last executing test programs: 1m36.315376343s ago: executing program 1 (id=4526): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r0, 0x107, 0x8, &(0x7f00000000c0), 0x8) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/22, 0x16}, 0x2) perf_event_open$cgroup(&(0x7f0000000140)={0x0, 0x80, 0xb, 0x3, 0x0, 0x4, 0x0, 0x7a9, 0x20000, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0xc48c, 0x1, @perf_bp={&(0x7f0000000040), 0x1}, 0x145d0, 0x1, 0x8, 0x5, 0x0, 0x6, 0x101, 0x0, 0x100, 0x0, 0x2}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0x7}, 0x104101, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x22, &(0x7f00000002c0)=@raw=[@map_idx={0x18, 0x4, 0x5, 0x0, 0x4}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x10}], &(0x7f0000000400)='GPL\x00', 0x8, 0x61, &(0x7f0000000440)=""/97, 0x1f00, 0x58, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000500)={0x4, 0xb, 0x8, 0x8}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000540)=[{0x3, 0x2, 0x7, 0x9}, {0x4, 0x1, 0x10, 0x4}, {0x2, 0x4, 0x5, 0x7}, {0x3, 0x3, 0xb, 0x8}, {0x3, 0x2, 0x1, 0x2}]}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$kcm(0xa, 0x1, 0x106) recvmsg(r2, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x2102) setsockopt$sock_attach_bpf(r1, 0x1, 0xb, &(0x7f0000000100), 0x4) 1m36.053615641s ago: executing program 1 (id=4530): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8003}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20403, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x9}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x60, &(0x7f0000000000)=[{&(0x7f0000000300)="2000000011008188040f80ec59acbc0413a181000d0000000001000000000000", 0x20}], 0x1}, 0x40000) r4 = socket$kcm(0x2, 0x6, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe0e41b0000900ac00060411000000040012000a0005000248035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db7259826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d00"/216, 0xd8}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x21, &(0x7f0000000240), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x9, 0x4, &(0x7f0000000780)=ANY=[@ANYRESOCT=r0], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xf, 0x0, &(0x7f0000000740)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4004, @dev={0xac, 0x14, 0x14, 0x4}}, 0x10, 0x0}, 0x28008840) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x41, &(0x7f00000006c0)=r6, 0x4) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f00000001c0)={r8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000080000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000070000008500000010"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r10) syz_clone(0x164000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m34.083208541s ago: executing program 3 (id=4540): sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x9e4, 0x5, 0x8, 0x20005, 0xfffd, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) close(0xffffffffffffffff) r1 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{0x0, 0x72}], 0x1}, 0x10) setsockopt$sock_attach_bpf(r0, 0x0, 0x30, 0x0, 0x5000) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x120) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{}, {}, {0x280000, 0x4, 0x10009, 0xc}], 0x10, 0xfffffff6}, 0x94) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b63d25a80648c2594f90124fc60100c064001000009053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$ITER_CREATE(0x21, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xd, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x13}, 0x94) sendmsg$kcm(r3, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000041) socket$kcm(0x10, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0xa8}, [@ldst={0x5, 0x3, 0x3, 0xa}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) 1m33.769064891s ago: executing program 0 (id=4541): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000001a00000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="76389e6a65585578f830e9000000", 0x0, 0x10001, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m33.439714651s ago: executing program 0 (id=4543): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180200000600000000000000000000008500000041000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xbc, 0x0, &(0x7f00000002c0)="0eb51b2d1517d706c01ef3a3ae8fa380e637e28308711b19be28855a3aa8bcc5a1e853ce4a60eb2f302b9df19e418ebe223ec982dca3003bd2fb19f638fecf97641a36da1e3cf91af0b0eea2697b6a95152ceead50fc542f0ab94d1c8c8271332fc29b4f45369f6b77a2bf5d8af2dd8b1c3c4c757fd97de8818b757f535441cf636f60e374460cc8ca25c3d6792c9c95957fcbe4ecdb66d29e8069c856349351cff95979eef4bee3672d78fe45c0665a7ede429f6459404b53648141", 0x0, 0x8005, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (fail_nth: 7) 1m33.425514711s ago: executing program 3 (id=4544): r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="cd", 0x1}], 0x1}, 0x240448c4) 1m33.352130454s ago: executing program 1 (id=4545): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x7, 0x2, 0x1, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000000053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) socket$kcm(0x1e, 0x1, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58, &(0x7f0000000000)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={r3, 0x0, 0x8}, 0xc) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x9, 0x1}, 0x0, 0x35, 0x1e7e7df9, 0x5, 0x9, 0x6, 0xa, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="d8000000180081064e81f782db4cb904021d0800067c7c09e8fe0ba1bc0008000600000003600e120800100002000401a8000600200e02400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) 1m33.17127548s ago: executing program 3 (id=4546): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0x8a0a5, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10002, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x4, 0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x7, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) close(0x3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x8, 0x0, 0x1, 0x64b, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xd040, 0x10000}, 0x14403, 0xfffc, 0x0, 0x5, 0x582, 0x20005, 0x8, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8912, &(0x7f0000000080)) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f0000000380)=@l2tp={0x2, 0x0, @multicast1, 0x4}, 0x4, 0x0}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8b1a, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_ext={0x1c, 0x13, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000006000000000000000f000000180000000800000000000000251800000d0000000800000018120000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffa4020000080000f2b70300000700000085000000060000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x2, 0x3}, 0x8, 0x10, 0x0, 0x0, 0xce15, 0xffffffffffffffff, 0x1, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000002c0)=[{0x1, 0x2, 0x1, 0xb}], 0x10, 0x3}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000015c0), 0x0, 0xff66, 0x10, 0x8, 0xffffffffffffff5a, 0x0}}, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b81, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x9, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d33, 0x10, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x5}, 0x102200, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={0xffffffffffffffff, 0x18000000000002a0, 0x7ee, 0x0, &(0x7f0000000e80)="b9e403c6631e39495aa05dc7cf1c", 0x0, 0x7ab, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x4bc}, 0x806, 0x5, 0x0, 0x8, 0x0, 0x1, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000000)='cpu<5\x00\x00\x00\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 1m32.913243277s ago: executing program 0 (id=4548): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000940)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000003000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xe, 0x0, &(0x7f00000003c0)="7993ff01190000e5ffa53b00008f", 0x0, 0x400, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4}, 0x50) perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x2, 0x0, 0xf, 0x0, 0x0, 0x400, 0x1e37cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x401, 0x200, 0x0, 0x7, 0x0, 0x100}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00'}, 0x94) r5 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8919, &(0x7f0000000040)={'ip6_vti0\x00', @random="02000400"}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@fwd={0x6}]}, {0x0, [0x2e, 0x2e, 0x0, 0x5f, 0x61, 0x5f, 0x5f]}}, 0x0, 0x2d, 0x0, 0x1, 0x4}, 0x28) sendmsg$inet(0xffffffffffffffff, 0x0, 0x200048cc) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000700)="d80000001000810468f70082db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a80016000a00014006000d00036010fab94dcf5c0461c1d67f6f94000534cf6ee08000a0e408e8dd095618e1f4dff3a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x20000004) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000140)={'wlan1\x00', @random="0100000000eb"}) r7 = socket$kcm(0x2, 0x2, 0x73) sendmsg$inet(r7, &(0x7f0000000500)={&(0x7f0000000300)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000400)=[{0x0}], 0x1}, 0x900000000000000) r8 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0xfffffffd}}], 0x18}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@fallback=r8, 0x2e, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0]}, 0x40) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x1c, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2, r9, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) 1m32.846465389s ago: executing program 1 (id=4549): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b26, &(0x7f0000001200)={'wlan1\x00', @random="f7280200e78d"}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x100084, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x21, 0x2, 0x2) socket$kcm(0x2b, 0x1, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00', 0x10}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f0, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32, @ANYRESHEX=0x0], 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003400220000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 1m32.671453665s ago: executing program 3 (id=4550): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="7110910000000000"], &(0x7f0000000200)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x10000, 0x800000, 0x9, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000100"/28], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r1, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x11}, 0x20) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000300)='syz0\x00', 0x200002, 0x0) openat$cgroup_procs(r2, &(0x7f0000000380)='tasks\x00', 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r5, 0x0, 0x24040810) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x90) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000001000)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000001040), 0x12) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000600)={0x0, 0x300, &(0x7f00000001c0)=[{&(0x7f0000000940)="2e00000010008188e6b62aa73772cc9f1ba1f8482e0000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0x0) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021d080207000000040000a118000200e000000100000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843c8802033d0803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 1m32.526524089s ago: executing program 1 (id=4553): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8003}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20403, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x9}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x60, &(0x7f0000000000)=[{&(0x7f0000000300)="2000000011008188040f80ec59acbc0413a181000d0000000001000000000000", 0x20}], 0x1}, 0x40000) r4 = socket$kcm(0x2, 0x6, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe0e41b0000900ac00060411000000040012000a0005000248035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db7259826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d00"/216, 0xd8}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x21, &(0x7f0000000240), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x9, 0x4, &(0x7f0000000780)=ANY=[@ANYRESOCT=r0], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xf, 0x0, &(0x7f0000000740)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4004, @dev={0xac, 0x14, 0x14, 0x4}}, 0x10, 0x0}, 0x28008840) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x41, &(0x7f00000006c0)=r6, 0x4) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f00000001c0)={r8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000080000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000070000008500000010"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r10) syz_clone(0x164000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m32.464062001s ago: executing program 0 (id=4554): r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="cd", 0x1}], 0x1}, 0x240448c4) 1m32.16889323s ago: executing program 0 (id=4555): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r0, 0x107, 0x8, &(0x7f00000000c0), 0x8) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/22, 0x16}, 0x2) perf_event_open$cgroup(&(0x7f0000000140)={0x0, 0x80, 0xb, 0x3, 0x0, 0x4, 0x0, 0x7a9, 0x20000, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0xc48c, 0x1, @perf_bp={&(0x7f0000000040), 0x1}, 0x145d0, 0x1, 0x8, 0x5, 0x0, 0x6, 0x101, 0x0, 0x100, 0x0, 0x2}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x8) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0x7}, 0x104101, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x22, &(0x7f00000002c0)=@raw=[@map_idx={0x18, 0x4, 0x5, 0x0, 0x4}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x10}], &(0x7f0000000400)='GPL\x00', 0x8, 0x61, &(0x7f0000000440)=""/97, 0x1f00, 0x58, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000500)={0x4, 0xb, 0x8, 0x8}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000540)=[{0x3, 0x2, 0x7, 0x9}, {0x4, 0x1, 0x10, 0x4}, {0x2, 0x4, 0x5, 0x7}, {0x3, 0x3, 0xb, 0x8}, {0x3, 0x2, 0x1, 0x2}]}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$kcm(0xa, 0x1, 0x106) recvmsg(r4, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x2102) setsockopt$sock_attach_bpf(r3, 0x1, 0xb, &(0x7f0000000100), 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x17, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r5) 1m31.955540237s ago: executing program 2 (id=4556): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000040)=0xffffffffffff3654) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0xdd86, 0x2c}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000080)='b', 0x28}], 0x1}, 0x0) 1m31.946763127s ago: executing program 3 (id=4557): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x7, 0x2, 0x1, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000000053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) socket$kcm(0x1e, 0x1, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58, &(0x7f0000000000)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={r3, 0x0, 0x8}, 0xc) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x9, 0x1}, 0x0, 0x35, 0x1e7e7df9, 0x5, 0x9, 0x6, 0xa, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="d8000000180081064e81f782db4cb904021d0800067c7c09e8fe0ba1bc0008000600000003600e120800100002000401a8000600200e02400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) 1m31.814836901s ago: executing program 2 (id=4558): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="180200000000000000000000000000008500000061000000850000007d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x7, 0x0, &(0x7f00000006c0)="e0274239060000", 0x0, 0x8004, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m31.679315735s ago: executing program 0 (id=4559): socket$kcm(0xa, 0x922000000003, 0x11) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0fe7ffff030000007f1000000000000012000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000000800000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x61}, {0x20, 0x0, 0xff}, {0x87}, {0x6}]}) socket$kcm(0x11, 0x3, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r4 = socket$kcm(0x10, 0x7, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x520, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xa99, 0x3}, 0x8500, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}}, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r5, 0x8, 0x0, 0x0, 0x30, &(0x7f0000000140), 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) sendmsg$kcm(r4, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x1000d7, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x2}, @ptr={0x0, 0x0, 0x0, 0x2, 0x2}]}}, &(0x7f0000000200)=""/224, 0x32, 0xe0, 0x1}, 0x28) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) r7 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000002b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x0, 0x4, 0x98, 0x4, 0x4e53, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x9549, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x0, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0xfd, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x27, 0x8, 0x0, &(0x7f0000000180)="0005000000000001", 0x0, 0x405, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m31.381017205s ago: executing program 2 (id=4560): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x3, 0x2cd, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x1b, 0x0, &(0x7f00000002c0)="b90103616908068c3c270040e700009e0dc5cf1d66fff2fcffff81", 0x0, 0x8104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m31.192616811s ago: executing program 2 (id=4561): r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="cd", 0x1}], 0x1}, 0x240448c4) 1m31.138030732s ago: executing program 1 (id=4569): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8003}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20403, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x9}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x60, &(0x7f0000000000)=[{&(0x7f0000000300)="2000000011008188040f80ec59acbc0413a181000d0000000001000000000000", 0x20}], 0x1}, 0x40000) r4 = socket$kcm(0x2, 0x6, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe0e41b0000900ac00060411000000040012000a0005000248035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db7259826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d00"/216, 0xd8}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x21, &(0x7f0000000240), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x9, 0x4, &(0x7f0000000780)=ANY=[@ANYRESOCT=r0], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xf, 0x0, &(0x7f0000000740)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4004, @dev={0xac, 0x14, 0x14, 0x4}}, 0x10, 0x0}, 0x28008840) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x41, &(0x7f00000006c0)=r6, 0x4) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f00000001c0)={r8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000080000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000070000008500000010"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r10) syz_clone(0x164000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m31.079246774s ago: executing program 3 (id=4562): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000940)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000003000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xe, 0x0, &(0x7f00000003c0)="7993ff01190000e5ffa53b00008f", 0x0, 0x400, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4}, 0x50) perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x2, 0x0, 0xf, 0x0, 0x0, 0x400, 0x1e37cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x401, 0x200, 0x0, 0x7, 0x0, 0x100}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00'}, 0x94) r5 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8919, &(0x7f0000000040)={'ip6_vti0\x00', @random="02000400"}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@fwd={0x6}]}, {0x0, [0x2e, 0x2e, 0x0, 0x5f, 0x61, 0x5f, 0x5f]}}, 0x0, 0x2d, 0x0, 0x1, 0x4}, 0x28) sendmsg$inet(0xffffffffffffffff, 0x0, 0x200048cc) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000700)="d80000001000810468f70082db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a80016000a00014006000d00036010fab94dcf5c0461c1d67f6f94000534cf6ee08000a0e408e8dd095618e1f4dff3a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x20000004) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000140)={'wlan1\x00', @random="0100000000eb"}) r7 = socket$kcm(0x2, 0x2, 0x73) sendmsg$inet(r7, &(0x7f0000000500)={&(0x7f0000000300)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000400)=[{0x0}], 0x1}, 0x900000000000000) r8 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0xfffffffd}}], 0x18}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@fallback=r8, 0x2e, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0]}, 0x40) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x1c, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2, r9, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) 1m3.139073312s ago: executing program 2 (id=4563): r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="cd", 0x1}], 0x1}, 0x240448c4) 45.526925882s ago: executing program 2 (id=4564): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000940)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xe, 0x0, &(0x7f00000003c0)="7993ff01190000e5ffa53b00008f", 0x0, 0x400, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4}, 0x50) perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x2, 0x0, 0xf, 0x0, 0x0, 0x400, 0x1e37cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x401, 0x200, 0x0, 0x7, 0x0, 0x100}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00'}, 0x94) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8919, &(0x7f0000000040)={'ip6_vti0\x00', @random="02000400"}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@fwd={0x6}]}, {0x0, [0x2e, 0x2e, 0x0, 0x5f, 0x61, 0x5f, 0x5f]}}, 0x0, 0x2d, 0x0, 0x1, 0x4}, 0x28) sendmsg$inet(0xffffffffffffffff, 0x0, 0x200048cc) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000700)="d80000001000810468f70082db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a80016000a00014006000d00036010fab94dcf5c0461c1d67f6f94000534cf6ee08000a0e408e8dd095618e1f4dff3a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x20000004) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8b06, &(0x7f0000000140)={'wlan1\x00', @random="0100000000eb"}) r6 = socket$kcm(0x2, 0x2, 0x73) sendmsg$inet(r6, &(0x7f0000000500)={&(0x7f0000000300)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000400)=[{0x0}], 0x1}, 0x900000000000000) r7 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0xfffffffd}}], 0x18}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@fallback=r7, 0x2e, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0]}, 0x40) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x1c, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2, r8, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) 24.464897309s ago: executing program 32 (id=4559): socket$kcm(0xa, 0x922000000003, 0x11) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0fe7ffff030000007f1000000000000012000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000000800000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x61}, {0x20, 0x0, 0xff}, {0x87}, {0x6}]}) socket$kcm(0x11, 0x3, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r4 = socket$kcm(0x10, 0x7, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x520, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xa99, 0x3}, 0x8500, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}}, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r5, 0x8, 0x0, 0x0, 0x30, &(0x7f0000000140), 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) sendmsg$kcm(r4, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x1000d7, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x2}, @ptr={0x0, 0x0, 0x0, 0x2, 0x2}]}}, &(0x7f0000000200)=""/224, 0x32, 0xe0, 0x1}, 0x28) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) r7 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000002b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x0, 0x4, 0x98, 0x4, 0x4e53, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x9549, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x0, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0xfd, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x27, 0x8, 0x0, &(0x7f0000000180)="0005000000000001", 0x0, 0x405, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) 830.252015ms ago: executing program 33 (id=4569): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8003}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20403, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x9}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x60, &(0x7f0000000000)=[{&(0x7f0000000300)="2000000011008188040f80ec59acbc0413a181000d0000000001000000000000", 0x20}], 0x1}, 0x40000) r4 = socket$kcm(0x2, 0x6, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe0e41b0000900ac00060411000000040012000a0005000248035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db7259826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d00"/216, 0xd8}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x21, &(0x7f0000000240), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x9, 0x4, &(0x7f0000000780)=ANY=[@ANYRESOCT=r0], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xf, 0x0, &(0x7f0000000740)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4004, @dev={0xac, 0x14, 0x14, 0x4}}, 0x10, 0x0}, 0x28008840) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x41, &(0x7f00000006c0)=r6, 0x4) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f00000001c0)={r8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000080000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000070000008500000010"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r10) syz_clone(0x164000, 0x0, 0x0, 0x0, 0x0, 0x0) 770.418756ms ago: executing program 34 (id=4564): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000940)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xe, 0x0, &(0x7f00000003c0)="7993ff01190000e5ffa53b00008f", 0x0, 0x400, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4}, 0x50) perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x2, 0x0, 0xf, 0x0, 0x0, 0x400, 0x1e37cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x401, 0x200, 0x0, 0x7, 0x0, 0x100}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00'}, 0x94) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8919, &(0x7f0000000040)={'ip6_vti0\x00', @random="02000400"}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@fwd={0x6}]}, {0x0, [0x2e, 0x2e, 0x0, 0x5f, 0x61, 0x5f, 0x5f]}}, 0x0, 0x2d, 0x0, 0x1, 0x4}, 0x28) sendmsg$inet(0xffffffffffffffff, 0x0, 0x200048cc) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000700)="d80000001000810468f70082db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a80016000a00014006000d00036010fab94dcf5c0461c1d67f6f94000534cf6ee08000a0e408e8dd095618e1f4dff3a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x20000004) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8b06, &(0x7f0000000140)={'wlan1\x00', @random="0100000000eb"}) r6 = socket$kcm(0x2, 0x2, 0x73) sendmsg$inet(r6, &(0x7f0000000500)={&(0x7f0000000300)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000400)=[{0x0}], 0x1}, 0x900000000000000) r7 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0xfffffffd}}], 0x18}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@fallback=r7, 0x2e, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0]}, 0x40) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x1c, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2, r8, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) 0s ago: executing program 35 (id=4562): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000940)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000003000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xe, 0x0, &(0x7f00000003c0)="7993ff01190000e5ffa53b00008f", 0x0, 0x400, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4}, 0x50) perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x2, 0x0, 0xf, 0x0, 0x0, 0x400, 0x1e37cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x401, 0x200, 0x0, 0x7, 0x0, 0x100}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00'}, 0x94) r5 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8919, &(0x7f0000000040)={'ip6_vti0\x00', @random="02000400"}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@fwd={0x6}]}, {0x0, [0x2e, 0x2e, 0x0, 0x5f, 0x61, 0x5f, 0x5f]}}, 0x0, 0x2d, 0x0, 0x1, 0x4}, 0x28) sendmsg$inet(0xffffffffffffffff, 0x0, 0x200048cc) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000700)="d80000001000810468f70082db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a80016000a00014006000d00036010fab94dcf5c0461c1d67f6f94000534cf6ee08000a0e408e8dd095618e1f4dff3a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x20000004) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000140)={'wlan1\x00', @random="0100000000eb"}) r7 = socket$kcm(0x2, 0x2, 0x73) sendmsg$inet(r7, &(0x7f0000000500)={&(0x7f0000000300)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000400)=[{0x0}], 0x1}, 0x900000000000000) r8 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0xfffffffd}}], 0x18}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@fallback=r8, 0x2e, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0]}, 0x40) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x1c, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2, r9, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) kernel console output (not intermixed with test programs): ce bond0 may have been left with an inconsistent configuration, please check. [ 705.801360][T16626] __nla_validate_parse: 1 callbacks suppressed [ 705.801406][T16626] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3743'. [ 705.882208][T16621] team0: Device hsr_slave_0 failed to register rx_handler [ 705.963283][T16621] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3742'. [ 706.198648][T16631] team0: Device hsr_slave_0 failed to register rx_handler [ 706.317519][T16632] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3746'. [ 706.852858][T16645] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3750'. [ 706.888465][T16647] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3751'. [ 707.130715][T16651] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3753'. [ 707.141028][T16651] net_ratelimit: 3 callbacks suppressed [ 707.141116][T16651] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 707.304472][T16659] syzkaller0: entered promiscuous mode [ 707.310576][T16659] syzkaller0: entered allmulticast mode [ 707.503363][T16661] team0: Device hsr_slave_0 failed to register rx_handler [ 707.604580][T16666] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3757'. [ 708.249206][T16673] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 708.391756][T16676] validate_nla: 13 callbacks suppressed [ 708.391789][T16676] netlink: 'syz.1.3763': attribute type 4 has an invalid length. [ 708.415704][T16676] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3763'. [ 708.425799][T16676] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 708.531312][T16683] netlink: 'syz.0.3764': attribute type 10 has an invalid length. [ 708.544619][T16683] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3764'. [ 708.557572][T16683] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 708.569139][T16683] hsr0: entered promiscuous mode [ 708.685820][T16687] netlink: 'syz.2.3766': attribute type 4 has an invalid length. [ 708.696300][T16687] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3766'. [ 708.712636][T16687] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 709.526416][T16699] netlink: 'syz.1.3770': attribute type 10 has an invalid length. [ 709.570773][T16699] team0: Device hsr_slave_0 failed to register rx_handler [ 709.712407][T16705] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 709.748796][T16706] netlink: 'syz.1.3770': attribute type 2 has an invalid length. [ 709.772064][T16706] netlink: 'syz.1.3770': attribute type 8 has an invalid length. [ 711.248379][T16719] netlink: 'syz.1.3776': attribute type 4 has an invalid length. [ 711.278957][T16719] __nla_validate_parse: 1 callbacks suppressed [ 711.278977][T16719] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3776'. [ 711.304521][T16719] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 711.506501][T16722] netlink: 'syz.3.3778': attribute type 4 has an invalid length. [ 711.583467][T16722] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3778'. [ 711.617025][T16722] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 711.960336][T16724] netlink: 'syz.1.3779': attribute type 10 has an invalid length. [ 711.982139][T16724] team0: Device hsr_slave_0 failed to register rx_handler [ 712.143886][T16728] netlink: 'syz.1.3779': attribute type 2 has an invalid length. [ 712.163105][T16728] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3779'. [ 712.478954][T16733] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3782'. [ 712.514808][T16733] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 712.823960][T16735] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 712.948301][T16745] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3787'. [ 712.976041][T16745] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 713.015264][T16747] team0: Device hsr_slave_0 failed to register rx_handler [ 713.096636][T16742] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3785'. [ 713.281732][T16752] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3789'. [ 713.306504][T16752] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 713.724125][T16762] validate_nla: 7 callbacks suppressed [ 713.724144][T16762] netlink: 'syz.3.3793': attribute type 4 has an invalid length. [ 713.742323][T16762] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3793'. [ 713.753566][T16762] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 713.833264][T16765] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 714.245626][T16769] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 714.279630][T16774] netlink: 'syz.2.3797': attribute type 4 has an invalid length. [ 714.303962][T16774] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3797'. [ 714.327948][T16774] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 714.853494][T16781] netlink: 'syz.3.3800': attribute type 4 has an invalid length. [ 714.897443][T16781] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3800'. [ 714.922911][T16781] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 715.320759][T16787] netlink: 'syz.2.3810': attribute type 4 has an invalid length. [ 715.362699][T16787] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 716.284430][T16794] netlink: 'syz.2.3804': attribute type 4 has an invalid length. [ 716.325104][T16794] __nla_validate_parse: 1 callbacks suppressed [ 716.325122][T16794] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3804'. [ 716.347926][T16794] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 716.490316][T16806] netlink: 'syz.1.3805': attribute type 2 has an invalid length. [ 716.519393][T16806] netlink: 'syz.1.3805': attribute type 8 has an invalid length. [ 716.527231][T16806] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3805'. [ 716.538803][T16797] netlink: 'syz.1.3805': attribute type 10 has an invalid length. [ 716.562651][T16797] team0: Device hsr_slave_0 failed to register rx_handler [ 716.668782][T16800] netlink: 'syz.3.3807': attribute type 4 has an invalid length. [ 716.685558][T16800] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3807'. [ 717.076681][T16816] netlink: 'syz.1.3813': attribute type 10 has an invalid length. [ 717.108771][T16816] team0: Device hsr_slave_0 failed to register rx_handler [ 717.169438][T16819] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3813'. [ 717.394742][T16825] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3817'. [ 717.683264][T16829] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.3816'. [ 717.884373][T16835] team0: Device hsr_slave_0 failed to register rx_handler [ 718.086911][T16836] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3819'. [ 718.322412][T16842] net_ratelimit: 3 callbacks suppressed [ 718.322447][T16842] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 718.704718][T16856] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3827'. [ 718.742483][T16856] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 719.677195][T16874] validate_nla: 7 callbacks suppressed [ 719.677218][T16874] netlink: 'syz.3.3834': attribute type 10 has an invalid length. [ 719.733059][T16874] team0: Device hsr_slave_0 failed to register rx_handler [ 720.200477][T16875] netlink: 'syz.3.3834': attribute type 2 has an invalid length. [ 720.208297][T16875] netlink: 'syz.3.3834': attribute type 8 has an invalid length. [ 720.225691][T16875] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3834'. [ 720.360705][T16878] netlink: 'syz.0.3836': attribute type 4 has an invalid length. [ 720.404315][T16878] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3836'. [ 720.433988][T16878] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 720.585344][T16882] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 720.639265][T16881] netlink: 'syz.1.3837': attribute type 10 has an invalid length. [ 720.658572][T16881] team0: Device hsr_slave_0 failed to register rx_handler [ 720.736774][T16885] netlink: 'syz.1.3837': attribute type 2 has an invalid length. [ 720.794903][T16885] netlink: 'syz.1.3837': attribute type 8 has an invalid length. [ 720.839992][T16884] netlink: 'syz.3.3838': attribute type 4 has an invalid length. [ 720.848269][T16884] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 721.181197][T16893] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 723.275287][T16910] netlink: 'syz.1.3848': attribute type 4 has an invalid length. [ 723.310172][T16910] __nla_validate_parse: 2 callbacks suppressed [ 723.310263][T16910] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3848'. [ 723.382741][T16910] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 724.169250][T16917] netlink: 'syz.3.3850': attribute type 4 has an invalid length. [ 724.178042][T16917] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3850'. [ 724.192486][T16917] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 724.526019][T16922] tap0: tun_chr_ioctl cmd 1074025677 [ 724.542194][T16922] tap0: linktype set to 778 [ 724.573758][T16919] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 724.673890][T16916] tap0: tun_chr_ioctl cmd 2147767511 [ 728.314857][T16946] netlink: 'syz.0.3857': attribute type 4 has an invalid length. [ 728.331366][T16946] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3857'. [ 728.369107][T16946] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 728.404747][T16942] netlink: 'syz.3.3856': attribute type 10 has an invalid length. [ 728.486143][T16942] team0: Device hsr_slave_0 failed to register rx_handler [ 728.566204][T16945] netlink: 'syz.3.3856': attribute type 2 has an invalid length. [ 728.574666][T16945] netlink: 'syz.3.3856': attribute type 8 has an invalid length. [ 728.583404][T16945] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3856'. [ 728.602888][T16948] netlink: 'syz.2.3858': attribute type 10 has an invalid length. [ 728.631163][T16948] team0: Device hsr_slave_0 failed to register rx_handler [ 728.706832][T16950] netlink: 'syz.1.3859': attribute type 27 has an invalid length. [ 728.718427][T16950] netlink: 'syz.1.3859': attribute type 4 has an invalid length. [ 728.735105][T16950] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3859'. [ 728.757577][T16952] netlink: 'syz.2.3858': attribute type 2 has an invalid length. [ 728.769621][T16952] netlink: 'syz.2.3858': attribute type 8 has an invalid length. [ 728.789519][T16952] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3858'. [ 729.013016][T16959] netlink: 'syz.3.3861': attribute type 4 has an invalid length. [ 729.042961][T16959] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3861'. [ 729.069807][T16959] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 729.156381][T16961] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 729.677206][T16978] tap0: tun_chr_ioctl cmd 1074025677 [ 729.699593][T16978] tap0: linktype set to 778 [ 729.714742][T16980] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3868'. [ 729.732496][T16980] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 729.794627][T16974] tap0: tun_chr_ioctl cmd 2147767511 [ 730.046369][T16972] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.3866'. [ 730.454506][T16983] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3869'. [ 731.082632][T16997] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3873'. [ 731.125418][T16997] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 731.177620][T16993] team0: Device hsr_slave_0 failed to register rx_handler [ 731.302655][T16999] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3871'. [ 731.574725][T17008] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 731.710427][T17009] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 731.978945][T17014] team0: Device hsr_slave_0 failed to register rx_handler [ 732.307542][T17029] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 732.576743][T17033] team0: Device hsr_slave_0 failed to register rx_handler [ 732.951321][T17042] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 733.297265][T17046] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 733.688733][T17051] validate_nla: 17 callbacks suppressed [ 733.688758][T17051] netlink: 'syz.0.3891': attribute type 10 has an invalid length. [ 733.732042][T17051] team0: Device hsr_slave_0 failed to register rx_handler [ 734.397491][T17052] netlink: 'syz.0.3891': attribute type 2 has an invalid length. [ 734.417968][T17052] netlink: 'syz.0.3891': attribute type 8 has an invalid length. [ 734.432136][T17052] __nla_validate_parse: 6 callbacks suppressed [ 734.432152][T17052] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3891'. [ 734.455472][T17056] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 734.463106][T17056] IPv6: NLM_F_CREATE should be set when creating new route [ 734.471218][T17056] IPv6: NLM_F_CREATE should be set when creating new route [ 734.478853][T17056] IPv6: NLM_F_CREATE should be set when creating new route [ 734.636849][T17061] netlink: 'syz.2.3894': attribute type 4 has an invalid length. [ 734.654522][T17061] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3894'. [ 734.696976][T17061] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 734.896732][T17072] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3897'. [ 734.942517][T17065] netlink: 'syz.1.3896': attribute type 10 has an invalid length. [ 734.981615][T17065] team0: Device hsr_slave_0 failed to register rx_handler [ 735.086974][T17072] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.3897'. [ 735.168587][T17074] netlink: 'syz.1.3896': attribute type 2 has an invalid length. [ 735.178186][T17074] netlink: 'syz.1.3896': attribute type 8 has an invalid length. [ 735.190757][T17074] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3896'. [ 735.204534][T17071] netlink: 'syz.2.3898': attribute type 4 has an invalid length. [ 735.215050][T17071] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3898'. [ 735.233491][T17071] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 735.564535][T17078] netlink: 'syz.1.3899': attribute type 10 has an invalid length. [ 735.598821][T17078] team0: Device hsr_slave_0 failed to register rx_handler [ 735.766827][T17078] netlink: 'syz.1.3899': attribute type 2 has an invalid length. [ 735.826133][T17078] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3899'. [ 736.132139][T17090] team0: Device hsr_slave_0 failed to register rx_handler [ 736.498916][T17086] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3901'. [ 736.765708][T17094] team0: Device hsr_slave_0 failed to register rx_handler [ 736.868332][T17099] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3904'. [ 736.960420][T17095] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 737.095221][T17101] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3906'. [ 737.130410][T17101] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 737.251592][T17109] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 737.559639][T17111] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 738.285077][T17122] team0: Device hsr_slave_0 failed to register rx_handler [ 738.890954][T17127] delete_channel: no stack [ 739.053976][T17132] validate_nla: 12 callbacks suppressed [ 739.053998][T17132] netlink: 'syz.1.3919': attribute type 10 has an invalid length. [ 739.117986][T17132] team0: Device hsr_slave_0 failed to register rx_handler [ 740.095126][T17139] netlink: 'syz.1.3919': attribute type 2 has an invalid length. [ 740.103096][T17139] netlink: 'syz.1.3919': attribute type 8 has an invalid length. [ 740.111541][T17139] __nla_validate_parse: 8 callbacks suppressed [ 740.111558][T17139] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3919'. [ 740.127097][T17136] netlink: 'syz.0.3927': attribute type 10 has an invalid length. [ 740.147134][T17136] team0: Device hsr_slave_0 failed to register rx_handler [ 740.179821][T17141] netlink: 'syz.0.3927': attribute type 2 has an invalid length. [ 740.193896][T17141] netlink: 'syz.0.3927': attribute type 8 has an invalid length. [ 740.209510][T17141] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3927'. [ 740.221269][T17142] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 740.479708][T17153] netlink: 188 bytes leftover after parsing attributes in process `syz.2.3925'. [ 740.873078][T17160] FAULT_INJECTION: forcing a failure. [ 740.873078][T17160] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 741.012583][T17160] CPU: 0 PID: 17160 Comm: syz.3.3936 Not tainted syzkaller #0 [ 741.020179][T17160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 741.030317][T17160] Call Trace: [ 741.033676][T17160] [ 741.036756][T17160] dump_stack_lvl+0x18c/0x250 [ 741.041549][T17160] ? show_regs_print_info+0x20/0x20 [ 741.046849][T17160] ? load_image+0x420/0x420 [ 741.051470][T17160] ? __lock_acquire+0x7d40/0x7d40 [ 741.056592][T17160] ? snprintf+0xe9/0x140 [ 741.060941][T17160] should_fail_ex+0x39d/0x4d0 [ 741.065735][T17160] _copy_to_user+0x2f/0xa0 [ 741.070249][T17160] simple_read_from_buffer+0xe7/0x150 [ 741.075741][T17160] proc_fail_nth_read+0x1e8/0x260 [ 741.080872][T17160] ? proc_fault_inject_write+0x360/0x360 [ 741.086613][T17160] ? fsnotify_perm+0x271/0x5e0 [ 741.091468][T17160] ? proc_fault_inject_write+0x360/0x360 [ 741.097198][T17160] vfs_read+0x28b/0x970 [ 741.101469][T17160] ? kernel_read+0x1e0/0x1e0 [ 741.106159][T17160] ? __fget_files+0x28/0x4b0 [ 741.110829][T17160] ? __fget_files+0x28/0x4b0 [ 741.115515][T17160] ? __fget_files+0x43d/0x4b0 [ 741.120317][T17160] ? __fdget_pos+0x2a3/0x330 [ 741.125077][T17160] ? ksys_read+0x75/0x260 [ 741.129507][T17160] ksys_read+0x150/0x260 [ 741.133854][T17160] ? vfs_write+0x990/0x990 [ 741.138373][T17160] ? lockdep_hardirqs_on+0x98/0x150 [ 741.143666][T17160] do_syscall_64+0x55/0xa0 [ 741.148151][T17160] ? clear_bhb_loop+0x40/0x90 [ 741.152901][T17160] ? clear_bhb_loop+0x40/0x90 [ 741.157642][T17160] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 741.163590][T17160] RIP: 0033:0x7f5db315d68e [ 741.168058][T17160] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 741.187731][T17160] RSP: 002b:00007f5db403dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 741.196202][T17160] RAX: ffffffffffffffda RBX: 00007f5db403e6c0 RCX: 00007f5db315d68e [ 741.204217][T17160] RDX: 000000000000000f RSI: 00007f5db403e0a0 RDI: 0000000000000006 [ 741.212229][T17160] RBP: 00007f5db403e090 R08: 0000000000000000 R09: 0000000000000000 [ 741.220243][T17160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 741.228253][T17160] R13: 00007f5db3416038 R14: 00007f5db3415fa0 R15: 00007ffebd6da7e8 [ 741.236308][T17160] [ 741.304141][T17162] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3928'. [ 741.612295][T17162] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.3928'. [ 742.018036][T17171] netlink: 'syz.2.3931': attribute type 6 has an invalid length. [ 742.031788][T17171] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3931'. [ 742.556910][T17181] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 742.911683][T17178] netlink: 'syz.3.3933': attribute type 10 has an invalid length. [ 742.990465][T17178] team0: Device hsr_slave_0 failed to register rx_handler [ 743.108737][T17185] netlink: 'syz.3.3933': attribute type 2 has an invalid length. [ 743.128381][T17185] netlink: 'syz.3.3933': attribute type 8 has an invalid length. [ 743.146462][T17185] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3933'. [ 743.450951][T17193] team0: Device hsr_slave_0 failed to register rx_handler [ 743.645677][T17199] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3939'. [ 744.363249][T17205] validate_nla: 3 callbacks suppressed [ 744.363267][T17205] netlink: 'syz.3.3944': attribute type 4 has an invalid length. [ 744.401273][T17205] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3944'. [ 744.419779][T17205] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 744.550232][T17209] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3945'. [ 744.803936][T17209] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 744.832702][T17209] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 744.860765][T17209] bond0 (unregistering): Released all slaves [ 744.874639][T17217] netlink: 'syz.0.3948': attribute type 10 has an invalid length. [ 744.887174][T17217] team0: Device hsr_slave_0 failed to register rx_handler [ 745.019504][T17211] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 745.036514][T17219] netlink: 'syz.0.3948': attribute type 2 has an invalid length. [ 745.056352][T17219] netlink: 'syz.0.3948': attribute type 8 has an invalid length. [ 745.129184][T17213] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 745.405972][T17227] netlink: 'syz.2.3951': attribute type 4 has an invalid length. [ 745.448414][T17227] __nla_validate_parse: 1 callbacks suppressed [ 745.448432][T17227] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3951'. [ 745.476345][T17228] netlink: 'syz.0.3950': attribute type 6 has an invalid length. [ 745.487149][T17230] netlink: 'syz.1.3952': attribute type 10 has an invalid length. [ 745.496257][T17228] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3950'. [ 745.521313][T17230] team0: Device hsr_slave_0 failed to register rx_handler [ 745.662859][T17234] netlink: 'syz.1.3952': attribute type 2 has an invalid length. [ 745.677688][T17234] netlink: 'syz.1.3952': attribute type 8 has an invalid length. [ 745.706106][T17234] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3952'. [ 746.071939][T17244] netlink: 'syz.1.3955': attribute type 4 has an invalid length. [ 746.111849][T17244] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3955'. [ 746.169717][T17244] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 746.858030][T17258] team0: Device hsr_slave_0 failed to register rx_handler [ 747.560006][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.566673][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.609012][T17259] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3959'. [ 748.714971][T17264] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 748.916916][T17267] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3962'. [ 748.928644][T17267] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 749.074006][T17276] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3966'. [ 749.460009][T17283] validate_nla: 5 callbacks suppressed [ 749.460094][T17283] netlink: 'syz.3.3967': attribute type 10 has an invalid length. [ 749.483431][T17283] team0: Device hsr_slave_0 failed to register rx_handler [ 750.016357][T17287] netlink: 'syz.3.3967': attribute type 2 has an invalid length. [ 750.048277][T17287] netlink: 'syz.3.3967': attribute type 8 has an invalid length. [ 750.058214][T17287] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3967'. [ 750.069759][T17289] netlink: 'syz.2.3969': attribute type 10 has an invalid length. [ 750.088120][T17289] team0: Device hsr_slave_0 failed to register rx_handler [ 750.113827][T17290] netlink: 'syz.2.3969': attribute type 2 has an invalid length. [ 750.141018][T17290] netlink: 'syz.2.3969': attribute type 8 has an invalid length. [ 750.148849][T17290] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3969'. [ 750.159544][T17292] FAULT_INJECTION: forcing a failure. [ 750.159544][T17292] name failslab, interval 1, probability 0, space 0, times 0 [ 750.187240][T17292] CPU: 0 PID: 17292 Comm: syz.1.3970 Not tainted syzkaller #0 [ 750.194791][T17292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 750.204900][T17292] Call Trace: [ 750.208229][T17292] [ 750.211207][T17292] dump_stack_lvl+0x18c/0x250 [ 750.215950][T17292] ? sctp_sendmsg+0x1575/0x28c0 [ 750.220867][T17292] ? ___sys_sendmsg+0x2a6/0x360 [ 750.225778][T17292] ? show_regs_print_info+0x20/0x20 [ 750.231051][T17292] ? load_image+0x420/0x420 [ 750.235641][T17292] should_fail_ex+0x39d/0x4d0 [ 750.240404][T17292] should_failslab+0x9/0x20 [ 750.244972][T17292] slab_pre_alloc_hook+0x59/0x310 [ 750.250058][T17292] ? sctp_add_bind_addr+0x8c/0x360 [ 750.255218][T17292] __kmem_cache_alloc_node+0x53/0x250 [ 750.260670][T17292] ? sctp_add_bind_addr+0x8c/0x360 [ 750.265842][T17292] kmalloc_trace+0x2a/0xe0 [ 750.270321][T17292] sctp_add_bind_addr+0x8c/0x360 [ 750.275315][T17292] sctp_copy_local_addr_list+0x315/0x4f0 [ 750.281010][T17292] ? sctp_copy_local_addr_list+0xa5/0x4f0 [ 750.286788][T17292] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 750.292901][T17292] ? sctp_v4_is_any+0x35/0x60 [ 750.297612][T17292] ? sctp_copy_one_addr+0x8c/0x350 [ 750.302756][T17292] sctp_bind_addr_copy+0xb3/0x3c0 [ 750.307812][T17292] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 750.314172][T17292] sctp_connect_new_asoc+0x2f9/0x6a0 [ 750.319493][T17292] ? __sctp_connect+0xd80/0xd80 [ 750.324382][T17292] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 750.329957][T17292] ? security_sctp_bind_connect+0x89/0xb0 [ 750.335709][T17292] sctp_sendmsg+0x1575/0x28c0 [ 750.340426][T17292] ? sctp_getsockopt+0xb60/0xb60 [ 750.345391][T17292] ? aa_sk_perm+0x83c/0x970 [ 750.349941][T17292] ? aa_af_perm+0x330/0x330 [ 750.354477][T17292] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 750.360929][T17292] ? sock_rps_record_flow+0x19/0x3f0 [ 750.366251][T17292] ? inet_sendmsg+0xe9/0x2f0 [ 750.370871][T17292] ? inet_send_prepare+0x260/0x260 [ 750.376019][T17292] ____sys_sendmsg+0x5ba/0x960 [ 750.380813][T17292] ? __lock_acquire+0x7d40/0x7d40 [ 750.385867][T17292] ? __asan_memset+0x22/0x40 [ 750.390496][T17292] ? __sys_sendmsg_sock+0x30/0x30 [ 750.395550][T17292] ? __import_iovec+0x5f2/0x850 [ 750.400440][T17292] ? import_iovec+0x73/0xa0 [ 750.404977][T17292] ___sys_sendmsg+0x2a6/0x360 [ 750.409689][T17292] ? __sys_sendmsg+0x2a0/0x2a0 [ 750.414505][T17292] ? __lock_acquire+0x7d40/0x7d40 [ 750.419586][T17292] __se_sys_sendmsg+0x1c2/0x2b0 [ 750.424473][T17292] ? __x64_sys_sendmsg+0x80/0x80 [ 750.429454][T17292] ? lockdep_hardirqs_on+0x98/0x150 [ 750.434687][T17292] do_syscall_64+0x55/0xa0 [ 750.439128][T17292] ? clear_bhb_loop+0x40/0x90 [ 750.443840][T17292] ? clear_bhb_loop+0x40/0x90 [ 750.448553][T17292] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 750.454479][T17292] RIP: 0033:0x7fafcf19ce59 [ 750.458919][T17292] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 750.478554][T17292] RSP: 002b:00007fafcff77028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 750.487001][T17292] RAX: ffffffffffffffda RBX: 00007fafcf415fa0 RCX: 00007fafcf19ce59 [ 750.495001][T17292] RDX: 00000000000003e8 RSI: 00002000000004c0 RDI: 0000000000000015 [ 750.502994][T17292] RBP: 00007fafcff77090 R08: 0000000000000000 R09: 0000000000000000 [ 750.510989][T17292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 750.518978][T17292] R13: 00007fafcf416038 R14: 00007fafcf415fa0 R15: 00007ffd1fd18088 [ 750.526989][T17292] [ 750.746274][T17296] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 750.790507][T17294] netlink: 'syz.0.3971': attribute type 10 has an invalid length. [ 750.820286][T17294] team0: Device hsr_slave_0 failed to register rx_handler [ 750.882020][T17300] netlink: 'syz.0.3971': attribute type 2 has an invalid length. [ 750.908249][T17300] netlink: 'syz.0.3971': attribute type 8 has an invalid length. [ 750.917147][T17300] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3971'. [ 750.963420][T17301] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 751.291087][T17312] netlink: 'syz.2.3977': attribute type 4 has an invalid length. [ 751.305163][T17312] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3977'. [ 751.340621][T17305] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 751.363817][T17307] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3975'. [ 751.373402][T17307] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 751.753563][T14363] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 751.998081][T17329] team0: Device hsr_slave_0 failed to register rx_handler [ 752.067387][T17329] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3984'. [ 752.162535][T17338] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.3995'. [ 752.217014][T17335] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3987'. [ 752.227833][T17335] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 752.453371][T17345] team0: Device hsr_slave_0 failed to register rx_handler [ 752.561781][T17350] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3997'. [ 752.655668][T17343] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 752.913675][T17356] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 752.963430][T17360] FAULT_INJECTION: forcing a failure. [ 752.963430][T17360] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 753.012841][T17360] CPU: 0 PID: 17360 Comm: syz.2.3994 Not tainted syzkaller #0 [ 753.020400][T17360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 753.030510][T17360] Call Trace: [ 753.033829][T17360] [ 753.036806][T17360] dump_stack_lvl+0x18c/0x250 [ 753.041551][T17360] ? show_regs_print_info+0x20/0x20 [ 753.046808][T17360] ? load_image+0x420/0x420 [ 753.051375][T17360] ? __lock_acquire+0x7d40/0x7d40 [ 753.056469][T17360] ? snprintf+0xe9/0x140 [ 753.060772][T17360] should_fail_ex+0x39d/0x4d0 [ 753.065503][T17360] _copy_to_user+0x2f/0xa0 [ 753.069941][T17360] simple_read_from_buffer+0xe7/0x150 [ 753.075334][T17360] proc_fail_nth_read+0x1e8/0x260 [ 753.080381][T17360] ? proc_fault_inject_write+0x360/0x360 [ 753.086049][T17360] ? fsnotify_perm+0x271/0x5e0 [ 753.090832][T17360] ? proc_fault_inject_write+0x360/0x360 [ 753.096481][T17360] vfs_read+0x28b/0x970 [ 753.100655][T17360] ? kernel_read+0x1e0/0x1e0 [ 753.105261][T17360] ? __fget_files+0x28/0x4b0 [ 753.109863][T17360] ? __fget_files+0x28/0x4b0 [ 753.114483][T17360] ? __fget_files+0x43d/0x4b0 [ 753.119224][T17360] ? __fdget_pos+0x2a3/0x330 [ 753.123865][T17360] ? ksys_read+0x75/0x260 [ 753.128263][T17360] ksys_read+0x150/0x260 [ 753.132565][T17360] ? vfs_write+0x990/0x990 [ 753.137041][T17360] ? lockdep_hardirqs_on+0x98/0x150 [ 753.142290][T17360] do_syscall_64+0x55/0xa0 [ 753.146745][T17360] ? clear_bhb_loop+0x40/0x90 [ 753.151468][T17360] ? clear_bhb_loop+0x40/0x90 [ 753.156198][T17360] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 753.162142][T17360] RIP: 0033:0x7f768595d68e [ 753.166610][T17360] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 753.186267][T17360] RSP: 002b:00007f76868e0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 753.194728][T17360] RAX: ffffffffffffffda RBX: 00007f76868e16c0 RCX: 00007f768595d68e [ 753.202739][T17360] RDX: 000000000000000f RSI: 00007f76868e10a0 RDI: 0000000000000005 [ 753.210747][T17360] RBP: 00007f76868e1090 R08: 0000000000000000 R09: 0000000000000000 [ 753.218759][T17360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 753.226772][T17360] R13: 00007f7685c16038 R14: 00007f7685c15fa0 R15: 00007ffe6d3c5258 [ 753.234806][T17360] [ 753.517491][T17369] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4000'. [ 753.790298][ T5779] Bluetooth: hci1: command 0x0406 tx timeout [ 754.022754][T17381] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.4004'. [ 754.131484][T17383] team0: Device hsr_slave_0 failed to register rx_handler [ 754.258094][T17379] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4003'. [ 754.515879][T17389] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 754.840043][T17398] validate_nla: 14 callbacks suppressed [ 754.840062][T17398] netlink: 'syz.0.4016': attribute type 10 has an invalid length. [ 754.910029][T17398] team0: Device hsr_slave_0 failed to register rx_handler [ 755.631850][T17404] netlink: 'syz.2.4011': attribute type 4 has an invalid length. [ 755.731768][T17410] netlink: 'syz.3.4013': attribute type 21 has an invalid length. [ 755.739914][T17410] netlink: 'syz.3.4013': attribute type 4 has an invalid length. [ 755.870959][T17411] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 755.938259][T17417] netlink: 'syz.2.4017': attribute type 29 has an invalid length. [ 755.965188][T17417] netlink: 'syz.2.4017': attribute type 29 has an invalid length. [ 755.992062][T17418] netlink: 'syz.2.4017': attribute type 29 has an invalid length. [ 756.259681][ T5779] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 756.435168][T17430] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 756.780095][T17438] netlink: 'syz.0.4023': attribute type 10 has an invalid length. [ 756.801741][T17438] team0: Device hsr_slave_0 failed to register rx_handler [ 756.917808][T17441] netlink: 'syz.0.4023': attribute type 2 has an invalid length. [ 756.936221][T17441] netlink: 'syz.0.4023': attribute type 8 has an invalid length. [ 756.956513][T17441] __nla_validate_parse: 2 callbacks suppressed [ 756.956530][T17441] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4023'. [ 757.011772][T17440] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4025'. [ 757.474359][T17456] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 758.452805][T17465] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 758.686588][T17471] geneve1: entered promiscuous mode [ 758.705186][T17471] geneve1: entered allmulticast mode [ 758.777489][T17473] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4036'. [ 758.797137][T17473] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 759.071491][T17476] team0: Device hsr_slave_0 failed to register rx_handler [ 759.499380][T17477] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4037'. [ 761.506290][T17506] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 761.571444][T17510] validate_nla: 5 callbacks suppressed [ 761.571458][T17510] netlink: 'syz.1.4046': attribute type 4 has an invalid length. [ 761.589011][T17510] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4046'. [ 761.601552][T17510] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 762.052777][T17517] netlink: 'syz.1.4049': attribute type 10 has an invalid length. [ 762.077191][T17517] team0: Device hsr_slave_0 failed to register rx_handler [ 762.146455][T17519] netlink: 'syz.1.4049': attribute type 2 has an invalid length. [ 762.171660][T17519] netlink: 'syz.1.4049': attribute type 8 has an invalid length. [ 762.179810][T17519] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4049'. [ 762.216539][T17521] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4050'. [ 763.235840][T17531] netlink: 'syz.3.4054': attribute type 10 has an invalid length. [ 763.273749][T17531] team0: Device hsr_slave_0 failed to register rx_handler [ 763.840285][T17536] netlink: 'syz.3.4054': attribute type 2 has an invalid length. [ 763.848129][T17536] netlink: 'syz.3.4054': attribute type 8 has an invalid length. [ 763.881119][T17536] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4054'. [ 764.051082][T17540] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4055'. [ 764.159789][T17544] netlink: 'syz.2.4057': attribute type 4 has an invalid length. [ 764.172254][T17544] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4057'. [ 764.310365][T17542] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 764.712777][T17551] netlink: 'syz.2.4059': attribute type 10 has an invalid length. [ 764.776764][T17551] team0: Device hsr_slave_0 failed to register rx_handler [ 765.210951][T17552] netlink: 'syz.2.4059': attribute type 2 has an invalid length. [ 765.218775][T17552] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4059'. [ 765.589543][T17564] team0: Device hsr_slave_0 failed to register rx_handler [ 766.121500][T17566] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4062'. [ 766.541075][T17578] team0: Device hsr_slave_0 failed to register rx_handler [ 766.697389][T17574] validate_nla: 5 callbacks suppressed [ 766.697410][T17574] netlink: 'syz.1.4066': attribute type 2 has an invalid length. [ 766.719527][T17574] netlink: 'syz.1.4066': attribute type 8 has an invalid length. [ 766.779471][T17574] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4066'. [ 766.871372][T17582] netlink: 'syz.0.4067': attribute type 4 has an invalid length. [ 766.914151][T17582] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4067'. [ 766.952937][T17582] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 767.019956][T17587] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4069'. [ 767.363384][T17593] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4071'. [ 767.818119][T17597] netlink: 'syz.3.4073': attribute type 1 has an invalid length. [ 767.841024][T17597] netlink: 'syz.3.4073': attribute type 3 has an invalid length. [ 767.859347][T17597] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4073'. [ 768.172927][T17605] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4083'. [ 769.657990][T17615] netlink: 'syz.0.4076': attribute type 10 has an invalid length. [ 769.672625][T17615] team0: Device hsr_slave_0 failed to register rx_handler [ 769.874137][T17617] netlink: 'syz.0.4076': attribute type 2 has an invalid length. [ 769.899469][T17617] netlink: 'syz.0.4076': attribute type 8 has an invalid length. [ 769.907329][T17617] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4076'. [ 770.382725][T17626] netlink: 'syz.0.4080': attribute type 4 has an invalid length. [ 770.391285][T17626] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4080'. [ 770.403936][T17626] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 770.617513][T17633] netlink: 'syz.2.4091': attribute type 4 has an invalid length. [ 770.633237][T17633] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4091'. [ 770.684941][T17635] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4082'. [ 770.930557][T17639] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4087'. [ 770.975750][T17639] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4087'. [ 771.042595][T17642] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4087'. [ 774.724556][T17656] netlink: 'syz.1.4092': attribute type 10 has an invalid length. [ 774.766390][T17656] team0: Device hsr_slave_0 failed to register rx_handler [ 775.030426][T17657] netlink: 'syz.1.4092': attribute type 2 has an invalid length. [ 775.038259][T17657] netlink: 'syz.1.4092': attribute type 8 has an invalid length. [ 775.169615][T17657] __nla_validate_parse: 2 callbacks suppressed [ 775.169638][T17657] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4092'. [ 775.675427][T17664] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 775.741946][T17667] netlink: 'syz.3.4096': attribute type 4 has an invalid length. [ 775.754713][T17667] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4096'. [ 775.769880][T17669] netlink: 'syz.1.4097': attribute type 29 has an invalid length. [ 775.784544][T17667] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 775.802585][T17671] netlink: 'syz.2.4098': attribute type 29 has an invalid length. [ 775.816029][T17671] netlink: 'syz.2.4098': attribute type 29 has an invalid length. [ 775.829197][T17669] netlink: 'syz.1.4097': attribute type 29 has an invalid length. [ 775.854994][T17671] netlink: 'syz.2.4098': attribute type 29 has an invalid length. [ 775.897006][T17671] netlink: 'syz.2.4098': attribute type 29 has an invalid length. [ 776.094761][T17676] team0: Device hsr_slave_0 failed to register rx_handler [ 776.297626][T17682] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4100'. [ 776.327923][T17681] team0: Device hsr_slave_0 failed to register rx_handler [ 776.428273][T17683] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4103'. [ 776.594542][T17685] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4105'. [ 776.871574][T17688] team0: Device hsr_slave_0 failed to register rx_handler [ 777.036031][T17689] team0: Device hsr_slave_0 failed to register rx_handler [ 777.206155][T17690] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4112'. [ 777.239996][T17691] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4104'. [ 777.388113][T17695] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.4106'. [ 777.474753][T17695] bridge_slave_1: entered promiscuous mode [ 777.775465][T17700] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4108'. [ 777.841244][T17700] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 778.248157][T17711] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4119'. [ 778.462480][T17712] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 779.877685][T17728] FAULT_INJECTION: forcing a failure. [ 779.877685][T17728] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 779.894825][T17728] CPU: 0 PID: 17728 Comm: syz.3.4118 Not tainted syzkaller #0 [ 779.902357][T17728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 779.912454][T17728] Call Trace: [ 779.915767][T17728] [ 779.918734][T17728] dump_stack_lvl+0x18c/0x250 [ 779.923472][T17728] ? show_regs_print_info+0x20/0x20 [ 779.928728][T17728] ? load_image+0x420/0x420 [ 779.933288][T17728] ? __lock_acquire+0x7d40/0x7d40 [ 779.938360][T17728] ? snprintf+0xe9/0x140 [ 779.942663][T17728] should_fail_ex+0x39d/0x4d0 [ 779.947396][T17728] _copy_to_user+0x2f/0xa0 [ 779.951872][T17728] simple_read_from_buffer+0xe7/0x150 [ 779.957310][T17728] proc_fail_nth_read+0x1e8/0x260 [ 779.962393][T17728] ? proc_fault_inject_write+0x360/0x360 [ 779.968086][T17728] ? fsnotify_perm+0x271/0x5e0 [ 779.972908][T17728] ? proc_fault_inject_write+0x360/0x360 [ 779.978606][T17728] vfs_read+0x28b/0x970 [ 779.982820][T17728] ? kernel_read+0x1e0/0x1e0 [ 779.987456][T17728] ? __fget_files+0x28/0x4b0 [ 779.992096][T17728] ? __fget_files+0x28/0x4b0 [ 779.996864][T17728] ? __fget_files+0x43d/0x4b0 [ 780.001620][T17728] ? __fdget_pos+0x2a3/0x330 [ 780.006259][T17728] ? ksys_read+0x75/0x260 [ 780.010649][T17728] ksys_read+0x150/0x260 [ 780.014952][T17728] ? vfs_write+0x990/0x990 [ 780.019443][T17728] ? lockdep_hardirqs_on+0x98/0x150 [ 780.024695][T17728] do_syscall_64+0x55/0xa0 [ 780.029151][T17728] ? clear_bhb_loop+0x40/0x90 [ 780.033877][T17728] ? clear_bhb_loop+0x40/0x90 [ 780.038606][T17728] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 780.044549][T17728] RIP: 0033:0x7f5db315d68e [ 780.049004][T17728] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 780.068653][T17728] RSP: 002b:00007f5db403dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 780.077117][T17728] RAX: ffffffffffffffda RBX: 00007f5db403e6c0 RCX: 00007f5db315d68e [ 780.085116][T17728] RDX: 000000000000000f RSI: 00007f5db403e0a0 RDI: 0000000000000005 [ 780.093121][T17728] RBP: 00007f5db403e090 R08: 0000000000000000 R09: 0000000000000000 [ 780.101118][T17728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 780.109116][T17728] R13: 00007f5db3416038 R14: 00007f5db3415fa0 R15: 00007ffebd6da7e8 [ 780.117135][T17728] [ 780.295123][T17733] validate_nla: 14 callbacks suppressed [ 780.295208][T17733] netlink: 'syz.2.4121': attribute type 4 has an invalid length. [ 780.335595][T17733] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4121'. [ 780.346242][T17727] netlink: 'syz.1.4117': attribute type 10 has an invalid length. [ 780.382144][T17727] team0: Device hsr_slave_0 failed to register rx_handler [ 780.422122][T17730] netlink: 'syz.1.4117': attribute type 2 has an invalid length. [ 780.439426][T17730] netlink: 'syz.1.4117': attribute type 8 has an invalid length. [ 780.447228][T17730] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4117'. [ 780.652472][T17740] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 780.903421][T17745] netlink: 'syz.1.4133': attribute type 10 has an invalid length. [ 780.917082][T17745] team0: Device hsr_slave_0 failed to register rx_handler [ 781.106326][T17750] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4127'. [ 781.697675][T17751] netlink: 'syz.1.4133': attribute type 2 has an invalid length. [ 781.713813][T17751] netlink: 'syz.1.4133': attribute type 8 has an invalid length. [ 781.724886][T17751] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4133'. [ 781.745598][T17753] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4128'. [ 782.138538][T17769] netlink: 'syz.3.4135': attribute type 12 has an invalid length. [ 782.164173][T17769] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4135'. [ 782.211290][T17770] netlink: 'syz.0.4132': attribute type 4 has an invalid length. [ 782.229439][T17770] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4132'. [ 782.238561][T17770] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 782.544128][T17778] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 782.616980][T17782] netlink: 'syz.0.4139': attribute type 4 has an invalid length. [ 782.634422][T17782] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4139'. [ 782.669440][T17782] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 783.338967][T17786] team0: Device hsr_slave_0 failed to register rx_handler [ 783.432526][T17791] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4140'. [ 783.488903][T17792] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4141'. [ 783.827820][T17799] team0: Device hsr_slave_0 failed to register rx_handler [ 783.984448][T17804] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 784.297784][T17814] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 787.333861][T17818] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 787.626091][T17820] validate_nla: 8 callbacks suppressed [ 787.626115][T17820] netlink: 'syz.3.4151': attribute type 10 has an invalid length. [ 787.670760][T17820] team0: Device hsr_slave_0 failed to register rx_handler [ 788.000923][T17829] netlink: 'syz.0.4154': attribute type 10 has an invalid length. [ 788.067149][T17829] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 788.161676][T17829] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 788.236284][T17829] bond0: (slave hsr0): Error -95 calling set_mac_address [ 788.829128][T17837] netlink: 'syz.0.4157': attribute type 10 has an invalid length. [ 788.854841][T17837] team0: Device hsr_slave_0 failed to register rx_handler [ 789.141622][T17838] netlink: 'syz.0.4157': attribute type 2 has an invalid length. [ 789.153677][T17838] netlink: 'syz.0.4157': attribute type 8 has an invalid length. [ 789.162453][T17838] __nla_validate_parse: 3 callbacks suppressed [ 789.162472][T17838] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4157'. [ 789.751576][T17844] netlink: 'syz.0.4159': attribute type 4 has an invalid length. [ 789.784434][T17844] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4159'. [ 789.796235][T17844] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 790.284112][T17850] netlink: 'syz.3.4163': attribute type 10 has an invalid length. [ 790.325536][T17850] team0: Device hsr_slave_0 failed to register rx_handler [ 790.408466][T17853] netlink: 'syz.3.4163': attribute type 2 has an invalid length. [ 790.416768][T17853] netlink: 'syz.3.4163': attribute type 8 has an invalid length. [ 790.427029][T17853] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4163'. [ 790.502723][T17852] netlink: 'syz.1.4164': attribute type 4 has an invalid length. [ 790.520187][T17852] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4164'. [ 790.551511][T17852] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 790.585331][T17855] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4165'. [ 790.609731][T17855] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 790.902477][T17860] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4167'. [ 790.930109][T17860] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 791.041604][T17863] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4168'. [ 791.601107][T17868] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 792.038460][T17873] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4170'. [ 792.078708][T17873] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 792.244624][T17878] delete_channel: no stack [ 792.305646][T17878] delete_channel: no stack [ 792.347912][T17875] team0: Device hsr_slave_0 failed to register rx_handler [ 792.735800][T17882] validate_nla: 4 callbacks suppressed [ 792.735816][T17882] netlink: 'syz.2.4171': attribute type 2 has an invalid length. [ 792.759572][T17882] netlink: 'syz.2.4171': attribute type 8 has an invalid length. [ 792.776271][T17882] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4171'. [ 792.793163][T17883] netlink: 'syz.3.4174': attribute type 10 has an invalid length. [ 792.809453][T17883] team0: Device hsr_slave_0 failed to register rx_handler [ 792.849579][T17887] netlink: 'syz.3.4174': attribute type 2 has an invalid length. [ 792.857406][T17887] netlink: 'syz.3.4174': attribute type 8 has an invalid length. [ 792.883750][T17887] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4174'. [ 792.896345][T17886] netlink: 'syz.1.4175': attribute type 10 has an invalid length. [ 792.933174][T17886] team0: Device hsr_slave_0 failed to register rx_handler [ 793.043381][T17888] netlink: 'syz.1.4175': attribute type 2 has an invalid length. [ 793.054767][T17888] netlink: 'syz.1.4175': attribute type 8 has an invalid length. [ 793.167955][T17891] netlink: 'syz.0.4176': attribute type 4 has an invalid length. [ 793.212531][T17891] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 793.275265][T17892] netlink: 'syz.2.4177': attribute type 10 has an invalid length. [ 793.300009][T17892] team0: Device hsr_slave_0 failed to register rx_handler [ 793.432632][T17898] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 793.653075][T17900] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 794.264328][T17907] __nla_validate_parse: 6 callbacks suppressed [ 794.264353][T17907] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4183'. [ 794.338224][T17907] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 794.457746][T17908] team0: Device hsr_slave_0 failed to register rx_handler [ 794.691237][T17909] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4184'. [ 794.951683][T17917] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4186'. [ 794.975139][T17917] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 795.445126][T17920] team0: Device hsr_slave_0 failed to register rx_handler [ 795.583556][T17924] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4187'. [ 795.773623][T17922] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4188'. [ 796.147476][T17929] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 796.210371][T17928] team0: Device hsr_slave_0 failed to register rx_handler [ 796.365936][T17934] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4189'. [ 796.484750][T17937] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4192'. [ 796.501008][T17937] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 796.891916][T17946] team0: Device hsr_slave_0 failed to register rx_handler [ 796.967662][T17945] team0: Device hsr_slave_0 failed to register rx_handler [ 797.026741][T17950] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4196'. [ 797.056210][T17951] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4195'. [ 797.083176][T17949] team0: Device hsr_slave_0 failed to register rx_handler [ 797.152752][T17952] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4197'. [ 797.615545][T17954] team0: Device hsr_slave_0 failed to register rx_handler [ 797.854975][T17965] validate_nla: 27 callbacks suppressed [ 797.854998][T17965] netlink: 'syz.1.4198': attribute type 2 has an invalid length. [ 797.956163][T17965] netlink: 'syz.1.4198': attribute type 8 has an invalid length. [ 798.179147][T17967] netlink: 'syz.0.4202': attribute type 4 has an invalid length. [ 798.235260][T17967] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 798.773606][T17971] netlink: 'syz.3.4203': attribute type 4 has an invalid length. [ 798.821943][T17971] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 799.977326][T17985] netlink: 'syz.1.4209': attribute type 10 has an invalid length. [ 800.051101][T17985] team0: Device hsr_slave_0 failed to register rx_handler [ 800.237215][T17987] netlink: 'syz.1.4209': attribute type 2 has an invalid length. [ 800.249663][T17987] netlink: 'syz.1.4209': attribute type 8 has an invalid length. [ 800.267044][T17987] __nla_validate_parse: 4 callbacks suppressed [ 800.267060][T17987] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4209'. [ 800.426706][T17991] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 800.494982][T17988] netlink: 'syz.0.4210': attribute type 4 has an invalid length. [ 800.528952][T17988] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4210'. [ 800.549644][T17988] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 800.650869][T17998] netlink: 'syz.1.4213': attribute type 4 has an invalid length. [ 800.658951][T17998] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4213'. [ 800.695616][T17998] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 800.723052][T17996] netlink: 'syz.2.4212': attribute type 4 has an invalid length. [ 800.743858][T17996] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4212'. [ 800.928386][T18002] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4216'. [ 801.019911][T18002] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 801.140349][T18004] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 801.246843][T18006] team0: Device hsr_slave_0 failed to register rx_handler [ 801.338382][T18008] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4215'. [ 801.608324][T18016] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4220'. [ 801.687328][T18019] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4222'. [ 801.720868][T18019] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 802.003860][T18022] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4224'. [ 802.036761][T18022] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 802.091419][T18020] team0: Device hsr_slave_0 failed to register rx_handler [ 802.241526][T18023] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4221'. [ 802.771935][T18031] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 802.822247][T18034] team0: Device hsr_slave_0 failed to register rx_handler [ 802.965416][T18027] validate_nla: 14 callbacks suppressed [ 802.965441][T18027] netlink: 'syz.3.4226': attribute type 2 has an invalid length. [ 803.008863][T18027] netlink: 'syz.3.4226': attribute type 8 has an invalid length. [ 803.313139][T18036] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 804.061615][T18044] openvswitch: netlink: IP tunnel attribute has 3040 unknown bytes. [ 804.164537][T18050] netlink: 'syz.3.4234': attribute type 4 has an invalid length. [ 804.176984][T18050] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 804.231720][T18052] netlink: 'syz.0.4235': attribute type 4 has an invalid length. [ 804.280259][T18052] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 804.595560][T18056] netlink: 'syz.2.4236': attribute type 3 has an invalid length. [ 804.646150][T18060] netlink: 'syz.2.4236': attribute type 29 has an invalid length. [ 804.723951][T18058] netlink: 'syz.0.4238': attribute type 4 has an invalid length. [ 804.751879][T18058] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 804.768985][T18060] netlink: 'syz.2.4236': attribute type 29 has an invalid length. [ 804.815834][T18062] netlink: 'syz.1.4239': attribute type 10 has an invalid length. [ 804.833939][T18062] team0: Device hsr_slave_0 failed to register rx_handler [ 804.917194][T18065] netlink: 'syz.1.4239': attribute type 2 has an invalid length. [ 805.158587][T18070] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 805.351390][T18064] __nla_validate_parse: 8 callbacks suppressed [ 805.351411][T18064] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.4237'. [ 805.392934][T18064] bridge_slave_1: default FDB implementation only supports local addresses [ 805.563318][T18078] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4244'. [ 805.690415][T18086] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4245'. [ 805.739849][T18086] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 806.089684][T18091] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4246'. [ 806.099022][T18091] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 806.302508][T18095] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4248'. [ 806.370417][T18095] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 806.418392][T18100] team0: Device hsr_slave_0 failed to register rx_handler [ 807.017228][T18102] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4250'. [ 807.239668][T18106] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 808.366843][T18125] validate_nla: 8 callbacks suppressed [ 808.366862][T18125] netlink: 'syz.0.4256': attribute type 4 has an invalid length. [ 808.450623][T18125] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4256'. [ 808.495531][T18125] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 809.010218][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.016846][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.460984][T18134] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4259'. [ 809.492122][T18141] netlink: 'syz.0.4260': attribute type 4 has an invalid length. [ 809.508952][T18141] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4260'. [ 809.518770][T18141] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 809.537277][T18115] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.4254'. [ 809.550513][T18115] bridge_slave_1: default FDB implementation only supports local addresses [ 809.691711][T18144] netlink: 'syz.2.4261': attribute type 4 has an invalid length. [ 809.958673][T18147] netlink: 'syz.0.4263': attribute type 4 has an invalid length. [ 810.008766][T18147] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 810.524010][T18149] netlink: 'syz.3.4262': attribute type 29 has an invalid length. [ 810.531500][T18148] netlink: 'syz.3.4262': attribute type 3 has an invalid length. [ 810.552214][T18148] __nla_validate_parse: 2 callbacks suppressed [ 810.552261][T18148] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4262'. [ 810.594582][T18154] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 810.703848][T18149] netlink: 'syz.3.4262': attribute type 29 has an invalid length. [ 810.728552][T18156] netlink: 'syz.2.4266': attribute type 10 has an invalid length. [ 810.759875][T18156] team0: Device hsr_slave_0 failed to register rx_handler [ 810.891550][T18159] netlink: 'syz.2.4266': attribute type 2 has an invalid length. [ 810.899811][T18159] netlink: 'syz.2.4266': attribute type 8 has an invalid length. [ 810.907757][T18159] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4266'. [ 811.160953][T18169] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4268'. [ 811.209450][T18169] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 811.295475][T18161] team0: Device hsr_slave_0 failed to register rx_handler [ 811.442696][T18173] team0: Device hsr_slave_0 failed to register rx_handler [ 811.511635][T18175] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4267'. [ 811.563555][T18177] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4270'. [ 811.792424][T18180] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4271'. [ 811.887672][T18182] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4272'. [ 811.915035][T18182] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 812.441302][T18188] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4273'. [ 812.487748][T18188] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 813.644601][T18193] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 813.675857][T18195] validate_nla: 9 callbacks suppressed [ 813.675877][T18195] netlink: 'syz.3.4278': attribute type 10 has an invalid length. [ 813.859113][T18195] team0: Device hsr_slave_0 failed to register rx_handler [ 813.948423][T18201] netlink: 'syz.3.4278': attribute type 2 has an invalid length. [ 813.966974][T18201] netlink: 'syz.3.4278': attribute type 8 has an invalid length. [ 813.976401][T18201] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4278'. [ 814.090970][T18206] netlink: 'syz.0.4281': attribute type 10 has an invalid length. [ 814.115079][T18206] team0: Device hsr_slave_0 failed to register rx_handler [ 814.260377][T18209] netlink: 'syz.0.4281': attribute type 2 has an invalid length. [ 814.268207][T18209] netlink: 'syz.0.4281': attribute type 8 has an invalid length. [ 814.309471][T18209] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4281'. [ 818.599828][T18232] netlink: 'syz.1.4287': attribute type 4 has an invalid length. [ 818.660792][T18232] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4287'. [ 818.748692][T18232] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 819.314034][T18238] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4288'. [ 819.391489][T18240] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 819.658113][T18244] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4291'. [ 820.369226][T18250] netlink: 'syz.3.4296': attribute type 10 has an invalid length. [ 820.395976][T18250] team0: Device hsr_slave_0 failed to register rx_handler [ 820.535701][T18255] netlink: 'syz.3.4296': attribute type 2 has an invalid length. [ 820.562794][T18255] netlink: 'syz.3.4296': attribute type 8 has an invalid length. [ 820.572757][T18255] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4296'. [ 820.618264][T18251] netlink: 'syz.1.4295': attribute type 10 has an invalid length. [ 820.655303][T18251] team0: Device hsr_slave_0 failed to register rx_handler [ 820.740678][T18256] netlink: 'syz.1.4295': attribute type 2 has an invalid length. [ 820.748556][T18256] netlink: 'syz.1.4295': attribute type 8 has an invalid length. [ 820.758190][T18256] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4295'. [ 821.132150][T18260] netlink: 'syz.3.4298': attribute type 10 has an invalid length. [ 821.197991][T18260] team0: Device hsr_slave_0 failed to register rx_handler [ 821.282190][T18264] netlink: 'syz.3.4298': attribute type 2 has an invalid length. [ 821.299821][T18264] netlink: 'syz.3.4298': attribute type 8 has an invalid length. [ 821.329488][T18264] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4298'. [ 821.601405][T18274] netlink: 'syz.0.4300': attribute type 4 has an invalid length. [ 821.639725][T18274] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4300'. [ 821.672682][T18274] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 823.429392][T18284] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4302'. [ 823.724505][T18296] team0: Device hsr_slave_0 failed to register rx_handler [ 823.817506][T18301] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4306'. [ 823.858905][T18300] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4308'. [ 823.878209][T18300] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 823.901423][T18303] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4310'. [ 824.222085][T18315] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4312'. [ 824.268563][T18315] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 824.522957][T18322] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4314'. [ 824.568121][T18317] team0: Device hsr_slave_0 failed to register rx_handler [ 824.666268][T18324] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4313'. [ 825.316896][T18329] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4324'. [ 825.349887][T18329] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 826.016823][T18338] validate_nla: 9 callbacks suppressed [ 826.016909][T18338] netlink: 'syz.2.4319': attribute type 10 has an invalid length. [ 826.073389][T18338] team0: Device hsr_slave_0 failed to register rx_handler [ 826.333769][T18340] netlink: 'syz.2.4319': attribute type 2 has an invalid length. [ 826.379398][T18340] netlink: 'syz.2.4319': attribute type 8 has an invalid length. [ 826.404859][T18340] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4319'. [ 826.586453][T18343] netlink: 'syz.1.4321': attribute type 10 has an invalid length. [ 826.628955][T18343] team0: Device hsr_slave_0 failed to register rx_handler [ 826.736362][T18348] netlink: 'syz.1.4321': attribute type 2 has an invalid length. [ 826.749460][T18348] netlink: 'syz.1.4321': attribute type 8 has an invalid length. [ 826.757276][T18348] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4321'. [ 826.849224][T18350] netlink: 'syz.2.4323': attribute type 4 has an invalid length. [ 826.878524][T18350] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4323'. [ 827.114041][T18354] netlink: 'syz.0.4325': attribute type 10 has an invalid length. [ 827.144200][T18354] team0: Device hsr_slave_0 failed to register rx_handler [ 827.219929][T18361] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 827.284699][T18354] netlink: 'syz.0.4325': attribute type 2 has an invalid length. [ 827.304449][T18354] netlink: 'syz.0.4325': attribute type 8 has an invalid length. [ 827.351390][T18358] team0: Device hsr_slave_0 failed to register rx_handler [ 827.670061][T18367] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 827.991294][T18374] team0: Device hsr_slave_0 failed to register rx_handler [ 828.581333][T18384] team0: Device hsr_slave_0 failed to register rx_handler [ 828.974008][T18394] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 829.176551][T18395] team0: Device hsr_slave_0 failed to register rx_handler [ 829.288507][T18401] __nla_validate_parse: 7 callbacks suppressed [ 829.288532][T18401] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4337'. [ 829.877287][T18408] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4344'. [ 829.897276][T18408] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 830.060744][T18412] team0: Device hsr_slave_0 failed to register rx_handler [ 830.742282][T18413] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4345'. [ 831.011287][T18417] team0: Device hsr_slave_0 failed to register rx_handler [ 831.245337][T18423] validate_nla: 19 callbacks suppressed [ 831.245358][T18423] netlink: 'syz.2.4354': attribute type 2 has an invalid length. [ 831.260526][T18423] netlink: 'syz.2.4354': attribute type 8 has an invalid length. [ 831.268784][T18423] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4354'. [ 831.453655][T18426] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4350'. [ 831.714327][T18428] netlink: 'syz.0.4349': attribute type 10 has an invalid length. [ 831.772470][T18428] team0: Device hsr_slave_0 failed to register rx_handler [ 831.892868][T18434] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 831.966839][T18435] netlink: 'syz.0.4349': attribute type 2 has an invalid length. [ 831.989604][T18435] netlink: 'syz.0.4349': attribute type 8 has an invalid length. [ 832.016803][T18435] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4349'. [ 832.266214][T18437] netlink: 'syz.1.4353': attribute type 4 has an invalid length. [ 832.284677][T18437] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4353'. [ 832.334352][T18437] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 832.682842][T18442] netlink: 'syz.0.4356': attribute type 10 has an invalid length. [ 832.760457][T18442] team0: Device hsr_slave_0 failed to register rx_handler [ 832.851418][T18444] netlink: 'syz.0.4356': attribute type 2 has an invalid length. [ 832.916481][T18444] netlink: 'syz.0.4356': attribute type 8 has an invalid length. [ 832.927249][T18444] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4356'. [ 832.977396][T18447] netlink: 'syz.1.4358': attribute type 4 has an invalid length. [ 833.180462][T18447] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4358'. [ 833.272531][T18447] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 834.040857][T18456] team0: Device hsr_slave_0 failed to register rx_handler [ 834.117162][T18454] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4360'. [ 834.319305][T18461] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 834.755928][T18472] team0: Device hsr_slave_0 failed to register rx_handler [ 834.965784][T18474] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4367'. [ 835.024522][T18476] team0: Device hsr_slave_0 failed to register rx_handler [ 835.107808][T18480] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4368'. [ 835.123077][T18479] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 836.217507][T18491] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4372'. [ 836.521093][T18497] FAULT_INJECTION: forcing a failure. [ 836.521093][T18497] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 836.697671][T18494] validate_nla: 9 callbacks suppressed [ 836.697694][T18494] netlink: 'syz.1.4374': attribute type 10 has an invalid length. [ 836.724871][T18497] CPU: 0 PID: 18497 Comm: syz.0.4373 Not tainted syzkaller #0 [ 836.732406][T18497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 836.742506][T18497] Call Trace: [ 836.745823][T18497] [ 836.748792][T18497] dump_stack_lvl+0x18c/0x250 [ 836.753536][T18497] ? show_regs_print_info+0x20/0x20 [ 836.758802][T18497] ? load_image+0x420/0x420 [ 836.763367][T18497] ? __lock_acquire+0x7d40/0x7d40 [ 836.768454][T18497] should_fail_ex+0x39d/0x4d0 [ 836.773205][T18497] prepare_alloc_pages+0x1e2/0x5f0 [ 836.775964][T18494] team0: Device hsr_slave_0 failed to register rx_handler [ 836.778365][T18497] __alloc_pages+0x134/0x460 [ 836.778397][T18497] ? zone_statistics+0x170/0x170 [ 836.778426][T18497] ? rcuref_put_slowpath+0x101/0x150 [ 836.778469][T18497] bpf_prog_test_run_xdp+0xc37/0x10e0 [ 836.778551][T18497] ? dev_put+0x80/0x80 [ 836.778592][T18497] ? dev_put+0x80/0x80 [ 836.778627][T18497] bpf_prog_test_run+0x321/0x390 [ 836.778658][T18497] __sys_bpf+0x49d/0x890 [ 836.778686][T18497] ? bpf_link_show_fdinfo+0x390/0x390 [ 836.778733][T18497] ? lock_chain_count+0x20/0x20 [ 836.778770][T18497] __x64_sys_bpf+0x7c/0x90 [ 836.778796][T18497] do_syscall_64+0x55/0xa0 [ 836.778816][T18497] ? clear_bhb_loop+0x40/0x90 [ 836.778844][T18497] ? clear_bhb_loop+0x40/0x90 [ 836.778875][T18497] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 836.778903][T18497] RIP: 0033:0x7fbcccd9ce59 [ 836.778924][T18497] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 836.778943][T18497] RSP: 002b:00007fbccdc92028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 836.778968][T18497] RAX: ffffffffffffffda RBX: 00007fbccd015fa0 RCX: 00007fbcccd9ce59 [ 836.778985][T18497] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 836.779000][T18497] RBP: 00007fbccdc92090 R08: 0000000000000000 R09: 0000000000000000 [ 836.779013][T18497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 836.779027][T18497] R13: 00007fbccd016038 R14: 00007fbccd015fa0 R15: 00007ffe975c4918 [ 836.779065][T18497] [ 837.114587][T18498] netlink: 'syz.1.4374': attribute type 2 has an invalid length. [ 837.149546][T18498] netlink: 'syz.1.4374': attribute type 8 has an invalid length. [ 837.190122][T18498] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4374'. [ 837.288087][T18502] netlink: 'syz.0.4378': attribute type 29 has an invalid length. [ 837.296934][T18502] netlink: 'syz.0.4378': attribute type 29 has an invalid length. [ 837.309999][T18502] netlink: 'syz.0.4378': attribute type 29 has an invalid length. [ 837.381467][T18502] netlink: 'syz.0.4378': attribute type 29 has an invalid length. [ 837.490829][T18502] netlink: 'syz.0.4378': attribute type 29 has an invalid length. [ 837.587100][T18505] netlink: 'syz.2.4379': attribute type 10 has an invalid length. [ 837.644775][T18505] team0: Device hsr_slave_0 failed to register rx_handler [ 838.226935][T18506] netlink: 'syz.2.4379': attribute type 2 has an invalid length. [ 838.249291][T18506] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4379'. [ 838.671385][T18516] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 839.419574][T18528] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4392'. [ 839.495772][T18526] team0: Device hsr_slave_0 failed to register rx_handler [ 839.640187][T18529] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4384'. [ 839.861217][T18532] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4387'. [ 840.448986][T18539] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4389'. [ 840.526416][T18540] team0: Device hsr_slave_0 failed to register rx_handler [ 840.788936][T18541] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4390'. [ 841.284537][T18546] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 841.340527][T18549] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4395'. [ 841.377522][T18549] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 841.560423][T18556] netlink: 196 bytes leftover after parsing attributes in process `syz.0.4397'. [ 841.606243][T18560] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4399'. [ 841.618070][T18560] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4399'. [ 841.636830][T18560] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4399'. [ 841.648074][T18560] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4399'. [ 841.661851][T18558] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4398'. [ 841.671656][T18558] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 841.740878][T18562] validate_nla: 11 callbacks suppressed [ 841.740918][T18562] netlink: 'syz.2.4400': attribute type 2 has an invalid length. [ 841.846131][T18564] netlink: 'syz.1.4401': attribute type 4 has an invalid length. [ 841.859571][T18564] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4401'. [ 841.879660][T18564] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 841.898545][T18562] netlink: 'syz.2.4400': attribute type 6 has an invalid length. [ 842.160433][T18571] netlink: 'syz.1.4404': attribute type 10 has an invalid length. [ 842.209504][T18571] team0: Device hsr_slave_0 failed to register rx_handler [ 842.334424][T18576] netlink: 'syz.1.4404': attribute type 2 has an invalid length. [ 842.370466][T18576] netlink: 'syz.1.4404': attribute type 8 has an invalid length. [ 842.490656][T18581] netlink: 'syz.0.4407': attribute type 4 has an invalid length. [ 842.507250][T18581] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 842.667444][T18585] netlink: 'syz.1.4409': attribute type 4 has an invalid length. [ 842.676689][T18585] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 842.988383][T18596] netlink: 'syz.0.4414': attribute type 4 has an invalid length. [ 843.009740][T18596] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 843.215734][T18602] netlink: 'syz.3.4417': attribute type 10 has an invalid length. [ 843.238104][T18602] team0: Device hsr_slave_0 failed to register rx_handler [ 843.651179][T18616] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 845.059123][T18639] FAULT_INJECTION: forcing a failure. [ 845.059123][T18639] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 845.102277][T18639] CPU: 0 PID: 18639 Comm: syz.3.4430 Not tainted syzkaller #0 [ 845.109902][T18639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 845.120019][T18639] Call Trace: [ 845.123349][T18639] [ 845.126357][T18639] dump_stack_lvl+0x18c/0x250 [ 845.131101][T18639] ? show_regs_print_info+0x20/0x20 [ 845.136375][T18639] ? load_image+0x420/0x420 [ 845.140940][T18639] ? __might_fault+0xaa/0x120 [ 845.145675][T18639] ? __lock_acquire+0x7d40/0x7d40 [ 845.150776][T18639] should_fail_ex+0x39d/0x4d0 [ 845.155522][T18639] _copy_from_user+0x2f/0xe0 [ 845.160180][T18639] ___sys_sendmsg+0x1c7/0x360 [ 845.165000][T18639] ? get_pid_task+0x20/0x1e0 [ 845.169653][T18639] ? __sys_sendmsg+0x2a0/0x2a0 [ 845.174479][T18639] ? __lock_acquire+0x7d40/0x7d40 [ 845.179554][T18639] __se_sys_sendmsg+0x1c2/0x2b0 [ 845.184436][T18639] ? __x64_sys_sendmsg+0x80/0x80 [ 845.189419][T18639] ? lockdep_hardirqs_on+0x98/0x150 [ 845.194658][T18639] do_syscall_64+0x55/0xa0 [ 845.199109][T18639] ? clear_bhb_loop+0x40/0x90 [ 845.203824][T18639] ? clear_bhb_loop+0x40/0x90 [ 845.208540][T18639] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 845.214475][T18639] RIP: 0033:0x7f5db319ce59 [ 845.218920][T18639] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 845.238554][T18639] RSP: 002b:00007f5db403e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 845.247003][T18639] RAX: ffffffffffffffda RBX: 00007f5db3415fa0 RCX: 00007f5db319ce59 [ 845.254999][T18639] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 845.262998][T18639] RBP: 00007f5db403e090 R08: 0000000000000000 R09: 0000000000000000 [ 845.270995][T18639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 845.278988][T18639] R13: 00007f5db3416038 R14: 00007f5db3415fa0 R15: 00007ffebd6da7e8 [ 845.287003][T18639] [ 845.382818][T18644] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 845.437259][T18641] team0: Device hsr_slave_0 failed to register rx_handler [ 845.546529][T18645] __nla_validate_parse: 13 callbacks suppressed [ 845.546559][T18645] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4431'. [ 845.609284][T18649] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4434'. [ 845.623433][T18649] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 845.828355][T18655] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4437'. [ 846.639401][T18673] FAULT_INJECTION: forcing a failure. [ 846.639401][T18673] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 846.672548][T18673] CPU: 0 PID: 18673 Comm: syz.3.4443 Not tainted syzkaller #0 [ 846.680100][T18673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 846.690285][T18673] Call Trace: [ 846.693611][T18673] [ 846.696584][T18673] dump_stack_lvl+0x18c/0x250 [ 846.701319][T18673] ? show_regs_print_info+0x20/0x20 [ 846.706571][T18673] ? load_image+0x420/0x420 [ 846.711122][T18673] ? __might_fault+0xaa/0x120 [ 846.715850][T18673] ? __lock_acquire+0x7d40/0x7d40 [ 846.720918][T18673] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 846.726964][T18673] should_fail_ex+0x39d/0x4d0 [ 846.731705][T18673] _copy_from_user+0x2f/0xe0 [ 846.736346][T18673] ___sys_sendmsg+0x1c7/0x360 [ 846.741083][T18673] ? __sys_sendmsg+0x2a0/0x2a0 [ 846.745921][T18673] ? trace_call_bpf+0xc3/0x6c0 [ 846.750780][T18673] __se_sys_sendmsg+0x1c2/0x2b0 [ 846.755683][T18673] ? __x64_sys_sendmsg+0x80/0x80 [ 846.760690][T18673] ? lockdep_hardirqs_on+0x98/0x150 [ 846.765955][T18673] do_syscall_64+0x55/0xa0 [ 846.770412][T18673] ? clear_bhb_loop+0x40/0x90 [ 846.775134][T18673] ? clear_bhb_loop+0x40/0x90 [ 846.779873][T18673] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 846.785823][T18673] RIP: 0033:0x7f5db319ce59 [ 846.790374][T18673] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 846.810031][T18673] RSP: 002b:00007f5db403e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 846.818498][T18673] RAX: ffffffffffffffda RBX: 00007f5db3415fa0 RCX: 00007f5db319ce59 [ 846.826523][T18673] RDX: 0000000000000000 RSI: 0000200000003780 RDI: 0000000000000004 [ 846.834541][T18673] RBP: 00007f5db403e090 R08: 0000000000000000 R09: 0000000000000000 [ 846.842558][T18673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 846.850578][T18673] R13: 00007f5db3416038 R14: 00007f5db3415fa0 R15: 00007ffebd6da7e8 [ 846.858614][T18673] [ 846.926166][T18677] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4445'. [ 847.092016][T18679] validate_nla: 10 callbacks suppressed [ 847.092480][T18679] netlink: 'syz.0.4446': attribute type 10 has an invalid length. [ 847.148608][T18679] team0: Device hsr_slave_0 failed to register rx_handler [ 847.278572][T18684] netlink: 'syz.0.4446': attribute type 2 has an invalid length. [ 847.297771][T18684] netlink: 'syz.0.4446': attribute type 8 has an invalid length. [ 847.307089][T18684] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4446'. [ 847.332348][T18687] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 847.404834][T18683] netlink: 'syz.3.4448': attribute type 4 has an invalid length. [ 847.414369][T18683] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4448'. [ 847.427946][T18683] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 847.622662][T18696] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4452'. [ 847.661307][T18696] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4452'. [ 847.680128][T18698] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4452'. [ 847.790505][T18703] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 847.855733][T18706] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4454'. [ 848.211974][T18714] FAULT_INJECTION: forcing a failure. [ 848.211974][T18714] name failslab, interval 1, probability 0, space 0, times 0 [ 848.286264][T18714] CPU: 1 PID: 18714 Comm: syz.2.4456 Not tainted syzkaller #0 [ 848.293815][T18714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 848.303921][T18714] Call Trace: [ 848.307241][T18714] [ 848.310208][T18714] dump_stack_lvl+0x18c/0x250 [ 848.314943][T18714] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 848.321154][T18714] ? show_regs_print_info+0x20/0x20 [ 848.326411][T18714] ? load_image+0x420/0x420 [ 848.330978][T18714] should_fail_ex+0x39d/0x4d0 [ 848.335719][T18714] should_failslab+0x9/0x20 [ 848.340276][T18714] slab_pre_alloc_hook+0x59/0x310 [ 848.345365][T18714] kmem_cache_alloc+0x5a/0x2d0 [ 848.350288][T18714] ? getname_flags+0xbb/0x500 [ 848.355034][T18714] getname_flags+0xbb/0x500 [ 848.359598][T18714] do_sys_openat2+0xda/0x1d0 [ 848.364236][T18714] ? do_sys_open+0xe0/0xe0 [ 848.368705][T18714] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 848.374922][T18714] __x64_sys_openat+0x139/0x160 [ 848.379826][T18714] do_syscall_64+0x55/0xa0 [ 848.384286][T18714] ? clear_bhb_loop+0x40/0x90 [ 848.389016][T18714] ? clear_bhb_loop+0x40/0x90 [ 848.393744][T18714] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 848.399690][T18714] RIP: 0033:0x7f768599ce59 [ 848.404153][T18714] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 848.423806][T18714] RSP: 002b:00007f76868e1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 848.432270][T18714] RAX: ffffffffffffffda RBX: 00007f7685c15fa0 RCX: 00007f768599ce59 [ 848.440387][T18714] RDX: 0000000000000002 RSI: 0000200000000700 RDI: 0000000000000006 [ 848.448405][T18714] RBP: 00007f76868e1090 R08: 0000000000000000 R09: 0000000000000000 [ 848.456419][T18714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 848.464431][T18714] R13: 00007f7685c16038 R14: 00007f7685c15fa0 R15: 00007ffe6d3c5258 [ 848.472462][T18714] [ 849.671253][T18723] netlink: 'syz.3.4459': attribute type 10 has an invalid length. [ 849.724832][T18723] team0: Device hsr_slave_0 failed to register rx_handler [ 849.851713][T18724] netlink: 'syz.3.4459': attribute type 2 has an invalid length. [ 849.887811][T18724] netlink: 'syz.3.4459': attribute type 8 has an invalid length. [ 850.051361][T18732] netlink: 'syz.1.4462': attribute type 4 has an invalid length. [ 850.085014][T18732] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 850.732874][T18741] netlink: 'syz.0.4466': attribute type 10 has an invalid length. [ 850.766530][T18741] team0: Device hsr_slave_0 failed to register rx_handler [ 850.869427][T18747] netlink: 'syz.0.4466': attribute type 2 has an invalid length. [ 850.877289][T18747] __nla_validate_parse: 4 callbacks suppressed [ 850.877304][T18747] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4466'. [ 851.164970][T18753] team0: Device hsr_slave_0 failed to register rx_handler [ 851.224487][T18753] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4471'. [ 851.416089][T18759] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4474'. [ 851.751447][T18770] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 852.173204][T18782] validate_nla: 4 callbacks suppressed [ 852.173226][T18782] netlink: 'syz.1.4483': attribute type 10 has an invalid length. [ 852.212618][T18782] team0: Device hsr_slave_0 failed to register rx_handler [ 852.342577][T18783] netlink: 'syz.1.4483': attribute type 2 has an invalid length. [ 852.358514][T18783] netlink: 'syz.1.4483': attribute type 8 has an invalid length. [ 852.381920][T18783] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4483'. [ 852.603122][T18787] netlink: 'syz.2.4484': attribute type 10 has an invalid length. [ 852.641936][T18787] team0: Device hsr_slave_0 failed to register rx_handler [ 852.655133][T18794] FAULT_INJECTION: forcing a failure. [ 852.655133][T18794] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 852.702493][T18794] CPU: 0 PID: 18794 Comm: syz.1.4488 Not tainted syzkaller #0 [ 852.710049][T18794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 852.720161][T18794] Call Trace: [ 852.723493][T18794] [ 852.726470][T18794] dump_stack_lvl+0x18c/0x250 [ 852.731226][T18794] ? show_regs_print_info+0x20/0x20 [ 852.736500][T18794] ? load_image+0x420/0x420 [ 852.741077][T18794] ? __might_fault+0xaa/0x120 [ 852.745820][T18794] ? __lock_acquire+0x7d40/0x7d40 [ 852.750918][T18794] should_fail_ex+0x39d/0x4d0 [ 852.755676][T18794] _copy_from_user+0x2f/0xe0 [ 852.760345][T18794] sk_setsockopt+0x2b2/0x2bc0 [ 852.765274][T18794] ? sockopt_capable+0x60/0x60 [ 852.770129][T18794] ? aa_sk_perm+0x83c/0x970 [ 852.774884][T18794] ? __fget_files+0x28/0x4b0 [ 852.779542][T18794] ? aa_af_perm+0x330/0x330 [ 852.784116][T18794] ? __fget_files+0x28/0x4b0 [ 852.788767][T18794] ? __fget_files+0x28/0x4b0 [ 852.793414][T18794] ? aa_sock_opt_perm+0x74/0x100 [ 852.798423][T18794] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 852.804040][T18794] ? security_socket_setsockopt+0x7e/0xa0 [ 852.809827][T18794] do_sock_setsockopt+0x11b/0x1a0 [ 852.814919][T18794] __x64_sys_setsockopt+0x182/0x200 [ 852.820187][T18794] do_syscall_64+0x55/0xa0 [ 852.824659][T18794] ? clear_bhb_loop+0x40/0x90 [ 852.829399][T18794] ? clear_bhb_loop+0x40/0x90 [ 852.834154][T18794] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 852.840109][T18794] RIP: 0033:0x7fafcf19ce59 [ 852.844576][T18794] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 852.864238][T18794] RSP: 002b:00007fafcff77028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 852.872717][T18794] RAX: ffffffffffffffda RBX: 00007fafcf415fa0 RCX: 00007fafcf19ce59 [ 852.880754][T18794] RDX: 0000000000000050 RSI: 0000000000000001 RDI: 0000000000000004 [ 852.888781][T18794] RBP: 00007fafcff77090 R08: 0000000000000048 R09: 0000000000000000 [ 852.896814][T18794] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 852.904839][T18794] R13: 00007fafcf416038 R14: 00007fafcf415fa0 R15: 00007ffd1fd18088 [ 852.912892][T18794] [ 852.970232][T18795] netlink: 'syz.2.4484': attribute type 2 has an invalid length. [ 852.978471][T18795] netlink: 'syz.2.4484': attribute type 8 has an invalid length. [ 853.019356][T18795] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4484'. [ 853.692682][T18817] netlink: 'syz.2.4496': attribute type 10 has an invalid length. [ 853.724718][T18817] team0: Device hsr_slave_0 failed to register rx_handler [ 853.877130][T18820] netlink: 'syz.2.4496': attribute type 2 has an invalid length. [ 853.891931][T18820] netlink: 'syz.2.4496': attribute type 8 has an invalid length. [ 853.900424][T18820] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4496'. [ 854.253248][T18835] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4503'. [ 854.855111][T18837] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 854.890696][T18834] netlink: 'syz.1.4502': attribute type 10 has an invalid length. [ 854.936049][T18834] team0: Device hsr_slave_0 failed to register rx_handler [ 855.046977][T18845] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4502'. [ 855.674428][T18870] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4514'. [ 856.487118][T18878] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 857.243575][T18903] validate_nla: 2 callbacks suppressed [ 857.243594][T18903] netlink: 'syz.0.4527': attribute type 10 has an invalid length. [ 857.290402][T18903] team0: Device hsr_slave_0 failed to register rx_handler [ 857.341997][T18906] netlink: 'syz.0.4527': attribute type 2 has an invalid length. [ 857.349896][T18906] netlink: 'syz.0.4527': attribute type 8 has an invalid length. [ 857.357678][T18906] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4527'. [ 857.568863][T18910] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4530'. [ 857.603979][T18908] netlink: 'syz.3.4529': attribute type 10 has an invalid length. [ 857.638915][T18908] team0: Device hsr_slave_0 failed to register rx_handler [ 857.655303][T18913] netlink: 'syz.0.4531': attribute type 29 has an invalid length. [ 857.867693][T18913] netlink: 'syz.0.4531': attribute type 29 has an invalid length. [ 857.892747][T18915] netlink: 'syz.0.4531': attribute type 29 has an invalid length. [ 857.920410][T18914] netlink: 'syz.3.4529': attribute type 2 has an invalid length. [ 857.956710][T18914] netlink: 'syz.3.4529': attribute type 8 has an invalid length. [ 857.992729][T18914] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4529'. [ 858.965864][T18925] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 859.227302][T18933] netlink: 'syz.0.4538': attribute type 4 has an invalid length. [ 859.264316][T18933] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4538'. [ 859.308463][T18933] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 859.371214][T18936] team0: Device hsr_slave_0 failed to register rx_handler [ 859.426414][T18935] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4539'. [ 859.743368][T18938] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.4540'. [ 860.031040][T18946] FAULT_INJECTION: forcing a failure. [ 860.031040][T18946] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 860.079533][T18946] CPU: 1 PID: 18946 Comm: syz.0.4543 Not tainted syzkaller #0 [ 860.087100][T18946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 860.097559][T18946] Call Trace: [ 860.100897][T18946] [ 860.103877][T18946] dump_stack_lvl+0x18c/0x250 [ 860.108633][T18946] ? show_regs_print_info+0x20/0x20 [ 860.113898][T18946] ? load_image+0x420/0x420 [ 860.118549][T18946] ? __lock_acquire+0x7d40/0x7d40 [ 860.123685][T18946] ? snprintf+0xe9/0x140 [ 860.128095][T18946] should_fail_ex+0x39d/0x4d0 [ 860.132848][T18946] _copy_to_user+0x2f/0xa0 [ 860.137333][T18946] simple_read_from_buffer+0xe7/0x150 [ 860.142960][T18946] proc_fail_nth_read+0x1e8/0x260 [ 860.148053][T18946] ? proc_fault_inject_write+0x360/0x360 [ 860.154530][T18946] ? fsnotify_perm+0x271/0x5e0 [ 860.159358][T18946] ? proc_fault_inject_write+0x360/0x360 [ 860.165400][T18946] vfs_read+0x28b/0x970 [ 860.169885][T18946] ? kernel_read+0x1e0/0x1e0 [ 860.175150][T18946] ? __fget_files+0x28/0x4b0 [ 860.180073][T18946] ? __fget_files+0x28/0x4b0 [ 860.184737][T18946] ? __fget_files+0x43d/0x4b0 [ 860.189574][T18946] ? __fdget_pos+0x2a3/0x330 [ 860.194251][T18946] ? ksys_read+0x75/0x260 [ 860.198733][T18946] ksys_read+0x150/0x260 [ 860.203126][T18946] ? vfs_write+0x990/0x990 [ 860.207703][T18946] ? lockdep_hardirqs_on+0x98/0x150 [ 860.214705][T18946] do_syscall_64+0x55/0xa0 [ 860.219314][T18946] ? clear_bhb_loop+0x40/0x90 [ 860.224318][T18946] ? clear_bhb_loop+0x40/0x90 [ 860.229057][T18946] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 860.235017][T18946] RIP: 0033:0x7fbcccd5d68e [ 860.239482][T18946] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 860.259150][T18946] RSP: 002b:00007fbccdc91fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 860.268764][T18946] RAX: ffffffffffffffda RBX: 00007fbccdc926c0 RCX: 00007fbcccd5d68e [ 860.277013][T18946] RDX: 000000000000000f RSI: 00007fbccdc920a0 RDI: 0000000000000004 [ 860.285039][T18946] RBP: 00007fbccdc92090 R08: 0000000000000000 R09: 0000000000000000 [ 860.293667][T18946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 860.301856][T18946] R13: 00007fbccd016038 R14: 00007fbccd015fa0 R15: 00007ffe975c4918 [ 860.309896][T18946] [ 860.363946][T18950] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.4545'. [ 860.628352][T18959] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4549'. [ 860.646254][T18959] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 860.719203][T18957] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 860.872221][T18962] team0: Device hsr_slave_0 failed to register rx_handler [ 860.961365][T18966] FAULT_INJECTION: forcing a failure. [ 860.961365][T18966] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 860.984957][T18966] CPU: 0 PID: 18966 Comm: syz.2.4552 Not tainted syzkaller #0 [ 860.992604][T18966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 861.002798][T18966] Call Trace: [ 861.006126][T18966] [ 861.009108][T18966] dump_stack_lvl+0x18c/0x250 [ 861.013852][T18966] ? show_regs_print_info+0x20/0x20 [ 861.019118][T18966] ? load_image+0x420/0x420 [ 861.023747][T18966] ? __might_fault+0xaa/0x120 [ 861.028484][T18966] ? __lock_acquire+0x7d40/0x7d40 [ 861.033582][T18966] should_fail_ex+0x39d/0x4d0 [ 861.038330][T18966] _copy_from_user+0x2f/0xe0 [ 861.042983][T18966] ___sys_sendmsg+0x1c7/0x360 [ 861.047723][T18966] ? __sys_sendmsg+0x2a0/0x2a0 [ 861.052574][T18966] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 861.058830][T18966] __se_sys_sendmsg+0x1c2/0x2b0 [ 861.063752][T18966] ? __x64_sys_sendmsg+0x80/0x80 [ 861.068782][T18966] ? lockdep_hardirqs_on+0x98/0x150 [ 861.074135][T18966] do_syscall_64+0x55/0xa0 [ 861.078722][T18966] ? clear_bhb_loop+0x40/0x90 [ 861.083468][T18966] ? clear_bhb_loop+0x40/0x90 [ 861.088218][T18966] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 861.094178][T18966] RIP: 0033:0x7f768599ce59 [ 861.098645][T18966] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 861.120399][T18966] RSP: 002b:00007f76868e1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 861.129235][T18966] RAX: ffffffffffffffda RBX: 00007f7685c15fa0 RCX: 00007f768599ce59 [ 861.138760][T18966] RDX: 0000000000000000 RSI: 0000200000000c80 RDI: 0000000000000003 [ 861.146877][T18966] RBP: 00007f76868e1090 R08: 0000000000000000 R09: 0000000000000000 [ 861.154905][T18966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 861.163273][T18966] R13: 00007f7685c16038 R14: 00007f7685c15fa0 R15: 00007ffe6d3c5258 [ 861.171689][T18966] [ 861.211683][T18967] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4550'. [ 861.703970][T18980] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.4557'. [ 862.998790][T19003] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 863.074632][T19005] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4569'. [ 863.394388][T19012] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 952.599824][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 952.606233][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 955.294342][T19036] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 955.308677][T19036] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 955.318194][T19036] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 955.327731][T19036] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 955.338407][T19036] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 955.346451][T19036] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 955.356306][T19036] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 955.364063][T19036] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 955.375676][T19036] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 955.385767][T19036] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 955.394638][T19036] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 955.404439][T19036] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 955.415832][T19036] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 955.424744][T19036] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 955.433008][T19036] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 955.441134][T19036] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 955.448855][T19036] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 955.458432][T19036] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 955.466822][T19036] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 955.477791][ T5779] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 955.485841][ T5779] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 955.525591][T14363] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 955.538322][T14363] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 955.560652][T19034] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 956.459027][T19024] chnl_net:caif_netlink_parms(): no params data found [ 956.815750][T19032] chnl_net:caif_netlink_parms(): no params data found [ 956.848994][T19030] chnl_net:caif_netlink_parms(): no params data found [ 956.885964][T19025] chnl_net:caif_netlink_parms(): no params data found [ 957.196014][T19024] bridge0: port 1(bridge_slave_0) entered blocking state [ 957.214211][T19024] bridge0: port 1(bridge_slave_0) entered disabled state [ 957.222708][T19024] bridge_slave_0: entered allmulticast mode [ 957.241432][T19024] bridge_slave_0: entered promiscuous mode [ 957.261178][T19024] bridge0: port 2(bridge_slave_1) entered blocking state [ 957.278836][T19024] bridge0: port 2(bridge_slave_1) entered disabled state [ 957.286761][T19024] bridge_slave_1: entered allmulticast mode [ 957.301164][T19024] bridge_slave_1: entered promiscuous mode [ 957.517498][T19032] bridge0: port 1(bridge_slave_0) entered blocking state [ 957.535125][T19032] bridge0: port 1(bridge_slave_0) entered disabled state [ 957.543171][T19032] bridge_slave_0: entered allmulticast mode [ 957.551053][T19032] bridge_slave_0: entered promiscuous mode [ 957.569683][T19038] Bluetooth: hci5: command tx timeout [ 957.575752][T19038] Bluetooth: hci2: command tx timeout [ 957.587457][T19025] bridge0: port 1(bridge_slave_0) entered blocking state [ 957.595021][T19025] bridge0: port 1(bridge_slave_0) entered disabled state [ 957.602828][T19025] bridge_slave_0: entered allmulticast mode [ 957.610838][T19025] bridge_slave_0: entered promiscuous mode [ 957.623881][T19024] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 957.633796][T19038] Bluetooth: hci7: command tx timeout [ 957.640355][T19037] Bluetooth: hci6: command tx timeout [ 957.647759][T19032] bridge0: port 2(bridge_slave_1) entered blocking state [ 957.657585][T19032] bridge0: port 2(bridge_slave_1) entered disabled state [ 957.665238][T19032] bridge_slave_1: entered allmulticast mode [ 957.673179][T19032] bridge_slave_1: entered promiscuous mode [ 957.694652][T19030] bridge0: port 1(bridge_slave_0) entered blocking state [ 957.702209][T19030] bridge0: port 1(bridge_slave_0) entered disabled state [ 957.710493][T19030] bridge_slave_0: entered allmulticast mode [ 957.718038][T19030] bridge_slave_0: entered promiscuous mode [ 957.726675][T19025] bridge0: port 2(bridge_slave_1) entered blocking state [ 957.734563][T19025] bridge0: port 2(bridge_slave_1) entered disabled state [ 957.743598][T19025] bridge_slave_1: entered allmulticast mode [ 957.751516][T19025] bridge_slave_1: entered promiscuous mode [ 957.761405][T19024] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 957.784731][T19030] bridge0: port 2(bridge_slave_1) entered blocking state [ 957.792795][T19030] bridge0: port 2(bridge_slave_1) entered disabled state [ 957.800727][T19030] bridge_slave_1: entered allmulticast mode [ 957.808327][T19030] bridge_slave_1: entered promiscuous mode [ 957.916721][T19032] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 957.931520][T19025] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 957.945465][T19030] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 957.961656][T19024] team0: Port device team_slave_0 added [ 957.973476][T19030] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 957.986432][T19032] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 957.998829][T19025] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 958.011658][T19024] team0: Port device team_slave_1 added [ 958.133497][T19032] team0: Port device team_slave_0 added [ 958.145179][T19030] team0: Port device team_slave_0 added [ 958.157952][T19025] team0: Port device team_slave_0 added [ 958.167543][T19024] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 958.175865][T19024] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 958.222787][T19024] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 958.252499][T19024] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 958.269124][T19024] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 958.313200][T19024] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 958.338949][T19032] team0: Port device team_slave_1 added [ 958.354197][T19030] team0: Port device team_slave_1 added [ 958.373768][T19025] team0: Port device team_slave_1 added [ 958.541220][T19025] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 958.548249][T19025] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 958.579260][T19025] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 959.630033][T19038] Bluetooth: hci2: command tx timeout [ 959.635543][T19038] Bluetooth: hci5: command tx timeout [ 959.719800][T19037] Bluetooth: hci6: command tx timeout [ 959.726579][T19038] Bluetooth: hci7: command tx timeout [ 961.719976][T19037] Bluetooth: hci2: command tx timeout [ 961.727087][T19038] Bluetooth: hci5: command tx timeout [ 961.789805][T19037] Bluetooth: hci6: command tx timeout [ 961.795389][T19038] Bluetooth: hci7: command tx timeout [ 963.789670][T19037] Bluetooth: hci2: command tx timeout [ 963.795188][T19038] Bluetooth: hci5: command tx timeout [ 963.869696][T19038] Bluetooth: hci7: command tx timeout [ 963.875820][T19038] Bluetooth: hci6: command tx timeout [ 971.968248][T19038] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 971.984522][T19038] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 971.999712][T19038] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 972.008049][T19038] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 972.028524][T19038] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 972.044683][T19038] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 974.109935][T19038] Bluetooth: hci8: command tx timeout [ 974.359822][T19037] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 974.372104][T19037] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 974.391847][T19037] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 974.411319][T19037] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 974.420015][T19037] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 974.437996][T19037] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 976.200473][T19037] Bluetooth: hci8: command tx timeout [ 976.510026][T19037] Bluetooth: hci9: command tx timeout [ 978.280258][T19037] Bluetooth: hci8: command tx timeout [ 978.589947][T19037] Bluetooth: hci9: command tx timeout [ 980.360210][T19037] Bluetooth: hci8: command tx timeout [ 980.682642][T19037] Bluetooth: hci9: command tx timeout [ 982.749979][T19037] Bluetooth: hci9: command tx timeout [ 1013.809998][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1013.816399][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1015.580714][T19038] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1015.605836][T19038] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1015.616964][T19038] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1015.631577][T19038] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1015.641758][T19038] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 1015.651622][T19038] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1015.796531][T19037] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1015.809487][T19037] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1015.817746][T19037] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1015.827057][T19037] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1015.835323][T19037] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 1015.847742][T19037] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1017.719829][T19037] Bluetooth: hci10: command tx timeout [ 1017.959830][T19037] Bluetooth: hci11: command tx timeout [ 1019.799707][T19037] Bluetooth: hci10: command tx timeout [ 1020.029929][T19037] Bluetooth: hci11: command tx timeout [ 1021.869829][T19037] Bluetooth: hci10: command tx timeout [ 1022.110066][T19037] Bluetooth: hci11: command tx timeout [ 1023.959715][T19037] Bluetooth: hci10: command tx timeout [ 1024.200001][T19037] Bluetooth: hci11: command tx timeout [ 1033.235992][T19038] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1033.247129][T19038] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1033.255285][T19038] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1033.263860][T19038] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1033.281376][T19038] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 1033.288978][T19038] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1035.312014][T19037] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 1035.329400][T19037] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 1035.337659][T19037] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 1035.348252][T19037] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 1035.356503][T19037] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 1035.370282][T19037] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 1035.399919][T19038] Bluetooth: hci12: command tx timeout [ 1044.353795][T19037] Bluetooth: hci13: command tx timeout [ 1044.360302][T19037] Bluetooth: hci12: command tx timeout [ 1046.429900][T19038] Bluetooth: hci12: command tx timeout [ 1046.435486][T19038] Bluetooth: hci13: command tx timeout [ 1048.510216][T19038] Bluetooth: hci13: command tx timeout [ 1048.515867][T19038] Bluetooth: hci12: command tx timeout [ 1050.600308][T19038] Bluetooth: hci13: command tx timeout [ 1057.609179][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 1057.616039][ C0] rcu: 0-....: (1 GPs behind) idle=7b8c/1/0x4000000000000000 softirq=72521/72523 fqs=4277 [ 1057.627068][ C0] rcu: hardirqs softirqs csw/system [ 1057.633577][ C0] rcu: number: 1091787 0 0 [ 1057.639994][ C0] rcu: cputime: 18184 34305 70 ==> 52490(ms) [ 1057.647798][ C0] rcu: (t=10500 jiffies g=100945 q=6062 ncpus=2) [ 1057.654222][ C0] CPU: 0 PID: 18988 Comm: syz.0.4559 Not tainted syzkaller #0 [ 1057.661703][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1057.671807][ C0] RIP: 0010:_raw_spin_unlock_irq+0x29/0x50 [ 1057.677655][ C0] Code: 00 f3 0f 1e fa 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 3a 99 d8 f6 48 89 df e8 f2 6d d9 f6 e8 6d 80 fd f6 fb bf 01 00 00 00 d2 74 cc f6 65 8b 05 c3 a0 73 75 85 c0 74 02 5b c3 e8 40 88 70 [ 1057.697274][ C0] RSP: 0000:ffffc90000007cb0 EFLAGS: 00000282 [ 1057.703352][ C0] RAX: 36d44a31dec8b400 RBX: ffff8880b8e29580 RCX: 36d44a31dec8b400 [ 1057.711340][ C0] RDX: dffffc0000000000 RSI: ffffffff8acac9e0 RDI: 0000000000000001 [ 1057.719322][ C0] RBP: ffffc90000007e10 R08: ffffffff911c6507 R09: 1ffffffff2238ca0 [ 1057.727304][ C0] R10: dffffc0000000000 R11: fffffbfff2238ca1 R12: ffff8880b8e29580 [ 1057.735307][ C0] R13: 1ffff110171c52b8 R14: ffff88805d6d2460 R15: ffffc90000007d60 [ 1057.743371][ C0] FS: 00007fbccdc716c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1057.752322][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1057.758955][ C0] CR2: 00007faea21fb14c CR3: 0000000066338000 CR4: 00000000003506f0 [ 1057.766954][ C0] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 1057.774936][ C0] DR3: 0000200000000300 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1057.782916][ C0] Call Trace: [ 1057.786201][ C0] [ 1057.789048][ C0] ? rxrpc_service_conn_reap_timeout+0xa0/0xa0 [ 1057.795278][ C0] __run_timers+0x533/0x800 [ 1057.799804][ C0] ? detach_timer+0x2b0/0x2b0 [ 1057.804497][ C0] run_timer_softirq+0x67/0xf0 [ 1057.809267][ C0] handle_softirqs+0x280/0x820 [ 1057.814054][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 1057.818888][ C0] ? do_softirq+0x1a0/0x1a0 [ 1057.823462][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 1057.828729][ C0] __irq_exit_rcu+0xd3/0x190 [ 1057.833348][ C0] ? irq_exit_rcu+0x20/0x20 [ 1057.837898][ C0] irq_exit_rcu+0x9/0x20 [ 1057.842168][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1057.847825][ C0] [ 1057.850795][ C0] [ 1057.853745][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1057.859782][ C0] RIP: 0010:finish_task_switch+0x26a/0x8f0 [ 1057.865610][ C0] Code: 0f 84 33 01 00 00 48 85 db 0f 85 52 01 00 00 0f 1f 44 00 00 4c 8b 75 d0 4c 89 e7 e8 b0 a7 32 09 e8 9b 29 30 00 fb 4c 8b 65 c0 <49> 8d bc 24 f8 15 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0 [ 1057.885230][ C0] RSP: 0000:ffffc900037372b8 EFLAGS: 00000286 [ 1057.891316][ C0] RAX: 36d44a31dec8b400 RBX: 0000000000000000 RCX: 36d44a31dec8b400 [ 1057.899329][ C0] RDX: dffffc0000000000 RSI: ffffffff8acac9e0 RDI: ffffffff8b1c8fa0 [ 1057.907500][ C0] RBP: ffffc90003737310 R08: ffffffff911c6507 R09: 1ffffffff2238ca0 [ 1057.916176][ C0] R10: dffffc0000000000 R11: fffffbfff2238ca1 R12: ffff88802a858000 [ 1057.924167][ C0] R13: dffffc0000000000 R14: ffffffff8ce93440 R15: ffff8880b8e3cac8 [ 1057.932164][ C0] ? finish_task_switch+0x265/0x8f0 [ 1057.937377][ C0] __schedule+0x155b/0x45a0 [ 1057.941962][ C0] ? mark_lock+0x94/0x320 [ 1057.946366][ C0] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1057.952393][ C0] ? asan.module_dtor+0x20/0x20 [ 1057.957283][ C0] ? smp_call_function_many_cond+0xb31/0x1140 [ 1057.963399][ C0] ? preempt_schedule+0xc0/0xd0 [ 1057.968265][ C0] preempt_schedule_common+0x82/0xc0 [ 1057.973651][ C0] ? text_poke_sync+0x30/0x30 [ 1057.978423][ C0] preempt_schedule+0xc0/0xd0 [ 1057.984064][ C0] ? schedule_preempt_disabled+0x20/0x20 [ 1057.989703][ C0] ? smp_call_function_many+0x40/0x40 [ 1057.995083][ C0] ? text_poke_sync+0x30/0x30 [ 1057.999772][ C0] preempt_schedule_thunk+0x1a/0x30 [ 1058.005072][ C0] ? on_each_cpu_cond_mask+0x70/0x80 [ 1058.010389][ C0] on_each_cpu_cond_mask+0x75/0x80 [ 1058.015515][ C0] ? __SCT__tp_func_ipi_entry+0x8/0x8 [ 1058.020935][ C0] text_poke_bp_batch+0x31e/0x990 [ 1058.025979][ C0] ? text_poke_loc_init+0x880/0x880 [ 1058.031276][ C0] ? trace_raw_output_contention_end+0xd0/0xd0 [ 1058.037437][ C0] ? __mutex_trylock_common+0x159/0x260 [ 1058.043005][ C0] ? __SCT__tp_func_ipi_entry+0x8/0x8 [ 1058.048420][ C0] ? __SCT__tp_func_ipi_entry+0x8/0x8 [ 1058.053828][ C0] text_poke_bp+0xbc/0x100 [ 1058.058280][ C0] ? text_poke_queue+0x190/0x190 [ 1058.063237][ C0] ? trace_contention_end+0x39/0xe0 [ 1058.068454][ C0] ? __mutex_lock+0x315/0xcc0 [ 1058.073145][ C0] __static_call_transform+0x3ba/0x5b0 [ 1058.078637][ C0] ? __static_call_update+0xa8/0x5d0 [ 1058.083940][ C0] ? trace_event_raw_event_ipi_handler+0x180/0x180 [ 1058.090455][ C0] ? __SCT__tp_func_ipi_entry+0x8/0x8 [ 1058.095836][ C0] ? text_poke_bp+0x100/0x100 [ 1058.100531][ C0] ? __SCT__tp_func_ipi_entry+0x8/0x8 [ 1058.105912][ C0] ? __static_call_validate+0x148/0x230 [ 1058.111470][ C0] ? trace_event_raw_event_ipi_handler+0x180/0x180 [ 1058.119031][ C0] ? __SCT__tp_func_ipi_entry+0x8/0x8 [ 1058.124456][ C0] arch_static_call_transform+0x5f/0xc0 [ 1058.130020][ C0] ? __SCT__tp_func_ipi_entry+0x8/0x8 [ 1058.135404][ C0] __static_call_update+0xef/0x5d0 [ 1058.140536][ C0] ? trace_event_raw_event_ipi_handler+0x180/0x180 [ 1058.147063][ C0] ? static_call_force_reinit+0x40/0x40 [ 1058.152629][ C0] ? tracepoint_add_func+0x2f9/0x990 [ 1058.157923][ C0] ? rcu_is_watching+0x15/0xb0 [ 1058.162700][ C0] ? tracepoint_add_func+0x4b9/0x990 [ 1058.168003][ C0] ? trace_event_raw_event_ipi_handler+0x180/0x180 [ 1058.174521][ C0] tracepoint_add_func+0x8ca/0x990 [ 1058.179643][ C0] ? trace_event_raw_event_ipi_handler+0x180/0x180 [ 1058.186157][ C0] tracepoint_probe_register+0x5e/0x90 [ 1058.191629][ C0] ? trace_event_raw_event_ipi_handler+0x180/0x180 [ 1058.198239][ C0] perf_trace_event_init+0x4d2/0x9b0 [ 1058.203549][ C0] perf_trace_init+0x238/0x2d0 [ 1058.208350][ C0] perf_tp_event_init+0x8d/0x110 [ 1058.213325][ C0] perf_try_init_event+0x12b/0x3c0 [ 1058.218453][ C0] perf_event_alloc+0xfa4/0x21b0 [ 1058.223408][ C0] ? perf_event_alloc+0xc06/0x21b0 [ 1058.228541][ C0] ? find_lively_task_by_vpid+0x19/0x290 [ 1058.234195][ C0] __se_sys_perf_event_open+0x740/0x1c50 [ 1058.239955][ C0] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 1058.245690][ C0] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 1058.251347][ C0] ? lock_chain_count+0x20/0x20 [ 1058.256220][ C0] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1058.262223][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 1058.267458][ C0] ? __x64_sys_perf_event_open+0x20/0xc0 [ 1058.273299][ C0] do_syscall_64+0x55/0xa0 [ 1058.277752][ C0] ? clear_bhb_loop+0x40/0x90 [ 1058.282464][ C0] ? clear_bhb_loop+0x40/0x90 [ 1058.287206][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1058.293143][ C0] RIP: 0033:0x7fbcccd9ce59 [ 1058.297584][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1058.317822][ C0] RSP: 002b:00007fbccdc71028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1058.326253][ C0] RAX: ffffffffffffffda RBX: 00007fbccd016090 RCX: 00007fbcccd9ce59 [ 1058.334240][ C0] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000640 [ 1058.342222][ C0] RBP: 00007fbccce32d6f R08: 0000000000000002 R09: 0000000000000000 [ 1058.350234][ C0] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 SYZFAIL: failed to recv rpc [ 1058.358221][ C0] R13: 00007fbccd016128 R14: 00007fbccd016090 R15: 00007ffe975c4918 [ 1058.366237][ C0] fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)