last executing test programs: 9.392944854s ago: executing program 1 (id=1278): perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0x1000, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0xf, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext, 0x4869, 0x6, 0xfffffffc, 0xf, 0x0, 0x0, 0x2000}, r0, 0x4, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x2, @perf_config_ext={0x0, 0xfffffffd}, 0x25141, 0x8, 0xfffffffe, 0x2, 0x5}, r0, 0x10, 0xffffffffffffffff, 0xa) socketpair(0x2, 0x3, 0x5, &(0x7f0000000240)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="0400001c00000000c754cef078b94fa0c6"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="5c00000013006bcd9e3fe3dc6e48aa31086b8703130000abb356507ddc4a820004001400380013000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7764fbd180e2959fcf50e4509", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x10082) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r5, 0x1, 0x5, 0x0, 0x4) socket$kcm(0x11, 0x3, 0x0) socket$kcm(0xa, 0x2, 0x73) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x7}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$MAP_CREATE(0x2000000000000020, &(0x7f0000000140)=ANY=[@ANYBLOB="0600000004000000008000005c00000000000000", @ANYRES32, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000feffffff00"/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="120000007f0000000400"], 0x50) r6 = socket$kcm(0xa, 0x2, 0x0) r7 = socket$kcm(0xa, 0x1, 0x0) r8 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x40, 0x0, 0x0, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x400, 0x7ffffffffffffffe}, 0x0, 0x0, 0xc2bb}, 0x0, 0xffffffffffffffff, r2, 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x0) close(r8) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x3, 0xf, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x80002, 0x8, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x80, 0x9}, 0x2004, 0x8, 0x4, 0x5, 0x8, 0xfffffff8, 0xf800, 0x0, 0x2, 0x0, 0x4}, r9, 0x2, r1, 0x1) sendmsg$kcm(r7, &(0x7f0000000280)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x3, @remote, 0x1a, 0x3}, 0x80, 0x0}, 0x26004055) setsockopt$sock_attach_bpf(r6, 0x0, 0x4, 0x0, 0x0) close(0xffffffffffffffff) socket$kcm(0xa, 0x5, 0x0) 7.245715555s ago: executing program 1 (id=1295): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba, 0x0, 0x0, 0x3, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x80009000, &(0x7f0000000300)="e08d486a9d3d8ca69ecc2bd51e942c877a0952b65268e25c6963ff9ce134a5ab75835ea80eee91f420353720117817609945e4ecbe74b645c01ad6c67c4412c3f7dc6192e651c5769f0491db25fcaee1a61a770384df1701289adff503aba2a36ef00440", 0x64, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000001040)="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") perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x3, 0x6, 0x80, 0x10, 0x0, 0x8000000000000001, 0x40000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x4, @perf_bp={&(0x7f00000001c0), 0xd}, 0x104260, 0x0, 0x83, 0x1, 0x3, 0x1, 0x7, 0x0, 0x0, 0x0, 0x2}, r0, 0x10, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_config_ext={0x5, 0x800}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81ffffffffb9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1, 0x20000}, 0x80, 0x0, 0xffffffffffffffa7}, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000600142603600e1208000f0000000401a80016002000024006000a00035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc", 0xd8}], 0x1}, 0x0) r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc2060, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x200, 0x1, 0x10c2ba, 0x1, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000006c0)=[{0x0}, {&(0x7f0000000d00)=""/4041, 0xfc9}, {0x0}, {&(0x7f0000000c00)=""/226, 0xe2}, {&(0x7f00000008c0)=""/198, 0xc6}], 0x5}, 0x40012100) socketpair(0x1, 0x1, 0x400000, &(0x7f00000004c0)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup.net/syz1\x00', 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f0000000140)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000340)=ANY=[], 0x6a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) socket$kcm(0x2a, 0x2, 0x0) 5.800186867s ago: executing program 1 (id=1299): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) bpf$TOKEN_CREATE(0x24, &(0x7f0000000680)={0x0, r0}, 0x8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r1) recvmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000015c0)=""/4096, 0x1000}], 0x1, 0x0, 0x18}, 0x100) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x13, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="4eaa00000000000071106f000000000095"], &(0x7f00000006c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) socket$kcm(0x29, 0x7, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000900000000000000000005"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16=r2, @ANYBLOB="00000000000000004d080000000000c4f88af8fd00000000bfa200000000000007020000f8000000b70400000000000085000000c3000000950000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006f87c09e8fe55a10a0015400100142603600e12080002", 0x2b}], 0x1}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000014006b0300224ed86e6c1d0002117ea6e070d6064e22000300000000250002000f00000017d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9767b4fa51f62a64c9f4060046d88037e786a6d0bdd7000000", 0x5b}, {&(0x7f0000000280)="e1", 0x1}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x8000000000000000}, 0x8210, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x2b, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x541b, &(0x7f0000000100)) r6 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001a00599c6d0e000091d028ef80"], 0xfe33) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r2, 0x58, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r8) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000380)={0x0, 0x0}, 0x8) mkdirat$cgroup(r1, &(0x7f00000007c0)='syz1\x00', 0x1ff) r10 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, r11) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x14, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000040)='GPL\x00', 0x9, 0x7d, &(0x7f0000000200)=""/125, 0x41000, 0x5, '\x00', r7, @lirc_mode2=0x10, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x1, 0xe, 0x1}, 0x10, r9, r11, 0x2, &(0x7f00000003c0)=[r2], &(0x7f0000000400)=[{0x0, 0x5, 0xf, 0x9}, {0x4, 0x3, 0xf, 0xa}], 0x10, 0x96}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) 5.511172551s ago: executing program 0 (id=1300): bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0a00000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000e90000000000000000000600000000005f779fbeab6fc0d556b60000000000000000005fb53ab99be1c7d73e11664e21a559af37a5dc02f250c34fba1ae129ea"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000bc0)={r1, 0x0, 0x0}, 0x10) socket$kcm(0x2, 0x1000000000000002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = socket$kcm(0x1e, 0x1, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r3 = gettid() syz_open_procfs$namespace(r3, &(0x7f00000002c0)='ns/net\x00') sendmsg$inet(0xffffffffffffffff, 0x0, 0x8040) r4 = socket$kcm(0xa, 0x1, 0x0) r5 = socket$kcm(0xa, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[], 0x0, 0x34}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000080000000200000000000000", @ANYRES32=r5], 0x50) perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r6 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r6, 0x6, 0x4, &(0x7f0000000b80), 0x4) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0}, 0x282, 0x0, 0x800, 0x0, 0x800000000005, 0xa, 0x0, 0x0, 0x0, 0x0, 0x4713}, 0x0, 0xd, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$kcm(0x2, 0x2, 0x73) sendmsg$inet(r7, &(0x7f0000000500)={&(0x7f0000000300)={0x2, 0x4e23, @empty}, 0x10, 0x0}, 0x900000000000000) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x8916, &(0x7f0000000000)={r5}) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x8936, &(0x7f0000000000)={r5}) 5.510488501s ago: executing program 4 (id=1301): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x2d, 0xd, &(0x7f0000002080)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x7, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x61, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8912, &(0x7f0000000080)) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0xfffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x13, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x1000004, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f93d24fc60", 0x14}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="11000000040000000400"], 0x48) socket$kcm(0x2c, 0x3, 0x0) close(0x4) recvmsg(r2, &(0x7f0000002440)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0x13, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002420702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000022850000009400000018010000786c6c2500000000002020207b1af8ff00000000bfa10000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r3 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="934300005a"], 0xfe33) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x40841, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x880, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000100)=[{0x1d, 0x0, 0x3}, {0x34, 0x0, 0x0, 0xffffffff}, {}, {}, {0x6}]}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000540)='GPL\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.312656144s ago: executing program 3 (id=1302): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x40000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0x8, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x108a82, 0xac5d, 0x401, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000120000"], &(0x7f0000000c00)='GPL\x00'}, 0x94) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) ioctl$SIOCSIFHWADDR(r0, 0x8b35, &(0x7f0000000000)={'wlan1\x00', @broadcast}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="03000000040000000400", @ANYRES32=r1, @ANYBLOB="0f00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0400000003000000000000001009009800"/28], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={0xffffffffffffffff, r1}, 0x4) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x20) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000001180)='pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000480)=ANY=[], 0x8b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000dc0)={0x1f, 0x5, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) r4 = socket$kcm(0x29, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x30}, 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000017c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x80fe, 0x7, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x12, 0x2}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000004c0)="7f", 0x1}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000084000000070000007f00000000000000b8"], 0xd0}, 0x480c4) r6 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r6, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x20004850) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x20, &(0x7f0000000680)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b904021d0802010000001c00f0a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x20004800) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0x830d}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000040)={r6, r5}) sendmsg$kcm(r4, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) 4.808815221s ago: executing program 0 (id=1303): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x2d, 0xd, &(0x7f0000002080)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x7, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x61, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8912, &(0x7f0000000080)) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0xfffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x13, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x1000004, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f93d24fc60", 0x14}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="11000000040000000400"], 0x48) socket$kcm(0x2c, 0x3, 0x0) close(0x4) recvmsg(r2, &(0x7f0000002440)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0x13, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002420702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000022850000009400000018010000786c6c2500000000002020207b1af8ff00000000bfa10000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="934300005a"], 0xfe33) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x40841, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x880, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000100)=[{0x1d, 0x0, 0x3}, {0x34, 0x0, 0x0, 0xffffffff}, {}, {}, {0x6}]}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000540)='GPL\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.797194561s ago: executing program 1 (id=1304): socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_ELEM(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000012006b04000000d86e6c1d0000147ea60864160af36504b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f4080003680601000008000300ff00", 0x5a}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x50d30e773e59897a}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x7c, &(0x7f00000000c0)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000400110000000a600e41b0000900ac00060411000000160012000a0003fe0248035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000040)) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) write$cgroup_subtree(r3, 0x0, 0x32600) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) 4.680082533s ago: executing program 3 (id=1306): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x2}, 0x0, 0x0, 0xb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0xa, 0x1, 0x106) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x1a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x450, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x4, @perf_config_ext, 0x0, 0x8, 0x2, 0x5, 0x0, 0x7fff, 0x9, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0xd, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) recvmsg$unix(0xffffffffffffffff, 0x0, 0x100) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close(r2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0xe730}, 0x460, 0x9, 0x0, 0xa, 0xe4, 0xffff0000, 0xffff, 0x0, 0x102ff, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8923, &(0x7f0000002280)={'virt_wifi0\x00', @random="2d311e000008"}) 4.565223954s ago: executing program 4 (id=1307): r0 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x5, &(0x7f0000000180), 0x43) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r1) socket$kcm(0x11, 0xa, 0x300) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)='u', 0x1}], 0x1}, 0x4040001) recvmsg$unix(r3, &(0x7f00000038c0)={0x0, 0x0, 0x0}, 0x10003) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000040), &(0x7f0000000080)=""/122, 0x4000}, 0x20) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000880)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000300)=ANY=[], 0xc0}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000740)='syz0\x00', 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r6, &(0x7f0000000780), 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000300), &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xb1, &(0x7f0000000380), 0x0, 0x10, &(0x7f0000000640), &(0x7f0000000440), 0x8, 0x7, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r9) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x5, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1800000008000000000000000800ea4d5aff270d8733000072f565f1cd7ac1a195f3dc80f46b1a97c59cf9ee0f27802010332805bf7b74127da7487ed86fc8f77b2861328d0cae7d0edc236108799b834defdd2c7bb6cd29d25ec97ab24b0dc1404fb1911f7ab75d0a3c059939ac6ce29a7ebf1e6a59739c4a20bc9f91c55e720458dbf5f8d76ac69f00000000000000002c01cc9787777811adb9c0ddcfc8de688681dbe2bed0ffc36a25108300"/189], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg$unix(r8, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r11, &(0x7f0000000000)=ANY=[@ANYRES8=r9, @ANYBLOB="3eca", @ANYRES8=r10], 0x9a) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r2, @ANYBLOB="8300"/20, @ANYRES32=r7, @ANYRES32=r11, @ANYBLOB="00000000816f98a8a3652b5118140000100001000000000000000000"], 0x50) sendmsg$inet(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)="bb1b3d4dd5", 0x5}, {&(0x7f0000000200)="78f3bc9eebfcdbb894fcbca8abf6012bb1f9c4ffff3a3ed363a0174857ad3398d6902f0065d4c3e264a2b8b16359b1d741b4e1f3de20e1466da58b42bfe4b13f403a99f8fafcf7d9c34d6f817a40233194e660210b98864166bf01085cb33d4c8a68d596ed0a12ac36b6", 0x6a}], 0x2, &(0x7f0000001400)=ANY=[@ANYBLOB='\x00'/16, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="e0000001ac1e00010000000014000000000000000000004ea7ae1e653bd092d8de3df937d2883a276130205067eaf4d9de12bbb23374ee1dfb561c899d47117e25fcc618ff1d927c40d615c272fd9314d23e2d2060c90e40a703748f39b95db849fdd40402cae93f92ae97559cf7abbca195c99d9395204fbd5d9df20ff77367e8177f33249b5e3938d1a38ff5e8e6e8f9fdebe57aa27d3fce86365f4dc6951e"], 0x120}, 0x850) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000140)='THAWED\x00', 0x7) r12 = socket$kcm(0x21, 0x2, 0xa) setsockopt$sock_attach_bpf(r12, 0x110, 0x2, &(0x7f0000000140), 0x16) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000190091c8b14a0778a8123d181d"], 0xfe33) 4.431828866s ago: executing program 2 (id=1309): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x2d, 0xd, &(0x7f0000002080)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x7, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x61, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8912, &(0x7f0000000080)) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0xfffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x13, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x1000004, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="11000000040000000400"], 0x48) socket$kcm(0x2c, 0x3, 0x0) close(0x4) recvmsg(r2, &(0x7f0000002440)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0x13, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002420702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000022850000009400000018010000786c6c2500000000002020207b1af8ff00000000bfa10000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="934300005a"], 0xfe33) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x40841, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x880, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000100)=[{0x1d, 0x0, 0x3}, {0x34, 0x0, 0x0, 0xffffffff}, {}, {}, {0x6}]}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000540)='GPL\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.110349571s ago: executing program 1 (id=1310): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) syz_clone(0x10eb22f000, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000400)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, &(0x7f0000000440)=[0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x83, &(0x7f00000004c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000540), &(0x7f00000005c0), 0x8, 0x60, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) sendmsg$inet(r0, &(0x7f0000000b00)={&(0x7f0000000040)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x38}}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000080)="7229d16808d6687f25c3f42c366392eeb0556093b0ee1ddd2180d53d28a103e3fed24a9390eb9cae32d233d7dfcc8d79f4c026386beec593c119955ddc7408da5541999047e5d97d54a50e03529b21f0cb244daaf24603370ceb19be025a0ca58f8d467a8875b176c62c752592279c0e9f046e9a9cbbf86c683c27c372697d720630ab1bd157216f56f77031eae0854764c6ac517c8d9b8ca579", 0x9a}, {&(0x7f0000000240)="1a5223bf9cbb8b493fdfb7f5e1c7b0086377dd65a2a266275a358c7aca545de0fc8e86b0242ff63bb5b348ccc5b8d3ef166968a9599ac2f6c4f93f52c8cfb63dbd08c314a43e8aa24fb6edf07309c959f32d9cf6be6dd00825e04c15a4a8aef1d0b3e943f9d570ae58c10848d45a3a77943f9ba6552143e3e8c772a0df9bdf3843532cb2b54bb852fc2e99854dfa9654a58d47b48952ff0ceea97cd2677fa986591b98e723c9", 0xa6}, {&(0x7f0000000300)="b6c96403b6f064786ede873db6423cffd2eb9f772e7c2524db0bc77974c9ff57d49d4d491c426bd565617b6738fa06d9027ef61c3f14e820744d023663449b61056d237818e4e7bb2559a74d391e27d7a922c0cd8f15e798adb9532e934ea6c15d48b4ce6aa3da2ba4808354ccd650ccb3399b225159cac076739fed5f14321b9f5b8feb02e97ac384920b454a25dc7fdc2869c14728dd20685a5cd520ee7a27f4d5016e5ba6052cb629", 0xaa}], 0x3, &(0x7f0000000e80)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0xc, 0x25, 0x3, 0xe, [{@rand_addr=0x64010100, 0x3}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8e}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_retopts={{0x78, 0x0, 0x7, {[@timestamp_addr={0x44, 0x2c, 0x3a, 0x1, 0x5, [{@private=0xa010100, 0x9}, {@multicast1, 0xdf1}, {@broadcast}, {@rand_addr=0x64010100, 0x20000002}, {@broadcast, 0x2}]}, @ssrr={0x89, 0x27, 0xd6, [@empty, @dev={0xac, 0x14, 0x14, 0x13}, @multicast2, @dev={0xac, 0x14, 0x14, 0x28}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, @private=0xa010102, @loopback, @multicast1]}, @rr={0x7, 0x13, 0x3e, [@loopback, @multicast1, @remote, @empty]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_tos_u8={{0x11}}, @ip_retopts={{0x154, 0x0, 0x7, {[@cipso={0x86, 0x2e, 0x0, [{0x7, 0x9, "368ac2b7601c7d"}, {0x0, 0x5, '\tbg'}, {0x7, 0xb, "b4994ec93d02c05750"}, {0x0, 0xf, "25805b7410dad7085383b8f4c4"}]}, @end, @lsrr={0x83, 0x17, 0xa3, [@multicast1, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x37}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @ssrr={0x89, 0x13, 0x9c, [@private=0xa010100, @remote, @local, @local]}, @cipso={0x86, 0x62, 0x2, [{0x5, 0x11, "9a35ed6b76bde081a38abcad5b0a49"}, {0x0, 0x7, "b0208132ba"}, {0x6, 0x7, "f7f3da7455"}, {0x1, 0x10, "73b6afb4cb6f6f1886c508b88f1f"}, {0x7, 0xa, "0c808cf41a3d79e9"}, {0x1, 0x3, "c7"}, {0x5, 0x10, "d5ecf475f64af7068b154ff1526b"}, {0x2, 0x2}, {0x7, 0x2}, {0x7, 0xc, "3003f5b4d14bdb51235c"}]}, @cipso={0x86, 0x62, 0xfffffffffffffffe, [{0x2, 0x4, "cab7"}, {0x1, 0x11, "d95e6967b96d182d65d8d3ca9224c7"}, {0x1, 0xa, "7bf2711809f6719d"}, {0x0, 0x11, "91a605ba2088ed40d94793f9f3f6e9"}, {0x0, 0x12, "e056e7ab9fb5ee3d1c763e5552178d92"}, {0x7, 0x10, "856d3c6f5e6be9f36593a3312c0b"}, {0x2, 0xa, "676107ffcab4c935"}]}, @generic={0x82, 0x7, "6b3cbf1717"}, @end, @timestamp_prespec={0x44, 0xc, 0xe0, 0x3, 0x4, [{@private=0xa010101, 0x364f}]}, @rr={0x7, 0x13, 0x4f, [@rand_addr=0x64010102, @rand_addr=0x64010100, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}, @ip_retopts={{0xd4, 0x0, 0x7, {[@cipso={0x86, 0x70, 0xfffffffffffffffe, [{0x2, 0xb, "c262eebe2e4a20d362"}, {0x7, 0xb, "0e605020fdf37d1296"}, {0x7, 0x12, "89c307a69d5ec3f9bbab8483519c1e65"}, {0x5, 0xc, "1eb57dd9894924e77ed2"}, {0x6, 0xc, "d33aed7758439337f325"}, {0x5, 0xb, "e770c9032d2ed2ea90"}, {0x0, 0x6, "13d921f9"}, {0x0, 0xc, "0c1b69bd1b3d05eb300c"}, {0x6, 0xd, "55cfdedb097637be78baf1"}]}, @timestamp={0x44, 0x14, 0x21, 0x0, 0xb, [0xb7, 0x9, 0xd20, 0x4]}, @noop, @rr={0x7, 0x13, 0x79, [@dev={0xac, 0x14, 0x14, 0x31}, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x3d}, @rand_addr=0x64010101]}, @ssrr={0x89, 0xf, 0x63, [@empty, @broadcast, @remote]}, @timestamp={0x44, 0x10, 0xfd, 0x0, 0x8, [0x0, 0x6, 0x44d8]}, @generic={0x89, 0xc, "0e20a236043b03b41eea"}]}}}], 0x348}, 0x804) r2 = socket$kcm(0x10, 0x2, 0x4) close(r2) socket$kcm(0x10, 0x400000002, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, &(0x7f0000000400)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdf\x85\xaac{\x8c\x8ffp`-\xcd\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\t\xed\x13q2\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\xcb\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca\x04\x00\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x03\x00\x00\x00\x00\x00\x00\x00\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\xf3\xcf\x17\xf5\x86%\x7f\xec\xb2\xc5E\x00\xb2e\xa8\xf1<\xb2\xc82\xbf=o\x00\x00\x00\x00E\x00\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x922A\x95\x8e\xbc\xc80xffffffffffffffff}) recvmsg$unix(r2, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x7b, &(0x7f0000000000), 0x8) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)={[{0x2b, 'pids'}, {0x2b, 'blkio'}, {0x2b, 'freezer'}, {0x2d, 'cpuacct'}, {0x2d, 'devices'}, {0x2d, 'cpuacct'}, {0x2b, 'devices'}, {0x2b, 'rlimit'}]}, 0x42) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x14, 0x4, 0x4, 0x20002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="2b40000048009125745c7388641f9c0e0a"], 0xfe33) 3.522753319s ago: executing program 3 (id=1315): bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0a00000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000e90000000000000000000600000000005f779fbeab6fc0d556b60000000000000000005fb53ab99be1c7d73e11664e21a559af37a5dc02f250c34fba1ae129ea"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000bc0)={r1, 0x0, 0x0}, 0x10) socket$kcm(0x2, 0x1000000000000002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = socket$kcm(0x1e, 0x1, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r3 = gettid() syz_open_procfs$namespace(r3, &(0x7f00000002c0)='ns/net\x00') sendmsg$inet(0xffffffffffffffff, 0x0, 0x8040) r4 = socket$kcm(0xa, 0x1, 0x0) r5 = socket$kcm(0xa, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[], 0x0, 0x34}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000080000000200000000000000", @ANYRES32=r5], 0x50) perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r6 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r6, 0x6, 0x4, &(0x7f0000000b80), 0x4) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0}, 0x282, 0x0, 0x800, 0x0, 0x800000000005, 0xa, 0x0, 0x0, 0x0, 0x0, 0x4713}, 0x0, 0xd, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$kcm(0x2, 0x2, 0x73) sendmsg$inet(r7, &(0x7f0000000500)={&(0x7f0000000300)={0x2, 0x4e23, @empty}, 0x10, 0x0}, 0x900000000000000) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x8916, &(0x7f0000000000)={r5}) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x8936, &(0x7f0000000000)={r5}) 2.80040366s ago: executing program 2 (id=1316): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) bpf$TOKEN_CREATE(0x24, &(0x7f0000000680)={0x0, r0}, 0x8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r1) recvmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000015c0)=""/4096, 0x1000}], 0x1, 0x0, 0x18}, 0x100) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x13, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="4eaa00000000000071106f000000000095"], &(0x7f00000006c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) socket$kcm(0x29, 0x7, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000900000000000000000005"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16=r2, @ANYBLOB="00000000000000004d080000000000c4f88af8fd00000000bfa200000000000007020000f8000000b70400000000000085000000c3000000950000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006f87c09e8fe55a10a0015400100142603600e12080002", 0x2b}], 0x1}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000014006b0300224ed86e6c1d0002117ea6e070d6064e22000300000000250002000f00000017d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9767b4fa51f62a64c9f4060046d88037e786a6d0bdd7000000", 0x5b}, {&(0x7f0000000280)="e1", 0x1}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x8000000000000000}, 0x8210, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x2b, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x541b, &(0x7f0000000100)) r6 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001a00599c6d0e000091d028ef80"], 0xfe33) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r2, 0x58, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r8) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000380)={0x0, 0x0}, 0x8) mkdirat$cgroup(r1, &(0x7f00000007c0)='syz1\x00', 0x1ff) r10 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, r11) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x14, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000040)='GPL\x00', 0x9, 0x7d, &(0x7f0000000200)=""/125, 0x41000, 0x5, '\x00', r7, @lirc_mode2=0x10, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x1, 0xe, 0x1}, 0x10, r9, r11, 0x2, &(0x7f00000003c0)=[r2], &(0x7f0000000400)=[{0x0, 0x5, 0xf, 0x9}, {0x4, 0x3, 0xf, 0xa}], 0x10, 0x96}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) 2.7999038s ago: executing program 3 (id=1317): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x2}, 0x0, 0x0, 0xb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0xa, 0x1, 0x106) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x1a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x450, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x4, @perf_config_ext, 0x0, 0x8, 0x2, 0x5, 0x0, 0x7fff, 0x9, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0xd, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) recvmsg$unix(0xffffffffffffffff, 0x0, 0x100) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close(r2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0xe730}, 0x469, 0x9, 0x0, 0xa, 0xe4, 0xffff0000, 0xffff, 0x0, 0x102ff, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$SIOCSIFHWADDR(r2, 0x8923, &(0x7f0000002280)={'virt_wifi0\x00', @random="2d311e000008"}) 2.508726274s ago: executing program 0 (id=1318): bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000040)="1400000037000b0fd25a806c8c7394f90924fc60", 0x14}], 0x1, 0x0, 0x0, 0x20000000}, 0x200000c0) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000fcffffff1801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x1, 0xe8, 0x80, 0xa, 0x0, 0x5, 0x84003, 0x7, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x5, 0xffffffff80000001}, 0x328a, 0x7b, 0x2, 0x9, 0x9, 0xd3, 0xb, 0x0, 0xf20d, 0x0, 0x6}, 0x0, 0x3, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x5, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x0, 0x100000006}, 0x8100, 0xc8, 0x8, 0x0, 0xfffffffffffffffe, 0x341, 0x800, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x100000, r0, 0xe) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r3}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) r6 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000840000000000000001"], 0x18}, 0x41) close(r6) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x75, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x68}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4b04, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) 1.826158374s ago: executing program 1 (id=1319): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x2d, 0xd, &(0x7f0000002080)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x7, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x61, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8912, &(0x7f0000000080)) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0xfffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x13, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x1000004, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f93d24fc60", 0x14}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="11000000040000000400"], 0x48) socket$kcm(0x2c, 0x3, 0x0) close(0x4) recvmsg(r2, &(0x7f0000002440)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0x13, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002420702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000022850000009400000018010000786c6c2500000000002020207b1af8ff00000000bfa10000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r3 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="934300005a"], 0xfe33) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x40841, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x880, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000100)=[{0x1d, 0x0, 0x3}, {0x34, 0x0, 0x0, 0xffffffff}, {}, {}, {0x6}]}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000540)='GPL\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.825351944s ago: executing program 2 (id=1320): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x50) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffffc}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1}, 0x0, 0x0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r1, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff}, [@call={0x85, 0x0, 0x0, 0x75}, @printk={@lld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff0000000000000000851000000200000085000000070000009500000000000000"], 0x0, 0xfffffdff, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r6}, &(0x7f0000000280), &(0x7f0000000240)=r3}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r7, 0x4) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r2, r0}, 0xc) socket$kcm(0x2b, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000072000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r8, 0x0, 0x0}, 0x10) r9 = socket$kcm(0x2, 0x2, 0x0) sendmsg$inet(r9, &(0x7f0000000140)={&(0x7f0000000880)={0x2, 0x4e1c, @multicast2=0xe000000d}, 0x10, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=r9, @ANYBLOB="ac1417bb008000000000000038000000000000000000000007000000070e43aa5889c23ef593ae6bcd1844187c8073b5c9e00000000600000003000000080000000900001400000000000000000000000100000005000000000000001400000000000000000000000700000001000000000000001400000000000000000000000100000003000000000000001c000000000000000000000008"], 0xc0}, 0x240008c4) 1.595314157s ago: executing program 4 (id=1321): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xf, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000036000000180100006420002500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001800000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="178d048604bf0bfb1945d7430008", 0x0, 0x501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0xe, 0x0, &(0x7f00000000c0)="b994bc444b9893b04bf30981fd1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50) 1.548874158s ago: executing program 3 (id=1322): socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_ELEM(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000012006b04000000d86e6c1d0000147ea60864160af36504b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f4080003680601000008000300ff00", 0x5a}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x7c, &(0x7f00000000c0)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000400110000000a600e41b0000900ac00060411000000160012000a0003fe0248035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001700)=ANY=[], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) socket$kcm(0x10, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000001000000000000000000feff8500000087000000850000000800000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x21, 0x2, 0x2) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x9, 0x5, 0x8000, 0xfff7, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000007d00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) 1.546198208s ago: executing program 2 (id=1323): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x200400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext={0x3fff80000000000, 0x1}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xd17}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xfca2, &(0x7f00000003c0)=[{&(0x7f0000000340)="e03f030039000b03d25a806c8c6394f90324fc60100000013856f71ab0bf291c75c3000a02f377e3428200e9309d025ce7b5807228baacd430fc222f32d3eb1ed256241a49cafc9a76d41bd8324d43a5f219b0e3e3ade8070604a1ef4539465b1eff26fd88f401df35c7850000000000000000000000008bdb", 0x33fe0}, {&(0x7f0000000400)="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"}], 0x1}, 0x100408c4) (async) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xfca2, &(0x7f00000003c0)=[{&(0x7f0000000340)="e03f030039000b03d25a806c8c6394f90324fc60100000013856f71ab0bf291c75c3000a02f377e3428200e9309d025ce7b5807228baacd430fc222f32d3eb1ed256241a49cafc9a76d41bd8324d43a5f219b0e3e3ade8070604a1ef4539465b1eff26fd88f401df35c7850000000000000000000000008bdb", 0x33fe0}, {&(0x7f0000000400)="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"}], 0x1}, 0x100408c4) r4 = perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0xf7, 0x7f, 0x7f, 0x7, 0x0, 0x4, 0x40220, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x4, @perf_config_ext={0x2}, 0x2100, 0x2, 0x6, 0x0, 0x5, 0x7, 0xb, 0x0, 0x2, 0x0, 0xfff}, 0xffffffffffffffff, 0x2, r3, 0xb) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000900)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) (async) r5 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000900)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1f, 0x18, &(0x7f00000000c0)=@ringbuf={{0x18, 0x6}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x3, 0x3, 0x3, 0x9}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x24}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x2}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r7}, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="61106400000000006113740000000000bfa00000000000000700000008ffffffd503010017740040950000000000000069163a0000000000bf67000000000000350607000fff07201706000020190000160300000ee60060bf050000000000007b6500ff000000006507f9ff01000000070700004d83dde4c375000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f17540faf80250aa20c669a5e12814cb1cea5d4601d295c45a6a0b9bdb7dd399703cac4f6f3be4b369226066812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000400c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44221b235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20ceddf4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10fd7ed6735154beb4000000000000000000000000004000bc00f6746a9709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43ea0ffb567b40407d000000210000000000000000005f37d8703f37ca364a601ae899a56715a0a62a34c1d926a0f6a5480a55c22fe3a5ac00000000000000000000000500002000000000fb79ea00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e14d90deae46e26c596f84eba90000000000000000fffb0000000082fb0d3cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b06ff7f0000000000007f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a1f37302f3b41eae59809fd05d12f6106f117b062df67d3a6473265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089e0b1c23c0f3cdad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a1a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631d22bad050e9856b48ae3a03a497c37758537650fe6db89da3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0af1cb3f1f815f8989d78854ca4d3116dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4c6ea9604faf0453bedf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c29984864961a57ff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee15620789c524b3baf49a09d8be0fc5beecf153236c19740be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2b4dc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca87ddd9d064e081383409ed2912c811ae63f03212a5331c2a4ead000000000000000000000000000000000000000000000000001386866b311bd144bc32e059658c9f8342c90c1ade31b78072841b8b5a943d62a44cea6b050c42e3c205fad6a23fb43c93da0f49d911877265e6ee443e37397ecf89021e7f579e8d3a74c12b52938d91e9de07fc8eeeb9505f4a9c26266bf5449484ccc1317c7476"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r8, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="3504000040000511d25a80648c63940d0324fc60040035400c0002", 0x1b}], 0x1}, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="3504000040000511d25a80648c63940d0324fc60040035400c0002", 0x1b}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x0) (async) r9 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe000032"], 0xfe33) (async) write$cgroup_subtree(r9, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe000032"], 0xfe33) ioctl$PERF_EVENT_IOC_DISABLE(r4, 0x2401, 0x0) 1.38130049s ago: executing program 0 (id=1324): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0xa082, 0x3, 0x0, 0x0, 0x1163, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000000000), 0x4) r1 = socket$kcm(0x10, 0x2, 0x4) close(r1) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0xffffffffffffffbd, &(0x7f0000000040)=[{&(0x7f00000001c0)="5c00000010006bcc9e3be35c6e17aa31076b876c1d000000000000000300000304001ac00800120004000500020000000064bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4040040) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x54) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000001300)=ANY=[@ANYBLOB="180000000000000000000000feffff850000007500df13bb3240d4c99b00007baaf8ff00000000b508000000000000000000070100e0f7f7ffffbfa400000000000007040000f0ff0200000000000000000018234700d46d888012702ba0a831a8356731cfa175f2877f2b23772eb82cec6f8208eb862108aa72537f4221e268d7337760c61323755ba19ffd5ba8763f14000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a70000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000001c0)='\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071116200000000008510000002000000850000000500000095000000000000009504a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000a80)=@framed={{}, [@ringbuf_output={{0x18, 0x5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x55}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 908.971798ms ago: executing program 2 (id=1325): socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x12, 0x0, 0x0) r0 = socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(r0, 0x110, 0x3, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00379ef2cbdb0000000000000000000000000000000000000000000000000000003ff8d4e35b0375d662711fd1ac9b4b95c276e52ac3de4eb9cbf62edb02076bc50aaeba0cd8"], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb6042, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x1, @perf_config_ext, 0x10c002, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, &(0x7f0000000040)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x1f4, 0x11, 0x0, &(0x7f00000001c0)="ffffffff7f833e9762a536c801d72069a0", 0x0, 0x304, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x8}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000200000005"], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32=r3], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r4}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x20}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.284831ms ago: executing program 2 (id=1326): bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0a00000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000e90000000000000000000600000000005f779fbeab6fc0d556b60000000000000000005fb53ab99be1c7d73e11664e21a559af37a5dc02f250c34fba1ae129ea"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000bc0)={r1, 0x0, 0x0}, 0x10) socket$kcm(0x2, 0x1000000000000002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = socket$kcm(0x1e, 0x1, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r3 = gettid() syz_open_procfs$namespace(r3, &(0x7f00000002c0)='ns/net\x00') sendmsg$inet(0xffffffffffffffff, 0x0, 0x8040) r4 = socket$kcm(0xa, 0x1, 0x0) r5 = socket$kcm(0xa, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[], 0x0, 0x34}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000080000000200000000000000", @ANYRES32=r5], 0x50) perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r6 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r6, 0x6, 0x4, &(0x7f0000000b80), 0x4) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0}, 0x282, 0x0, 0x800, 0x0, 0x800000000005, 0xa, 0x0, 0x0, 0x0, 0x0, 0x4713}, 0x0, 0xd, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$kcm(0x2, 0x2, 0x73) sendmsg$inet(r7, &(0x7f0000000500)={&(0x7f0000000300)={0x2, 0x4e23, @empty}, 0x10, 0x0}, 0x900000000000000) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x8916, &(0x7f0000000000)={r5}) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x8936, &(0x7f0000000000)={r5}) 590.151µs ago: executing program 0 (id=1327): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x2d, 0xd, &(0x7f0000002080)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x7, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x61, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8912, &(0x7f0000000080)) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0xfffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x13, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x1000004, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="11000000040000000400"], 0x48) socket$kcm(0x2c, 0x3, 0x0) close(0x4) recvmsg(0xffffffffffffffff, &(0x7f0000002440)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0x13, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002420702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000022850000009400000018010000786c6c2500000000002020207b1af8ff00000000bfa10000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="934300005a"], 0xfe33) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x40841, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x880, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000100)=[{0x1d, 0x0, 0x3}, {0x34, 0x0, 0x0, 0xffffffff}, {}, {}, {0x6}]}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000540)='GPL\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 4 (id=1328): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x2d, 0xd, &(0x7f0000002080)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x7, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x61, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8912, &(0x7f0000000080)) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0xfffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x13, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x1000004, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f93d24fc60", 0x14}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="11000000040000000400"], 0x48) socket$kcm(0x2c, 0x3, 0x0) close(0x4) recvmsg(r2, &(0x7f0000002440)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0x13, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002420702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000022850000009400000018010000786c6c2500000000002020207b1af8ff00000000bfa10000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="934300005a"], 0xfe33) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x40841, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x880, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000100)=[{0x1d, 0x0, 0x3}, {0x34, 0x0, 0x0, 0xffffffff}, {}, {}, {0x6}]}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000540)='GPL\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 84.451863][ T4277] device veth1_vlan entered promiscuous mode [ 84.463582][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 84.472272][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 84.483008][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 84.491199][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 84.499930][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 84.521625][ T4273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.547231][ T4280] device veth1_vlan entered promiscuous mode [ 84.556105][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 84.567213][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 84.575598][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 84.583073][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 84.602520][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 84.614644][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 84.631412][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 84.647631][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 84.671519][ T4282] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.690045][ T4277] device veth0_macvtap entered promiscuous mode [ 84.722715][ T4277] device veth1_macvtap entered promiscuous mode [ 84.741730][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 84.753376][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 84.775691][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 84.791712][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 84.820735][ T4280] device veth0_macvtap entered promiscuous mode [ 84.842674][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 84.851900][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 84.861745][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 84.873285][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 84.882739][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 84.902637][ T4282] device veth0_vlan entered promiscuous mode [ 84.922924][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.933681][ T4280] device veth1_macvtap entered promiscuous mode [ 84.951700][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 84.974904][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 84.983577][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 85.004379][ T4276] Bluetooth: hci0: command 0x040f tx timeout [ 85.009923][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 85.034070][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 85.057960][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.074441][ T4276] Bluetooth: hci1: command 0x040f tx timeout [ 85.083174][ T4273] device veth0_vlan entered promiscuous mode [ 85.118242][ T4282] device veth1_vlan entered promiscuous mode [ 85.128051][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 85.140300][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 85.148593][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 85.164879][ T4276] Bluetooth: hci3: command 0x040f tx timeout [ 85.172400][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 85.181919][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 85.191285][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 85.199948][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 85.211112][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 85.220419][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 85.231911][ T4277] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.241335][ T4276] Bluetooth: hci2: command 0x040f tx timeout [ 85.249986][ T4277] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.259136][ T4277] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.268222][ T4277] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.282716][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.294427][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.307177][ T4280] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.314554][ T48] Bluetooth: hci4: command 0x040f tx timeout [ 85.349524][ T4273] device veth1_vlan entered promiscuous mode [ 85.366495][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 85.378269][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 85.406616][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 85.415826][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 85.425432][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 85.435701][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 85.445301][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.460755][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.472984][ T4280] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.518173][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 85.526443][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 85.536655][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 85.546882][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 85.556418][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 85.568646][ T4280] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.579594][ T4280] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.588456][ T4280] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.597411][ T4280] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.609838][ T4282] device veth0_macvtap entered promiscuous mode [ 85.621392][ T4281] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.713869][ T4282] device veth1_macvtap entered promiscuous mode [ 85.725478][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 85.736870][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 85.762139][ T4273] device veth0_macvtap entered promiscuous mode [ 85.811882][ T4332] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.826472][ T4332] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.843188][ T4273] device veth1_macvtap entered promiscuous mode [ 85.862209][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.884429][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.899039][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.911171][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.925082][ T4282] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.936987][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 85.945962][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 85.957053][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 85.975904][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 85.985314][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 86.014155][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.041766][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.057969][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.070372][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.086756][ T4282] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.109435][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 86.119534][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 86.131760][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.143536][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.154014][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.165898][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.176241][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.187535][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.200211][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.210989][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.218924][ T4282] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.218987][ T4282] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.219019][ T4282] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.249531][ T4282] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.268209][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.276834][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 86.295734][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 86.320098][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 86.336827][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.360175][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.374119][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.384868][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.395471][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.406883][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.418917][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.434483][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 86.438834][ T128] cfg80211: failed to load regulatory.db [ 86.455589][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 86.486259][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.507077][ T4273] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.516683][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.544270][ T4273] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.553041][ T4273] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.574262][ T4273] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.615589][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 86.784826][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.841604][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.842810][ C1] hrtimer: interrupt took 80755 ns [ 86.929830][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 86.958304][ T4298] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.975195][ T4298] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.028366][ T4360] syz.2.3 uses obsolete (PF_INET,SOCK_PACKET) [ 87.073374][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 87.080986][ T4276] Bluetooth: hci0: command 0x0419 tx timeout [ 87.104912][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.112803][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.125142][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.134097][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.154701][ T4276] Bluetooth: hci1: command 0x0419 tx timeout [ 87.192616][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 87.211307][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 87.238048][ T4276] Bluetooth: hci3: command 0x0419 tx timeout [ 87.244992][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 87.265164][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 87.314276][ T4276] Bluetooth: hci2: command 0x0419 tx timeout [ 87.403965][ T4276] Bluetooth: hci4: command 0x0419 tx timeout [ 87.475415][ T4281] device veth0_vlan entered promiscuous mode [ 87.483556][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 87.515076][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 87.557453][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 87.580237][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 87.642899][ T4281] device veth1_vlan entered promiscuous mode [ 87.866249][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 87.876808][ T4298] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.958077][ T4298] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.021142][ T4369] netlink: 'syz.0.1': attribute type 4 has an invalid length. [ 88.089431][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 88.206869][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 88.251554][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 88.336836][ T4281] device veth0_macvtap entered promiscuous mode [ 88.361660][ T4281] device veth1_macvtap entered promiscuous mode [ 88.462722][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.491365][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.549622][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.562029][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.572294][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.583120][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.604122][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.634272][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.662663][ T4281] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.753361][ T4384] Zero length message leads to an empty skb [ 88.776516][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 88.785358][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 88.793785][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 88.853080][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 88.881016][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.901858][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.924866][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.970226][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.001112][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.025402][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.037032][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.048239][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.061909][ T4281] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.069967][ T4384] netlink: 'syz.0.8': attribute type 4 has an invalid length. [ 89.099759][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 89.109667][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 89.128942][ T4281] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.141784][ T4281] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.153202][ T4281] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.174224][ T4281] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.240246][ T4390] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9'. [ 89.345661][ T4393] netlink: 'syz.3.10': attribute type 4 has an invalid length. [ 89.560504][ T4396] netlink: 48 bytes leftover after parsing attributes in process `syz.0.11'. [ 89.603189][ T4399] Driver unsupported XDP return value 0 on prog (id 7) dev N/A, expect packet loss! [ 89.723971][ T4396] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.788051][ T4400] netlink: 'syz.2.12': attribute type 4 has an invalid length. [ 89.892336][ T4332] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.902628][ T4332] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.924356][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 90.052339][ T4332] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.079099][ T4332] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.123222][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 91.088078][ T4412] netlink: 48 bytes leftover after parsing attributes in process `syz.2.15'. [ 91.225076][ T4412] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.522364][ T4420] netlink: 'syz.4.5': attribute type 4 has an invalid length. [ 91.761485][ T4428] netlink: 4 bytes leftover after parsing attributes in process `syz.1.21'. [ 91.951684][ T4435] netlink: 'syz.4.22': attribute type 10 has an invalid length. [ 91.990184][ T4435] netlink: 55 bytes leftover after parsing attributes in process `syz.4.22'. [ 93.159594][ T4436] netlink: 'syz.1.21': attribute type 10 has an invalid length. [ 93.326506][ T4436] device veth0_vlan left promiscuous mode [ 93.418682][ T4436] device veth0_vlan entered promiscuous mode [ 93.490355][ T4436] team0: Device veth0_vlan failed to register rx_handler [ 93.711467][ T4457] netlink: 48 bytes leftover after parsing attributes in process `syz.4.29'. [ 93.843806][ T4457] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.890539][ T4460] netlink: 'syz.1.30': attribute type 4 has an invalid length. [ 94.170878][ T4464] netlink: 48 bytes leftover after parsing attributes in process `syz.4.32'. [ 94.409755][ T4475] bridge0: port 3(batadv0) entered blocking state [ 94.417421][ T4475] bridge0: port 3(batadv0) entered disabled state [ 94.451721][ T4475] device batadv0 entered promiscuous mode [ 94.468918][ T4475] bridge0: port 3(batadv0) entered blocking state [ 94.475890][ T4475] bridge0: port 3(batadv0) entered forwarding state [ 94.493527][ T4478] netlink: 'syz.3.36': attribute type 39 has an invalid length. [ 94.845111][ T46] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 94.854723][ T46] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 94.889541][ T4485] netlink: 'syz.4.37': attribute type 4 has an invalid length. [ 95.098076][ T4488] netlink: 'syz.2.39': attribute type 4 has an invalid length. [ 95.328592][ T4494] netlink: 'syz.0.40': attribute type 10 has an invalid length. [ 95.359167][ T4494] netlink: 55 bytes leftover after parsing attributes in process `syz.0.40'. [ 96.619067][ T4502] netlink: 48 bytes leftover after parsing attributes in process `syz.4.42'. [ 96.628128][ T4505] netlink: 'syz.1.43': attribute type 4 has an invalid length. [ 96.941663][ T4510] netlink: 'syz.2.47': attribute type 4 has an invalid length. [ 97.444358][ T4524] bridge0: port 3(batadv0) entered blocking state [ 97.465189][ T4524] bridge0: port 3(batadv0) entered disabled state [ 97.529418][ T4524] device batadv0 entered promiscuous mode [ 97.587976][ T36] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 97.594453][ T4524] bridge0: port 3(batadv0) entered blocking state [ 97.597593][ T36] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 97.604148][ T4524] bridge0: port 3(batadv0) entered forwarding state [ 97.664151][ T4525] netlink: 'syz.1.52': attribute type 39 has an invalid length. [ 98.370082][ T4539] netlink: 4 bytes leftover after parsing attributes in process `syz.0.55'. [ 99.009811][ T4542] netlink: 48 bytes leftover after parsing attributes in process `syz.1.57'. [ 99.211487][ T4542] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.241892][ T4547] netlink: 'syz.0.55': attribute type 10 has an invalid length. [ 99.563317][ T4555] netlink: 'syz.4.58': attribute type 4 has an invalid length. [ 99.658034][ T4561] netlink: 'syz.3.60': attribute type 4 has an invalid length. [ 99.782540][ T4557] netlink: 4 bytes leftover after parsing attributes in process `syz.2.59'. [ 99.985561][ T4564] netlink: 'syz.1.62': attribute type 4 has an invalid length. [ 100.088988][ T4568] netlink: 'syz.4.63': attribute type 4 has an invalid length. [ 100.270822][ T4572] netlink: 'syz.3.66': attribute type 4 has an invalid length. [ 100.634214][ T4586] netlink: 'syz.0.68': attribute type 4 has an invalid length. [ 100.802251][ T4591] FAULT_INJECTION: forcing a failure. [ 100.802251][ T4591] name failslab, interval 1, probability 0, space 0, times 1 [ 100.874186][ T4591] CPU: 0 PID: 4591 Comm: syz.3.71 Not tainted syzkaller #0 [ 100.881454][ T4591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 100.891551][ T4591] Call Trace: [ 100.894895][ T4591] [ 100.897856][ T4591] dump_stack_lvl+0x188/0x24e [ 100.902582][ T4591] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 100.908802][ T4591] ? show_regs_print_info+0x12/0x12 [ 100.914085][ T4591] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 100.920304][ T4591] should_fail_ex+0x390/0x4c0 [ 100.925024][ T4591] should_failslab+0x5/0x20 [ 100.929560][ T4591] slab_pre_alloc_hook+0x59/0x300 [ 100.934637][ T4591] ? kernfs_fop_write_iter+0x154/0x520 [ 100.940154][ T4591] __kmem_cache_alloc_node+0x4f/0x270 [ 100.945578][ T4591] ? kernfs_fop_write_iter+0x154/0x520 [ 100.951085][ T4591] __kmalloc+0xa3/0x240 [ 100.955322][ T4591] kernfs_fop_write_iter+0x154/0x520 [ 100.960665][ T4591] vfs_write+0x482/0x9a0 [ 100.964959][ T4591] ? file_end_write+0x250/0x250 [ 100.969869][ T4591] ? __fget_files+0x3fc/0x460 [ 100.974602][ T4591] ? __fdget_pos+0x2ae/0x360 [ 100.979256][ T4591] ? ksys_write+0x70/0x260 [ 100.983727][ T4591] ksys_write+0x14d/0x260 [ 100.988118][ T4591] ? __ia32_sys_read+0x80/0x80 [ 100.992956][ T4591] ? lockdep_hardirqs_on+0x94/0x140 [ 100.998225][ T4591] do_syscall_64+0x4c/0xa0 [ 101.002689][ T4591] ? clear_bhb_loop+0x60/0xb0 [ 101.007416][ T4591] ? clear_bhb_loop+0x60/0xb0 [ 101.012141][ T4591] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 101.018102][ T4591] RIP: 0033:0x7f600679ce59 [ 101.022564][ T4591] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.042218][ T4591] RSP: 002b:00007f60075fb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 101.050675][ T4591] RAX: ffffffffffffffda RBX: 00007f6006a15fa0 RCX: 00007f600679ce59 [ 101.058674][ T4591] RDX: 000000000000000c RSI: 0000200000000080 RDI: 0000000000000007 [ 101.066666][ T4591] RBP: 00007f60075fb090 R08: 0000000000000000 R09: 0000000000000000 [ 101.074688][ T4591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 101.082690][ T4591] R13: 00007f6006a16038 R14: 00007f6006a15fa0 R15: 00007ffd618a7ac8 [ 101.090698][ T4591] [ 101.239501][ T4599] netlink: 4 bytes leftover after parsing attributes in process `syz.2.74'. [ 101.289218][ T4604] netlink: 'syz.2.74': attribute type 10 has an invalid length. [ 101.415446][ T4604] device veth0_vlan left promiscuous mode [ 101.491062][ T4604] device veth0_vlan entered promiscuous mode [ 101.501070][ T4604] team0: Device veth0_vlan failed to register rx_handler [ 101.683786][ T4612] netlink: 128 bytes leftover after parsing attributes in process `syz.3.79'. [ 101.711701][ T4612] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 101.751454][ T4617] netlink: 'syz.0.77': attribute type 4 has an invalid length. [ 101.959598][ T4619] netlink: 'syz.1.81': attribute type 4 has an invalid length. [ 103.550770][ T4652] FAULT_INJECTION: forcing a failure. [ 103.550770][ T4652] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 103.599243][ T4652] CPU: 1 PID: 4652 Comm: syz.3.92 Not tainted syzkaller #0 [ 103.606518][ T4652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 103.616616][ T4652] Call Trace: [ 103.619935][ T4652] [ 103.622933][ T4652] dump_stack_lvl+0x188/0x24e [ 103.627747][ T4652] ? show_regs_print_info+0x12/0x12 [ 103.632978][ T4652] ? load_image+0x410/0x410 [ 103.637534][ T4652] should_fail_ex+0x390/0x4c0 [ 103.642242][ T4652] _copy_from_iter+0x1c0/0x1130 [ 103.647125][ T4652] ? copyout_mc+0x110/0x110 [ 103.651651][ T4652] ? __virt_addr_valid+0x188/0x540 [ 103.656798][ T4652] ? __virt_addr_valid+0x188/0x540 [ 103.661951][ T4652] ? __virt_addr_valid+0x467/0x540 [ 103.667101][ T4652] ? __phys_addr_symbol+0x2b/0x70 [ 103.672155][ T4652] ? __check_object_size+0x4f6/0xa70 [ 103.677477][ T4652] kernfs_fop_write_iter+0x19a/0x520 [ 103.682897][ T4652] vfs_write+0x482/0x9a0 [ 103.687180][ T4652] ? file_end_write+0x250/0x250 [ 103.692069][ T4652] ? __fget_files+0x3fc/0x460 [ 103.696790][ T4652] ? __fdget_pos+0x2ae/0x360 [ 103.701425][ T4652] ? ksys_write+0x70/0x260 [ 103.705880][ T4652] ksys_write+0x14d/0x260 [ 103.710247][ T4652] ? __ia32_sys_read+0x80/0x80 [ 103.715061][ T4652] ? syscall_enter_from_user_mode+0x2a/0x80 [ 103.720993][ T4652] do_syscall_64+0x4c/0xa0 [ 103.725436][ T4652] ? clear_bhb_loop+0x60/0xb0 [ 103.730157][ T4652] ? clear_bhb_loop+0x60/0xb0 [ 103.734867][ T4652] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 103.740798][ T4652] RIP: 0033:0x7f600679ce59 [ 103.745343][ T4652] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.764981][ T4652] RSP: 002b:00007f60075fb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 103.773428][ T4652] RAX: ffffffffffffffda RBX: 00007f6006a15fa0 RCX: 00007f600679ce59 [ 103.781423][ T4652] RDX: 000000000000000c RSI: 0000200000000080 RDI: 0000000000000007 [ 103.789435][ T4652] RBP: 00007f60075fb090 R08: 0000000000000000 R09: 0000000000000000 [ 103.797435][ T4652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.805431][ T4652] R13: 00007f6006a16038 R14: 00007f6006a15fa0 R15: 00007ffd618a7ac8 [ 103.813451][ T4652] [ 104.072930][ T4658] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.94'. [ 104.225526][ T4666] netlink: 170140 bytes leftover after parsing attributes in process `syz.1.95'. [ 105.501901][ T4688] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.104'. [ 105.625423][ T4700] FAULT_INJECTION: forcing a failure. [ 105.625423][ T4700] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 105.663891][ T4702] validate_nla: 3 callbacks suppressed [ 105.663907][ T4702] netlink: 'syz.2.107': attribute type 21 has an invalid length. [ 105.684159][ T4700] CPU: 0 PID: 4700 Comm: syz.0.105 Not tainted syzkaller #0 [ 105.691556][ T4700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 105.701678][ T4700] Call Trace: [ 105.704986][ T4700] [ 105.707959][ T4700] dump_stack_lvl+0x188/0x24e [ 105.712703][ T4700] ? show_regs_print_info+0x12/0x12 [ 105.717942][ T4700] ? load_image+0x410/0x410 [ 105.722493][ T4700] ? __lock_acquire+0x7bd0/0x7bd0 [ 105.727585][ T4700] should_fail_ex+0x390/0x4c0 [ 105.732319][ T4700] _copy_from_user+0x2c/0x170 [ 105.737064][ T4700] ___sys_sendmsg+0x1c3/0x360 [ 105.741798][ T4700] ? __sys_sendmsg+0x2a0/0x2a0 [ 105.746637][ T4700] ? ktime_get+0x7b/0x270 [ 105.751038][ T4700] __se_sys_sendmsg+0x1c3/0x2b0 [ 105.755940][ T4700] ? __x64_sys_sendmsg+0x80/0x80 [ 105.760961][ T4700] ? lockdep_hardirqs_on+0x94/0x140 [ 105.766205][ T4700] do_syscall_64+0x4c/0xa0 [ 105.770642][ T4700] ? clear_bhb_loop+0x60/0xb0 [ 105.775337][ T4700] ? clear_bhb_loop+0x60/0xb0 [ 105.780032][ T4700] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 105.785955][ T4700] RIP: 0033:0x7f6ab499ce59 [ 105.790396][ T4700] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.810041][ T4700] RSP: 002b:00007f6ab2bf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 105.818490][ T4700] RAX: ffffffffffffffda RBX: 00007f6ab4c16090 RCX: 00007f6ab499ce59 [ 105.826526][ T4700] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006 [ 105.834535][ T4700] RBP: 00007f6ab2bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 105.842534][ T4700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.850525][ T4700] R13: 00007f6ab4c16128 R14: 00007f6ab4c16090 R15: 00007ffcf176c658 [ 105.858533][ T4700] [ 105.888547][ T4703] FAULT_INJECTION: forcing a failure. [ 105.888547][ T4703] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 105.912005][ T4702] netlink: 156 bytes leftover after parsing attributes in process `syz.2.107'. [ 105.922771][ T4703] CPU: 0 PID: 4703 Comm: syz.3.108 Not tainted syzkaller #0 [ 105.930128][ T4703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 105.940227][ T4703] Call Trace: [ 105.943538][ T4703] [ 105.946491][ T4703] dump_stack_lvl+0x188/0x24e [ 105.951214][ T4703] ? show_regs_print_info+0x12/0x12 [ 105.956438][ T4703] ? load_image+0x410/0x410 [ 105.960981][ T4703] ? __lock_acquire+0x7bd0/0x7bd0 [ 105.966037][ T4703] ? snprintf+0xe5/0x140 [ 105.970338][ T4703] should_fail_ex+0x390/0x4c0 [ 105.975040][ T4703] _copy_to_user+0x2c/0x130 [ 105.979576][ T4703] simple_read_from_buffer+0xe3/0x150 [ 105.984975][ T4703] proc_fail_nth_read+0x1a6/0x220 [ 105.990023][ T4703] ? proc_fault_inject_write+0x310/0x310 [ 105.995681][ T4703] ? fsnotify_perm+0x248/0x550 [ 106.000475][ T4703] ? proc_fault_inject_write+0x310/0x310 [ 106.006149][ T4703] vfs_read+0x2db/0x960 [ 106.010342][ T4703] ? kernel_read+0x1e0/0x1e0 [ 106.014963][ T4703] ? __fget_files+0x28/0x460 [ 106.019604][ T4703] ? __fget_files+0x3fc/0x460 [ 106.024327][ T4703] ? __fdget_pos+0x2ae/0x360 [ 106.028969][ T4703] ? ksys_read+0x70/0x260 [ 106.033346][ T4703] ksys_read+0x14d/0x260 [ 106.037663][ T4703] ? vfs_write+0x9a0/0x9a0 [ 106.042113][ T4703] ? lockdep_hardirqs_on+0x94/0x140 [ 106.047342][ T4703] do_syscall_64+0x4c/0xa0 [ 106.051784][ T4703] ? clear_bhb_loop+0x60/0xb0 [ 106.056488][ T4703] ? clear_bhb_loop+0x60/0xb0 [ 106.061189][ T4703] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 106.067111][ T4703] RIP: 0033:0x7f600675d68e [ 106.071546][ T4703] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 106.091177][ T4703] RSP: 002b:00007f60075fafe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 106.099613][ T4703] RAX: ffffffffffffffda RBX: 00007f60075fb6c0 RCX: 00007f600675d68e [ 106.107610][ T4703] RDX: 000000000000000f RSI: 00007f60075fb0a0 RDI: 0000000000000008 [ 106.115608][ T4703] RBP: 00007f60075fb090 R08: 0000000000000000 R09: 0000000000000000 [ 106.123605][ T4703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 106.131601][ T4703] R13: 00007f6006a16038 R14: 00007f6006a15fa0 R15: 00007ffd618a7ac8 [ 106.139621][ T4703] [ 107.306547][ T4743] FAULT_INJECTION: forcing a failure. [ 107.306547][ T4743] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 107.357273][ T4743] CPU: 1 PID: 4743 Comm: syz.1.121 Not tainted syzkaller #0 [ 107.364629][ T4743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 107.374720][ T4743] Call Trace: [ 107.378051][ T4743] [ 107.381008][ T4743] dump_stack_lvl+0x188/0x24e [ 107.385730][ T4743] ? show_regs_print_info+0x12/0x12 [ 107.390966][ T4743] ? lockdep_hardirqs_on+0x94/0x140 [ 107.396232][ T4743] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 107.402467][ T4743] should_fail_ex+0x390/0x4c0 [ 107.407191][ T4743] _copy_from_user+0x2c/0x170 [ 107.411918][ T4743] iovec_from_user+0x143/0x360 [ 107.416727][ T4743] __import_iovec+0x6c/0x510 [ 107.421358][ T4743] import_iovec+0x6f/0xa0 [ 107.425746][ T4743] ___sys_sendmsg+0x252/0x360 [ 107.430544][ T4743] ? __sys_sendmsg+0x2a0/0x2a0 [ 107.435386][ T4743] ? ktime_get+0x7b/0x270 [ 107.439777][ T4743] __se_sys_sendmsg+0x1c3/0x2b0 [ 107.444666][ T4743] ? __x64_sys_sendmsg+0x80/0x80 [ 107.449657][ T4743] ? lockdep_hardirqs_on+0x94/0x140 [ 107.454907][ T4743] do_syscall_64+0x4c/0xa0 [ 107.459362][ T4743] ? clear_bhb_loop+0x60/0xb0 [ 107.464086][ T4743] ? clear_bhb_loop+0x60/0xb0 [ 107.468812][ T4743] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 107.474760][ T4743] RIP: 0033:0x7fd4f719ce59 [ 107.479215][ T4743] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.498844][ T4743] RSP: 002b:00007fd4f80df028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 107.507279][ T4743] RAX: ffffffffffffffda RBX: 00007fd4f7416090 RCX: 00007fd4f719ce59 [ 107.515274][ T4743] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006 [ 107.523279][ T4743] RBP: 00007fd4f80df090 R08: 0000000000000000 R09: 0000000000000000 [ 107.531275][ T4743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.539302][ T4743] R13: 00007fd4f7416128 R14: 00007fd4f7416090 R15: 00007fff4d3d3b48 [ 107.547311][ T4743] [ 109.075867][ T4796] FAULT_INJECTION: forcing a failure. [ 109.075867][ T4796] name failslab, interval 1, probability 0, space 0, times 0 [ 109.137467][ T4796] CPU: 0 PID: 4796 Comm: syz.0.137 Not tainted syzkaller #0 [ 109.144838][ T4796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 109.154948][ T4796] Call Trace: [ 109.158266][ T4796] [ 109.161242][ T4796] dump_stack_lvl+0x188/0x24e [ 109.166033][ T4796] ? lockdep_hardirqs_on+0x94/0x140 [ 109.171286][ T4796] ? show_regs_print_info+0x12/0x12 [ 109.176546][ T4796] ? _printk+0x11b/0x130 [ 109.180845][ T4796] should_fail_ex+0x390/0x4c0 [ 109.185574][ T4796] should_failslab+0x5/0x20 [ 109.190109][ T4796] slab_pre_alloc_hook+0x59/0x300 [ 109.195176][ T4796] kmem_cache_alloc_node+0x5a/0x310 [ 109.200414][ T4796] ? __alloc_skb+0xa2/0x7d0 [ 109.204955][ T4796] ? __alloc_skb+0xf9/0x7d0 [ 109.209510][ T4796] __alloc_skb+0xf9/0x7d0 [ 109.213896][ T4796] netlink_sendmsg+0x654/0xbd0 [ 109.218724][ T4796] ? netlink_getsockopt+0x550/0x550 [ 109.223964][ T4796] ? aa_sock_msg_perm+0x94/0x150 [ 109.228959][ T4796] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 109.234282][ T4796] ? security_socket_sendmsg+0x7c/0xa0 [ 109.239778][ T4796] ? netlink_getsockopt+0x550/0x550 [ 109.245021][ T4796] ____sys_sendmsg+0x5ed/0x9a0 [ 109.249830][ T4796] ? __sys_sendmsg_sock+0x30/0x30 [ 109.254910][ T4796] ? __import_iovec+0x306/0x510 [ 109.259804][ T4796] ? import_iovec+0x6f/0xa0 [ 109.264344][ T4796] ___sys_sendmsg+0x2a2/0x360 [ 109.269079][ T4796] ? __sys_sendmsg+0x2a0/0x2a0 [ 109.273903][ T4796] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 109.279694][ T4796] __se_sys_sendmsg+0x1c3/0x2b0 [ 109.284596][ T4796] ? __x64_sys_sendmsg+0x80/0x80 [ 109.289589][ T4796] ? syscall_enter_from_user_mode+0x2a/0x80 [ 109.295564][ T4796] do_syscall_64+0x4c/0xa0 [ 109.300039][ T4796] ? clear_bhb_loop+0x60/0xb0 [ 109.304765][ T4796] ? clear_bhb_loop+0x60/0xb0 [ 109.309480][ T4796] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 109.315428][ T4796] RIP: 0033:0x7f6ab499ce59 [ 109.319886][ T4796] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.339538][ T4796] RSP: 002b:00007f6ab578a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 109.347992][ T4796] RAX: ffffffffffffffda RBX: 00007f6ab4c15fa0 RCX: 00007f6ab499ce59 [ 109.356008][ T4796] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006 [ 109.364022][ T4796] RBP: 00007f6ab578a090 R08: 0000000000000000 R09: 0000000000000000 [ 109.372036][ T4796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 109.380048][ T4796] R13: 00007f6ab4c16038 R14: 00007f6ab4c15fa0 R15: 00007ffcf176c658 [ 109.388105][ T4796] [ 109.996804][ T4816] device veth1_macvtap left promiscuous mode [ 110.251743][ T4826] device veth1_macvtap entered promiscuous mode [ 110.301443][ T4826] device macsec0 entered promiscuous mode [ 110.369476][ T4508] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 110.376729][ T4829] netlink: 'syz.4.145': attribute type 3 has an invalid length. [ 110.479223][ T4829] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.145'. [ 110.704091][ T4838] netlink: 'syz.3.149': attribute type 3 has an invalid length. [ 111.883772][ T4874] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.160'. [ 112.019700][ T4867] delete_channel: no stack [ 112.372537][ T4883] netlink: 'syz.3.164': attribute type 4 has an invalid length. [ 112.409008][ T4883] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.164'. [ 112.594445][ T4894] FAULT_INJECTION: forcing a failure. [ 112.594445][ T4894] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 112.706112][ T4897] netlink: 'syz.2.169': attribute type 10 has an invalid length. [ 112.784134][ T4894] CPU: 1 PID: 4894 Comm: syz.0.168 Not tainted syzkaller #0 [ 112.791493][ T4894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 112.801619][ T4894] Call Trace: [ 112.804924][ T4894] [ 112.807887][ T4894] dump_stack_lvl+0x188/0x24e [ 112.812610][ T4894] ? show_regs_print_info+0x12/0x12 [ 112.817845][ T4894] ? load_image+0x410/0x410 [ 112.822399][ T4894] ? __might_fault+0xa6/0x120 [ 112.827165][ T4894] should_fail_ex+0x390/0x4c0 [ 112.831886][ T4894] copyin+0x1b/0x120 [ 112.835818][ T4894] _copy_from_iter+0x447/0x1130 [ 112.837260][ T4897] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 112.840691][ T4894] ? copyout_mc+0x110/0x110 [ 112.854062][ T4894] ? __virt_addr_valid+0x188/0x540 [ 112.859214][ T4894] ? __virt_addr_valid+0x188/0x540 [ 112.864379][ T4894] ? __virt_addr_valid+0x467/0x540 [ 112.869531][ T4894] ? __phys_addr_symbol+0x2b/0x70 [ 112.874620][ T4894] ? __check_object_size+0x4f6/0xa70 [ 112.879945][ T4894] netlink_sendmsg+0x755/0xbd0 [ 112.884755][ T4894] ? netlink_getsockopt+0x550/0x550 [ 112.889977][ T4894] ? aa_sock_msg_perm+0x94/0x150 [ 112.894936][ T4894] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 112.900238][ T4894] ? security_socket_sendmsg+0x7c/0xa0 [ 112.905711][ T4894] ? netlink_getsockopt+0x550/0x550 [ 112.910940][ T4894] ____sys_sendmsg+0x5ed/0x9a0 [ 112.915739][ T4894] ? __sys_sendmsg_sock+0x30/0x30 [ 112.920782][ T4894] ? __import_iovec+0x306/0x510 [ 112.925659][ T4894] ? import_iovec+0x6f/0xa0 [ 112.930182][ T4894] ___sys_sendmsg+0x2a2/0x360 [ 112.934873][ T4894] ? perf_trace_preemptirq_template+0x268/0x320 [ 112.941140][ T4894] ? __sys_sendmsg+0x2a0/0x2a0 [ 112.945943][ T4894] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 112.952144][ T4894] __se_sys_sendmsg+0x1c3/0x2b0 [ 112.957015][ T4894] ? ct_nmi_exit+0x145/0x1c0 [ 112.961645][ T4894] ? __x64_sys_sendmsg+0x80/0x80 [ 112.966635][ T4894] ? lockdep_hardirqs_on+0x94/0x140 [ 112.971866][ T4894] do_syscall_64+0x4c/0xa0 [ 112.976319][ T4894] ? clear_bhb_loop+0x60/0xb0 [ 112.981024][ T4894] ? clear_bhb_loop+0x60/0xb0 [ 112.985735][ T4894] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 112.991653][ T4894] RIP: 0033:0x7f6ab499ce59 [ 112.996086][ T4894] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.015724][ T4894] RSP: 002b:00007f6ab578a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 113.024157][ T4894] RAX: ffffffffffffffda RBX: 00007f6ab4c15fa0 RCX: 00007f6ab499ce59 [ 113.032155][ T4894] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006 [ 113.040148][ T4894] RBP: 00007f6ab578a090 R08: 0000000000000000 R09: 0000000000000000 [ 113.048146][ T4894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 113.056141][ T4894] R13: 00007f6ab4c16038 R14: 00007f6ab4c15fa0 R15: 00007ffcf176c658 [ 113.064149][ T4894] [ 113.650963][ T4919] netlink: 'syz.2.175': attribute type 29 has an invalid length. [ 114.028288][ T4933] netlink: 'syz.4.180': attribute type 3 has an invalid length. [ 114.046243][ T4933] netlink: 132 bytes leftover after parsing attributes in process `syz.4.180'. [ 114.767561][ T4956] FAULT_INJECTION: forcing a failure. [ 114.767561][ T4956] name failslab, interval 1, probability 0, space 0, times 0 [ 114.814975][ T4956] CPU: 0 PID: 4956 Comm: syz.4.186 Not tainted syzkaller #0 [ 114.822339][ T4956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 114.832460][ T4956] Call Trace: [ 114.835785][ T4956] [ 114.838775][ T4956] dump_stack_lvl+0x188/0x24e [ 114.843503][ T4956] ? show_regs_print_info+0x12/0x12 [ 114.848746][ T4956] ? load_image+0x410/0x410 [ 114.853309][ T4956] ? perf_trace_lock_acquire+0x101/0x3f0 [ 114.859003][ T4956] ? verify_lock_unused+0x140/0x140 [ 114.864243][ T4956] ? perf_trace_lock_acquire+0x101/0x3f0 [ 114.869906][ T4956] should_fail_ex+0x390/0x4c0 [ 114.874623][ T4956] should_failslab+0x5/0x20 [ 114.879183][ T4956] slab_pre_alloc_hook+0x59/0x300 [ 114.884279][ T4956] kmem_cache_alloc+0x56/0x2f0 [ 114.889080][ T4956] ? skb_clone+0x1e7/0x370 [ 114.893531][ T4956] skb_clone+0x1e7/0x370 [ 114.897818][ T4956] __netlink_deliver_tap+0x3e4/0x7e0 [ 114.903142][ T4956] ? netlink_deliver_tap+0x2e/0x1b0 [ 114.908372][ T4956] netlink_deliver_tap+0x19c/0x1b0 [ 114.913527][ T4956] netlink_unicast+0x777/0x920 [ 114.918338][ T4956] netlink_sendmsg+0x8ad/0xbd0 [ 114.923144][ T4956] ? lockdep_hardirqs_on+0x94/0x140 [ 114.928392][ T4956] ? netlink_getsockopt+0x550/0x550 [ 114.933642][ T4956] ? __sanitizer_cov_trace_pc+0x32/0x60 [ 114.939219][ T4956] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 114.944576][ T4956] ? security_socket_sendmsg+0x7c/0xa0 [ 114.950088][ T4956] ? netlink_getsockopt+0x550/0x550 [ 114.955326][ T4956] ____sys_sendmsg+0x5ed/0x9a0 [ 114.960135][ T4956] ? rcu_is_watching+0x11/0xa0 [ 114.964944][ T4956] ? lockdep_hardirqs_on+0x94/0x140 [ 114.970180][ T4956] ? __sys_sendmsg_sock+0x30/0x30 [ 114.975255][ T4956] ? ___sys_sendmsg+0x287/0x360 [ 114.980163][ T4956] ___sys_sendmsg+0x2a2/0x360 [ 114.984873][ T4956] ? __sys_sendmsg+0x2a0/0x2a0 [ 114.989676][ T4956] ? ktime_get+0x7b/0x270 [ 114.994076][ T4956] __se_sys_sendmsg+0x1c3/0x2b0 [ 114.998945][ T4956] ? perf_trace_preemptirq_template+0x268/0x320 [ 115.005217][ T4956] ? __x64_sys_sendmsg+0x80/0x80 [ 115.010207][ T4956] ? lockdep_hardirqs_on+0x94/0x140 [ 115.015448][ T4956] do_syscall_64+0x4c/0xa0 [ 115.019890][ T4956] ? clear_bhb_loop+0x60/0xb0 [ 115.024608][ T4956] ? clear_bhb_loop+0x60/0xb0 [ 115.029315][ T4956] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 115.035255][ T4956] RIP: 0033:0x7fa92839ce59 [ 115.039695][ T4956] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.059336][ T4956] RSP: 002b:00007fa92928c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 115.067785][ T4956] RAX: ffffffffffffffda RBX: 00007fa928615fa0 RCX: 00007fa92839ce59 [ 115.075789][ T4956] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006 [ 115.083790][ T4956] RBP: 00007fa92928c090 R08: 0000000000000000 R09: 0000000000000000 [ 115.091786][ T4956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 115.099785][ T4956] R13: 00007fa928616038 R14: 00007fa928615fa0 R15: 00007fff5a089318 [ 115.107809][ T4956] [ 116.807016][ T4974] netlink: 132 bytes leftover after parsing attributes in process `syz.4.193'. [ 116.907641][ T4979] netlink: 128 bytes leftover after parsing attributes in process `syz.4.193'. [ 116.962529][ T4979] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 117.133610][ T4276] Bluetooth: hci3: unexpected event 0x18 length: 151 > 23 [ 117.163500][ T4980] netlink: 'syz.3.195': attribute type 1 has an invalid length. [ 117.198386][ T4980] netlink: 112865 bytes leftover after parsing attributes in process `syz.3.195'. [ 119.725230][ T5038] device syzkaller0 entered promiscuous mode [ 121.935064][ T5082] netlink: 'syz.0.227': attribute type 3 has an invalid length. [ 121.963120][ T5082] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.227'. [ 123.609189][ T5068] netlink: 'syz.3.222': attribute type 21 has an invalid length. [ 123.619993][ T5068] netlink: 'syz.3.222': attribute type 2 has an invalid length. [ 124.161563][ T5106] netlink: 'syz.3.234': attribute type 29 has an invalid length. [ 124.233604][ T5106] netlink: 'syz.3.234': attribute type 29 has an invalid length. [ 124.341269][ T5113] netlink: 'syz.3.234': attribute type 2 has an invalid length. [ 124.424157][ T5113] netlink: 'syz.3.234': attribute type 8 has an invalid length. [ 124.488082][ T5113] netlink: 132 bytes leftover after parsing attributes in process `syz.3.234'. [ 124.521499][ T5110] netlink: 'syz.3.234': attribute type 29 has an invalid length. [ 124.711011][ T5115] : port 1(ip6gretap0) entered blocking state [ 124.751771][ T5115] : port 1(ip6gretap0) entered disabled state [ 124.893093][ T5115] device ip6gretap0 entered promiscuous mode [ 125.106243][ T5119] device ip6gretap0 left promiscuous mode [ 125.153776][ T5119] : port 1(ip6gretap0) entered disabled state [ 125.294199][ T5125] netlink: 44 bytes leftover after parsing attributes in process `syz.2.240'. [ 126.167848][ T5152] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 126.244096][ T5152] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 126.304103][ T5152] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 126.324464][ T5152] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 126.526784][ T5167] netlink: 'syz.0.254': attribute type 3 has an invalid length. [ 126.541075][ T5167] netlink: 114680 bytes leftover after parsing attributes in process `syz.0.254'. [ 126.591829][ T5167] netlink: 'syz.0.254': attribute type 16 has an invalid length. [ 126.602808][ T5167] netlink: 48 bytes leftover after parsing attributes in process `syz.0.254'. [ 126.770916][ T5173] netlink: 'syz.1.255': attribute type 10 has an invalid length. [ 126.795020][ T5173] netlink: 40 bytes leftover after parsing attributes in process `syz.1.255'. [ 126.859505][ T5173] bridge0: port 4(ipvlan1) entered blocking state [ 126.888782][ T5173] bridge0: port 4(ipvlan1) entered disabled state [ 126.913630][ T5173] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 127.173051][ T5182] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.259'. [ 128.121690][ T5211] netlink: 212168 bytes leftover after parsing attributes in process `syz.2.266'. [ 128.461532][ T5211] syz.2.266 (5211) used greatest stack depth: 17136 bytes left [ 128.985896][ T4276] Bluetooth: hci1: ISO packet for unknown connection handle 3086 [ 129.464061][ T5258] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.276'. [ 129.677130][ T5265] validate_nla: 2 callbacks suppressed [ 129.677177][ T5265] netlink: 'syz.1.279': attribute type 10 has an invalid length. [ 129.796303][ T5265] 8021q: adding VLAN 0 to HW filter on device team0 [ 129.830771][ T5265] bond0: (slave team0): Enslaving as an active interface with an up link [ 129.850214][ T5266] netlink: 'syz.1.279': attribute type 10 has an invalid length. [ 129.860835][ T5266] netlink: 40 bytes leftover after parsing attributes in process `syz.1.279'. [ 129.883786][ T5266] device team0 entered promiscuous mode [ 129.890929][ T5266] device team_slave_0 entered promiscuous mode [ 129.922002][ T5266] device team_slave_1 entered promiscuous mode [ 129.930531][ T5266] bond0: (slave team0): Releasing backup interface [ 129.974794][ T5266] bridge0: port 4(team0) entered blocking state [ 129.981315][ T5266] bridge0: port 4(team0) entered disabled state [ 131.007592][ T5290] netlink: 'syz.0.286': attribute type 3 has an invalid length. [ 131.026149][ T5290] netlink: 132 bytes leftover after parsing attributes in process `syz.0.286'. [ 131.036910][ T5294] netlink: 60 bytes leftover after parsing attributes in process `syz.3.287'. [ 131.049159][ T5299] netlink: 'syz.2.288': attribute type 10 has an invalid length. [ 131.145619][ T5300] netlink: 'syz.4.289': attribute type 21 has an invalid length. [ 131.165251][ T5294] netlink: 60 bytes leftover after parsing attributes in process `syz.3.287'. [ 131.264643][ T5303] netlink: 60 bytes leftover after parsing attributes in process `syz.3.287'. [ 132.261300][ T5327] netlink: 'syz.0.297': attribute type 1 has an invalid length. [ 132.286047][ T5327] netlink: 'syz.0.297': attribute type 3 has an invalid length. [ 132.307534][ T5327] netlink: 132 bytes leftover after parsing attributes in process `syz.0.297'. [ 132.448793][ T5327] device bridge_slave_1 left promiscuous mode [ 132.473696][ T5327] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.527708][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.534502][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.569639][ T5327] device bridge_slave_0 left promiscuous mode [ 132.611784][ T5338] netlink: 'syz.2.301': attribute type 3 has an invalid length. [ 132.633638][ T5338] netlink: 1034 bytes leftover after parsing attributes in process `syz.2.301'. [ 132.636739][ T5327] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.043084][ T5333] netlink: 'syz.4.299': attribute type 22 has an invalid length. [ 133.064208][ T5333] netlink: 4 bytes leftover after parsing attributes in process `syz.4.299'. [ 133.088549][ T5339] netlink: 'syz.3.300': attribute type 1 has an invalid length. [ 133.104004][ T5339] netlink: 176 bytes leftover after parsing attributes in process `syz.3.300'. [ 133.113181][ T5344] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.302'. [ 134.004089][ T5380] netlink: 12743 bytes leftover after parsing attributes in process `syz.4.311'. [ 134.107390][ T5389] netlink: 132 bytes leftover after parsing attributes in process `syz.0.313'. [ 134.180237][ T5392] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.316'. [ 134.387864][ T5395] netlink: 48 bytes leftover after parsing attributes in process `syz.1.317'. [ 134.411142][ T5395] netlink: 4 bytes leftover after parsing attributes in process `syz.1.317'. [ 134.482098][ T5389] can: request_module (can-proto-0) failed. [ 134.864989][ T5409] netlink: 'syz.0.323': attribute type 11 has an invalid length. [ 134.958602][ T5416] validate_nla: 5 callbacks suppressed [ 134.958896][ T5416] netlink: 'syz.3.324': attribute type 10 has an invalid length. [ 135.016507][ T5418] netlink: 'syz.4.325': attribute type 11 has an invalid length. [ 135.081197][ T5418] netlink: 'syz.4.325': attribute type 11 has an invalid length. [ 135.121082][ T4276] Bluetooth: hci2: Malformed LE Event: 0x1d [ 135.134789][ T5416] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 135.149731][ T5417] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 135.208534][ T5409] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 135.996197][ T5438] netlink: 'syz.2.332': attribute type 28 has an invalid length. [ 136.892079][ T5461] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 136.935106][ T5461] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 136.980649][ T5461] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 137.498425][ T5479] __nla_validate_parse: 6 callbacks suppressed [ 137.498446][ T5479] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.345'. [ 137.882155][ T5488] device syzkaller0 entered promiscuous mode [ 139.599380][ T5506] -1: renamed from virt_wifi0 [ 139.607038][ T5517] netlink: 48 bytes leftover after parsing attributes in process `syz.1.356'. [ 140.551572][ T5526] netlink: 48 bytes leftover after parsing attributes in process `syz.2.369'. [ 140.577031][ T5524] netlink: 48 bytes leftover after parsing attributes in process `syz.1.359'. [ 140.853279][ T5542] netlink: 'syz.2.362': attribute type 10 has an invalid length. [ 140.891389][ T5542] netlink: 55 bytes leftover after parsing attributes in process `syz.2.362'. [ 141.577011][ T5546] netlink: 'syz.1.364': attribute type 4 has an invalid length. [ 141.598302][ T5549] netlink: 48 bytes leftover after parsing attributes in process `syz.3.365'. [ 141.641102][ T5549] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.702872][ T5566] -1: renamed from virt_wifi0 [ 142.741229][ T5581] netlink: 48 bytes leftover after parsing attributes in process `syz.3.374'. [ 142.876438][ T5601] netlink: 180900 bytes leftover after parsing attributes in process `syz.0.379'. [ 142.922240][ T5601] openvswitch: netlink: Flow actions attr not present in new flow. [ 143.163413][ T5606] netlink: 'syz.4.382': attribute type 4 has an invalid length. [ 143.273533][ T5608] netlink: 48 bytes leftover after parsing attributes in process `syz.1.383'. [ 143.304914][ T5611] -1: renamed from virt_wifi0 [ 144.068570][ T5631] netlink: 48 bytes leftover after parsing attributes in process `syz.2.392'. [ 144.381291][ T5636] netlink: 'syz.4.394': attribute type 12 has an invalid length. [ 144.414504][ T5636] netlink: 132 bytes leftover after parsing attributes in process `syz.4.394'. [ 144.907737][ T5650] netlink: 'syz.0.397': attribute type 4 has an invalid length. [ 145.684776][ T5678] netlink: 48 bytes leftover after parsing attributes in process `syz.1.406'. [ 145.912227][ T5686] netlink: 'syz.4.409': attribute type 2 has an invalid length. [ 146.007466][ T5686] device 0 entered promiscuous mode [ 146.054967][ T5688] netlink: 194236 bytes leftover after parsing attributes in process `syz.4.409'. [ 146.157409][ T5688] netlink: zone id is out of range [ 146.163354][ T5688] netlink: get zone limit has 8 unknown bytes [ 146.770794][ T5698] netlink: 'syz.4.413': attribute type 4 has an invalid length. [ 147.734472][ T5730] netlink: 48 bytes leftover after parsing attributes in process `syz.2.422'. [ 148.019622][ T5734] netlink: 'syz.0.424': attribute type 21 has an invalid length. [ 148.469794][ T5751] netlink: 'syz.4.430': attribute type 4 has an invalid length. [ 149.200750][ T5772] netlink: 48 bytes leftover after parsing attributes in process `syz.0.437'. [ 150.009376][ T5791] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.445'. [ 150.132250][ T5788] netlink: 'syz.4.444': attribute type 4 has an invalid length. [ 151.430005][ T5813] netlink: 188 bytes leftover after parsing attributes in process `syz.0.451'. [ 152.037841][ T5805] netlink: 132 bytes leftover after parsing attributes in process `syz.1.448'. [ 152.052087][ T5815] netlink: 48 bytes leftover after parsing attributes in process `syz.0.452'. [ 152.321337][ T5827] netlink: 'syz.0.456': attribute type 10 has an invalid length. [ 152.587374][ T5827] team0: Device wg1 is of different type [ 152.643345][ T5832] -1: renamed from virt_wifi0 [ 153.156844][ T5852] netlink: 'syz.0.464': attribute type 4 has an invalid length. [ 153.406431][ T5861] netlink: 48 bytes leftover after parsing attributes in process `syz.4.466'. [ 155.305569][ T5892] netlink: 'syz.2.477': attribute type 4 has an invalid length. [ 155.405775][ T5891] device syzkaller0 entered promiscuous mode [ 155.724791][ T5905] netlink: 48 bytes leftover after parsing attributes in process `syz.3.480'. [ 155.822812][ T5908] netlink: 128124 bytes leftover after parsing attributes in process `syz.4.481'. [ 158.142331][ T5915] netlink: 'syz.4.481': attribute type 2 has an invalid length. [ 158.153153][ T5915] netlink: 'syz.4.481': attribute type 8 has an invalid length. [ 158.163087][ T5915] netlink: 132 bytes leftover after parsing attributes in process `syz.4.481'. [ 158.181700][ T5920] netlink: 'syz.4.481': attribute type 2 has an invalid length. [ 158.190642][ T5920] netlink: 'syz.4.481': attribute type 8 has an invalid length. [ 158.199995][ T5920] netlink: 132 bytes leftover after parsing attributes in process `syz.4.481'. [ 158.458862][ T5946] netlink: 'syz.3.490': attribute type 4 has an invalid length. [ 158.871653][ T5960] netlink: 48 bytes leftover after parsing attributes in process `syz.3.495'. [ 159.392352][ T5977] netlink: 'syz.1.500': attribute type 10 has an invalid length. [ 159.449836][ T5977] netlink: 40 bytes leftover after parsing attributes in process `syz.1.500'. [ 159.510368][ T5977] batman_adv: batadv0: Adding interface: virt_wifi0 [ 159.529406][ T5977] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.576947][ T5977] batman_adv: batadv0: Interface activated: virt_wifi0 [ 159.619462][ T5978] netlink: 14 bytes leftover after parsing attributes in process `syz.4.501'. [ 159.687637][ T5977] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.500'. [ 159.837168][ T5981] device syzkaller0 entered promiscuous mode [ 160.126894][ T6000] netlink: 'syz.1.505': attribute type 4 has an invalid length. [ 160.551928][ T6011] netlink: 48 bytes leftover after parsing attributes in process `syz.2.508'. [ 161.421053][ T6034] netlink: 'syz.0.516': attribute type 3 has an invalid length. [ 161.439557][ T6034] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.516'. [ 161.475301][ T6035] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.516'. [ 161.847987][ T6045] netlink: 'syz.2.519': attribute type 4 has an invalid length. [ 162.148678][ T6054] netlink: 48 bytes leftover after parsing attributes in process `syz.1.522'. [ 162.170745][ T6056] netlink: 'syz.4.523': attribute type 29 has an invalid length. [ 162.191408][ T6056] netlink: 132 bytes leftover after parsing attributes in process `syz.4.523'. [ 162.338544][ T6065] netlink: 128 bytes leftover after parsing attributes in process `syz.3.525'. [ 162.389110][ T6065] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 162.502014][ T6065] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 163.790927][ T6085] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 163.823570][ T6086] netlink: 4 bytes leftover after parsing attributes in process `syz.0.529'. [ 164.671015][ T6109] netlink: 48 bytes leftover after parsing attributes in process `syz.1.539'. [ 164.808102][ T6118] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.541'. [ 165.888465][ T6137] delete_channel: no stack [ 166.515413][ T36] wlan1: Trigger new scan to find an IBSS to join [ 168.200331][ T6179] netlink: 48 bytes leftover after parsing attributes in process `syz.4.557'. [ 169.027416][ T6202] can: request_module (can-proto-4) failed. [ 169.556276][ T4332] wlan1: Trigger new scan to find an IBSS to join [ 170.370569][ T6239] netlink: 48 bytes leftover after parsing attributes in process `syz.3.574'. [ 171.564915][ T6278] validate_nla: 1 callbacks suppressed [ 171.564933][ T6278] netlink: 'syz.0.583': attribute type 10 has an invalid length. [ 172.305472][ T6278] team0 (unregistering): Port device team_slave_0 removed [ 172.435355][ T6278] team0 (unregistering): Port device team_slave_1 removed [ 172.555497][ T6289] netlink: 48 bytes leftover after parsing attributes in process `syz.1.588'. [ 172.605153][ T4332] wlan1: Trigger new scan to find an IBSS to join [ 173.229910][ T6303] netlink: 177648 bytes leftover after parsing attributes in process `syz.4.592'. [ 173.416033][ T6315] netlink: 'syz.1.597': attribute type 29 has an invalid length. [ 173.428917][ T6315] netlink: 'syz.1.597': attribute type 29 has an invalid length. [ 173.451701][ T6315] netlink: 'syz.1.597': attribute type 29 has an invalid length. [ 173.478330][ T6315] netlink: 'syz.1.597': attribute type 29 has an invalid length. [ 173.574357][ T36] wlan1: Creating new IBSS network, BSSID 86:10:90:db:a0:14 [ 173.896045][ T6329] netlink: 'syz.0.602': attribute type 1 has an invalid length. [ 173.914339][ T6329] netlink: 'syz.0.602': attribute type 2 has an invalid length. [ 173.968344][ T6329] netlink: 132 bytes leftover after parsing attributes in process `syz.0.602'. [ 174.038475][ T6332] netlink: 48 bytes leftover after parsing attributes in process `syz.3.603'. [ 175.294586][ T6360] netlink: 37035 bytes leftover after parsing attributes in process `syz.4.611'. [ 175.487214][ T6364] netlink: 156 bytes leftover after parsing attributes in process `syz.1.612'. [ 175.741994][ T6375] sctp: [Deprecated]: syz.4.615 (pid 6375) Use of int in max_burst socket option deprecated. [ 175.741994][ T6375] Use struct sctp_assoc_value instead [ 175.904642][ T6383] netlink: 'syz.0.616': attribute type 21 has an invalid length. [ 176.076493][ T6391] netlink: 48 bytes leftover after parsing attributes in process `syz.3.619'. [ 177.228480][ T6429] netlink: 48 bytes leftover after parsing attributes in process `syz.0.633'. [ 180.173090][ T6482] netlink: 48 bytes leftover after parsing attributes in process `syz.4.648'. [ 180.328350][ T6486] netlink: 830 bytes leftover after parsing attributes in process `syz.1.650'. [ 181.519057][ T6523] netlink: 10 bytes leftover after parsing attributes in process `syz.3.661'. [ 181.581213][ T6527] netlink: 48 bytes leftover after parsing attributes in process `syz.0.663'. [ 181.926801][ T6537] netlink: 'syz.3.667': attribute type 21 has an invalid length. [ 181.941238][ T6537] netlink: 16166 bytes leftover after parsing attributes in process `syz.3.667'. [ 182.957814][ T6567] netlink: 48 bytes leftover after parsing attributes in process `syz.1.677'. [ 183.218113][ T6571] netlink: 'syz.2.678': attribute type 9 has an invalid length. [ 183.234268][ T6571] netlink: 61951 bytes leftover after parsing attributes in process `syz.2.678'. [ 183.297706][ T6578] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 186.835539][ T6618] netlink: 48 bytes leftover after parsing attributes in process `syz.0.692'. [ 188.961045][ T6655] netlink: 48 bytes leftover after parsing attributes in process `syz.4.703'. [ 190.070896][ T6679] netlink: 'syz.0.710': attribute type 8 has an invalid length. [ 190.117590][ T6679] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.710'. [ 190.775181][ T6704] netlink: 60 bytes leftover after parsing attributes in process `syz.0.714'. [ 190.804197][ T6704] netlink: 60 bytes leftover after parsing attributes in process `syz.0.714'. [ 191.117978][ T6712] netlink: 48 bytes leftover after parsing attributes in process `syz.1.717'. [ 192.069444][ T6747] netlink: 175 bytes leftover after parsing attributes in process `syz.3.729'. [ 192.141095][ T6748] netlink: 'syz.3.729': attribute type 10 has an invalid length. [ 192.316999][ T6749] netlink: 16211 bytes leftover after parsing attributes in process `syz.0.727'. [ 193.966972][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.973340][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.288787][ T6773] netlink: 48 bytes leftover after parsing attributes in process `syz.0.734'. [ 195.343967][ T6775] netlink: 'syz.3.736': attribute type 2 has an invalid length. [ 195.367519][ T6775] netlink: 'syz.3.736': attribute type 8 has an invalid length. [ 195.398538][ T6775] netlink: 132 bytes leftover after parsing attributes in process `syz.3.736'. [ 196.081073][ T6794] netlink: 'syz.4.740': attribute type 10 has an invalid length. [ 196.118829][ T6794] netlink: 2 bytes leftover after parsing attributes in process `syz.4.740'. [ 196.167391][ T6794] device hsr0 entered promiscuous mode [ 196.173213][ T6794] bridge0: port 3(hsr0) entered blocking state [ 196.241894][ T6794] bridge0: port 3(hsr0) entered disabled state [ 196.285502][ T6794] bridge0: port 3(hsr0) entered blocking state [ 196.291824][ T6794] bridge0: port 3(hsr0) entered forwarding state [ 196.798256][ T6811] netlink: 'syz.2.744': attribute type 10 has an invalid length. [ 196.816734][ T6811] team0: Device nlmon0 is of different type [ 197.303210][ T6821] delete_channel: no stack [ 197.329810][ T6829] netlink: 48 bytes leftover after parsing attributes in process `syz.2.750'. [ 197.970549][ T6841] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 198.008963][ T6845] netlink: 'syz.0.755': attribute type 3 has an invalid length. [ 198.017013][ T6845] netlink: 148 bytes leftover after parsing attributes in process `syz.0.755'. [ 198.513777][ T6858] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.758'. [ 198.904323][ T6865] netlink: 48 bytes leftover after parsing attributes in process `syz.2.763'. [ 199.551318][ T6890] netlink: 'syz.3.769': attribute type 1 has an invalid length. [ 200.046255][ T6906] netlink: 'syz.4.775': attribute type 5 has an invalid length. [ 200.123610][ T6906] netlink: 176 bytes leftover after parsing attributes in process `syz.4.775'. [ 200.250239][ T6908] bridge0: port 5(veth0_to_hsr) entered blocking state [ 200.273163][ T6913] raw_sendmsg: syz.1.776 forgot to set AF_INET. Fix it! [ 200.306245][ T6908] bridge0: port 5(veth0_to_hsr) entered disabled state [ 200.512294][ T6908] device veth0_to_hsr entered promiscuous mode [ 200.611711][ T6908] bridge0: port 5(veth0_to_hsr) entered blocking state [ 200.626537][ T6908] bridge0: port 5(veth0_to_hsr) entered forwarding state [ 200.710917][ T6906] netlink: 'syz.4.775': attribute type 10 has an invalid length. [ 200.729531][ T6906] netlink: 40 bytes leftover after parsing attributes in process `syz.4.775'. [ 200.776483][ T6906] device dummy0 entered promiscuous mode [ 200.797007][ T6906] bridge0: port 4(dummy0) entered blocking state [ 200.804719][ T6906] bridge0: port 4(dummy0) entered disabled state [ 200.857313][ T6906] bridge0: port 4(dummy0) entered blocking state [ 200.865710][ T6906] bridge0: port 4(dummy0) entered forwarding state [ 200.886612][ T6910] netlink: 48 bytes leftover after parsing attributes in process `syz.3.777'. [ 201.160547][ T48] Bluetooth: hci1: command 0x0406 tx timeout [ 201.167289][ T4276] Bluetooth: hci2: command 0x0406 tx timeout [ 201.173345][ T4276] Bluetooth: hci0: command 0x0406 tx timeout [ 201.181515][ T4274] Bluetooth: hci3: command 0x0406 tx timeout [ 201.346501][ T6927] delete_channel: no stack [ 202.006030][ T6947] netlink: 2 bytes leftover after parsing attributes in process `syz.4.787'. [ 202.027837][ T6947] device batadv_slave_1 entered promiscuous mode [ 202.768681][ T6977] netlink: 48 bytes leftover after parsing attributes in process `syz.0.794'. [ 203.484323][ T6985] netlink: 60 bytes leftover after parsing attributes in process `syz.1.798'. [ 203.568866][ T4285] Bluetooth: hci0: unexpected event 0x16 length: 15 > 6 [ 203.655717][ T4298] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 204.679951][ T7022] netlink: 48 bytes leftover after parsing attributes in process `syz.0.811'. [ 205.582071][ T7045] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.820'. [ 205.790048][ T7049] netlink: 22 bytes leftover after parsing attributes in process `syz.1.821'. [ 206.273972][ T4285] Bluetooth: hci4: command 0x0406 tx timeout [ 206.378417][ T7070] netlink: 48 bytes leftover after parsing attributes in process `syz.4.826'. [ 207.208610][ T7080] netlink: 'syz.1.828': attribute type 10 has an invalid length. [ 207.274736][ T7080] device veth0_vlan left promiscuous mode [ 207.341782][ T7080] device veth0_vlan entered promiscuous mode [ 207.431950][ T7080] team0: Device veth0_vlan failed to register rx_handler [ 207.602462][ T7103] netlink: 'syz.3.831': attribute type 7 has an invalid length. [ 207.683338][ T7103] netlink: 208404 bytes leftover after parsing attributes in process `syz.3.831'. [ 207.972347][ T7109] netlink: 'syz.3.831': attribute type 21 has an invalid length. [ 208.001939][ T7109] netlink: 'syz.3.831': attribute type 6 has an invalid length. [ 208.051758][ T7109] netlink: 132 bytes leftover after parsing attributes in process `syz.3.831'. [ 208.207970][ T7100] netlink: 'syz.4.833': attribute type 10 has an invalid length. [ 208.291252][ T7100] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.332425][ T7100] device bridge_slave_1 left promiscuous mode [ 208.362675][ T7100] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.393010][ T7100] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 208.782751][ T7120] device syzkaller0 entered promiscuous mode [ 208.802037][ T7134] netlink: 48 bytes leftover after parsing attributes in process `syz.4.840'. [ 209.440675][ T7155] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.846'. [ 211.342143][ T7155] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 211.670771][ T7173] netlink: 9275 bytes leftover after parsing attributes in process `syz.4.851'. [ 211.779293][ T7183] netlink: 'syz.3.852': attribute type 11 has an invalid length. [ 211.807969][ T7183] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.852'. [ 211.941085][ T7186] netlink: 'syz.2.854': attribute type 2 has an invalid length. [ 211.951792][ T7189] netlink: 48 bytes leftover after parsing attributes in process `syz.4.855'. [ 212.152203][ T7191] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.854'. [ 212.251455][ T7186] device 0 entered promiscuous mode [ 212.552836][ T7176] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 212.734707][ T7206] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 214.425133][ T7231] netlink: 15842 bytes leftover after parsing attributes in process `syz.1.867'. [ 214.524726][ T7233] netlink: 48 bytes leftover after parsing attributes in process `syz.0.868'. [ 216.020347][ T7251] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.875'. [ 216.229664][ T7268] netlink: 'syz.3.880': attribute type 3 has an invalid length. [ 216.294546][ T7268] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.880'. [ 216.566042][ T7282] netlink: 48 bytes leftover after parsing attributes in process `syz.1.884'. [ 218.244885][ T7284] netlink: 'syz.4.885': attribute type 7 has an invalid length. [ 219.118114][ T7330] netlink: 48 bytes leftover after parsing attributes in process `syz.1.899'. [ 219.545488][ T7343] netlink: 132 bytes leftover after parsing attributes in process `syz.1.904'. [ 219.973306][ T7346] netlink: 40 bytes leftover after parsing attributes in process `syz.2.905'. [ 220.125709][ T7348] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.906'. [ 220.163532][ T7348] netlink: zone id is out of range [ 220.169860][ T7348] netlink: zone id is out of range [ 220.178966][ T7348] netlink: zone id is out of range [ 220.185747][ T7348] netlink: zone id is out of range [ 220.191139][ T7348] netlink: zone id is out of range [ 220.198290][ T7348] netlink: zone id is out of range [ 220.203651][ T7348] netlink: zone id is out of range [ 220.212131][ T7348] netlink: zone id is out of range [ 220.232063][ T7348] netlink: zone id is out of range [ 220.254147][ T7348] netlink: zone id is out of range [ 221.050784][ T7372] netlink: 'syz.1.916': attribute type 7 has an invalid length. [ 221.237085][ T7372] netlink: 191184 bytes leftover after parsing attributes in process `syz.1.916'. [ 221.968845][ T7384] can: request_module (can-proto-4) failed. [ 222.632335][ T7416] netlink: 48 bytes leftover after parsing attributes in process `syz.1.930'. [ 222.666404][ T7413] netlink: 'syz.0.929': attribute type 17 has an invalid length. [ 222.693039][ T7421] netlink: 'syz.2.926': attribute type 6 has an invalid length. [ 222.710545][ T7421] netlink: 164 bytes leftover after parsing attributes in process `syz.2.926'. [ 222.991541][ T7429] netlink: 'syz.3.932': attribute type 1 has an invalid length. [ 223.014912][ T7429] netlink: 116376 bytes leftover after parsing attributes in process `syz.3.932'. [ 224.112298][ T7458] netlink: 48 bytes leftover after parsing attributes in process `syz.3.941'. [ 224.208210][ T7460] netlink: 132 bytes leftover after parsing attributes in process `syz.2.942'. [ 224.245255][ T7460] netlink: 'syz.2.942': attribute type 12 has an invalid length. [ 224.258392][ T7460] netlink: 132 bytes leftover after parsing attributes in process `syz.2.942'. [ 227.634154][ T7483] netlink: 'syz.1.947': attribute type 39 has an invalid length. [ 228.293036][ T7501] netlink: 48 bytes leftover after parsing attributes in process `syz.1.956'. [ 228.990840][ T7514] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.960'. [ 229.229990][ T7530] FAULT_INJECTION: forcing a failure. [ 229.229990][ T7530] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 229.277981][ T7530] CPU: 0 PID: 7530 Comm: syz.2.965 Not tainted syzkaller #0 [ 229.285345][ T7530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 229.295469][ T7530] Call Trace: [ 229.298778][ T7530] [ 229.301728][ T7530] dump_stack_lvl+0x188/0x24e [ 229.306476][ T7530] ? show_regs_print_info+0x12/0x12 [ 229.311716][ T7530] ? load_image+0x410/0x410 [ 229.316244][ T7530] ? __lock_acquire+0x7bd0/0x7bd0 [ 229.321303][ T7530] should_fail_ex+0x390/0x4c0 [ 229.326024][ T7530] _copy_from_user+0x2c/0x170 [ 229.330732][ T7530] __sys_bpf+0x2ea/0x780 [ 229.335014][ T7530] ? bpf_link_show_fdinfo+0x380/0x380 [ 229.340421][ T7530] ? lock_chain_count+0x20/0x20 [ 229.345306][ T7530] __x64_sys_bpf+0x78/0x90 [ 229.349753][ T7530] do_syscall_64+0x4c/0xa0 [ 229.354194][ T7530] ? clear_bhb_loop+0x60/0xb0 [ 229.358898][ T7530] ? clear_bhb_loop+0x60/0xb0 [ 229.363611][ T7530] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 229.369554][ T7530] RIP: 0033:0x7efff039ce59 [ 229.374005][ T7530] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 229.393632][ T7530] RSP: 002b:00007efff1184028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 229.402068][ T7530] RAX: ffffffffffffffda RBX: 00007efff0615fa0 RCX: 00007efff039ce59 [ 229.410063][ T7530] RDX: 0000000000000050 RSI: 0000200000000040 RDI: 000000000000000a [ 229.418051][ T7530] RBP: 00007efff1184090 R08: 0000000000000000 R09: 0000000000000000 [ 229.426050][ T7530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 229.434039][ T7530] R13: 00007efff0616038 R14: 00007efff0615fa0 R15: 00007ffc7ce1e528 [ 229.442042][ T7530] [ 229.859956][ T7537] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 229.874193][ T7537] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 229.928722][ T7537] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 229.942521][ T7537] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 229.953615][ T7537] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 229.969368][ T7537] batman_adv: batadv0: Removing interface: virt_wifi0 [ 230.000578][ T7537] bridge0: port 3(batadv0) entered disabled state [ 230.039898][ T7537] device batadv0 left promiscuous mode [ 230.045793][ T7537] bridge0: port 3(batadv0) entered disabled state [ 230.066103][ T7549] netlink: 48 bytes leftover after parsing attributes in process `syz.0.970'. [ 230.929128][ T7570] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.977'. [ 231.028810][ T7570] netlink: 132 bytes leftover after parsing attributes in process `syz.0.977'. [ 231.386215][ T7576] FAULT_INJECTION: forcing a failure. [ 231.386215][ T7576] name failslab, interval 1, probability 0, space 0, times 0 [ 231.434038][ T7576] CPU: 1 PID: 7576 Comm: syz.0.979 Not tainted syzkaller #0 [ 231.441396][ T7576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 231.451484][ T7576] Call Trace: [ 231.454781][ T7576] [ 231.457741][ T7576] dump_stack_lvl+0x188/0x24e [ 231.462453][ T7576] ? show_regs_print_info+0x12/0x12 [ 231.467676][ T7576] ? load_image+0x410/0x410 [ 231.472203][ T7576] ? __lock_acquire+0x7bd0/0x7bd0 [ 231.477264][ T7576] should_fail_ex+0x390/0x4c0 [ 231.481976][ T7576] should_failslab+0x5/0x20 [ 231.486497][ T7576] slab_pre_alloc_hook+0x59/0x300 [ 231.491548][ T7576] ? verify_lock_unused+0x140/0x140 [ 231.496814][ T7576] ? bpf_test_init+0x9f/0x140 [ 231.501524][ T7576] __kmem_cache_alloc_node+0x4f/0x270 [ 231.506921][ T7576] ? bpf_test_init+0x9f/0x140 [ 231.511626][ T7576] __kmalloc+0xa3/0x240 [ 231.515815][ T7576] bpf_test_init+0x9f/0x140 [ 231.520347][ T7576] bpf_prog_test_run_xdp+0x488/0xf80 [ 231.525682][ T7576] ? __lock_acquire+0x7bd0/0x7bd0 [ 231.530742][ T7576] ? dev_put+0x80/0x80 [ 231.534852][ T7576] ? dev_put+0x80/0x80 [ 231.538967][ T7576] bpf_prog_test_run+0x31c/0x390 [ 231.543972][ T7576] __sys_bpf+0x62b/0x780 [ 231.548257][ T7576] ? bpf_link_show_fdinfo+0x380/0x380 [ 231.553685][ T7576] ? lock_chain_count+0x20/0x20 [ 231.558574][ T7576] __x64_sys_bpf+0x78/0x90 [ 231.563029][ T7576] do_syscall_64+0x4c/0xa0 [ 231.567477][ T7576] ? clear_bhb_loop+0x60/0xb0 [ 231.572178][ T7576] ? clear_bhb_loop+0x60/0xb0 [ 231.576895][ T7576] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 231.582826][ T7576] RIP: 0033:0x7f6ab499ce59 [ 231.587268][ T7576] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 231.606891][ T7576] RSP: 002b:00007f6ab578a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 231.615325][ T7576] RAX: ffffffffffffffda RBX: 00007f6ab4c15fa0 RCX: 00007f6ab499ce59 [ 231.623318][ T7576] RDX: 0000000000000050 RSI: 0000200000000040 RDI: 000000000000000a [ 231.631306][ T7576] RBP: 00007f6ab578a090 R08: 0000000000000000 R09: 0000000000000000 [ 231.639290][ T7576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 231.647268][ T7576] R13: 00007f6ab4c16038 R14: 00007f6ab4c15fa0 R15: 00007ffcf176c658 [ 231.655285][ T7576] [ 231.885464][ T7584] netlink: 48 bytes leftover after parsing attributes in process `syz.4.982'. [ 232.604997][ T7607] netlink: 'syz.1.989': attribute type 4 has an invalid length. [ 234.852555][ T36] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 235.466681][ T7620] can: request_module (can-proto-0) failed. [ 237.823541][ T7643] FAULT_INJECTION: forcing a failure. [ 237.823541][ T7643] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 237.994710][ T7643] CPU: 0 PID: 7643 Comm: syz.2.999 Not tainted syzkaller #0 [ 238.002096][ T7643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 238.012213][ T7643] Call Trace: [ 238.015543][ T7643] [ 238.018530][ T7643] dump_stack_lvl+0x188/0x24e [ 238.023288][ T7643] ? show_regs_print_info+0x12/0x12 [ 238.028568][ T7643] ? load_image+0x410/0x410 [ 238.033166][ T7643] ? __lock_acquire+0x7bd0/0x7bd0 [ 238.038270][ T7643] ? __bpf_trace_bpf_trace_printk+0x20/0x20 [ 238.044253][ T7643] should_fail_ex+0x390/0x4c0 [ 238.049009][ T7643] _copy_from_user+0x2c/0x170 [ 238.053761][ T7643] kstrtouint_from_user+0xda/0x170 [ 238.058959][ T7643] ? kstrtol_from_user+0x190/0x190 [ 238.064221][ T7643] proc_fail_nth_write+0x8b/0x200 [ 238.069318][ T7643] ? proc_fail_nth_read+0x220/0x220 [ 238.074585][ T7643] ? common_file_perm+0x171/0x1c0 [ 238.079695][ T7643] ? proc_fail_nth_read+0x220/0x220 [ 238.084972][ T7643] vfs_write+0x2dc/0x9a0 [ 238.089304][ T7643] ? file_end_write+0x250/0x250 [ 238.094231][ T7643] ? __fget_files+0x28/0x460 [ 238.098899][ T7643] ? __fget_files+0x3fc/0x460 [ 238.103700][ T7643] ? __fdget_pos+0x2ae/0x360 [ 238.108374][ T7643] ? ksys_write+0x70/0x260 [ 238.112882][ T7643] ksys_write+0x14d/0x260 [ 238.117305][ T7643] ? __ia32_sys_read+0x80/0x80 [ 238.122166][ T7643] ? lockdep_hardirqs_on+0x94/0x140 [ 238.127456][ T7643] do_syscall_64+0x4c/0xa0 [ 238.131935][ T7643] ? clear_bhb_loop+0x60/0xb0 [ 238.136670][ T7643] ? clear_bhb_loop+0x60/0xb0 [ 238.141423][ T7643] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 238.147422][ T7643] RIP: 0033:0x7efff035d68e [ 238.151912][ T7643] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 238.171598][ T7643] RSP: 002b:00007efff1183fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 238.180074][ T7643] RAX: ffffffffffffffda RBX: 00007efff11846c0 RCX: 00007efff035d68e [ 238.188108][ T7643] RDX: 0000000000000001 RSI: 00007efff11840a0 RDI: 0000000000000004 [ 238.196136][ T7643] RBP: 00007efff1184090 R08: 0000000000000000 R09: 0000000000000000 [ 238.204181][ T7643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 238.212226][ T7643] R13: 00007efff0616038 R14: 00007efff0615fa0 R15: 00007ffc7ce1e528 [ 238.220322][ T7643] [ 238.397807][ T7646] netlink: 15231 bytes leftover after parsing attributes in process `syz.4.1000'. [ 238.426013][ T7647] netlink: 15231 bytes leftover after parsing attributes in process `syz.4.1000'. [ 238.590881][ T7655] netlink: 'syz.4.1004': attribute type 3 has an invalid length. [ 239.702729][ T7681] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1012'. [ 240.030274][ T7697] netlink: 'syz.4.1014': attribute type 27 has an invalid length. [ 240.053354][ T7697] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1014'. [ 240.977170][ T7722] netlink: 'syz.0.1023': attribute type 16 has an invalid length. [ 241.038638][ T7722] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1023'. [ 241.250727][ T7724] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1022'. [ 241.359983][ T7734] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1025'. [ 241.440644][ T7742] netlink: 'syz.0.1026': attribute type 3 has an invalid length. [ 241.484136][ T7742] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1026'. [ 241.522111][ T7743] netlink: 'syz.1.1028': attribute type 21 has an invalid length. [ 241.545179][ T7743] netlink: 'syz.1.1028': attribute type 1 has an invalid length. [ 242.431433][ T7763] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1032'. [ 242.471432][ T7764] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1032'. [ 242.513684][ T7767] netlink: 'syz.3.1034': attribute type 10 has an invalid length. [ 243.164914][ T7767] team0: Port device veth0_to_bond added [ 243.193435][ T7778] netlink: 'syz.0.1036': attribute type 4 has an invalid length. [ 244.247834][ T7811] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1044'. [ 244.556311][ T7821] netlink: 'syz.1.1047': attribute type 1 has an invalid length. [ 244.588123][ T7821] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.1047'. [ 244.676034][ T7823] netlink: 'syz.3.1049': attribute type 13 has an invalid length. [ 244.708317][ T7823] netlink: 172 bytes leftover after parsing attributes in process `syz.3.1049'. [ 244.806334][ T7823] erspan0: refused to change device tx_queue_len [ 244.881557][ T7833] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1050'. [ 244.931244][ T7828] netlink: 'syz.4.1048': attribute type 3 has an invalid length. [ 244.965612][ T7828] netlink: 199824 bytes leftover after parsing attributes in process `syz.4.1048'. [ 245.082254][ T7835] netlink: 'syz.1.1051': attribute type 4 has an invalid length. [ 245.864718][ T7858] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.1056'. [ 245.890953][ T7856] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.1056'. [ 245.995572][ T7860] netlink: 'syz.4.1055': attribute type 4 has an invalid length. [ 246.028756][ T7860] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1055'. [ 246.199830][ T7871] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1059'. [ 247.376331][ T7880] netlink: 'syz.4.1063': attribute type 4 has an invalid length. [ 247.402035][ T7888] netlink: 'syz.2.1065': attribute type 10 has an invalid length. [ 247.484483][ T7888] team0: Device hsr_slave_0 failed to register rx_handler [ 247.853762][ T7910] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1072'. [ 251.530572][ T7952] netlink: 'syz.4.1083': attribute type 4 has an invalid length. [ 252.399305][ T7956] __nla_validate_parse: 5 callbacks suppressed [ 252.399341][ T7956] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1086'. [ 252.466270][ T7961] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1087'. [ 252.622408][ T7967] netlink: 'syz.1.1085': attribute type 2 has an invalid length. [ 252.630483][ T7967] netlink: 199848 bytes leftover after parsing attributes in process `syz.1.1085'. [ 252.657620][ T7967] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.1085'. [ 253.233794][ T7974] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1091'. [ 254.080528][ T7991] netlink: 'syz.0.1097': attribute type 4 has an invalid length. [ 254.309754][ T7997] netlink: 140 bytes leftover after parsing attributes in process `syz.4.1098'. [ 254.377041][ T7997] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1098'. [ 254.420241][ T7997] bond0: (slave bond_slave_0): Releasing backup interface [ 254.485536][ T7997] net_ratelimit: 775 callbacks suppressed [ 254.485556][ T7997] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 254.596123][ T7999] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1101'. [ 254.683122][ T7996] netlink: 184 bytes leftover after parsing attributes in process `syz.1.1099'. [ 254.965533][ T8017] device syzkaller0 entered promiscuous mode [ 255.424247][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.430648][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.899775][ T8034] netlink: 'syz.4.1112': attribute type 4 has an invalid length. [ 257.231257][ T8049] FAULT_INJECTION: forcing a failure. [ 257.231257][ T8049] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 257.266810][ T8049] CPU: 1 PID: 8049 Comm: syz.1.1125 Not tainted syzkaller #0 [ 257.274301][ T8049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 257.284413][ T8049] Call Trace: [ 257.287745][ T8049] [ 257.290723][ T8049] dump_stack_lvl+0x188/0x24e [ 257.295471][ T8049] ? show_regs_print_info+0x12/0x12 [ 257.300724][ T8049] ? load_image+0x410/0x410 [ 257.305302][ T8049] ? __lock_acquire+0x7bd0/0x7bd0 [ 257.310408][ T8049] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 257.316207][ T8049] should_fail_ex+0x390/0x4c0 [ 257.320947][ T8049] _copy_from_user+0x2c/0x170 [ 257.325691][ T8049] ___sys_sendmsg+0x1c3/0x360 [ 257.330436][ T8049] ? __sys_sendmsg+0x2a0/0x2a0 [ 257.335299][ T8049] ? __lock_acquire+0x7bd0/0x7bd0 [ 257.340441][ T8049] __se_sys_sendmsg+0x1c3/0x2b0 [ 257.345345][ T8049] ? ct_nmi_exit+0x145/0x1c0 [ 257.350008][ T8049] ? __x64_sys_sendmsg+0x80/0x80 [ 257.355028][ T8049] ? lockdep_hardirqs_on+0x94/0x140 [ 257.360298][ T8049] do_syscall_64+0x4c/0xa0 [ 257.364767][ T8049] ? clear_bhb_loop+0x60/0xb0 [ 257.369510][ T8049] ? clear_bhb_loop+0x60/0xb0 [ 257.374249][ T8049] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 257.380221][ T8049] RIP: 0033:0x7fd4f719ce59 [ 257.384704][ T8049] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 257.404706][ T8049] RSP: 002b:00007fd4f8100028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 257.413186][ T8049] RAX: ffffffffffffffda RBX: 00007fd4f7415fa0 RCX: 00007fd4f719ce59 [ 257.421221][ T8049] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 257.429239][ T8049] RBP: 00007fd4f8100090 R08: 0000000000000000 R09: 0000000000000000 [ 257.437261][ T8049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 257.445280][ T8049] R13: 00007fd4f7416038 R14: 00007fd4f7415fa0 R15: 00007fff4d3d3b48 [ 257.453343][ T8049] [ 257.462826][ T8051] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1115'. [ 257.685212][ T8059] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1128'. [ 257.810385][ T8065] cgroup: fork rejected by pids controller in /syz3 [ 259.228555][ T4332] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.604330][ T4332] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.634974][ T8093] netlink: 'syz.0.1131': attribute type 4 has an invalid length. [ 259.729400][ T4332] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.941464][ T4332] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.728487][ T4285] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 260.741186][ T4285] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 260.750554][ T4285] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 260.768945][ T4285] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 260.777536][ T4285] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 260.785223][ T4285] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 260.815090][ T8105] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1134'. [ 260.845844][ T8110] netlink: 'syz.2.1145': attribute type 10 has an invalid length. [ 260.853746][ T8110] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1145'. [ 261.203088][ T8117] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1147'. [ 261.619599][ T8111] chnl_net:caif_netlink_parms(): no params data found [ 261.705890][ T8135] FAULT_INJECTION: forcing a failure. [ 261.705890][ T8135] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 261.740327][ T8135] CPU: 1 PID: 8135 Comm: syz.0.1138 Not tainted syzkaller #0 [ 261.747816][ T8135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 261.757962][ T8135] Call Trace: [ 261.761295][ T8135] [ 261.764269][ T8135] dump_stack_lvl+0x188/0x24e [ 261.769004][ T8135] ? show_regs_print_info+0x12/0x12 [ 261.774242][ T8135] ? load_image+0x410/0x410 [ 261.778799][ T8135] ? __lock_acquire+0x7bd0/0x7bd0 [ 261.783884][ T8135] should_fail_ex+0x390/0x4c0 [ 261.788618][ T8135] _copy_from_user+0x2c/0x170 [ 261.793335][ T8135] iovec_from_user+0x143/0x360 [ 261.798139][ T8135] __import_iovec+0x6c/0x510 [ 261.802775][ T8135] import_iovec+0x6f/0xa0 [ 261.807152][ T8135] ___sys_sendmsg+0x252/0x360 [ 261.811876][ T8135] ? __sys_sendmsg+0x2a0/0x2a0 [ 261.816711][ T8135] ? __lock_acquire+0x7bd0/0x7bd0 [ 261.821821][ T8135] __se_sys_sendmsg+0x1c3/0x2b0 [ 261.826700][ T8135] ? ct_nmi_exit+0x145/0x1c0 [ 261.831330][ T8135] ? __x64_sys_sendmsg+0x80/0x80 [ 261.836326][ T8135] ? lockdep_hardirqs_on+0x94/0x140 [ 261.841567][ T8135] do_syscall_64+0x4c/0xa0 [ 261.846011][ T8135] ? clear_bhb_loop+0x60/0xb0 [ 261.850712][ T8135] ? clear_bhb_loop+0x60/0xb0 [ 261.855423][ T8135] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 261.861351][ T8135] RIP: 0033:0x7f6ab499ce59 [ 261.865809][ T8135] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 261.885444][ T8135] RSP: 002b:00007f6ab578a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 261.893898][ T8135] RAX: ffffffffffffffda RBX: 00007f6ab4c15fa0 RCX: 00007f6ab499ce59 [ 261.902249][ T8135] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 261.910252][ T8135] RBP: 00007f6ab578a090 R08: 0000000000000000 R09: 0000000000000000 [ 261.918252][ T8135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 261.926254][ T8135] R13: 00007f6ab4c16038 R14: 00007f6ab4c15fa0 R15: 00007ffcf176c658 [ 261.934287][ T8135] [ 262.327654][ T8132] netlink: 'syz.1.1137': attribute type 4 has an invalid length. [ 262.480872][ T8146] tap0: tun_chr_ioctl cmd 1074025681 [ 262.844311][ T4285] Bluetooth: hci3: command 0x0409 tx timeout [ 262.940006][ T8111] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.983054][ T8111] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.035409][ T8111] device bridge_slave_0 entered promiscuous mode [ 263.521973][ T8111] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.547755][ T8111] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.577093][ T8111] device bridge_slave_1 entered promiscuous mode [ 263.642134][ T8175] netlink: 'syz.0.1150': attribute type 4 has an invalid length. [ 264.127728][ T8111] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 264.147760][ T8183] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1152'. [ 264.348086][ T8111] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 264.450230][ T8202] FAULT_INJECTION: forcing a failure. [ 264.450230][ T8202] name failslab, interval 1, probability 0, space 0, times 0 [ 264.496683][ T8202] CPU: 1 PID: 8202 Comm: syz.0.1157 Not tainted syzkaller #0 [ 264.504153][ T8202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 264.514266][ T8202] Call Trace: [ 264.517590][ T8202] [ 264.520565][ T8202] dump_stack_lvl+0x188/0x24e [ 264.525327][ T8202] ? show_regs_print_info+0x12/0x12 [ 264.530583][ T8202] ? load_image+0x410/0x410 [ 264.535152][ T8202] ? __might_sleep+0xd0/0xd0 [ 264.539797][ T8202] ? __lock_acquire+0x7bd0/0x7bd0 [ 264.544897][ T8202] should_fail_ex+0x390/0x4c0 [ 264.549645][ T8202] should_failslab+0x5/0x20 [ 264.554194][ T8202] slab_pre_alloc_hook+0x59/0x300 [ 264.559288][ T8202] kmem_cache_alloc_node+0x5a/0x310 [ 264.564631][ T8202] ? __alloc_skb+0xf9/0x7d0 [ 264.569218][ T8202] __alloc_skb+0xf9/0x7d0 [ 264.573610][ T8202] netlink_sendmsg+0x654/0xbd0 [ 264.578480][ T8202] ? netlink_getsockopt+0x550/0x550 [ 264.583748][ T8202] ? aa_sock_msg_perm+0x94/0x150 [ 264.588748][ T8202] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 264.594083][ T8202] ? security_socket_sendmsg+0x7c/0xa0 [ 264.599604][ T8202] ? netlink_getsockopt+0x550/0x550 [ 264.604855][ T8202] ____sys_sendmsg+0x5ed/0x9a0 [ 264.609695][ T8202] ? __sys_sendmsg_sock+0x30/0x30 [ 264.614765][ T8202] ? __import_iovec+0x306/0x510 [ 264.619664][ T8202] ? import_iovec+0x6f/0xa0 [ 264.624216][ T8202] ___sys_sendmsg+0x2a2/0x360 [ 264.628936][ T8202] ? __sys_sendmsg+0x2a0/0x2a0 [ 264.633765][ T8202] ? __lock_acquire+0x7bd0/0x7bd0 [ 264.638871][ T8202] __se_sys_sendmsg+0x1c3/0x2b0 [ 264.643746][ T8202] ? ct_nmi_exit+0x145/0x1c0 [ 264.648380][ T8202] ? __x64_sys_sendmsg+0x80/0x80 [ 264.653376][ T8202] ? lockdep_hardirqs_on+0x94/0x140 [ 264.658620][ T8202] do_syscall_64+0x4c/0xa0 [ 264.663072][ T8202] ? clear_bhb_loop+0x60/0xb0 [ 264.668471][ T8202] ? clear_bhb_loop+0x60/0xb0 [ 264.673186][ T8202] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 264.679121][ T8202] RIP: 0033:0x7f6ab499ce59 [ 264.683578][ T8202] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 264.703238][ T8202] RSP: 002b:00007f6ab578a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 264.711698][ T8202] RAX: ffffffffffffffda RBX: 00007f6ab4c15fa0 RCX: 00007f6ab499ce59 [ 264.719702][ T8202] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 264.727708][ T8202] RBP: 00007f6ab578a090 R08: 0000000000000000 R09: 0000000000000000 [ 264.735706][ T8202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 264.743705][ T8202] R13: 00007f6ab4c16038 R14: 00007f6ab4c15fa0 R15: 00007ffcf176c658 [ 264.751739][ T8202] [ 264.803256][ T8204] netlink: 'syz.4.1156': attribute type 4 has an invalid length. [ 264.849935][ T8111] team0: Port device team_slave_0 added [ 264.914057][ T4285] Bluetooth: hci3: command 0x041b tx timeout [ 265.212112][ T8111] team0: Port device team_slave_1 added [ 265.362606][ T8111] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 265.440255][ T8111] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.520422][ T8111] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 265.564024][ T8111] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 265.578763][ T8111] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.605548][ T8111] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 265.878159][ T8111] device hsr_slave_0 entered promiscuous mode [ 266.085363][ T9] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 266.335922][ T8111] device hsr_slave_1 entered promiscuous mode [ 266.414320][ T8111] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 266.421976][ T8111] Cannot create hsr debugfs directory [ 266.994048][ T4285] Bluetooth: hci3: command 0x040f tx timeout [ 267.041756][ T4332] device hsr_slave_0 left promiscuous mode [ 267.059114][ T4332] device hsr_slave_1 left promiscuous mode [ 267.132570][ T4332] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 267.141585][ T4332] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 267.154295][ T4332] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 267.162034][ T4332] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 267.191184][ T4332] device batadv0 left promiscuous mode [ 267.199180][ T4332] bridge0: port 3(batadv0) entered disabled state [ 267.218909][ T4332] device bridge_slave_1 left promiscuous mode [ 267.231059][ T4332] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.249160][ T4332] device bridge_slave_0 left promiscuous mode [ 267.255785][ T4332] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.280616][ T4332] device veth1_macvtap left promiscuous mode [ 267.287275][ T4332] device veth0_macvtap left promiscuous mode [ 267.293725][ T4332] device veth1_vlan left promiscuous mode [ 267.828974][ T4332] team0 (unregistering): Port device team_slave_1 removed [ 267.878492][ T4332] team0 (unregistering): Port device team_slave_0 removed [ 267.922968][ T4332] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 267.964738][ T4332] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 267.990909][ T4332] team0 (unregistering): Port device veth0_to_bond removed [ 268.277183][ T4332] bond0 (unregistering): Released all slaves [ 268.372744][ T8253] netlink: 'syz.0.1168': attribute type 4 has an invalid length. [ 268.384897][ T8254] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1167'. [ 268.397616][ T8257] netlink: 'syz.4.1169': attribute type 4 has an invalid length. [ 269.074126][ T4276] Bluetooth: hci3: command 0x0419 tx timeout [ 269.751354][ T8111] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 269.789894][ T8111] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 269.845838][ T8111] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 269.869133][ T8312] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1182'. [ 269.883496][ T8111] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 270.311896][ T8312] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1182'. [ 270.324280][ T8317] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1182'. [ 270.386238][ T8326] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1182'. [ 270.655580][ T8111] 8021q: adding VLAN 0 to HW filter on device bond0 [ 270.735159][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 270.764292][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 270.868112][ T8111] 8021q: adding VLAN 0 to HW filter on device team0 [ 270.894855][ T8331] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1183'. [ 270.954070][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 270.984581][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 271.013599][ T4332] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.021764][ T4332] bridge0: port 1(bridge_slave_0) entered forwarding state [ 271.050487][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 271.059782][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 271.069304][ T4332] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.076515][ T4332] bridge0: port 2(bridge_slave_1) entered forwarding state [ 271.087189][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 271.106208][ T8336] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.1185'. [ 271.141971][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 271.165435][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 271.193816][ T8334] netlink: 'syz.1.1184': attribute type 2 has an invalid length. [ 271.229037][ T8334] netlink: 'syz.1.1184': attribute type 8 has an invalid length. [ 271.270015][ T8334] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1184'. [ 271.303752][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 271.353011][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 271.430338][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 271.518246][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 271.546149][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 271.718753][ T8352] FAULT_INJECTION: forcing a failure. [ 271.718753][ T8352] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 271.733675][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 271.746044][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 271.801169][ T8352] CPU: 1 PID: 8352 Comm: syz.2.1188 Not tainted syzkaller #0 [ 271.808637][ T8352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 271.818748][ T8352] Call Trace: [ 271.822078][ T8352] [ 271.825058][ T8352] dump_stack_lvl+0x188/0x24e [ 271.829809][ T8352] ? show_regs_print_info+0x12/0x12 [ 271.835069][ T8352] ? load_image+0x410/0x410 [ 271.839638][ T8352] ? __might_fault+0xa6/0x120 [ 271.844379][ T8352] should_fail_ex+0x390/0x4c0 [ 271.849133][ T8352] copyin+0x1b/0x120 [ 271.853089][ T8352] _copy_from_iter+0x447/0x1130 [ 271.858023][ T8352] ? copyout_mc+0x110/0x110 [ 271.862571][ T8352] ? __virt_addr_valid+0x188/0x540 [ 271.867741][ T8352] ? __virt_addr_valid+0x188/0x540 [ 271.872915][ T8352] ? __virt_addr_valid+0x467/0x540 [ 271.878104][ T8352] ? __phys_addr_symbol+0x2b/0x70 [ 271.883187][ T8352] ? __check_object_size+0x4f6/0xa70 [ 271.888547][ T8352] netlink_sendmsg+0x755/0xbd0 [ 271.893391][ T8352] ? netlink_getsockopt+0x550/0x550 [ 271.898655][ T8352] ? aa_sock_msg_perm+0x94/0x150 [ 271.903668][ T8352] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 271.909017][ T8352] ? security_socket_sendmsg+0x7c/0xa0 [ 271.914532][ T8352] ? netlink_getsockopt+0x550/0x550 [ 271.919788][ T8352] ____sys_sendmsg+0x5ed/0x9a0 [ 271.924631][ T8352] ? __sys_sendmsg_sock+0x30/0x30 [ 271.929710][ T8352] ? __import_iovec+0x306/0x510 [ 271.934678][ T8352] ? import_iovec+0x6f/0xa0 [ 271.939268][ T8352] ___sys_sendmsg+0x2a2/0x360 [ 271.944010][ T8352] ? __sys_sendmsg+0x2a0/0x2a0 [ 271.948877][ T8352] ? ct_irq_enter_irqson+0x170/0x170 [ 271.954260][ T8352] __se_sys_sendmsg+0x1c3/0x2b0 [ 271.959170][ T8352] ? ct_nmi_exit+0x145/0x1c0 [ 271.963864][ T8352] ? __x64_sys_sendmsg+0x80/0x80 [ 271.968895][ T8352] ? lockdep_hardirqs_on+0x94/0x140 [ 271.974159][ T8352] do_syscall_64+0x4c/0xa0 [ 271.978631][ T8352] ? clear_bhb_loop+0x60/0xb0 [ 271.983356][ T8352] ? clear_bhb_loop+0x60/0xb0 [ 271.988094][ T8352] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 271.994040][ T8352] RIP: 0033:0x7efff039ce59 [ 271.998502][ T8352] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 272.018166][ T8352] RSP: 002b:00007efff1184028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 272.026645][ T8352] RAX: ffffffffffffffda RBX: 00007efff0615fa0 RCX: 00007efff039ce59 [ 272.034673][ T8352] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 272.042689][ T8352] RBP: 00007efff1184090 R08: 0000000000000000 R09: 0000000000000000 [ 272.050726][ T8352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 272.058875][ T8352] R13: 00007efff0616038 R14: 00007efff0615fa0 R15: 00007ffc7ce1e528 [ 272.066943][ T8352] [ 272.256986][ T8111] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 272.479108][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 272.493063][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 272.574081][ T8358] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1189'. [ 273.248722][ T8380] device pim6reg1 entered promiscuous mode [ 273.360435][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 273.376342][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 273.398674][ T8111] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 273.521215][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 273.531468][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 273.616701][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 273.635404][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 273.662410][ T8111] device veth0_vlan entered promiscuous mode [ 273.679427][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 273.700952][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 273.740622][ T8111] device veth1_vlan entered promiscuous mode [ 273.912443][ T8111] device veth0_macvtap entered promiscuous mode [ 273.969381][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 274.016170][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 274.067924][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 274.259047][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 274.305490][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 274.352097][ T8401] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1198'. [ 274.388679][ T8111] device veth1_macvtap entered promiscuous mode [ 274.491862][ T8111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.515578][ T8111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.533905][ T8111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.563955][ T8111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.600529][ T8111] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 274.632885][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 274.667849][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 274.768041][ T8111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.807556][ T8111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.844234][ T8111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.950839][ T8111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.037551][ T8111] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 275.101474][ T8417] netlink: 'syz.2.1200': attribute type 29 has an invalid length. [ 275.383820][ T8406] can: request_module (can-proto-0) failed. [ 276.594993][ T4508] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 276.617851][ T4508] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 276.635424][ T8111] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.653924][ T8111] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.662670][ T8111] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.672067][ T8111] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.687993][ T8417] netlink: 'syz.2.1200': attribute type 29 has an invalid length. [ 277.028275][ T8429] netlink: 'syz.2.1204': attribute type 4 has an invalid length. [ 277.066219][ T8429] FAULT_INJECTION: forcing a failure. [ 277.066219][ T8429] name failslab, interval 1, probability 0, space 0, times 0 [ 277.133968][ T8429] CPU: 1 PID: 8429 Comm: syz.2.1204 Not tainted syzkaller #0 [ 277.141447][ T8429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 277.151569][ T8429] Call Trace: [ 277.154903][ T8429] [ 277.157890][ T8429] dump_stack_lvl+0x188/0x24e [ 277.162629][ T8429] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 277.168877][ T8429] ? show_regs_print_info+0x12/0x12 [ 277.174150][ T8429] ? load_image+0x410/0x410 [ 277.178756][ T8429] should_fail_ex+0x390/0x4c0 [ 277.183501][ T8429] should_failslab+0x5/0x20 [ 277.188039][ T8429] slab_pre_alloc_hook+0x59/0x300 [ 277.193125][ T8429] ? fib_create_info+0xa78/0x2370 [ 277.198224][ T8429] __kmem_cache_alloc_node+0x4f/0x270 [ 277.203668][ T8429] ? fib_create_info+0xa78/0x2370 [ 277.208753][ T8429] __kmalloc+0xa3/0x240 [ 277.213005][ T8429] fib_create_info+0xa78/0x2370 [ 277.217958][ T8429] fib_table_insert+0xc2/0x1af0 [ 277.222868][ T8429] ? rtm_to_fib_config+0xfe5/0x1370 [ 277.228158][ T8429] ? fib_new_table+0x106/0x2d0 [ 277.233000][ T8429] inet_rtm_newroute+0x147/0x230 [ 277.238011][ T8429] ? rcu_read_unlock+0xa0/0xa0 [ 277.242899][ T8429] ? rcu_read_unlock+0xa0/0xa0 [ 277.247726][ T8429] rtnetlink_rcv_msg+0x863/0xfb0 [ 277.252720][ T8429] ? rtnetlink_rcv_msg+0x220/0xfb0 [ 277.257895][ T8429] ? rtnetlink_bind+0x80/0x80 [ 277.262654][ T8429] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 277.268423][ T8429] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 277.274200][ T8429] ? perf_trace_lock+0x301/0x390 [ 277.279186][ T8429] ? trace_event_raw_event_lock+0x230/0x230 [ 277.285128][ T8429] netlink_rcv_skb+0x1ef/0x440 [ 277.289921][ T8429] ? rtnetlink_bind+0x80/0x80 [ 277.294626][ T8429] ? netlink_ack+0x1160/0x1160 [ 277.299433][ T8429] ? netlink_deliver_tap+0x2e/0x1b0 [ 277.304692][ T8429] netlink_unicast+0x7ad/0x920 [ 277.309524][ T8429] netlink_sendmsg+0x8ad/0xbd0 [ 277.314334][ T8429] ? netlink_getsockopt+0x550/0x550 [ 277.319567][ T8429] ? aa_sock_msg_perm+0x94/0x150 [ 277.324533][ T8429] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 277.329839][ T8429] ? security_socket_sendmsg+0x7c/0xa0 [ 277.335323][ T8429] ? netlink_getsockopt+0x550/0x550 [ 277.340562][ T8429] ____sys_sendmsg+0x5ed/0x9a0 [ 277.345376][ T8429] ? __sys_sendmsg_sock+0x30/0x30 [ 277.350429][ T8429] ? __import_iovec+0x306/0x510 [ 277.355329][ T8429] ? import_iovec+0x6f/0xa0 [ 277.359873][ T8429] ___sys_sendmsg+0x2a2/0x360 [ 277.364616][ T8429] ? __sys_sendmsg+0x2a0/0x2a0 [ 277.369449][ T8429] ? ktime_get+0x7b/0x270 [ 277.373858][ T8429] __se_sys_sendmsg+0x1c3/0x2b0 [ 277.378740][ T8429] ? ct_nmi_exit+0x145/0x1c0 [ 277.383372][ T8429] ? __x64_sys_sendmsg+0x80/0x80 [ 277.388364][ T8429] ? lockdep_hardirqs_on+0x94/0x140 [ 277.393609][ T8429] do_syscall_64+0x4c/0xa0 [ 277.398058][ T8429] ? clear_bhb_loop+0x60/0xb0 [ 277.402767][ T8429] ? clear_bhb_loop+0x60/0xb0 [ 277.407479][ T8429] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 277.413411][ T8429] RIP: 0033:0x7efff039ce59 [ 277.417860][ T8429] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 277.437498][ T8429] RSP: 002b:00007efff1184028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 277.445946][ T8429] RAX: ffffffffffffffda RBX: 00007efff0615fa0 RCX: 00007efff039ce59 [ 277.453949][ T8429] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 277.461953][ T8429] RBP: 00007efff1184090 R08: 0000000000000000 R09: 0000000000000000 [ 277.469958][ T8429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 277.477957][ T8429] R13: 00007efff0616038 R14: 00007efff0615fa0 R15: 00007ffc7ce1e528 [ 277.486009][ T8429] [ 277.659697][ T4332] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.673909][ T4332] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.785414][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 277.899058][ T4298] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.920268][ T4298] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.948591][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 278.272686][ T8458] netlink: 'syz.0.1207': attribute type 39 has an invalid length. [ 278.961596][ T8473] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1211'. [ 279.160190][ T8481] netlink: 'syz.2.1212': attribute type 4 has an invalid length. [ 279.520734][ T8488] netlink: 'syz.2.1215': attribute type 3 has an invalid length. [ 279.550124][ T8488] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1215'. [ 280.269555][ T8491] can: request_module (can-proto-0) failed. [ 282.442273][ T8542] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1225'. [ 282.896862][ T8555] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1237'. [ 283.223590][ T8563] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.1229'. [ 285.080265][ T8606] netlink: 'syz.1.1239': attribute type 4 has an invalid length. [ 285.525704][ T8626] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1242'. [ 286.170888][ T8636] : port 1(ip6gretap0) entered blocking state [ 286.196506][ T8636] : port 1(ip6gretap0) entered disabled state [ 286.247225][ T8636] device ip6gretap0 entered promiscuous mode [ 286.315748][ T8647] device ip6gretap0 left promiscuous mode [ 286.330277][ T8647] : port 1(ip6gretap0) entered disabled state [ 286.370781][ T8652] netlink: 'syz.3.1248': attribute type 2 has an invalid length. [ 286.383241][ T8652] netlink: 196452 bytes leftover after parsing attributes in process `syz.3.1248'. [ 286.695818][ T8665] netlink: 'syz.2.1253': attribute type 4 has an invalid length. [ 286.940656][ T8670] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1255'. [ 287.160913][ T8670] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.238867][ T8682] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1258'. [ 287.255118][ T8682] device batadv_slave_1 entered promiscuous mode [ 287.549993][ T8695] netlink: 463 bytes leftover after parsing attributes in process `syz.2.1262'. [ 287.727415][ T8700] netlink: 'syz.2.1263': attribute type 21 has an invalid length. [ 287.966312][ T8706] netlink: 'syz.4.1266': attribute type 4 has an invalid length. [ 288.718874][ T8724] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1271'. [ 289.528339][ T8744] netlink: 'syz.1.1278': attribute type 19 has an invalid length. [ 290.101496][ T8753] netlink: 'syz.2.1280': attribute type 4 has an invalid length. [ 290.612784][ T8764] netlink: 'syz.2.1284': attribute type 10 has an invalid length. [ 290.691341][ T8764] bond0: (slave team0): Enslaving as an active interface with an up link [ 290.715229][ T8769] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1286'. [ 290.730009][ T8770] netlink: 'syz.2.1284': attribute type 10 has an invalid length. [ 290.739080][ T8770] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1284'. [ 290.750784][ T8770] device team0 entered promiscuous mode [ 290.756977][ T8770] device team_slave_0 entered promiscuous mode [ 290.764358][ T8770] device team_slave_1 entered promiscuous mode [ 290.785203][ T8770] bond0: (slave team0): Releasing backup interface [ 290.815334][ T8770] bridge0: port 3(team0) entered blocking state [ 290.823502][ T8770] bridge0: port 3(team0) entered disabled state [ 290.850909][ T8767] -1: renamed from syzkaller0 [ 290.961922][ T8777] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1287'. [ 291.381650][ T8786] netlink: 'syz.3.1291': attribute type 10 has an invalid length. [ 291.471176][ T8789] netlink: 14975 bytes leftover after parsing attributes in process `syz.4.1290'. [ 291.487604][ T8786] team0: Port device wlan1 added [ 291.843557][ T8795] netlink: 'syz.1.1295': attribute type 21 has an invalid length. [ 291.852273][ T8795] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1295'. [ 291.904613][ T8795] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1295'. [ 292.114836][ T8795] netlink: 'syz.1.1295': attribute type 29 has an invalid length. [ 292.285734][ T8795] netlink: 'syz.1.1295': attribute type 29 has an invalid length. [ 292.369522][ T8799] netlink: 'syz.1.1295': attribute type 29 has an invalid length. [ 292.879047][ T8807] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1297'. [ 293.086359][ T8809] netlink: 16211 bytes leftover after parsing attributes in process `syz.3.1292'. [ 293.122322][ T8813] netlink: 'syz.2.1298': attribute type 1 has an invalid length. [ 293.182483][ T8813] netlink: 'syz.2.1298': attribute type 3 has an invalid length. [ 293.209047][ T8813] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1298'. [ 293.287050][ T8813] bridge0: port 3(team0) entered disabled state [ 293.369650][ T8813] device bridge_slave_1 left promiscuous mode [ 293.402935][ T8813] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.438540][ T8813] device bridge_slave_0 left promiscuous mode [ 293.475428][ T8813] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.789825][ T8817] netlink: 16166 bytes leftover after parsing attributes in process `syz.1.1299'. [ 294.317007][ T8842] -1: renamed from virt_wifi0 [ 295.279125][ T8858] FAULT_INJECTION: forcing a failure. [ 295.279125][ T8858] name failslab, interval 1, probability 0, space 0, times 0 [ 295.310388][ T8858] CPU: 1 PID: 8858 Comm: syz.0.1313 Not tainted syzkaller #0 [ 295.317849][ T8858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 295.327948][ T8858] Call Trace: [ 295.331267][ T8858] [ 295.334267][ T8858] dump_stack_lvl+0x188/0x24e [ 295.339006][ T8858] ? show_regs_print_info+0x12/0x12 [ 295.344248][ T8858] ? load_image+0x410/0x410 [ 295.348808][ T8858] ? __might_sleep+0xd0/0xd0 [ 295.353473][ T8858] ? __lock_acquire+0x7bd0/0x7bd0 [ 295.358595][ T8858] should_fail_ex+0x390/0x4c0 [ 295.363333][ T8858] should_failslab+0x5/0x20 [ 295.367890][ T8858] slab_pre_alloc_hook+0x59/0x300 [ 295.372978][ T8858] ? __lock_acquire+0x130c/0x7bd0 [ 295.378067][ T8858] ? tomoyo_realpath_from_path+0xe2/0x5c0 [ 295.383852][ T8858] __kmem_cache_alloc_node+0x4f/0x270 [ 295.389286][ T8858] ? tomoyo_realpath_from_path+0xe2/0x5c0 [ 295.395075][ T8858] __kmalloc+0xa3/0x240 [ 295.399296][ T8858] tomoyo_realpath_from_path+0xe2/0x5c0 [ 295.404918][ T8858] ? tomoyo_domain+0xd2/0x120 [ 295.409665][ T8858] ? tomoyo_path_number_perm+0x205/0x650 [ 295.415367][ T8858] tomoyo_path_number_perm+0x22f/0x650 [ 295.420892][ T8858] ? trace_event_raw_event_lock_acquire+0x290/0x290 [ 295.427537][ T8858] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 295.433060][ T8858] ? common_file_perm+0x171/0x1c0 [ 295.438173][ T8858] ? __fget_files+0x28/0x460 [ 295.442836][ T8858] security_file_ioctl+0x6c/0xa0 [ 295.447840][ T8858] __se_sys_ioctl+0x48/0x170 [ 295.452502][ T8858] do_syscall_64+0x4c/0xa0 [ 295.456970][ T8858] ? clear_bhb_loop+0x60/0xb0 [ 295.461696][ T8858] ? clear_bhb_loop+0x60/0xb0 [ 295.466429][ T8858] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 295.472381][ T8858] RIP: 0033:0x7f6ab499ce59 [ 295.476838][ T8858] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 295.496497][ T8858] RSP: 002b:00007f6ab578a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 295.504972][ T8858] RAX: ffffffffffffffda RBX: 00007f6ab4c15fa0 RCX: 00007f6ab499ce59 [ 295.513002][ T8858] RDX: 0000200000002280 RSI: 0000000000008923 RDI: 000000000000000a [ 295.521028][ T8858] RBP: 00007f6ab578a090 R08: 0000000000000000 R09: 0000000000000000 [ 295.529050][ T8858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 295.537071][ T8858] R13: 00007f6ab4c16038 R14: 00007f6ab4c15fa0 R15: 00007ffcf176c658 [ 295.545113][ T8858] [ 295.557602][ T8858] ERROR: Out of memory at tomoyo_realpath_from_path. [ 296.386519][ T8871] validate_nla: 2 callbacks suppressed [ 296.386560][ T8871] netlink: 'syz.2.1316': attribute type 21 has an invalid length. [ 296.472197][ T8871] __nla_validate_parse: 2 callbacks suppressed [ 296.472236][ T8871] netlink: 16166 bytes leftover after parsing attributes in process `syz.2.1316'. [ 296.716400][ T8874] netlink: 16211 bytes leftover after parsing attributes in process `syz.4.1314'. [ 297.122287][ T4508] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 297.542519][ T8891] netlink: 'syz.3.1322': attribute type 4 has an invalid length. [ 312.937692][ T4276] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 312.946964][ T4276] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 312.955129][ T4276] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 312.965357][ T4276] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 312.973275][ T4276] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 312.980723][ T4276] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 314.994126][ T4285] Bluetooth: hci5: command 0x0409 tx timeout [ 315.075724][ T4276] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 315.085550][ T4276] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 315.093431][ T4276] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 315.101802][ T4276] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 315.110301][ T4276] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 315.118580][ T4276] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 315.169255][ T4276] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 315.178626][ T4276] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 315.187000][ T4276] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 315.195375][ T4276] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 315.203117][ T4276] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 315.210990][ T4276] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 317.074099][ T4285] Bluetooth: hci5: command 0x041b tx timeout [ 317.154138][ T4285] Bluetooth: hci6: command 0x0409 tx timeout [ 317.234068][ T4285] Bluetooth: hci7: command 0x0409 tx timeout [ 319.154258][ T4285] Bluetooth: hci5: command 0x040f tx timeout [ 319.235050][ T4285] Bluetooth: hci6: command 0x041b tx timeout [ 319.313985][ T4285] Bluetooth: hci7: command 0x041b tx timeout [ 321.234167][ T4285] Bluetooth: hci5: command 0x0419 tx timeout [ 321.314368][ T4285] Bluetooth: hci6: command 0x040f tx timeout [ 321.393915][ T4285] Bluetooth: hci7: command 0x040f tx timeout [ 323.394053][ T4285] Bluetooth: hci6: command 0x0419 tx timeout [ 323.473957][ T4285] Bluetooth: hci7: command 0x0419 tx timeout [ 325.154354][ T4321] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 0-.... } 2670 jiffies s: 25497 root: 0x1/. [ 325.174880][ T4321] rcu: blocking rcu_node structures (internal RCU debug): [ 325.182075][ T4321] Sending NMI from CPU 1 to CPUs 0: [ 325.187386][ C0] NMI backtrace for cpu 0 [ 325.187396][ C0] CPU: 0 PID: 8886 Comm: syz.1.1319 Not tainted syzkaller #0 [ 325.187412][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 325.187422][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x23/0x80 [ 325.187450][ C0] Code: 48 89 44 11 20 c3 90 48 8b 04 24 65 48 8b 15 c4 4a 80 7e 65 8b 0d c5 4a 80 7e 81 e1 00 01 ff 00 74 11 81 f9 00 01 00 00 75 5b <83> ba 1c 16 00 00 00 74 52 8b 8a f8 15 00 00 83 f9 03 75 47 48 8b [ 325.187465][ C0] RSP: 0018:ffffc90000007558 EFLAGS: 00000046 [ 325.187478][ C0] RAX: ffffffff81a550d1 RBX: 1ffff92000000eb0 RCX: 0000000000000100 [ 325.187491][ C0] RDX: ffff888027b61e00 RSI: 0000000000000102 RDI: 0000000000000000 [ 325.187502][ C0] RBP: ffffc90000007630 R08: ffff888027b61e07 R09: 1ffff11004f6c3c0 [ 325.187515][ C0] R10: dffffc0000000000 R11: ffffed1004f6c3c1 R12: 0000000000000102 [ 325.187527][ C0] R13: 0000000000000000 R14: ffff8880b8e35558 R15: ffff88801a2f0600 [ 325.187539][ C0] FS: 00007fd4f81006c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 325.187554][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 325.187565][ C0] CR2: 0000001b2ff0bff8 CR3: 000000007d839000 CR4: 00000000003506f0 [ 325.187580][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 325.187590][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 325.187606][ C0] Call Trace: [ 325.187611][ C0] [ 325.187617][ C0] perf_swevent_event+0xf1/0x570 [ 325.187643][ C0] ? perf_trace_buf_update+0xa8/0x230 [ 325.187663][ C0] ? perf_tp_event+0xc10/0xc10 [ 325.187686][ C0] ? perf_trace_buf_alloc+0x300/0x300 [ 325.187710][ C0] perf_tp_event+0x36b/0xc10 [ 325.187734][ C0] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 325.187757][ C0] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 325.187802][ C0] ? kvm_sched_clock_read+0x14/0x40 [ 325.187818][ C0] ? sched_clock_cpu+0x6e/0x260 [ 325.187839][ C0] perf_trace_run_bpf_submit+0xf3/0x1c0 [ 325.187867][ C0] perf_trace_preemptirq_template+0x268/0x320 [ 325.187892][ C0] ? asm_sysvec_irq_work+0x16/0x20 [ 325.187918][ C0] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 325.187943][ C0] ? __irq_exit_rcu+0x147/0x230 [ 325.187959][ C0] ? irq_exit_rcu+0x20/0x20 [ 325.187976][ C0] ? asm_sysvec_irq_work+0x16/0x20 [ 325.188012][ C0] trace_irq_enable_rcuidle+0xd3/0x140 [ 325.188035][ C0] trace_hardirqs_on+0x24/0x40 [ 325.188055][ C0] asm_sysvec_irq_work+0x16/0x20 [ 325.188079][ C0] RIP: 0010:rcu_read_unlock_special+0x7f/0x510 [ 325.188097][ C0] Code: eb 03 48 b8 f1 f1 f1 f1 f8 f2 f2 f2 4a 89 04 2b 42 c7 44 2b 08 f8 f3 f3 f3 65 44 8b 35 e2 82 95 7e 41 f7 c6 00 00 f0 00 74 40 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 42 c7 44 2b 08 [ 325.188110][ C0] RSP: 0018:ffffc90000007ae0 EFLAGS: 00000206 [ 325.188122][ C0] RAX: 5af6b98713818200 RBX: 1ffff92000000f64 RCX: 5af6b98713818200 [ 325.188134][ C0] RDX: dffffc0000000000 RSI: ffffffff8a8c17a0 RDI: ffffffff8adee1a0 [ 325.188146][ C0] RBP: ffffc90000007bd0 R08: ffff8880b8e3580b R09: 1ffff110171c6b01 [ 325.188157][ C0] R10: dffffc0000000000 R11: ffffed10171c6b02 R12: 0000000000000246 [ 325.188169][ C0] R13: dffffc0000000000 R14: ffff8880b8e3bb00 R15: 0000000000000001 [ 325.188188][ C0] ? kmem_cache_free+0x80/0x2a0 [ 325.188207][ C0] ? __rcu_read_unlock+0xd0/0xd0 [ 325.188227][ C0] __rcu_read_unlock+0x78/0xd0 [ 325.188241][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x26/0x170 [ 325.188259][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 325.188280][ C0] ieee80211_iterate_active_interfaces_atomic+0x156/0x170 [ 325.188299][ C0] mac80211_hwsim_beacon+0xb7/0x1b0 [ 325.188318][ C0] __hrtimer_run_queues+0x522/0xc90 [ 325.188338][ C0] ? hw_scan_work+0xf00/0xf00 [ 325.188359][ C0] ? hrtimer_interrupt+0x980/0x980 [ 325.188380][ C0] hrtimer_run_softirq+0x173/0x290 [ 325.188400][ C0] handle_softirqs+0x291/0x910 [ 325.188418][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 325.188434][ C0] ? do_softirq+0x210/0x210 [ 325.188447][ C0] ? hrtimer_interrupt+0x775/0x980 [ 325.188466][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 325.188482][ C0] __irq_exit_rcu+0x13b/0x230 [ 325.188497][ C0] ? irq_exit_rcu+0x20/0x20 [ 325.188516][ C0] irq_exit_rcu+0x5/0x20 [ 325.188529][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 325.188550][ C0] [ 325.188555][ C0] [ 325.188559][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 325.188584][ C0] RIP: 0010:finish_task_switch+0x267/0x8e0 [ 325.188611][ C0] Code: d1 08 85 c0 0f 84 38 01 00 00 48 85 db 0f 85 57 01 00 00 0f 1f 44 00 00 4c 89 e7 e8 33 6f db 08 e8 ae 05 2f 00 fb 4c 8b 65 b8 <49> 8d bc 24 f8 15 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 [ 325.188624][ C0] RSP: 0018:ffffc9000d4bf520 EFLAGS: 00000282 [ 325.188636][ C0] RAX: 5af6b98713818200 RBX: 0000000000000000 RCX: 5af6b98713818200 [ 325.188647][ C0] RDX: dffffc0000000000 RSI: ffffffff8a8c17a0 RDI: ffffffff8adee1a0 [ 325.188659][ C0] RBP: ffffc9000d4bf570 R08: ffff8880b8e3580b R09: 1ffff110171c6b01 [ 325.188671][ C0] R10: dffffc0000000000 R11: ffffed10171c6b02 R12: ffff888027b61e00 [ 325.188682][ C0] R13: 1ffff110171c76fa R14: dffffc0000000000 R15: ffff8880b8e3b7d0 [ 325.188705][ C0] __schedule+0x1087/0x4030 [ 325.188723][ C0] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 325.188753][ C0] ? __sched_text_start+0x8/0x8 [ 325.188768][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 325.188792][ C0] ? lock_chain_count+0x20/0x20 [ 325.188812][ C0] ? preempt_schedule+0xbc/0xd0 [ 325.188828][ C0] preempt_schedule_common+0x82/0xd0 [ 325.188844][ C0] preempt_schedule+0xbc/0xd0 [ 325.188859][ C0] ? schedule_preempt_disabled+0x20/0x20 [ 325.188878][ C0] preempt_schedule_thunk+0x16/0x18 [ 325.188922][ C0] _raw_spin_unlock_irqrestore+0x10d/0x120 [ 325.188959][ C0] ? _raw_spin_unlock+0x40/0x40 [ 325.188979][ C0] ? page_ext_put+0x98/0xb0 [ 325.189018][ C0] ? free_zapped_rcu+0x1f0/0x1f0 [ 325.189042][ C0] debug_check_no_obj_freed+0x471/0x520 [ 325.189069][ C0] free_unref_page_prepare+0x2c3/0x9e0 [ 325.189096][ C0] free_unref_page+0x2e/0x3f0 [ 325.189122][ C0] qlist_free_all+0x76/0xe0 [ 325.189141][ C0] kasan_quarantine_reduce+0x144/0x160 [ 325.189160][ C0] __kasan_slab_alloc+0x1e/0x80 [ 325.189183][ C0] slab_post_alloc_hook+0x4b/0x490 [ 325.189202][ C0] ? slab_pre_alloc_hook+0x59/0x300 [ 325.189220][ C0] ? preempt_schedule_thunk+0x16/0x18 [ 325.189243][ C0] ? tomoyo_realpath_from_path+0xe2/0x5c0 [ 325.189270][ C0] __kmem_cache_alloc_node+0x19d/0x270 [ 325.189291][ C0] ? tomoyo_realpath_from_path+0xe2/0x5c0 [ 325.189315][ C0] __kmalloc+0xa3/0x240 [ 325.189341][ C0] tomoyo_realpath_from_path+0xe2/0x5c0 [ 325.189372][ C0] ? tomoyo_domain+0xd2/0x120 [ 325.189398][ C0] ? tomoyo_path_number_perm+0x205/0x650 [ 325.189421][ C0] tomoyo_path_number_perm+0x22f/0x650 [ 325.189445][ C0] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 325.189467][ C0] ? ct_irq_exit_irqson+0x113/0x170 [ 325.189485][ C0] ? rcu_read_unlock_special+0xf9/0x510 [ 325.189516][ C0] ? __fget_files+0x28/0x460 [ 325.189547][ C0] security_file_ioctl+0x6c/0xa0 [ 325.189571][ C0] __se_sys_ioctl+0x48/0x170 [ 325.189600][ C0] do_syscall_64+0x4c/0xa0 [ 325.189616][ C0] ? clear_bhb_loop+0x60/0xb0 [ 325.189631][ C0] ? clear_bhb_loop+0x60/0xb0 [ 325.189647][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 325.189671][ C0] RIP: 0033:0x7fd4f719ce59 [ 325.189685][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 325.189699][ C0] RSP: 002b:00007fd4f8100028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 325.189714][ C0] RAX: ffffffffffffffda RBX: 00007fd4f7415fa0 RCX: 00007fd4f719ce59 [ 325.189727][ C0] RDX: 0000200000000040 RSI: 00000000401054d5 RDI: 000000000000000e [ 325.189738][ C0] RBP: 00007fd4f7232e6f R08: 0000000000000000 R09: 0000000000000000 [ 325.189748][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 325.189758][ C0] R13: 00007fd4f7416038 R14: 00007fd4f7415fa0 R15: 00007fff4d3d3b48 [ 325.189778][ C0] [ 328.445366][ T56] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 328.664361][ T48] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 328.672977][ T48] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 328.680980][ T48] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 328.688844][ T48] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 328.696693][ T48] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 328.704248][ T48] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 328.734885][ T4276] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 328.743606][ T4276] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 328.752675][ T4276] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 328.760631][ T4276] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 328.772620][ T4276] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 328.779977][ T4276] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 330.753966][ T4285] Bluetooth: hci9: command 0x0409 tx timeout [ 330.833973][ T4285] Bluetooth: hci8: command 0x0409 tx timeout [ 332.834215][ T4285] Bluetooth: hci9: command 0x041b tx timeout [ 332.913964][ T4285] Bluetooth: hci8: command 0x041b tx timeout [ 334.913938][ T4285] Bluetooth: hci9: command 0x040f tx timeout [ 334.994078][ T4285] Bluetooth: hci8: command 0x040f tx timeout