last executing test programs: 3.574358352s ago: executing program 2 (id=314): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000049c0)=ANY=[@ANYBLOB="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"/2702], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = socket$kcm(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f00}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee", 0x34}], 0x2}, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="140000002a000b6c8cff00f90429fc60010f5ddf", 0x14}], 0x1}, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r4 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x60000010, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 3.345578554s ago: executing program 3 (id=317): perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x28, 0x2, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0xb}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x8, 0x6, 0x2, 0x0, 0x0, 0x0, 0x802009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x54}, [@ldst={0x6}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40810) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x6, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000003180)={0x0, 0x0, 0x0}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001000)='memory.swap.current\x00', 0x26e1, 0x0) close(r2) ioctl$SIOCSIFHWADDR(r2, 0x8b33, &(0x7f0000000000)={'wlan1\x00', @dev}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000015c0)={0xffffffffffffffff, 0x58, &(0x7f0000001540)}, 0x10) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffc, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(r1, &(0x7f0000000380)={0x0, 0x61, &(0x7f00000027c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x10100) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b35, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030036000b05d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) socket$kcm(0x10, 0x3, 0x10) 3.275278534s ago: executing program 1 (id=318): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_user\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4200, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x2, 0x4, 0x3, 0x1, 0x0, 0x400, 0x10000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x5, @perf_config_ext={0x13, 0x68dbb055}, 0x8020, 0x40, 0x9, 0x2, 0xffffffffffff31f6, 0x1, 0x7, 0x0, 0x2, 0x0, 0xc94}, 0xffffffffffffffff, 0xd, r0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x5452, &(0x7f0000000740)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdf\x85\xaac{\x8c\x8ffp`-\xcd\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\t\xed\x13q2\xdd\xaf\xcc\xeeR\xf2/\x00\x00E>k\a\xe7>t7\x8e(To\x8a\x9d\f\xd2\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\xcb\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x14\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xcc\xca\x04\x00\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x03\x00\x00\x00\x00\x00\x00\x00\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy\x05,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\xf3\xcf\x17\xf5\x86%\x7f\xec\xb2\xc5E\x00\xb2e\xa8\xf1<\xb2\xc82\xbf=o\x00\x00\x00\x00E\x00\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x922A\x95\x8e\xbc\xc8\xfe\xf5\xffc\xed\xc7\xb7\xd5)\vO\xde5\x06\x03\xfd') 3.172031185s ago: executing program 2 (id=320): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e61", 0x3c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000480)=""/258, 0x102}, {&(0x7f0000000d40)=""/244, 0xf4}, {&(0x7f0000004300)=""/4045, 0xfcd}, {&(0x7f0000000240)=""/208, 0xd0}, {&(0x7f00000006c0)=""/196, 0xc4}, {&(0x7f0000000340)=""/221, 0xdd}, {&(0x7f0000002340)=""/4091, 0xffb}, {&(0x7f00000005c0)=""/211, 0xd3}, {&(0x7f0000000940)=""/198, 0xc6}], 0x9}, 0x40012100) 3.069289596s ago: executing program 1 (id=321): perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x2, 0x0, 0xf, 0x0, 0x0, 0x400, 0x1e37cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x401, 0x200, 0x0, 0x7, 0x0, 0x100}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x8) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000008385000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x10) socketpair(0x1d, 0x802, 0x7, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r3 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}], 0x10}, 0x10000) setsockopt$sock_attach_bpf(r3, 0x84, 0x64, &(0x7f0000000000), 0x10) perf_event_open$cgroup(&(0x7f0000000340)={0x2, 0x80, 0x7, 0x2, 0x0, 0x1, 0x0, 0x4000000000000000, 0x60009, 0x5, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x5, 0x2, @perf_config_ext={0x8, 0xfffffffffffffffa}, 0x110c1b, 0x6, 0x4, 0x7, 0x4, 0xfffffffc, 0x8, 0x0, 0x40, 0x0, 0x228d}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x10, 0x2, 0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r5, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x40000000) close(r5) r7 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000040)={&(0x7f0000000100)=@phonet={0x23, 0x8, 0x0, 0x42}, 0x80, 0x0}, 0x24048015) sendmsg$tipc(r6, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x0) r8 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000580)='syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)={@cgroup=r8, r1, 0x2e, 0x20}, 0x20) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r9}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r10, 0x2000300, 0xe, 0x0, &(0x7f0000000600)="63eced8e46dc3f0adf3389f7b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.944004547s ago: executing program 3 (id=323): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x6a) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x700, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYRESHEX=r0, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000100000d000000000000000003000000000000000000000105000000200000000000"], 0x0, 0x56}, 0x28) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0a000000458050426aa6ba4364ba32275c0380044cf9363d513d13a657aaa94e080492251749e1018f6dfda856ab7997118e7c1283f35ada94be49d9c0b60ba52005e591de2487f4385fce71574e84630a4ac2223bc86170f6393c3b014e125bf876c49c8aa8", @ANYRES32, @ANYBLOB="373fc184fa4adc931d5ed1a435eb1b7b38afe748e389db5c209360af56905dd177b317ca82e8232bb92481d9b075f7408e76f00d883e04bc6ba51e7204bc2fb63dc391e2f09640d053", @ANYRES32=0x0, @ANYRES32=0xffffffffffffffff, @ANYBLOB="000000000000000000150000005ea4166684ff39bb4b56447779366896b91af7bd9e892d6f508c9112e1185b1821b9cbf3b74ff6b9594bad007d349bc4af2398f279298bc5d670361de6a3ff06a72525624488daa19ee2f00501c63700e091206458091a1a3978440471fcf2150d28c02ef683cb4232dc39ef15f94eac72fe7fefbc8131e8b8b23a2b7b0bdf616b3360afdcd48b14f567485532d9"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x596, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r4}, 0x0, 0x0}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x2000000000000000, &(0x7f00000004c0)=ANY=[@ANYBLOB="0600000004000000060000000006"], 0x50) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x62a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000000}, 0x0, 0x1, 0x0, 0x0, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000100), 0x200df000, r7, 0x0, 0x80000fffe}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x20, 0xb, &(0x7f0000000200)=ANY=[@ANYRESOCT=r5], 0x0, 0xff, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) socketpair$unix(0xa, 0x2, 0x11, &(0x7f0000000100)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) syz_clone(0x22023500, 0x0, 0x0, 0x0, 0x0, 0x0) 2.428240201s ago: executing program 0 (id=326): perf_event_open(&(0x7f0000000080)={0x1, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x91c, 0x4156, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffff8, 0x1}, 0x12640, 0x0, 0xfffffffe, 0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_clone(0x1000, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x10}}], 0x30}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 2.243250872s ago: executing program 0 (id=327): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x11, 0xa, 0x300) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0x10, &(0x7f0000000b40)=[{0x0}, {0x0}, {&(0x7f0000001a00)}], 0x3}, 0x0) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000b80)=""/4096, 0x1000}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402000000000000000000000510000c0003", 0x21}], 0x1}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="120000002820", @ANYRES32=0x0, @ANYBLOB="daf5926e2bf70f87ab04cb525b87f0e17593d4d8ff113f"], 0x20) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x33fe0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001f80)={&(0x7f0000001d00)=@ll={0x11, 0x3, r3, 0x1, 0x7}, 0x80, 0x0}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.sectors\x00', 0x0, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="2d6e65745f7072696f202b04726565"], 0x13) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="1b0000001e006bcd9e3fe3dc6e0800000a0000dd600000007ea608", 0x1b}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (fail_nth: 4) r5 = socket$kcm(0x2c, 0x3, 0x0) recvmsg(r5, &(0x7f0000000c40)={0x0, 0x0, 0x0}, 0x2000) 2.129230743s ago: executing program 2 (id=328): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000049c0)=ANY=[@ANYBLOB="b702000047000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a4693989c36ffffffffffffd0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1530f8d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c11090000000000000000b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f98117919472b61b20026d7e646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c8565117fcb8ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17911540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db55474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc240000000000127535a468702cac97b6b82a6e65d4cf1200"/2702], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = socket$kcm(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f00}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)='`\x00\x00\x00.\x00\r', 0x7}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee", 0x34}], 0x2}, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="140000002a000b6c8cff00f90429fc60010f5ddf", 0x14}], 0x1}, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r4 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x60000010, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 1.771629586s ago: executing program 1 (id=329): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x140, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x4000}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000240)={0x2, &(0x7f0000000100)=[{0x20, 0x3, 0x7, 0xfffff01c}, {0x6, 0x2, 0x4, 0x4}]}) 1.746318876s ago: executing program 0 (id=330): r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x8}, 0x38) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x480283, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7606}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22ffff) sendmsg$inet(r0, 0x0, 0x0) 1.694639256s ago: executing program 3 (id=331): r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000400)={&(0x7f0000000300)=@qipcrtr={0x2a, 0x4, 0x8000}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="10f2"], 0x10}, 0x20000004) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r0}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xfffffffe, 0x0, 0x1}, 0x10}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYRES32=r1, @ANYBLOB='&\x00\x00\x00\a'], 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) close(0xffffffffffffffff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{}, &(0x7f0000000280), &(0x7f00000002c0)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, &(0x7f0000000340), &(0x7f0000000380)=r1}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0x58, &(0x7f00000007c0)}, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='{[\\]+\x00') socketpair(0x3f, 0x1, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xd, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) 1.592188397s ago: executing program 1 (id=332): perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x28, 0x2, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0xb}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x8, 0x6, 0x2, 0x0, 0x0, 0x0, 0x802009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x54}, [@ldst={0x6}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40810) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x6, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000003180)={0x0, 0x0, 0x0}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001000)='memory.swap.current\x00', 0x26e1, 0x0) close(r2) ioctl$SIOCSIFHWADDR(r2, 0x8b33, &(0x7f0000000000)={'wlan1\x00', @dev}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffc, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(r1, &(0x7f0000000380)={0x0, 0x61, &(0x7f00000027c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x10100) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b35, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030036000b05d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) socket$kcm(0x10, 0x3, 0x10) 1.589280887s ago: executing program 0 (id=333): r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x8}, 0x38) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x480283, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7606}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22ffff) (fail_nth: 1) sendmsg$inet(r0, 0x0, 0x0) 1.23191306s ago: executing program 2 (id=334): ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x7, &(0x7f0000000000)=[{0x5}, {}, {0xffff, 0x0, 0x6}, {}, {0x5}, {}, {0x0, 0x0, 0x0, 0x420008}]}) r0 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890c, 0x0) 1.22461514s ago: executing program 3 (id=335): perf_event_open(&(0x7f0000000080)={0x1, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x91c, 0x4156, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffff8, 0x1}, 0x12640, 0x0, 0xfffffffe, 0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_clone(0x1000, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x10}}], 0x30}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 1.144678751s ago: executing program 0 (id=336): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e61", 0x3c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000480)=""/258, 0x102}, {&(0x7f0000000d40)=""/244, 0xf4}, {&(0x7f0000004300)=""/4045, 0xfcd}, {&(0x7f0000000240)=""/208, 0xd0}, {&(0x7f00000006c0)=""/196, 0xc4}, {&(0x7f0000000340)=""/221, 0xdd}, {&(0x7f0000002340)=""/4091, 0xffb}, {&(0x7f00000005c0)=""/211, 0xd3}, {&(0x7f0000000940)=""/198, 0xc6}], 0x9}, 0x40012100) 1.088817941s ago: executing program 2 (id=337): perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x2, 0x0, 0xf, 0x0, 0x0, 0x400, 0x1e37cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x401, 0x200, 0x0, 0x7, 0x0, 0x100}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x8) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000008385000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x10) socketpair(0x1d, 0x802, 0x7, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r3 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}], 0x10}, 0x10000) setsockopt$sock_attach_bpf(r3, 0x84, 0x64, &(0x7f0000000000), 0x10) perf_event_open$cgroup(&(0x7f0000000340)={0x2, 0x80, 0x7, 0x2, 0x0, 0x1, 0x0, 0x4000000000000000, 0x60009, 0x5, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x5, 0x2, @perf_config_ext={0x8, 0xfffffffffffffffa}, 0x110c1b, 0x6, 0x4, 0x7, 0x4, 0xfffffffc, 0x8, 0x0, 0x40, 0x0, 0x228d}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x10, 0x2, 0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r5, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x40000000) close(r5) r7 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000040)={&(0x7f0000000100)=@phonet={0x23, 0x8, 0x0, 0x42}, 0x80, 0x0}, 0x24048015) sendmsg$tipc(r6, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x0) r8 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000580)='syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)={@cgroup=r8, r1, 0x2e, 0x20}, 0x20) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r9}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r10, 0x2000300, 0xe, 0x0, &(0x7f0000000600)="63eced8e46dc3f0adf3389f7b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.078349001s ago: executing program 1 (id=338): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x8, 0xc8, 0x9, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1200000000}, 0x0, 0x4, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x4e23, @private=0xa010100}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="b0595ef6dc874b891123bcf31f8f96d8b4a647bb2f8eb6fad458def868e5773dfed18decfd9957064e14f3b973c0edf910281b35f8dfc118fc40deb5e9e13cdec57a250bdb5440df0c", 0x49}, {&(0x7f0000000100)="96d01f5f28c307f44812a4f673cdef18c64bd707", 0x14}, {&(0x7f0000000200)}, {&(0x7f0000000240)="742c72548096787a1e26b141a6f8465c25817ebcc721cc932ee4514c4f170adc6029a4777cf855264eaf3687fad1b1d3307f54b8e64ebe8a766399f5b307a8722becbf8d1dbcd0badbcc697b4f288b2e", 0x50}, {&(0x7f00000002c0)="11608d6cca7abb0501e8e07ed97384ec23f1155498cfcaa2fa774e8d555d192c5fecdb3fe145601d5d7ff8292b60e55c4480a96d8337ccd10428e8fb9878f0947fe27905282bb680242ec3b6c45b91ab61da93a27f407fb829cfce40a2fccbed40351202da1c5611e36b0c203ce32f9e56e0", 0x72}], 0x5, &(0x7f0000000340)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xff}}], 0x18}, 0x40041) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="8fedcb7907031175f37538e486dd630080fc00000000db5b686158bbcfe8875a060300001123000000000000000000000000ac1414aa3b20"], 0xfdef) r5 = socket$kcm(0x10, 0x2, 0x4) close(r5) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r6, 0xffff0000, 0xffffffffffffffe6, 0xfffffffffffffd64, &(0x7f0000000000)="2b206d0748010097737ea49da2aae9", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0xa, 0x5, 0x0) sendmsg$inet(r5, &(0x7f0000001680)={&(0x7f00000000c0)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000000)="660e", 0x2}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="20000000000000008400000002000000050009"], 0x20}, 0x0) 990.336302ms ago: executing program 3 (id=339): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x6a) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x700, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYRESHEX=r0, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000100000d000000000000000003000000000000000000000105000000200000000000"], 0x0, 0x56}, 0x28) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0a000000458050426aa6ba4364ba32275c0380044cf9363d513d13a657aaa94e080492251749e1018f6dfda856ab7997118e7c1283f35ada94be49d9c0b60ba52005e591de2487f4385fce71574e84630a4ac2223bc86170f6393c3b014e125bf876c49c8aa8", @ANYRES32, @ANYBLOB="373fc184fa4adc931d5ed1a435eb1b7b38afe748e389db5c209360af56905dd177b317ca82e8232bb92481d9b075f7408e76f00d883e04bc6ba51e7204bc2fb63dc391e2f09640d053", @ANYRES32=0x0, @ANYRES32=0xffffffffffffffff, @ANYBLOB="000000000000000000150000005ea4166684ff39bb4b56447779366896b91af7bd9e892d6f508c9112e1185b1821b9cbf3b74ff6b9594bad007d349bc4af2398f279298bc5d670361de6a3ff06a72525624488daa19ee2f00501c63700e091206458091a1a3978440471fcf2150d28c02ef683cb4232dc39ef15f94eac72fe7fefbc8131e8b8b23a2b7b0bdf616b3360afdcd48b14f567485532d9"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x596, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r4}, 0x0, 0x0}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x2000000000000000, &(0x7f00000004c0)=ANY=[@ANYBLOB="0600000004000000060000000006"], 0x50) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x62a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000000}, 0x0, 0x1, 0x0, 0x0, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000100), 0x200df000, r7, 0x0, 0x80000fffe}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x20, 0xb, &(0x7f0000000200)=ANY=[@ANYRESOCT=r5], 0x0, 0xff, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) socketpair$unix(0xa, 0x2, 0x11, &(0x7f0000000100)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) syz_clone(0x22023500, 0x0, 0x0, 0x0, 0x0, 0x0) 116.678859ms ago: executing program 0 (id=340): r0 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000340)=ANY=[@ANYRES64], 0x2) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x781c0964, 0x0, 0x1, 0x9, '\x00', 0x0, r2, 0x3, 0x0, 0x5}, 0x50) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c00)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a40000002300000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r3}, 0x10) mkdir(0x0, 0x101) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r6 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r6, 0x1, 0x41, &(0x7f0000000040)=r5, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={r5}, 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x8}, 0x38) bpf$MAP_CREATE(0x0, 0x0, 0x0) r8 = syz_clone(0x8000000, &(0x7f0000000200)="0dfe03c2d7b19482f44d3948cece8545ccf1555519c66889764e0adb91f41770cbe177b009c5dd6d871c272afc992748d68734b9aed10a216fc1d91ea5b7cb44f808b84a3329bb5d61bcad7ae26d72fdbe6fe2928837284d8b47e74243ad4d8975a1f60fe105086268f79055641487c524a618ecffbd0d957abca3ca0a0638ceb6143bdb04cb14423af4f65860305a68d337a45fe2d37602f2676013b7c8e0ca0417147f54586c87f28fbefba97ba0938ea5a30b14fe10c0b897fd8435d45c9f4d2fc2964a874bf0152d9a70bac310333b7cc0ce6cba6f3f66004efb69b1bbf8", 0xe0, &(0x7f00000000c0), &(0x7f0000000140), &(0x7f0000000300)="dabaa26b5176806b4775c2ef9b3e699c53f78aea8b0397984fe237f0ec0a22f3645c55a16a86194983aed3175b7cfdbd45710a9c45ea88291ccd9423a8ff04760f3f140da51b5fcc207f58563cf09986c444349c6df89254e1e3226f281a1dcfb636677f25c13adbb39c10700c9bb6a5460a552840af4b744f8e0b328ef21dbe59a82ecbe642b7d5994f5a1b81b28dbced9272c47f4cf6398c6df7fd8774a719615fe89ca4c5b4b89cfe16c6610f318a44e228aac6802220575cfec783f34ab77b8b8fb2e6062c8a428e95a368a66acb7ff37b515b221e9a581c003ea82f91dc7510aec0c41d39e0a3") perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x2, 0x4, 0xfd, 0x0, 0x0, 0x1, 0x4a0283, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0xb07, 0x400}, 0x7602, 0x0, 0x2, 0x0, 0x1000000004, 0x8, 0x0, 0x0, 0x7}, r8, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r7, 0x4004743d, 0x110e22ffff) sendmsg$inet(r0, 0x0, 0x0) 59.371429ms ago: executing program 1 (id=341): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x3d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20000000000}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) r2 = socket$kcm(0x11, 0xa, 0x300) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f00000000c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0x0, &(0x7f0000000b40), 0x4, 0x0, 0x0, 0x4001}, 0x0) recvmsg(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000b80)=""/4096, 0x1000}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x33fe0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_type(r4, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r5, &(0x7f0000000280), 0x9) r6 = openat$cgroup_procs(r4, &(0x7f0000000340)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000c40), 0x12) r7 = syz_clone(0xc920000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r7, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0100000004000000630000004000370b2d76794ded000041000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r9 = openat$cgroup_subtree(r8, &(0x7f0000000140), 0x2, 0x0) syz_clone(0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) write$cgroup_subtree(r9, &(0x7f0000000100)=ANY=[@ANYBLOB="2ba57a5e9c29"], 0x6) socket$kcm(0x11, 0x200000000000002, 0x300) r10 = socket$kcm(0x2a, 0x2, 0x0) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000140)=ANY=[@ANYRESHEX=r10], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r11, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, 0x0, 0x0}}, 0x10) sendmsg$kcm(r10, &(0x7f0000001f80)={&(0x7f0000001d00)=@ll={0x11, 0x3, 0x0, 0x1, 0x7}, 0x80, 0x0}, 0x0) 45.012329ms ago: executing program 2 (id=342): perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0xed, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_config_ext={0x0, 0x1000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0xd4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1a003}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="9110a9000000000095"], &(0x7f00000000c0)='GPL\x00', 0x5}, 0x94) ioctl$TUNSETLINK(r0, 0x400454cd, 0x336) close(r0) 0s ago: executing program 3 (id=343): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000049c0)=ANY=[@ANYBLOB="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"/2702], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = socket$kcm(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f00}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)='`\x00\x00\x00.\x00\r', 0x7}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee", 0x34}], 0x2}, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="140000002a000b6c8cff00f90429fc60010f5ddf", 0x14}], 0x1}, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r4 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x60000010, &(0x7f0000000100)="b9ff03076844268cb89e14f088a847e0ffff00124000632f77fbac141416e000c70a94029f034d2f87e589ca6aab845013f2325f1a3901070b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000}, 0x2c) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.205' (ED25519) to the list of known hosts. [ 336.871580][ T5821] cgroup: Unknown subsys name 'net' [ 337.033229][ T5821] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 338.400481][ T5821] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 339.791633][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 339.797974][ T5844] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 339.802890][ T5841] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 339.817871][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 339.825702][ T5844] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 339.833196][ T5847] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 339.845681][ T5845] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 339.853853][ T5847] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 339.854874][ T5845] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 339.869102][ T5845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 339.877506][ T5845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 339.884819][ T5844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 339.886713][ T5845] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 339.894952][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 339.907741][ T5841] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 339.908397][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 339.915291][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 339.923389][ T5845] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 339.929569][ T5841] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 339.936661][ T5845] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 339.950087][ T5847] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 339.951026][ T5845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 339.957552][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 339.965216][ T5847] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 340.395870][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 340.539946][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 340.609483][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 340.620642][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.628656][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.636042][ T5833] bridge_slave_0: entered allmulticast mode [ 340.643276][ T5833] bridge_slave_0: entered promiscuous mode [ 340.651307][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 340.662058][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.669357][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.677062][ T5833] bridge_slave_1: entered allmulticast mode [ 340.683900][ T5833] bridge_slave_1: entered promiscuous mode [ 340.794448][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 340.838690][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 340.870545][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.877854][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.885092][ T5832] bridge_slave_0: entered allmulticast mode [ 340.893456][ T5832] bridge_slave_0: entered promiscuous mode [ 340.900390][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.908144][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.915365][ T5834] bridge_slave_0: entered allmulticast mode [ 340.922957][ T5834] bridge_slave_0: entered promiscuous mode [ 340.944443][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.951855][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.959356][ T5832] bridge_slave_1: entered allmulticast mode [ 340.967236][ T5832] bridge_slave_1: entered promiscuous mode [ 340.973949][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.981200][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.988530][ T5834] bridge_slave_1: entered allmulticast mode [ 340.995240][ T5834] bridge_slave_1: entered promiscuous mode [ 341.009018][ T5833] team0: Port device team_slave_0 added [ 341.046524][ T5833] team0: Port device team_slave_1 added [ 341.095373][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.103145][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.110934][ T5831] bridge_slave_0: entered allmulticast mode [ 341.119951][ T5831] bridge_slave_0: entered promiscuous mode [ 341.129955][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 341.142429][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 341.154283][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 341.177891][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 341.184869][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.211006][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 341.225564][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.232981][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.240198][ T5831] bridge_slave_1: entered allmulticast mode [ 341.247595][ T5831] bridge_slave_1: entered promiscuous mode [ 341.263584][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 341.273606][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 341.280811][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.306848][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 341.377922][ T5832] team0: Port device team_slave_0 added [ 341.386420][ T5832] team0: Port device team_slave_1 added [ 341.414657][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 341.438382][ T5834] team0: Port device team_slave_0 added [ 341.455330][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 341.482645][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 341.489854][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.515854][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 341.530620][ T5834] team0: Port device team_slave_1 added [ 341.553023][ T5833] hsr_slave_0: entered promiscuous mode [ 341.559593][ T5833] hsr_slave_1: entered promiscuous mode [ 341.597855][ T5831] team0: Port device team_slave_0 added [ 341.604472][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 341.611667][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.637718][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 341.670409][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 341.677438][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.703606][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 341.717175][ T5831] team0: Port device team_slave_1 added [ 341.757159][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 341.764128][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.791213][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 341.809734][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 341.816850][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.843129][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 341.861393][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 341.868475][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.894477][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 341.977181][ T51] Bluetooth: hci0: command tx timeout [ 342.004706][ T5832] hsr_slave_0: entered promiscuous mode [ 342.011458][ T5832] hsr_slave_1: entered promiscuous mode [ 342.019393][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 342.027328][ T5832] Cannot create hsr debugfs directory [ 342.056271][ T51] Bluetooth: hci3: command tx timeout [ 342.056478][ T5847] Bluetooth: hci2: command tx timeout [ 342.062016][ T51] Bluetooth: hci1: command tx timeout [ 342.108170][ T5831] hsr_slave_0: entered promiscuous mode [ 342.114500][ T5831] hsr_slave_1: entered promiscuous mode [ 342.121619][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 342.130159][ T5831] Cannot create hsr debugfs directory [ 342.139973][ T5834] hsr_slave_0: entered promiscuous mode [ 342.147215][ T5834] hsr_slave_1: entered promiscuous mode [ 342.153354][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 342.161014][ T5834] Cannot create hsr debugfs directory [ 342.316877][ T5833] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 342.347720][ T5833] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 342.386607][ T5833] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 342.397977][ T5833] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 342.583472][ T5832] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 342.605700][ T5832] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 342.622920][ T5832] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 342.632402][ T5832] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 342.714172][ T5834] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 342.729195][ T5834] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 342.740064][ T5834] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 342.750312][ T5834] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 342.792634][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 342.822572][ T5831] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 342.835838][ T5831] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 342.855549][ T5831] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 342.868259][ T5831] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 342.915076][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 342.943429][ T5873] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.950822][ T5873] bridge0: port 1(bridge_slave_0) entered forwarding state [ 342.980831][ T5873] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.987984][ T5873] bridge0: port 2(bridge_slave_1) entered forwarding state [ 343.060908][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 343.122995][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 343.170032][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 343.190160][ T5873] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.197347][ T5873] bridge0: port 1(bridge_slave_0) entered forwarding state [ 343.228308][ T5873] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.235556][ T5873] bridge0: port 2(bridge_slave_1) entered forwarding state [ 343.268306][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 343.325451][ T5873] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.332681][ T5873] bridge0: port 1(bridge_slave_0) entered forwarding state [ 343.353141][ T5873] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.360404][ T5873] bridge0: port 2(bridge_slave_1) entered forwarding state [ 343.381981][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 343.444235][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 343.458679][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 343.474365][ T5834] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 343.485439][ T5834] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 343.539019][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.546235][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 343.558595][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.565783][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 343.739117][ T5833] veth0_vlan: entered promiscuous mode [ 343.773638][ T5833] veth1_vlan: entered promiscuous mode [ 343.871775][ T5833] veth0_macvtap: entered promiscuous mode [ 343.911186][ T5833] veth1_macvtap: entered promiscuous mode [ 343.924909][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 343.982751][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 344.010358][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 344.042840][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 344.056972][ T51] Bluetooth: hci0: command tx timeout [ 344.064140][ T5833] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.075689][ T5833] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.084536][ T5833] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.093354][ T5833] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.124240][ T5834] veth0_vlan: entered promiscuous mode [ 344.136456][ T51] Bluetooth: hci2: command tx timeout [ 344.138235][ T5838] Bluetooth: hci3: command tx timeout [ 344.141882][ T51] Bluetooth: hci1: command tx timeout [ 344.168645][ T5834] veth1_vlan: entered promiscuous mode [ 344.196990][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 344.275605][ T5832] veth0_vlan: entered promiscuous mode [ 344.317901][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.333168][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.360856][ T5832] veth1_vlan: entered promiscuous mode [ 344.398144][ T5834] veth0_macvtap: entered promiscuous mode [ 344.415187][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.424152][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.431962][ T5831] veth0_vlan: entered promiscuous mode [ 344.441627][ T5834] veth1_macvtap: entered promiscuous mode [ 344.461646][ T5831] veth1_vlan: entered promiscuous mode [ 344.501849][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 344.521390][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.539810][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 344.555216][ T5832] veth0_macvtap: entered promiscuous mode [ 344.579614][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 344.590724][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.605571][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 344.639150][ T5832] veth1_macvtap: entered promiscuous mode [ 344.671497][ T5834] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.685802][ T5834] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.697671][ T5834] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.706662][ T5834] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.730485][ T5831] veth0_macvtap: entered promiscuous mode [ 344.761477][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 344.772599][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.784580][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 344.795347][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.808104][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 344.820777][ T5831] veth1_macvtap: entered promiscuous mode [ 344.836118][ C0] hrtimer: interrupt took 67450 ns [ 344.851779][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 344.865076][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.881223][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 344.891954][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.908032][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 346.136652][ T51] Bluetooth: hci0: command tx timeout [ 346.216331][ T51] Bluetooth: hci3: command tx timeout [ 346.221812][ T51] Bluetooth: hci2: command tx timeout [ 346.228045][ T5838] Bluetooth: hci1: command tx timeout [ 347.700483][ T5832] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.719178][ T5832] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.728483][ T5832] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.737827][ T5832] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.756033][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 347.793248][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.814769][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 347.831735][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.842021][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 347.852952][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.864887][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 347.939358][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 347.955659][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.960828][ T5927] syz.3.5 (5927) used greatest stack depth: 20336 bytes left [ 347.975154][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 347.992494][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.002798][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 348.013758][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.037786][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 348.055997][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.079885][ T5831] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.081232][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.089727][ T5831] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.106345][ T5831] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.115712][ T5831] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.208730][ T5874] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.222165][ T51] Bluetooth: hci0: command tx timeout [ 348.228854][ T5874] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.275776][ T5874] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.297843][ T51] Bluetooth: hci2: command tx timeout [ 348.303307][ T51] Bluetooth: hci1: command tx timeout [ 348.309790][ T5847] Bluetooth: hci3: command tx timeout [ 348.336631][ T5874] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.481881][ T5907] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.522896][ T5907] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.653006][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.685141][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.845752][ T5924] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.886198][ T5924] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.021604][ T5941] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 349.028838][ T5941] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 349.419263][ T5950] netlink: 'syz.0.1': attribute type 10 has an invalid length. [ 349.434318][ T5950] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1'. [ 349.456916][ T5950] team0: entered promiscuous mode [ 349.462039][ T5950] team_slave_0: entered promiscuous mode [ 349.513760][ T5950] team_slave_1: entered promiscuous mode [ 349.534206][ T5950] team0: entered allmulticast mode [ 349.576585][ T5950] team_slave_0: entered allmulticast mode [ 349.583029][ T5950] team_slave_1: entered allmulticast mode [ 349.658142][ T5950] bridge0: port 3(team0) entered blocking state [ 349.684150][ T5950] bridge0: port 3(team0) entered disabled state [ 349.776456][ T5950] bridge0: port 3(team0) entered blocking state [ 349.783303][ T5950] bridge0: port 3(team0) entered forwarding state [ 349.997892][ T5951] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 350.420560][ T5950] syz.0.1 (5950) used greatest stack depth: 20232 bytes left [ 350.531872][ T5963] FAULT_INJECTION: forcing a failure. [ 350.531872][ T5963] name failslab, interval 1, probability 0, space 0, times 1 [ 350.570272][ T5963] CPU: 0 PID: 5963 Comm: syz.2.15 Not tainted syzkaller #0 [ 350.577547][ T5963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 350.587645][ T5963] Call Trace: [ 350.590947][ T5963] [ 350.593901][ T5963] dump_stack_lvl+0x16c/0x230 [ 350.598622][ T5963] ? show_regs_print_info+0x20/0x20 [ 350.603847][ T5963] ? load_image+0x3b0/0x3b0 [ 350.608372][ T5963] ? __might_sleep+0xe0/0xe0 [ 350.612987][ T5963] ? __lock_acquire+0x7c80/0x7c80 [ 350.618042][ T5963] should_fail_ex+0x39d/0x4d0 [ 350.622761][ T5963] should_failslab+0x9/0x20 [ 350.627295][ T5963] slab_pre_alloc_hook+0x59/0x310 [ 350.632356][ T5963] ? apparmor_sk_alloc_security+0x77/0x100 [ 350.638203][ T5963] __kmem_cache_alloc_node+0x53/0x260 [ 350.643626][ T5963] ? apparmor_sk_alloc_security+0x77/0x100 [ 350.649556][ T5963] kmalloc_trace+0x2a/0xe0 [ 350.654005][ T5963] apparmor_sk_alloc_security+0x77/0x100 [ 350.659660][ T5963] security_sk_alloc+0x6e/0xa0 [ 350.664442][ T5963] sk_prot_alloc+0x101/0x210 [ 350.669047][ T5963] ? sk_alloc+0x24/0x360 [ 350.673304][ T5963] sk_alloc+0x3a/0x360 [ 350.677487][ T5963] mISDN_sock_create+0x329/0x640 [ 350.682446][ T5963] __sock_create+0x4a6/0x940 [ 350.687098][ T5963] __sys_socket+0xd7/0x1a0 [ 350.691549][ T5963] __x64_sys_socket+0x7a/0x90 [ 350.696271][ T5963] do_syscall_64+0x55/0xb0 [ 350.700718][ T5963] ? clear_bhb_loop+0x40/0x90 [ 350.705420][ T5963] ? clear_bhb_loop+0x40/0x90 [ 350.710126][ T5963] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 350.716048][ T5963] RIP: 0033:0x7f99bf98efc9 [ 350.720497][ T5963] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 350.740133][ T5963] RSP: 002b:00007f99c08ea038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 350.748594][ T5963] RAX: ffffffffffffffda RBX: 00007f99bfbe5fa0 RCX: 00007f99bf98efc9 [ 350.756596][ T5963] RDX: 0000000000000021 RSI: 0000000000000002 RDI: 0000000000000022 [ 350.764594][ T5963] RBP: 00007f99c08ea090 R08: 0000000000000000 R09: 0000000000000000 [ 350.772597][ T5963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 350.780589][ T5963] R13: 00007f99bfbe6038 R14: 00007f99bfbe5fa0 R15: 00007fffd1a42968 [ 350.788600][ T5963] [ 351.450402][ T5970] FAULT_INJECTION: forcing a failure. [ 351.450402][ T5970] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 351.466639][ T5970] CPU: 0 PID: 5970 Comm: syz.3.19 Not tainted syzkaller #0 [ 351.473883][ T5970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 351.483951][ T5970] Call Trace: [ 351.487325][ T5970] [ 351.490265][ T5970] dump_stack_lvl+0x16c/0x230 [ 351.494997][ T5970] ? show_regs_print_info+0x20/0x20 [ 351.500221][ T5970] ? load_image+0x3b0/0x3b0 [ 351.504740][ T5970] ? __might_fault+0xaa/0x120 [ 351.509429][ T5970] ? __lock_acquire+0x7c80/0x7c80 [ 351.514485][ T5970] should_fail_ex+0x39d/0x4d0 [ 351.519195][ T5970] _copy_from_user+0x2f/0xe0 [ 351.523811][ T5970] dev_ethtool+0xc5/0x1720 [ 351.528247][ T5970] ? lock_chain_count+0x20/0x20 [ 351.533121][ T5970] ? ethtool_get_module_eeprom_call+0x170/0x170 [ 351.539376][ T5970] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 351.545548][ T5970] ? lockdep_hardirqs_on+0x98/0x150 [ 351.550769][ T5970] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 351.556944][ T5970] ? dev_load+0x162/0x1f0 [ 351.561293][ T5970] dev_ioctl+0x4ca/0x1170 [ 351.565643][ T5970] sock_do_ioctl+0x226/0x2f0 [ 351.570252][ T5970] ? sock_show_fdinfo+0xb0/0xb0 [ 351.575218][ T5970] sock_ioctl+0x623/0x7a0 [ 351.579612][ T5970] ? sock_poll+0x3d0/0x3d0 [ 351.584050][ T5970] ? bpf_lsm_file_ioctl+0x9/0x10 [ 351.588995][ T5970] ? security_file_ioctl+0x80/0xa0 [ 351.594122][ T5970] ? sock_poll+0x3d0/0x3d0 [ 351.598564][ T5970] __se_sys_ioctl+0xfd/0x170 [ 351.603171][ T5970] do_syscall_64+0x55/0xb0 [ 351.607614][ T5970] ? clear_bhb_loop+0x40/0x90 [ 351.612319][ T5970] ? clear_bhb_loop+0x40/0x90 [ 351.617044][ T5970] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 351.622953][ T5970] RIP: 0033:0x7f2d5118efc9 [ 351.627387][ T5970] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 351.647015][ T5970] RSP: 002b:00007f2d51fb3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 351.655458][ T5970] RAX: ffffffffffffffda RBX: 00007f2d513e5fa0 RCX: 00007f2d5118efc9 [ 351.663448][ T5970] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 000000000000003b [ 351.671447][ T5970] RBP: 00007f2d51fb3090 R08: 0000000000000000 R09: 0000000000000000 [ 351.679450][ T5970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 351.687549][ T5970] R13: 00007f2d513e6038 R14: 00007f2d513e5fa0 R15: 00007ffc25d1dc28 [ 351.695554][ T5970] [ 351.884332][ T5972] netlink: 'syz.0.18': attribute type 10 has an invalid length. [ 351.970140][ T5972] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 351.985466][ T5972] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 352.031897][ T5972] team0: Port device netdevsim0 added [ 352.043094][ T5973] netlink: 'syz.0.18': attribute type 10 has an invalid length. [ 352.060132][ T5973] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 352.114904][ T5973] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 352.307728][ T5973] team0: Port device netdevsim0 removed [ 352.447056][ T5973] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 352.751157][ T5987] syz.3.22 uses obsolete (PF_INET,SOCK_PACKET) [ 352.832291][ T5988] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.22'. [ 352.923131][ T5988] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.22'. [ 352.953523][ T5986] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.22'. [ 353.011276][ T5997] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.22'. [ 353.187261][ T5995] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 355.207345][ T6026] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 355.214135][ T6026] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 355.737509][ T6037] netlink: 'syz.3.39': attribute type 10 has an invalid length. [ 355.745240][ T6037] netlink: 40 bytes leftover after parsing attributes in process `syz.3.39'. [ 355.817605][ T6037] team0: entered promiscuous mode [ 355.822826][ T6037] team_slave_0: entered promiscuous mode [ 355.829194][ T6037] team_slave_1: entered promiscuous mode [ 355.835155][ T6037] team0: entered allmulticast mode [ 355.840844][ T6037] team_slave_0: entered allmulticast mode [ 355.866354][ T6037] team_slave_1: entered allmulticast mode [ 356.070158][ T6037] bridge0: port 3(team0) entered blocking state [ 356.094682][ T6037] bridge0: port 3(team0) entered disabled state [ 356.123773][ T6037] bridge0: port 3(team0) entered blocking state [ 356.130369][ T6037] bridge0: port 3(team0) entered forwarding state [ 356.519992][ T6038] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 358.494779][ T6073] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 358.763050][ T6081] netlink: 'syz.2.58': attribute type 10 has an invalid length. [ 358.776300][ T6081] netlink: 40 bytes leftover after parsing attributes in process `syz.2.58'. [ 358.797992][ T6081] team0: entered promiscuous mode [ 358.826324][ T6081] team_slave_0: entered promiscuous mode [ 358.832352][ T6081] team_slave_1: entered promiscuous mode [ 358.886716][ T6081] team0: entered allmulticast mode [ 358.926515][ T6081] team_slave_0: entered allmulticast mode [ 358.932986][ T6081] team_slave_1: entered allmulticast mode [ 359.020344][ T6081] bridge0: port 3(team0) entered blocking state [ 359.036586][ T6081] bridge0: port 3(team0) entered disabled state [ 359.066948][ T6081] bridge0: port 3(team0) entered blocking state [ 359.073533][ T6081] bridge0: port 3(team0) entered forwarding state [ 359.242883][ T6086] syz.1.59 (6086) used greatest stack depth: 20200 bytes left [ 360.356670][ T6107] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 361.136480][ T6117] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 361.800838][ T6130] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 361.846260][ T6137] Zero length message leads to an empty skb [ 363.067713][ T6145] netlink: 'syz.1.75': attribute type 10 has an invalid length. [ 363.198038][ T6145] netlink: 40 bytes leftover after parsing attributes in process `syz.1.75'. [ 363.284323][ T6145] team0: entered promiscuous mode [ 363.299762][ C0] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 363.328265][ T6145] team_slave_0: entered promiscuous mode [ 363.332168][ T6142] netlink: 208064 bytes leftover after parsing attributes in process `syz.0.81'. [ 363.406216][ T6145] team_slave_1: entered promiscuous mode [ 363.412303][ T6145] team0: entered allmulticast mode [ 363.556376][ T6145] team_slave_0: entered allmulticast mode [ 363.562222][ T6145] team_slave_1: entered allmulticast mode [ 363.677464][ T6145] bridge0: port 3(team0) entered blocking state [ 363.684139][ T6145] bridge0: port 3(team0) entered disabled state [ 363.697149][ T6145] bridge0: port 3(team0) entered blocking state [ 363.703703][ T6145] bridge0: port 3(team0) entered forwarding state [ 364.852948][ T6169] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 365.217835][ T6176] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 365.317607][ T6181] netlink: 208064 bytes leftover after parsing attributes in process `syz.3.94'. [ 366.440030][ T6209] netlink: 208064 bytes leftover after parsing attributes in process `syz.2.107'. [ 366.565715][ T6202] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 367.694149][ T6233] FAULT_INJECTION: forcing a failure. [ 367.694149][ T6233] name failslab, interval 1, probability 0, space 0, times 0 [ 367.741378][ T6233] CPU: 0 PID: 6233 Comm: syz.1.115 Not tainted syzkaller #0 [ 367.748766][ T6233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 367.758932][ T6233] Call Trace: [ 367.762229][ T6233] [ 367.765184][ T6233] dump_stack_lvl+0x16c/0x230 [ 367.769888][ T6233] ? show_regs_print_info+0x20/0x20 [ 367.775107][ T6233] ? load_image+0x3b0/0x3b0 [ 367.779637][ T6233] ? __might_sleep+0xe0/0xe0 [ 367.784243][ T6233] ? __lock_acquire+0x7c80/0x7c80 [ 367.789279][ T6233] ? __lock_acquire+0x1260/0x7c80 [ 367.794333][ T6233] should_fail_ex+0x39d/0x4d0 [ 367.799037][ T6233] should_failslab+0x9/0x20 [ 367.803561][ T6233] slab_pre_alloc_hook+0x59/0x310 [ 367.808609][ T6233] ? sock_kmalloc+0x96/0xf0 [ 367.813134][ T6233] ? sock_kmalloc+0x96/0xf0 [ 367.817651][ T6233] __kmem_cache_alloc_node+0x53/0x260 [ 367.823052][ T6233] ? sock_kmalloc+0x96/0xf0 [ 367.827570][ T6233] __kmalloc+0xa4/0x240 [ 367.831745][ T6233] sock_kmalloc+0x96/0xf0 [ 367.836093][ T6233] ____sys_sendmsg+0x1b8/0x950 [ 367.840885][ T6233] ? __asan_memset+0x22/0x40 [ 367.845594][ T6233] ? __sys_sendmsg_sock+0x30/0x30 [ 367.850815][ T6233] ? __import_iovec+0x3fa/0x860 [ 367.855717][ T6233] ? import_iovec+0x73/0xa0 [ 367.860247][ T6233] ___sys_sendmsg+0x220/0x290 [ 367.864961][ T6233] ? __sys_sendmsg+0x270/0x270 [ 367.869785][ T6233] __se_sys_sendmsg+0x1a5/0x270 [ 367.874660][ T6233] ? __x64_sys_sendmsg+0x80/0x80 [ 367.879699][ T6233] ? bpf_trace_run2+0x26f/0x3c0 [ 367.884675][ T6233] ? trace_sys_enter+0x1f/0x80 [ 367.889456][ T6233] do_syscall_64+0x55/0xb0 [ 367.893892][ T6233] ? clear_bhb_loop+0x40/0x90 [ 367.898584][ T6233] ? clear_bhb_loop+0x40/0x90 [ 367.903283][ T6233] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 367.909241][ T6233] RIP: 0033:0x7fd0f198efc9 [ 367.913686][ T6233] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 367.933321][ T6233] RSP: 002b:00007fd0f27e0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 367.941839][ T6233] RAX: ffffffffffffffda RBX: 00007fd0f1be6090 RCX: 00007fd0f198efc9 [ 367.950331][ T6233] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 367.958323][ T6233] RBP: 00007fd0f27e0090 R08: 0000000000000000 R09: 0000000000000000 [ 367.966328][ T6233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 367.974328][ T6233] R13: 00007fd0f1be6128 R14: 00007fd0f1be6090 R15: 00007ffd223d2ef8 [ 367.982332][ T6233] [ 368.553178][ T6240] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 368.645906][ T6239] netlink: 208064 bytes leftover after parsing attributes in process `syz.0.118'. [ 368.790146][ T6242] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 368.953472][ T6255] FAULT_INJECTION: forcing a failure. [ 368.953472][ T6255] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 368.971864][ T6255] CPU: 0 PID: 6255 Comm: syz.3.124 Not tainted syzkaller #0 [ 368.979372][ T6255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 368.989458][ T6255] Call Trace: [ 368.992748][ T6255] [ 368.995696][ T6255] dump_stack_lvl+0x16c/0x230 [ 369.000407][ T6255] ? show_regs_print_info+0x20/0x20 [ 369.005713][ T6255] ? load_image+0x3b0/0x3b0 [ 369.010230][ T6255] ? __might_fault+0xaa/0x120 [ 369.015007][ T6255] ? __lock_acquire+0x7c80/0x7c80 [ 369.020077][ T6255] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 369.026072][ T6255] should_fail_ex+0x39d/0x4d0 [ 369.030771][ T6255] _copy_from_user+0x2f/0xe0 [ 369.035378][ T6255] dev_ethtool+0xc5/0x1720 [ 369.039815][ T6255] ? ethtool_get_module_eeprom_call+0x170/0x170 [ 369.046071][ T6255] ? __lock_acquire+0x7c80/0x7c80 [ 369.051110][ T6255] ? __might_fault+0xaa/0x120 [ 369.055816][ T6255] ? full_name_hash+0x92/0xe0 [ 369.060527][ T6255] ? dev_load+0x21/0x1f0 [ 369.064807][ T6255] dev_ioctl+0x4ca/0x1170 [ 369.069169][ T6255] sock_do_ioctl+0x226/0x2f0 [ 369.073781][ T6255] ? sock_show_fdinfo+0xb0/0xb0 [ 369.078671][ T6255] sock_ioctl+0x623/0x7a0 [ 369.083022][ T6255] ? sock_poll+0x3d0/0x3d0 [ 369.087462][ T6255] ? bpf_lsm_file_ioctl+0x9/0x10 [ 369.092415][ T6255] ? security_file_ioctl+0x80/0xa0 [ 369.097550][ T6255] ? sock_poll+0x3d0/0x3d0 [ 369.102057][ T6255] __se_sys_ioctl+0xfd/0x170 [ 369.106676][ T6255] do_syscall_64+0x55/0xb0 [ 369.111117][ T6255] ? clear_bhb_loop+0x40/0x90 [ 369.115810][ T6255] ? clear_bhb_loop+0x40/0x90 [ 369.120500][ T6255] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 369.126408][ T6255] RIP: 0033:0x7f2d5118efc9 [ 369.130838][ T6255] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 369.150462][ T6255] RSP: 002b:00007f2d51fb3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 369.158899][ T6255] RAX: ffffffffffffffda RBX: 00007f2d513e5fa0 RCX: 00007f2d5118efc9 [ 369.166889][ T6255] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000014 [ 369.174883][ T6255] RBP: 00007f2d51fb3090 R08: 0000000000000000 R09: 0000000000000000 [ 369.182872][ T6255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 369.190856][ T6255] R13: 00007f2d513e6038 R14: 00007f2d513e5fa0 R15: 00007ffc25d1dc28 [ 369.198856][ T6255] [ 369.561215][ T6263] warning: `syz.3.126' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 370.225602][ T6274] netlink: 208064 bytes leftover after parsing attributes in process `syz.2.131'. [ 370.749371][ T6276] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 371.157274][ T6279] syz.2.133 (6279) used greatest stack depth: 19912 bytes left [ 371.724155][ T6295] FAULT_INJECTION: forcing a failure. [ 371.724155][ T6295] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 371.738157][ T6295] CPU: 1 PID: 6295 Comm: syz.1.140 Not tainted syzkaller #0 [ 371.745470][ T6295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 371.755571][ T6295] Call Trace: [ 371.758887][ T6295] [ 371.761835][ T6295] dump_stack_lvl+0x16c/0x230 [ 371.766559][ T6295] ? show_regs_print_info+0x20/0x20 [ 371.771760][ T6295] ? load_image+0x3b0/0x3b0 [ 371.776273][ T6295] ? __lock_acquire+0x7c80/0x7c80 [ 371.781385][ T6295] ? snprintf+0xdb/0x120 [ 371.785620][ T6295] should_fail_ex+0x39d/0x4d0 [ 371.790305][ T6295] _copy_to_user+0x2f/0xa0 [ 371.794718][ T6295] simple_read_from_buffer+0xe7/0x150 [ 371.800097][ T6295] proc_fail_nth_read+0x1e3/0x250 [ 371.805126][ T6295] ? proc_fault_inject_write+0x340/0x340 [ 371.810774][ T6295] ? fsnotify_perm+0x271/0x5e0 [ 371.815541][ T6295] ? proc_fault_inject_write+0x340/0x340 [ 371.821259][ T6295] vfs_read+0x27e/0x920 [ 371.825419][ T6295] ? kernel_read+0x1e0/0x1e0 [ 371.830012][ T6295] ? __fget_files+0x28/0x4d0 [ 371.834686][ T6295] ? __fget_files+0x44a/0x4d0 [ 371.839469][ T6295] ? __fdget_pos+0x2a3/0x330 [ 371.844058][ T6295] ? ksys_read+0x75/0x250 [ 371.848395][ T6295] ksys_read+0x147/0x250 [ 371.852651][ T6295] ? vfs_write+0x940/0x940 [ 371.857066][ T6295] ? lockdep_hardirqs_on+0x98/0x150 [ 371.862264][ T6295] do_syscall_64+0x55/0xb0 [ 371.866691][ T6295] ? clear_bhb_loop+0x40/0x90 [ 371.871368][ T6295] ? clear_bhb_loop+0x40/0x90 [ 371.876038][ T6295] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 371.881944][ T6295] RIP: 0033:0x7fd0f198d9dc [ 371.886361][ T6295] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 371.905977][ T6295] RSP: 002b:00007fd0f2801030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 371.914392][ T6295] RAX: ffffffffffffffda RBX: 00007fd0f1be5fa0 RCX: 00007fd0f198d9dc [ 371.922358][ T6295] RDX: 000000000000000f RSI: 00007fd0f28010a0 RDI: 0000000000000005 [ 371.930323][ T6295] RBP: 00007fd0f2801090 R08: 0000000000000000 R09: 0000000000000000 [ 371.938290][ T6295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 371.946262][ T6295] R13: 00007fd0f1be6038 R14: 00007fd0f1be5fa0 R15: 00007ffd223d2ef8 [ 371.954248][ T6295] [ 372.185754][ T6301] netlink: 208064 bytes leftover after parsing attributes in process `syz.1.141'. [ 372.202148][ T6298] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 373.746522][ T6334] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 373.921882][ T5907] tipc: Subscription rejected, illegal request [ 374.788468][ T6356] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 375.081697][ T6364] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 376.563186][ T6390] FAULT_INJECTION: forcing a failure. [ 376.563186][ T6390] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 376.610758][ T6390] CPU: 1 PID: 6390 Comm: syz.1.175 Not tainted syzkaller #0 [ 376.618116][ T6390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 376.628237][ T6390] Call Trace: [ 376.631536][ T6390] [ 376.634479][ T6390] dump_stack_lvl+0x16c/0x230 [ 376.639295][ T6390] ? show_regs_print_info+0x20/0x20 [ 376.644533][ T6390] ? load_image+0x3b0/0x3b0 [ 376.649063][ T6390] ? __might_fault+0xaa/0x120 [ 376.653765][ T6390] ? __lock_acquire+0x7c80/0x7c80 [ 376.658821][ T6390] should_fail_ex+0x39d/0x4d0 [ 376.663532][ T6390] _copy_to_iter+0x1c8/0x10d0 [ 376.668838][ T6390] ? _copy_to_iter+0x1b1/0x10d0 [ 376.673712][ T6390] ? __virt_addr_valid+0x18c/0x540 [ 376.678840][ T6390] ? iov_iter_init+0x1e0/0x1e0 [ 376.683632][ T6390] ? __virt_addr_valid+0x18c/0x540 [ 376.688760][ T6390] ? __virt_addr_valid+0x469/0x540 [ 376.693984][ T6390] ? __phys_addr_symbol+0x2f/0x70 [ 376.699120][ T6390] ? __check_object_size+0x506/0xa30 [ 376.704441][ T6390] __skb_datagram_iter+0xdb/0x780 [ 376.709492][ T6390] ? skb_copy_datagram_iter+0x200/0x200 [ 376.715061][ T6390] __skb_datagram_iter+0x561/0x780 [ 376.720200][ T6390] ? skb_copy_datagram_iter+0x200/0x200 [ 376.725769][ T6390] skb_copy_datagram_iter+0xb1/0x200 [ 376.731073][ T6390] packet_recvmsg+0x66e/0x15f0 [ 376.735902][ T6390] ? packet_sendmsg+0x4d30/0x4d30 [ 376.740959][ T6390] ? aa_af_perm+0x2b0/0x2b0 [ 376.745486][ T6390] ? __lock_acquire+0x1260/0x7c80 [ 376.750530][ T6390] ? verify_lock_unused+0x140/0x140 [ 376.755741][ T6390] ? aa_sock_msg_perm+0x94/0x150 [ 376.760697][ T6390] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 376.766002][ T6390] ? security_socket_recvmsg+0x89/0xb0 [ 376.771483][ T6390] ? packet_sendmsg+0x4d30/0x4d30 [ 376.776546][ T6390] ____sys_recvmsg+0x29e/0x5b0 [ 376.781348][ T6390] ? __sys_recvmsg_sock+0x50/0x50 [ 376.786412][ T6390] ? import_iovec+0x73/0xa0 [ 376.790937][ T6390] ___sys_recvmsg+0x1b6/0x510 [ 376.795735][ T6390] ? __sys_recvmsg+0x270/0x270 [ 376.800533][ T6390] ? ksys_write+0x1c1/0x250 [ 376.805069][ T6390] ? __fget_files+0x44a/0x4d0 [ 376.809790][ T6390] __x64_sys_recvmsg+0x1f2/0x2c0 [ 376.814762][ T6390] ? ___sys_recvmsg+0x510/0x510 [ 376.819654][ T6390] ? lockdep_hardirqs_on+0x98/0x150 [ 376.824876][ T6390] do_syscall_64+0x55/0xb0 [ 376.829402][ T6390] ? clear_bhb_loop+0x40/0x90 [ 376.834099][ T6390] ? clear_bhb_loop+0x40/0x90 [ 376.838913][ T6390] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 376.844853][ T6390] RIP: 0033:0x7fd0f198efc9 [ 376.849289][ T6390] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 376.868918][ T6390] RSP: 002b:00007fd0f2801038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 376.877360][ T6390] RAX: ffffffffffffffda RBX: 00007fd0f1be5fa0 RCX: 00007fd0f198efc9 [ 376.885361][ T6390] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 376.893351][ T6390] RBP: 00007fd0f2801090 R08: 0000000000000000 R09: 0000000000000000 [ 376.901338][ T6390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 376.909341][ T6390] R13: 00007fd0f1be6038 R14: 00007fd0f1be5fa0 R15: 00007ffd223d2ef8 [ 376.917345][ T6390] [ 376.962628][ T6385] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 377.856796][ T6415] netlink: 'syz.2.184': attribute type 33 has an invalid length. [ 377.865183][ T6415] netlink: 170068 bytes leftover after parsing attributes in process `syz.2.184'. [ 377.925629][ T6415] netlink: 'syz.2.184': attribute type 33 has an invalid length. [ 377.933776][ T6415] netlink: 170068 bytes leftover after parsing attributes in process `syz.2.184'. [ 378.217825][ T6422] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 379.095449][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.106530][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.312172][ T6450] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 381.738200][ T6486] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 382.214662][ T6507] delete_channel: no stack [ 382.234907][ T6507] delete_channel: no stack [ 382.389216][ T6509] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.221'. [ 384.134007][ T6517] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 385.528473][ T6526] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.227'. [ 385.680714][ T6539] netlink: 'syz.1.232': attribute type 9 has an invalid length. [ 385.688906][ T6539] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.232'. [ 385.873603][ T6542] netlink: 'syz.0.233': attribute type 9 has an invalid length. [ 385.889332][ T6542] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.233'. [ 386.005007][ T6536] delete_channel: no stack [ 386.703405][ T6541] delete_channel: no stack [ 387.231334][ T6546] Illegal XDP return value 431406883 on prog (id 223) dev N/A, expect packet loss! [ 387.440243][ T6548] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 387.794700][ T6561] FAULT_INJECTION: forcing a failure. [ 387.794700][ T6561] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 387.826282][ T6561] CPU: 0 PID: 6561 Comm: syz.1.240 Not tainted syzkaller #0 [ 387.833683][ T6561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 387.843811][ T6561] Call Trace: [ 387.847129][ T6561] [ 387.850079][ T6561] dump_stack_lvl+0x16c/0x230 [ 387.854788][ T6561] ? show_regs_print_info+0x20/0x20 [ 387.860010][ T6561] ? load_image+0x3b0/0x3b0 [ 387.864543][ T6561] ? __might_fault+0xaa/0x120 [ 387.869243][ T6561] ? __lock_acquire+0x7c80/0x7c80 [ 387.874299][ T6561] ? perf_trace_lock_acquire+0x32a/0x3e0 [ 387.879967][ T6561] should_fail_ex+0x39d/0x4d0 [ 387.884681][ T6561] _copy_from_user+0x2f/0xe0 [ 387.889295][ T6561] ___sys_sendmsg+0x159/0x290 [ 387.894007][ T6561] ? __sys_sendmsg+0x270/0x270 [ 387.898840][ T6561] ? __lock_acquire+0x7c80/0x7c80 [ 387.903938][ T6561] __se_sys_sendmsg+0x1a5/0x270 [ 387.908820][ T6561] ? __x64_sys_sendmsg+0x80/0x80 [ 387.913954][ T6561] ? lockdep_hardirqs_on+0x98/0x150 [ 387.919187][ T6561] do_syscall_64+0x55/0xb0 [ 387.923622][ T6561] ? clear_bhb_loop+0x40/0x90 [ 387.928332][ T6561] ? clear_bhb_loop+0x40/0x90 [ 387.933032][ T6561] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 387.939639][ T6561] RIP: 0033:0x7fd0f198efc9 [ 387.944125][ T6561] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 387.963772][ T6561] RSP: 002b:00007fd0f2801038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 387.972231][ T6561] RAX: ffffffffffffffda RBX: 00007fd0f1be5fa0 RCX: 00007fd0f198efc9 [ 387.980220][ T6561] RDX: 0000000000000004 RSI: 0000200000000200 RDI: 0000000000000006 [ 387.988310][ T6561] RBP: 00007fd0f2801090 R08: 0000000000000000 R09: 0000000000000000 [ 387.996306][ T6561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 388.004318][ T6561] R13: 00007fd0f1be6038 R14: 00007fd0f1be5fa0 R15: 00007ffd223d2ef8 [ 388.012351][ T6561] [ 388.462567][ T6570] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.243'. [ 390.139284][ T6591] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 390.311472][ T6599] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f [ 390.359539][ T6604] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.253'. [ 390.370229][ T6599] netlink: 'syz.1.251': attribute type 12 has an invalid length. [ 390.383964][ T6599] netlink: 132 bytes leftover after parsing attributes in process `syz.1.251'. [ 390.577368][ T6612] FAULT_INJECTION: forcing a failure. [ 390.577368][ T6612] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 390.596548][ T6612] CPU: 0 PID: 6612 Comm: syz.2.255 Not tainted syzkaller #0 [ 390.604005][ T6612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 390.614090][ T6612] Call Trace: [ 390.617389][ T6612] [ 390.620334][ T6612] dump_stack_lvl+0x16c/0x230 [ 390.625131][ T6612] ? show_regs_print_info+0x20/0x20 [ 390.630437][ T6612] ? load_image+0x3b0/0x3b0 [ 390.634963][ T6612] ? __might_fault+0xaa/0x120 [ 390.639669][ T6612] ? __lock_acquire+0x7c80/0x7c80 [ 390.644811][ T6612] should_fail_ex+0x39d/0x4d0 [ 390.649622][ T6612] _copy_from_iter+0x1d3/0x1290 [ 390.655044][ T6612] ? slab_post_alloc_hook+0x8a/0x4d0 [ 390.660376][ T6612] ? __virt_addr_valid+0x18c/0x540 [ 390.665774][ T6612] ? __lock_acquire+0x7c80/0x7c80 [ 390.670824][ T6612] ? rcu_is_watching+0x15/0xb0 [ 390.675711][ T6612] ? copyout_mc+0x70/0x70 [ 390.680078][ T6612] ? __virt_addr_valid+0x18c/0x540 [ 390.685220][ T6612] ? __virt_addr_valid+0x18c/0x540 [ 390.690362][ T6612] ? __virt_addr_valid+0x469/0x540 [ 390.695497][ T6612] ? __check_object_size+0x506/0xa30 [ 390.700809][ T6612] netlink_sendmsg+0x75c/0xbe0 [ 390.705598][ T6612] ? netlink_getsockopt+0x580/0x580 [ 390.710824][ T6612] ? aa_sock_msg_perm+0x94/0x150 [ 390.715792][ T6612] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 390.721122][ T6612] ? security_socket_sendmsg+0x80/0xa0 [ 390.726613][ T6612] ? netlink_getsockopt+0x580/0x580 [ 390.731849][ T6612] ____sys_sendmsg+0x5bf/0x950 [ 390.736657][ T6612] ? __asan_memset+0x22/0x40 [ 390.741270][ T6612] ? __sys_sendmsg_sock+0x30/0x30 [ 390.746313][ T6612] ? __import_iovec+0x5f2/0x860 [ 390.751210][ T6612] ? import_iovec+0x73/0xa0 [ 390.755835][ T6612] ___sys_sendmsg+0x220/0x290 [ 390.760545][ T6612] ? __sys_sendmsg+0x270/0x270 [ 390.765406][ T6612] ? __lock_acquire+0x7c80/0x7c80 [ 390.770482][ T6612] __se_sys_sendmsg+0x1a5/0x270 [ 390.775392][ T6612] ? __x64_sys_sendmsg+0x80/0x80 [ 390.780411][ T6612] ? lockdep_hardirqs_on+0x98/0x150 [ 390.785662][ T6612] do_syscall_64+0x55/0xb0 [ 390.790122][ T6612] ? clear_bhb_loop+0x40/0x90 [ 390.794821][ T6612] ? clear_bhb_loop+0x40/0x90 [ 390.799518][ T6612] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 390.805447][ T6612] RIP: 0033:0x7f99bf98efc9 [ 390.809893][ T6612] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 390.829653][ T6612] RSP: 002b:00007f99c08ea038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 390.838110][ T6612] RAX: ffffffffffffffda RBX: 00007f99bfbe5fa0 RCX: 00007f99bf98efc9 [ 390.846201][ T6612] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 390.854215][ T6612] RBP: 00007f99c08ea090 R08: 0000000000000000 R09: 0000000000000000 [ 390.862205][ T6612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 390.870201][ T6612] R13: 00007f99bfbe6038 R14: 00007f99bfbe5fa0 R15: 00007fffd1a42968 [ 390.878213][ T6612] [ 391.464082][ T6619] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 393.119604][ T6641] netlink: 208064 bytes leftover after parsing attributes in process `syz.1.264'. [ 393.510631][ T6647] netlink: 'syz.1.267': attribute type 10 has an invalid length. [ 393.528110][ T6647] netlink: 55 bytes leftover after parsing attributes in process `syz.1.267'. [ 393.868592][ T6654] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 394.227872][ T6671] netlink: 208064 bytes leftover after parsing attributes in process `syz.2.276'. [ 395.271202][ T6684] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 396.137722][ T6709] netlink: 208064 bytes leftover after parsing attributes in process `syz.2.289'. [ 396.177217][ T6712] netlink: 71 bytes leftover after parsing attributes in process `syz.1.290'. [ 396.413051][ T6713] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 399.270303][ T6745] netlink: 'syz.0.299': attribute type 33 has an invalid length. [ 399.314519][ T6745] netlink: 36 bytes leftover after parsing attributes in process `syz.0.299'. [ 399.379896][ T6748] netlink: 208064 bytes leftover after parsing attributes in process `syz.2.301'. [ 399.435537][ T6750] FAULT_INJECTION: forcing a failure. [ 399.435537][ T6750] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 399.454782][ T6750] CPU: 1 PID: 6750 Comm: syz.3.302 Not tainted syzkaller #0 [ 399.462236][ T6750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 399.472403][ T6750] Call Trace: [ 399.475706][ T6750] [ 399.478654][ T6750] dump_stack_lvl+0x16c/0x230 [ 399.483357][ T6750] ? show_regs_print_info+0x20/0x20 [ 399.488746][ T6750] ? load_image+0x3b0/0x3b0 [ 399.493258][ T6750] ? __might_fault+0xaa/0x120 [ 399.497935][ T6750] ? __lock_acquire+0x7c80/0x7c80 [ 399.503138][ T6750] should_fail_ex+0x39d/0x4d0 [ 399.507820][ T6750] _copy_from_iter+0x1d3/0x1290 [ 399.512842][ T6750] ? slab_post_alloc_hook+0x8a/0x4d0 [ 399.518125][ T6750] ? __virt_addr_valid+0x18c/0x540 [ 399.523231][ T6750] ? __lock_acquire+0x7c80/0x7c80 [ 399.528251][ T6750] ? rcu_is_watching+0x15/0xb0 [ 399.533017][ T6750] ? copyout_mc+0x70/0x70 [ 399.537346][ T6750] ? __virt_addr_valid+0x18c/0x540 [ 399.542543][ T6750] ? __virt_addr_valid+0x18c/0x540 [ 399.547739][ T6750] ? __virt_addr_valid+0x469/0x540 [ 399.552944][ T6750] ? __check_object_size+0x506/0xa30 [ 399.558248][ T6750] netlink_sendmsg+0x75c/0xbe0 [ 399.563980][ T6750] ? netlink_getsockopt+0x580/0x580 [ 399.569180][ T6750] ? aa_sock_msg_perm+0x94/0x150 [ 399.574217][ T6750] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 399.579496][ T6750] ? security_socket_sendmsg+0x80/0xa0 [ 399.584951][ T6750] ? netlink_getsockopt+0x580/0x580 [ 399.590145][ T6750] ____sys_sendmsg+0x5bf/0x950 [ 399.595349][ T6750] ? __asan_memset+0x22/0x40 [ 399.599946][ T6750] ? __sys_sendmsg_sock+0x30/0x30 [ 399.604972][ T6750] ? __import_iovec+0x5f2/0x860 [ 399.609833][ T6750] ? import_iovec+0x73/0xa0 [ 399.614338][ T6750] ___sys_sendmsg+0x220/0x290 [ 399.619019][ T6750] ? __sys_sendmsg+0x270/0x270 [ 399.623885][ T6750] ? __lock_acquire+0x7c80/0x7c80 [ 399.628924][ T6750] __se_sys_sendmsg+0x1a5/0x270 [ 399.633774][ T6750] ? perf_trace_preemptirq_template+0x281/0x340 [ 399.640016][ T6750] ? __x64_sys_sendmsg+0x80/0x80 [ 399.644963][ T6750] ? lockdep_hardirqs_on+0x98/0x150 [ 399.650159][ T6750] do_syscall_64+0x55/0xb0 [ 399.654576][ T6750] ? clear_bhb_loop+0x40/0x90 [ 399.659334][ T6750] ? clear_bhb_loop+0x40/0x90 [ 399.664093][ T6750] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 399.669982][ T6750] RIP: 0033:0x7f2d5118efc9 [ 399.674390][ T6750] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 399.694166][ T6750] RSP: 002b:00007f2d51fb3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 399.702672][ T6750] RAX: ffffffffffffffda RBX: 00007f2d513e5fa0 RCX: 00007f2d5118efc9 [ 399.711082][ T6750] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 399.719056][ T6750] RBP: 00007f2d51fb3090 R08: 0000000000000000 R09: 0000000000000000 [ 399.727023][ T6750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 399.735337][ T6750] R13: 00007f2d513e6038 R14: 00007f2d513e5fa0 R15: 00007ffc25d1dc28 [ 399.743321][ T6750] [ 399.779630][ T6743] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 401.061670][ T6772] netlink: 'syz.0.311': attribute type 33 has an invalid length. [ 401.083847][ T6772] netlink: 36 bytes leftover after parsing attributes in process `syz.0.311'. [ 401.697248][ T6780] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 401.859678][ T6790] netlink: 208064 bytes leftover after parsing attributes in process `syz.3.317'. [ 402.840771][ T6817] FAULT_INJECTION: forcing a failure. [ 402.840771][ T6817] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 402.864815][ T6817] CPU: 1 PID: 6817 Comm: syz.0.327 Not tainted syzkaller #0 [ 402.872170][ T6817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 402.882274][ T6817] Call Trace: [ 402.885564][ T6817] [ 402.888502][ T6817] dump_stack_lvl+0x16c/0x230 [ 402.893201][ T6817] ? show_regs_print_info+0x20/0x20 [ 402.898433][ T6817] ? load_image+0x3b0/0x3b0 [ 402.902952][ T6817] ? __might_fault+0xaa/0x120 [ 402.907651][ T6817] ? __lock_acquire+0x7c80/0x7c80 [ 402.912702][ T6817] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 402.918691][ T6817] should_fail_ex+0x39d/0x4d0 [ 402.923377][ T6817] _copy_from_iter+0x1d3/0x1290 [ 402.928248][ T6817] ? __virt_addr_valid+0x18c/0x540 [ 402.933449][ T6817] ? __lock_acquire+0x7c80/0x7c80 [ 402.938474][ T6817] ? copyout_mc+0x70/0x70 [ 402.942799][ T6817] ? __virt_addr_valid+0x18c/0x540 [ 402.947912][ T6817] ? __virt_addr_valid+0x18c/0x540 [ 402.953115][ T6817] ? __virt_addr_valid+0x469/0x540 [ 402.958262][ T6817] ? __check_object_size+0x506/0xa30 [ 402.963575][ T6817] netlink_sendmsg+0x75c/0xbe0 [ 402.968353][ T6817] ? netlink_getsockopt+0x580/0x580 [ 402.973554][ T6817] ? aa_sock_msg_perm+0x94/0x150 [ 402.978493][ T6817] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 402.983778][ T6817] ? security_socket_sendmsg+0x80/0xa0 [ 402.989246][ T6817] ? netlink_getsockopt+0x580/0x580 [ 402.994438][ T6817] ____sys_sendmsg+0x5bf/0x950 [ 402.999394][ T6817] ? __asan_memset+0x22/0x40 [ 403.003988][ T6817] ? __sys_sendmsg_sock+0x30/0x30 [ 403.009061][ T6817] ? __import_iovec+0x5f2/0x860 [ 403.014003][ T6817] ? import_iovec+0x73/0xa0 [ 403.018505][ T6817] ___sys_sendmsg+0x220/0x290 [ 403.023188][ T6817] ? __sys_sendmsg+0x270/0x270 [ 403.027962][ T6817] ? __lock_acquire+0x7c80/0x7c80 [ 403.032999][ T6817] __se_sys_sendmsg+0x1a5/0x270 [ 403.037860][ T6817] ? __x64_sys_sendmsg+0x80/0x80 [ 403.042814][ T6817] ? syscall_enter_from_user_mode+0x2e/0x80 [ 403.048882][ T6817] do_syscall_64+0x55/0xb0 [ 403.053297][ T6817] ? clear_bhb_loop+0x40/0x90 [ 403.057969][ T6817] ? clear_bhb_loop+0x40/0x90 [ 403.062644][ T6817] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 403.068536][ T6817] RIP: 0033:0x7fe2f198efc9 [ 403.072950][ T6817] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 403.092559][ T6817] RSP: 002b:00007fe2efbf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 403.100976][ T6817] RAX: ffffffffffffffda RBX: 00007fe2f1be5fa0 RCX: 00007fe2f198efc9 [ 403.108943][ T6817] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000005 [ 403.116933][ T6817] RBP: 00007fe2efbf6090 R08: 0000000000000000 R09: 0000000000000000 [ 403.124900][ T6817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 403.132868][ T6817] R13: 00007fe2f1be6038 R14: 00007fe2f1be5fa0 R15: 00007ffe6a6e26e8 [ 403.140843][ T6817] [ 403.408334][ T6818] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 403.462456][ T6829] FAULT_INJECTION: forcing a failure. [ 403.462456][ T6829] name failslab, interval 1, probability 0, space 0, times 0 [ 403.479856][ T6829] CPU: 1 PID: 6829 Comm: syz.0.333 Not tainted syzkaller #0 [ 403.487231][ T6829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 403.497313][ T6829] Call Trace: [ 403.500604][ T6829] [ 403.503547][ T6829] dump_stack_lvl+0x16c/0x230 [ 403.508256][ T6829] ? show_regs_print_info+0x20/0x20 [ 403.513509][ T6829] ? load_image+0x3b0/0x3b0 [ 403.518051][ T6829] ? __might_sleep+0xe0/0xe0 [ 403.522664][ T6829] ? __lock_acquire+0x7c80/0x7c80 [ 403.527714][ T6829] should_fail_ex+0x39d/0x4d0 [ 403.532418][ T6829] should_failslab+0x9/0x20 [ 403.536957][ T6829] slab_pre_alloc_hook+0x59/0x310 [ 403.542093][ T6829] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 403.547833][ T6829] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 403.553588][ T6829] __kmem_cache_alloc_node+0x53/0x260 [ 403.558982][ T6829] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 403.564718][ T6829] __kmalloc+0xa4/0x240 [ 403.568989][ T6829] tomoyo_realpath_from_path+0xe3/0x5d0 [ 403.574573][ T6829] tomoyo_path_number_perm+0x1ea/0x590 [ 403.580068][ T6829] ? tomoyo_path_number_perm+0x1ba/0x590 [ 403.585752][ T6829] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 403.591231][ T6829] ? hrtimer_interrupt+0x597/0x9c0 [ 403.596360][ T6829] ? ktime_get+0x7f/0x280 [ 403.600730][ T6829] ? __fget_files+0x28/0x4d0 [ 403.605351][ T6829] security_file_ioctl+0x70/0xa0 [ 403.610312][ T6829] __se_sys_ioctl+0x48/0x170 [ 403.614916][ T6829] do_syscall_64+0x55/0xb0 [ 403.619344][ T6829] ? clear_bhb_loop+0x40/0x90 [ 403.624114][ T6829] ? clear_bhb_loop+0x40/0x90 [ 403.628800][ T6829] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 403.634712][ T6829] RIP: 0033:0x7fe2f198efc9 [ 403.639134][ T6829] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 403.658755][ T6829] RSP: 002b:00007fe2efbf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 403.667193][ T6829] RAX: ffffffffffffffda RBX: 00007fe2f1be5fa0 RCX: 00007fe2f198efc9 [ 403.675179][ T6829] RDX: 000000110e22ffff RSI: 000000004004743d RDI: 0000000000000005 [ 403.683251][ T6829] RBP: 00007fe2efbf6090 R08: 0000000000000000 R09: 0000000000000000 [ 403.691496][ T6829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 403.699477][ T6829] R13: 00007fe2f1be6038 R14: 00007fe2f1be5fa0 R15: 00007ffe6a6e26e8 [ 403.707475][ T6829] [ 403.714763][ T6830] netlink: 208064 bytes leftover after parsing attributes in process `syz.1.332'. [ 403.726801][ T6829] ERROR: Out of memory at tomoyo_realpath_from_path. [ 406.280817][ T5874] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.319020][ T6853] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 406.382508][ T5874] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.470312][ T5874] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.536627][ T5874] bond0: (slave netdevsim0): Releasing backup interface [ 406.549691][ T5874] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.677681][ T5874] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.781890][ T5874] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.860789][ T5874] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.928712][ T5874] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.481296][ T5874] hsr_slave_0: left promiscuous mode [ 408.489318][ T5874] hsr_slave_1: left promiscuous mode [ 408.495666][ T5874] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 408.507367][ T5874] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 408.516410][ T5874] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 408.523876][ T5874] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 408.533464][ T5874] bridge0: port 3(team0) entered disabled state [ 408.544564][ T5874] bridge_slave_1: left allmulticast mode [ 408.550461][ T5874] bridge_slave_1: left promiscuous mode [ 408.558401][ T5874] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.572189][ T5874] bridge_slave_0: left allmulticast mode [ 408.582739][ T5874] bridge_slave_0: left promiscuous mode [ 408.590798][ T5874] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.606455][ T5874] hsr_slave_0: left promiscuous mode [ 408.612560][ T5874] hsr_slave_1: left promiscuous mode [ 408.619290][ T5874] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 408.627722][ T5874] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 408.635392][ T5874] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 408.643028][ T5874] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 408.650847][ T5874] bridge0: port 3(team0) entered disabled state [ 408.659555][ T5874] bridge_slave_1: left allmulticast mode [ 408.665491][ T5874] bridge_slave_1: left promiscuous mode [ 408.671386][ T5874] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.681794][ T5874] bridge_slave_0: left allmulticast mode [ 408.687576][ T5874] bridge_slave_0: left promiscuous mode [ 408.693234][ T5874] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.726314][ T5874] veth1_macvtap: left promiscuous mode [ 408.732930][ T5874] veth0_macvtap: left promiscuous mode [ 408.740770][ T5874] veth1_vlan: left promiscuous mode [ 408.746451][ T5874] veth0_vlan: left promiscuous mode [ 408.755626][ T5874] veth1_macvtap: left promiscuous mode [ 408.761378][ T5874] veth0_macvtap: left promiscuous mode [ 408.767039][ T5874] veth1_vlan: left promiscuous mode [ 408.772304][ T5874] veth0_vlan: left promiscuous mode [ 409.282340][ T5874] team_slave_1 (unregistering): left promiscuous mode [ 409.289557][ T5874] team_slave_1 (unregistering): left allmulticast mode [ 409.300950][ T5874] team0 (unregistering): Port device team_slave_1 removed [ 409.335756][ T5874] team_slave_0 (unregistering): left promiscuous mode [ 409.342984][ T5874] team_slave_0 (unregistering): left allmulticast mode [ 409.351601][ T5874] team0 (unregistering): Port device team_slave_0 removed [ 409.384939][ T5874] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 409.423435][ T5874] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 409.791509][ T5874] bond0 (unregistering): Released all slaves [ 410.158458][ T5874] team_slave_1 (unregistering): left promiscuous mode [ 410.165474][ T5874] team_slave_1 (unregistering): left allmulticast mode [ 410.178748][ T5874] team0 (unregistering): Port device team_slave_1 removed [ 410.211164][ T5874] team_slave_0 (unregistering): left promiscuous mode [ 410.218107][ T5874] team_slave_0 (unregistering): left allmulticast mode [ 410.225833][ T5874] team0 (unregistering): Port device team_slave_0 removed [ 410.262397][ T5874] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 410.300011][ T5874] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 410.647919][ T5874] bond0 (unregistering): Released all slaves [ 411.274568][ T5874] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.351576][ T5874] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.402345][ T5874] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.467542][ T5874] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.403073][ T5874] hsr_slave_0: left promiscuous mode [ 412.409246][ T5874] hsr_slave_1: left promiscuous mode [ 412.415488][ T5874] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 412.423164][ T5874] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 412.431729][ T5874] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 412.439564][ T5874] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 412.451531][ T5874] bridge0: port 3(team0) entered disabled state [ 412.460550][ T5874] bridge_slave_1: left allmulticast mode [ 412.466319][ T5874] bridge_slave_1: left promiscuous mode [ 412.472673][ T5874] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.481748][ T5874] bridge_slave_0: left allmulticast mode [ 412.487690][ T5874] bridge_slave_0: left promiscuous mode [ 412.493355][ T5874] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.512588][ T5874] veth1_macvtap: left promiscuous mode [ 412.518199][ T5874] veth0_macvtap: left promiscuous mode [ 412.523743][ T5874] veth1_vlan: left promiscuous mode [ 412.529122][ T5874] veth0_vlan: left promiscuous mode [ 412.922187][ T5874] team_slave_1 (unregistering): left promiscuous mode [ 412.929969][ T5874] team_slave_1 (unregistering): left allmulticast mode [ 412.939577][ T5874] team0 (unregistering): Port device team_slave_1 removed [ 412.971612][ T5874] team_slave_0 (unregistering): left promiscuous mode [ 412.978528][ T5874] team_slave_0 (unregistering): left allmulticast mode [ 412.989476][ T5874] team0 (unregistering): Port device team_slave_0 removed [ 413.023707][ T5874] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 413.060702][ T5874] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 413.411396][ T5874] bond0 (unregistering): Released all slaves