last executing test programs: 17m37.191738068s ago: executing program 0 (id=510): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) close(r0) r3 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba377a1b2cc32b38d3740000ffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) 17m36.936669967s ago: executing program 0 (id=504): r0 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000040), 0x60}, 0x0) (fail_nth: 1) 17m35.978273268s ago: executing program 0 (id=507): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x2, 0x4e22, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000740)=[@ip_retopts={{0x18, 0x0, 0x7, {[@noop, @end, @cipso={0x86, 0x6, 0x3}]}}}, @ip_retopts={{0x14, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}], 0x48}, 0x840) r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @remote}}}], 0x20}, 0x48000) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x1, @perf_bp={0x0}, 0x8061, 0x3, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x5}, 0x50) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000f9ffffff0000000071121f00000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) socket$kcm(0x11, 0x200000000000002, 0x300) r3 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r3, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000002540)=[{&(0x7f0000000000)="b88a000000f00000000000df8100b1", 0xf}], 0x1}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r1, 0xe, 0x0, 0x10, &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0), 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000380)={@map=r3, r2, 0xb, 0x2000, 0x0, @value=r2, @void, @void, @void, r4}, 0x20) socket$kcm(0x10, 0x400000002, 0x0) r5 = socket$kcm(0x2, 0x200000000000001, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0xd6, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xc}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x24868, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x2}, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x12, &(0x7f0000000300), 0x4) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x56}}, 0x10, 0x0}, 0x0) 17m34.70579909s ago: executing program 0 (id=514): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000200)={0x2, 0x4e22, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000740)=[@ip_retopts={{0x18, 0x0, 0x7, {[@noop, @end, @cipso={0x86, 0x6, 0x3}]}}}, @ip_retopts={{0x14, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}], 0x48}, 0x840) r1 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r1, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @remote}}}], 0x20}, 0x48000) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x1, @perf_bp={0x0}, 0x8061, 0x3, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x5}, 0x50) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000f9ffffff0000000071121f00000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) socket$kcm(0x11, 0x200000000000002, 0x300) r4 = socket$kcm(0x11, 0x3, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r2, 0xe, 0x0, 0x10, &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0), 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000380)={@map=r4, r3, 0xb, 0x2000, 0x0, @value=r3, @void, @void, @void, r5}, 0x20) r6 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e0007"], 0xfe33) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0xd6, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xc}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x24868, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x2}, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x12, &(0x7f0000000300), 0x4) sendmsg$inet(r1, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x56}}, 0x10, 0x0}, 0x0) 17m32.680219896s ago: executing program 0 (id=517): r0 = socket$kcm(0xa, 0x3, 0x73) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0xfffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc8, 0xc8, 0x3, [@const={0x3}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x8, 0x4}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1, 0x8}}, @struct={0x3, 0x8, 0x0, 0x4, 0x0, 0x1, [{0xb, 0x5}, {0x10, 0x1, 0x3}, {0x4, 0x7, 0x9}, {0xc, 0x4}, {0x7, 0x5, 0x7ff}, {0x9, 0x4, 0x800}, {0xe, 0x2, 0x1400}, {0x7, 0x3, 0x2}]}, @enum64={0x6, 0x2, 0x0, 0x13, 0x0, 0x9, [{0xc, 0x1b, 0x5}, {0x5, 0x100, 0xae6}]}]}, {0x0, [0x0]}}, &(0x7f00000003c0)=""/150, 0xe3, 0x96, 0x0, 0x7fff, 0x10000}, 0x28) gettid() r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x114, 0x114, 0x4, [@union={0xf, 0xa, 0x0, 0x5, 0x0, 0x87a1, [{0x8, 0x1, 0xb}, {0x2, 0x3, 0x8}, {0x1, 0x1, 0x2}, {0x1, 0x0, 0x37}, {0x8, 0x1, 0x2}, {0xd, 0x3, 0x2}, {0xd, 0x5, 0x80000000}, {0x9, 0x0, 0xe75}, {0xd, 0x2, 0x4}, {0xb, 0x0, 0xef}]}, @struct={0x0, 0xa, 0x0, 0x4, 0x0, 0x9, [{0x0, 0x1, 0x1}, {0xd, 0x5, 0x43}, {0x3, 0x0, 0x3}, {0xb, 0x5}, {0x8, 0x2, 0x8}, {0x9, 0x5, 0x6}, {0x6, 0x3, 0x7}, {0xe, 0x0, 0xf}, {0xe, 0x0, 0x8b6}, {0x10, 0x2, 0x8}]}, @ptr={0xd, 0x0, 0x0, 0x2, 0x1}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000000680)=""/12, 0x130, 0xc, 0x1, 0x8000, 0x10000}, 0x28) r9 = gettid() sendmsg$unix(r6, &(0x7f00000007c0)={&(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000280)=[{&(0x7f0000000240)="2a9a9cfd61803c39a9c5fe6144a0c38018ef16db3983e7c2c3e8c9d4a8a585438e9833eae10718d6", 0x28}], 0x1, &(0x7f0000000700)=[@rights={{0x18, 0x1, 0x1, [r7, r2]}}, @cred={{0x1c, 0x1, 0x2, {r9, 0xffffffffffffffff, 0xee00}}}, @rights={{0x20, 0x1, 0x1, [r0, r3, r5, r0]}}, @rights={{0x14, 0x1, 0x1, [r4]}}, @rights={{0x1c, 0x1, 0x1, [r1, r4, r8]}}, @cred={{0x1c, 0x1, 0x2, {r9, 0xee01}}}], 0xb0}, 0x200408c0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000100), 0x5000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xb, &(0x7f0000000080)=@framed={{}, [@printk={@lli, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000940)={r5, 0x58, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000980)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x4, '\x00', r10, r8, 0x2, 0x4, 0x4}, 0x50) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) syz_clone(0x62384000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)) 17m30.600674034s ago: executing program 0 (id=520): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x78}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) r0 = socket$kcm(0xa, 0x3, 0x73) setsockopt$sock_attach_bpf(r0, 0x29, 0x21, &(0x7f0000000080), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000c40)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0xfffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x10, 0x7, 0x10) sendmsg$kcm(r1, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) socketpair(0x1e, 0x80005, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@o_path={0x0}, 0x18) r3 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x29, 0x30, &(0x7f0000000100), 0x5000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) close(0xffffffffffffffff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r2}, &(0x7f0000000080), &(0x7f00000001c0)}, 0x20) close(0xffffffffffffffff) syz_clone(0x62384000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)) 17m15.461289901s ago: executing program 32 (id=520): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x78}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) r0 = socket$kcm(0xa, 0x3, 0x73) setsockopt$sock_attach_bpf(r0, 0x29, 0x21, &(0x7f0000000080), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000c40)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0xfffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x10, 0x7, 0x10) sendmsg$kcm(r1, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) socketpair(0x1e, 0x80005, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@o_path={0x0}, 0x18) r3 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x29, 0x30, &(0x7f0000000100), 0x5000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) close(0xffffffffffffffff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r2}, &(0x7f0000000080), &(0x7f00000001c0)}, 0x20) close(0xffffffffffffffff) syz_clone(0x62384000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)) 16m8.339140831s ago: executing program 4 (id=868): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x4000, 0x0, 0x80000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x8000000000000000}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) 16m8.163522217s ago: executing program 4 (id=871): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x8000000000000000}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (fail_nth: 7) 16m7.600462275s ago: executing program 4 (id=873): r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={0xffffffffffffffff, 0xdc, 0x10}, 0xc) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f95e24fc60040068000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0x58, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0xd, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4549718c}, [@ldst={0x1, 0x3, 0x3, 0x9, 0x1, 0x8, 0x1}]}, &(0x7f00000002c0)='GPL\x00', 0x2, 0xb7, &(0x7f0000000080)=""/183, 0x0, 0x0, '\x00', r2}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x588688a3, 0x1, 0xfffffffe, 0x5c09, r0, 0xe50, '\x00', r2, 0xffffffffffffffff, 0x4, 0x2, 0x5, 0xf}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r4, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x41, &(0x7f0000000040)=r6, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0xec, 0x0, r3, 0x3, '\x00', 0x0, r6, 0x1, 0x4}, 0x50) socket$kcm(0xa, 0x1, 0x0) r7 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1b, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0x0) 16m6.403545684s ago: executing program 4 (id=878): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 16m6.177255982s ago: executing program 4 (id=880): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x96, 0x1, 0x0, 0x0, 0x0, 0x6, 0x604, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004, 0x0, @perf_bp={0x0}, 0x102101, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x12280, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000000200), 0x0) perf_event_open(0x0, r1, 0x10, r0, 0x1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) socket$kcm(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0x4}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000340), &(0x7f0000000300)=r3}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000003c0)="b9ff0307680093f04604264ea76e", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50) 16m4.059836161s ago: executing program 4 (id=895): r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r0, &(0x7f0000002e00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a40)=[{0x10, 0x114, 0x80000000}, {0x10, 0x84, 0x5}], 0x20}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3eb3bbdaa3111835da6747a6a327ea60864160af36504001a00a10a00004231a0e69ee517d34460bc0600000062ff251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4080) r2 = socket$kcm(0xa, 0x3, 0x73) sendmsg$inet(r2, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000002440)="a72d11a15c048c0a7d78aebc5cea1f815108f6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e02721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06102f6f2c7171dc7f76e1931b3e4deb569ef9d07d5f86a848f50942e93c419c3a23489f14803b08182dfd48b8d4375be6b7f805a21209c05e5927693a8834c8d5a5acbd47ed8a30a8a741d1ad77639b56b3b90c0b2023fa334befd28b2e27cbcd94b0ce7437f88ce67a925cea6d6d7e5313de6d328b1124a8b9ef83fe39ca3da97d33c60b7fd4af67d3c8fccb595a27a5bffc71e5a5b2ec966828993b0c0f83cbc55f9a7fb66a4101d5c83b77885072b6e2b2ceebe32f635509698c05089b9ff1cb1959b211e114dadb224ef2d5e7a3c55b3ac00fcdc9018577603c6301e5d4341b3d7eeb2665349d448d28d5d108f576408cbe533a6adbba18ebb2d84bb9af81108506a2f50fb56d595579000747930449fdf4ed01715ec624a0cb73636a35b9136f10b79e3d7ded09008b92e92c64e26e6b6d17f18b70b1d9813de8d2ff151c7a6a0452c660a57c33f13e2d9b88fa5f5c0505722d2e787a425e4a3e9b5efa9668e9199f5fb9fe7d5b8a57719a57df152e7f2c6a1087a2a24084f82455b65353a70559f04d5ed12defb81497ea69c1c7e69c373524770b7473c16a69c7a3648a9dd93377b89cdff61cf62512d1ee67a55ea67993937c1f55a2179bc9c8a337364cfb84d295adda1ad9700fc2f5c11cbfc1b90affb4666c6e7e23a6f7751410a5651819f29f690c6dba2b8a67e0f7f8cc377feb1854c393578994c85391ba21b3961aed477f771645571dc7d6cae72bf79c82a92a4edc3742b1398060a0a5c9e81c016b7f2ae3db529c6ff824cc28678764d8ab49d7dc68e5b0556c9e7ffb6fef442776d86fbd458741830e57f22a1f8513b92abd5b2df93a67cc560134078f0b8ecc3276e40aadef5cd579888b86b4988f396679250701f3869e7493b33692035ecd94aca5189fd0a0893ccc5bb19c0b4caca86cf90ebc2a5558f39cccb33f6773a4e425bf551fb3b6456ee1cc62fa1843a9e5539bb2d02ae6ef82533a9dbcfb562c1ab18c1f639ae7ff02083746f74a15ba2d10e4b955940a5d6f488d326a99f287c48ad463ce40367aeeff519cbad0a2d7fdbfa48bff75955467977764c2be2bd2ffa18396c46920c40c50a4037003666406d177e2cd20aee423d07169d8f611f635ba0b62b61265ff2c5548446a2423dd1038482b6852b2d9d2f90aa05d82c5e2c3d1af0c7aad72d82b3da67471af7b037bb0424a785e73f35b5a10a2ab300a195c20cd119a5390e0cd5d49c70bd80883b933e843d0d2902749dcf3c140c708a0f004b7a2f50bf311305dc01719016fcce5863815ca7951de710fcb71cd177551ff6fcd9f8bf01b93868f24c6129b6d7917125338cf62110083093fc7f862015d48450d992f2bb43e601cab19b2ea7b83962a382fc2a31fdf2358bf8a9a9e506eaa7b6eb5e7444d1ef459b24ffa51362abce902dfd84201a0e4b5a3b62757aad54fb65b83821c6bba663886de092065a565921ea3eb6781bb8ed4f4db3abcfeeb379b7e52fca790bea719918e299ab01bf5e92177d134360bf7a16a59e9d03d3dcfb0a25599237e3d41b3f0026c9402b1fb1894426303413a2cbcf7c72807ca694afa285990d07c3bca26413c9947b3b344aafc04544b8c11416e0312b028da7302e316c3966d41884b15055a49a4a0b3eac8e11f88a5615fb0af582f065d28e5a454447e9d0cfc60356439ebf7e1d0a00f5b9cc6daf2bd7195ba96b4d1a0679ff0fb1c01282c378a880f90f460889b67d76d4d0e8db6c928d113533d1d10b810303c43d8ff622c5bab7f095b96e64bf9daa48a2bdf3d9d40bac00cf1b66df61a4f7c3e21938e876f81b1179dce6a008f28eb682cae690ced0ea0d542da604d8056f2b1813ed36683c4c51aeb2650772cfb1c55d4e60604ff06344cfc271b2175a6c94defb807af240b483e24298ca73bfc743ca2ca2e77e6d5b817b3c1986601537faf59ac84c74d8bd0c068cb8e6bd03ac2dcf5793fb4a00b3c901a33aa3ee86e4f0db317b94bb8678ab26e36d305ebac4b0f7f164947148255b562dd0f87648499d45bccfb7d8c9d5624cadf8160a396e79fbcdc100058ba4606e41c02fb2cc0dc6c36196bd28acfde82a18cda2321d2d83fecd3b85380667cd1d0bc68298c6c8f10421a80c8fa86912b6c3e8ddd9d9668520d5151409e6b77f0d7730b374a68a744151bfbd123cfdf871e8c24e70d2ca3b50e84a48e0b78c1781000cfc848d43584985763a76c0ab9ba882c55e3e4aa8f2174255db38adb8350b48a77be22a869d13d183325f859b883464e5e46de5ea8a92532b9a794daaeff657cd361f7f158f8bebe36e9de1f5b9721d4263dcc9472229bc02d3f552180abfb25ca7aa36cb914d99c09fd5bb99dcab9b4e3c634d18fc7dfe84dc4425ad1e39c3e7410d49b4ea0a8a2958688c7725822f6dfc0827d19dc385e0e35a949941e4dd1aaeaab9ebe402f8c584bca7efc829f2ccfb63fd7bde1c182a67c14f9d3f033ca674e2604e89cd55a15419f956cd61a755c1b13554dae98e77be078aadfc131c9677381f1dbe6ef194eb17603a463e8b844ab46a6046e1f07d96d66de669359bff4c3d80948a4de3abb2f171a09b5d8999c379fb62244114e218c79805df7d899e5661320ee6721d652b95f09e4dfe69bd67099c73294b17ab574e0b966aa3ab44478965b9dca3cb3b9282945f24ccdd07c638ae25a84a728ca24f87ff49d718121a694be46f3616e27b1041b3c6cd24b9cf775bfc28dfbe0a009048f0599f2d5d6586cfd1e7f7fe69872d08b98f60d28e6af0d49d7f06ad71a7b5c41df261aba5de114022c7288bc265cc17909fdeadc3d7b256d7ab3b96e40f857060f16b54a6bb7248ee571f87ace5ee39eab412706cf52fa711468b21ea129c3f44bceb429fcc1a0ac2aa87b9365077dcfcfa9a1b32a0a09699197c20019a66cbd0a897feab3706c23123b888ada643d4560082033e31596b0483578968e3c9593ebd97141c228a42fc7645f92171c120aabca36657683fd7c72fcb87217f124d6fabc52f1d221d8410b47b0ad4bd944bf4085365e9b52a53911ab4ee142c5a1ebbe034c9d98c538c066f2dc0acf372eb2397dcac765055123e0ba19be22b18c886bf0f7490abe9fde91ffa62e059962bd134be8501cb5b715a744b1398e2c4c7e8afe72e189dda0654296afa1c1f99ab7d800fa40f72a758625c833b6fc7b7d42250522b456e1e7de815350c36c9cb2f4d1c9cb99109f89b456c559463f11b8b58247809b17a4ed4912bd0a47a529f1364d6dc593ea7f3eb98962078ac90e5012ee1c7b4b9ed5a8c7a9c0231b4ce425693faab64fa0f3482a04d4be2e06ee5d103694d288810a1a7f4d1e908dd82dd2016a064ece5cd67ef1dd5f4cda728fc6f1ccdd949dd8f775d862621507248ef4c83ae274969d19c7ddb02a4e8a1ab2b7aa539a442b22735ceedeefe60a1059dfaaa0979ce8d5387b5a047841fd9749b88ca91216b02d7926408a01916b7781bb7167528ccdb9a486d173437a5ba3e552c8674dff2cc9b21054e0e4f86b61b8723fca58ceef4413bffae9e9be79c5b9788f5449811ce78be9bc7a86375a670197baaef751beabcba0aa6c7c33f1cd702cb78ec39fa1f17d9da733d6abf2b80f9c51ac8f6f664b24edc53a7c9525c3016bd05c67272375fe816b2b121f2de68b885a0fd8f8b8c6c342237b632f6414a3eb3480f5f42106c5812e9bfd4e8c8dea8d08525d9aa1da7c7c2ee7ff3d31b79b211dd01e304a8ffc83a89a59f3b1e2ef5e969b6d90bea7e161066f25622fad914bff52bacd2807093dda1838b529ee57f718b374ce2841b924a42457867547a6edcb8412d85f11796742bf640b5819a9546357df778c332af5983c4373a95d9c58b52dba445eee92e6911824f0c534e7a5934d9eac9b7f6fec22002fc53a3003a3304217f567b47cd326edc5f48eb1f46bb20d1e10e72239afc9769344590cf48902aba5405b7d4baa31a912ab398a2f2d3f037614bb56a89244ece50f3a1e058d274f1e70f944eb8a305be91e561e5eb843d057a81f4deb84a6335ec81ca964cdae5f318d4e9aaea2c477cc279c00c698bcfe4b8e04c09079d8f3f5438d9d45a00f50d2f9b245c8c68eebf247e25ba8d26f8b95b21ac9ceb50c0aa2e4bdc032024db216b92f9350a90ac79341af14d3fa8ba908096e1b503341aed667bb184c672dac85fc4f335b3871c3b4e55ea219a857d2d2e135358f6b45a20b3e7de8e09b2041eb7c5084a80258fb524a983752659298a251e178b56f96bc67ae0a78ec92f92d92c9cf0edb5dcb11e739d69410ad44c8df00caa030d7d89f2ec38bd7698115c423cf3e6048793aca08ffbcdac766f1553773fa00031c1d75246e4e1eddf8948d02a3de6d67fd7329e45070f29044587f1e0db50d04e673191a63e30f96ee0d8d52738fab36a7fe2c6ab9301d401e7ca5b1f039193a580e40abbdf40c2d7e27809dec80815d37adae9fe7fb9d3a974c9fc03944d7338d000b81170be4c6792ed6b3b827194b3ae11e2acfca48498d1126aacf80f3d574256ef7f75552ff087a819e", 0xffa0}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f0000001940)=[@ip_tos_int={{0x50, 0x29, 0x32, 0x80fe}}, @ip_pktinfo={{0x0, 0xe, 0x8, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x21, &(0x7f0000000080), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000c40)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x7, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0xfffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$kcm(0x10, 0x7, 0x10) sendmsg$kcm(r3, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) socketpair(0x1e, 0x80005, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@o_path={0x0}, 0x18) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000100), 0x5000) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000280)=@generic={&(0x7f0000000240)='./file0\x00', 0x0, 0x8}, 0x18) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) close(0xffffffffffffffff) r5 = socket$kcm(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r4}, 0x0, &(0x7f00000001c0)=r5}, 0x20) syz_clone(0x62384000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0xc0}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 15m48.711140764s ago: executing program 33 (id=895): r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r0, &(0x7f0000002e00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a40)=[{0x10, 0x114, 0x80000000}, {0x10, 0x84, 0x5}], 0x20}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3eb3bbdaa3111835da6747a6a327ea60864160af36504001a00a10a00004231a0e69ee517d34460bc0600000062ff251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4080) r2 = socket$kcm(0xa, 0x3, 0x73) sendmsg$inet(r2, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000002440)="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", 0xffa0}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f0000001940)=[@ip_tos_int={{0x50, 0x29, 0x32, 0x80fe}}, @ip_pktinfo={{0x0, 0xe, 0x8, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x21, &(0x7f0000000080), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000c40)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x7, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0xfffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$kcm(0x10, 0x7, 0x10) sendmsg$kcm(r3, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) socketpair(0x1e, 0x80005, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@o_path={0x0}, 0x18) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000100), 0x5000) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000280)=@generic={&(0x7f0000000240)='./file0\x00', 0x0, 0x8}, 0x18) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) close(0xffffffffffffffff) r5 = socket$kcm(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r4}, 0x0, &(0x7f00000001c0)=r5}, 0x20) syz_clone(0x62384000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0xc0}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 25.065542708s ago: executing program 1 (id=6188): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="2e00000038000511d25a80698c63940d0124fc602f6e35400c000200001ec00037153e370a", 0x25}], 0x1, 0x0, 0x0, 0x39c}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x6, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000001800000000000000", @ANYRES32], 0x0}, 0x94) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000880)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x8, [@var={0x5, 0x0, 0x0, 0xe, 0x4, 0x2}]}, {0x0, [0x0, 0x0, 0x0, 0x2e, 0x2e, 0x5f]}}, &(0x7f0000000c40)=""/4096, 0x30, 0x1000, 0x1}, 0x28) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="33fe000024"], 0xfe33) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 23.882290587s ago: executing program 1 (id=6194): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00020000000000000000000000001000"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xc, &(0x7f0000001480)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000010000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b70400000000000085000000330000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x4}], 0x10, 0x12}, 0x94) r3 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) r5 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f00000001c0)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r7 = socket$kcm(0x2, 0x200000000000006, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x5452, &(0x7f00000006c0)) setsockopt$sock_attach_bpf(r7, 0x1, 0x7, &(0x7f0000000040), 0x4) setsockopt$sock_attach_bpf(r3, 0x84, 0x71, &(0x7f0000000000), 0x8) r8 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x110821, 0x0, 0xc2ba, 0x2, 0x64317119, 0x6, 0x7fff, 0x0, 0xfffffffd, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000011c0)={r1, r2}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x10001, 0x20000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x5}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffff7fffffffffff, r8, 0x8) close(r3) r10 = socket$kcm(0x2, 0x2, 0x73) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x2, 0x3, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000002"], 0x48) setsockopt$sock_attach_bpf(r10, 0x0, 0x17, 0x0, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) 23.543756738s ago: executing program 1 (id=6195): r0 = socket$kcm(0x2, 0x1, 0x84) socket$kcm(0xa, 0x2, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800"/13], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c00a, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) recvmsg$kcm(r1, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x100) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0xfffe}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x30, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r4, 0x6, 0x8, &(0x7f0000000000)=r4, 0x4) sendmsg$inet(r0, &(0x7f0000000800)={&(0x7f0000000100)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000000)="b1", 0x34000}], 0x1}, 0xc8d4) sendmsg$inet(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000001180)=[{&(0x7f0000000340)="d9", 0x1}], 0x1}, 0x4000) 22.190433992s ago: executing program 1 (id=6201): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000002c0)={&(0x7f0000000580)=@in6={0xa, 0xce63, 0x0, @loopback={0xffffff7f00000000}}, 0x80, 0x0}, 0x30) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7902}) write$cgroup_devices(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="1e030f00fd"], 0xffdd) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000380)={0x1, &(0x7f0000000180)="c0bf9c976b27de808c42a749d104a19239c257db0cca6d5dac5a5335eb4fc2a452daf1be68515997eb90d73a5d12013732e84d2e932732157276e4da1f157f564a5697ee87465a639e54249f5ac6f06627fbd13035359acd82677f541fb08b815eebb2cea92b2dd4e604778181363413fde4851299a35bcaa9564b5e6e23bd321993002827a88560", &(0x7f00000002c0)=""/180}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0x3, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000080)="5c00000013006bcc9e3be3", 0xb}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r4 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r4, 0x84, 0x25, &(0x7f0000000000), 0x90) (async) setsockopt$sock_attach_bpf(r4, 0x84, 0x25, &(0x7f0000000000), 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f000000040000000800000008", @ANYRES8], 0x50) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f000000040000000800000008", @ANYRES8], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000010400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000010400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000200000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000080)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b006170471e1bf7bd473b72ab000001000000000004", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={r2, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x9, &(0x7f0000000500)=[0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x9c, &(0x7f0000000700)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000740), &(0x7f0000000780), 0x8, 0xca, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={r2, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x9, &(0x7f0000000500)=[0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x9c, &(0x7f0000000700)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000740), &(0x7f0000000780), 0x8, 0xca, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00', 0x10}) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00', 0x10}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='pids.current\x00', 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='pids.current\x00', 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x89f2, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x2, 0x300}, {0x6e, 0x0, 0xd}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xc, 0x9, 0x0, 0x0, 0x20000f19}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r7}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x2, 0x300}, {0x6e, 0x0, 0xd}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xc, 0x9, 0x0, 0x0, 0x20000f19}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r7}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 21.604095972s ago: executing program 1 (id=6203): socket$kcm(0xa, 0x3, 0x73) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000af"], 0x0, 0x5}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x30001, 0x0) socket$kcm(0x21, 0x2, 0x2) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0xf6}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYRES64=r0], &(0x7f0000000c00)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$kcm(0x2, 0x3, 0x84) socket$kcm(0xa, 0x922000000003, 0x11) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.swap.events\x00', 0x26e1, 0x0) r3 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x2e, &(0x7f0000000880)=r2, 0x4) recvmsg(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x40) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x13, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000e0000000000000006366d9c26bdcc514cbabf38860d60000000018010000696c6c2500000000002020207b1a729d6ef8ff00000000bfa100000000000007010000f8ffffffb70200000800000007000000001effffffffffffff0075468910fcfcac4d732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b159fac0ae767acbb7280649d8e7da87266fa6321e961f9f28c4c9704160ea8343e957da55d37418410ef8d156f602c4ffb4c901c3383c193a372582d33da951a4cd47dc6d5ef44774c43e4578"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x27) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) socketpair(0x9, 0x1, 0x0, &(0x7f0000000000)) sendmsg$inet(r1, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000001b80)="0d113311d7af2c7d0a6b8bcc9ab77974b333be01b290ffa314fa", 0x1a}], 0x2, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x13}, @loopback}}}], 0x20}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000bc0)}], 0x1}, 0x4) socketpair$unix(0x1, 0x5, 0x0, 0x0) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0xfffffd83) 21.373509509s ago: executing program 1 (id=6206): r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab07000400"], 0xfe33) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) 5.824234079s ago: executing program 2 (id=6273): bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/mnt\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="d8000000210081044e81f782db44b9040200000000806c0100001500100014000000001209000d2000000401a80018000a000e4006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee062e1c547cbc7225e6756cfb39b0590b4800089e408e8d8ef52b49816277cf4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db701000000eafad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d939acd92637429397f632838", 0xd8}], 0x1}, 0x0) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x1, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000700000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$unix(r7, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001800)=[@rights={{0x14, 0x1, 0x1, [r7]}}], 0x18}, 0xfd) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0x10, 0xfffffef3, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x5562, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000000000012850000008600000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000000000000850000002a000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r11, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b807200500000000", &(0x7f00000004c0)=""/18, 0x1004, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x23) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r13, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0xb701, 0x0) r14 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x1, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x2e, 0x1c, &(0x7f0000000000)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r14, @ANYBLOB="0000000000000000b702000014000000b70300002bb91a008500000008000000bc0900000000000045090100002000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000bf2700000000000007080000fffdffffbfa400000000000007040000f0ffffffc40200000800000018220000", @ANYRES32=r14, @ANYBLOB="19ad000000000000b7050000080000004608efff76000000bf98000020000000560900000000000085000000000000ba8a44918f36685689839900b7000000000000409500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.398240592s ago: executing program 5 (id=6276): r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r0, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x69, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x2a, &(0x7f0000000140)=[{&(0x7f0000000240)=""/205, 0xcd}, {&(0x7f0000000380)=""/195, 0xc3}, {&(0x7f0000003200)=""/213, 0xd5}, {&(0x7f0000002040)=""/4071, 0xfe7}, {&(0x7f00000007c0)=""/211, 0xd3}, {&(0x7f0000000b00)=""/231, 0xe7}, {&(0x7f0000000480)=""/176, 0xb0}, {&(0x7f0000000640)=""/211, 0xd3}], 0x8}, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x72, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x33}, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000001001000001000000000000000000000010000000"], 0x28}, 0x4044454) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r2, 0x1, 0xc, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = socket$kcm(0x11, 0xa, 0x300) socket$kcm(0x2, 0x6, 0x0) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f00000017c0)={0x2, 0x4e20, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x19}, @empty}}}], 0x20}, 0x8000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x102101, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNDETACHFILTER(r5, 0x401054d6, 0x0) recvmsg$kcm(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000011c0)=""/4096, 0x1000}], 0x1}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0700000004000000000900000100000028"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000004000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r8}, 0xc) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r8, 0x0, 0x0}, 0x10) sendmsg$kcm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00000011008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x24000000) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000080000000", @ANYBLOB="e6988e585ea79ed33960196d40127fc2da412d07c1994e2de870ff97f0a4934d398a5e37934691e21a5275de5124a9c874983ea88951c8804de3958c1f84e6dda987690dbe0498", @ANYRES8=r1], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4308}, 0x94) 4.829142391s ago: executing program 2 (id=6277): r0 = syz_clone(0x1000, &(0x7f0000000080)="63fc8afa500b", 0x6, &(0x7f0000000100), &(0x7f0000000340), &(0x7f0000000440)="378e3828cb02177921b39c47166df240565bc8c16061e2c7989709253c7552ca95518af43bec2a76f6af1d033f604bb4b79f42a26eaffcc923a29417d2e5d994d811fb229e93bfef4c198a57675e9b973962e8a22a296f6952940ebee7eaf53089862f931c5348dfaeebe82f1f50205848b2") perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x9, 0x100, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x4b15}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open$cgroup(&(0x7f00000006c0)={0x5, 0x80, 0x0, 0x8, 0xaa, 0x1, 0x0, 0xffffffffffffffff, 0x20008, 0xe, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7, 0x1, @perf_bp={0x0}, 0x23377aedef665b94, 0x5, 0xc8, 0xa, 0x4, 0x0, 0xb6b, 0x0, 0x5, 0x0, 0x2}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0xa) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001280)={r0, r1, 0x0, 0x1, &(0x7f0000001240)='\x00'}, 0x30) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0xba, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4100}, r0, 0xffffffffff7fffff, 0xffffffffffffffff, 0x1b) r2 = socket$kcm(0x10, 0x2, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r3, 0x84, 0x14, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x40c, 0x7, 0x0, 0x9, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001880)="5c00000012006b1e003de3d86e6c1dff05137e0300000000000000b68675f8001d000a00a0e69ee517d34442bc24eab556a7e60f1e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f408000300060100000800030011000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 4.279242599s ago: executing program 6 (id=6280): bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x17, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000"], 0xfdef) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r0, 0x18000000000002a0, 0xeff, 0xffffffffffffffde, &(0x7f0000001240)="b9ff03076804268c989e14f088a8657986dd", 0x0, 0x4068, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 3.895358652s ago: executing program 5 (id=6282): r0 = socket$kcm(0x11, 0x5, 0x300) close(0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00"/13], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000380)=ANY=[@ANYRESHEX=r0, @ANYRESOCT=r1, @ANYBLOB="0000000000000000b702000001"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000002c0)={r2}, 0xc) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000540)={0x3, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x7, 0xc272}, 0x104402, 0xac5a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000", @ANYRES32=0x0], 0x50) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r6, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='../\x00\x00\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)) r7 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r7, 0x1, 0x19, 0x0, 0x0) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001fc0)={0x1, 0x58, &(0x7f0000001f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002180)={0x18, 0x0, &(0x7f0000001dc0), &(0x7f0000001e40)='syzkaller\x00', 0x80000000, 0x82, &(0x7f0000001e80)=""/130, 0x41000, 0x9, '\x00', r8, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000002000)={0x1ff, 0x2}, 0x8, 0x10, &(0x7f0000002040)={0x2, 0xc, 0x1ff, 0x3}, 0x10, 0x0, 0x0, 0x7, &(0x7f00000020c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000002100)=[{0x1, 0x1, 0x7, 0x1}, {0x4, 0x4, 0x1, 0x7}, {0x2, 0x2, 0x6, 0x6}, {0x0, 0x2, 0xb}, {0x0, 0x1, 0xc, 0x3}, {0x2, 0x5, 0xe, 0x17}, {0x200, 0x4, 0x8, 0x5}], 0x10, 0x2}, 0x94) r9 = openat$cgroup_ro(r6, &(0x7f00000006c0)='cpuacct.usage_sys\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x8, 0x9, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000007f0000000000000001000000180000000200000000000000feffffff850000002400000018540000030000000000000000000000d700"/68], &(0x7f0000000500)='GPL\x00', 0x5, 0xec, &(0x7f00000005c0)=""/236, 0x0, 0x17, '\x00', r8, @cgroup_skb=0x1, r9, 0x8, &(0x7f0000000700)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0xa, 0x2, 0x4}, 0x10, 0xffffffffffffffff, r4, 0x7, &(0x7f0000000800)=[r5, r6, 0xffffffffffffffff], &(0x7f0000000840)=[{0x3, 0x5, 0x7, 0xb}, {0x0, 0x5, 0xe, 0x8}, {0x0, 0x3, 0x8}, {0x3, 0x2, 0x0, 0x3}, {0x4, 0x4, 0x1, 0x6}, {0x80, 0x3, 0x5, 0x3}, {0x4, 0x4, 0xc, 0xb}], 0x10, 0x93}, 0x94) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef438000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0a", 0x34}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) 3.690075039s ago: executing program 2 (id=6283): r0 = socket$kcm(0x11, 0x5, 0x300) close(0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00"/13], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000380)=ANY=[@ANYRESHEX=r0, @ANYRESOCT=r1, @ANYBLOB="0000000000000000b702000001"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000002c0)={r2}, 0xc) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000540)={0x3, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x7, 0xc272}, 0x104402, 0xac5a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000", @ANYRES32=0x0], 0x50) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r6, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='../\x00\x00\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)) r7 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r7, 0x1, 0x19, 0x0, 0x0) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001fc0)={0x1, 0x58, &(0x7f0000001f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002180)={0x18, 0x0, &(0x7f0000001dc0), &(0x7f0000001e40)='syzkaller\x00', 0x80000000, 0x82, &(0x7f0000001e80)=""/130, 0x41000, 0x9, '\x00', r8, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000002000)={0x1ff, 0x2}, 0x8, 0x10, &(0x7f0000002040)={0x2, 0xc, 0x1ff, 0x3}, 0x10, 0x0, 0x0, 0x7, &(0x7f00000020c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000002100)=[{0x1, 0x1, 0x7, 0x1}, {0x4, 0x4, 0x1, 0x7}, {0x2, 0x2, 0x6, 0x6}, {0x0, 0x2, 0xb}, {0x0, 0x1, 0xc, 0x3}, {0x2, 0x5, 0xe, 0x17}, {0x200, 0x4, 0x8, 0x5}], 0x10, 0x2}, 0x94) r9 = openat$cgroup_ro(r6, &(0x7f00000006c0)='cpuacct.usage_sys\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x8, 0x9, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000007f0000000000000001000000180000000200000000000000feffffff850000002400000018540000030000000000000000000000d700"/68], &(0x7f0000000500)='GPL\x00', 0x5, 0xec, &(0x7f00000005c0)=""/236, 0x0, 0x17, '\x00', r8, @cgroup_skb=0x1, r9, 0x8, &(0x7f0000000700)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0xa, 0x2, 0x4}, 0x10, 0xffffffffffffffff, r4, 0x7, &(0x7f0000000800)=[r5, r6, 0xffffffffffffffff], &(0x7f0000000840)=[{0x3, 0x5, 0x7, 0xb}, {0x0, 0x5, 0xe, 0x8}, {0x0, 0x3, 0x8}, {0x3, 0x2, 0x0, 0x3}, {0x4, 0x4, 0x1, 0x6}, {0x80, 0x3, 0x5, 0x3}, {0x4, 0x4, 0xc, 0xb}], 0x10, 0x93}, 0x94) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef438000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa1103", 0x4e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) 3.312079241s ago: executing program 5 (id=6284): r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r0, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x69, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x2a, &(0x7f0000000140)=[{&(0x7f0000000240)=""/205, 0xcd}, {&(0x7f0000000380)=""/195, 0xc3}, {&(0x7f0000003200)=""/213, 0xd5}, {&(0x7f0000002040)=""/4071, 0xfe7}, {&(0x7f00000007c0)=""/211, 0xd3}, {&(0x7f0000000b00)=""/231, 0xe7}, {&(0x7f0000000480)=""/176, 0xb0}, {&(0x7f0000000640)=""/211, 0xd3}], 0x8}, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x72, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x33}, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000001001000001000000000000"], 0x28}, 0x4044454) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r2, 0x1, 0xc, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = socket$kcm(0x11, 0xa, 0x300) socket$kcm(0x2, 0x6, 0x0) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f00000017c0)={0x2, 0x4e20, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x19}, @empty}}}], 0x20}, 0x8000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x102101, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNDETACHFILTER(r5, 0x401054d6, 0x0) recvmsg$kcm(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000011c0)=""/4096, 0x1000}], 0x1}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0700000004000000000900000100000028"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000004000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r8}, 0xc) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r8, 0x0, 0x0}, 0x10) sendmsg$kcm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00000011008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x24000000) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000080000000", @ANYBLOB="e6988e585ea79ed33960196d40127fc2da412d07c1994e2de870ff97f0a4934d398a5e37934691e21a5275de5124a9c874983ea88951c8804de3958c1f84e6dda987690dbe0498", @ANYRES8=r1], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4308}, 0x94) 3.311518551s ago: executing program 6 (id=6285): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00020000000000000000000000001000"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xc, &(0x7f0000001480)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000010000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b70400000000000085000000330000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x4}], 0x10, 0x12}, 0x94) r3 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) r6 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f00000001c0)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r3, 0x84, 0x71, &(0x7f0000000000)=r8, 0x8) r9 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x110821, 0x0, 0xc2ba, 0x2, 0x64317119, 0x6, 0x7fff, 0x0, 0xfffffffd, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000011c0)={r1, r2}) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x10001, 0x20000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x5}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffff7fffffffffff, r9, 0x8) close(r3) r11 = socket$kcm(0x2, 0x2, 0x73) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x2, 0x3, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000002"], 0x48) setsockopt$sock_attach_bpf(r11, 0x0, 0x17, 0x0, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) 2.869198296s ago: executing program 6 (id=6287): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1f, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0xfffffffffffffffd}, 0x109122, 0x89, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x70}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 2.473829789s ago: executing program 2 (id=6288): r0 = syz_clone(0x1000, &(0x7f0000000080)="63fc8afa500b", 0x6, &(0x7f0000000100), &(0x7f0000000340), &(0x7f0000000440)="378e3828cb02177921b39c47166df240565bc8c16061e2c7989709253c7552ca95518af43bec2a76f6af1d033f604bb4b79f42a26eaffcc923a29417d2e5d994d811fb229e93bfef4c198a57675e9b973962e8a22a296f6952940ebee7eaf53089862f931c5348dfaeebe82f1f50205848b2") perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x9, 0x100, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x4b15}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open$cgroup(&(0x7f00000006c0)={0x5, 0x80, 0x0, 0x8, 0xaa, 0x1, 0x0, 0xffffffffffffffff, 0x20008, 0xe, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7, 0x1, @perf_bp={0x0}, 0x23377aedef665b94, 0x5, 0xc8, 0xa, 0x4, 0x0, 0xb6b, 0x0, 0x5, 0x0, 0x2}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0xa) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001280)={r0, r1, 0x0, 0x1, &(0x7f0000001240)='\x00'}, 0x30) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0xba, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4100}, r0, 0xffffffffff7fffff, 0xffffffffffffffff, 0x1b) r2 = socket$kcm(0x10, 0x2, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r3, 0x84, 0x14, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x40c, 0x7, 0x0, 0x9, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001880)="5c00000012006b1e003de3d86e6c1dff05137e0300000000000000b68675f8001d000a00a0e69ee517d34442bc24eab556a7e60f1e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f408000300060100000800030011000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 2.390231111s ago: executing program 6 (id=6289): r0 = syz_clone(0x1000, &(0x7f0000000080)="63fc8afa500b", 0x6, &(0x7f0000000100), &(0x7f0000000340), &(0x7f0000000440)="378e3828cb02177921b39c47166df240565bc8c16061e2c7989709253c7552ca95518af43bec2a76f6af1d033f604bb4b79f42a26eaffcc923a29417d2e5d994d811fb229e93bfef4c198a57675e9b973962e8a22a296f6952940ebee7eaf53089862f931c5348dfaeebe82f1f50205848b2") perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x9, 0x100, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x4b15}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open$cgroup(&(0x7f00000006c0)={0x5, 0x80, 0x0, 0x8, 0xaa, 0x1, 0x0, 0xffffffffffffffff, 0x20008, 0xe, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7, 0x1, @perf_bp={0x0}, 0x23377aedef665b94, 0x5, 0xc8, 0xa, 0x4, 0x0, 0xb6b, 0x0, 0x5, 0x0, 0x2}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0xa) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001280)={r0, r1, 0x0, 0x1, &(0x7f0000001240)='\x00'}, 0x30) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0xba, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4100}, r0, 0xffffffffff7fffff, 0xffffffffffffffff, 0x1b) r2 = socket$kcm(0x10, 0x2, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r3, 0x84, 0x14, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x40c, 0x7, 0x0, 0x9, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001880)="5c00000012006b1e003de3d86e6c1dff05137e0300000000000000b68675f8001d000a00a0e69ee517d34442bc24eab556a7e60f1e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f408000300060100000800030011000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 2.056703422s ago: executing program 3 (id=6290): socket$kcm(0xa, 0x3, 0x73) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000af"], 0x0, 0x5}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x30001, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0xf6}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$kcm(0x2, 0x3, 0x84) socket$kcm(0xa, 0x922000000003, 0x11) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.swap.events\x00', 0x26e1, 0x0) r2 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x2e, &(0x7f0000000880)=r1, 0x4) recvmsg(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x40) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x13, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000e0000000000000006366d9c26bdcc514cbabf38860d60000000018010000696c6c2500000000002020207b1a729d6ef8ff00000000bfa100000000000007010000f8ffffffb70200000800000007000000001effffffffffffff0075468910fcfcac4d732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b159fac0ae767acbb7280649d8e7da87266fa6321e961f9f28c4c9704160ea8343e957da55d37418410ef8d156f602c4ffb4c901c3383c193a372582d33da951a4cd47dc6d5ef44774c43e4578"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x27) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) socketpair(0x9, 0x1, 0x0, &(0x7f0000000000)) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000001b80)="0d113311d7af2c7d0a6b8bcc9ab77974b333be01b290ffa314fa", 0x1a}], 0x2, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x13}, @loopback}}}], 0x20}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000bc0)}], 0x1}, 0x4) socketpair$unix(0x1, 0x5, 0x0, 0x0) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0xfffffd83) 1.983609665s ago: executing program 5 (id=6291): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0xfe, &(0x7f0000000180)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) 1.623888307s ago: executing program 3 (id=6292): r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f00000031c0)={&(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000740)="4f04", 0x2}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000002900000004"], 0x18}, 0x8080) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xb4}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x2a}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x2, @remote}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)='S\x00', 0x2}], 0x1, 0x0, 0x0, 0x900}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000018c0)={r1, 0x0, 0x1000, 0x6f, &(0x7f0000000780)="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", &(0x7f0000001780)=""/111, 0x7, 0x0, 0x0, 0x59, &(0x7f0000001800), &(0x7f0000001840)="e3d7c6fd3df069d8f62fce28a6b69c8a740db8d8a7e683857841f5f604d3b6757508f4d65c3850d155f3f74536e31cc58148f2bd8bfc595614795557d6f24997e14f9d5df49337fba313cab9937fabce50940ce6d917ee0740", 0x1, 0x0, 0x1000}, 0x50) 1.551252379s ago: executing program 6 (id=6293): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x2}, 0x8000, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4861, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="8000230d1100"}) 1.296224817s ago: executing program 3 (id=6294): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000200)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@noop, @end, @lsrr={0x83, 0x7, 0x99, [@broadcast]}]}}}, @ip_retopts={{0x14, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}], 0x50}, 0x840) 1.295717397s ago: executing program 5 (id=6295): syz_clone(0x45004400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x62000, 0x0) close(r2) perf_event_open$cgroup(&(0x7f0000000180)={0x1, 0x80, 0x40, 0x9b, 0x6, 0x6, 0x0, 0x0, 0x62092, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0xff, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0x7, 0x9, 0x4, 0x8000000000000001, 0x3, 0x3, 0x0, 0x3, 0x0, 0xcd2}, r2, 0x0, r1, 0xc) socket$kcm(0x2, 0x200000000000006, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000000)={0x5, 0x80, 0x10, 0xfd, 0x0, 0x0, 0x0, 0x1, 0x90, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0xaa32, 0x0, 0xfffffffd, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r3, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000007880)=[@ip_retopts={{0x14, 0x0, 0x7, {[@timestamp={0x44, 0x4}]}}}], 0x18}, 0x0) ioctl$TUNGETVNETLE(r2, 0x8953, &(0x7f0000000040)) 1.19262769s ago: executing program 2 (id=6296): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00020000000000000000000000001000"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xc, &(0x7f0000001480)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000010000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b70400000000000085000000330000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x4}], 0x10, 0x12}, 0x94) r3 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) r6 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f00000001c0)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r3, 0x84, 0x71, &(0x7f0000000000)=r8, 0x8) r9 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x110821, 0x0, 0xc2ba, 0x2, 0x64317119, 0x6, 0x7fff, 0x0, 0xfffffffd, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000011c0)={r1, r2}) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x10001, 0x20000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x5}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffff7fffffffffff, r9, 0x8) close(r3) r11 = socket$kcm(0x2, 0x2, 0x73) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x2, 0x3, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000002"], 0x48) setsockopt$sock_attach_bpf(r11, 0x0, 0x17, 0x0, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) 1.117503623s ago: executing program 3 (id=6297): r0 = socket$kcm(0x11, 0x5, 0x300) close(0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00"/13], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000380)=ANY=[@ANYRESHEX=r0, @ANYRESOCT=r1, @ANYBLOB="0000000000000000b702000001"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000002c0)={r2}, 0xc) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000540)={0x3, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x7, 0xc272}, 0x104402, 0xac5a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000", @ANYRES32=0x0], 0x50) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r6, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='../\x00\x00\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)) r7 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r7, 0x1, 0x19, 0x0, 0x0) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001fc0)={0x1, 0x58, &(0x7f0000001f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002180)={0x18, 0x0, &(0x7f0000001dc0), &(0x7f0000001e40)='syzkaller\x00', 0x80000000, 0x82, &(0x7f0000001e80)=""/130, 0x41000, 0x9, '\x00', r8, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000002000)={0x1ff, 0x2}, 0x8, 0x10, &(0x7f0000002040)={0x2, 0xc, 0x1ff, 0x3}, 0x10, 0x0, 0x0, 0x7, &(0x7f00000020c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000002100)=[{0x1, 0x1, 0x7, 0x1}, {0x4, 0x4, 0x1, 0x7}, {0x2, 0x2, 0x6, 0x6}, {0x0, 0x2, 0xb}, {0x0, 0x1, 0xc, 0x3}, {0x2, 0x5, 0xe, 0x17}, {0x200, 0x4, 0x8, 0x5}], 0x10, 0x2}, 0x94) r9 = openat$cgroup_ro(r6, &(0x7f00000006c0)='cpuacct.usage_sys\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x8, 0x9, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000007f0000000000000001000000180000000200000000000000feffffff850000002400000018540000030000000000000000000000d700"/68], &(0x7f0000000500)='GPL\x00', 0x5, 0xec, &(0x7f00000005c0)=""/236, 0x0, 0x17, '\x00', r8, @cgroup_skb=0x1, r9, 0x8, &(0x7f0000000700)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0xa, 0x2, 0x4}, 0x10, 0xffffffffffffffff, r4, 0x7, &(0x7f0000000800)=[r5, r6, 0xffffffffffffffff], &(0x7f0000000840)=[{0x3, 0x5, 0x7, 0xb}, {0x0, 0x5, 0xe, 0x8}, {0x0, 0x3, 0x8}, {0x3, 0x2, 0x0, 0x3}, {0x4, 0x4, 0x1, 0x6}, {0x80, 0x3, 0x5, 0x3}, {0x4, 0x4, 0xc, 0xb}], 0x10, 0x93}, 0x94) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef438000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa1103", 0x4e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) 616.170409ms ago: executing program 3 (id=6298): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1f, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0xfffffffffffffffd}, 0x109122, 0x89, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x70}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 615.68204ms ago: executing program 6 (id=6299): bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/mnt\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="d8000000210081044e81f782db44b9040200000000806c0100001500100014000000001209000d2000000401a80018000a000e4006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee062e1c547cbc7225e6756cfb39b0590b4800089e408e8d8ef52b49816277cf4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db701000000eafad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d939acd92637429397f632838", 0xd8}], 0x1}, 0x0) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x1, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000700000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$unix(r7, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001800)=[@rights={{0x14, 0x1, 0x1, [r7]}}], 0x18}, 0xfd) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0x10, 0xfffffef3, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x5562, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000000000012850000008600000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000000000000850000002a000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r11, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b807200500000000", &(0x7f00000004c0)=""/18, 0x1004, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x23) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r13, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0xb701, 0x0) r14 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x1, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x2e, 0x1c, &(0x7f0000000000)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r14, @ANYBLOB="0000000000000000b702000014000000b70300002bb91a008500000008000000bc0900000000000045090100002000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000bf2700000000000007080000fffdffffbfa400000000000007040000f0ffffffc40200000800000018220000", @ANYRES32=r14, @ANYBLOB="19ad000000000000b7050000080000004608efff76000000bf98000020000000560900000000000085000000000000ba8a44918f36685689839900b7000000000000409500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 216.321292ms ago: executing program 2 (id=6300): r0 = socket$kcm(0x21, 0x2, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x1f00) r2 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400000, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2b, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r4 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r4, 0x84, 0x6, &(0x7f0000000000), 0x84) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000022003505d25a806f8c6394f97e24fc60", 0x14}], 0x1, 0x0, 0x0, 0x74000000}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f00000000c0)='\x00') bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x4, [@var={0xb, 0x0, 0x0, 0x11, 0x3}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x3}, @decl_tag={0xa, 0x0, 0x0, 0x11, 0x3, 0x207}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x48}, 0x28) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000300)=r5, 0x4) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='cpuacct.usage_user\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r6, 0x400454d1, &(0x7f0000000540)={0x0, 0x2, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}]}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x8, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xb, 0xff, 0x24932, 0x7f, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r7}, &(0x7f0000000000)=0x7d8, &(0x7f0000000180)='%ps \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r7, 0xffffffffffffffff}, &(0x7f0000000100)=0x7d8, &(0x7f0000000140)='%pi6 \x00'}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000480)={0x0, &(0x7f0000000200)=""/197, &(0x7f0000000380), &(0x7f0000000300), 0x2, r8}, 0x38) 101.815706ms ago: executing program 3 (id=6301): socket$kcm(0x2, 0x3, 0x84) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0xdc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7f, 0xfffffffffffffffa}, 0x0, 0x0, 0xc2be, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="0206e7ec02000000ffffffff006d97dc", 0x10}], 0x1}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x20242, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$kcm(0x11, 0xa, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000000)=r3, 0x4) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r4, &(0x7f0000000040)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2}, 0x80, &(0x7f0000000140)=[{&(0x7f00000006c0)="62042720920101000001ad2f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a710292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9a4de33", 0xda}, {&(0x7f0000000c00)="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", 0x114}, {&(0x7f0000000a40)="0a985d7879f1bbff16c7d66e33657e452299fd0ef8c2afda588eb05891b7da030e01452a7986bea19b59c98dc2996c0ea09604d00ea48336d0c813d83025aca8623a5915ddddce2c11c5e374f2e0f387d2398fe0b899ff60dc7a73addcf253cf32aafbe2b9f90799e7fc583bdd9b564697ba988080270bdceb4714219a2d4c229fffb0d86fb286e3553a8b3ac02badc66ada5fceabe5f63c79da96e641a45901128063d6e1e31b11bcfbc3e70bd3c8c6c0be9f653f977f16", 0xfff0}, {&(0x7f0000000840)="6f4720baeb54", 0x6}], 0x4}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x7, 0x0, 0x0, 0x2005e, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x100987, 0x6, 0x7, 0x0, 0x81, 0x2, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8946, &(0x7f0000000080)) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) 0s ago: executing program 5 (id=6302): socket$kcm(0xa, 0x3, 0x73) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000af"], 0x0, 0x5}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x30001, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0xf6}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$kcm(0x2, 0x3, 0x84) socket$kcm(0xa, 0x922000000003, 0x11) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.swap.events\x00', 0x26e1, 0x0) r2 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x2e, &(0x7f0000000880)=r1, 0x4) recvmsg(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x40) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x13, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000e0000000000000006366d9c26bdcc514cbabf38860d60000000018010000696c6c2500000000002020207b1a729d6ef8ff00000000bfa100000000000007010000f8ffffffb70200000800000007000000001effffffffffffff0075468910fcfcac4d732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b159fac0ae767acbb7280649d8e7da87266fa6321e961f9f28c4c9704160ea8343e957da55d37418410ef8d156f602c4ffb4c901c3383c193a372582d33da951a4cd47dc6d5ef44774c43e4578"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x27) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) socketpair(0x9, 0x1, 0x0, &(0x7f0000000000)) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000001b80)="0d113311d7af2c7d0a6b8bcc9ab77974b333be01b290ffa314fa", 0x1a}], 0x2, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x13}, @loopback}}}], 0x20}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000bc0)}], 0x1}, 0x4) socketpair$unix(0x1, 0x5, 0x0, 0x0) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0xfffffd83) kernel console output (not intermixed with test programs): an invalid length. [ 1119.515145][T22320] mac80211_hwsim hwsim46 ªªªªªª: renamed from wlan0 [ 1119.718124][T22329] FAULT_INJECTION: forcing a failure. [ 1119.718124][T22329] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1119.762193][T22329] CPU: 1 PID: 22329 Comm: syz.1.5453 Not tainted syzkaller #0 [ 1119.769771][T22329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1119.779886][T22329] Call Trace: [ 1119.783324][T22329] [ 1119.786319][T22329] dump_stack_lvl+0x188/0x24e [ 1119.791086][T22329] ? show_regs_print_info+0x12/0x12 [ 1119.796347][T22329] ? load_image+0x400/0x400 [ 1119.800951][T22329] ? __lock_acquire+0x7d10/0x7d10 [ 1119.806063][T22329] should_fail_ex+0x399/0x4d0 [ 1119.810822][T22329] _copy_from_user+0x2c/0x170 [ 1119.815663][T22329] iovec_from_user+0x143/0x360 [ 1119.820518][T22329] __import_iovec+0x6d/0x500 [ 1119.825207][T22329] import_iovec+0x6f/0xa0 [ 1119.829637][T22329] ___sys_sendmsg+0x252/0x360 [ 1119.834504][T22329] ? __sys_sendmsg+0x290/0x290 [ 1119.839414][T22329] ? __lock_acquire+0x7d10/0x7d10 [ 1119.844603][T22329] __se_sys_sendmsg+0x1bb/0x2a0 [ 1119.849533][T22329] ? __x64_sys_sendmsg+0x80/0x80 [ 1119.854772][T22329] ? lockdep_hardirqs_on+0x94/0x140 [ 1119.860065][T22329] do_syscall_64+0x4c/0xa0 [ 1119.864563][T22329] ? clear_bhb_loop+0x60/0xb0 [ 1119.869314][T22329] ? clear_bhb_loop+0x60/0xb0 [ 1119.874082][T22329] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1119.880047][T22329] RIP: 0033:0x7fd723b9ce59 [ 1119.884529][T22329] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1119.904473][T22329] RSP: 002b:00007fd724a96028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1119.912968][T22329] RAX: ffffffffffffffda RBX: 00007fd723e15fa0 RCX: 00007fd723b9ce59 [ 1119.921056][T22329] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 1119.929092][T22329] RBP: 00007fd724a96090 R08: 0000000000000000 R09: 0000000000000000 [ 1119.937242][T22329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1119.945273][T22329] R13: 00007fd723e16038 R14: 00007fd723e15fa0 R15: 00007fff0ed79188 [ 1119.953362][T22329] [ 1120.862215][T22348] netlink: 55 bytes leftover after parsing attributes in process `syz.6.5458'. [ 1121.674807][T22365] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.5465'. [ 1121.742172][T22365] netlink: zone id is out of range [ 1121.796229][T22365] netlink: zone id is out of range [ 1121.835843][T22365] netlink: zone id is out of range [ 1121.879202][T22365] netlink: zone id is out of range [ 1121.911118][T22365] netlink: zone id is out of range [ 1121.960586][T22365] netlink: zone id is out of range [ 1122.018289][T22365] netlink: zone id is out of range [ 1122.055867][T22365] netlink: zone id is out of range [ 1122.070955][T22365] netlink: zone id is out of range [ 1122.101371][T22365] netlink: zone id is out of range [ 1122.423768][T22376] validate_nla: 3 callbacks suppressed [ 1122.423833][T22376] netlink: 'syz.1.5468': attribute type 10 has an invalid length. [ 1122.938674][T22392] netlink: 'syz.6.5472': attribute type 10 has an invalid length. [ 1122.957199][T22392] netlink: 55 bytes leftover after parsing attributes in process `syz.6.5472'. [ 1123.409021][T22399] netlink: 'syz.1.5473': attribute type 10 has an invalid length. [ 1123.923541][T22416] netlink: 168864 bytes leftover after parsing attributes in process `syz.6.5482'. [ 1124.214299][T22419] netlink: 'syz.1.5484': attribute type 10 has an invalid length. [ 1124.285229][T22424] netlink: 'syz.5.5486': attribute type 13 has an invalid length. [ 1124.356818][T22424] netlink: 152 bytes leftover after parsing attributes in process `syz.5.5486'. [ 1124.517917][T22424] syz_tun: refused to change device tx_queue_len [ 1124.550550][T22427] netlink: 'syz.2.5488': attribute type 10 has an invalid length. [ 1124.566753][T22427] netlink: 55 bytes leftover after parsing attributes in process `syz.2.5488'. [ 1124.973271][T22453] netlink: 'syz.2.5497': attribute type 10 has an invalid length. [ 1125.165757][T22455] netlink: 'syz.1.5494': attribute type 10 has an invalid length. [ 1125.490354][T22462] netlink: 168864 bytes leftover after parsing attributes in process `syz.5.5499'. [ 1125.869734][T22470] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.5501'. [ 1125.925879][T22467] netlink: 'syz.3.5500': attribute type 10 has an invalid length. [ 1126.286680][T22485] netlink: 'syz.1.5507': attribute type 10 has an invalid length. [ 1126.309246][T22485] netlink: 55 bytes leftover after parsing attributes in process `syz.1.5507'. [ 1127.736180][T22519] validate_nla: 1 callbacks suppressed [ 1127.736225][T22519] netlink: 'syz.1.5520': attribute type 10 has an invalid length. [ 1128.376425][T22535] netlink: 'syz.6.5524': attribute type 10 has an invalid length. [ 1128.399722][T22535] netlink: 55 bytes leftover after parsing attributes in process `syz.6.5524'. [ 1128.421711][T22542] netlink: 'syz.5.5519': attribute type 10 has an invalid length. [ 1128.850088][T22560] netlink: 'syz.6.5531': attribute type 29 has an invalid length. [ 1128.871646][T22560] netlink: 'syz.6.5531': attribute type 29 has an invalid length. [ 1128.896733][T22556] netlink: 'syz.6.5531': attribute type 29 has an invalid length. [ 1128.957383][T22559] C: renamed from team_slave_0 [ 1129.279130][T22559] netlink: 'syz.1.5533': attribute type 1 has an invalid length. [ 1129.303133][T22559] netlink: 116 bytes leftover after parsing attributes in process `syz.1.5533'. [ 1129.345509][T22559] net_ratelimit: 501 callbacks suppressed [ 1129.345555][T22559] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1129.380010][T22556] netlink: 'syz.6.5531': attribute type 29 has an invalid length. [ 1129.764653][T22570] netlink: 'syz.3.5535': attribute type 10 has an invalid length. [ 1129.779767][T22556] netlink: 'syz.6.5531': attribute type 10 has an invalid length. [ 1130.251901][T22589] netlink: 55 bytes leftover after parsing attributes in process `syz.1.5541'. [ 1131.095842][T22601] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.5544'. [ 1131.937992][T22624] C: renamed from team_slave_0 [ 1132.537490][T22624] netlink: 116 bytes leftover after parsing attributes in process `syz.2.5550'. [ 1132.571714][T22624] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1132.699470][T22648] netlink: 55 bytes leftover after parsing attributes in process `syz.6.5557'. [ 1133.246971][T22663] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.5562'. [ 1133.631176][T22666] validate_nla: 16 callbacks suppressed [ 1133.631198][T22666] netlink: 'syz.6.5563': attribute type 10 has an invalid length. [ 1134.042548][T22688] netlink: 'syz.5.5568': attribute type 29 has an invalid length. [ 1134.141418][T22688] netlink: 'syz.5.5568': attribute type 29 has an invalid length. [ 1134.166156][T22686] netlink: 'syz.5.5568': attribute type 29 has an invalid length. [ 1134.245953][T22692] netlink: 'syz.5.5568': attribute type 29 has an invalid length. [ 1134.300878][T22693] netlink: 'syz.6.5572': attribute type 10 has an invalid length. [ 1134.309150][T22693] netlink: 55 bytes leftover after parsing attributes in process `syz.6.5572'. [ 1134.689470][T22705] netlink: 'syz.6.5576': attribute type 21 has an invalid length. [ 1134.728600][T22705] netlink: 128 bytes leftover after parsing attributes in process `syz.6.5576'. [ 1134.744413][T22705] netlink: 'syz.6.5576': attribute type 5 has an invalid length. [ 1134.760472][T22705] netlink: 'syz.6.5576': attribute type 6 has an invalid length. [ 1134.768847][T22705] netlink: 3 bytes leftover after parsing attributes in process `syz.6.5576'. [ 1134.832903][T22688] netlink: 'syz.5.5568': attribute type 10 has an invalid length. [ 1134.897095][T22708] netlink: 132 bytes leftover after parsing attributes in process `syz.6.5576'. [ 1135.734217][T22735] netlink: 55 bytes leftover after parsing attributes in process `syz.2.5587'. [ 1138.516364][T22791] netlink: 61955 bytes leftover after parsing attributes in process `syz.5.5605'. [ 1138.547984][T22791] netlink: 3 bytes leftover after parsing attributes in process `syz.5.5605'. [ 1140.428178][T22808] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1140.435534][T22808] IPv6: NLM_F_CREATE should be set when creating new route [ 1140.443059][T22808] IPv6: NLM_F_CREATE should be set when creating new route [ 1140.450323][T22808] IPv6: NLM_F_CREATE should be set when creating new route [ 1140.482889][T22809] validate_nla: 7 callbacks suppressed [ 1140.482908][T22809] netlink: 'syz.2.5611': attribute type 2 has an invalid length. [ 1140.605087][T22814] netlink: 'syz.3.5612': attribute type 29 has an invalid length. [ 1140.691487][T22809] netlink: 'syz.2.5611': attribute type 1 has an invalid length. [ 1140.699430][T22809] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.5611'. [ 1140.706818][T22814] netlink: 'syz.3.5612': attribute type 29 has an invalid length. [ 1140.817301][T22811] netlink: 'syz.3.5612': attribute type 29 has an invalid length. [ 1140.933035][T22815] netlink: 'syz.3.5612': attribute type 29 has an invalid length. [ 1141.118303][T22814] netlink: 'syz.3.5612': attribute type 10 has an invalid length. [ 1142.163472][T22843] netlink: 'syz.6.5619': attribute type 29 has an invalid length. [ 1142.190580][T22843] netlink: 'syz.6.5619': attribute type 29 has an invalid length. [ 1142.233054][T22841] netlink: 'syz.6.5619': attribute type 29 has an invalid length. [ 1142.296828][T22844] netlink: 55 bytes leftover after parsing attributes in process `syz.3.5620'. [ 1143.244746][T22866] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.5627'. [ 1143.301101][T22866] netlink: 6324 bytes leftover after parsing attributes in process `syz.2.5627'. [ 1143.331109][T22866] netlink: 3 bytes leftover after parsing attributes in process `syz.2.5627'. [ 1143.740357][T22890] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5633'. [ 1143.964019][T22893] netlink: 55 bytes leftover after parsing attributes in process `syz.1.5634'. [ 1144.897185][T22917] FAULT_INJECTION: forcing a failure. [ 1144.897185][T22917] name failslab, interval 1, probability 0, space 0, times 0 [ 1144.930082][T22917] CPU: 0 PID: 22917 Comm: syz.3.5642 Not tainted syzkaller #0 [ 1144.937725][T22917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1144.948006][T22917] Call Trace: [ 1144.951322][T22917] [ 1144.954632][T22917] dump_stack_lvl+0x188/0x24e [ 1144.959452][T22917] ? show_regs_print_info+0x12/0x12 [ 1144.964865][T22917] ? load_image+0x400/0x400 [ 1144.969851][T22917] ? __might_sleep+0xd0/0xd0 [ 1144.975183][T22917] ? __lock_acquire+0x7d10/0x7d10 [ 1144.980373][T22917] should_fail_ex+0x399/0x4d0 [ 1144.985190][T22917] should_failslab+0x5/0x20 [ 1144.989960][T22917] slab_pre_alloc_hook+0x59/0x310 [ 1144.995130][T22917] ? apparmor_sk_alloc_security+0x74/0x100 [ 1145.000978][T22917] __kmem_cache_alloc_node+0x4f/0x260 [ 1145.006409][T22917] ? apparmor_sk_alloc_security+0x74/0x100 [ 1145.012435][T22917] kmalloc_trace+0x26/0xe0 [ 1145.016909][T22917] apparmor_sk_alloc_security+0x74/0x100 [ 1145.022755][T22917] security_sk_alloc+0x6a/0xa0 [ 1145.027534][T22917] sk_prot_alloc+0x101/0x210 [ 1145.032225][T22917] ? sk_alloc+0x20/0x340 [ 1145.036488][T22917] sk_alloc+0x36/0x340 [ 1145.040575][T22917] ? bpf_ctx_init+0x163/0x1a0 [ 1145.045472][T22917] ? bpf_prog_test_run_skb+0x275/0x1890 [ 1145.051145][T22917] bpf_prog_test_run_skb+0x371/0x1890 [ 1145.056548][T22917] ? __fget_files+0x28/0x4b0 [ 1145.061168][T22917] ? cpu_online+0xa0/0xa0 [ 1145.065535][T22917] bpf_prog_test_run+0x31e/0x390 [ 1145.070709][T22917] __sys_bpf+0x62b/0x780 [ 1145.075050][T22917] ? bpf_link_show_fdinfo+0x380/0x380 [ 1145.080464][T22917] ? lock_chain_count+0x20/0x20 [ 1145.085514][T22917] __x64_sys_bpf+0x78/0x90 [ 1145.089953][T22917] do_syscall_64+0x4c/0xa0 [ 1145.094380][T22917] ? clear_bhb_loop+0x60/0xb0 [ 1145.099087][T22917] ? clear_bhb_loop+0x60/0xb0 [ 1145.103798][T22917] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1145.109709][T22917] RIP: 0033:0x7fa6fbf9ce59 [ 1145.114139][T22917] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1145.133855][T22917] RSP: 002b:00007fa6fa1f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1145.142372][T22917] RAX: ffffffffffffffda RBX: 00007fa6fc215fa0 RCX: 00007fa6fbf9ce59 [ 1145.150388][T22917] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 1145.158436][T22917] RBP: 00007fa6fa1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1145.166433][T22917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1145.174527][T22917] R13: 00007fa6fc216038 R14: 00007fa6fc215fa0 R15: 00007fff80cc91c8 [ 1145.182557][T22917] [ 1145.709823][T22923] validate_nla: 16 callbacks suppressed [ 1145.709845][T22923] netlink: 'syz.2.5644': attribute type 10 has an invalid length. [ 1146.050002][T22932] netlink: 'syz.1.5649': attribute type 10 has an invalid length. [ 1146.072604][T22932] netlink: 55 bytes leftover after parsing attributes in process `syz.1.5649'. [ 1146.117907][T22936] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.5650'. [ 1146.666914][T22950] netlink: 134056 bytes leftover after parsing attributes in process `syz.5.5656'. [ 1147.390632][T22951] netlink: 'syz.2.5654': attribute type 10 has an invalid length. [ 1148.182785][T22969] netlink: 'syz.5.5661': attribute type 29 has an invalid length. [ 1148.723619][T22986] netlink: 'syz.1.5664': attribute type 29 has an invalid length. [ 1148.806196][T22972] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.5663'. [ 1148.837352][T22969] netlink: 'syz.5.5661': attribute type 29 has an invalid length. [ 1148.848810][T22986] netlink: 'syz.1.5664': attribute type 29 has an invalid length. [ 1149.015406][T22985] netlink: 'syz.1.5664': attribute type 29 has an invalid length. [ 1149.164258][T22989] netlink: 'syz.1.5664': attribute type 29 has an invalid length. [ 1149.551798][T22985] netlink: 'syz.1.5664': attribute type 10 has an invalid length. [ 1149.566079][T22999] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.5666'. [ 1150.758172][T23028] netlink: 'syz.5.5675': attribute type 10 has an invalid length. [ 1151.310634][T23042] netlink: 'syz.2.5682': attribute type 29 has an invalid length. [ 1152.101279][T23042] netlink: 'syz.2.5682': attribute type 29 has an invalid length. [ 1152.165937][T23040] netlink: 'syz.2.5682': attribute type 29 has an invalid length. [ 1152.195260][T23044] netlink: 'syz.2.5682': attribute type 29 has an invalid length. [ 1152.569236][T23042] netlink: 'syz.2.5682': attribute type 10 has an invalid length. [ 1152.601666][T23055] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.5683'. [ 1153.165983][T23071] netlink: 'syz.5.5688': attribute type 10 has an invalid length. [ 1153.252358][T23071] netlink: 55 bytes leftover after parsing attributes in process `syz.5.5688'. [ 1153.783787][T23076] netlink: 'syz.1.5690': attribute type 10 has an invalid length. [ 1153.922386][T23081] FAULT_INJECTION: forcing a failure. [ 1153.922386][T23081] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1153.953776][T23081] CPU: 0 PID: 23081 Comm: syz.5.5692 Not tainted syzkaller #0 [ 1153.961328][T23081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1153.971415][T23081] Call Trace: [ 1153.974734][T23081] [ 1153.977732][T23081] dump_stack_lvl+0x188/0x24e [ 1153.982564][T23081] ? show_regs_print_info+0x12/0x12 [ 1153.987842][T23081] ? load_image+0x400/0x400 [ 1153.992579][T23081] ? __lock_acquire+0x7d10/0x7d10 [ 1153.997656][T23081] should_fail_ex+0x399/0x4d0 [ 1154.002371][T23081] _copy_from_user+0x2c/0x170 [ 1154.007102][T23081] __copy_msghdr+0x3b7/0x580 [ 1154.011731][T23081] ___sys_sendmsg+0x210/0x360 [ 1154.016446][T23081] ? __sys_sendmsg+0x290/0x290 [ 1154.021349][T23081] ? __lock_acquire+0x7d10/0x7d10 [ 1154.026474][T23081] __se_sys_sendmsg+0x1bb/0x2a0 [ 1154.031375][T23081] ? __x64_sys_sendmsg+0x80/0x80 [ 1154.036359][T23081] ? lockdep_hardirqs_on+0x94/0x140 [ 1154.041689][T23081] do_syscall_64+0x4c/0xa0 [ 1154.046145][T23081] ? clear_bhb_loop+0x60/0xb0 [ 1154.050861][T23081] ? clear_bhb_loop+0x60/0xb0 [ 1154.055570][T23081] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1154.061588][T23081] RIP: 0033:0x7f0f5339ce59 [ 1154.066398][T23081] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1154.086147][T23081] RSP: 002b:00007f0f541a5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1154.094709][T23081] RAX: ffffffffffffffda RBX: 00007f0f53615fa0 RCX: 00007f0f5339ce59 [ 1154.102724][T23081] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 1154.110738][T23081] RBP: 00007f0f541a5090 R08: 0000000000000000 R09: 0000000000000000 [ 1154.118802][T23081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1154.126803][T23081] R13: 00007f0f53616038 R14: 00007f0f53615fa0 R15: 00007ffd6d5c0ee8 [ 1154.134835][T23081] [ 1154.257574][T23084] netlink: 'syz.3.5693': attribute type 10 has an invalid length. [ 1154.741654][T23096] netlink: 'syz.3.5698': attribute type 25 has an invalid length. [ 1155.569803][T23104] netlink: 55 bytes leftover after parsing attributes in process `syz.3.5700'. [ 1155.630700][T23116] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5702'. [ 1155.944411][T23129] netlink: 830 bytes leftover after parsing attributes in process `syz.1.5705'. [ 1155.976231][T23127] validate_nla: 7 callbacks suppressed [ 1155.976268][T23127] netlink: 'syz.3.5704': attribute type 10 has an invalid length. [ 1156.224386][T23141] FAULT_INJECTION: forcing a failure. [ 1156.224386][T23141] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1156.240231][T23141] CPU: 1 PID: 23141 Comm: syz.2.5709 Not tainted syzkaller #0 [ 1156.247744][T23141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1156.257854][T23141] Call Trace: [ 1156.261167][T23141] [ 1156.264126][T23141] dump_stack_lvl+0x188/0x24e [ 1156.268837][T23141] ? show_regs_print_info+0x12/0x12 [ 1156.274169][T23141] ? load_image+0x400/0x400 [ 1156.278724][T23141] ? __lock_acquire+0x7d10/0x7d10 [ 1156.283811][T23141] should_fail_ex+0x399/0x4d0 [ 1156.288520][T23141] _copy_from_user+0x2c/0x170 [ 1156.293411][T23141] iovec_from_user+0x143/0x360 [ 1156.298383][T23141] __import_iovec+0x6d/0x500 [ 1156.303011][T23141] import_iovec+0x6f/0xa0 [ 1156.307372][T23141] ___sys_sendmsg+0x252/0x360 [ 1156.312084][T23141] ? __sys_sendmsg+0x290/0x290 [ 1156.316890][T23141] ? __lock_acquire+0x7d10/0x7d10 [ 1156.321970][T23141] __se_sys_sendmsg+0x1bb/0x2a0 [ 1156.326852][T23141] ? __x64_sys_sendmsg+0x80/0x80 [ 1156.331913][T23141] ? lockdep_hardirqs_on+0x94/0x140 [ 1156.337139][T23141] do_syscall_64+0x4c/0xa0 [ 1156.341575][T23141] ? clear_bhb_loop+0x60/0xb0 [ 1156.346289][T23141] ? clear_bhb_loop+0x60/0xb0 [ 1156.351003][T23141] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1156.356924][T23141] RIP: 0033:0x7fa9d4d9ce59 [ 1156.361366][T23141] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1156.381090][T23141] RSP: 002b:00007fa9d5bbf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1156.389529][T23141] RAX: ffffffffffffffda RBX: 00007fa9d5015fa0 RCX: 00007fa9d4d9ce59 [ 1156.397613][T23141] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1156.405693][T23141] RBP: 00007fa9d5bbf090 R08: 0000000000000000 R09: 0000000000000000 [ 1156.413782][T23141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1156.421778][T23141] R13: 00007fa9d5016038 R14: 00007fa9d5015fa0 R15: 00007fff69d4d878 [ 1156.429793][T23141] [ 1156.767011][T23150] netlink: 'syz.1.5708': attribute type 10 has an invalid length. [ 1157.836366][T23170] netlink: 'syz.6.5716': attribute type 29 has an invalid length. [ 1157.856141][T23166] netlink: 'syz.1.5715': attribute type 10 has an invalid length. [ 1157.864676][T23166] netlink: 55 bytes leftover after parsing attributes in process `syz.1.5715'. [ 1157.881545][T23170] netlink: 'syz.6.5716': attribute type 29 has an invalid length. [ 1158.047274][T23169] netlink: 'syz.6.5716': attribute type 29 has an invalid length. [ 1158.225649][T23170] netlink: 'syz.6.5716': attribute type 29 has an invalid length. [ 1158.339436][T23170] netlink: 'syz.6.5716': attribute type 10 has an invalid length. [ 1159.134407][T23189] netlink: 'syz.5.5720': attribute type 21 has an invalid length. [ 1159.163068][T23189] netlink: 132 bytes leftover after parsing attributes in process `syz.5.5720'. [ 1159.206811][T23191] netlink: 'syz.6.5721': attribute type 10 has an invalid length. [ 1159.680122][T23209] device aaaaaaaaaaaaaaa entered promiscuous mode [ 1161.681514][T23239] validate_nla: 1 callbacks suppressed [ 1161.681553][T23239] netlink: 'syz.2.5739': attribute type 7 has an invalid length. [ 1161.697067][T23235] netlink: 'syz.6.5737': attribute type 10 has an invalid length. [ 1161.712706][T23237] netlink: 'syz.1.5738': attribute type 10 has an invalid length. [ 1161.722054][T23239] netlink: 209556 bytes leftover after parsing attributes in process `syz.2.5739'. [ 1161.773018][T23237] netlink: 55 bytes leftover after parsing attributes in process `syz.1.5738'. [ 1162.278049][T23243] netlink: 'syz.5.5750': attribute type 10 has an invalid length. [ 1162.295226][T23253] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.5741'. [ 1162.341120][T23253] netlink: zone id is out of range [ 1162.349795][T23253] netlink: zone id is out of range [ 1162.429357][T23253] netlink: zone id is out of range [ 1162.701083][T23253] netlink: zone id is out of range [ 1162.747213][T23253] netlink: zone id is out of range [ 1162.828765][T23253] netlink: zone id is out of range [ 1162.849662][T23253] netlink: zone id is out of range [ 1162.977273][T23253] netlink: zone id is out of range [ 1162.997947][T23261] netlink: 'syz.2.5742': attribute type 10 has an invalid length. [ 1163.074315][T23253] netlink: zone id is out of range [ 1163.079540][T23253] netlink: zone id is out of range [ 1164.242968][T23285] netlink: 'syz.2.5752': attribute type 10 has an invalid length. [ 1164.428545][T23285] netlink: 55 bytes leftover after parsing attributes in process `syz.2.5752'. [ 1164.633214][T23288] netlink: 'syz.1.5753': attribute type 3 has an invalid length. [ 1165.020410][T23297] netlink: 'syz.1.5755': attribute type 10 has an invalid length. [ 1165.842241][T23309] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.5757'. [ 1166.340484][T23325] netlink: 'syz.3.5765': attribute type 10 has an invalid length. [ 1166.381968][T23332] netlink: 'syz.2.5767': attribute type 10 has an invalid length. [ 1166.400162][T23332] netlink: 55 bytes leftover after parsing attributes in process `syz.2.5767'. [ 1166.428785][T23333] netlink: 132 bytes leftover after parsing attributes in process `syz.6.5768'. [ 1166.813039][T23346] validate_nla: 2 callbacks suppressed [ 1166.813061][T23346] netlink: 'syz.3.5771': attribute type 10 has an invalid length. [ 1168.031871][T23360] netlink: 'syz.2.5772': attribute type 10 has an invalid length. [ 1168.492498][T23372] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.5779'. [ 1168.558031][T23378] FAULT_INJECTION: forcing a failure. [ 1168.558031][T23378] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1168.571897][T23378] CPU: 1 PID: 23378 Comm: syz.2.5782 Not tainted syzkaller #0 [ 1168.579413][T23378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1168.589508][T23378] Call Trace: [ 1168.592817][T23378] [ 1168.595778][T23378] dump_stack_lvl+0x188/0x24e [ 1168.600510][T23378] ? show_regs_print_info+0x12/0x12 [ 1168.605849][T23378] ? load_image+0x400/0x400 [ 1168.610412][T23378] ? __lock_acquire+0x7d10/0x7d10 [ 1168.615480][T23378] ? snprintf+0xe5/0x140 [ 1168.620206][T23378] should_fail_ex+0x399/0x4d0 [ 1168.624943][T23378] _copy_to_user+0x2c/0x130 [ 1168.629511][T23378] simple_read_from_buffer+0xe3/0x150 [ 1168.634927][T23378] proc_fail_nth_read+0x1a6/0x220 [ 1168.639976][T23378] ? proc_fault_inject_write+0x310/0x310 [ 1168.645675][T23378] ? fsnotify_perm+0x248/0x550 [ 1168.650469][T23378] ? proc_fault_inject_write+0x310/0x310 [ 1168.656137][T23378] vfs_read+0x2de/0xa00 [ 1168.660321][T23378] ? kernel_read+0x1e0/0x1e0 [ 1168.665018][T23378] ? __fget_files+0x28/0x4b0 [ 1168.669635][T23378] ? __fget_files+0x28/0x4b0 [ 1168.674248][T23378] ? __fget_files+0x43d/0x4b0 [ 1168.678951][T23378] ? __fdget_pos+0x2ae/0x360 [ 1168.683558][T23378] ? ksys_read+0x71/0x250 [ 1168.687997][T23378] ksys_read+0x14c/0x250 [ 1168.692260][T23378] ? vfs_write+0xa30/0xa30 [ 1168.696695][T23378] ? lockdep_hardirqs_on+0x94/0x140 [ 1168.701911][T23378] do_syscall_64+0x4c/0xa0 [ 1168.706362][T23378] ? clear_bhb_loop+0x60/0xb0 [ 1168.711097][T23378] ? clear_bhb_loop+0x60/0xb0 [ 1168.715846][T23378] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1168.721763][T23378] RIP: 0033:0x7fa9d4d5d68e [ 1168.726193][T23378] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1168.745989][T23378] RSP: 002b:00007fa9d5bbefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1168.754527][T23378] RAX: ffffffffffffffda RBX: 00007fa9d5bbf6c0 RCX: 00007fa9d4d5d68e [ 1168.762598][T23378] RDX: 000000000000000f RSI: 00007fa9d5bbf0a0 RDI: 0000000000000006 [ 1168.770586][T23378] RBP: 00007fa9d5bbf090 R08: 0000000000000000 R09: 0000000000000000 [ 1168.778575][T23378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1168.786648][T23378] R13: 00007fa9d5016038 R14: 00007fa9d5015fa0 R15: 00007fff69d4d878 [ 1168.794731][T23378] [ 1169.656191][T23404] netlink: 'syz.5.5790': attribute type 10 has an invalid length. [ 1169.666284][T23404] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5790'. [ 1169.691930][T23404] device dummy0 entered promiscuous mode [ 1169.733213][T23404] bridge0: port 3(dummy0) entered blocking state [ 1169.778837][T23404] bridge0: port 3(dummy0) entered disabled state [ 1169.935442][T23410] netlink: 'syz.3.5792': attribute type 10 has an invalid length. [ 1169.973825][T23410] netlink: 55 bytes leftover after parsing attributes in process `syz.3.5792'. [ 1170.240060][T23419] device veth0_vlan left promiscuous mode [ 1170.284944][T23419] device veth0_vlan entered promiscuous mode [ 1170.363169][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1170.392696][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1170.762457][T23435] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1170.770530][T23435] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1170.927834][T23435] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1170.955015][T23435] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1172.200687][T23462] netlink: 'syz.3.5808': attribute type 10 has an invalid length. [ 1172.222435][T23462] netlink: 55 bytes leftover after parsing attributes in process `syz.3.5808'. [ 1173.417704][T23483] netlink: 'syz.1.5814': attribute type 10 has an invalid length. [ 1174.864763][T23503] netlink: 'syz.6.5822': attribute type 10 has an invalid length. [ 1174.908886][T23503] netlink: 55 bytes leftover after parsing attributes in process `syz.6.5822'. [ 1176.028321][T23523] netlink: 'syz.3.5828': attribute type 10 has an invalid length. [ 1176.206811][T23532] device veth0_vlan left promiscuous mode [ 1176.263500][T23536] FAULT_INJECTION: forcing a failure. [ 1176.263500][T23536] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1176.294402][T23532] device veth0_vlan entered promiscuous mode [ 1176.298042][T23536] CPU: 0 PID: 23536 Comm: syz.1.5832 Not tainted syzkaller #0 [ 1176.307980][T23536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1176.318079][T23536] Call Trace: [ 1176.321406][T23536] [ 1176.324367][T23536] dump_stack_lvl+0x188/0x24e [ 1176.329112][T23536] ? show_regs_print_info+0x12/0x12 [ 1176.334437][T23536] ? load_image+0x400/0x400 [ 1176.338986][T23536] ? __lock_acquire+0x7d10/0x7d10 [ 1176.344052][T23536] ? snprintf+0xe5/0x140 [ 1176.348339][T23536] should_fail_ex+0x399/0x4d0 [ 1176.353057][T23536] _copy_to_user+0x2c/0x130 [ 1176.357603][T23536] simple_read_from_buffer+0xe3/0x150 [ 1176.363030][T23536] proc_fail_nth_read+0x1a6/0x220 [ 1176.368103][T23536] ? proc_fault_inject_write+0x310/0x310 [ 1176.373873][T23536] ? fsnotify_perm+0x248/0x550 [ 1176.378676][T23536] ? proc_fault_inject_write+0x310/0x310 [ 1176.384362][T23536] vfs_read+0x2de/0xa00 [ 1176.388568][T23536] ? kernel_read+0x1e0/0x1e0 [ 1176.393343][T23536] ? __fget_files+0x28/0x4b0 [ 1176.397952][T23536] ? __fget_files+0x28/0x4b0 [ 1176.402567][T23536] ? __fget_files+0x43d/0x4b0 [ 1176.403408][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1176.407339][T23536] ? __fdget_pos+0x2ae/0x360 [ 1176.407372][T23536] ? ksys_read+0x71/0x250 [ 1176.407401][T23536] ksys_read+0x14c/0x250 [ 1176.416748][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1176.419711][T23536] ? vfs_write+0xa30/0xa30 [ 1176.419750][T23536] ? lockdep_hardirqs_on+0x94/0x140 [ 1176.445362][T23536] do_syscall_64+0x4c/0xa0 [ 1176.449825][T23536] ? clear_bhb_loop+0x60/0xb0 [ 1176.454549][T23536] ? clear_bhb_loop+0x60/0xb0 [ 1176.459355][T23536] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1176.465298][T23536] RIP: 0033:0x7fd723b5d68e [ 1176.469761][T23536] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1176.489586][T23536] RSP: 002b:00007fd724a95fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1176.498050][T23536] RAX: ffffffffffffffda RBX: 00007fd724a966c0 RCX: 00007fd723b5d68e [ 1176.506066][T23536] RDX: 000000000000000f RSI: 00007fd724a960a0 RDI: 0000000000000004 [ 1176.514076][T23536] RBP: 00007fd724a96090 R08: 0000000000000000 R09: 0000000000000000 [ 1176.522074][T23536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1176.530186][T23536] R13: 00007fd723e16038 R14: 00007fd723e15fa0 R15: 00007fff0ed79188 [ 1176.538283][T23536] [ 1176.946362][T23543] netlink: 'syz.1.5835': attribute type 10 has an invalid length. [ 1176.961333][T23543] netlink: 55 bytes leftover after parsing attributes in process `syz.1.5835'. [ 1177.445793][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.452488][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.844168][T23556] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1177.854272][T23556] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1177.863197][T23556] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1177.873970][T23556] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1177.883332][T23556] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1177.891886][T23556] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1178.193432][T23555] chnl_net:caif_netlink_parms(): no params data found [ 1178.450358][ T4337] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1178.798219][ T4337] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1178.936850][T23555] bridge0: port 1(bridge_slave_0) entered blocking state [ 1179.004643][T23555] bridge0: port 1(bridge_slave_0) entered disabled state [ 1179.096538][T23555] device bridge_slave_0 entered promiscuous mode [ 1179.229537][ T4337] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1179.341826][T23555] bridge0: port 2(bridge_slave_1) entered blocking state [ 1179.349103][T23555] bridge0: port 2(bridge_slave_1) entered disabled state [ 1179.382271][T23555] device bridge_slave_1 entered promiscuous mode [ 1179.389715][T23576] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1179.413639][T23576] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1179.426801][T23576] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1179.438987][T23576] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1179.656987][T23578] netlink: 'syz.1.5845': attribute type 10 has an invalid length. [ 1179.710280][T23555] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1179.744453][T23582] netlink: 'syz.3.5846': attribute type 10 has an invalid length. [ 1179.798345][T23582] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5846'. [ 1179.830638][T23582] device dummy0 entered promiscuous mode [ 1179.901185][T23582] bridge0: port 4(dummy0) entered blocking state [ 1179.908610][T23582] bridge0: port 4(dummy0) entered disabled state [ 1180.166783][ T4290] Bluetooth: hci5: command 0x0409 tx timeout [ 1180.178528][T23555] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1180.405115][T23555] team0: Port device team_slave_0 added [ 1180.484835][T23555] team0: Port device team_slave_1 added [ 1180.610128][T23555] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1180.623738][T23555] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1180.660498][T23555] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1180.692806][T23555] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1180.711087][T23555] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1180.886980][T23555] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1180.924713][T23594] device veth0_vlan left promiscuous mode [ 1180.932006][T23594] device veth0_vlan entered promiscuous mode [ 1181.140111][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1181.170921][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1181.439352][T23605] netlink: 'syz.1.5857': attribute type 10 has an invalid length. [ 1181.638079][T23555] device hsr_slave_0 entered promiscuous mode [ 1181.691856][T23555] device hsr_slave_1 entered promiscuous mode [ 1181.706897][T23555] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1181.731219][T23555] Cannot create hsr debugfs directory [ 1182.153175][T23631] FAULT_INJECTION: forcing a failure. [ 1182.153175][T23631] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1182.187709][T23631] CPU: 0 PID: 23631 Comm: syz.5.5859 Not tainted syzkaller #0 [ 1182.195275][T23631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1182.205998][T23631] Call Trace: [ 1182.209324][T23631] [ 1182.212393][T23631] dump_stack_lvl+0x188/0x24e [ 1182.217125][T23631] ? show_regs_print_info+0x12/0x12 [ 1182.222377][T23631] ? load_image+0x400/0x400 [ 1182.227207][T23631] ? __lock_acquire+0x7d10/0x7d10 [ 1182.232386][T23631] ? snprintf+0xe5/0x140 [ 1182.236685][T23631] should_fail_ex+0x399/0x4d0 [ 1182.241504][T23631] _copy_to_user+0x2c/0x130 [ 1182.246058][T23631] simple_read_from_buffer+0xe3/0x150 [ 1182.247343][ T4290] Bluetooth: hci5: command 0x041b tx timeout [ 1182.251459][T23631] proc_fail_nth_read+0x1a6/0x220 [ 1182.251490][T23631] ? proc_fault_inject_write+0x310/0x310 [ 1182.251518][T23631] ? fsnotify_perm+0x248/0x550 [ 1182.273180][T23631] ? proc_fault_inject_write+0x310/0x310 [ 1182.278872][T23631] vfs_read+0x2de/0xa00 [ 1182.283107][T23631] ? kernel_read+0x1e0/0x1e0 [ 1182.287764][T23631] ? __fget_files+0x28/0x4b0 [ 1182.292549][T23631] ? __fget_files+0x28/0x4b0 [ 1182.297203][T23631] ? __fget_files+0x43d/0x4b0 [ 1182.302035][T23631] ? __fdget_pos+0x2ae/0x360 [ 1182.306674][T23631] ? ksys_read+0x71/0x250 [ 1182.311075][T23631] ksys_read+0x14c/0x250 [ 1182.315375][T23631] ? vfs_write+0xa30/0xa30 [ 1182.319853][T23631] ? lockdep_hardirqs_on+0x94/0x140 [ 1182.325105][T23631] do_syscall_64+0x4c/0xa0 [ 1182.329654][T23631] ? clear_bhb_loop+0x60/0xb0 [ 1182.334385][T23631] ? clear_bhb_loop+0x60/0xb0 [ 1182.339113][T23631] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1182.345152][T23631] RIP: 0033:0x7f0f5335d68e [ 1182.349615][T23631] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1182.369822][T23631] RSP: 002b:00007f0f541a4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1182.378295][T23631] RAX: ffffffffffffffda RBX: 00007f0f541a56c0 RCX: 00007f0f5335d68e [ 1182.386405][T23631] RDX: 000000000000000f RSI: 00007f0f541a50a0 RDI: 0000000000000004 [ 1182.394513][T23631] RBP: 00007f0f541a5090 R08: 0000000000000000 R09: 0000000000000000 [ 1182.402537][T23631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1182.410575][T23631] R13: 00007f0f53616038 R14: 00007f0f53615fa0 R15: 00007ffd6d5c0ee8 [ 1182.418631][T23631] [ 1183.738854][T23626] netlink: 14 bytes leftover after parsing attributes in process `syz.6.5858'. [ 1183.849036][T23626] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1183.929201][T23626] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1183.966373][T23626] bond0 (unregistering): Released all slaves [ 1184.321128][ T4290] Bluetooth: hci5: command 0x040f tx timeout [ 1184.513657][ T4337] device gretap0 left promiscuous mode [ 1184.524901][ T4337] Ÿë: port 1(gretap0) entered disabled state [ 1184.805410][T23670] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.5869'. [ 1185.127136][T23686] FAULT_INJECTION: forcing a failure. [ 1185.127136][T23686] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1185.150866][T23686] CPU: 1 PID: 23686 Comm: syz.5.5874 Not tainted syzkaller #0 [ 1185.158416][T23686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1185.168626][T23686] Call Trace: [ 1185.171957][T23686] [ 1185.175087][T23686] dump_stack_lvl+0x188/0x24e [ 1185.179905][T23686] ? show_regs_print_info+0x12/0x12 [ 1185.185143][T23686] ? load_image+0x400/0x400 [ 1185.189693][T23686] ? __lock_acquire+0x7d10/0x7d10 [ 1185.194760][T23686] should_fail_ex+0x399/0x4d0 [ 1185.199461][T23686] _copy_from_user+0x2c/0x170 [ 1185.204167][T23686] __sys_bpf+0x2ea/0x780 [ 1185.208425][T23686] ? bpf_link_show_fdinfo+0x380/0x380 [ 1185.213822][T23686] ? lock_chain_count+0x20/0x20 [ 1185.219002][T23686] __x64_sys_bpf+0x78/0x90 [ 1185.223500][T23686] do_syscall_64+0x4c/0xa0 [ 1185.227938][T23686] ? clear_bhb_loop+0x60/0xb0 [ 1185.232632][T23686] ? clear_bhb_loop+0x60/0xb0 [ 1185.237330][T23686] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1185.243264][T23686] RIP: 0033:0x7f0f5339ce59 [ 1185.247709][T23686] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1185.267854][T23686] RSP: 002b:00007f0f541a5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1185.276296][T23686] RAX: ffffffffffffffda RBX: 00007f0f53615fa0 RCX: 00007f0f5339ce59 [ 1185.284289][T23686] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 1185.292322][T23686] RBP: 00007f0f541a5090 R08: 0000000000000000 R09: 0000000000000000 [ 1185.300477][T23686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1185.308460][T23686] R13: 00007f0f53616038 R14: 00007f0f53615fa0 R15: 00007ffd6d5c0ee8 [ 1185.316501][T23686] [ 1185.894990][T23699] netlink: 'syz.6.5876': attribute type 2 has an invalid length. [ 1185.916169][T23699] netlink: 'syz.6.5876': attribute type 8 has an invalid length. [ 1185.948991][T23699] netlink: 132 bytes leftover after parsing attributes in process `syz.6.5876'. [ 1186.259150][T23555] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1186.273093][T23555] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1186.293835][T23555] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1186.401162][ T4290] Bluetooth: hci5: command 0x0419 tx timeout [ 1186.668746][T23555] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1186.680279][T23714] netlink: 'syz.5.5879': attribute type 10 has an invalid length. [ 1186.705628][T23714] netlink: 2 bytes leftover after parsing attributes in process `syz.5.5879'. [ 1186.748967][T23714] device bond0 entered promiscuous mode [ 1186.766844][T23714] device bond_slave_1 entered promiscuous mode [ 1186.773541][T23714] device batadv_slave_0 entered promiscuous mode [ 1186.782030][T23714] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1186.789460][T23714] bridge0: port 4(bond0) entered blocking state [ 1186.797131][T23714] bridge0: port 4(bond0) entered disabled state [ 1186.878546][ T4337] device veth0_to_team left promiscuous mode [ 1186.892839][ T4337] Ÿë: port 2(veth0_to_team) entered disabled state [ 1186.973717][ T4337] device hsr_slave_0 left promiscuous mode [ 1187.190917][ T4337] device hsr_slave_1 left promiscuous mode [ 1187.207881][ T4337] device bridge_slave_1 left promiscuous mode [ 1187.220071][ T4337] bridge0: port 2(bridge_slave_1) entered disabled state [ 1187.319720][ T4337] bridge0: port 1(bridge_slave_0) entered disabled state [ 1187.492876][ T4337] device veth1_macvtap left promiscuous mode [ 1187.538573][T23733] FAULT_INJECTION: forcing a failure. [ 1187.538573][T23733] name failslab, interval 1, probability 0, space 0, times 0 [ 1187.558541][ T4337] device veth0_macvtap left promiscuous mode [ 1187.591847][T23733] CPU: 1 PID: 23733 Comm: syz.1.5884 Not tainted syzkaller #0 [ 1187.599395][T23733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1187.606134][ T4337] device veth1_vlan left promiscuous mode [ 1187.609554][T23733] Call Trace: [ 1187.609567][T23733] [ 1187.609576][T23733] dump_stack_lvl+0x188/0x24e [ 1187.609608][T23733] ? show_regs_print_info+0x12/0x12 [ 1187.631588][T23733] ? load_image+0x400/0x400 [ 1187.636119][T23733] ? verify_lock_unused+0x140/0x140 [ 1187.641460][T23733] should_fail_ex+0x399/0x4d0 [ 1187.646549][T23733] should_failslab+0x5/0x20 [ 1187.651092][T23733] slab_pre_alloc_hook+0x59/0x310 [ 1187.656175][T23733] kmem_cache_alloc+0x56/0x2f0 [ 1187.660995][T23733] ? skb_clone+0x1e7/0x370 [ 1187.665467][T23733] skb_clone+0x1e7/0x370 [ 1187.669764][T23733] __netlink_deliver_tap+0x3ed/0x800 [ 1187.675118][T23733] ? netlink_deliver_tap+0x2e/0x1b0 [ 1187.680466][T23733] netlink_deliver_tap+0x19c/0x1b0 [ 1187.685634][T23733] netlink_unicast+0x728/0x8d0 [ 1187.690454][T23733] netlink_sendmsg+0x8ad/0xbd0 [ 1187.695275][T23733] ? netlink_getsockopt+0x550/0x550 [ 1187.700513][T23733] ? aa_sock_msg_perm+0x94/0x150 [ 1187.705564][T23733] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1187.710877][T23733] ? security_socket_sendmsg+0x7c/0xa0 [ 1187.716454][T23733] ? netlink_getsockopt+0x550/0x550 [ 1187.721851][T23733] ____sys_sendmsg+0x5be/0x970 [ 1187.726648][T23733] ? __sys_sendmsg_sock+0x30/0x30 [ 1187.731690][T23733] ? __import_iovec+0x315/0x500 [ 1187.736559][T23733] ? import_iovec+0x6f/0xa0 [ 1187.741091][T23733] ___sys_sendmsg+0x2a2/0x360 [ 1187.745815][T23733] ? __sys_sendmsg+0x290/0x290 [ 1187.750615][T23733] ? __lock_acquire+0x7d10/0x7d10 [ 1187.755679][T23733] __se_sys_sendmsg+0x1bb/0x2a0 [ 1187.760546][T23733] ? __x64_sys_sendmsg+0x80/0x80 [ 1187.765596][T23733] ? lockdep_hardirqs_on+0x94/0x140 [ 1187.770817][T23733] do_syscall_64+0x4c/0xa0 [ 1187.775287][T23733] ? clear_bhb_loop+0x60/0xb0 [ 1187.779975][T23733] ? clear_bhb_loop+0x60/0xb0 [ 1187.784677][T23733] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1187.790689][T23733] RIP: 0033:0x7fd723b9ce59 [ 1187.795201][T23733] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1187.814990][T23733] RSP: 002b:00007fd724a96028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1187.823503][T23733] RAX: ffffffffffffffda RBX: 00007fd723e15fa0 RCX: 00007fd723b9ce59 [ 1187.831482][T23733] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 1187.839459][T23733] RBP: 00007fd724a96090 R08: 0000000000000000 R09: 0000000000000000 [ 1187.847437][T23733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1187.855418][T23733] R13: 00007fd723e16038 R14: 00007fd723e15fa0 R15: 00007fff0ed79188 [ 1187.863760][T23733] [ 1188.054429][T23737] netlink: 17279 bytes leftover after parsing attributes in process `syz.3.5885'. [ 1188.597710][T23751] netlink: 'syz.3.5888': attribute type 7 has an invalid length. [ 1188.624820][T23751] netlink: 191184 bytes leftover after parsing attributes in process `syz.3.5888'. [ 1189.435284][ T4337] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1189.482481][ T4337] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1189.898573][ T4337] bond0 (unregistering): Released all slaves [ 1190.032275][T23728] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.5883'. [ 1190.042434][T23733] netlink: 'syz.1.5884': attribute type 10 has an invalid length. [ 1190.050330][T23733] netlink: 2 bytes leftover after parsing attributes in process `syz.1.5884'. [ 1190.060113][T23733] device bond0 entered promiscuous mode [ 1190.066164][T23733] device bond_slave_1 entered promiscuous mode [ 1190.074320][T23733] bridge0: port 3(bond0) entered blocking state [ 1190.080851][T23733] bridge0: port 3(bond0) entered disabled state [ 1190.239962][T23555] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1190.277712][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1190.305903][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1190.322929][T23555] 8021q: adding VLAN 0 to HW filter on device team0 [ 1190.347732][T18943] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1190.360223][T18943] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1190.372077][T18943] bridge0: port 1(bridge_slave_0) entered blocking state [ 1190.379341][T18943] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1190.429443][T18943] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1190.439477][T18943] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1190.455133][T18943] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1190.468802][T18943] bridge0: port 2(bridge_slave_1) entered blocking state [ 1190.476016][T18943] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1190.492667][T18943] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1190.516621][T18943] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1190.526420][T18943] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1190.536503][T18943] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1190.570474][T18943] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1190.582372][T18943] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1190.591961][T18943] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1190.617404][T23555] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1190.631458][T23555] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1190.646998][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1190.659681][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1190.674841][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1190.690287][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1190.699435][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1191.383503][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1191.403715][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1191.428375][T23555] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1191.547833][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1191.574624][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1191.670307][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1191.778833][T23798] netlink: 'syz.1.5897': attribute type 29 has an invalid length. [ 1191.801837][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1191.940158][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1191.977614][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1192.071405][T23798] netlink: 'syz.1.5897': attribute type 29 has an invalid length. [ 1192.119588][T23555] device veth0_vlan entered promiscuous mode [ 1192.150840][T23795] netlink: 'syz.1.5897': attribute type 29 has an invalid length. [ 1192.234436][T23800] netlink: 'syz.1.5897': attribute type 29 has an invalid length. [ 1192.287979][T23555] device veth1_vlan entered promiscuous mode [ 1192.383100][T23795] netlink: 'syz.1.5897': attribute type 10 has an invalid length. [ 1192.430499][T18943] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1192.484093][T18943] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1192.525748][T18942] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1192.550597][T18942] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1192.567368][T23825] FAULT_INJECTION: forcing a failure. [ 1192.567368][T23825] name failslab, interval 1, probability 0, space 0, times 0 [ 1192.580526][T23825] CPU: 0 PID: 23825 Comm: syz.3.5903 Not tainted syzkaller #0 [ 1192.588130][T23825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1192.598232][T23825] Call Trace: [ 1192.601556][T23825] [ 1192.604530][T23825] dump_stack_lvl+0x188/0x24e [ 1192.609262][T23825] ? show_regs_print_info+0x12/0x12 [ 1192.614592][T23825] ? load_image+0x400/0x400 [ 1192.619168][T23825] should_fail_ex+0x399/0x4d0 [ 1192.623903][T23825] should_failslab+0x5/0x20 [ 1192.628536][T23825] slab_pre_alloc_hook+0x59/0x310 [ 1192.633748][T23825] ? inet_bind2_bucket_find+0x5e/0x610 [ 1192.639267][T23825] kmem_cache_alloc+0x56/0x2f0 [ 1192.644213][T23825] ? __inet_hash_connect+0xbe0/0x18e0 [ 1192.649751][T23825] __inet_hash_connect+0xbe0/0x18e0 [ 1192.655038][T23825] ? inet_bhash2_reset_saddr+0x80/0x80 [ 1192.660561][T23825] ? rcu_is_watching+0x11/0xa0 [ 1192.665457][T23825] tcp_v4_connect+0xc96/0x18e0 [ 1192.670271][T23825] ? preempt_count_add+0x8d/0x190 [ 1192.675432][T23825] ? tcp_twsk_unique+0x990/0x990 [ 1192.680429][T23825] ? stack_trace_save+0xf0/0xf0 [ 1192.685418][T23825] ? tcp_v6_connect+0x6c6/0x18c0 [ 1192.690412][T23825] tcp_v6_connect+0xb0c/0x18c0 [ 1192.695254][T23825] ? tcp_v6_pre_connect+0xf0/0xf0 [ 1192.700340][T23825] ? __se_sys_sendmsg+0x1bb/0x2a0 [ 1192.705504][T23825] ? do_syscall_64+0x4c/0xa0 [ 1192.710145][T23825] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1192.716480][T23825] __inet_stream_connect+0x242/0xe10 [ 1192.722044][T23825] ? inet_dgram_connect+0x360/0x360 [ 1192.727322][T23825] tcp_sendmsg_fastopen+0x38f/0x600 [ 1192.732681][T23825] tcp_sendmsg_locked+0x3616/0x3a90 [ 1192.737941][T23825] ? verify_lock_unused+0x140/0x140 [ 1192.743220][T23825] ? mark_lock+0x94/0x320 [ 1192.747691][T23825] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1192.753730][T23825] ? lock_chain_count+0x20/0x20 [ 1192.758723][T23825] ? tcp_set_state+0x520/0x520 [ 1192.763555][T23825] tcp_sendmsg+0x2b/0x40 [ 1192.767854][T23825] ? inet6_compat_ioctl+0x3c0/0x3c0 [ 1192.773200][T23825] ____sys_sendmsg+0x5be/0x970 [ 1192.778031][T23825] ? __sys_sendmsg_sock+0x30/0x30 [ 1192.783101][T23825] ? __import_iovec+0x315/0x500 [ 1192.788075][T23825] ? import_iovec+0x6f/0xa0 [ 1192.792631][T23825] ___sys_sendmsg+0x2a2/0x360 [ 1192.797451][T23825] ? __sys_sendmsg+0x290/0x290 [ 1192.802286][T23825] ? __lock_acquire+0x7d10/0x7d10 [ 1192.807480][T23825] __se_sys_sendmsg+0x1bb/0x2a0 [ 1192.812384][T23825] ? __x64_sys_sendmsg+0x80/0x80 [ 1192.817470][T23825] ? lockdep_hardirqs_on+0x94/0x140 [ 1192.822725][T23825] do_syscall_64+0x4c/0xa0 [ 1192.827272][T23825] ? clear_bhb_loop+0x60/0xb0 [ 1192.832012][T23825] ? clear_bhb_loop+0x60/0xb0 [ 1192.836747][T23825] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1192.842873][T23825] RIP: 0033:0x7fa6fbf9ce59 [ 1192.847328][T23825] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1192.867069][T23825] RSP: 002b:00007fa6fa1f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1192.875549][T23825] RAX: ffffffffffffffda RBX: 00007fa6fc215fa0 RCX: 00007fa6fbf9ce59 [ 1192.883570][T23825] RDX: 0000000024044051 RSI: 0000200000000000 RDI: 0000000000000003 [ 1192.891640][T23825] RBP: 00007fa6fa1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1192.899767][T23825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1192.907800][T23825] R13: 00007fa6fc216038 R14: 00007fa6fc215fa0 R15: 00007fff80cc91c8 [ 1192.915934][T23825] [ 1192.937311][T23555] device veth0_macvtap entered promiscuous mode [ 1192.990307][T23555] device veth1_macvtap entered promiscuous mode [ 1193.137909][T23555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1193.161503][T23555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1193.183282][T23555] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1193.207114][T14956] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1193.240172][T14956] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1193.282359][T14956] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1193.296135][T14956] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1193.307918][T23555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1193.323362][T23555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1193.351012][T23555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1193.370485][T23555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1193.469028][T23555] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1193.506198][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1193.527064][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1193.751437][T23850] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.5909'. [ 1193.870810][T23555] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1193.883882][T23555] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1193.893635][T23555] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1193.906781][T23555] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1194.611690][T23864] netlink: 'syz.6.5911': attribute type 10 has an invalid length. [ 1194.743089][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1194.756220][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1194.786747][T23869] netlink: 'syz.1.5914': attribute type 10 has an invalid length. [ 1194.795096][T23869] netlink: 55 bytes leftover after parsing attributes in process `syz.1.5914'. [ 1194.826966][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1194.912767][ T4337] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1194.945351][ T4337] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1195.022057][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1195.174925][T23878] netlink: 'syz.3.5917': attribute type 29 has an invalid length. [ 1195.230058][T23878] netlink: 'syz.3.5917': attribute type 29 has an invalid length. [ 1195.328692][T23877] netlink: 'syz.3.5917': attribute type 29 has an invalid length. [ 1195.709234][T23888] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.5920'. [ 1195.890050][T23897] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.5923'. [ 1196.217948][T23900] FAULT_INJECTION: forcing a failure. [ 1196.217948][T23900] name failslab, interval 1, probability 0, space 0, times 0 [ 1196.311551][T23900] CPU: 1 PID: 23900 Comm: syz.5.5924 Not tainted syzkaller #0 [ 1196.319096][T23900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1196.329198][T23900] Call Trace: [ 1196.332516][T23900] [ 1196.335494][T23900] dump_stack_lvl+0x188/0x24e [ 1196.340223][T23900] ? show_regs_print_info+0x12/0x12 [ 1196.345460][T23900] ? load_image+0x400/0x400 [ 1196.350003][T23900] ? __might_sleep+0xd0/0xd0 [ 1196.354638][T23900] ? __lock_acquire+0x7d10/0x7d10 [ 1196.359717][T23900] should_fail_ex+0x399/0x4d0 [ 1196.364455][T23900] should_failslab+0x5/0x20 [ 1196.369114][T23900] slab_pre_alloc_hook+0x59/0x310 [ 1196.374173][T23900] ? apparmor_sk_alloc_security+0x74/0x100 [ 1196.380093][T23900] __kmem_cache_alloc_node+0x4f/0x260 [ 1196.385492][T23900] ? apparmor_sk_alloc_security+0x74/0x100 [ 1196.391318][T23900] kmalloc_trace+0x26/0xe0 [ 1196.395753][T23900] apparmor_sk_alloc_security+0x74/0x100 [ 1196.401401][T23900] security_sk_alloc+0x6a/0xa0 [ 1196.406195][T23900] sk_prot_alloc+0x101/0x210 [ 1196.410810][T23900] ? sk_alloc+0x20/0x340 [ 1196.415068][T23900] sk_alloc+0x36/0x340 [ 1196.419159][T23900] ? bpf_ctx_init+0x163/0x1a0 [ 1196.423849][T23900] ? bpf_prog_test_run_skb+0x275/0x1890 [ 1196.429526][T23900] bpf_prog_test_run_skb+0x371/0x1890 [ 1196.434930][T23900] ? __fget_files+0x28/0x4b0 [ 1196.439549][T23900] ? cpu_online+0xa0/0xa0 [ 1196.443915][T23900] bpf_prog_test_run+0x31e/0x390 [ 1196.448896][T23900] __sys_bpf+0x62b/0x780 [ 1196.453177][T23900] ? bpf_link_show_fdinfo+0x380/0x380 [ 1196.458584][T23900] ? lock_chain_count+0x20/0x20 [ 1196.463459][T23900] __x64_sys_bpf+0x78/0x90 [ 1196.467896][T23900] do_syscall_64+0x4c/0xa0 [ 1196.472339][T23900] ? clear_bhb_loop+0x60/0xb0 [ 1196.477033][T23900] ? clear_bhb_loop+0x60/0xb0 [ 1196.481747][T23900] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1196.487656][T23900] RIP: 0033:0x7f0f5339ce59 [ 1196.492172][T23900] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1196.511796][T23900] RSP: 002b:00007f0f541a5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1196.520309][T23900] RAX: ffffffffffffffda RBX: 00007f0f53615fa0 RCX: 00007f0f5339ce59 [ 1196.528291][T23900] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 1196.536273][T23900] RBP: 00007f0f541a5090 R08: 0000000000000000 R09: 0000000000000000 [ 1196.544263][T23900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1196.552420][T23900] R13: 00007f0f53616038 R14: 00007f0f53615fa0 R15: 00007ffd6d5c0ee8 [ 1196.560420][T23900] [ 1196.726470][T23905] netlink: 55 bytes leftover after parsing attributes in process `syz.3.5927'. [ 1197.025153][T23915] validate_nla: 4 callbacks suppressed [ 1197.025222][T23915] netlink: 'syz.2.5929': attribute type 10 has an invalid length. [ 1197.061649][T23915] netlink: 55 bytes leftover after parsing attributes in process `syz.2.5929'. [ 1197.761351][T23910] netlink: 'syz.5.5928': attribute type 10 has an invalid length. [ 1197.769439][T23921] netlink: 'syz.1.5925': attribute type 10 has an invalid length. [ 1198.163139][T23934] netlink: 'syz.5.5933': attribute type 29 has an invalid length. [ 1198.189757][T23934] netlink: 'syz.5.5933': attribute type 29 has an invalid length. [ 1198.263814][T23929] netlink: 'syz.5.5933': attribute type 29 has an invalid length. [ 1198.314756][T23929] netlink: 'syz.5.5933': attribute type 29 has an invalid length. [ 1198.445779][T23929] netlink: 'syz.5.5933': attribute type 10 has an invalid length. [ 1199.658901][T23954] netlink: 'syz.2.5941': attribute type 10 has an invalid length. [ 1199.691110][T23954] netlink: 55 bytes leftover after parsing attributes in process `syz.2.5941'. [ 1200.435496][T23956] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.5951'. [ 1200.512914][T23556] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1200.525785][T23556] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1200.534233][T23556] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1200.543370][T23556] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1200.551515][T23556] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1200.559294][T23556] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1200.876344][T23972] netlink: 'syz.1.5943': attribute type 10 has an invalid length. [ 1200.887000][T23972] netlink: 55 bytes leftover after parsing attributes in process `syz.1.5943'. [ 1201.093474][T18943] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1201.198442][T23973] team0: Port device wlan1 added [ 1201.424932][T18943] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1201.437961][T23964] chnl_net:caif_netlink_parms(): no params data found [ 1201.616697][T18943] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1201.646081][T23964] bridge0: port 1(bridge_slave_0) entered blocking state [ 1201.657227][T23964] bridge0: port 1(bridge_slave_0) entered disabled state [ 1201.698468][T23964] device bridge_slave_0 entered promiscuous mode [ 1201.756891][T23964] bridge0: port 2(bridge_slave_1) entered blocking state [ 1201.771194][T23964] bridge0: port 2(bridge_slave_1) entered disabled state [ 1201.789860][T23964] device bridge_slave_1 entered promiscuous mode [ 1201.915812][T23964] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1201.986425][T23964] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1202.089915][T23992] validate_nla: 7 callbacks suppressed [ 1202.089934][T23992] netlink: 'syz.6.5948': attribute type 10 has an invalid length. [ 1202.235151][T23964] team0: Port device team_slave_0 added [ 1202.278518][T23964] team0: Port device team_slave_1 added [ 1202.642086][ T4290] Bluetooth: hci2: command 0x0409 tx timeout [ 1202.839731][T23964] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1202.871844][T23964] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1203.060808][T23964] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1203.551734][T24009] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.5954'. [ 1203.565646][T23964] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1203.576675][T23964] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1203.613620][T23964] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1204.469202][T24021] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1204.486240][T24021] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1204.511660][T24021] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1204.619880][T24031] netlink: 'syz.6.5960': attribute type 10 has an invalid length. [ 1204.721784][ T4290] Bluetooth: hci2: command 0x041b tx timeout [ 1204.888791][T24045] netlink: 'syz.2.5962': attribute type 29 has an invalid length. [ 1205.364569][T24045] netlink: 'syz.2.5962': attribute type 29 has an invalid length. [ 1205.406551][T24039] netlink: 'syz.2.5962': attribute type 29 has an invalid length. [ 1205.441276][T24048] netlink: 'syz.1.5961': attribute type 10 has an invalid length. [ 1205.572532][T24047] netlink: 'syz.2.5962': attribute type 29 has an invalid length. [ 1206.064050][T23964] device hsr_slave_0 entered promiscuous mode [ 1206.119956][T23964] device hsr_slave_1 entered promiscuous mode [ 1206.146016][T24039] netlink: 'syz.2.5962': attribute type 10 has an invalid length. [ 1206.217407][T24039] team0 (unregistering): Port device team_slave_0 removed [ 1206.239157][T24039] team0 (unregistering): Port device team_slave_1 removed [ 1206.265192][T24039] team0 (unregistering): Port device wlan1 removed [ 1206.311970][T24068] netlink: 'syz.1.5969': attribute type 10 has an invalid length. [ 1206.321227][T24068] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5969'. [ 1206.330445][T24068] device dummy0 entered promiscuous mode [ 1206.338077][T24068] bridge0: port 4(dummy0) entered blocking state [ 1206.344780][T24068] bridge0: port 4(dummy0) entered disabled state [ 1206.802235][ T4290] Bluetooth: hci2: command 0x040f tx timeout [ 1207.333913][T24076] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5971'. [ 1207.468920][T24076] bridge0: port 3(bond0) entered disabled state [ 1207.522712][T24076] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1207.576416][T24076] device bond_slave_1 left promiscuous mode [ 1207.630407][T24076] bond0 (unregistering): Released all slaves [ 1207.676505][T24083] netlink: 'syz.2.5972': attribute type 10 has an invalid length. [ 1208.881217][ T4290] Bluetooth: hci2: command 0x0419 tx timeout [ 1209.087168][T24107] netlink: 'syz.2.5977': attribute type 10 has an invalid length. [ 1209.638381][T24122] netlink: 'syz.1.5979': attribute type 10 has an invalid length. [ 1209.654472][T24125] netlink: 'syz.6.5981': attribute type 29 has an invalid length. [ 1209.731184][T24125] netlink: 'syz.6.5981': attribute type 29 has an invalid length. [ 1209.948730][T18943] device hsr_slave_0 left promiscuous mode [ 1209.994636][T18943] device hsr_slave_1 left promiscuous mode [ 1210.071533][T18943] bridge0: port 4(dummy0) entered disabled state [ 1210.109695][T18943] bridge0: port 3(bond0) entered disabled state [ 1210.158713][T18943] device bridge_slave_1 left promiscuous mode [ 1210.225646][T18943] bridge0: port 2(bridge_slave_1) entered disabled state [ 1210.275434][T18943] bridge0: port 1(bridge_slave_0) entered disabled state [ 1210.370097][T18943] device veth1_macvtap left promiscuous mode [ 1210.417861][T18943] device veth1_vlan left promiscuous mode [ 1210.432192][T18943] device veth0_vlan left promiscuous mode [ 1211.378140][T18943] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1211.387008][T18943] device bond_slave_1 left promiscuous mode [ 1211.435488][T18943] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1211.445000][T18943] device bond_slave_0 left promiscuous mode [ 1211.716877][T18943] bond0 (unregistering): Released all slaves [ 1211.816578][T24124] netlink: 'syz.6.5981': attribute type 29 has an invalid length. [ 1211.833299][T24138] netlink: 'syz.6.5981': attribute type 10 has an invalid length. [ 1211.855502][T24151] netlink: 'syz.1.5986': attribute type 10 has an invalid length. [ 1212.132980][T23964] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1212.235017][T23964] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1212.262248][T23964] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1212.963235][T24159] netlink: 'syz.2.5989': attribute type 10 has an invalid length. [ 1212.973033][T24159] netlink: 55 bytes leftover after parsing attributes in process `syz.2.5989'. [ 1213.379694][T23964] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1213.444864][T24177] netlink: 12833 bytes leftover after parsing attributes in process `syz.2.5992'. [ 1213.505916][T24177] netlink: 71676 bytes leftover after parsing attributes in process `syz.2.5992'. [ 1213.712866][T24184] netlink: 'syz.6.5991': attribute type 10 has an invalid length. [ 1213.850496][T24188] : port 1(ip6gretap0) entered blocking state [ 1213.883747][T24188] : port 1(ip6gretap0) entered disabled state [ 1213.980944][T24188] device ip6gretap0 entered promiscuous mode [ 1214.029216][T24191] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5994'. [ 1214.050091][T24191] device hsr_slave_0 left promiscuous mode [ 1214.078141][T24191] device hsr_slave_1 left promiscuous mode [ 1214.167691][T24190] netlink: 'syz.5.5993': attribute type 10 has an invalid length. [ 1214.239968][T23964] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1214.288516][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1214.312774][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1214.355089][T23964] 8021q: adding VLAN 0 to HW filter on device team0 [ 1214.386504][T18942] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1214.431813][T18942] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1214.440420][T18942] bridge0: port 1(bridge_slave_0) entered blocking state [ 1214.447629][T18942] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1214.505112][T18942] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1214.523247][T18942] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1214.534809][T24212] netlink: 'syz.2.5997': attribute type 29 has an invalid length. [ 1214.556320][T18942] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1214.589402][T18942] bridge0: port 2(bridge_slave_1) entered blocking state [ 1214.596661][T18942] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1214.608472][T18942] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1214.659707][T18942] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1214.736149][T24208] netlink: 'syz.1.5998': attribute type 21 has an invalid length. [ 1214.782301][T24208] netlink: 'syz.1.5998': attribute type 6 has an invalid length. [ 1214.790813][T24208] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5998'. [ 1214.822451][T24212] netlink: 'syz.2.5997': attribute type 29 has an invalid length. [ 1214.830749][T24206] netlink: 'syz.2.5997': attribute type 29 has an invalid length. [ 1214.851607][T24216] netlink: 14975 bytes leftover after parsing attributes in process `syz.1.5998'. [ 1214.869509][T24204] netlink: 'syz.5.5996': attribute type 10 has an invalid length. [ 1214.935248][T24213] netlink: 'syz.2.5997': attribute type 29 has an invalid length. [ 1214.956446][T18943] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1214.997666][T18943] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1215.020180][T18943] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1215.124471][T18943] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1215.133497][T18943] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1215.145289][T18943] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1215.159759][T18943] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1215.207157][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1215.261856][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1215.363167][T23964] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1215.743911][T24237] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6002'. [ 1215.759158][T24244] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6003'. [ 1215.932009][T24242] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6002'. [ 1215.940893][T24237] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6002'. [ 1216.252419][T24253] FAULT_INJECTION: forcing a failure. [ 1216.252419][T24253] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1216.305292][T24253] CPU: 0 PID: 24253 Comm: syz.6.6005 Not tainted syzkaller #0 [ 1216.312845][T24253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1216.323154][T24253] Call Trace: [ 1216.326489][T24253] [ 1216.329465][T24253] dump_stack_lvl+0x188/0x24e [ 1216.334201][T24253] ? show_regs_print_info+0x12/0x12 [ 1216.339709][T24253] ? load_image+0x400/0x400 [ 1216.344266][T24253] ? __lock_acquire+0x7d10/0x7d10 [ 1216.349454][T24253] should_fail_ex+0x399/0x4d0 [ 1216.354149][T24253] _copy_from_user+0x2c/0x170 [ 1216.358849][T24253] ___sys_sendmsg+0x1c3/0x360 [ 1216.363541][T24253] ? __sys_sendmsg+0x290/0x290 [ 1216.368331][T24253] ? __lock_acquire+0x7d10/0x7d10 [ 1216.373411][T24253] __se_sys_sendmsg+0x1bb/0x2a0 [ 1216.378278][T24253] ? __x64_sys_sendmsg+0x80/0x80 [ 1216.383273][T24253] ? lockdep_hardirqs_on+0x94/0x140 [ 1216.388489][T24253] do_syscall_64+0x4c/0xa0 [ 1216.393010][T24253] ? clear_bhb_loop+0x60/0xb0 [ 1216.397704][T24253] ? clear_bhb_loop+0x60/0xb0 [ 1216.402485][T24253] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1216.408476][T24253] RIP: 0033:0x7f3ba3b9ce59 [ 1216.412915][T24253] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1216.432717][T24253] RSP: 002b:00007f3ba49bb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1216.441234][T24253] RAX: ffffffffffffffda RBX: 00007f3ba3e15fa0 RCX: 00007f3ba3b9ce59 [ 1216.449304][T24253] RDX: 0000000000000040 RSI: 0000200000000040 RDI: 0000000000000003 [ 1216.457285][T24253] RBP: 00007f3ba49bb090 R08: 0000000000000000 R09: 0000000000000000 [ 1216.465878][T24253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1216.473864][T24253] R13: 00007f3ba3e16038 R14: 00007f3ba3e15fa0 R15: 00007fffbef8f6c8 [ 1216.481879][T24253] [ 1216.494548][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1216.502909][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1216.520005][T23964] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1216.613822][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1216.632182][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1216.723253][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1216.747473][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1216.807683][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1216.845876][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1216.888235][T23964] device veth0_vlan entered promiscuous mode [ 1216.944622][T23964] device veth1_vlan entered promiscuous mode [ 1217.196823][T18942] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1217.223069][T18942] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1217.281558][T18942] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1217.342213][T18942] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1217.453779][T23964] device veth0_macvtap entered promiscuous mode [ 1217.490239][T23964] device veth1_macvtap entered promiscuous mode [ 1217.533276][T18942] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1217.603052][T18942] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1217.672587][T23964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1217.708064][T23964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1217.726584][T23964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1217.751318][T23964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1217.803730][T23964] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1217.890218][T14956] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1217.917949][T14956] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1217.950735][T23964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1217.969219][T23964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1217.987196][T23964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1217.997781][T23964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1218.013178][T23964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1218.076565][T23964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1218.098322][T23964] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1218.144860][T14956] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1218.159283][T14956] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1218.222123][T24299] __nla_validate_parse: 2 callbacks suppressed [ 1218.222145][T24299] netlink: 180 bytes leftover after parsing attributes in process `syz.2.6016'. [ 1218.270663][T23964] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1218.287900][T23964] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1218.348772][T23964] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1218.370500][T23964] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1218.632476][ T4372] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1218.666003][ T4372] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1218.689083][T14956] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1218.708590][T24309] netlink: 14 bytes leftover after parsing attributes in process `syz.2.6017'. [ 1218.728500][T24309] device hsr_slave_0 left promiscuous mode [ 1218.736789][T24309] device hsr_slave_1 left promiscuous mode [ 1218.840060][ T4372] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1218.849110][ T4372] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1218.857335][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1219.149498][T24316] netlink: 188 bytes leftover after parsing attributes in process `syz.3.5940'. [ 1219.187573][T24318] validate_nla: 7 callbacks suppressed [ 1219.187592][T24318] netlink: 'syz.6.6019': attribute type 29 has an invalid length. [ 1219.223383][T24316] ksmbd: Unknown IPC event: 10, ignore. [ 1219.236680][T24314] netlink: 14 bytes leftover after parsing attributes in process `syz.5.6028'. [ 1219.248353][T24318] netlink: 'syz.6.6019': attribute type 29 has an invalid length. [ 1219.584295][T24325] netlink: 'syz.6.6019': attribute type 29 has an invalid length. [ 1219.877266][T24333] netlink: 'syz.5.6023': attribute type 10 has an invalid length. [ 1219.987023][T24333] netlink: 55 bytes leftover after parsing attributes in process `syz.5.6023'. [ 1220.051666][T24330] netlink: 'syz.3.6024': attribute type 10 has an invalid length. [ 1220.952141][T24330] team0: Port device wlan1 added [ 1221.209708][T24354] netlink: 'syz.6.6031': attribute type 10 has an invalid length. [ 1222.099841][T24354] device veth1_macvtap left promiscuous mode [ 1222.254334][T24368] FAULT_INJECTION: forcing a failure. [ 1222.254334][T24368] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1222.371333][T24368] CPU: 0 PID: 24368 Comm: syz.3.6035 Not tainted syzkaller #0 [ 1222.378898][T24368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1222.388997][T24368] Call Trace: [ 1222.392315][T24368] [ 1222.395282][T24368] dump_stack_lvl+0x188/0x24e [ 1222.400009][T24368] ? show_regs_print_info+0x12/0x12 [ 1222.405262][T24368] ? load_image+0x400/0x400 [ 1222.409808][T24368] ? __lock_acquire+0x7d10/0x7d10 [ 1222.414877][T24368] should_fail_ex+0x399/0x4d0 [ 1222.419671][T24368] _copy_from_user+0x2c/0x170 [ 1222.424415][T24368] bpf_prog_test_run_skb+0x268/0x1890 [ 1222.429938][T24368] ? __fget_files+0x28/0x4b0 [ 1222.434623][T24368] ? __fget_files+0x28/0x4b0 [ 1222.439271][T24368] ? __fget_files+0x43d/0x4b0 [ 1222.444014][T24368] ? cpu_online+0xa0/0xa0 [ 1222.448417][T24368] bpf_prog_test_run+0x31e/0x390 [ 1222.453425][T24368] __sys_bpf+0x62b/0x780 [ 1222.457719][T24368] ? bpf_link_show_fdinfo+0x380/0x380 [ 1222.463162][T24368] ? lock_chain_count+0x20/0x20 [ 1222.468075][T24368] __x64_sys_bpf+0x78/0x90 [ 1222.472542][T24368] do_syscall_64+0x4c/0xa0 [ 1222.476995][T24368] ? clear_bhb_loop+0x60/0xb0 [ 1222.481716][T24368] ? clear_bhb_loop+0x60/0xb0 [ 1222.486538][T24368] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1222.492476][T24368] RIP: 0033:0x7fd12619ce59 [ 1222.497017][T24368] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1222.516672][T24368] RSP: 002b:00007fd127111028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1222.525138][T24368] RAX: ffffffffffffffda RBX: 00007fd126415fa0 RCX: 00007fd12619ce59 [ 1222.533175][T24368] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 1222.541283][T24368] RBP: 00007fd127111090 R08: 0000000000000000 R09: 0000000000000000 [ 1222.549292][T24368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1222.557315][T24368] R13: 00007fd126416038 R14: 00007fd126415fa0 R15: 00007ffd39204088 [ 1222.565351][T24368] [ 1222.714780][T24374] netlink: 'syz.6.6039': attribute type 10 has an invalid length. [ 1222.733288][T24376] netlink: 'syz.1.6038': attribute type 29 has an invalid length. [ 1222.746572][T24374] netlink: 55 bytes leftover after parsing attributes in process `syz.6.6039'. [ 1222.771045][T24376] netlink: 'syz.1.6038': attribute type 29 has an invalid length. [ 1222.874407][T24376] netlink: 'syz.1.6038': attribute type 29 has an invalid length. [ 1223.032298][T24387] FAULT_INJECTION: forcing a failure. [ 1223.032298][T24387] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1223.087037][T24387] CPU: 1 PID: 24387 Comm: syz.6.6042 Not tainted syzkaller #0 [ 1223.094672][T24387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1223.104742][T24387] Call Trace: [ 1223.108027][T24387] [ 1223.110970][T24387] dump_stack_lvl+0x188/0x24e [ 1223.115666][T24387] ? show_regs_print_info+0x12/0x12 [ 1223.120870][T24387] ? load_image+0x400/0x400 [ 1223.125397][T24387] ? __lock_acquire+0x7d10/0x7d10 [ 1223.130440][T24387] should_fail_ex+0x399/0x4d0 [ 1223.135131][T24387] _copy_from_user+0x2c/0x170 [ 1223.139825][T24387] get_user_ifreq+0x67/0x170 [ 1223.144426][T24387] inet_ioctl+0x31d/0x460 [ 1223.148770][T24387] ? inet_shutdown+0x370/0x370 [ 1223.153635][T24387] ? slab_free_freelist_hook+0x131/0x1a0 [ 1223.159288][T24387] ? tomoyo_path_number_perm+0x4fb/0x650 [ 1223.164934][T24387] ? __kmem_cache_free+0xb6/0x1f0 [ 1223.170008][T24387] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1223.175482][T24387] ? packet_ioctl+0x110/0x240 [ 1223.180185][T24387] sock_do_ioctl+0xfb/0x320 [ 1223.184702][T24387] ? sock_show_fdinfo+0xb0/0xb0 [ 1223.189576][T24387] sock_ioctl+0x4d2/0x710 [ 1223.193935][T24387] ? sock_poll+0x410/0x410 [ 1223.198454][T24387] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1223.203416][T24387] ? security_file_ioctl+0x7c/0xa0 [ 1223.208547][T24387] ? sock_poll+0x410/0x410 [ 1223.212972][T24387] __se_sys_ioctl+0xfa/0x170 [ 1223.217575][T24387] do_syscall_64+0x4c/0xa0 [ 1223.222091][T24387] ? clear_bhb_loop+0x60/0xb0 [ 1223.226878][T24387] ? clear_bhb_loop+0x60/0xb0 [ 1223.231658][T24387] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1223.237566][T24387] RIP: 0033:0x7f3ba3b9ce59 [ 1223.241991][T24387] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1223.261619][T24387] RSP: 002b:00007f3ba49bb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1223.270046][T24387] RAX: ffffffffffffffda RBX: 00007f3ba3e15fa0 RCX: 00007f3ba3b9ce59 [ 1223.278027][T24387] RDX: 00002000000007c0 RSI: 0000000000008915 RDI: 0000000000000003 [ 1223.286009][T24387] RBP: 00007f3ba49bb090 R08: 0000000000000000 R09: 0000000000000000 [ 1223.293991][T24387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1223.302058][T24387] R13: 00007f3ba3e16038 R14: 00007f3ba3e15fa0 R15: 00007fffbef8f6c8 [ 1223.310046][T24387] [ 1223.453102][T24391] netlink: 188 bytes leftover after parsing attributes in process `syz.1.6045'. [ 1223.471186][T24391] ksmbd: Unknown IPC event: 10, ignore. [ 1224.333788][T24410] Ÿë: port 1(veth0_to_team) entered blocking state [ 1224.386911][T24410] Ÿë: port 1(veth0_to_team) entered disabled state [ 1224.561221][T24410] device veth0_to_team entered promiscuous mode [ 1224.574689][T24422] FAULT_INJECTION: forcing a failure. [ 1224.574689][T24422] name failslab, interval 1, probability 0, space 0, times 0 [ 1224.610435][T24422] CPU: 0 PID: 24422 Comm: syz.6.6056 Not tainted syzkaller #0 [ 1224.617979][T24422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1224.628074][T24422] Call Trace: [ 1224.631372][T24422] [ 1224.634341][T24422] dump_stack_lvl+0x188/0x24e [ 1224.639047][T24422] ? show_regs_print_info+0x12/0x12 [ 1224.644255][T24422] ? load_image+0x400/0x400 [ 1224.648865][T24422] ? __might_sleep+0xd0/0xd0 [ 1224.653468][T24422] ? __lock_acquire+0x7d10/0x7d10 [ 1224.658514][T24422] should_fail_ex+0x399/0x4d0 [ 1224.663316][T24422] should_failslab+0x5/0x20 [ 1224.667849][T24422] slab_pre_alloc_hook+0x59/0x310 [ 1224.672896][T24422] ? rtnl_newlink+0x10c/0x20a0 [ 1224.677705][T24422] __kmem_cache_alloc_node+0x4f/0x260 [ 1224.683117][T24422] ? rtnl_newlink+0x10c/0x20a0 [ 1224.687903][T24422] kmalloc_trace+0x26/0xe0 [ 1224.692343][T24422] ? rtnl_setlink+0x510/0x510 [ 1224.697038][T24422] rtnl_newlink+0x10c/0x20a0 [ 1224.701649][T24422] ? __schedule+0x11d9/0x40e0 [ 1224.706353][T24422] ? __mutex_lock+0x806/0xaf0 [ 1224.711060][T24422] ? __lock_acquire+0x7d10/0x7d10 [ 1224.716123][T24422] ? do_raw_spin_lock+0x128/0x2f0 [ 1224.721173][T24422] ? rtnl_setlink+0x510/0x510 [ 1224.725866][T24422] ? __rwlock_init+0x140/0x140 [ 1224.730760][T24422] ? do_raw_spin_unlock+0x11d/0x230 [ 1224.735972][T24422] ? __mutex_lock+0x810/0xaf0 [ 1224.740666][T24422] ? __mutex_lock+0x3b2/0xaf0 [ 1224.745360][T24422] ? rtnetlink_rcv_msg+0x824/0xfc0 [ 1224.750488][T24422] ? mutex_lock_nested+0x10/0x10 [ 1224.755444][T24422] ? rtnetlink_rcv_msg+0x226/0xfc0 [ 1224.760742][T24422] ? rtnetlink_rcv_msg+0x226/0xfc0 [ 1224.765865][T24422] ? rtnl_setlink+0x510/0x510 [ 1224.770549][T24422] rtnetlink_rcv_msg+0x87c/0xfc0 [ 1224.775604][T24422] ? rtnetlink_bind+0x80/0x80 [ 1224.780290][T24422] ? __local_bh_enable_ip+0x136/0x1c0 [ 1224.785674][T24422] ? lockdep_hardirqs_on+0x94/0x140 [ 1224.790887][T24422] ? __local_bh_enable_ip+0x136/0x1c0 [ 1224.796283][T24422] ? _local_bh_enable+0xa0/0xa0 [ 1224.801248][T24422] ? __dev_queue_xmit+0x26b/0x37c0 [ 1224.806483][T24422] ? __dev_queue_xmit+0x26b/0x37c0 [ 1224.811608][T24422] ? __dev_queue_xmit+0x1cd2/0x37c0 [ 1224.816825][T24422] ? __dev_queue_xmit+0x26b/0x37c0 [ 1224.821985][T24422] ? ref_tracker_free+0x68c/0x840 [ 1224.827025][T24422] ? __copy_skb_header+0x3ba/0x4f0 [ 1224.832147][T24422] ? refcount_inc+0x70/0x70 [ 1224.836673][T24422] ? memcpy+0x3c/0x60 [ 1224.840669][T24422] ? __copy_skb_header+0x3ba/0x4f0 [ 1224.845793][T24422] ? __skb_clone+0x480/0x790 [ 1224.850419][T24422] netlink_rcv_skb+0x1fb/0x450 [ 1224.855206][T24422] ? rtnetlink_bind+0x80/0x80 [ 1224.859898][T24422] ? netlink_ack+0x1170/0x1170 [ 1224.864766][T24422] ? netlink_deliver_tap+0x2e/0x1b0 [ 1224.870008][T24422] netlink_unicast+0x74d/0x8d0 [ 1224.874906][T24422] netlink_sendmsg+0x8ad/0xbd0 [ 1224.879707][T24422] ? netlink_getsockopt+0x550/0x550 [ 1224.885176][T24422] ? aa_sock_msg_perm+0x94/0x150 [ 1224.890126][T24422] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1224.895419][T24422] ? security_socket_sendmsg+0x7c/0xa0 [ 1224.900984][T24422] ? netlink_getsockopt+0x550/0x550 [ 1224.906189][T24422] ____sys_sendmsg+0x5be/0x970 [ 1224.911061][T24422] ? __sys_sendmsg_sock+0x30/0x30 [ 1224.916501][T24422] ? __import_iovec+0x315/0x500 [ 1224.921388][T24422] ? import_iovec+0x6f/0xa0 [ 1224.925922][T24422] ___sys_sendmsg+0x2a2/0x360 [ 1224.930619][T24422] ? __sys_sendmsg+0x290/0x290 [ 1224.935538][T24422] ? __lock_acquire+0x7d10/0x7d10 [ 1224.940783][T24422] __se_sys_sendmsg+0x1bb/0x2a0 [ 1224.945650][T24422] ? __x64_sys_sendmsg+0x80/0x80 [ 1224.950695][T24422] ? lockdep_hardirqs_on+0x94/0x140 [ 1224.955909][T24422] do_syscall_64+0x4c/0xa0 [ 1224.960337][T24422] ? clear_bhb_loop+0x60/0xb0 [ 1224.965061][T24422] ? clear_bhb_loop+0x60/0xb0 [ 1224.969773][T24422] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1224.975860][T24422] RIP: 0033:0x7f3ba3b9ce59 [ 1224.980286][T24422] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1224.999927][T24422] RSP: 002b:00007f3ba49bb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1225.008456][T24422] RAX: ffffffffffffffda RBX: 00007f3ba3e15fa0 RCX: 00007f3ba3b9ce59 [ 1225.016453][T24422] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000003 [ 1225.024440][T24422] RBP: 00007f3ba49bb090 R08: 0000000000000000 R09: 0000000000000000 [ 1225.032455][T24422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1225.040439][T24422] R13: 00007f3ba3e16038 R14: 00007f3ba3e15fa0 R15: 00007fffbef8f6c8 [ 1225.048441][T24422] [ 1225.805880][T24430] validate_nla: 1 callbacks suppressed [ 1225.805950][T24430] netlink: 'syz.6.6059': attribute type 10 has an invalid length. [ 1226.331952][T24441] netlink: 'syz.5.6061': attribute type 10 has an invalid length. [ 1227.920038][T24469] netlink: 'syz.3.6070': attribute type 10 has an invalid length. [ 1227.993240][T24467] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.6069'. [ 1229.089843][T24469] device veth1_macvtap left promiscuous mode [ 1229.158628][T24467] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 1229.183841][T24483] netlink: 'syz.5.6073': attribute type 10 has an invalid length. [ 1229.561994][T24493] netlink: 'syz.2.6075': attribute type 29 has an invalid length. [ 1229.570232][T24493] netlink: 'syz.2.6075': attribute type 29 has an invalid length. [ 1229.621241][T24488] netlink: 'syz.2.6075': attribute type 29 has an invalid length. [ 1229.650897][T24494] netlink: 'syz.2.6075': attribute type 29 has an invalid length. [ 1229.695908][T24490] netlink: 'syz.5.6086': attribute type 10 has an invalid length. [ 1229.755866][T24492] netlink: 'syz.1.6076': attribute type 10 has an invalid length. [ 1231.893540][T24527] validate_nla: 1 callbacks suppressed [ 1231.893563][T24527] netlink: 'syz.5.6085': attribute type 10 has an invalid length. [ 1231.987020][T24527] device veth1_macvtap left promiscuous mode [ 1232.122046][T24535] netlink: 'syz.3.6089': attribute type 10 has an invalid length. [ 1232.738141][T24536] netlink: 'syz.2.6088': attribute type 10 has an invalid length. [ 1232.791182][T24542] netlink: 48 bytes leftover after parsing attributes in process `syz.6.6090'. [ 1233.427276][T24562] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.6097'. [ 1233.546496][T24559] netlink: 'syz.1.6096': attribute type 10 has an invalid length. [ 1234.749030][T24574] netlink: 'syz.3.6102': attribute type 10 has an invalid length. [ 1234.771285][T24581] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 1234.828221][T24581] dvmrp1: linktype set to 768 [ 1234.934353][T24579] Ÿë: port 1(veth0_to_team) entered blocking state [ 1234.962199][T24579] Ÿë: port 1(veth0_to_team) entered disabled state [ 1234.995411][T24579] device veth0_to_team entered promiscuous mode [ 1235.094770][T24587] netlink: 'syz.3.6104': attribute type 7 has an invalid length. [ 1235.141014][T24587] netlink: 148 bytes leftover after parsing attributes in process `syz.3.6104'. [ 1235.946915][T24600] netlink: 'syz.1.6106': attribute type 10 has an invalid length. [ 1236.475916][T24611] netlink: 'syz.5.6111': attribute type 29 has an invalid length. [ 1237.020480][T24611] netlink: 'syz.5.6111': attribute type 29 has an invalid length. [ 1237.233207][T24610] netlink: 'syz.5.6111': attribute type 29 has an invalid length. [ 1237.277542][T24612] netlink: 'syz.5.6111': attribute type 29 has an invalid length. [ 1237.356752][T24610] netlink: 'syz.5.6111': attribute type 10 has an invalid length. [ 1237.639695][T24620] netlink: 'syz.1.6114': attribute type 10 has an invalid length. [ 1237.897995][T24623] netlink: 'syz.6.6113': attribute type 10 has an invalid length. [ 1238.013414][T24631] device sit0 entered promiscuous mode [ 1239.051612][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.058220][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1241.306848][T24669] netlink: 'syz.3.6128': attribute type 29 has an invalid length. [ 1241.408563][T24669] netlink: 'syz.3.6128': attribute type 29 has an invalid length. [ 1241.554725][T24663] netlink: 'syz.3.6128': attribute type 29 has an invalid length. [ 1241.579357][T24671] netlink: 'syz.3.6128': attribute type 29 has an invalid length. [ 1242.598833][T24678] validate_nla: 4 callbacks suppressed [ 1242.598854][T24678] netlink: 'syz.3.6128': attribute type 10 has an invalid length. [ 1242.838733][T24678] team0 (unregistering): Port device team_slave_0 removed [ 1242.904794][T24678] team0 (unregistering): Port device team_slave_1 removed [ 1242.935158][T24678] team0 (unregistering): Port device wlan1 removed [ 1243.047620][T24684] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6131'. [ 1243.073896][T24684] FAULT_INJECTION: forcing a failure. [ 1243.073896][T24684] name failslab, interval 1, probability 0, space 0, times 0 [ 1243.108772][T24684] CPU: 1 PID: 24684 Comm: syz.1.6131 Not tainted syzkaller #0 [ 1243.116370][T24684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1243.126481][T24684] Call Trace: [ 1243.129805][T24684] [ 1243.132780][T24684] dump_stack_lvl+0x188/0x24e [ 1243.137525][T24684] ? show_regs_print_info+0x12/0x12 [ 1243.142778][T24684] ? load_image+0x400/0x400 [ 1243.147353][T24684] ? __lock_acquire+0x7d10/0x7d10 [ 1243.152430][T24684] ? perf_trace_lock+0x301/0x390 [ 1243.157427][T24684] should_fail_ex+0x399/0x4d0 [ 1243.162168][T24684] should_failslab+0x5/0x20 [ 1243.166732][T24684] slab_pre_alloc_hook+0x59/0x310 [ 1243.171808][T24684] ? mark_lock+0x94/0x320 [ 1243.176193][T24684] ? sock_kmalloc+0x92/0xf0 [ 1243.180755][T24684] __kmem_cache_alloc_node+0x4f/0x260 [ 1243.186200][T24684] ? sock_kmalloc+0x92/0xf0 [ 1243.190767][T24684] __kmalloc+0xa0/0x240 [ 1243.195001][T24684] sock_kmalloc+0x92/0xf0 [ 1243.199383][T24684] __ipv6_sock_mc_join+0x439/0x7b0 [ 1243.204560][T24684] ipv6_mc_config+0x64/0xc0 [ 1243.209143][T24684] inet6_addr_add+0x263/0x9b0 [ 1243.213888][T24684] ? ipv6_mc_up+0x240/0x2f0 [ 1243.218468][T24684] inet6_rtm_newaddr+0x673/0x900 [ 1243.223488][T24684] ? inet6_dump_ifinfo+0x940/0x940 [ 1243.228703][T24684] ? rtnetlink_rcv_msg+0x226/0xfc0 [ 1243.233963][T24684] ? rtnetlink_rcv_msg+0x226/0xfc0 [ 1243.239123][T24684] ? inet6_dump_ifinfo+0x940/0x940 [ 1243.244287][T24684] rtnetlink_rcv_msg+0x87c/0xfc0 [ 1243.249300][T24684] ? rtnetlink_bind+0x80/0x80 [ 1243.254085][T24684] ? __dev_queue_xmit+0x1cd2/0x37c0 [ 1243.259372][T24684] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 1243.265170][T24684] ? perf_trace_lock+0x301/0x390 [ 1243.270185][T24684] ? __copy_skb_header+0x3ba/0x4f0 [ 1243.275440][T24684] ? trace_event_raw_event_lock+0x250/0x250 [ 1243.281505][T24684] ? __skb_clone+0x480/0x790 [ 1243.286173][T24684] netlink_rcv_skb+0x1fb/0x450 [ 1243.290995][T24684] ? rtnetlink_bind+0x80/0x80 [ 1243.295738][T24684] ? netlink_ack+0x1170/0x1170 [ 1243.300578][T24684] ? netlink_deliver_tap+0x2e/0x1b0 [ 1243.305923][T24684] netlink_unicast+0x74d/0x8d0 [ 1243.310753][T24684] netlink_sendmsg+0x8ad/0xbd0 [ 1243.315586][T24684] ? netlink_getsockopt+0x550/0x550 [ 1243.320917][T24684] ? aa_sock_msg_perm+0x94/0x150 [ 1243.325914][T24684] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1243.331255][T24684] ? security_socket_sendmsg+0x7c/0xa0 [ 1243.336756][T24684] ? netlink_getsockopt+0x550/0x550 [ 1243.342118][T24684] ____sys_sendmsg+0x5be/0x970 [ 1243.347052][T24684] ? __sys_sendmsg_sock+0x30/0x30 [ 1243.352212][T24684] ? __import_iovec+0x315/0x500 [ 1243.357135][T24684] ? import_iovec+0x6f/0xa0 [ 1243.361697][T24684] ___sys_sendmsg+0x2a2/0x360 [ 1243.366560][T24684] ? __sys_sendmsg+0x290/0x290 [ 1243.371439][T24684] ? __lock_acquire+0x7d10/0x7d10 [ 1243.376657][T24684] __se_sys_sendmsg+0x1bb/0x2a0 [ 1243.381558][T24684] ? __x64_sys_sendmsg+0x80/0x80 [ 1243.386575][T24684] ? lockdep_hardirqs_on+0x94/0x140 [ 1243.391838][T24684] do_syscall_64+0x4c/0xa0 [ 1243.396331][T24684] ? clear_bhb_loop+0x60/0xb0 [ 1243.401046][T24684] ? clear_bhb_loop+0x60/0xb0 [ 1243.405770][T24684] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1243.411699][T24684] RIP: 0033:0x7fd723b9ce59 [ 1243.416161][T24684] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1243.435808][T24684] RSP: 002b:00007fd724a96028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1243.444360][T24684] RAX: ffffffffffffffda RBX: 00007fd723e15fa0 RCX: 00007fd723b9ce59 [ 1243.452395][T24684] RDX: 0000000020004c04 RSI: 0000200000000080 RDI: 0000000000000004 [ 1243.460413][T24684] RBP: 00007fd724a96090 R08: 0000000000000000 R09: 0000000000000000 [ 1243.468503][T24684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1243.476538][T24684] R13: 00007fd723e16038 R14: 00007fd723e15fa0 R15: 00007fff0ed79188 [ 1243.484599][T24684] [ 1243.835056][T24698] bridge0: port 2(bridge_slave_1) entered disabled state [ 1243.851027][T24698] bridge0: port 1(bridge_slave_0) entered disabled state [ 1244.186539][T24695] netlink: 'syz.5.6134': attribute type 10 has an invalid length. [ 1244.573665][T24716] netlink: 'syz.3.6140': attribute type 10 has an invalid length. [ 1245.194736][T24744] netlink: 'syz.1.6147': attribute type 29 has an invalid length. [ 1245.295504][T24744] netlink: 'syz.1.6147': attribute type 29 has an invalid length. [ 1245.500648][T24741] netlink: 'syz.1.6147': attribute type 29 has an invalid length. [ 1245.505636][T24733] netlink: 'syz.6.6142': attribute type 29 has an invalid length. [ 1245.554332][T24744] netlink: 'syz.1.6147': attribute type 29 has an invalid length. [ 1245.687401][T24733] netlink: 'syz.6.6142': attribute type 29 has an invalid length. [ 1245.785420][T24749] netlink: 'syz.6.6142': attribute type 29 has an invalid length. [ 1248.024125][T24778] validate_nla: 1 callbacks suppressed [ 1248.024172][T24778] netlink: 'syz.1.6154': attribute type 10 has an invalid length. [ 1248.118345][T24791] device macvlan1 entered promiscuous mode [ 1248.431786][T24801] netlink: 'syz.1.6160': attribute type 29 has an invalid length. [ 1248.450734][T24794] netlink: 13695 bytes leftover after parsing attributes in process `syz.3.6158'. [ 1248.470614][T24801] netlink: 'syz.1.6160': attribute type 29 has an invalid length. [ 1248.557760][T24799] netlink: 'syz.1.6160': attribute type 29 has an invalid length. [ 1248.581685][T24802] netlink: 'syz.1.6160': attribute type 29 has an invalid length. [ 1248.594411][T24790] netlink: 'syz.6.6155': attribute type 10 has an invalid length. [ 1249.645057][T24822] netlink: 'syz.2.6163': attribute type 29 has an invalid length. [ 1251.829003][T24815] netlink: 'syz.1.6160': attribute type 10 has an invalid length. [ 1251.868017][T24822] netlink: 'syz.2.6163': attribute type 29 has an invalid length. [ 1252.141375][T24831] netlink: 156 bytes leftover after parsing attributes in process `syz.6.6167'. [ 1252.176781][T24835] netlink: 'syz.2.6169': attribute type 3 has an invalid length. [ 1252.222275][T24835] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.6169'. [ 1252.987854][T24860] netlink: 126588 bytes leftover after parsing attributes in process `syz.5.6177'. [ 1253.328745][T24866] validate_nla: 3 callbacks suppressed [ 1253.328765][T24866] netlink: 'syz.2.6173': attribute type 10 has an invalid length. [ 1253.468579][T24874] netlink: 'syz.1.6180': attribute type 29 has an invalid length. [ 1253.488039][T24874] netlink: 'syz.1.6180': attribute type 29 has an invalid length. [ 1253.499206][T24872] netlink: 'syz.1.6180': attribute type 29 has an invalid length. [ 1253.527749][T24874] netlink: 'syz.1.6180': attribute type 29 has an invalid length. [ 1254.003319][T24880] netlink: 'syz.1.6180': attribute type 10 has an invalid length. [ 1254.632722][T24894] netlink: 'syz.6.6186': attribute type 10 has an invalid length. [ 1255.424622][T24906] netlink: 13951 bytes leftover after parsing attributes in process `syz.6.6189'. [ 1256.103832][T24919] netlink: 'syz.2.6193': attribute type 10 has an invalid length. [ 1256.583210][T24928] netlink: 'syz.3.6196': attribute type 10 has an invalid length. [ 1257.528656][T24941] netlink: 'syz.5.6199': attribute type 10 has an invalid length. [ 1257.817666][T24954] netlink: 127868 bytes leftover after parsing attributes in process `syz.5.6202'. [ 1257.873955][T24954] netlink: 60 bytes leftover after parsing attributes in process `syz.5.6202'. [ 1257.911706][T24954] netlink: 60 bytes leftover after parsing attributes in process `syz.5.6202'. [ 1258.481183][T24975] FAULT_INJECTION: forcing a failure. [ 1258.481183][T24975] name failslab, interval 1, probability 0, space 0, times 0 [ 1258.494898][T24973] validate_nla: 5 callbacks suppressed [ 1258.494918][T24973] netlink: 'syz.3.6208': attribute type 10 has an invalid length. [ 1258.561014][T24975] CPU: 0 PID: 24975 Comm: syz.2.6210 Not tainted syzkaller #0 [ 1258.568646][T24975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1258.578745][T24975] Call Trace: [ 1258.582067][T24975] [ 1258.585040][T24975] dump_stack_lvl+0x188/0x24e [ 1258.589777][T24975] ? show_regs_print_info+0x12/0x12 [ 1258.595026][T24975] ? load_image+0x400/0x400 [ 1258.599596][T24975] ? kasan_set_track+0x60/0x70 [ 1258.604416][T24975] ? kasan_set_track+0x4b/0x70 [ 1258.609244][T24975] ? __kasan_slab_alloc+0x6b/0x80 [ 1258.614317][T24975] ? slab_post_alloc_hook+0x4b/0x480 [ 1258.619698][T24975] should_fail_ex+0x399/0x4d0 [ 1258.624427][T24975] should_failslab+0x5/0x20 [ 1258.628921][T24973] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6208'. [ 1258.628950][T24975] slab_pre_alloc_hook+0x59/0x310 [ 1258.642966][T24975] ? ref_tracker_alloc+0x14e/0x4b0 [ 1258.648147][T24975] __kmem_cache_alloc_node+0x4f/0x260 [ 1258.653577][T24975] ? ref_tracker_alloc+0x14e/0x4b0 [ 1258.658829][T24975] kmalloc_trace+0x26/0xe0 [ 1258.663469][T24975] ref_tracker_alloc+0x14e/0x4b0 [ 1258.668457][T24975] ? ref_tracker_dir_print+0x150/0x150 [ 1258.673965][T24975] ? __kasan_slab_alloc+0x6b/0x80 [ 1258.679032][T24975] ? slab_post_alloc_hook+0x67/0x480 [ 1258.684366][T24975] dst_init+0xda/0x410 [ 1258.688489][T24975] dst_alloc+0x12a/0x160 [ 1258.692857][T24975] ip_route_output_key_hash_rcu+0x14a4/0x23f0 [ 1258.698960][T24975] ? ip_route_output_key_hash_rcu+0x1331/0x23f0 [ 1258.705359][T24975] ? ip_route_output_key_hash+0x139/0x330 [ 1258.711220][T24975] ip_route_output_key_hash+0x1ef/0x330 [ 1258.716823][T24975] ? ip_route_input_rcu+0x3160/0x3160 [ 1258.722250][T24975] ? ip_cmsg_send+0x9a5/0xa50 [ 1258.727089][T24975] ip_route_output_flow+0x26/0x150 [ 1258.732250][T24975] ? security_sk_classify_flow+0x77/0x90 [ 1258.737931][T24975] udp_sendmsg+0x1626/0x23b0 [ 1258.742576][T24975] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 1258.747499][T24975] ? udp_cmsg_send+0x350/0x350 [ 1258.752444][T24975] ? verify_lock_unused+0x140/0x140 [ 1258.757711][T24975] ? verify_lock_unused+0x140/0x140 [ 1258.762976][T24975] ? release_sock+0x2b/0x1b0 [ 1258.765454][T24973] netlink: 'syz.3.6208': attribute type 10 has an invalid length. [ 1258.767597][T24975] udpv6_sendmsg+0x86c/0x2420 [ 1258.780228][T24975] ? udp_v6_early_demux+0xf80/0xf80 [ 1258.785484][T24975] ? ct_irq_exit_irqson+0x113/0x170 [ 1258.790745][T24975] ? lock_chain_count+0x20/0x20 [ 1258.795671][T24975] ? _local_bh_enable+0xa0/0xa0 [ 1258.800572][T24975] ? inet_send_prepare+0x1af/0x260 [ 1258.801485][T24973] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6208'. [ 1258.805715][T24975] ? inet_send_prepare+0x1af/0x260 [ 1258.805747][T24975] ? inet6_sendmsg+0x5b/0xd0 [ 1258.824609][T24975] ? inet6_compat_ioctl+0x3c0/0x3c0 [ 1258.829869][T24975] ____sys_sendmsg+0x5be/0x970 [ 1258.834750][T24975] ? __sys_sendmsg_sock+0x30/0x30 [ 1258.839829][T24975] ? __import_iovec+0x315/0x500 [ 1258.844767][T24975] ? import_iovec+0x6f/0xa0 [ 1258.849409][T24975] ___sys_sendmsg+0x2a2/0x360 [ 1258.854140][T24975] ? __sys_sendmsg+0x290/0x290 [ 1258.858998][T24975] __se_sys_sendmsg+0x1bb/0x2a0 [ 1258.863929][T24975] ? __x64_sys_sendmsg+0x80/0x80 [ 1258.868931][T24975] ? lockdep_hardirqs_on+0x94/0x140 [ 1258.874181][T24975] do_syscall_64+0x4c/0xa0 [ 1258.878654][T24975] ? clear_bhb_loop+0x60/0xb0 [ 1258.883385][T24975] ? clear_bhb_loop+0x60/0xb0 [ 1258.888217][T24975] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1258.894171][T24975] RIP: 0033:0x7f6c9739ce59 [ 1258.898687][T24975] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1258.918518][T24975] RSP: 002b:00007f6c98175028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1258.926993][T24975] RAX: ffffffffffffffda RBX: 00007f6c97615fa0 RCX: 00007f6c9739ce59 [ 1258.935028][T24975] RDX: 0000000000000840 RSI: 0000200000000380 RDI: 0000000000000003 [ 1258.937222][T24971] netlink: 'syz.6.6207': attribute type 10 has an invalid length. [ 1258.943020][T24975] RBP: 00007f6c98175090 R08: 0000000000000000 R09: 0000000000000000 [ 1258.943039][T24975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1258.943052][T24975] R13: 00007f6c97616038 R14: 00007f6c97615fa0 R15: 00007ffe913c2e38 [ 1258.943083][T24975] [ 1259.068117][T24980] FAULT_INJECTION: forcing a failure. [ 1259.068117][T24980] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1259.082238][T23556] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1259.099702][T24980] CPU: 0 PID: 24980 Comm: syz.5.6211 Not tainted syzkaller #0 [ 1259.107233][T24980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1259.117305][T24980] Call Trace: [ 1259.120687][T24980] [ 1259.123637][T24980] dump_stack_lvl+0x188/0x24e [ 1259.128342][T24980] ? show_regs_print_info+0x12/0x12 [ 1259.133582][T24980] ? load_image+0x400/0x400 [ 1259.138114][T24980] ? __lock_acquire+0x7d10/0x7d10 [ 1259.143161][T24980] ? snprintf+0xe5/0x140 [ 1259.147429][T24980] should_fail_ex+0x399/0x4d0 [ 1259.152145][T24980] _copy_to_user+0x2c/0x130 [ 1259.156674][T24980] simple_read_from_buffer+0xe3/0x150 [ 1259.162069][T24980] proc_fail_nth_read+0x1a6/0x220 [ 1259.167118][T24980] ? proc_fault_inject_write+0x310/0x310 [ 1259.172771][T24980] ? fsnotify_perm+0x248/0x550 [ 1259.177559][T24980] ? proc_fault_inject_write+0x310/0x310 [ 1259.183212][T24980] vfs_read+0x2de/0xa00 [ 1259.187400][T24980] ? kernel_read+0x1e0/0x1e0 [ 1259.192014][T24980] ? __fget_files+0x28/0x4b0 [ 1259.196621][T24980] ? __fget_files+0x28/0x4b0 [ 1259.201237][T24980] ? __fget_files+0x43d/0x4b0 [ 1259.206035][T24980] ? __fdget_pos+0x2ae/0x360 [ 1259.210748][T24980] ? ksys_read+0x71/0x250 [ 1259.215108][T24980] ksys_read+0x14c/0x250 [ 1259.219382][T24980] ? vfs_write+0xa30/0xa30 [ 1259.223832][T24980] ? lockdep_hardirqs_on+0x94/0x140 [ 1259.229061][T24980] do_syscall_64+0x4c/0xa0 [ 1259.233577][T24980] ? clear_bhb_loop+0x60/0xb0 [ 1259.238279][T24980] ? clear_bhb_loop+0x60/0xb0 [ 1259.243006][T24980] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1259.248950][T24980] RIP: 0033:0x7f0f5335d68e [ 1259.253487][T24980] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1259.273123][T24980] RSP: 002b:00007f0f541a4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1259.281668][T24980] RAX: ffffffffffffffda RBX: 00007f0f541a56c0 RCX: 00007f0f5335d68e [ 1259.289660][T24980] RDX: 000000000000000f RSI: 00007f0f541a50a0 RDI: 000000000000000c [ 1259.297650][T24980] RBP: 00007f0f541a5090 R08: 0000000000000000 R09: 0000000000000000 [ 1259.305639][T24980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1259.313798][T24980] R13: 00007f0f53616038 R14: 00007f0f53615fa0 R15: 00007ffd6d5c0ee8 [ 1259.321815][T24980] [ 1259.360560][T23556] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1259.370389][T23556] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1259.379460][T23556] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1259.387469][T23556] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1259.394919][T23556] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1259.763589][T24985] netlink: 'syz.2.6212': attribute type 10 has an invalid length. [ 1260.198710][T18942] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1260.962768][T18942] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1261.179626][T25016] netlink: 'syz.2.6223': attribute type 3 has an invalid length. [ 1261.197322][T18942] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1261.197991][T25016] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.6223'. [ 1261.384368][T25022] netlink: 'syz.5.6224': attribute type 10 has an invalid length. [ 1261.451181][T23556] Bluetooth: hci1: command 0x0409 tx timeout [ 1261.568300][T24981] chnl_net:caif_netlink_parms(): no params data found [ 1262.115707][T18942] device ip6gretap0 left promiscuous mode [ 1262.123040][T18942] : port 1(ip6gretap0) entered disabled state [ 1262.308170][T25049] netlink: 'syz.5.6231': attribute type 4 has an invalid length. [ 1262.346568][T25049] netlink: 128124 bytes leftover after parsing attributes in process `syz.5.6231'. [ 1262.495505][T24981] bridge0: port 1(bridge_slave_0) entered blocking state [ 1262.505118][T24981] bridge0: port 1(bridge_slave_0) entered disabled state [ 1262.552646][T24981] device bridge_slave_0 entered promiscuous mode [ 1262.931737][T24981] bridge0: port 2(bridge_slave_1) entered blocking state [ 1262.989010][T24981] bridge0: port 2(bridge_slave_1) entered disabled state [ 1263.016662][T24981] device bridge_slave_1 entered promiscuous mode [ 1263.408936][T25067] netlink: 'syz.2.6237': attribute type 10 has an invalid length. [ 1263.524520][T23556] Bluetooth: hci1: command 0x041b tx timeout [ 1263.731677][T24981] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1263.794217][T24981] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1263.865916][T25083] netlink: 'syz.3.6239': attribute type 10 has an invalid length. [ 1264.332719][T25097] netlink: 'syz.5.6244': attribute type 29 has an invalid length. [ 1264.598448][T25084] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.6241'. [ 1264.762422][T25097] netlink: 'syz.5.6244': attribute type 29 has an invalid length. [ 1264.800439][T25095] netlink: 'syz.5.6244': attribute type 29 has an invalid length. [ 1264.843005][T25098] netlink: 'syz.5.6244': attribute type 29 has an invalid length. [ 1264.955020][T24981] team0: Port device team_slave_0 added [ 1264.982888][T24981] team0: Port device team_slave_1 added [ 1265.062366][T25097] netlink: 'syz.5.6244': attribute type 10 has an invalid length. [ 1265.319771][T24981] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1265.329246][T24981] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1265.449753][T24981] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1265.523744][T25118] netlink: 'syz.3.6247': attribute type 29 has an invalid length. [ 1265.601258][T23556] Bluetooth: hci1: command 0x040f tx timeout [ 1265.863800][T24981] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1265.870828][T24981] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1265.953223][T24981] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1265.965116][T25118] netlink: 'syz.3.6247': attribute type 29 has an invalid length. [ 1266.853280][T25114] netlink: 'syz.3.6247': attribute type 29 has an invalid length. [ 1266.924062][T25124] netlink: 'syz.3.6247': attribute type 10 has an invalid length. [ 1267.200889][T25145] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6251'. [ 1267.263443][T24981] device hsr_slave_0 entered promiscuous mode [ 1267.301458][T24981] device hsr_slave_1 entered promiscuous mode [ 1267.310351][T24981] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1267.340758][T24981] Cannot create hsr debugfs directory [ 1267.481739][T25145] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6251'. [ 1267.681058][T23556] Bluetooth: hci1: command 0x0419 tx timeout [ 1268.088589][T25159] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.6255'. [ 1268.535446][T25164] netlink: 128 bytes leftover after parsing attributes in process `syz.2.6255'. [ 1268.551186][T25164] netlink: 3 bytes leftover after parsing attributes in process `syz.2.6255'. [ 1269.294641][T18942] device veth0_to_team left promiscuous mode [ 1269.300888][T18942] Ÿë: port 1(veth0_to_team) entered disabled state [ 1269.336819][T18942] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1269.345471][T18942] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1269.456885][T18942] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1269.480687][T18942] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1269.509796][T18942] bridge0: port 4(dummy0) entered disabled state [ 1269.534047][T18942] device bridge_slave_1 left promiscuous mode [ 1269.540357][T18942] bridge0: port 2(bridge_slave_1) entered disabled state [ 1269.599893][T18942] device bridge_slave_0 left promiscuous mode [ 1269.628803][T18942] bridge0: port 1(bridge_slave_0) entered disabled state [ 1269.638388][T25197] FAULT_INJECTION: forcing a failure. [ 1269.638388][T25197] name failslab, interval 1, probability 0, space 0, times 0 [ 1269.645282][T25198] validate_nla: 11 callbacks suppressed [ 1269.645300][T25198] netlink: 'syz.2.6262': attribute type 4 has an invalid length. [ 1269.707931][T18942] device veth1_vlan left promiscuous mode [ 1269.717434][T25198] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.6262'. [ 1269.730266][T18942] device veth0_vlan left promiscuous mode [ 1269.828914][T25197] CPU: 0 PID: 25197 Comm: syz.6.6261 Not tainted syzkaller #0 [ 1269.836473][T25197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1269.846702][T25197] Call Trace: [ 1269.850021][T25197] [ 1269.853004][T25197] dump_stack_lvl+0x188/0x24e [ 1269.857730][T25197] ? show_regs_print_info+0x12/0x12 [ 1269.862981][T25197] ? load_image+0x400/0x400 [ 1269.867549][T25197] ? __might_sleep+0xd0/0xd0 [ 1269.872279][T25197] ? __lock_acquire+0x7d10/0x7d10 [ 1269.877387][T25197] should_fail_ex+0x399/0x4d0 [ 1269.882115][T25197] should_failslab+0x5/0x20 [ 1269.886672][T25197] slab_pre_alloc_hook+0x59/0x310 [ 1269.891780][T25197] ? ip_setup_cork+0x229/0x850 [ 1269.896632][T25197] __kmem_cache_alloc_node+0x4f/0x260 [ 1269.902063][T25197] ? ip_setup_cork+0x229/0x850 [ 1269.906900][T25197] kmalloc_trace+0x26/0xe0 [ 1269.911394][T25197] ip_setup_cork+0x229/0x850 [ 1269.916083][T25197] ip_make_skb+0x153/0x440 [ 1269.920646][T25197] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 1269.925551][T25197] ? ip_flush_pending_frames+0x250/0x250 [ 1269.931279][T25197] udp_sendmsg+0x1afb/0x23b0 [ 1269.935948][T25197] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 1269.940859][T25197] ? udp_cmsg_send+0x350/0x350 [ 1269.945691][T25197] ? verify_lock_unused+0x140/0x140 [ 1269.950984][T25197] ? release_sock+0x2b/0x1b0 [ 1269.955644][T25197] udpv6_sendmsg+0x86c/0x2420 [ 1269.960417][T25197] ? udp_v6_early_demux+0xf80/0xf80 [ 1269.965682][T25197] ? ct_irq_exit_irqson+0x113/0x170 [ 1269.970935][T25197] ? lock_chain_count+0x20/0x20 [ 1269.975861][T25197] ? _local_bh_enable+0xa0/0xa0 [ 1269.980773][T25197] ? inet_send_prepare+0x1af/0x260 [ 1269.985942][T25197] ? inet_send_prepare+0x1af/0x260 [ 1269.991110][T25197] ? inet6_sendmsg+0x5b/0xd0 [ 1269.995762][T25197] ? inet6_compat_ioctl+0x3c0/0x3c0 [ 1270.001014][T25197] ____sys_sendmsg+0x5be/0x970 [ 1270.005839][T25197] ? __sys_sendmsg_sock+0x30/0x30 [ 1270.010906][T25197] ? __import_iovec+0x315/0x500 [ 1270.015815][T25197] ? import_iovec+0x6f/0xa0 [ 1270.020375][T25197] ___sys_sendmsg+0x2a2/0x360 [ 1270.025115][T25197] ? __sys_sendmsg+0x290/0x290 [ 1270.029970][T25197] ? __lock_acquire+0x7d10/0x7d10 [ 1270.035108][T25197] __se_sys_sendmsg+0x1bb/0x2a0 [ 1270.040027][T25197] ? __x64_sys_sendmsg+0x80/0x80 [ 1270.045042][T25197] ? lockdep_hardirqs_on+0x94/0x140 [ 1270.050300][T25197] do_syscall_64+0x4c/0xa0 [ 1270.054762][T25197] ? clear_bhb_loop+0x60/0xb0 [ 1270.059499][T25197] ? clear_bhb_loop+0x60/0xb0 [ 1270.064232][T25197] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1270.070186][T25197] RIP: 0033:0x7f3ba3b9ce59 [ 1270.074647][T25197] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1270.094391][T25197] RSP: 002b:00007f3ba49bb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1270.102869][T25197] RAX: ffffffffffffffda RBX: 00007f3ba3e15fa0 RCX: 00007f3ba3b9ce59 [ 1270.110904][T25197] RDX: 0000000000000840 RSI: 0000200000000380 RDI: 0000000000000003 [ 1270.118955][T25197] RBP: 00007f3ba49bb090 R08: 0000000000000000 R09: 0000000000000000 [ 1270.127072][T25197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1270.135096][T25197] R13: 00007f3ba3e16038 R14: 00007f3ba3e15fa0 R15: 00007fffbef8f6c8 [ 1270.143155][T25197] [ 1272.255369][T25185] netlink: 'syz.5.6258': attribute type 10 has an invalid length. [ 1272.320536][T25204] netlink: 'syz.6.6263': attribute type 10 has an invalid length. [ 1272.701512][T25216] netlink: 'syz.6.6264': attribute type 29 has an invalid length. [ 1272.731381][T25216] netlink: 'syz.6.6264': attribute type 29 has an invalid length. [ 1272.742703][T25209] netlink: 'syz.6.6264': attribute type 29 has an invalid length. [ 1272.774226][T24981] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1272.815777][T25218] netlink: 'syz.6.6264': attribute type 29 has an invalid length. [ 1273.302040][T24981] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1273.351656][T24981] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1273.372591][T24981] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1273.459618][T25229] netlink: 'syz.2.6270': attribute type 21 has an invalid length. [ 1273.488829][T25209] netlink: 'syz.6.6264': attribute type 10 has an invalid length. [ 1273.949770][T24981] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1274.052254][T14956] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1274.072858][T14956] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1274.093358][T24981] 8021q: adding VLAN 0 to HW filter on device team0 [ 1274.149391][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1274.164730][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1274.202870][ T4337] bridge0: port 1(bridge_slave_0) entered blocking state [ 1274.210068][ T4337] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1274.249647][T25247] netlink: 'syz.5.6276': attribute type 29 has an invalid length. [ 1274.293922][T25241] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6274'. [ 1274.590765][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1274.611216][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1274.646181][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1274.668194][ T4337] bridge0: port 2(bridge_slave_1) entered blocking state [ 1274.675479][ T4337] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1274.699181][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1274.726578][T25249] validate_nla: 2 callbacks suppressed [ 1274.726598][T25249] netlink: 'syz.6.6275': attribute type 10 has an invalid length. [ 1274.751312][T25245] netlink: 'syz.5.6276': attribute type 29 has an invalid length. [ 1274.809225][T25260] netlink: 'syz.5.6276': attribute type 10 has an invalid length. [ 1274.881397][T25250] netlink: 'syz.5.6276': attribute type 29 has an invalid length. [ 1274.889560][T18942] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1274.919510][T18942] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1274.936452][T18942] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1274.991554][T18942] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1275.059003][T18942] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1275.114790][T18942] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1275.134876][T18942] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1275.155188][T18942] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1275.257086][T24981] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1275.320500][T24981] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1275.409531][T14956] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1275.419627][T14956] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1276.388221][T25302] netlink: 'syz.5.6284': attribute type 29 has an invalid length. [ 1276.429977][T25302] netlink: 'syz.5.6284': attribute type 29 has an invalid length. [ 1276.494559][T25304] netlink: 'syz.5.6284': attribute type 29 has an invalid length. [ 1276.581046][T25298] netlink: 'syz.5.6284': attribute type 29 has an invalid length. [ 1276.697459][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1276.713933][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1276.736658][T24981] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1277.082702][T25304] netlink: 'syz.5.6284': attribute type 10 has an invalid length. [ 1277.091375][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1277.151850][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1277.233973][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1277.271989][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1277.293963][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1277.326117][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1277.367290][T24981] device veth0_vlan entered promiscuous mode [ 1277.412524][T24981] device veth1_vlan entered promiscuous mode [ 1277.542349][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1277.550783][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1277.622145][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1277.673000][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1277.694621][T25331] netlink: 'syz.5.6291': attribute type 10 has an invalid length. [ 1277.924484][T25331] device dummy0 left promiscuous mode [ 1277.930217][T25331] bridge0: port 3(dummy0) entered disabled state [ 1278.053572][T24981] device veth0_macvtap entered promiscuous mode [ 1278.083871][T18942] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1278.108460][T24981] device veth1_macvtap entered promiscuous mode [ 1278.228250][T24981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1278.277213][T24981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1278.290982][T24981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1278.331026][T24981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1278.382977][T24981] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1278.392486][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1278.420027][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1278.461543][T24981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1278.518767][T24981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1278.559237][T24981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1278.628769][T24981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1278.676509][T24981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1278.700211][T24981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1278.737895][T24981] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1278.811340][T18942] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1278.821791][T18942] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1278.881974][T24981] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1278.910976][T24981] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1278.920021][T24981] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1278.940286][T24981] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1279.170482][T25356] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6299'. [ 1279.685359][ T4324] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1279.772775][ T4324] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1283.333261][T25386] netlink: 'syz.6.6303': attribute type 22 has an invalid length. [ 1283.647946][T25386] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6303'. [ 1300.367043][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.373603][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1306.112670][ T4353] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 1-.... } 2630 jiffies s: 114169 root: 0x2/. [ 1306.141302][ T4353] rcu: blocking rcu_node structures (internal RCU debug): [ 1306.148525][ T4353] Sending NMI from CPU 0 to CPUs 1: [ 1306.153923][ C1] NMI backtrace for cpu 1 [ 1306.153934][ C1] CPU: 1 PID: 25369 Comm: syz.5.6302 Not tainted syzkaller #0 [ 1306.153951][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1306.153960][ C1] RIP: 0010:kasan_check_range+0x80/0x290 [ 1306.153987][ C1] Code: ff 4d 89 c1 49 c1 e9 03 4b 8d 1c 21 49 89 df 4d 29 df 49 83 ff 10 7f 29 4d 85 ff 0f 84 38 01 00 00 4c 89 cb 48 f7 d3 4c 01 f3 <41> 80 3b 00 0f 85 86 01 00 00 49 ff c3 48 ff c3 75 ee e9 18 01 00 [ 1306.154000][ C1] RSP: 0018:ffffc900001e0b08 EFLAGS: 00000086 [ 1306.154014][ C1] RAX: 0000000000000001 RBX: ffffffffffffffff RCX: ffffffff8188e60d [ 1306.154032][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff8e2029e8 [ 1306.154042][ C1] RBP: 0000000000000000 R08: ffffffff8e2029ef R09: 1ffffffff1c4053d [ 1306.154051][ C1] R10: dffffc0000000000 R11: fffffbfff1c4053d R12: dffffc0000000001 [ 1306.154062][ C1] R13: 0000000000000001 R14: 1ffffffff1c4053d R15: 0000000000000001 [ 1306.154072][ C1] FS: 00007f0f541a56c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1306.154085][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1306.154096][ C1] CR2: 00007f6c97617dac CR3: 0000000027418000 CR4: 00000000003506e0 [ 1306.154111][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1306.154120][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1306.154129][ C1] Call Trace: [ 1306.154135][ C1] [ 1306.154143][ C1] ? asm_sysvec_irq_work+0x16/0x20 [ 1306.154165][ C1] trace_irq_enable_rcuidle+0x6d/0x140 [ 1306.154187][ C1] trace_hardirqs_on+0x24/0x40 [ 1306.154205][ C1] asm_sysvec_irq_work+0x16/0x20 [ 1306.154223][ C1] RIP: 0010:rcu_read_unlock_special+0x7f/0x510 [ 1306.154239][ C1] Code: eb 03 48 b8 f1 f1 f1 f1 f8 f2 f2 f2 4a 89 04 2b 42 c7 44 2b 08 f8 f3 f3 f3 65 44 8b 35 82 30 95 7e 41 f7 c6 00 00 f0 00 74 40 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 42 c7 44 2b 08 [ 1306.154251][ C1] RSP: 0018:ffffc900001e0c20 EFLAGS: 00000206 [ 1306.154262][ C1] RAX: cf1e801aa9009000 RBX: 1ffff9200003c18c RCX: cf1e801aa9009000 [ 1306.154273][ C1] RDX: dffffc0000000000 RSI: ffffffff8a8c1aa0 RDI: ffffffff8adf2060 [ 1306.154284][ C1] RBP: ffffc900001e0d08 R08: ffff8880b8f3580b R09: 1ffff110171e6b01 [ 1306.154294][ C1] R10: dffffc0000000000 R11: ffffed10171e6b02 R12: 0000000000000246 [ 1306.154304][ C1] R13: dffffc0000000000 R14: ffff8880b8f3b900 R15: 0000000000000002 [ 1306.154329][ C1] ? __rcu_read_unlock+0xd0/0xd0 [ 1306.154351][ C1] __rcu_read_unlock+0x78/0xd0 [ 1306.154367][ C1] rebalance_domains+0x8da/0xa10 [ 1306.154391][ C1] ? rebalance_domains+0x132/0xa10 [ 1306.154414][ C1] handle_softirqs+0x2a1/0x930 [ 1306.154433][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 1306.154450][ C1] ? do_softirq+0x210/0x210 [ 1306.154469][ C1] __irq_exit_rcu+0x13b/0x230 [ 1306.154483][ C1] ? irq_exit_rcu+0x20/0x20 [ 1306.154503][ C1] irq_exit_rcu+0x5/0x20 [ 1306.154515][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 1306.154534][ C1] [ 1306.154539][ C1] [ 1306.154544][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1306.154564][ C1] RIP: 0010:__vmalloc_node_range+0x4c9/0x13b0 [ 1306.154583][ C1] Code: fc ff df 80 3c 08 00 74 08 4c 89 ff e8 d0 dd 0c 00 49 8b 07 48 8d 88 00 f0 ff ff 4d 85 f6 48 0f 45 c8 48 89 8c 24 e8 00 00 00 <48> c1 e9 0c 48 89 8c 24 90 00 00 00 41 89 ce 4e 8d 24 f5 00 00 00 [ 1306.154595][ C1] RSP: 0018:ffffc90004677920 EFLAGS: 00000246 [ 1306.154607][ C1] RAX: 0000000000002000 RBX: 8000000000000163 RCX: 0000000000001000 [ 1306.154617][ C1] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 1306.154626][ C1] RBP: ffffc90004677ad8 R08: ffffffff8cc04f63 R09: 1ffffffff19809ec [ 1306.154637][ C1] R10: dffffc0000000000 R11: fffffbfff19809ed R12: ffffe8ffffffffff [ 1306.154647][ C1] R13: 0000000000500dc0 R14: 0000000000000000 R15: ffff888027541410 [ 1306.154681][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1306.154704][ C1] ? free_vm_area+0x50/0x50 [ 1306.154726][ C1] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 1306.154747][ C1] __vmalloc+0x76/0x80 [ 1306.154763][ C1] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 1306.154784][ C1] bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 1306.154807][ C1] bpf_prog_alloc+0x1c/0x1b0 [ 1306.154829][ C1] bpf_prog_load+0x7c9/0x1560 [ 1306.154856][ C1] ? map_freeze+0x390/0x390 [ 1306.154875][ C1] ? __might_fault+0xa6/0x120 [ 1306.154897][ C1] ? __might_fault+0xa6/0x120 [ 1306.154910][ C1] ? __might_fault+0xc2/0x120 [ 1306.154924][ C1] ? __might_fault+0xa6/0x120 [ 1306.154939][ C1] ? bpf_lsm_bpf+0x5/0x10 [ 1306.154954][ C1] ? security_bpf+0x7a/0xa0 [ 1306.154971][ C1] __sys_bpf+0x5b8/0x780 [ 1306.154992][ C1] ? bpf_link_show_fdinfo+0x380/0x380 [ 1306.155018][ C1] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1306.155053][ C1] __x64_sys_bpf+0x78/0x90 [ 1306.155073][ C1] do_syscall_64+0x4c/0xa0 [ 1306.155086][ C1] ? clear_bhb_loop+0x60/0xb0 [ 1306.155105][ C1] ? clear_bhb_loop+0x60/0xb0 [ 1306.155126][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1306.155145][ C1] RIP: 0033:0x7f0f5339ce59 [ 1306.155158][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1306.155170][ C1] RSP: 002b:00007f0f541a5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1306.155184][ C1] RAX: ffffffffffffffda RBX: 00007f0f53615fa0 RCX: 00007f0f5339ce59 [ 1306.155194][ C1] RDX: 0000000000000027 RSI: 00002000000000c0 RDI: 0000000000000005 [ 1306.155203][ C1] RBP: 00007f0f53432d6f R08: 0000000000000000 R09: 0000000000000000 [ 1306.155212][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1306.155221][ C1] R13: 00007f0f53616038 R14: 00007f0f53615fa0 R15: 00007ffd6d5c0ee8 [ 1306.155241][ C1]