 210.812486][ T8440] netlink: 'syz.0.1535': attribute type 11 has an invalid length. [ 210.829282][ T8445] sctp: [Deprecated]: syz.3.1536 (pid 8445) Use of int in max_burst socket option deprecated. [ 210.829282][ T8445] Use struct sctp_assoc_value instead [ 210.852564][ T8440] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1535'. [ 210.968027][ T8441] netlink: 'syz.0.1535': attribute type 10 has an invalid length. [ 211.012430][ T8441] device hsr0 entered promiscuous mode [ 211.198246][ T8441] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 211.212587][ T8441] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 211.270459][ T8441] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 211.283635][ T8441] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 211.532410][ T8449] sctp: [Deprecated]: syz.2.1538 (pid 8449) Use of int in max_burst socket option deprecated. [ 211.532410][ T8449] Use struct sctp_assoc_value instead [ 211.723321][ T8456] sctp: [Deprecated]: syz.0.1541 (pid 8456) Use of int in max_burst socket option deprecated. [ 211.723321][ T8456] Use struct sctp_assoc_value instead [ 211.786026][ T8465] netlink: 'syz.4.1543': attribute type 3 has an invalid length. [ 211.799248][ T8466] netlink: 'syz.4.1543': attribute type 3 has an invalid length. [ 211.855746][ T8466] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1543'. [ 211.856760][ T8465] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1543'. [ 211.970833][ T8471] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1546'. [ 212.121986][ T8480] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x31 [ 212.127214][ T8482] netlink: 'syz.4.1548': attribute type 11 has an invalid length. [ 212.204479][ T8482] netlink: 140 bytes leftover after parsing attributes in process `syz.4.1548'. [ 212.270576][ T8482] netlink: 'syz.4.1548': attribute type 10 has an invalid length. [ 212.334936][ T8482] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 212.364781][ T8482] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 212.376570][ T8482] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 212.399731][ T8482] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 212.536050][ T8490] sctp: [Deprecated]: syz.3.1550 (pid 8490) Use of int in max_burst socket option deprecated. [ 212.536050][ T8490] Use struct sctp_assoc_value instead [ 212.673825][ T8496] FAULT_INJECTION: forcing a failure. [ 212.673825][ T8496] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 212.688013][ T8496] CPU: 0 PID: 8496 Comm: syz.4.1553 Not tainted syzkaller #0 [ 212.695650][ T8496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 212.705741][ T8496] Call Trace: [ 212.709052][ T8496] [ 212.712007][ T8496] dump_stack_lvl+0x168/0x230 [ 212.716734][ T8496] ? show_regs_print_info+0x20/0x20 [ 212.722056][ T8496] ? load_image+0x3b0/0x3b0 [ 212.726600][ T8496] ? __lock_acquire+0x7c60/0x7c60 [ 212.731649][ T8496] should_fail+0x38c/0x4c0 [ 212.736299][ T8496] _copy_from_user+0x2e/0x170 [ 212.740989][ T8496] iovec_from_user+0x142/0x370 [ 212.745773][ T8496] __import_iovec+0x70/0x490 [ 212.750389][ T8496] import_iovec+0x6f/0xa0 [ 212.755034][ T8496] ___sys_sendmsg+0x1b9/0x260 [ 212.759750][ T8496] ? __sys_sendmsg+0x250/0x250 [ 212.764547][ T8496] ? __fdget+0x18b/0x210 [ 212.768799][ T8496] __se_sys_sendmsg+0x190/0x250 [ 212.773759][ T8496] ? __x64_sys_sendmsg+0x80/0x80 [ 212.778714][ T8496] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 212.784814][ T8496] ? lockdep_hardirqs_on+0x94/0x140 [ 212.790030][ T8496] do_syscall_64+0x4c/0xa0 [ 212.794481][ T8496] ? clear_bhb_loop+0x30/0x80 [ 212.799166][ T8496] ? clear_bhb_loop+0x30/0x80 [ 212.803886][ T8496] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 212.809788][ T8496] RIP: 0033:0x7fbc203c9ec9 [ 212.814242][ T8496] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 212.834011][ T8496] RSP: 002b:00007fbc1e631038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 212.842468][ T8496] RAX: ffffffffffffffda RBX: 00007fbc20620fa0 RCX: 00007fbc203c9ec9 [ 212.850462][ T8496] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000004 [ 212.858450][ T8496] RBP: 00007fbc1e631090 R08: 0000000000000000 R09: 0000000000000000 [ 212.866442][ T8496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 212.874417][ T8496] R13: 00007fbc20621038 R14: 00007fbc20620fa0 R15: 00007ffe05ee4828 [ 212.882418][ T8496] [ 213.257541][ T8509] sctp: [Deprecated]: syz.1.1559 (pid 8509) Use of int in max_burst socket option deprecated. [ 213.257541][ T8509] Use struct sctp_assoc_value instead [ 213.462986][ T8518] sctp: [Deprecated]: syz.4.1563 (pid 8518) Use of int in max_burst socket option deprecated. [ 213.462986][ T8518] Use struct sctp_assoc_value instead [ 213.501966][ T8521] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1564'. [ 213.566143][ T8521] device hsr0 entered promiscuous mode [ 213.643637][ T8527] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x31 [ 213.673518][ T8521] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 213.694809][ T8521] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 213.787115][ T8521] bond0: (slave hsr0): Error -95 calling set_mac_address [ 213.820939][ T8531] sctp: [Deprecated]: syz.3.1568 (pid 8531) Use of int in max_burst socket option deprecated. [ 213.820939][ T8531] Use struct sctp_assoc_value instead [ 214.018021][ T8539] FAULT_INJECTION: forcing a failure. [ 214.018021][ T8539] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 214.044865][ T8539] CPU: 1 PID: 8539 Comm: syz.3.1572 Not tainted syzkaller #0 [ 214.052335][ T8539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 214.062554][ T8539] Call Trace: [ 214.065853][ T8539] [ 214.068927][ T8539] dump_stack_lvl+0x168/0x230 [ 214.073639][ T8539] ? show_regs_print_info+0x20/0x20 [ 214.078850][ T8539] ? load_image+0x3b0/0x3b0 [ 214.083372][ T8539] ? __lock_acquire+0x7c60/0x7c60 [ 214.088429][ T8539] should_fail+0x38c/0x4c0 [ 214.092872][ T8539] _copy_from_user+0x2e/0x170 [ 214.097746][ T8539] ___sys_recvmsg+0x129/0x4f0 [ 214.102471][ T8539] ? __sys_recvmsg+0x250/0x250 [ 214.107353][ T8539] ? __lock_acquire+0x7c60/0x7c60 [ 214.112411][ T8539] ? __fdget+0x18b/0x210 [ 214.116671][ T8539] __x64_sys_recvmsg+0x1dd/0x2a0 [ 214.121640][ T8539] ? ___sys_recvmsg+0x4f0/0x4f0 [ 214.126552][ T8539] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 214.132670][ T8539] ? lockdep_hardirqs_on+0x94/0x140 [ 214.137886][ T8539] do_syscall_64+0x4c/0xa0 [ 214.142322][ T8539] ? clear_bhb_loop+0x30/0x80 [ 214.147014][ T8539] ? clear_bhb_loop+0x30/0x80 [ 214.151712][ T8539] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 214.157626][ T8539] RIP: 0033:0x7f7b3b177ec9 [ 214.162064][ T8539] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 214.181691][ T8539] RSP: 002b:00007f7b393df038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 214.190126][ T8539] RAX: ffffffffffffffda RBX: 00007f7b3b3cefa0 RCX: 00007f7b3b177ec9 [ 214.198106][ T8539] RDX: 0000000000000061 RSI: 0000200000000100 RDI: 0000000000000004 [ 214.206092][ T8539] RBP: 00007f7b393df090 R08: 0000000000000000 R09: 0000000000000000 [ 214.214084][ T8539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 214.222063][ T8539] R13: 00007f7b3b3cf038 R14: 00007f7b3b3cefa0 R15: 00007ffde0e2f838 [ 214.230077][ T8539] [ 214.647352][ T8557] sctp: [Deprecated]: syz.3.1580 (pid 8557) Use of int in max_burst socket option deprecated. [ 214.647352][ T8557] Use struct sctp_assoc_value instead [ 214.806402][ T8561] sctp: [Deprecated]: syz.4.1582 (pid 8561) Use of int in max_burst socket option deprecated. [ 214.806402][ T8561] Use struct sctp_assoc_value instead [ 215.452965][ T8582] sctp: [Deprecated]: syz.0.1593 (pid 8582) Use of int in max_burst socket option deprecated. [ 215.452965][ T8582] Use struct sctp_assoc_value instead [ 216.282382][ T8611] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1602'. [ 216.484155][ T8620] sctp_setsockopt_maxburst: 2 callbacks suppressed [ 216.484188][ T8620] sctp: [Deprecated]: syz.2.1607 (pid 8620) Use of int in max_burst socket option deprecated. [ 216.484188][ T8620] Use struct sctp_assoc_value instead [ 217.346434][ T8649] sctp: [Deprecated]: syz.0.1617 (pid 8649) Use of int in max_burst socket option deprecated. [ 217.346434][ T8649] Use struct sctp_assoc_value instead [ 217.622052][ T8658] validate_nla: 2 callbacks suppressed [ 217.622079][ T8658] netlink: 'syz.2.1621': attribute type 22 has an invalid length. [ 217.716172][ T8658] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1621'. [ 217.750351][ T8661] netlink: 9982 bytes leftover after parsing attributes in process `syz.1.1619'. [ 217.820823][ T8660] netlink: 'syz.4.1622': attribute type 11 has an invalid length. [ 217.848963][ T8660] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1622'. [ 221.114429][ T8691] netlink: 4031 bytes leftover after parsing attributes in process `syz.2.1629'. [ 221.128385][ T8689] sctp: [Deprecated]: syz.1.1632 (pid 8689) Use of int in max_burst socket option deprecated. [ 221.128385][ T8689] Use struct sctp_assoc_value instead [ 221.196721][ T8690] sctp: [Deprecated]: syz.0.1631 (pid 8690) Use of int in max_burst socket option deprecated. [ 221.196721][ T8690] Use struct sctp_assoc_value instead [ 221.220740][ T8693] sctp: [Deprecated]: syz.3.1633 (pid 8693) Use of int in max_burst socket option deprecated. [ 221.220740][ T8693] Use struct sctp_assoc_value instead [ 221.348572][ T8698] sctp: [Deprecated]: syz.4.1635 (pid 8698) Use of int in max_burst socket option deprecated. [ 221.348572][ T8698] Use struct sctp_assoc_value instead [ 221.413439][ T8700] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x31 [ 221.693447][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 221.765357][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 221.833292][ T8705] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 222.155689][ T8726] sctp: [Deprecated]: syz.2.1646 (pid 8726) Use of int in max_burst socket option deprecated. [ 222.155689][ T8726] Use struct sctp_assoc_value instead [ 222.340426][ T8731] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1647'. [ 222.748484][ T8747] sctp: [Deprecated]: syz.4.1654 (pid 8747) Use of int in max_burst socket option deprecated. [ 222.748484][ T8747] Use struct sctp_assoc_value instead [ 222.990378][ T8759] netlink: 'syz.3.1658': attribute type 2 has an invalid length. [ 223.007171][ T8760] sctp: [Deprecated]: syz.0.1660 (pid 8760) Use of int in max_burst socket option deprecated. [ 223.007171][ T8760] Use struct sctp_assoc_value instead [ 223.018922][ T8759] netlink: 'syz.3.1658': attribute type 2 has an invalid length. [ 223.067506][ T8762] netlink: 'syz.3.1658': attribute type 2 has an invalid length. [ 223.225107][ T8770] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1664'. [ 223.744460][ T8775] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 223.771531][ T8775] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 223.795122][ T8791] sctp: [Deprecated]: syz.1.1672 (pid 8791) Use of int in max_burst socket option deprecated. [ 223.795122][ T8791] Use struct sctp_assoc_value instead [ 223.840887][ T8775] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 223.994874][ T8797] netlink: 'syz.3.1675': attribute type 46 has an invalid length. [ 224.035724][ T8797] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1675'. [ 224.664963][ T8824] sctp: [Deprecated]: syz.0.1684 (pid 8824) Use of int in max_burst socket option deprecated. [ 224.664963][ T8824] Use struct sctp_assoc_value instead [ 224.766608][ T8828] netlink: 'syz.4.1687': attribute type 4 has an invalid length. [ 224.804267][ T8828] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1687'. [ 224.840688][ T8828] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 224.847014][ T8832] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x31 [ 225.375642][ T8853] device lo entered promiscuous mode [ 225.388332][ T8854] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.1697'. [ 225.409452][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 225.423556][ T8854] netlink: zone id is out of range [ 225.445503][ T8854] netlink: zone id is out of range [ 225.451257][ T8854] netlink: zone id is out of range [ 225.456599][ T8854] netlink: zone id is out of range [ 225.469068][ T8854] netlink: zone id is out of range [ 225.672786][ T8867] netlink: 'syz.1.1703': attribute type 13 has an invalid length. [ 225.688928][ T8867] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1703'. [ 225.833033][ T8870] sctp: [Deprecated]: syz.0.1702 (pid 8870) Use of int in max_burst socket option deprecated. [ 225.833033][ T8870] Use struct sctp_assoc_value instead [ 226.007057][ T8887] sctp: [Deprecated]: syz.3.1710 (pid 8887) Use of int in max_burst socket option deprecated. [ 226.007057][ T8887] Use struct sctp_assoc_value instead [ 226.014618][ T8882] netlink: 13695 bytes leftover after parsing attributes in process `syz.4.1708'. [ 227.060188][ T8926] netlink: 1010 bytes leftover after parsing attributes in process `syz.2.1724'. [ 227.092975][ T8930] netlink: 'syz.3.1728': attribute type 10 has an invalid length. [ 227.136627][ T8928] sctp: [Deprecated]: syz.0.1726 (pid 8928) Use of int in max_burst socket option deprecated. [ 227.136627][ T8928] Use struct sctp_assoc_value instead [ 227.303700][ T8930] device veth0_vlan left promiscuous mode [ 227.322731][ T8930] device veth0_vlan entered promiscuous mode [ 227.333166][ T8930] team0: Device veth0_vlan failed to register rx_handler [ 227.411174][ T8937] FAULT_INJECTION: forcing a failure. [ 227.411174][ T8937] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 227.441912][ T8937] CPU: 1 PID: 8937 Comm: syz.4.1731 Not tainted syzkaller #0 [ 227.449465][ T8937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 227.459647][ T8937] Call Trace: [ 227.462958][ T8937] [ 227.465926][ T8937] dump_stack_lvl+0x168/0x230 [ 227.470743][ T8937] ? show_regs_print_info+0x20/0x20 [ 227.476012][ T8937] ? load_image+0x3b0/0x3b0 [ 227.480569][ T8937] ? __lock_acquire+0x7c60/0x7c60 [ 227.485649][ T8937] should_fail+0x38c/0x4c0 [ 227.490124][ T8937] _copy_to_user+0x2e/0x130 [ 227.494679][ T8937] simple_read_from_buffer+0xe3/0x150 [ 227.500193][ T8937] proc_fail_nth_read+0x19a/0x210 [ 227.505355][ T8937] ? proc_fault_inject_write+0x2f0/0x2f0 [ 227.511044][ T8937] ? fsnotify_perm+0x254/0x560 [ 227.515961][ T8937] ? proc_fault_inject_write+0x2f0/0x2f0 [ 227.521731][ T8937] vfs_read+0x2f6/0xcf0 [ 227.525939][ T8937] ? kernel_read+0x1e0/0x1e0 [ 227.530551][ T8937] ? __fget_files+0x40f/0x480 [ 227.535271][ T8937] ? mutex_lock_nested+0x17/0x20 [ 227.540233][ T8937] ? __fdget_pos+0x2bf/0x370 [ 227.544832][ T8937] ? ksys_read+0x71/0x250 [ 227.549263][ T8937] ksys_read+0x14d/0x250 [ 227.553525][ T8937] ? vfs_write+0xd00/0xd00 [ 227.557958][ T8937] ? lockdep_hardirqs_on+0x94/0x140 [ 227.563268][ T8937] do_syscall_64+0x4c/0xa0 [ 227.567794][ T8937] ? clear_bhb_loop+0x30/0x80 [ 227.572489][ T8937] ? clear_bhb_loop+0x30/0x80 [ 227.577189][ T8937] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 227.583099][ T8937] RIP: 0033:0x7fbc203c88dc [ 227.587659][ T8937] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 227.607465][ T8937] RSP: 002b:00007fbc1e631030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 227.616003][ T8937] RAX: ffffffffffffffda RBX: 00007fbc20620fa0 RCX: 00007fbc203c88dc [ 227.623994][ T8937] RDX: 000000000000000f RSI: 00007fbc1e6310a0 RDI: 0000000000000005 [ 227.632111][ T8937] RBP: 00007fbc1e631090 R08: 0000000000000000 R09: 0000000000000000 [ 227.640190][ T8937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 227.648183][ T8937] R13: 00007fbc20621038 R14: 00007fbc20620fa0 R15: 00007ffe05ee4828 [ 227.656448][ T8937] [ 227.809386][ T8948] netlink: 'syz.3.1732': attribute type 3 has an invalid length. [ 227.819088][ T8948] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1732'. [ 228.373837][ T8977] netlink: 'syz.2.1743': attribute type 10 has an invalid length. [ 228.620728][ T8977] device veth0_vlan left promiscuous mode [ 228.663983][ T8977] device veth0_vlan entered promiscuous mode [ 228.699943][ T8977] team0: Device veth0_vlan failed to register rx_handler [ 228.920077][ T8991] sctp: [Deprecated]: syz.1.1747 (pid 8991) Use of int in max_burst socket option deprecated. [ 228.920077][ T8991] Use struct sctp_assoc_value instead [ 229.061233][ T9004] netlink: 'syz.4.1749': attribute type 39 has an invalid length. [ 229.797687][ T9033] netlink: 'syz.3.1764': attribute type 2 has an invalid length. [ 229.887600][ T9041] netlink: 'syz.1.1767': attribute type 10 has an invalid length. [ 230.396540][ T9063] sctp: [Deprecated]: syz.0.1778 (pid 9063) Use of int in max_burst socket option deprecated. [ 230.396540][ T9063] Use struct sctp_assoc_value instead [ 230.478315][ T9069] sctp: [Deprecated]: syz.1.1780 (pid 9069) Use of int in max_burst socket option deprecated. [ 230.478315][ T9069] Use struct sctp_assoc_value instead [ 230.716909][ T9074] netlink: 'syz.2.1781': attribute type 1 has an invalid length. [ 230.727105][ T9074] netlink: 'syz.2.1781': attribute type 4 has an invalid length. [ 230.742542][ T9074] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.1781'. [ 230.816041][ T9074] delete_channel: no stack [ 230.828129][ T9074] delete_channel: no stack [ 231.357589][ T9090] netlink: 'syz.2.1788': attribute type 10 has an invalid length. [ 231.400818][ T9090] team0: Device hsr_slave_0 failed to register rx_handler [ 231.546232][ T9104] netlink: 'syz.3.1794': attribute type 5 has an invalid length. [ 231.578507][ T9104] netlink: 'syz.3.1794': attribute type 10 has an invalid length. [ 231.747812][ T9117] net_ratelimit: 398 callbacks suppressed [ 231.747855][ T9117] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x31 [ 231.876538][ T9122] sctp: [Deprecated]: syz.1.1800 (pid 9122) Use of int in max_burst socket option deprecated. [ 231.876538][ T9122] Use struct sctp_assoc_value instead [ 232.058296][ T9130] netlink: 'syz.3.1801': attribute type 10 has an invalid length. [ 232.303280][ T9135] sctp: [Deprecated]: syz.4.1804 (pid 9135) Use of int in max_burst socket option deprecated. [ 232.303280][ T9135] Use struct sctp_assoc_value instead [ 232.520779][ T9144] device syzkaller0 entered promiscuous mode [ 232.656158][ T9149] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1809'. [ 232.751352][ T9149] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1809'. [ 232.803110][ T9151] device syzkaller0 entered promiscuous mode [ 233.043862][ T9163] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1815'. [ 233.194321][ T9170] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x31 [ 233.957486][ T9203] validate_nla: 2 callbacks suppressed [ 233.957511][ T9203] netlink: 'syz.1.1832': attribute type 1 has an invalid length. [ 233.998905][ T9203] netlink: 'syz.1.1832': attribute type 3 has an invalid length. [ 234.030897][ T9203] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1832'. [ 234.138044][ T9212] netlink: 'syz.1.1836': attribute type 10 has an invalid length. [ 234.146636][ T9212] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1836'. [ 235.335060][ T9247] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x31 [ 237.301811][ T9294] sctp: [Deprecated]: syz.3.1863 (pid 9294) Use of int in max_burst socket option deprecated. [ 237.301811][ T9294] Use struct sctp_assoc_value instead [ 237.706680][ T9304] netlink: 399 bytes leftover after parsing attributes in process `syz.2.1867'. [ 238.011811][ T7051] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 238.263374][ T9316] can: request_module (can-proto-4) failed. [ 238.522328][ T9330] sctp: [Deprecated]: syz.1.1876 (pid 9330) Use of int in max_burst socket option deprecated. [ 238.522328][ T9330] Use struct sctp_assoc_value instead [ 239.176315][ T9348] sctp: [Deprecated]: syz.2.1883 (pid 9348) Use of int in max_burst socket option deprecated. [ 239.176315][ T9348] Use struct sctp_assoc_value instead [ 239.831464][ T9375] FAULT_INJECTION: forcing a failure. [ 239.831464][ T9375] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 239.883801][ T9375] CPU: 1 PID: 9375 Comm: syz.3.1894 Not tainted syzkaller #0 [ 239.891273][ T9375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 239.901365][ T9375] Call Trace: [ 239.904680][ T9375] [ 239.907644][ T9375] dump_stack_lvl+0x168/0x230 [ 239.912373][ T9375] ? show_regs_print_info+0x20/0x20 [ 239.917618][ T9375] ? load_image+0x3b0/0x3b0 [ 239.922170][ T9375] ? __lock_acquire+0x7c60/0x7c60 [ 239.927251][ T9375] ? vfs_write+0x84d/0xd00 [ 239.931715][ T9375] should_fail+0x38c/0x4c0 [ 239.936176][ T9375] _copy_from_user+0x2e/0x170 [ 239.940901][ T9375] __sys_bpf+0x21b/0x670 [ 239.945260][ T9375] ? bpf_link_show_fdinfo+0x340/0x340 [ 239.950688][ T9375] ? vtime_user_exit+0x2dc/0x400 [ 239.955676][ T9375] __x64_sys_bpf+0x78/0x90 [ 239.960146][ T9375] do_syscall_64+0x4c/0xa0 [ 239.964605][ T9375] ? clear_bhb_loop+0x30/0x80 [ 239.969321][ T9375] ? clear_bhb_loop+0x30/0x80 [ 239.974123][ T9375] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 239.980180][ T9375] RIP: 0033:0x7f7b3b177ec9 [ 239.984653][ T9375] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 240.004567][ T9375] RSP: 002b:00007f7b393df038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 240.013020][ T9375] RAX: ffffffffffffffda RBX: 00007f7b3b3cefa0 RCX: 00007f7b3b177ec9 [ 240.021037][ T9375] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 240.029044][ T9375] RBP: 00007f7b393df090 R08: 0000000000000000 R09: 0000000000000000 [ 240.037047][ T9375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 240.045050][ T9375] R13: 00007f7b3b3cf038 R14: 00007f7b3b3cefa0 R15: 00007ffde0e2f838 [ 240.053072][ T9375] [ 240.197977][ T9385] sctp: [Deprecated]: syz.1.1897 (pid 9385) Use of int in max_burst socket option deprecated. [ 240.197977][ T9385] Use struct sctp_assoc_value instead [ 240.288102][ T9389] sctp: [Deprecated]: syz.0.1899 (pid 9389) Use of int in max_burst socket option deprecated. [ 240.288102][ T9389] Use struct sctp_assoc_value instead [ 240.465372][ T9393] sctp: [Deprecated]: syz.3.1900 (pid 9393) Use of int in max_burst socket option deprecated. [ 240.465372][ T9393] Use struct sctp_assoc_value instead [ 240.578967][ T9395] sctp: [Deprecated]: syz.1.1901 (pid 9395) Use of int in max_burst socket option deprecated. [ 240.578967][ T9395] Use struct sctp_assoc_value instead [ 240.686012][ T9397] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1902'. [ 240.947418][ T9397] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 241.045946][ T9397] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 241.093773][ T9397] bond0 (unregistering): Released all slaves [ 241.437708][ T9419] netlink: 'syz.3.1908': attribute type 11 has an invalid length. [ 241.478293][ T9419] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.1908'. [ 241.649947][ T9427] sctp: [Deprecated]: syz.3.1911 (pid 9427) Use of int in max_burst socket option deprecated. [ 241.649947][ T9427] Use struct sctp_assoc_value instead [ 241.813140][ T9435] sctp: [Deprecated]: syz.0.1914 (pid 9435) Use of int in max_burst socket option deprecated. [ 241.813140][ T9435] Use struct sctp_assoc_value instead [ 241.917417][ T9437] sctp: [Deprecated]: syz.2.1915 (pid 9437) Use of int in max_burst socket option deprecated. [ 241.917417][ T9437] Use struct sctp_assoc_value instead [ 241.935998][ T9439] FAULT_INJECTION: forcing a failure. [ 241.935998][ T9439] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 241.950659][ T9439] CPU: 0 PID: 9439 Comm: syz.1.1916 Not tainted syzkaller #0 [ 241.958087][ T9439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 241.968277][ T9439] Call Trace: [ 241.971592][ T9439] [ 241.974544][ T9439] dump_stack_lvl+0x168/0x230 [ 241.979277][ T9439] ? show_regs_print_info+0x20/0x20 [ 241.984622][ T9439] ? load_image+0x3b0/0x3b0 [ 241.989191][ T9439] ? __lock_acquire+0x7c60/0x7c60 [ 241.994260][ T9439] should_fail+0x38c/0x4c0 [ 241.998768][ T9439] _copy_from_user+0x2e/0x170 [ 242.003475][ T9439] __copy_msghdr_from_user+0xaf/0x5e0 [ 242.008910][ T9439] ? verify_lock_unused+0x140/0x140 [ 242.014148][ T9439] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 242.019476][ T9439] ___sys_sendmsg+0x156/0x260 [ 242.024192][ T9439] ? __sys_sendmsg+0x250/0x250 [ 242.028994][ T9439] ? vfs_write+0x84d/0xd00 [ 242.033461][ T9439] ? __fdget+0x18b/0x210 [ 242.037728][ T9439] __se_sys_sendmsg+0x190/0x250 [ 242.042609][ T9439] ? __x64_sys_sendmsg+0x80/0x80 [ 242.047577][ T9439] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 242.053593][ T9439] ? lockdep_hardirqs_on+0x94/0x140 [ 242.058822][ T9439] do_syscall_64+0x4c/0xa0 [ 242.063253][ T9439] ? clear_bhb_loop+0x30/0x80 [ 242.067944][ T9439] ? clear_bhb_loop+0x30/0x80 [ 242.072639][ T9439] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 242.078555][ T9439] RIP: 0033:0x7fe8b05c8ec9 [ 242.082995][ T9439] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 242.102640][ T9439] RSP: 002b:00007fe8ae830038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 242.111084][ T9439] RAX: ffffffffffffffda RBX: 00007fe8b081ffa0 RCX: 00007fe8b05c8ec9 [ 242.119083][ T9439] RDX: 0000000004050003 RSI: 0000200000000080 RDI: 0000000000000003 [ 242.127080][ T9439] RBP: 00007fe8ae830090 R08: 0000000000000000 R09: 0000000000000000 [ 242.135076][ T9439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 242.143059][ T9439] R13: 00007fe8b0820038 R14: 00007fe8b081ffa0 R15: 00007ffebd9350f8 [ 242.151068][ T9439] [ 242.474097][ T9457] sctp: [Deprecated]: syz.3.1923 (pid 9457) Use of int in max_burst socket option deprecated. [ 242.474097][ T9457] Use struct sctp_assoc_value instead [ 242.777384][ T9470] sctp: [Deprecated]: syz.3.1927 (pid 9470) Use of int in max_burst socket option deprecated. [ 242.777384][ T9470] Use struct sctp_assoc_value instead [ 242.861553][ T9472] netlink: 'syz.1.1929': attribute type 21 has an invalid length. [ 242.876844][ T9472] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1929'. [ 243.052894][ T9482] FAULT_INJECTION: forcing a failure. [ 243.052894][ T9482] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 243.086043][ T9479] sctp: [Deprecated]: syz.3.1932 (pid 9479) Use of int in max_burst socket option deprecated. [ 243.086043][ T9479] Use struct sctp_assoc_value instead [ 243.103916][ T9482] CPU: 0 PID: 9482 Comm: syz.4.1934 Not tainted syzkaller #0 [ 243.111344][ T9482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 243.121866][ T9482] Call Trace: [ 243.125179][ T9482] [ 243.128132][ T9482] dump_stack_lvl+0x168/0x230 [ 243.132838][ T9482] ? show_regs_print_info+0x20/0x20 [ 243.138193][ T9482] ? load_image+0x3b0/0x3b0 [ 243.142718][ T9482] ? __lock_acquire+0x7c60/0x7c60 [ 243.147854][ T9482] ? vfs_write+0x84d/0xd00 [ 243.152293][ T9482] should_fail+0x38c/0x4c0 [ 243.156742][ T9482] _copy_from_user+0x2e/0x170 [ 243.161438][ T9482] __sys_bpf+0x21b/0x670 [ 243.165706][ T9482] ? bpf_link_show_fdinfo+0x340/0x340 [ 243.171321][ T9482] ? vtime_user_exit+0x2dc/0x400 [ 243.176391][ T9482] __x64_sys_bpf+0x78/0x90 [ 243.180958][ T9482] do_syscall_64+0x4c/0xa0 [ 243.185394][ T9482] ? clear_bhb_loop+0x30/0x80 [ 243.190102][ T9482] ? clear_bhb_loop+0x30/0x80 [ 243.194802][ T9482] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 243.200708][ T9482] RIP: 0033:0x7fbc203c9ec9 [ 243.205151][ T9482] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 243.224800][ T9482] RSP: 002b:00007fbc1e631038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 243.233232][ T9482] RAX: ffffffffffffffda RBX: 00007fbc20620fa0 RCX: 00007fbc203c9ec9 [ 243.241322][ T9482] RDX: 000000000000000c RSI: 0000200000000500 RDI: 000000000000000a [ 243.249317][ T9482] RBP: 00007fbc1e631090 R08: 0000000000000000 R09: 0000000000000000 [ 243.257310][ T9482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 243.265290][ T9482] R13: 00007fbc20621038 R14: 00007fbc20620fa0 R15: 00007ffe05ee4828 [ 243.273418][ T9482] [ 243.387944][ T9493] sctp: [Deprecated]: syz.4.1937 (pid 9493) Use of int in max_burst socket option deprecated. [ 243.387944][ T9493] Use struct sctp_assoc_value instead [ 243.589665][ T9504] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.597126][ T9504] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.610163][ T9506] sctp: [Deprecated]: syz.2.1942 (pid 9506) Use of int in max_burst socket option deprecated. [ 243.610163][ T9506] Use struct sctp_assoc_value instead [ 243.746198][ T9504] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1940'. [ 243.959641][ T9516] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1945'. [ 244.028340][ T9517] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1944'. [ 244.104634][ T9523] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 244.434463][ T9536] sctp: [Deprecated]: syz.3.1954 (pid 9536) Use of int in max_burst socket option deprecated. [ 244.434463][ T9536] Use struct sctp_assoc_value instead [ 244.866143][ T9553] FAULT_INJECTION: forcing a failure. [ 244.866143][ T9553] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 244.886078][ T9553] CPU: 1 PID: 9553 Comm: syz.1.1959 Not tainted syzkaller #0 [ 244.893545][ T9553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 244.903650][ T9553] Call Trace: [ 244.906956][ T9553] [ 244.909916][ T9553] dump_stack_lvl+0x168/0x230 [ 244.914716][ T9553] ? show_regs_print_info+0x20/0x20 [ 244.919953][ T9553] ? load_image+0x3b0/0x3b0 [ 244.924500][ T9553] ? __lock_acquire+0x7c60/0x7c60 [ 244.929589][ T9553] should_fail+0x38c/0x4c0 [ 244.934055][ T9553] _copy_from_user+0x2e/0x170 [ 244.938776][ T9553] __copy_msghdr_from_user+0xaf/0x5e0 [ 244.944194][ T9553] ? verify_lock_unused+0x140/0x140 [ 244.944522][ T9549] device syzkaller0 entered promiscuous mode [ 244.949432][ T9553] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 244.949474][ T9553] ? trace_event_raw_event_lock+0x250/0x250 [ 244.949505][ T9553] ___sys_sendmsg+0x156/0x260 [ 244.949535][ T9553] ? __sys_sendmsg+0x250/0x250 [ 244.949578][ T9553] ? trace_event_raw_event_lock+0x250/0x250 [ 244.982438][ T9553] ? vfs_write+0x84d/0xd00 [ 244.986914][ T9553] ? __fdget+0x18b/0x210 [ 244.991205][ T9553] __se_sys_sendmsg+0x190/0x250 [ 244.996115][ T9553] ? __x64_sys_sendmsg+0x80/0x80 [ 245.001091][ T9553] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 245.007109][ T9553] ? lockdep_hardirqs_on+0x94/0x140 [ 245.012339][ T9553] do_syscall_64+0x4c/0xa0 [ 245.016800][ T9553] ? clear_bhb_loop+0x30/0x80 [ 245.017156][ T9557] netlink: 'syz.4.1961': attribute type 10 has an invalid length. [ 245.021515][ T9553] ? clear_bhb_loop+0x30/0x80 [ 245.021545][ T9553] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 245.021575][ T9553] RIP: 0033:0x7fe8b05c8ec9 [ 245.021596][ T9553] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 245.021614][ T9553] RSP: 002b:00007fe8ae830038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 245.021636][ T9553] RAX: ffffffffffffffda RBX: 00007fe8b081ffa0 RCX: 00007fe8b05c8ec9 [ 245.021653][ T9553] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000003 [ 245.088479][ T9553] RBP: 00007fe8ae830090 R08: 0000000000000000 R09: 0000000000000000 [ 245.096618][ T9553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 245.104644][ T9553] R13: 00007fe8b0820038 R14: 00007fe8b081ffa0 R15: 00007ffebd9350f8 [ 245.112669][ T9553] [ 245.194185][ T9563] sctp: [Deprecated]: syz.1.1962 (pid 9563) Use of int in max_burst socket option deprecated. [ 245.194185][ T9563] Use struct sctp_assoc_value instead [ 245.389363][ T9577] netlink: 'syz.4.1966': attribute type 1 has an invalid length. [ 245.409364][ T9577] netlink: 101600 bytes leftover after parsing attributes in process `syz.4.1966'. [ 245.496124][ T9582] sctp: [Deprecated]: syz.2.1969 (pid 9582) Use of int in max_burst socket option deprecated. [ 245.496124][ T9582] Use struct sctp_assoc_value instead [ 246.073534][ T9603] netlink: 'syz.1.1977': attribute type 10 has an invalid length. [ 246.082169][ T9603] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.1977'. [ 246.124423][ T9605] sctp: [Deprecated]: syz.3.1978 (pid 9605) Use of int in max_burst socket option deprecated. [ 246.124423][ T9605] Use struct sctp_assoc_value instead [ 246.397342][ T9613] netlink: 'syz.4.1982': attribute type 10 has an invalid length. [ 246.410519][ T9613] netlink: 55 bytes leftover after parsing attributes in process `syz.4.1982'. [ 246.583958][ T9625] netlink: 'syz.0.1986': attribute type 27 has an invalid length. [ 246.598894][ T9625] netlink: 2418 bytes leftover after parsing attributes in process `syz.0.1986'. [ 246.759550][ T9627] sctp: [Deprecated]: syz.1.1988 (pid 9627) Use of int in max_burst socket option deprecated. [ 246.759550][ T9627] Use struct sctp_assoc_value instead [ 246.791946][ T9629] netlink: 204464 bytes leftover after parsing attributes in process `syz.2.1987'. [ 246.818868][ T7051] wlan1: Trigger new scan to find an IBSS to join [ 246.837866][ T9629] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 246.863896][ T9629] CPU: 0 PID: 9629 Comm: syz.2.1987 Not tainted syzkaller #0 [ 246.871500][ T9629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 246.881709][ T9629] Call Trace: [ 246.885068][ T9629] [ 246.888158][ T9629] dump_stack_lvl+0x168/0x230 [ 246.892936][ T9629] ? show_regs_print_info+0x20/0x20 [ 246.898410][ T9629] ? load_image+0x3b0/0x3b0 [ 246.903057][ T9629] sysfs_warn_dup+0x8a/0xa0 [ 246.907644][ T9629] sysfs_do_create_link_sd+0xc0/0x110 [ 246.913095][ T9629] device_add+0x7ed/0xfb0 [ 246.917550][ T9629] wiphy_register+0x1d67/0x2b20 [ 246.922573][ T9629] ? cfg80211_event_work+0x40/0x40 [ 246.927762][ T9629] ? minstrel_ht_alloc+0x808/0x980 [ 246.932983][ T9629] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 246.939161][ T9629] ieee80211_register_hw+0x29b1/0x39d0 [ 246.944924][ T9629] ? ieee80211_tasklet_handler+0x20/0x20 [ 246.950662][ T9629] ? rcu_is_watching+0x11/0xa0 [ 246.955503][ T9629] ? memset+0x1e/0x40 [ 246.959560][ T9629] ? hrtimer_init+0x10c/0x220 [ 246.964316][ T9629] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 246.970186][ T9629] hwsim_new_radio_nl+0xa6f/0xc40 [ 246.975343][ T9629] genl_rcv_msg+0xbc6/0xf40 [ 246.980134][ T9629] ? genl_bind+0x370/0x370 [ 246.984641][ T9629] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 246.990511][ T9629] ? verify_lock_unused+0x140/0x140 [ 246.995771][ T9629] ? perf_trace_lock_acquire+0x329/0x3c0 [ 247.001500][ T9629] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 247.008156][ T9629] ? perf_trace_lock+0x2ec/0x370 [ 247.013166][ T9629] ? hwsim_tx_info_frame_received_nl+0x1010/0x1010 [ 247.019801][ T9629] netlink_rcv_skb+0x1e0/0x430 [ 247.024634][ T9629] ? genl_bind+0x370/0x370 [ 247.029136][ T9629] ? netlink_ack+0xb60/0xb60 [ 247.033799][ T9629] ? __lock_acquire+0x7c60/0x7c60 [ 247.038888][ T9629] ? preempt_count_add+0x8d/0x190 [ 247.043974][ T9629] ? down_read+0x1aa/0x2e0 [ 247.048499][ T9629] genl_rcv+0x24/0x40 [ 247.052566][ T9629] netlink_unicast+0x774/0x920 [ 247.057453][ T9629] netlink_sendmsg+0x8ab/0xbc0 [ 247.062320][ T9629] ? netlink_getsockopt+0x560/0x560 [ 247.067590][ T9629] ? aa_sock_msg_perm+0x94/0x150 [ 247.072600][ T9629] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 247.077935][ T9629] ? security_socket_sendmsg+0x7c/0xa0 [ 247.083489][ T9629] ? netlink_getsockopt+0x560/0x560 [ 247.088762][ T9629] ____sys_sendmsg+0x5a2/0x8c0 [ 247.093629][ T9629] ? memset+0x1e/0x40 [ 247.097723][ T9629] ? __sys_sendmsg_sock+0x30/0x30 [ 247.102846][ T9629] ? import_iovec+0x6f/0xa0 [ 247.107437][ T9629] ___sys_sendmsg+0x1f0/0x260 [ 247.112225][ T9629] ? __sys_sendmsg+0x250/0x250 [ 247.117225][ T9629] ? trace_event_raw_event_lock+0x250/0x250 [ 247.123285][ T9629] ? __fdget+0x18b/0x210 [ 247.127607][ T9629] __se_sys_sendmsg+0x190/0x250 [ 247.132533][ T9629] ? __x64_sys_sendmsg+0x80/0x80 [ 247.137509][ T9629] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 247.143798][ T9629] ? lockdep_hardirqs_on+0x94/0x140 [ 247.149073][ T9629] do_syscall_64+0x4c/0xa0 [ 247.153699][ T9629] ? clear_bhb_loop+0x30/0x80 [ 247.158426][ T9629] ? clear_bhb_loop+0x30/0x80 [ 247.163166][ T9629] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 247.169118][ T9629] RIP: 0033:0x7f60325cfec9 [ 247.173628][ T9629] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 247.193326][ T9629] RSP: 002b:00007f6030837038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 247.201818][ T9629] RAX: ffffffffffffffda RBX: 00007f6032826fa0 RCX: 00007f60325cfec9 [ 247.209856][ T9629] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 247.217885][ T9629] RBP: 00007f6032652f91 R08: 0000000000000000 R09: 0000000000000000 [ 247.226178][ T9629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 247.234208][ T9629] R13: 00007f6032827038 R14: 00007f6032826fa0 R15: 00007ffd0a769488 [ 247.242325][ T9629] [ 247.644498][ T9646] netlink: 'syz.4.1994': attribute type 11 has an invalid length. [ 247.669258][ T9650] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.1994'. [ 247.729769][ T9648] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1992'. [ 247.793151][ T9652] FAULT_INJECTION: forcing a failure. [ 247.793151][ T9652] name failslab, interval 1, probability 0, space 0, times 0 [ 247.808923][ T9652] CPU: 0 PID: 9652 Comm: syz.1.1996 Not tainted syzkaller #0 [ 247.816701][ T9652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 247.826982][ T9652] Call Trace: [ 247.830657][ T9652] [ 247.833628][ T9652] dump_stack_lvl+0x168/0x230 [ 247.838529][ T9652] ? show_regs_print_info+0x20/0x20 [ 247.843901][ T9652] ? load_image+0x3b0/0x3b0 [ 247.848588][ T9652] ? __lock_acquire+0x7c60/0x7c60 [ 247.853807][ T9652] ? zone_statistics+0x170/0x170 [ 247.859010][ T9652] should_fail+0x38c/0x4c0 [ 247.863511][ T9652] should_failslab+0x5/0x20 [ 247.868081][ T9652] slab_pre_alloc_hook+0x51/0xc0 [ 247.873090][ T9652] kmem_cache_alloc_trace+0x47/0x2a0 [ 247.878434][ T9652] ? sctp_auth_asoc_copy_shkeys+0x148/0x5a0 [ 247.884521][ T9652] sctp_auth_asoc_copy_shkeys+0x148/0x5a0 [ 247.890358][ T9652] sctp_association_new+0x15e5/0x24a0 [ 247.895835][ T9652] sctp_connect_new_asoc+0x2bb/0x690 [ 247.901193][ T9652] ? __sctp_connect+0xd20/0xd20 [ 247.906107][ T9652] ? __local_bh_enable_ip+0x12a/0x1b0 [ 247.911551][ T9652] ? _local_bh_enable+0xa0/0xa0 [ 247.916587][ T9652] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 247.922372][ T9652] ? security_sctp_bind_connect+0x85/0xb0 [ 247.928286][ T9652] sctp_sendmsg+0x15e0/0x2950 [ 247.933152][ T9652] ? aa_sk_perm+0x7b4/0x8f0 [ 247.937853][ T9652] ? sctp_getsockopt+0x8a0/0x8a0 [ 247.942936][ T9652] ? aa_af_perm+0x2b0/0x2b0 [ 247.947487][ T9652] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 247.953963][ T9652] ? sock_rps_record_flow+0x17/0x3b0 [ 247.959466][ T9652] ? inet_send_prepare+0x260/0x260 [ 247.964625][ T9652] ? inet_sendmsg+0x78/0x2f0 [ 247.969245][ T9652] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 247.974578][ T9652] ? security_socket_sendmsg+0x7c/0xa0 [ 247.980065][ T9652] ? inet_send_prepare+0x260/0x260 [ 247.985216][ T9652] ____sys_sendmsg+0x5a2/0x8c0 [ 247.990028][ T9652] ? memset+0x1e/0x40 [ 247.994044][ T9652] ? __sys_sendmsg_sock+0x30/0x30 [ 247.999125][ T9652] ? import_iovec+0x6f/0xa0 [ 248.003673][ T9652] ___sys_sendmsg+0x1f0/0x260 [ 248.008593][ T9652] ? __sys_sendmsg+0x250/0x250 [ 248.013538][ T9652] ? trace_event_raw_event_lock+0x250/0x250 [ 248.019459][ T9652] ? vfs_write+0x84d/0xd00 [ 248.023946][ T9652] ? __fdget+0x18b/0x210 [ 248.028214][ T9652] __se_sys_sendmsg+0x190/0x250 [ 248.033103][ T9652] ? __x64_sys_sendmsg+0x80/0x80 [ 248.038071][ T9652] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 248.044131][ T9652] ? lockdep_hardirqs_on+0x94/0x140 [ 248.049402][ T9652] do_syscall_64+0x4c/0xa0 [ 248.053861][ T9652] ? clear_bhb_loop+0x30/0x80 [ 248.058566][ T9652] ? clear_bhb_loop+0x30/0x80 [ 248.063272][ T9652] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 248.069202][ T9652] RIP: 0033:0x7fe8b05c8ec9 [ 248.073647][ T9652] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 248.093407][ T9652] RSP: 002b:00007fe8ae830038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 248.101861][ T9652] RAX: ffffffffffffffda RBX: 00007fe8b081ffa0 RCX: 00007fe8b05c8ec9 [ 248.109881][ T9652] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000004 [ 248.117884][ T9652] RBP: 00007fe8ae830090 R08: 0000000000000000 R09: 0000000000000000 [ 248.125968][ T9652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 248.134050][ T9652] R13: 00007fe8b0820038 R14: 00007fe8b081ffa0 R15: 00007ffebd9350f8 [ 248.142087][ T9652] [ 248.254087][ T9656] sctp: [Deprecated]: syz.2.1997 (pid 9656) Use of int in max_burst socket option deprecated. [ 248.254087][ T9656] Use struct sctp_assoc_value instead [ 248.642480][ T9672] netlink: 'syz.0.2003': attribute type 41 has an invalid length. [ 248.706074][ T9678] sctp: [Deprecated]: syz.1.2006 (pid 9678) Use of int in max_burst socket option deprecated. [ 248.706074][ T9678] Use struct sctp_assoc_value instead [ 248.714058][ T9672] netlink: 'syz.0.2003': attribute type 9 has an invalid length. [ 248.754469][ T9672] netlink: 61951 bytes leftover after parsing attributes in process `syz.0.2003'. [ 248.914785][ T9686] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2008'. [ 248.935787][ T9686] device bond_slave_0 left promiscuous mode [ 248.947938][ T9686] device bond_slave_1 left promiscuous mode [ 249.076311][ T9686] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 249.134328][ T9686] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 249.186792][ T9686] bond0 (unregistering): Released all slaves [ 249.534492][ T9692] netlink: 'syz.2.2009': attribute type 11 has an invalid length. [ 249.620822][ T9692] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.2009'. [ 249.985346][ T9714] sctp: [Deprecated]: syz.3.2020 (pid 9714) Use of int in max_burst socket option deprecated. [ 249.985346][ T9714] Use struct sctp_assoc_value instead [ 250.037771][ T9716] netlink: 'syz.4.2019': attribute type 8 has an invalid length. [ 250.053384][ T9716] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2019'. [ 250.119722][ T9716] device wlan0 left promiscuous mode [ 250.195583][ T9721] netlink: 'syz.1.2021': attribute type 12 has an invalid length. [ 250.234441][ T9720] bond_slave_1: mtu less than device minimum [ 250.306538][ T9724] mac80211_hwsim hwsim4 : renamed from wlan0 [ 250.819523][ T7045] wlan1: Trigger new scan to find an IBSS to join [ 250.880517][ T9741] sctp: [Deprecated]: syz.3.2027 (pid 9741) Use of int in max_burst socket option deprecated. [ 250.880517][ T9741] Use struct sctp_assoc_value instead [ 251.295429][ T9728] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 251.364418][ T9728] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 251.377939][ T9728] bond0 (unregistering): Released all slaves [ 251.490364][ T9738] device syzkaller0 entered promiscuous mode [ 251.824812][ T7026] wlan1: Creating new IBSS network, BSSID fa:6f:8f:c4:a9:97 [ 251.913336][ T9763] sctp: [Deprecated]: syz.3.2033 (pid 9763) Use of int in max_burst socket option deprecated. [ 251.913336][ T9763] Use struct sctp_assoc_value instead [ 252.561493][ T9793] sctp: [Deprecated]: syz.0.2042 (pid 9793) Use of int in max_burst socket option deprecated. [ 252.561493][ T9793] Use struct sctp_assoc_value instead [ 253.778327][ T9824] netlink: 'syz.3.2052': attribute type 10 has an invalid length. [ 253.907246][ T9824] __nla_validate_parse: 2 callbacks suppressed [ 253.907265][ T9824] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2052'. [ 254.103221][ T9831] netlink: 'syz.2.2057': attribute type 10 has an invalid length. [ 254.142999][ T9831] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2057'. [ 254.933759][ T9843] sctp: [Deprecated]: syz.3.2061 (pid 9843) Use of int in max_burst socket option deprecated. [ 254.933759][ T9843] Use struct sctp_assoc_value instead [ 254.956536][ T9845] sctp: [Deprecated]: syz.0.2062 (pid 9845) Use of int in max_burst socket option deprecated. [ 254.956536][ T9845] Use struct sctp_assoc_value instead [ 255.116682][ T9848] cgroup: fork rejected by pids controller in /syz2 [ 255.710406][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.716905][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.846887][ T9864] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2069'. [ 255.961538][ T7049] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.025599][ T9864] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2069'. [ 256.103399][ T9867] netlink: 'syz.0.2071': attribute type 10 has an invalid length. [ 256.122939][ T9867] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2071'. [ 256.282745][ T7049] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.423549][ T7049] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.529053][ T9881] sctp: [Deprecated]: syz.3.2074 (pid 9881) Use of int in max_burst socket option deprecated. [ 256.529053][ T9881] Use struct sctp_assoc_value instead [ 256.568471][ T7049] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.909452][ T9885] chnl_net:caif_netlink_parms(): no params data found [ 257.956340][ T9909] sctp: [Deprecated]: syz.3.2081 (pid 9909) Use of int in max_burst socket option deprecated. [ 257.956340][ T9909] Use struct sctp_assoc_value instead [ 257.990161][ T9913] netlink: 'syz.1.2080': attribute type 10 has an invalid length. [ 258.004029][ T9922] netlink: 'syz.0.2084': attribute type 27 has an invalid length. [ 258.023808][ T9922] netlink: 'syz.0.2084': attribute type 3 has an invalid length. [ 258.041981][ T9913] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2080'. [ 258.042674][ T9922] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2084'. [ 258.170132][ T9922] netlink: 'syz.0.2084': attribute type 21 has an invalid length. [ 258.185750][ T9922] IPv6: NLM_F_CREATE should be specified when creating new route [ 258.196587][ T9922] IPv6: Can't replace route, no match found [ 258.405940][ T9931] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x31 [ 258.450659][ T9937] sctp: [Deprecated]: syz.3.2087 (pid 9937) Use of int in max_burst socket option deprecated. [ 258.450659][ T9937] Use struct sctp_assoc_value instead [ 258.542830][ T9885] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.554428][ T9885] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.564785][ T9885] device bridge_slave_0 entered promiscuous mode [ 258.602496][ T9885] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.613319][ T9885] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.659700][ T9885] device bridge_slave_1 entered promiscuous mode [ 258.869716][ T9885] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 258.898896][ T4173] Bluetooth: hci3: command 0x0409 tx timeout [ 259.046602][ T9885] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 259.103808][ T9958] netlink: 'syz.3.2091': attribute type 10 has an invalid length. [ 259.122474][ T9958] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2091'. [ 259.168972][ T9958] device caif0 entered promiscuous mode [ 259.199945][ T9958] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 259.272023][ T9885] team0: Port device team_slave_0 added [ 259.387690][ T9885] team0: Port device team_slave_1 added [ 259.585588][ T9968] netlink: 'syz.3.2094': attribute type 10 has an invalid length. [ 259.609044][ T9968] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2094'. [ 259.702430][ T9885] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 259.718925][ T9885] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.835004][ T9885] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 259.908927][ T9885] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 259.949025][ T9885] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.080549][ T9885] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 260.195727][ T9982] sctp: [Deprecated]: syz.0.2097 (pid 9982) Use of int in max_burst socket option deprecated. [ 260.195727][ T9982] Use struct sctp_assoc_value instead [ 260.302902][ T7049] device hsr_slave_0 left promiscuous mode [ 260.330249][ T7049] device hsr_slave_1 left promiscuous mode [ 260.346276][ T7049] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 260.367595][ T7049] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 260.394540][ T7049] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 260.402081][ T9995] sctp: [Deprecated]: syz.1.2099 (pid 9995) Use of int in max_burst socket option deprecated. [ 260.402081][ T9995] Use struct sctp_assoc_value instead [ 260.425663][ T7049] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 260.440275][ T7049] device veth1_macvtap left promiscuous mode [ 260.446943][ T7049] device veth0_macvtap left promiscuous mode [ 260.822377][ T7049] team0 (unregistering): Port device team_slave_1 removed [ 260.838777][ T7049] team0 (unregistering): Port device team_slave_0 removed [ 260.956605][ T9885] device hsr_slave_0 entered promiscuous mode [ 260.964814][ T9885] device hsr_slave_1 entered promiscuous mode [ 260.972495][ T9885] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 260.981168][ T9885] Cannot create hsr debugfs directory [ 260.988843][ T7] Bluetooth: hci3: command 0x041b tx timeout [ 261.214212][T10013] delete_channel: no stack [ 261.247435][T10013] delete_channel: no stack [ 261.391474][T10017] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x31 [ 262.604680][T10055] netlink: 'syz.0.2109': attribute type 10 has an invalid length. [ 262.627880][T10055] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2109'. [ 262.642310][T10057] sctp: [Deprecated]: syz.1.2112 (pid 10057) Use of int in max_burst socket option deprecated. [ 262.642310][T10057] Use struct sctp_assoc_value instead [ 262.687245][ T9885] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 262.707915][ T9885] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 262.738036][ T9885] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 262.804596][T10059] sctp: [Deprecated]: syz.3.2113 (pid 10059) Use of int in max_burst socket option deprecated. [ 262.804596][T10059] Use struct sctp_assoc_value instead [ 262.818940][ T9885] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 262.924825][T10066] netlink: 21187 bytes leftover after parsing attributes in process `syz.0.2115'. [ 262.935269][T10066] netlink: 6320 bytes leftover after parsing attributes in process `syz.0.2115'. [ 262.951535][T10066] netlink: 6 bytes leftover after parsing attributes in process `syz.0.2115'. [ 263.040632][T10067] sctp: [Deprecated]: syz.4.2116 (pid 10067) Use of int in max_burst socket option deprecated. [ 263.040632][T10067] Use struct sctp_assoc_value instead [ 263.059096][ T4190] Bluetooth: hci3: command 0x040f tx timeout [ 263.264913][ T9885] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.321066][ T7026] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 263.339602][ T7026] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 263.359041][T10085] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x31 [ 263.363118][ T9885] 8021q: adding VLAN 0 to HW filter on device team0 [ 263.453570][ T7045] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 263.473635][ T7045] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 263.487265][ T7045] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.494564][ T7045] bridge0: port 1(bridge_slave_0) entered forwarding state [ 263.530158][ T7045] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 263.551668][ T7045] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 263.578113][ T7045] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 263.603941][ T7045] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.611193][ T7045] bridge0: port 2(bridge_slave_1) entered forwarding state [ 263.674720][ T7045] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 263.747041][ T7045] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 263.791112][ T7045] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 263.859763][ T7045] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 263.905974][ T7045] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 264.001244][T10108] Q6`Ҙ: renamed from lo [ 264.022589][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 264.032432][T10104] delete_channel: no stack [ 264.039913][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 264.049437][T10104] delete_channel: no stack [ 264.055585][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 264.065029][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 264.094759][ T9885] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 264.159085][ T9885] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 264.207792][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 264.227241][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 264.494560][T10132] sctp: [Deprecated]: syz.0.2127 (pid 10132) Use of int in max_burst socket option deprecated. [ 264.494560][T10132] Use struct sctp_assoc_value instead [ 264.603078][T10135] netlink: 'syz.1.2129': attribute type 10 has an invalid length. [ 264.638854][T10135] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2129'. [ 264.697380][T10140] netlink: 'syz.3.2130': attribute type 7 has an invalid length. [ 264.715736][T10140] netlink: 'syz.3.2130': attribute type 1 has an invalid length. [ 264.731262][T10140] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2130'. [ 264.773216][ T7051] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 264.788369][ T7051] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 264.825207][ T9885] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 264.880253][T10140] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2130'. [ 264.939321][ T7051] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 264.961131][ T7051] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 264.982091][T10146] sctp: [Deprecated]: syz.4.2131 (pid 10146) Use of int in max_burst socket option deprecated. [ 264.982091][T10146] Use struct sctp_assoc_value instead [ 265.042288][ T7023] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 265.059307][ T7023] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 265.108203][ T7023] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 265.117495][ T7023] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 265.139152][ T4243] Bluetooth: hci3: command 0x0419 tx timeout [ 265.156167][ T9885] device veth0_vlan entered promiscuous mode [ 265.197569][ T9885] device veth1_vlan entered promiscuous mode [ 265.283482][ T7026] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 265.309628][ T7026] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 265.349346][ T7026] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 265.376299][ T7026] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 265.403479][ T9885] device veth0_macvtap entered promiscuous mode [ 265.428599][ T7026] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 265.455375][ T9885] device veth1_macvtap entered promiscuous mode [ 265.505255][ T9885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 265.535896][ T9885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.547039][T10165] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x31 [ 265.558853][ T9885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 265.581660][ T9885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.603285][ T9885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 265.626134][ T9885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.650365][ T9885] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 265.669606][ T7026] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 265.686995][ T7026] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 265.706339][ T9885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.748741][ T9885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.768808][ T9885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.786151][ T9885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.797564][ T9885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.808256][ T9885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.820076][ T9885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.847340][ T9885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.860382][ T9885] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 265.882455][ T7026] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 265.895303][ T7026] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 265.918445][ T9885] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.944821][ T9885] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.984212][ T9885] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.015608][ T9885] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.323868][ T7023] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.358735][ T7023] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.369373][ T7051] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 266.492049][ T7023] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.543865][ T7023] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.609253][ T7047] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 266.924567][T10214] sctp: [Deprecated]: syz.0.2144 (pid 10214) Use of int in max_burst socket option deprecated. [ 266.924567][T10214] Use struct sctp_assoc_value instead [ 267.495377][T10234] sctp: [Deprecated]: syz.4.2148 (pid 10234) Use of int in max_burst socket option deprecated. [ 267.495377][T10234] Use struct sctp_assoc_value instead [ 267.688327][T10246] FAULT_INJECTION: forcing a failure. [ 267.688327][T10246] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 267.713871][T10246] CPU: 0 PID: 10246 Comm: syz.1.2152 Not tainted syzkaller #0 [ 267.721414][T10246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 267.731676][T10246] Call Trace: [ 267.735073][T10246] [ 267.738024][T10246] dump_stack_lvl+0x168/0x230 [ 267.742831][T10246] ? lock_chain_count+0x20/0x20 [ 267.747721][T10246] ? show_regs_print_info+0x20/0x20 [ 267.752961][T10246] ? load_image+0x3b0/0x3b0 [ 267.757620][T10246] ? lockdep_hardirqs_on+0x94/0x140 [ 267.762866][T10246] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 267.769336][T10246] should_fail+0x38c/0x4c0 [ 267.773800][T10246] _copy_from_iter+0x22a/0x1150 [ 267.778680][T10246] ? __lock_acquire+0x7c60/0x7c60 [ 267.783742][T10246] ? copy_mc_pipe_to_iter+0x7d0/0x7d0 [ 267.789172][T10246] ? __virt_addr_valid+0x3c6/0x470 [ 267.794312][T10246] ? __phys_addr+0xb6/0x170 [ 267.798931][T10246] ? __phys_addr_symbol+0x2b/0x70 [ 267.804093][T10246] ? __check_object_size+0x30c/0x410 [ 267.809421][T10246] netlink_sendmsg+0x749/0xbc0 [ 267.814229][T10246] ? netlink_getsockopt+0x560/0x560 [ 267.819463][T10246] ? aa_sock_msg_perm+0x94/0x150 [ 267.824435][T10246] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 267.829765][T10246] ? security_socket_sendmsg+0x7c/0xa0 [ 267.835260][T10246] ? netlink_getsockopt+0x560/0x560 [ 267.840620][T10246] ____sys_sendmsg+0x5a2/0x8c0 [ 267.845427][T10246] ? memset+0x1e/0x40 [ 267.849448][T10246] ? __sys_sendmsg_sock+0x30/0x30 [ 267.854710][T10246] ? import_iovec+0x6f/0xa0 [ 267.859256][T10246] ___sys_sendmsg+0x1f0/0x260 [ 267.863978][T10246] ? __sys_sendmsg+0x250/0x250 [ 267.868782][T10246] ? ktime_get_real_ts64+0x420/0x420 [ 267.874120][T10246] ? __fdget+0x18b/0x210 [ 267.878392][T10246] __se_sys_sendmsg+0x190/0x250 [ 267.883406][T10246] ? __x64_sys_sendmsg+0x80/0x80 [ 267.888383][T10246] ? lockdep_hardirqs_on+0x94/0x140 [ 267.893726][T10246] do_syscall_64+0x4c/0xa0 [ 267.898177][T10246] ? clear_bhb_loop+0x30/0x80 [ 267.902890][T10246] ? clear_bhb_loop+0x30/0x80 [ 267.907686][T10246] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 267.913615][T10246] RIP: 0033:0x7fe8b05c8ec9 [ 267.918061][T10246] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 267.937872][T10246] RSP: 002b:00007fe8ae830038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 267.946342][T10246] RAX: ffffffffffffffda RBX: 00007fe8b081ffa0 RCX: 00007fe8b05c8ec9 [ 267.954351][T10246] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000006 [ 267.962358][T10246] RBP: 00007fe8ae830090 R08: 0000000000000000 R09: 0000000000000000 [ 267.970644][T10246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 267.978647][T10246] R13: 00007fe8b0820038 R14: 00007fe8b081ffa0 R15: 00007ffebd9350f8 [ 267.986933][T10246] [ 268.152917][T10259] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2153'. [ 268.318484][T10269] netlink: 'syz.0.2156': attribute type 10 has an invalid length. [ 268.336952][T10269] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2156'. [ 268.555022][T10280] delete_channel: no stack [ 268.566343][T10285] netlink: 'syz.4.2159': attribute type 21 has an invalid length. [ 268.574960][T10285] netlink: 144 bytes leftover after parsing attributes in process `syz.4.2159'. [ 268.704666][T10287] device batadv0 entered promiscuous mode [ 268.829012][T10297] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x31 [ 268.954811][T10302] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x31 [ 269.013781][T10304] sctp: [Deprecated]: syz.1.2166 (pid 10304) Use of int in max_burst socket option deprecated. [ 269.013781][T10304] Use struct sctp_assoc_value instead [ 269.125087][T10313] sctp: [Deprecated]: syz.0.2169 (pid 10313) Use of int in max_burst socket option deprecated. [ 269.125087][T10313] Use struct sctp_assoc_value instead [ 269.356407][T10316] netlink: 'syz.4.2170': attribute type 10 has an invalid length. [ 269.365604][T10316] netlink: 55 bytes leftover after parsing attributes in process `syz.4.2170'. [ 269.811263][T10327] netlink: 'syz.4.2175': attribute type 10 has an invalid length. [ 269.876009][T10330] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2175'. [ 270.134228][T10347] netlink: 'syz.4.2181': attribute type 10 has an invalid length. [ 270.162456][T10347] netlink: 55 bytes leftover after parsing attributes in process `syz.4.2181'. [ 270.191492][T10349] netlink: 'syz.0.2180': attribute type 21 has an invalid length. [ 270.203136][T10349] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2180'. [ 270.239297][T10353] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x31 [ 270.398605][T10361] sctp: [Deprecated]: syz.4.2187 (pid 10361) Use of int in max_burst socket option deprecated. [ 270.398605][T10361] Use struct sctp_assoc_value instead [ 270.598520][T10368] sctp: [Deprecated]: syz.2.2190 (pid 10368) Use of int in max_burst socket option deprecated. [ 270.598520][T10368] Use struct sctp_assoc_value instead [ 271.023947][T10378] netlink: 'syz.2.2195': attribute type 21 has an invalid length. [ 271.033382][T10378] netlink: 'syz.2.2195': attribute type 1 has an invalid length. [ 271.049500][T10378] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2195'. [ 271.080256][T10381] netlink: 'syz.2.2195': attribute type 27 has an invalid length. [ 271.364975][T10394] sctp: [Deprecated]: syz.1.2201 (pid 10394) Use of int in max_burst socket option deprecated. [ 271.364975][T10394] Use struct sctp_assoc_value instead [ 271.622969][T10405] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.2207'. [ 271.698290][T10407] netlink: 'syz.2.2206': attribute type 21 has an invalid length. [ 271.720493][T10407] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2206'. [ 271.767496][T10410] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x31 [ 272.056832][T10427] sctp: [Deprecated]: syz.2.2212 (pid 10427) Use of int in max_burst socket option deprecated. [ 272.056832][T10427] Use struct sctp_assoc_value instead [ 272.383685][T10436] netlink: 'syz.2.2216': attribute type 3 has an invalid length. [ 272.392859][T10436] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2216'. [ 272.629023][T10446] netlink: 'syz.1.2220': attribute type 21 has an invalid length. [ 272.636951][T10446] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2220'. [ 272.714666][T10452] netlink: 'syz.4.2224': attribute type 21 has an invalid length. [ 272.759408][T10452] netlink: 15743 bytes leftover after parsing attributes in process `syz.4.2224'. [ 272.783539][T10454] sctp: [Deprecated]: syz.0.2223 (pid 10454) Use of int in max_burst socket option deprecated. [ 272.783539][T10454] Use struct sctp_assoc_value instead [ 272.834405][T10457] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2225'. [ 273.166913][T10467] bridge0: port 3(bond0) entered blocking state [ 273.174481][T10467] bridge0: port 3(bond0) entered disabled state [ 273.206614][T10467] device bond0 entered promiscuous mode [ 273.213871][T10467] device bond_slave_0 entered promiscuous mode [ 273.223839][T10467] device bond_slave_1 entered promiscuous mode [ 273.238380][T10467] bridge0: port 3(bond0) entered blocking state [ 273.245297][T10467] bridge0: port 3(bond0) entered forwarding state [ 273.270310][T10472] device bond0 left promiscuous mode [ 273.278031][T10472] device bond_slave_0 left promiscuous mode [ 273.284738][T10472] device bond_slave_1 left promiscuous mode [ 273.291811][T10472] bridge0: port 3(bond0) entered disabled state [ 273.585333][T10485] sctp: [Deprecated]: syz.4.2237 (pid 10485) Use of int in max_burst socket option deprecated. [ 273.585333][T10485] Use struct sctp_assoc_value instead [ 273.976694][T10505] team0: Device geneve1 is up. Set it down before adding it as a team port [ 274.497938][T10515] sctp: [Deprecated]: syz.2.2249 (pid 10515) Use of int in max_burst socket option deprecated. [ 274.497938][T10515] Use struct sctp_assoc_value instead [ 275.085634][T10541] sctp: [Deprecated]: syz.4.2257 (pid 10541) Use of int in max_burst socket option deprecated. [ 275.085634][T10541] Use struct sctp_assoc_value instead [ 275.544057][T10554] sctp: [Deprecated]: syz.3.2261 (pid 10554) Use of int in max_burst socket option deprecated. [ 275.544057][T10554] Use struct sctp_assoc_value instead [ 275.815680][T10571] sctp: [Deprecated]: syz.0.2266 (pid 10571) Use of int in max_burst socket option deprecated. [ 275.815680][T10571] Use struct sctp_assoc_value instead [ 275.856795][T10573] validate_nla: 4 callbacks suppressed [ 275.856831][T10573] netlink: 'syz.3.2269': attribute type 21 has an invalid length. [ 275.912272][T10573] __nla_validate_parse: 2 callbacks suppressed [ 275.912326][T10573] netlink: 15743 bytes leftover after parsing attributes in process `syz.3.2269'. [ 276.460541][T10597] sctp: [Deprecated]: syz.2.2278 (pid 10597) Use of int in max_burst socket option deprecated. [ 276.460541][T10597] Use struct sctp_assoc_value instead [ 276.811209][T10608] sctp: [Deprecated]: syz.1.2282 (pid 10608) Use of int in max_burst socket option deprecated. [ 276.811209][T10608] Use struct sctp_assoc_value instead [ 277.085806][T10616] netlink: 'syz.0.2286': attribute type 3 has an invalid length. [ 277.516253][T10632] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 277.865292][T10644] sctp: [Deprecated]: syz.0.2294 (pid 10644) Use of int in max_burst socket option deprecated. [ 277.865292][T10644] Use struct sctp_assoc_value instead [ 278.009575][T10652] sctp: [Deprecated]: syz.2.2296 (pid 10652) Use of int in max_burst socket option deprecated. [ 278.009575][T10652] Use struct sctp_assoc_value instead [ 278.446823][T10656] netlink: 'syz.3.2298': attribute type 21 has an invalid length. [ 278.459383][T10656] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2298'. [ 278.622761][T10662] netlink: 'syz.3.2301': attribute type 2 has an invalid length. [ 279.016882][T10675] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2305'. [ 279.150443][T10678] netlink: 'syz.0.2307': attribute type 39 has an invalid length. [ 279.411006][T10685] netlink: 'syz.0.2311': attribute type 10 has an invalid length. [ 279.488965][T10685] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2311'. [ 279.802001][T10693] sctp: [Deprecated]: syz.1.2313 (pid 10693) Use of int in max_burst socket option deprecated. [ 279.802001][T10693] Use struct sctp_assoc_value instead [ 279.943572][T10701] sctp: [Deprecated]: syz.0.2314 (pid 10701) Use of int in max_burst socket option deprecated. [ 279.943572][T10701] Use struct sctp_assoc_value instead [ 280.608923][T10703] netlink: 'syz.3.2318': attribute type 21 has an invalid length. [ 280.631709][T10703] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2318'. [ 280.677363][T10703] netlink: 'syz.3.2318': attribute type 5 has an invalid length. [ 280.713339][T10706] netlink: 'syz.1.2316': attribute type 2 has an invalid length. [ 280.749083][T10711] netlink: 'syz.4.2319': attribute type 11 has an invalid length. [ 280.778366][T10711] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2319'. [ 280.969986][T10706] bridge0: port 3(bond0) entered blocking state [ 281.000779][T10706] bridge0: port 3(bond0) entered disabled state [ 281.051525][T10706] device bond0 entered promiscuous mode [ 281.107297][T10706] device bond_slave_0 entered promiscuous mode [ 281.133892][T10706] device bond_slave_1 entered promiscuous mode [ 281.184883][T10706] bridge0: port 3(bond0) entered blocking state [ 281.191385][T10706] bridge0: port 3(bond0) entered forwarding state [ 281.300356][T10709] device bond0 left promiscuous mode [ 281.335302][T10709] device bond_slave_0 left promiscuous mode [ 281.357822][T10709] device bond_slave_1 left promiscuous mode [ 281.408130][T10709] bridge0: port 3(bond0) entered disabled state [ 281.455749][T10725] netlink: 'syz.3.2324': attribute type 10 has an invalid length. [ 281.468541][T10725] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2324'. [ 281.481198][T10727] netlink: 'syz.0.2325': attribute type 8 has an invalid length. [ 281.491642][T10727] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2325'. [ 281.560237][T10729] sctp: [Deprecated]: syz.2.2326 (pid 10729) Use of int in max_burst socket option deprecated. [ 281.560237][T10729] Use struct sctp_assoc_value instead [ 281.811595][T10736] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2329'. [ 281.853066][T10732] netlink: 'syz.1.2327': attribute type 3 has an invalid length. [ 281.884882][T10732] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2327'. [ 283.394761][T10778] netlink: 'syz.2.2340': attribute type 7 has an invalid length. [ 283.564451][T10780] netlink: 'syz.0.2342': attribute type 10 has an invalid length. [ 283.584841][T10780] device macvlan0 entered promiscuous mode [ 283.606408][T10785] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x31 [ 284.042162][T10797] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x31 [ 284.119998][T10798] sctp: [Deprecated]: syz.0.2349 (pid 10798) Use of int in max_burst socket option deprecated. [ 284.119998][T10798] Use struct sctp_assoc_value instead [ 284.477909][T10812] netlink: 10 bytes leftover after parsing attributes in process `syz.4.2353'. [ 284.923811][T10825] netlink: 'syz.3.2357': attribute type 10 has an invalid length. [ 284.937098][T10825] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2357'. [ 284.956287][T10827] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2358'. [ 284.978824][T10827] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 285.056382][T10827] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 285.150713][T10827] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2358'. [ 285.278135][T10838] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x31 [ 285.513135][T10842] netlink: 'syz.2.2364': attribute type 3 has an invalid length. [ 285.584018][T10842] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2364'. [ 285.654979][T10844] FAULT_INJECTION: forcing a failure. [ 285.654979][T10844] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 285.677561][T10844] CPU: 0 PID: 10844 Comm: syz.4.2365 Not tainted syzkaller #0 [ 285.685134][T10844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 285.695266][T10844] Call Trace: [ 285.698599][T10844] [ 285.701585][T10844] dump_stack_lvl+0x168/0x230 [ 285.706534][T10844] ? show_regs_print_info+0x20/0x20 [ 285.711807][T10844] ? load_image+0x3b0/0x3b0 [ 285.716442][T10844] ? __lock_acquire+0x7c60/0x7c60 [ 285.721525][T10844] ? trace_call_bpf+0x509/0x5a0 [ 285.726484][T10844] should_fail+0x38c/0x4c0 [ 285.731008][T10844] _copy_from_user+0x2e/0x170 [ 285.735776][T10844] __copy_msghdr_from_user+0xaf/0x5e0 [ 285.741244][T10844] ? perf_trace_run_bpf_submit+0x124/0x1c0 [ 285.747310][T10844] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 285.752732][T10844] ? trace_event_raw_event_lock+0x250/0x250 [ 285.758728][T10844] ___sys_sendmsg+0x156/0x260 [ 285.763539][T10844] ? __sys_sendmsg+0x250/0x250 [ 285.768560][T10844] ? trace_event_raw_event_lock+0x250/0x250 [ 285.774516][T10844] ? vfs_write+0x84d/0xd00 [ 285.779122][T10844] ? __fdget+0x18b/0x210 [ 285.783449][T10844] __se_sys_sendmsg+0x190/0x250 [ 285.788392][T10844] ? __x64_sys_sendmsg+0x80/0x80 [ 285.793398][T10844] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 285.799654][T10844] ? lockdep_hardirqs_on+0x94/0x140 [ 285.805051][T10844] do_syscall_64+0x4c/0xa0 [ 285.809527][T10844] ? clear_bhb_loop+0x30/0x80 [ 285.814260][T10844] ? clear_bhb_loop+0x30/0x80 [ 285.819103][T10844] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 285.825054][T10844] RIP: 0033:0x7fbc203c9ec9 [ 285.829537][T10844] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 285.849225][T10844] RSP: 002b:00007fbc1e631038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 285.857718][T10844] RAX: ffffffffffffffda RBX: 00007fbc20620fa0 RCX: 00007fbc203c9ec9 [ 285.865757][T10844] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000d [ 285.873793][T10844] RBP: 00007fbc1e631090 R08: 0000000000000000 R09: 0000000000000000 [ 285.881828][T10844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 285.890057][T10844] R13: 00007fbc20621038 R14: 00007fbc20620fa0 R15: 00007ffe05ee4828 [ 285.898340][T10844] [ 286.275800][T10850] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2368'. [ 286.315914][T10854] netlink: 'syz.3.2370': attribute type 10 has an invalid length. [ 286.382607][T10855] netlink: 'syz.1.2367': attribute type 3 has an invalid length. [ 286.525943][T10855] __nla_validate_parse: 1 callbacks suppressed [ 286.525964][T10855] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2367'. [ 286.983391][T10868] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2374'. [ 287.040634][T10871] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.050258][T10871] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.330848][T10887] netlink: 'syz.3.2381': attribute type 10 has an invalid length. [ 287.358868][T10887] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2381'. [ 287.806044][T10897] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2387'. [ 288.164292][T10913] netlink: 'syz.0.2393': attribute type 2 has an invalid length. [ 288.174102][T10913] netlink: 'syz.0.2393': attribute type 4 has an invalid length. [ 288.183363][T10913] netlink: 'syz.0.2393': attribute type 8 has an invalid length. [ 288.192681][T10913] netlink: 'syz.0.2393': attribute type 9 has an invalid length. [ 288.200893][T10913] netlink: 'syz.0.2393': attribute type 10 has an invalid length. [ 288.209525][T10913] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2393'. [ 288.245448][T10915] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2391'. [ 288.330465][T10915] openvswitch: netlink: Tunnel attr 9327 out of range max 16 [ 288.550405][T10918] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.560301][T10918] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.706944][T10925] netlink: 'syz.1.2397': attribute type 10 has an invalid length. [ 288.741426][T10925] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2397'. [ 288.983457][T10942] FAULT_INJECTION: forcing a failure. [ 288.983457][T10942] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 289.063135][T10942] CPU: 1 PID: 10942 Comm: syz.1.2402 Not tainted syzkaller #0 [ 289.070660][T10942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 289.080928][T10942] Call Trace: [ 289.084245][T10942] [ 289.087227][T10942] dump_stack_lvl+0x168/0x230 [ 289.091960][T10942] ? show_regs_print_info+0x20/0x20 [ 289.097214][T10942] ? load_image+0x3b0/0x3b0 [ 289.101773][T10942] ? __lock_acquire+0x7c60/0x7c60 [ 289.106854][T10942] ? __rwlock_init+0x140/0x140 [ 289.111660][T10942] ? _raw_spin_lock_irqsave+0x7f/0xf0 [ 289.117081][T10942] should_fail+0x38c/0x4c0 [ 289.121563][T10942] prepare_alloc_pages+0x1e4/0x5f0 [ 289.126742][T10942] __alloc_pages+0x10e/0x470 [ 289.131379][T10942] ? zone_statistics+0x170/0x170 [ 289.136366][T10942] ? memset+0x1e/0x40 [ 289.140503][T10942] __get_free_pages+0x8/0x30 [ 289.145131][T10942] __genradix_ptr_alloc+0xda/0x350 [ 289.150296][T10942] __genradix_prealloc+0x3e/0x80 [ 289.155280][T10942] sctp_stream_init+0x139/0x400 [ 289.160176][T10942] sctp_association_new+0x10db/0x24a0 [ 289.165589][T10942] sctp_connect_new_asoc+0x2bb/0x690 [ 289.170907][T10942] ? __sctp_connect+0xd20/0xd20 [ 289.175782][T10942] ? __local_bh_enable_ip+0x12a/0x1b0 [ 289.181171][T10942] ? _local_bh_enable+0xa0/0xa0 [ 289.186050][T10942] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 289.191704][T10942] ? security_sctp_bind_connect+0x85/0xb0 [ 289.197538][T10942] sctp_sendmsg+0x15e0/0x2950 [ 289.202271][T10942] ? aa_sk_perm+0x7b4/0x8f0 [ 289.206948][T10942] ? sctp_getsockopt+0x8a0/0x8a0 [ 289.211903][T10942] ? aa_af_perm+0x2b0/0x2b0 [ 289.216420][T10942] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 289.223155][T10942] ? sock_rps_record_flow+0x17/0x3b0 [ 289.228457][T10942] ? inet_send_prepare+0x260/0x260 [ 289.233591][T10942] ? inet_sendmsg+0x78/0x2f0 [ 289.238195][T10942] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 289.243589][T10942] ? security_socket_sendmsg+0x7c/0xa0 [ 289.249066][T10942] ? inet_send_prepare+0x260/0x260 [ 289.254207][T10942] ____sys_sendmsg+0x5a2/0x8c0 [ 289.259015][T10942] ? memset+0x1e/0x40 [ 289.263023][T10942] ? __sys_sendmsg_sock+0x30/0x30 [ 289.268067][T10942] ? import_iovec+0x6f/0xa0 [ 289.272586][T10942] ___sys_sendmsg+0x1f0/0x260 [ 289.277282][T10942] ? __sys_sendmsg+0x250/0x250 [ 289.282067][T10942] ? trace_event_raw_event_lock+0x250/0x250 [ 289.287987][T10942] ? vfs_write+0x84d/0xd00 [ 289.292433][T10942] ? __fdget+0x18b/0x210 [ 289.296683][T10942] __se_sys_sendmsg+0x190/0x250 [ 289.301559][T10942] ? __x64_sys_sendmsg+0x80/0x80 [ 289.306508][T10942] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 289.312508][T10942] ? lockdep_hardirqs_on+0x94/0x140 [ 289.317718][T10942] do_syscall_64+0x4c/0xa0 [ 289.322141][T10942] ? clear_bhb_loop+0x30/0x80 [ 289.326823][T10942] ? clear_bhb_loop+0x30/0x80 [ 289.331512][T10942] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 289.337414][T10942] RIP: 0033:0x7fe8b05c8ec9 [ 289.341842][T10942] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 289.361730][T10942] RSP: 002b:00007fe8ae830038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 289.370184][T10942] RAX: ffffffffffffffda RBX: 00007fe8b081ffa0 RCX: 00007fe8b05c8ec9 [ 289.378173][T10942] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000003 [ 289.386334][T10942] RBP: 00007fe8ae830090 R08: 0000000000000000 R09: 0000000000000000 [ 289.394317][T10942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 289.402298][T10942] R13: 00007fe8b0820038 R14: 00007fe8b081ffa0 R15: 00007ffebd9350f8 [ 289.410321][T10942] [ 289.913129][T10968] netlink: 'syz.3.2411': attribute type 11 has an invalid length. [ 289.933383][T10968] netlink: 176 bytes leftover after parsing attributes in process `syz.3.2411'. [ 289.966942][T10972] netlink: 'syz.1.2409': attribute type 2 has an invalid length. [ 289.992758][T10972] netlink: 'syz.1.2409': attribute type 1 has an invalid length. [ 290.041288][T10972] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2409'. [ 290.108187][T10974] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2409'. [ 290.162171][T10977] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 290.220003][T10982] sctp: [Deprecated]: syz.3.2414 (pid 10982) Use of int in max_burst socket option deprecated. [ 290.220003][T10982] Use struct sctp_assoc_value instead [ 291.068038][T11003] device sit0 entered promiscuous mode [ 291.451351][T11023] sctp: [Deprecated]: syz.4.2428 (pid 11023) Use of int in max_burst socket option deprecated. [ 291.451351][T11023] Use struct sctp_assoc_value instead [ 291.920949][T11038] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x31 [ 292.799698][T11064] validate_nla: 4 callbacks suppressed [ 292.799719][T11064] netlink: 'syz.3.2443': attribute type 10 has an invalid length. [ 292.846146][T11064] __nla_validate_parse: 2 callbacks suppressed [ 292.846167][T11064] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2443'. [ 292.990026][T11068] sctp: [Deprecated]: syz.2.2445 (pid 11068) Use of int in max_burst socket option deprecated. [ 292.990026][T11068] Use struct sctp_assoc_value instead [ 293.137365][T11072] netlink: 'syz.1.2446': attribute type 9 has an invalid length. [ 293.149799][T11072] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2446'. [ 293.830186][T11092] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x31 [ 293.989649][T11090] FAULT_INJECTION: forcing a failure. [ 293.989649][T11090] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 294.039304][T11090] CPU: 1 PID: 11090 Comm: syz.4.2454 Not tainted syzkaller #0 [ 294.046837][T11090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 294.056932][T11090] Call Trace: [ 294.060278][T11090] [ 294.063229][T11090] dump_stack_lvl+0x168/0x230 [ 294.067940][T11090] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 294.074122][T11090] ? show_regs_print_info+0x20/0x20 [ 294.079345][T11090] ? _printk+0xfd/0x110 [ 294.083563][T11090] should_fail+0x38c/0x4c0 [ 294.088009][T11090] _copy_from_user+0x2e/0x170 [ 294.092811][T11090] __sys_bpf+0x21b/0x670 [ 294.097172][T11090] ? bpf_link_show_fdinfo+0x340/0x340 [ 294.102600][T11090] __x64_sys_bpf+0x78/0x90 [ 294.107048][T11090] do_syscall_64+0x4c/0xa0 [ 294.111489][T11090] ? clear_bhb_loop+0x30/0x80 [ 294.116280][T11090] ? clear_bhb_loop+0x30/0x80 [ 294.120983][T11090] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 294.126995][T11090] RIP: 0033:0x7fbc203c9ec9 [ 294.131435][T11090] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 294.151499][T11090] RSP: 002b:00007fbc1e631038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 294.159939][T11090] RAX: ffffffffffffffda RBX: 00007fbc20620fa0 RCX: 00007fbc203c9ec9 [ 294.167927][T11090] RDX: 0000000000000070 RSI: 0000200000000440 RDI: 0000000000000005 [ 294.175911][T11090] RBP: 00007fbc1e631090 R08: 0000000000000000 R09: 0000000000000000 [ 294.183901][T11090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 294.191893][T11090] R13: 00007fbc20621038 R14: 00007fbc20620fa0 R15: 00007ffe05ee4828 [ 294.200001][T11090] [ 294.463599][T11104] netlink: 'syz.1.2458': attribute type 10 has an invalid length. [ 294.506062][T11104] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2458'. [ 294.782462][T11115] netlink: 'syz.1.2462': attribute type 2 has an invalid length. [ 295.065084][T11130] sctp: [Deprecated]: syz.3.2467 (pid 11130) Use of int in max_burst socket option deprecated. [ 295.065084][T11130] Use struct sctp_assoc_value instead [ 295.072683][T11122] netlink: 203516 bytes leftover after parsing attributes in process `syz.4.2466'. [ 295.093720][T11122] netlink: 6332 bytes leftover after parsing attributes in process `syz.4.2466'. [ 295.404766][T11142] netlink: 'syz.1.2473': attribute type 10 has an invalid length. [ 295.443615][T11142] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2473'. [ 295.673601][T11152] netlink: 'syz.3.2477': attribute type 9 has an invalid length. [ 295.725680][T11152] netlink: 204732 bytes leftover after parsing attributes in process `syz.3.2477'. [ 295.742022][T11156] netlink: 'syz.2.2479': attribute type 2 has an invalid length. [ 295.944423][T11159] FAULT_INJECTION: forcing a failure. [ 295.944423][T11159] name failslab, interval 1, probability 0, space 0, times 0 [ 296.031744][T11159] CPU: 0 PID: 11159 Comm: syz.0.2480 Not tainted syzkaller #0 [ 296.039279][T11159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 296.049372][T11159] Call Trace: [ 296.052677][T11159] [ 296.055625][T11159] dump_stack_lvl+0x168/0x230 [ 296.060332][T11159] ? lockdep_hardirqs_on+0x94/0x140 [ 296.065584][T11159] ? show_regs_print_info+0x20/0x20 [ 296.070829][T11159] ? audit_tree_destroy_watch+0x20/0x20 [ 296.076413][T11159] should_fail+0x38c/0x4c0 [ 296.080876][T11159] should_failslab+0x5/0x20 [ 296.085412][T11159] slab_pre_alloc_hook+0x51/0xc0 [ 296.090382][T11159] ? sockfs_init_fs_context+0xa0/0xa0 [ 296.095889][T11159] ? sock_alloc_inode+0x17/0xb0 [ 296.100776][T11159] kmem_cache_alloc+0x3d/0x290 [ 296.105575][T11159] ? sockfs_init_fs_context+0xa0/0xa0 [ 296.111054][T11159] sock_alloc_inode+0x17/0xb0 [ 296.115850][T11159] ? sockfs_init_fs_context+0xa0/0xa0 [ 296.121265][T11159] new_inode_pseudo+0x5f/0x210 [ 296.126075][T11159] __sock_create+0x129/0x900 [ 296.130702][T11159] __sys_socketpair+0x1bd/0x540 [ 296.135579][T11159] __x64_sys_socketpair+0x97/0xb0 [ 296.140655][T11159] do_syscall_64+0x4c/0xa0 [ 296.145087][T11159] ? clear_bhb_loop+0x30/0x80 [ 296.149777][T11159] ? clear_bhb_loop+0x30/0x80 [ 296.154481][T11159] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 296.160394][T11159] RIP: 0033:0x7f40bb3feec9 [ 296.164828][T11159] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 296.184547][T11159] RSP: 002b:00007f40b9666038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 296.193412][T11159] RAX: ffffffffffffffda RBX: 00007f40bb655fa0 RCX: 00007f40bb3feec9 [ 296.201400][T11159] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000028 [ 296.209380][T11159] RBP: 00007f40b9666090 R08: 0000000000000000 R09: 0000000000000000 [ 296.217363][T11159] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 296.225437][T11159] R13: 00007f40bb656038 R14: 00007f40bb655fa0 R15: 00007ffc7ec2eda8 [ 296.233437][T11159] [ 296.349592][T11159] socket: no more sockets [ 296.727182][T11179] sctp: [Deprecated]: syz.4.2487 (pid 11179) Use of int in max_burst socket option deprecated. [ 296.727182][T11179] Use struct sctp_assoc_value instead [ 297.314554][T11203] netlink: 'syz.4.2497': attribute type 9 has an invalid length. [ 297.335303][T11203] netlink: 204732 bytes leftover after parsing attributes in process `syz.4.2497'. [ 297.719180][T11217] sctp: [Deprecated]: syz.2.2502 (pid 11217) Use of int in max_burst socket option deprecated. [ 297.719180][T11217] Use struct sctp_assoc_value instead [ 297.944137][T11229] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.2508'. [ 298.093296][T11229] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 298.157491][T11229] CPU: 1 PID: 11229 Comm: syz.4.2508 Not tainted syzkaller #0 [ 298.165046][T11229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 298.175159][T11229] Call Trace: [ 298.178486][T11229] [ 298.181458][T11229] dump_stack_lvl+0x168/0x230 [ 298.186212][T11229] ? show_regs_print_info+0x20/0x20 [ 298.191480][T11229] ? load_image+0x3b0/0x3b0 [ 298.196089][T11229] sysfs_warn_dup+0x8a/0xa0 [ 298.200648][T11229] sysfs_do_create_link_sd+0xc0/0x110 [ 298.206081][T11229] device_add+0x7ed/0xfb0 [ 298.210515][T11229] wiphy_register+0x1d67/0x2b20 [ 298.215498][T11229] ? cfg80211_event_work+0x40/0x40 [ 298.220662][T11229] ? minstrel_ht_alloc+0x808/0x980 [ 298.225860][T11229] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 298.232012][T11229] ieee80211_register_hw+0x29b1/0x39d0 [ 298.237606][T11229] ? ieee80211_tasklet_handler+0x20/0x20 [ 298.243330][T11229] ? rcu_is_watching+0x11/0xa0 [ 298.248161][T11229] ? memset+0x1e/0x40 [ 298.252202][T11229] ? hrtimer_init+0x10c/0x220 [ 298.256958][T11229] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 298.262808][T11229] hwsim_new_radio_nl+0xa6f/0xc40 [ 298.267954][T11229] genl_rcv_msg+0xbc6/0xf40 [ 298.272568][T11229] ? genl_bind+0x370/0x370 [ 298.277165][T11229] ? __bpf_trace_bpf_trace_printk+0x20/0x20 [ 298.283134][T11229] ? verify_lock_unused+0x140/0x140 [ 298.288398][T11229] ? __dev_queue_xmit+0x1bc5/0x2ed0 [ 298.293681][T11229] ? perf_trace_run_bpf_submit+0x124/0x1c0 [ 298.299572][T11229] ? perf_trace_lock+0x2ec/0x370 [ 298.304684][T11229] ? hwsim_tx_info_frame_received_nl+0x1010/0x1010 [ 298.311308][T11229] netlink_rcv_skb+0x1e0/0x430 [ 298.316146][T11229] ? genl_bind+0x370/0x370 [ 298.320819][T11229] ? netlink_ack+0xb60/0xb60 [ 298.325482][T11229] ? __lock_acquire+0x7c60/0x7c60 [ 298.330580][T11229] ? preempt_count_add+0x8d/0x190 [ 298.335728][T11229] ? down_read+0x1aa/0x2e0 [ 298.340221][T11229] genl_rcv+0x24/0x40 [ 298.344303][T11229] netlink_unicast+0x774/0x920 [ 298.349168][T11229] netlink_sendmsg+0x8ab/0xbc0 [ 298.354033][T11229] ? netlink_getsockopt+0x560/0x560 [ 298.359298][T11229] ? aa_sock_msg_perm+0x94/0x150 [ 298.364312][T11229] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 298.369652][T11229] ? security_socket_sendmsg+0x7c/0xa0 [ 298.375182][T11229] ? netlink_getsockopt+0x560/0x560 [ 298.380463][T11229] ____sys_sendmsg+0x5a2/0x8c0 [ 298.385350][T11229] ? memset+0x1e/0x40 [ 298.389400][T11229] ? __sys_sendmsg_sock+0x30/0x30 [ 298.394528][T11229] ? import_iovec+0x6f/0xa0 [ 298.399108][T11229] ___sys_sendmsg+0x1f0/0x260 [ 298.404071][T11229] ? __sys_sendmsg+0x250/0x250 [ 298.408948][T11229] ? trace_event_raw_event_lock+0x250/0x250 [ 298.414983][T11229] ? __fdget+0x18b/0x210 [ 298.419381][T11229] __se_sys_sendmsg+0x190/0x250 [ 298.424322][T11229] ? __x64_sys_sendmsg+0x80/0x80 [ 298.429334][T11229] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 298.435446][T11229] ? lockdep_hardirqs_on+0x94/0x140 [ 298.440725][T11229] do_syscall_64+0x4c/0xa0 [ 298.445282][T11229] ? clear_bhb_loop+0x30/0x80 [ 298.450019][T11229] ? clear_bhb_loop+0x30/0x80 [ 298.454764][T11229] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 298.460727][T11229] RIP: 0033:0x7fbc203c9ec9 [ 298.465200][T11229] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 298.485005][T11229] RSP: 002b:00007fbc1e631038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 298.493486][T11229] RAX: ffffffffffffffda RBX: 00007fbc20620fa0 RCX: 00007fbc203c9ec9 [ 298.501517][T11229] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 298.509643][T11229] RBP: 00007fbc2044cf91 R08: 0000000000000000 R09: 0000000000000000 [ 298.517671][T11229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 298.525698][T11229] R13: 00007fbc20621038 R14: 00007fbc20620fa0 R15: 00007ffe05ee4828 [ 298.533794][T11229] [ 298.851616][T11236] netlink: 56537 bytes leftover after parsing attributes in process `syz.0.2509'. [ 299.214794][T11240] device sit0 entered promiscuous mode [ 300.137050][T11270] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2517'. [ 300.212564][T11276] sctp: [Deprecated]: syz.3.2520 (pid 11276) Use of int in max_burst socket option deprecated. [ 300.212564][T11276] Use struct sctp_assoc_value instead [ 300.445444][T11282] sctp: [Deprecated]: syz.0.2522 (pid 11282) Use of int in max_burst socket option deprecated. [ 300.445444][T11282] Use struct sctp_assoc_value instead [ 300.656096][T11289] netlink: 'syz.3.2525': attribute type 10 has an invalid length. [ 300.672207][T11289] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2525'. [ 300.778359][T11293] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2526'. [ 301.361223][T11304] netlink: 'syz.4.2531': attribute type 2 has an invalid length. [ 301.547136][T11311] netlink: 'syz.2.2533': attribute type 10 has an invalid length. [ 301.633626][T11311] device hsr0 entered promiscuous mode [ 302.355695][T11311] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 302.368259][T11311] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 302.378874][T11311] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 302.391330][T11311] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 302.402132][T11322] netlink: 'syz.4.2537': attribute type 10 has an invalid length. [ 302.419234][T11322] netlink: 55 bytes leftover after parsing attributes in process `syz.4.2537'. [ 303.016541][T11349] sctp: [Deprecated]: syz.0.2543 (pid 11349) Use of int in max_burst socket option deprecated. [ 303.016541][T11349] Use struct sctp_assoc_value instead [ 303.048133][T11342] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2542'. [ 303.503222][T11361] netlink: 'syz.2.2545': attribute type 2 has an invalid length. [ 303.945118][T11369] netlink: 763 bytes leftover after parsing attributes in process `syz.3.2550'. [ 304.467014][T11389] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2558'. [ 304.613883][T11392] netlink: 'syz.2.2559': attribute type 39 has an invalid length. [ 304.727137][T11400] netlink: 'syz.0.2561': attribute type 10 has an invalid length. [ 305.108501][T11412] sctp: [Deprecated]: syz.4.2562 (pid 11412) Use of int in max_burst socket option deprecated. [ 305.108501][T11412] Use struct sctp_assoc_value instead [ 305.407742][T11400] device veth0_vlan left promiscuous mode [ 305.428104][T11400] device veth0_vlan entered promiscuous mode [ 305.457476][T11400] team0: Device veth0_vlan failed to register rx_handler [ 305.545727][T11403] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2561'. [ 305.772741][T11414] netlink: 'syz.3.2564': attribute type 29 has an invalid length. [ 305.839167][T11414] netlink: 'syz.3.2564': attribute type 29 has an invalid length. [ 305.877416][T11417] sctp: [Deprecated]: syz.0.2563 (pid 11417) Use of int in max_burst socket option deprecated. [ 305.877416][T11417] Use struct sctp_assoc_value instead [ 305.901109][T11419] netlink: 'syz.3.2564': attribute type 29 has an invalid length. [ 306.580965][T11448] netlink: 'syz.2.2575': attribute type 10 has an invalid length. [ 306.610255][T11448] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.617729][T11448] bridge0: port 2(bridge_slave_1) entered forwarding state [ 306.627105][T11448] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.634292][T11448] bridge0: port 1(bridge_slave_0) entered forwarding state [ 306.670837][T11448] team0: Port device bridge0 added [ 306.697896][ T7045] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 306.727091][T11450] sctp: [Deprecated]: syz.3.2576 (pid 11450) Use of int in max_burst socket option deprecated. [ 306.727091][T11450] Use struct sctp_assoc_value instead [ 306.860759][T11458] netlink: 'syz.2.2580': attribute type 10 has an invalid length. [ 306.895474][T11458] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2580'. [ 306.966696][T11460] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2578'. [ 307.485013][T11478] FAULT_INJECTION: forcing a failure. [ 307.485013][T11478] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 307.539195][T11478] CPU: 0 PID: 11478 Comm: syz.2.2586 Not tainted syzkaller #0 [ 307.546741][T11478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 307.557003][T11478] Call Trace: [ 307.560321][T11478] [ 307.563286][T11478] dump_stack_lvl+0x168/0x230 [ 307.568011][T11478] ? show_regs_print_info+0x20/0x20 [ 307.573431][T11478] ? load_image+0x3b0/0x3b0 [ 307.577987][T11478] ? __lock_acquire+0x7c60/0x7c60 [ 307.583049][T11478] should_fail+0x38c/0x4c0 [ 307.587547][T11478] _copy_to_user+0x2e/0x130 [ 307.592095][T11478] simple_read_from_buffer+0xe3/0x150 [ 307.597534][T11478] proc_fail_nth_read+0x19a/0x210 [ 307.603093][T11478] ? proc_fault_inject_write+0x2f0/0x2f0 [ 307.608771][T11478] ? fsnotify_perm+0x254/0x560 [ 307.613580][T11478] ? proc_fault_inject_write+0x2f0/0x2f0 [ 307.619357][T11478] vfs_read+0x2f6/0xcf0 [ 307.623680][T11478] ? kernel_read+0x1e0/0x1e0 [ 307.628330][T11478] ? __fget_files+0x40f/0x480 [ 307.633045][T11478] ? mutex_lock_nested+0x17/0x20 [ 307.638007][T11478] ? __fdget_pos+0x2bf/0x370 [ 307.642619][T11478] ? ksys_read+0x71/0x250 [ 307.646987][T11478] ksys_read+0x14d/0x250 [ 307.651413][T11478] ? vfs_write+0xd00/0xd00 [ 307.655860][T11478] ? lockdep_hardirqs_on+0x94/0x140 [ 307.661312][T11478] do_syscall_64+0x4c/0xa0 [ 307.665915][T11478] ? clear_bhb_loop+0x30/0x80 [ 307.670622][T11478] ? clear_bhb_loop+0x30/0x80 [ 307.675343][T11478] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 307.681279][T11478] RIP: 0033:0x7f8fb8ce18dc [ 307.685746][T11478] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 307.705372][T11478] RSP: 002b:00007f8fb6f29030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 307.713837][T11478] RAX: ffffffffffffffda RBX: 00007f8fb8f3a090 RCX: 00007f8fb8ce18dc [ 307.721846][T11478] RDX: 000000000000000f RSI: 00007f8fb6f290a0 RDI: 0000000000000006 [ 307.729853][T11478] RBP: 00007f8fb6f29090 R08: 0000000000000000 R09: 0000000000000000 [ 307.737856][T11478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 307.745870][T11478] R13: 00007f8fb8f3a128 R14: 00007f8fb8f3a090 R15: 00007ffdd1a5de98 [ 307.753891][T11478] [ 308.055155][T11488] sctp: [Deprecated]: syz.2.2589 (pid 11488) Use of int in max_burst socket option deprecated. [ 308.055155][T11488] Use struct sctp_assoc_value instead [ 308.181707][T11491] sctp: [Deprecated]: syz.1.2591 (pid 11491) Use of int in max_burst socket option deprecated. [ 308.181707][T11491] Use struct sctp_assoc_value instead [ 308.377599][T11501] netlink: 'syz.2.2593': attribute type 10 has an invalid length. [ 308.388842][T11501] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2593'. [ 308.657108][T11482] chnl_net:caif_netlink_parms(): no params data found [ 308.960362][T11482] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.001074][T11482] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.043189][T11482] device bridge_slave_0 entered promiscuous mode [ 309.061599][T11482] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.074556][T11482] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.099215][T11482] device bridge_slave_1 entered promiscuous mode [ 309.212637][T11482] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 309.265096][T11482] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 309.384580][ T7026] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 309.538436][T11482] team0: Port device team_slave_0 added [ 309.552004][T11482] team0: Port device team_slave_1 added [ 309.619466][T11482] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 309.626549][T11482] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 309.808934][T11482] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 309.826334][T11482] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 309.841059][T11482] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 309.920377][T11482] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 309.941081][ T4243] Bluetooth: hci2: command 0x0409 tx timeout [ 309.961022][ T4243] ------------[ cut here ]------------ [ 309.966559][ T4243] WARNING: CPU: 1 PID: 4243 at kernel/workqueue.c:1453 __queue_work+0xc04/0xd50 [ 309.975641][ T4243] Modules linked in: [ 309.979573][ T4243] CPU: 1 PID: 4243 Comm: kworker/1:6 Not tainted syzkaller #0 [ 309.987067][ T4243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 309.997175][ T4243] Workqueue: events hci_cmd_timeout [ 310.002446][ T4243] RIP: 0010:__queue_work+0xc04/0xd50 [ 310.007771][ T4243] Code: fc ff ff 48 8b 4c 24 08 80 e1 07 80 c1 03 38 c1 0f 8c 13 fd ff ff 48 8b 7c 24 08 e8 b6 1d 6f 00 e9 04 fd ff ff e8 ac b5 2a 00 <0f> 0b 48 83 c4 50 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 96 b5 2a 00 [ 310.027515][ T4243] RSP: 0018:ffffc9000328fad8 EFLAGS: 00010093 [ 310.033623][ T4243] RAX: ffffffff814d14a4 RBX: 0000000000010000 RCX: ffff888027e61dc0 [ 310.041743][ T4243] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 0000000000000000 [ 310.044677][T11531] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2602'. [ 310.049786][ T4243] RBP: 0000000000000000 R08: dffffc0000000000 R09: ffffed100a957167 [ 310.049809][ T4243] R10: ffffed100a957167 R11: 1ffff1100a957166 R12: 0000000000000200 [ 310.049824][ T4243] R13: ffff8880210e01c0 R14: ffff8880210e0000 R15: 0000000000000008 [ 310.049839][ T4243] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 310.049857][ T4243] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 310.049872][ T4243] CR2: 0000001b2df1cff8 CR3: 0000000064827000 CR4: 00000000003506e0 [ 310.049892][ T4243] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 310.049906][ T4243] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 310.049920][ T4243] Call Trace: [ 310.049929][ T4243] [ 310.049944][ T4243] ? queue_work_on+0xc4/0x1d0 [ 310.049973][ T4243] ? lockdep_hardirqs_off+0x70/0x100 [ 310.050002][ T4243] queue_work_on+0x11d/0x1d0 [ 310.050027][ T4243] ? wq_worker_last_func+0x40/0x40 [ 310.050047][ T4243] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 310.050069][ T4243] ? _raw_spin_unlock+0x40/0x40 [ 310.050097][ T4243] ? hci_cmd_timeout+0x16f/0x220 [ 310.050125][ T4243] process_one_work+0x863/0x1000 [ 310.050167][ T4243] ? worker_detach_from_pool+0x240/0x240 [ 310.050189][ T4243] ? lockdep_hardirqs_off+0x70/0x100 [ 310.050217][ T4243] ? _raw_spin_lock_irq+0xab/0xe0 [ 310.050245][ T4243] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 310.050270][ T4243] ? wq_worker_running+0x97/0x170 [ 310.050295][ T4243] worker_thread+0xaa8/0x12a0 [ 310.050319][ T4243] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 310.050341][ T4243] ? lockdep_hardirqs_on+0x94/0x140 [ 310.050372][ T4243] ? lockdep_hardirqs_on+0x94/0x140 [ 310.050398][ T4243] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 310.050434][ T4243] kthread+0x436/0x520 [ 310.050454][ T4243] ? rcu_lock_release+0x20/0x20 [ 310.050475][ T4243] ? kthread_blkcg+0xd0/0xd0 [ 310.050498][ T4243] ret_from_fork+0x1f/0x30 [ 310.241090][ T4243] [ 310.244130][ T4243] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 310.251427][ T4243] CPU: 1 PID: 4243 Comm: kworker/1:6 Not tainted syzkaller #0 [ 310.258893][ T4243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 310.268954][ T4243] Workqueue: events hci_cmd_timeout [ 310.274179][ T4243] Call Trace: [ 310.277576][ T4243] [ 310.280520][ T4243] dump_stack_lvl+0x168/0x230 [ 310.285217][ T4243] ? show_regs_print_info+0x20/0x20 [ 310.290537][ T4243] ? load_image+0x3b0/0x3b0 [ 310.295081][ T4243] panic+0x2c9/0x7f0 [ 310.298991][ T4243] ? bpf_jit_dump+0xd0/0xd0 [ 310.303506][ T4243] ? ret_from_fork+0x1f/0x30 [ 310.308120][ T4243] ? __queue_work+0xc04/0xd50 [ 310.312805][ T4243] __warn+0x248/0x2b0 [ 310.316794][ T4243] ? __queue_work+0xc04/0xd50 [ 310.321482][ T4243] report_bug+0x1b7/0x2e0 [ 310.325836][ T4243] handle_bug+0x3a/0x70 [ 310.330006][ T4243] exc_invalid_op+0x16/0x40 [ 310.334524][ T4243] asm_exc_invalid_op+0x16/0x20 [ 310.339472][ T4243] RIP: 0010:__queue_work+0xc04/0xd50 [ 310.344761][ T4243] Code: fc ff ff 48 8b 4c 24 08 80 e1 07 80 c1 03 38 c1 0f 8c 13 fd ff ff 48 8b 7c 24 08 e8 b6 1d 6f 00 e9 04 fd ff ff e8 ac b5 2a 00 <0f> 0b 48 83 c4 50 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 96 b5 2a 00 [ 310.364488][ T4243] RSP: 0018:ffffc9000328fad8 EFLAGS: 00010093 [ 310.370574][ T4243] RAX: ffffffff814d14a4 RBX: 0000000000010000 RCX: ffff888027e61dc0 [ 310.378551][ T4243] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 0000000000000000 [ 310.386550][ T4243] RBP: 0000000000000000 R08: dffffc0000000000 R09: ffffed100a957167 [ 310.394552][ T4243] R10: ffffed100a957167 R11: 1ffff1100a957166 R12: 0000000000000200 [ 310.402549][ T4243] R13: ffff8880210e01c0 R14: ffff8880210e0000 R15: 0000000000000008 [ 310.410543][ T4243] ? __queue_work+0xc04/0xd50 [ 310.415254][ T4243] ? __queue_work+0xc04/0xd50 [ 310.419948][ T4243] ? queue_work_on+0xc4/0x1d0 [ 310.424632][ T4243] ? lockdep_hardirqs_off+0x70/0x100 [ 310.429928][ T4243] queue_work_on+0x11d/0x1d0 [ 310.434647][ T4243] ? wq_worker_last_func+0x40/0x40 [ 310.439759][ T4243] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 310.445659][ T4243] ? _raw_spin_unlock+0x40/0x40 [ 310.450515][ T4243] ? hci_cmd_timeout+0x16f/0x220 [ 310.455483][ T4243] process_one_work+0x863/0x1000 [ 310.460581][ T4243] ? worker_detach_from_pool+0x240/0x240 [ 310.466218][ T4243] ? lockdep_hardirqs_off+0x70/0x100 [ 310.471516][ T4243] ? _raw_spin_lock_irq+0xab/0xe0 [ 310.476548][ T4243] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 310.481933][ T4243] ? wq_worker_running+0x97/0x170 [ 310.486969][ T4243] worker_thread+0xaa8/0x12a0 [ 310.491659][ T4243] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 310.497564][ T4243] ? lockdep_hardirqs_on+0x94/0x140 [ 310.502774][ T4243] ? lockdep_hardirqs_on+0x94/0x140 [ 310.507975][ T4243] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 310.513887][ T4243] kthread+0x436/0x520 [ 310.517996][ T4243] ? rcu_lock_release+0x20/0x20 [ 310.522852][ T4243] ? kthread_blkcg+0xd0/0xd0 [ 310.527451][ T4243] ret_from_fork+0x1f/0x30 [ 310.531887][ T4243] [ 310.535214][ T4243] Kernel Offset: disabled [ 310.539761][ T4243] Rebooting in 86400 seconds..