last executing test programs: 5m40.757177156s ago: executing program 3 (id=1186): write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0x2a979d) r0 = socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x48510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001e40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x538}, 0x40) r1 = socket$kcm(0x2, 0x3, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020039000b05d25a806f8c6394f90324fc602f00000008000300feff020037153e370248018000f01700d1", 0x2d}], 0x1}, 0x0) sendmsg$inet(r1, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000001140)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0], 0x48}, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000"], 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x60a02, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETDEBUG(r3, 0x400454c9, 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5ce0373e, 0x0, @perf_config_ext={0x5, 0x4bcc}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x25, 0x5, 0x0) write$cgroup_pid(r4, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffc3, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0xf, 0x3}, 0x100e64, 0xc78, 0x4, 0x0, 0x0, 0xfffffffd}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x2) r6 = openat$cgroup_int(r5, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000380), 0x12) write$cgroup_int(r6, &(0x7f0000000040)=0x10000000, 0x1) setsockopt$sock_attach_bpf(r0, 0x84, 0xb, &(0x7f0000000000), 0xe) 5m40.563946341s ago: executing program 3 (id=1188): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x1, @perf_bp={0x0, 0x3}, 0xc004, 0x5, 0x43a1bd72, 0x7, 0x7, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$kcm(0x10, 0x2, 0x0) r2 = socket$kcm(0x2, 0x3, 0x106) sendmsg$inet(r2, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0xfffd, @remote}, 0x10, 0x0}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x12, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32=r3], &(0x7f0000000240)='GPL\x00', 0xd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x38, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xdd}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @initr0={0x18, 0x0, 0x0, 0x0, 0xbe1b, 0x0, 0x0, 0x0, 0x1e54}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000006c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x61, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x8, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000740)=[r1], &(0x7f0000000780)=[{0x3, 0x3, 0xe, 0x2}, {0x3, 0x4, 0x2, 0x1}, {0x4, 0x3, 0x8, 0x5}], 0x10, 0x1}, 0x94) socketpair$unix(0x1, 0x2, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000780)=r5, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r4}, 0xc) perf_event_open$cgroup(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000007, 0x70000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r7, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1c0000001e007f109e", 0x2a}, {&(0x7f0000000140)="78cafb73fc02010700000000ef02258f2e440ab8f9e6aaeb1ae2f6e8bcb5ee52dc06b6c9ad11cb5dbc249798093c5102a1bca0b6050000004f6e6b788b3219c233e60ddc36024a99a63e7238fe9f9b06f96137c8af12b6", 0x98}], 0x2}, 0x4000000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @ldst={0x6}], {0x95, 0x0, 0x0, 0x20}}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0xc, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x22) 5m40.374718495s ago: executing program 3 (id=1190): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xe1a041b252c736f4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@ldst={0x1, 0x2, 0x2, 0xb, 0x9, 0x80, 0x4}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x3}, 0x94) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x2000000000000}, 0x200, 0x0, 0x400, 0x0, 0x0, 0x20000, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="2e0000003b000511d25a80698c6394090124fc602f6e35401000018025581d00d1bd000000000001000000000000", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) 5m40.16378633s ago: executing program 3 (id=1192): socket$kcm(0x2, 0x5, 0x84) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x502, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000038000b63d25a80648c2594f90124fc60", 0x14}], 0x1}, 0x4000) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000000c0), &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x40, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0xcb, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) close(r6) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f00000002c0)=r4}, 0x20) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b87, 0x2, @perf_bp={0x0, 0x8}, 0x8000, 0x5, 0x43a1bd76, 0x1, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8916, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007baaf8ff00000000b7080000341200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008"], 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000000000000f7ff0000850000006100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r8, 0x2f, 0x28, 0x0, &(0x7f0000000640)="c1dfb080cd21d308098e000081007e2288a8", 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmsg$unix(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000800)=""/229, 0x8ec1}], 0x1}, 0x2002) close(r3) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x48510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$TUNSETOFFLOAD(r9, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r3, 0x40047440, &(0x7f0000001200)) 5m36.656903445s ago: executing program 3 (id=1198): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x1, @perf_bp={0x0, 0x3}, 0xc004, 0x5, 0x43a1bd72, 0x7, 0x7, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$kcm(0x10, 0x2, 0x0) r2 = socket$kcm(0x2, 0x3, 0x106) sendmsg$inet(r2, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0xfffd, @remote}, 0x10, 0x0}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x12, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32=r3], &(0x7f0000000240)='GPL\x00', 0xd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x38, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xdd}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @initr0={0x18, 0x0, 0x0, 0x0, 0xbe1b, 0x0, 0x0, 0x0, 0x1e54}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000006c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x61, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x8, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000740)=[r1], &(0x7f0000000780)=[{0x3, 0x3, 0xe, 0x2}, {0x3, 0x4, 0x2, 0x1}, {0x4, 0x3, 0x8, 0x5}], 0x10, 0x1}, 0x94) socketpair$unix(0x1, 0x2, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000780)=r5, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r4}, 0xc) perf_event_open$cgroup(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000007, 0x70000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r7, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1c0000001e007f109e", 0x2a}, {&(0x7f0000000140)="78cafb73fc02010700000000ef02258f2e440ab8f9e6aaeb1ae2f6e8bcb5ee52dc06b6c9ad11cb5dbc249798093c5102a1bca0b6050000004f6e6b788b3219c233e60ddc36024a99a63e7238fe9f9b06f96137c8af12b6", 0x98}], 0x2}, 0x4000000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @ldst={0x6}], {0x95, 0x0, 0x0, 0x20}}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0xc, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x22) 5m35.893470131s ago: executing program 3 (id=1201): perf_event_open(&(0x7f0000000500)={0x2, 0x87, 0x28, 0xfd, 0x4, 0x5, 0x0, 0x9, 0x640b9, 0x70371202aea7e987, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b82, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x200000000000008a, 0x43a1bd76, 0x7, 0x6, 0x6, 0x2, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x8e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x80000000, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) socket$kcm(0x10, 0x5, 0x4) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x300060c1) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) socket$kcm(0x2, 0x5, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000050000000000000001000004080000000000000003000000100000000000000000000002000000000300000000000004040000000000002e"], 0x0, 0x4d}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0300000000040000b30000000c0000002000000067c0f9466c246b07f02c4371aaa418c313900f2a75872c2f07607d7e7ef59ae5dc24562dda37c14dbab0b9280d3a197024ab5f06523a3cb56add0dc24e7d5ca6cebb6d12b096126b931f67f2dc4a4a891002d5", @ANYRES32, @ANYBLOB="0000001200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000010000000600"/28], 0x50) socket$kcm(0x10, 0x3, 0x10) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x80000001, 0x2, 0x7c, 0x800, r2, 0x800, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x1, 0x3}, 0x50) socket$kcm(0x21, 0x2, 0xa) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r4, &(0x7f00000000c0), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf810000000000000708"], 0x0, 0x8, 0x0, 0x0, 0x40f00}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273fa7b49301641184a9"], 0xfdef) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x49}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x739, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x3000000}, 0x48) r6 = openat$cgroup_procs(r4, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f00000001c0), 0x12) 5m20.724016289s ago: executing program 32 (id=1201): perf_event_open(&(0x7f0000000500)={0x2, 0x87, 0x28, 0xfd, 0x4, 0x5, 0x0, 0x9, 0x640b9, 0x70371202aea7e987, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b82, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x200000000000008a, 0x43a1bd76, 0x7, 0x6, 0x6, 0x2, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x8e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x80000000, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) socket$kcm(0x10, 0x5, 0x4) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x300060c1) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) socket$kcm(0x2, 0x5, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000050000000000000001000004080000000000000003000000100000000000000000000002000000000300000000000004040000000000002e"], 0x0, 0x4d}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0300000000040000b30000000c0000002000000067c0f9466c246b07f02c4371aaa418c313900f2a75872c2f07607d7e7ef59ae5dc24562dda37c14dbab0b9280d3a197024ab5f06523a3cb56add0dc24e7d5ca6cebb6d12b096126b931f67f2dc4a4a891002d5", @ANYRES32, @ANYBLOB="0000001200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000010000000600"/28], 0x50) socket$kcm(0x10, 0x3, 0x10) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x80000001, 0x2, 0x7c, 0x800, r2, 0x800, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x1, 0x3}, 0x50) socket$kcm(0x21, 0x2, 0xa) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r4, &(0x7f00000000c0), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf810000000000000708"], 0x0, 0x8, 0x0, 0x0, 0x40f00}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273fa7b49301641184a9"], 0xfdef) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x49}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x739, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x3000000}, 0x48) r6 = openat$cgroup_procs(r4, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f00000001c0), 0x12) 32.117547487s ago: executing program 0 (id=2718): write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0x2a979d) r0 = socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x48510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001e40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="78000000000000000b01000005000000c35b77d20f46bef258d1f1da33e61123d067a0c04a761c81471fa47e0355e33cfbc2070000001e973f17eec7c17df6db22db23c74b07273540d0ea7932f49eea36dcc5ec0fc423b3ce08009f9aabbe4e67966af3678c7a268c23e8f1ce081afae100000000000000e80000000000000000000000410f00004dff31081d0c29029733a134c87045f29ccd61c5647056f40604eaf22cd18c5769a316a31aba194c1bed931ae70ee7e3433dbfc3dff91c6f6a7ee9f516431d9b7bae20a12fe9fd7cf747bc6a748897b8cedd02e389380ec80467580e128c3bd31dc43088fd0fb1112cc900415d8a4cbae044705c9dbc2aaa811bd1e82968c6529fd74a0cee871f59c0308989bbfccdd8d0543e2221ce926aa80aab879429668c119470f7a5579f11a5a01753eb17163d4ea7f21ade3f91032b088a036f696a33e095714c72b6dcfde320f1de3db08613d600000000000000500000000000000012010000000000008024534bfdc43f2ddadd3d0776edd8577364571c8dc8da0c7b783c2ab7eb1a9958d5268aab334819e27d508cef4f0ff9d6ea49ac851c1c8bf4000000000000003000000000000000010000000d000000d6512845899105449c83871602353f4a2e123a02879c0a63bc000000000000005803000000000000840000000c0000007ce828fec129a63db46aa32f8033349f0c58c62d19ec032390b033aaf8301eec71225c3f42af36ec2b608a954c083aebfa928b1303b3403390b11189e1a1cc47a9ea621f974477eac4b5938b7b7c71ae6e5abebcc7645f900c23ff01288b43d677da03fe0da7ddb2eec2e3fc4532bd74f83110ed0e16cf45565af5ca4362aedabb3e455a9fbb80193a216ed41108fa80b00d150a3f0213ac10f73e863e16ab1dee9f7213ec010d6e16ae22ce90e69e3c3247de625eb537ed7ec18e69776c65a199fb0996d859736713165b01fe208a7d6f954e7f9337a11c86153ea83c7fa45eeecabca640f4bbb440448fd104b791678575551e1c302076ee3498834e6e7b550e3dd782375f6c230a8c7c144faf5f22537f7f5b9ff6f21682a70671904598a4f5015ecb180c19d5b0e81ad6c09c4bd806bd3d49d35d9645d30fa3c8540fe7330869fc09fcf9c983512b2cbfaa82d0b64425e2aadc01b9ff817d84718e5e06aabd365e2515d536eccbdf41c331b08852888806cdfe4e0467ffa9a3286da1cf799fa3b22bbff740380ba8facd14505135fa14ff76e429777ce712f1c2123329c8121bb520b5c6963d129d08d2f736bb02bc0044122b3fec258554fccac1abc4decd3572e7ec6224a158b2a124dac4df1b7e97de2a88b69624ee27edfba0b47a61d0c43cead0e4d1c64ac69562fb887d699d1ca59ae4486aa98c98b8f42921455a4291f0ce5a47e80b91878d6eaad919af9d281f55d3c44fbc330462665efc357b3ede74ccc6deb71b4566c1d348e534c3c6f183041e36e26afdf571acdc0538cf601cc073881d8ba87fd59640d2b8cc503dd6af50c561eb81b26649d301c0ac4d9e6d24a3d4823e6d6a25ac05a5c2fd13028364781218f9079dfe8a39f4509dfa75e4c7497c353a30c88a3fef31a88dc90b2ab6b6deff2bd0e91d32db6ee198fa205d3496bb5b133b327b9e6d3f84e29823d1d87c851557a260129e315d3a0d33ddc0fe52b908f2dbe7695142fc7e1fbd10de2381febca77bfb4d7ce586889f9a5ac4f17ee609d0d0455cfbfe039a342b6ee6ce7bece491e1be894dd479a7a56b080f2f919bf2b68157af6648dac75d77a221f34e83923566cd1ff005da0f7bb3aaa7bef7ae462b62d38e056186"], 0x538}, 0x40) r1 = socket$kcm(0x2, 0x3, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r1, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000001140)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0], 0x48}, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000"], 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x60a02, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETDEBUG(r3, 0x400454c9, 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5ce0373e, 0x0, @perf_config_ext={0x5, 0x4bcc}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x25, 0x5, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x10}, 0x100000, 0x7, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r5, 0x2403, 0x2) r6 = openat$cgroup_int(r4, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000380), 0x12) write$cgroup_int(r6, &(0x7f0000000040)=0x10000000, 0x1) setsockopt$sock_attach_bpf(r0, 0x84, 0xb, &(0x7f0000000000), 0xe) 31.55788344s ago: executing program 0 (id=2723): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r0, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_retopts={{0x3c, 0x110, 0x2, {[@noop, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x24, 0x15, 0x1, 0x2, [{@broadcast, 0x3fc00000}, {@multicast1, 0x200}, {@remote, 0x9}, {@loopback}]}]}}}, @ip_ttl={{0x14, 0x110, 0x2, 0xfffffffe}}], 0x58}, 0x0) 31.319525665s ago: executing program 0 (id=2726): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000d600000000000000000000008500000041000000850000000700000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r2 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r2) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x50) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000880)={r2, 0x30, 0x0}, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x9, 0x2}, 0x40, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000e40)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={r2, 0x58, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x12, 0x8, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xa31, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @func={0x85, 0x0, 0x1, 0x0, 0x7}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', r5, @fallback=0x4, r2, 0x8, &(0x7f00000006c0)={0x4, 0x2}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000700)=[r4, r2, r4, r4, r4], 0x0, 0x10, 0x5}, 0x94) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)=r3}, 0x20) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f00000003c0)="d80000001a00810a1d08007b490d4f1e81f8d804000100ff05142603600e12080005007a01e300a80016002000034004000000035c0461c9d67f6f940071342e8728a84942de4fe3aefb8000a007a290457f01e84460dd46302af989b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025c4679ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e78", 0xd8}], 0x1}, 0x0) close(r7) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000800)=r1) close(r6) syz_clone(0x20030000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x5, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000ffffffb00000007d4478867684eaa800bb7f1a00851000000800000095000000000000007a346f38646292864ce41d9567c3cf73ecf06fdd65e04f167a1b4b4d13d901882fbd42e55fd0286961d0ee8b92c851f9419f5c60d899e08f4cb3c3c2d1c0f31851a90066c8cc4518db28e5540b5ce1201122f2fa9e2c1a2b5a72b5062c4cc28b23fe912f24af229648179beb163c860c793e2fbe9aa08a9bf16cc06ddf8578de6aaebd41cf7b536a316dd1ec79dd76bb85eeef110b4b0e34f45245574b54aad538e7ba090203be9f15479fc0d4dec28283e411741d081fa510210d583008ab"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x93, &(0x7f0000000100)=""/147}, 0x94) 30.827893265s ago: executing program 0 (id=2729): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x94) r1 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f0000000040)=r0, 0x4) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000200), 0x2, 0x0) openat$cgroup_procs(r2, &(0x7f0000000100)='cgroup.threads\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x7c, &(0x7f00000000c0)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000400110000000a600e41b0000900ac00060411000000160012000a00037c0248035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) 30.017203622s ago: executing program 0 (id=2730): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="1400000035000b63717a3c4a01d8985b0808aa78", 0x14}], 0x1}, 0x0) recvmsg$kcm(r1, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x102) r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f0000000280)={&(0x7f0000000140)=@in6={0xa, 0x0, 0x0, @dev, 0x1}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000300)='`', 0x1}], 0x1}, 0x0) r4 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r4, &(0x7f0000000200)={'b', ' *:* ', 'wm\x00'}, 0x9) 28.846664278s ago: executing program 0 (id=2735): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x1, 0x2b4}, 0x0, 0x10000, 0x0, 0x0, 0x8, 0x20005, 0x2, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0x9, 0x5, 0x4, 0xc1, 0xffffffffffffffff, 0x1000000}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000380), 0x3d, r2}, 0x38) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000840)={r2, 0x0, &(0x7f0000000940)=""/208}, 0x20) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4, 0x1}, @func_proto={0x0, 0x0, 0x0, 0x5, 0x18}, @typedef={0x2, 0x0, 0x0, 0x8, 0x2}, @volatile={0x0, 0x0, 0x0, 0xa, 0x3}]}, {0x0, [0x30, 0x5f, 0x61, 0x61]}}, 0x0, 0x52}, 0x28) r3 = openat$cgroup_devices(r0, &(0x7f0000000180)='devices.deny\x00', 0x2, 0x0) r4 = socket$kcm(0x2, 0x1000000000000002, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x5411, &(0x7f00000000c0)) write$cgroup_devices(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="62202a3a3409776d0a89"], 0xa) 20.86823406s ago: executing program 1 (id=2779): write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0x2a979d) r0 = socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x48510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001e40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x538}, 0x40) r1 = socket$kcm(0x2, 0x3, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) sendmsg$inet(r1, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000001140)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0], 0x48}, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000"], 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x60a02, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETDEBUG(r3, 0x400454c9, 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5ce0373e, 0x0, @perf_config_ext={0x5, 0x4bcc}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x25, 0x5, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x10}, 0x100000, 0x7, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r5, 0x2403, 0x2) r6 = openat$cgroup_int(r4, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000380), 0x12) write$cgroup_int(r6, &(0x7f0000000040)=0x10000000, 0x1) setsockopt$sock_attach_bpf(r0, 0x84, 0xb, &(0x7f0000000000), 0xe) 20.38088615s ago: executing program 2 (id=2783): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b35, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030036000b05d25a806c8c6f94f90424fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffff56a, 0x100000000}, 0x250a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x2c, 0x3, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x11b, 0x6, &(0x7f0000000000)=r3, 0x4) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x5c, 0x3, 0x7, 0x8, 0x0, 0x4, 0x4020, 0x4, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000100), 0x1}, 0x300, 0x700, 0x8, 0x2, 0x0, 0x400, 0x8, 0x0, 0x1, 0x0, 0x8001}, r3, 0x10, r1, 0x8) sendmsg$kcm(r3, &(0x7f0000002e00)={&(0x7f0000000200)=@ll={0x11, 0x1, 0x0, 0x1, 0x8, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x80, &(0x7f0000002900)=[{&(0x7f0000001880)="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", 0x1000}, {&(0x7f0000002880)="47f9d917b64812a52043402774ab04cd3287ed38ba2d34a202515fdfe41e65ef5a0d81f663d6967c524382bd4475c0d36f2c1e36de20cdc536cb5f632c4d2d1bffea9ae22a9be3f6decac5e4db297af6a27d08f2abac1bb5ad798b6af2e8da758a88b117ef8599b28f6755", 0x6b}], 0x2, &(0x7f0000002940)=ANY=[@ANYBLOB="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"], 0x4c0}, 0x10) r4 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r3}, 0x8) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000140)) write$cgroup_int(r4, &(0x7f0000000080)=0x9, 0x12) 20.026378818s ago: executing program 2 (id=2785): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x5, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) (async) r0 = socket$kcm(0x1e, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async, rerun: 64) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) (rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e0000000400000004"], 0x48) (async, rerun: 64) close(r2) (rerun: 64) 19.858518122s ago: executing program 4 (id=2786): r0 = socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc070, 0x0, 0x0, 0x6, 0x0, 0x12}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x3f}, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f0000000540)=[{0x18, 0x110, 0xc, '\x00'}, {0x58, 0x110, 0x1, "acc200a4ad987fed5a1ee81eaf22243c2a3c2d65a678827e6c349644c9ae15749e5604f2e5437a385c484aed274687c2cbd8d559176df55d3fecd71168429ab14c3e"}], 0x70}, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000400), 0x12) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="140000002a000b6c8cff00f90429fc60010f5ddf", 0x14}], 0x1}, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="140000002a000b6c8cff00f90429fc60010f5ddf", 0x14}], 0x1}, 0x0) r5 = socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0xfc0b65d77d25bb81, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) recvmsg$unix(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000280)=""/166, 0xa6}, {&(0x7f0000000340)=""/91, 0x5b}], 0x2, &(0x7f0000000440)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x20) setsockopt$sock_attach_bpf(r5, 0x6, 0x4, &(0x7f0000000200)=r5, 0x21) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}, 0x15008}, r7, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xba, 0xc, 0x8, 0x1, 0x0, 0x681, 0x10040, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_bp={&(0x7f00000000c0), 0x1}, 0x800, 0x3, 0x6, 0x6, 0x80, 0x9, 0x7, 0x0, 0x8001, 0x0, 0x5}, r7, 0x3, 0xffffffffffffffff, 0x3) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000680)="a7776f77fc3f6578e8afe7650fee68bbc9b7e3305cd8102ca41ec6f1d9c1cc07757dc9d7d494d09bc0f3e7779e13e26230312eff1c205a0a44eeb9a0f0c08633bb8b4674f5de8d73c7dbe66f25005d84eb17b10cb983ddea5b0d69c4862a979ad18b2818e242acddae1526ed6a6fea1b6a6c663c308850658e18d502d294", 0xfffffffffffffd27}], 0x1}, 0x20001801) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r9, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r8, 0x89e1, &(0x7f00000001c0)={r9}) 18.884650373s ago: executing program 4 (id=2787): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x8000, 0x5, 0x3, 0x46ab52bf2228c1d1, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000007c0)='memory.events\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000040)=r0, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x8, 0x60000000, 0x0, 0x1, 0x0, &(0x7f0000001480)='H'}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200a}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000000)=@tipc=@name={0x1e, 0x2, 0x0, {{}, 0x4}}, 0x80, 0x0}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x0, 0x0, 0x0, 0x0, 0x200, 0x80220, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, @perf_bp={0x0, 0x2}, 0x411, 0x1, 0xc, 0x0, 0x81}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(r1, 0xc0189436, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x4474, 0x0, 0x0, 0x2, 0x0, 0xfffffffc, 0xb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0xff, 0x0, 0x9, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x85a, 0x8}, 0x0, 0x7b, 0x8, 0x8, 0x1, 0x0, 0x82, 0x0, 0x7, 0x0, 0xa}) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r1) r4 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0xa2, 0x3, 0x2, 0x4, 0x0, 0xfffffffffffffff4, 0x802c2, 0xb, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x56, 0x0, @perf_bp={&(0x7f0000000000), 0x60c5cf45cf4d41fd}, 0x4050, 0x642a, 0xb0, 0x7, 0x2, 0xb39, 0x1, 0x0, 0x3, 0x0, 0x4}, 0x0, 0x10, 0xffffffffffffffff, 0xa) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0x18, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4231, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@ringbuf_query, @alu={0x4, 0x1, 0x3, 0x8, 0xf, 0xfffffffffffffff0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7ff}, @ldst={0x2, 0x1, 0x0, 0x2, 0x1, 0xffffffffffffffff, 0x1}, @call={0x85, 0x0, 0x0, 0xbb}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000003c0)='GPL\x00', 0x4, 0xc7, &(0x7f0000000400)=""/199, 0x41000, 0xc, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2, 0x0, &(0x7f0000000500)=[0x1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], 0x0, 0x10, 0x6}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x3}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000280)=ANY=[@ANYBLOB="91106c000000000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) socket$kcm(0x29, 0x7, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) 18.630453448s ago: executing program 4 (id=2788): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x6, 0x17, &(0x7f0000000800)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x2}, [@exit, @map_fd={0x18, 0xc, 0x1, 0x0, 0x1}, @cb_func={0x18, 0x4, 0x4, 0x0, 0x8}, @generic={0x1, 0x5, 0x2, 0x101, 0x41d134fc}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6fe5}}, @alu={0x4, 0x0, 0xc, 0x1, 0x2, 0x1}]}, &(0x7f00000008c0)='GPL\x00', 0x1000, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000900)={0x5, 0xb, 0x5, 0x8001}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000940)=[{0x4, 0x1, 0x2, 0x2}]}, 0x94) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000a40)=r0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0xe) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) r3 = socket$kcm(0xa, 0x2, 0x0) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x1e, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_config_ext={0x0, 0x3fff8000}, 0x2042, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x9) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x301002, 0x0) close(r6) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x110e22fff6) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x1, 0x7, 0xffeff038}, {0x6, 0x0, 0x0, 0xfffffffc}]}) ioctl$TUNGETVNETLE(r6, 0x40107446, &(0x7f0000000180)) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)="2e0000002a00818a04fb7fec598f866b29924a6f130000005e14060800000000000000000f0000000280a71802dd", 0x2e}], 0x1}, 0x0) ioctl$TUNSETOFFLOAD(r8, 0x4004743d, 0x110e22fff6) write$cgroup_type(r8, &(0x7f0000000280), 0x9) r10 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x48, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_config_ext={0x8, 0x2}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x1) close(r4) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xd0, 0x0, 0x0, 0x0, 0x0, 0x22, 0x5c441, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x1}, 0x2098, 0x3, 0x9, 0x0, 0x10, 0x2, 0x4007, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, r10, 0x0) r11 = syz_clone(0x0, &(0x7f0000000380)="ec1c0982d580145f9da6c9196eee776c41f2a042834747e4a94aed88ea1130d6209b094a5aafaa5199b4a5d3d4de0c6cf8e8ae6c0ab3641cfe805ed87be4c8bff4929172618942b793e622efddfc9221c6310abda1696905a168e3359f8ebd594bcb43d672d4e78f0fa22f", 0x6b, &(0x7f0000000740), &(0x7f0000000780), &(0x7f00000007c0)="24f05fc19a42c5bea2a701350f2fdba11303e574f8") perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x81, 0x9, 0xb, 0x6, 0x0, 0x5, 0x608, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x1, @perf_config_ext={0x1ff, 0x8bcd}, 0x100000, 0x7fff, 0x3ff, 0x9, 0x3, 0x4, 0xa, 0x0, 0x8000, 0x0, 0x9}, r11, 0x6, r5, 0x9) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r12, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000680)=""/151, 0x97}], 0x1, 0xfffffffffffffffe}, 0x0) close(r13) setsockopt$sock_attach_bpf(r3, 0x11, 0x30, &(0x7f0000000100), 0x33eb) r14 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYRES64=r1, @ANYRES32=r1, @ANYRES16=r5], &(0x7f0000000300)='GPL\x00', 0x4, 0x1002, &(0x7f0000002500)=""/4098}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r14, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000040)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0], 0x0, 0x40, &(0x7f0000000140)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0xdc, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="040000000a000000006e69cd0000000000000000", @ANYRES32=r2, @ANYBLOB='\f\x00'/20, @ANYRES32=r15, @ANYRES32, @ANYBLOB="01000000000000000200"/28], 0x50) 18.342850244s ago: executing program 1 (id=2789): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x1d, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000001000000b708000000000000dbaaf8fff1000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006a000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x1, 0x12) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="12000000060000000400f302000000000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r3}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000240), &(0x7f0000000280)=r2}, 0x20) close(0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="31de76fb398bc62d058b8a96924594f5476a0824be53f7a5949f80614c42391e4b80412938c955d34d37eb96ba7849c3eb823bb36724bd6f6d0219cfe5c884afcd2bdea5acf9c877c03dcdbbb3e47417b6707c27d4c5c1db1924071f6b6f23c7d199c799c9b0c41101e625fcdb7bbfd12a3eeeef4540a5698f058aaf6a141e5d333929b92a7f64e925bf0ef424c3ef29fcd5fd4721c547fde6abe4d47048b64511693624b0d786711abe4a66e250fcbfe95ac9037e58f331b26b6ed0d08e5c73ba4c49", 0xc3}], 0x1, &(0x7f00000001c0)=[@ip_tos_int={{0x14}}, @ip_ttl={{0x14}}, @ip_ttl={{0x14}}, @ip_tos_u8={{0x11}}, @ip_tos_u8={{0x11, 0x2}}, @ip_retopts={{0x28, 0x0, 0x7, {[@lsrr={0x83, 0x3}, @generic={0x0, 0x3, "96"}, @generic={0x0, 0xf, "206a77bdd1a004129054e7704a"}]}}}], 0xa0}, 0x0) 18.186966557s ago: executing program 1 (id=2790): socket$kcm(0x10, 0x2, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000440)=""/183}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x210}) socket$kcm(0x10, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x4, 0x5, &(0x7f00000004c0)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000ec0)={r2, 0xe0, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000500)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, &(0x7f0000000c40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0], 0x0, 0x61, &(0x7f00000004c0), 0x0, 0x10, &(0x7f0000000d00), &(0x7f0000000d40), 0x8, 0xc2, 0x8, 0x8, &(0x7f0000000d80)}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001040)={0x6, 0x11, &(0x7f0000001100)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b702000014004ac5c7ea4e740063da07059f0000b7030000000000008500000083000000bf09000000000000f9ec039057fc9f991f6d55090100000000009500000000000000186700000b00000000000000050000060000000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000b00)='syzkaller\x00', 0x5, 0x8c, &(0x7f0000000b40)=""/140, 0x40f00, 0x0, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000f00)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000f40)={0x0, 0x9, 0x3, 0x10001}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001000)=[{0x1, 0x1, 0x5, 0x6}], 0x10, 0x100}, 0x94) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000001000000000000008018000095000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001400)=@bpf_lsm={0x1d, 0x5, &(0x7f0000000cc0)=ANY=[@ANYBLOB="85100008faffffff18220000", @ANYRES32=r1, @ANYBLOB="0000000075290000183a00000200"/24], &(0x7f0000001200)='GPL\x00', 0x7, 0x8b, &(0x7f0000001240)=""/139, 0x41100, 0x51, '\x00', r3, 0x1b, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001300)={0x3, 0xb, 0x8, 0xfad}, 0x10, r4, 0x0, 0x7, &(0x7f0000001340)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000001380)=[{0x5, 0x5, 0xc, 0xc}, {0x2, 0x4, 0xc, 0x8}, {0x5, 0x1, 0x8, 0xc}, {0x0, 0x2, 0xe, 0x4}, {0x4, 0x2, 0xf, 0x7}, {0x2, 0x3, 0x4, 0x8}, {0x2, 0x2, 0x7, 0xc}], 0x10, 0x9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000400), &(0x7f0000000540)=r2}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000980)={0x1, 0xffffffffffffffff}, 0x4) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000009c0)={0xffffffffffffffff, 0x651, 0x8}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={0x1, 0xffffffffffffffff}, 0x4) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x1, 0x0, r10, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff}, 0x48) r11 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000380)={{r11}, 0x0, &(0x7f0000000340)='%-5lx \x00'}, 0x20) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0x8, 0x9, 0x1, 0xf25, 0x20020, 0xffffffffffffffff, 0xc348, '\x00', r3, 0xffffffffffffffff, 0x3, 0x4, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x1a, &(0x7f0000000700)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1}, {}, {}, [@cb_func={0x18, 0xb, 0x4, 0x0, 0x4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000800)='GPL\x00', 0x8000, 0x96, &(0x7f0000000840)=""/150, 0x41100, 0x0, '\x00', r3, 0x25, r5, 0x8, &(0x7f0000000900)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000940)={0x0, 0x3, 0x10, 0xffff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=[r7, r8, r9, 0xffffffffffffffff, r10, r11, r12], 0x0, 0x10, 0x3}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r15 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r15, r14, 0x0, 0x0, 0x0}, 0x30) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x3, 0xfd, 0x0, 0x0, 0x98629, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1010000, 0x1, @perf_bp={0x0, 0x2}, 0x18a21, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2ff, 0x0, 0xffffffffffffffff}, r15, 0xfffffeffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_FILTER(r13, 0x89f1, &(0x7f0000000080)) 18.182509808s ago: executing program 2 (id=2791): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x21a081, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000100)=0x5) (async) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600073582c137153e37080c188004ac0f000300", 0x33fe0}], 0x1, 0x0, 0x0, 0x8100000}, 0x0) 17.702415858s ago: executing program 2 (id=2792): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0), 0x4) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xb, 0x10, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0}, 0x94) (async) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe802, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x10, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) close(0xffffffffffffffff) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000940)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f00000008c0)=ANY=[], 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001040)=ANY=[@ANYRESOCT=r1, @ANYRES32, @ANYBLOB="5c7b02466c85b564170b4ed55747a5e46337b849987e3081f2a81e98ff59f0d0a1d11e3874cc6fb054", @ANYRES32], 0x50) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x69, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000d00)=""/242, 0xf2}, {&(0x7f0000000240)=""/205, 0xcd}, {&(0x7f0000000380)=""/210, 0xd2}, {&(0x7f00000006c0)=""/188, 0xbc}, {&(0x7f0000000f40)=""/213, 0xd5}, {&(0x7f0000002100)=""/4077, 0xfed}, {&(0x7f00000007c0)=""/211, 0xd3}, {&(0x7f0000000b00)=""/231, 0xe7}, {&(0x7f0000000480)=""/176, 0xb0}, {0x0}], 0xa}, 0x40012100) (async) recvmsg$kcm(r4, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) 17.701384318s ago: executing program 4 (id=2793): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x1, 0x2b4}, 0x0, 0x10000, 0x0, 0x0, 0x8, 0x20005, 0x2, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0x9, 0x5, 0x4, 0xc1, 0xffffffffffffffff, 0x1000000}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000380), 0x3d, r2}, 0x38) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000840)={r2, 0x0, &(0x7f0000000940)=""/208}, 0x20) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4, 0x1}, @func_proto={0x0, 0x0, 0x0, 0x5, 0x2000}, @typedef={0x2, 0x0, 0x0, 0x8, 0x2}, @volatile={0x0, 0x0, 0x0, 0xa, 0x3}]}, {0x0, [0x30, 0x5f, 0x61, 0x61]}}, 0x0, 0x52}, 0x28) r3 = openat$cgroup_devices(r0, &(0x7f0000000180)='devices.deny\x00', 0x2, 0x0) r4 = socket$kcm(0x2, 0x1000000000000002, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x5411, &(0x7f00000000c0)) write$cgroup_devices(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="62202a3a3409776d0a89"], 0xa) 17.379969975s ago: executing program 1 (id=2794): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$PROG_BIND_MAP(0x23, &(0x7f00000000c0)={r0, 0x1}, 0xc) socketpair(0xb, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x5451, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x10, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="7910480000000000690032000000000095"], &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x6d, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffa}, 0x94) r2 = socket$kcm(0x2, 0x3, 0x84) write$cgroup_subtree(r2, 0x0, 0x0) r3 = getpid() r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x2505, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x8}, 0x0, 0x4, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1d, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1, 0xaf, 0x2, 0x8, 0x0, 0xffff, 0x84004, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x100, 0x2, @perf_bp={&(0x7f0000000080), 0x4}, 0x240, 0x28a6, 0x4, 0x4, 0x8, 0x3, 0xb, 0x0, 0x7, 0x0, 0x7fffffffffffffff}, r3, 0x8, r4, 0x0) 17.15892945s ago: executing program 1 (id=2795): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x8000, 0x5, 0x3, 0x46ab52bf2228c1d1, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000007c0)='memory.events\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000040)=r0, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x8, 0x60000000, 0x0, 0x1, 0x0, &(0x7f0000001480)='H'}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200a}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000000)=@tipc=@name={0x1e, 0x2, 0x0, {{}, 0x4}}, 0x80, 0x0}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x0, 0x0, 0x0, 0x0, 0x200, 0x80220, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, @perf_bp={0x0, 0x2}, 0x411, 0x1, 0xc, 0x0, 0x81}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(r1, 0xc0189436, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x4474, 0x0, 0x0, 0x2, 0x0, 0xfffffffc, 0xb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0xff, 0x0, 0x9, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x85a, 0x8}, 0x0, 0x7b, 0x8, 0x8, 0x1, 0x0, 0x82, 0x0, 0x7, 0x0, 0xa}) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r1) r4 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0xa2, 0x3, 0x2, 0x4, 0x0, 0xfffffffffffffff4, 0x802c2, 0xb, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x56, 0x0, @perf_bp={&(0x7f0000000000), 0x60c5cf45cf4d41fd}, 0x4050, 0x642a, 0xb0, 0x7, 0x2, 0xb39, 0x1, 0x0, 0x3, 0x0, 0x4}, 0x0, 0x10, 0xffffffffffffffff, 0xa) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0x18, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4231, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@ringbuf_query, @alu={0x4, 0x1, 0x3, 0x8, 0xf, 0xfffffffffffffff0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7ff}, @ldst={0x2, 0x1, 0x0, 0x2, 0x1, 0xffffffffffffffff, 0x1}, @call={0x85, 0x0, 0x0, 0xbb}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000003c0)='GPL\x00', 0x4, 0xc7, &(0x7f0000000400)=""/199, 0x41000, 0xc, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2, 0x0, &(0x7f0000000500)=[0x1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], 0x0, 0x10, 0x6}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x3}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000280)=ANY=[@ANYBLOB="91106c000000000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) socket$kcm(0x29, 0x7, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) 17.010530293s ago: executing program 2 (id=2796): write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0x2a979d) r0 = socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x48510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001e40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x538}, 0x40) r1 = socket$kcm(0x2, 0x3, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) sendmsg$inet(r1, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000001140)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0], 0x48}, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000"], 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x60a02, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETDEBUG(r3, 0x400454c9, 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5ce0373e, 0x0, @perf_config_ext={0x5, 0x4bcc}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x25, 0x5, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x10}, 0x100000, 0x7, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r5, 0x2403, 0x2) r6 = openat$cgroup_int(r4, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000380), 0x12) write$cgroup_int(r6, &(0x7f0000000040)=0x10000000, 0x1) setsockopt$sock_attach_bpf(r0, 0x84, 0xb, &(0x7f0000000000), 0xe) 17.009406213s ago: executing program 4 (id=2797): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9b, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x4, 0x0, 0x7, 0x0, 0x10, 0x0, 0x0, 0x0, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0x8000, 0x0, 0xffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r0, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r3, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{0x1, 0xffffffffffffffff}, &(0x7f0000000480), &(0x7f00000004c0)}, 0x20) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000780), 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x0, 0xc, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xe}, 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r6, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x27, &(0x7f0000000540)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3ff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_val={0x18, 0x7, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @alu={0x4, 0x0, 0xd, 0x1, 0x2, 0x4b7e2d1bec544625, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0xc1}, @alu={0x7, 0x1, 0xd, 0x0, 0xb, 0xfffffffffffffffc, 0xffffffffffffffff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @generic={0x9, 0x2, 0x2, 0x7, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f0000000680)='syzkaller\x00', 0x2, 0xa1, &(0x7f00000006c0)=""/161, 0x41100, 0x40, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000007c0)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000800)={0x1, 0x10, 0x9, 0xb}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000840)=[r6], &(0x7f0000000880), 0x10, 0x9e}, 0x94) r7 = getpid() r8 = perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x8601, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={r7, r8, 0x0, 0x3, &(0x7f0000000280)='\\{\x00'}, 0x12) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x4, 0x7, 0x8, 0x68, 0x0, 0x0, 0x88009, 0x7, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_config_ext={0x10}, 0x8, 0x7, 0xfffffff0, 0x5, 0x53, 0x905, 0x1, 0x0, 0x7fffffff, 0x0, 0x10000}, r7, 0xf, 0xffffffffffffffff, 0x9) sendmsg$inet(r0, &(0x7f0000000b00)={0x0, 0xf22fff7f, &(0x7f0000000180)=[{&(0x7f0000000080)="31de76fb398bc62d058b8a96924594f5476a0824be53f7a5949f80614c42391e4b80412938c955d34d37eb96ba7849c3eb823bb36724bd6f6d0219cfe5c884afcd2bdea5acf9c877c03dcdbbb3e47417b6707c27d4c5c1db1924071f6b6f23c7d199c799c9b0c41101e625fcdb7bbfd12a3eeeef4540a5698f058aaf6a141e5d333929b92a7f64e925bf0ef424c3ef29fcd5fd4721c547fde6abe4d47048b64511693624b0d786711abe4a66e250fcbfe95ac9037e58f331b26b6ed0d08e5c73ba4c49", 0xc00e}], 0x9, &(0x7f00000001c0)=[@ip_tos_int={{0x7ff4d4260000}}, @ip_ttl={{0x14}}, @ip_ttl={{0x14}}, @ip_tos_u8={{0x11}}, @ip_tos_u8={{0x11, 0x2}}, @ip_retopts={{0x0, 0x0, 0x7, {[@lsrr, @generic={0x0, 0x0, "96"}, @generic={0x0, 0x0, "206a77bdd1a004129054e7704a"}]}}}], 0xf}, 0x0) 16.473473194s ago: executing program 1 (id=2798): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x8000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xf101}) ioctl$TUNSETCARRIER(r0, 0x400454e2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r3, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d80)={r3, 0xe0, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5, &(0x7f0000000b00)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000b40)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x21, &(0x7f0000000b80)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000bc0), &(0x7f0000000c00), 0x8, 0xd, 0x8, 0x8, &(0x7f0000000c40)}}, 0x10) perf_event_open(&(0x7f0000000e40)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0x4a1b1, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x2004, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x68}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x80) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r1, @ANYBLOB="830800"/20, @ANYRES32=r5, @ANYRES32=r2, @ANYBLOB="01000000000000000400"/28], 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f00000001c0)={r4}, 0xc) r6 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r6, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000340)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x36}, @multicast1}}}], 0x20}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007008500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r7}, 0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000940)={r1, 0x58, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$inet(r6, &(0x7f0000000ac0)={&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000840)=[{&(0x7f0000000380)="161e7e3231d015df9efbb2a824e58d2e56f47daaf7f226de22e0d712a00046852f24025dd767d769bf0c760e420b565956499d5be92da2306de2272a41e15d4ed93f264c649dbbbbeb589195c2cae766a9b5a81b07ab328aa9d3347d0dd48b137134090d7e28905ddb0542df4dd5a8f0d6b4616e8fc957e1ac303b920ef14896b19ad32855c8501abefcd43e7ed2ee65daad86584877015fad7e3f5b3a5bf3ca76", 0xa1}, {&(0x7f0000000440)="a82184227c", 0x5}, {&(0x7f0000000480)="a8016069832d7e68cf97412f1f795419d78a74ed51def336370a19a399663b4f7b52758cd5", 0x25}, {&(0x7f00000005c0)="b6b5368cc67b7478184c1f8ded36779aeb8a5a26c21d0cafa9dcafe3896dc981a21c8ba6eb6f3b1cae365cef3a0c24896be1d8b0de7ae405c2d8cdb57a49a4fe7318374ab4b061e9ece3908e23131021ed5bb095ffa658619a7596b0104f273a0586fa81c60d2cb113d12c59f9792c2b69f051bef9ea8bf179f9a41bb851b20bab13c3f96ea512ae2ad7dc092d6efcc5a567a3195f2301f1cfa471e95ac715bf21790287b5ce0d940ad23ae765b1a037099e8a1b5f8a6527b89580b1215c29990d6cbc7d054164f046ec4624ae83accca2ff3f851878d92482cabb36cb924e5ed8ce43facde1d269e13ca81a88", 0xed}, {&(0x7f00000006c0)="d825b941ee13ac2f966ebef845efa11412caf59127baef5e453b098132250115d3d0544282e11d4a1cdb2a56eb447c2afd47252297e5ae86d191bc3c1222b2d758a01ce038058fbbd45341e5e5b4b5a18e63d369c577382b04875894b64a9c49", 0x60}, {&(0x7f0000000740)="bf2a91e94548844bc89e494a9052aeb20c41926332a4fc5b43a6246b04112decfc03384b97da3cb2bfea4a8431312305ba193434067af49bba3a3784e4dbc0f361f5204e3793b80632fdab19f3b8cc45c6f93636a1f2162aa10d5c25ed26f8e3c2932bdc50a0612b9031020c8964accef8fd87b5a60915e35af048a88e36c828a7d596d627ba2e53f0da569eb377d589e8584df6e6f80edd2c6ad4a0cd86692c1f0010c11f3f8a2c7fcfe9a12d2a2f0666722aa5ba20de0470921918f6dd63e4b48efcf86e3034", 0xc7}], 0x6, &(0x7f0000000980)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @multicast1}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_retopts={{0x14, 0x0, 0x7, {[@noop]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_retopts={{0x18, 0x0, 0x7, {[@cipso={0x86, 0x6, 0xffffffffffffffff}, @end]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @empty, @remote}}}, @ip_retopts={{0x6c, 0x0, 0x7, {[@noop, @timestamp={0x44, 0x1c, 0x49, 0x0, 0xe, [0x5, 0x2, 0x9, 0x8, 0x10, 0xfffffffb]}, @rr={0x7, 0xf, 0xb0, [@empty, @multicast1, @loopback]}, @generic={0x89, 0x2}, @generic={0x86, 0x3, "12"}, @timestamp_prespec={0x44, 0xc, 0x94, 0x3, 0xb, [{@loopback, 0x1}]}, @rr={0x7, 0x13, 0xdd, [@remote, @multicast2, @private=0xa010100, @multicast2]}, @generic={0x82, 0x9, "a0ad319caba353"}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}], 0x128}, 0x0) 16.418863746s ago: executing program 2 (id=2799): perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0}, 0x20, 0x10000, 0x9e6, 0x7, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd}, 0x39) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) setsockopt$sock_attach_bpf(r1, 0x88, 0x67, &(0x7f00000002c0)=r2, 0x4) sendmsg$inet(r1, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000001bc0)=[{&(0x7f0000000100)="00446916ab", 0x5}], 0x1, &(0x7f0000001b40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xe}, @local}}}], 0x20}, 0x0) (async) sendmsg$inet(r1, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000001bc0)=[{&(0x7f0000000100)="00446916ab", 0x5}], 0x1, &(0x7f0000001b40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xe}, @local}}}], 0x20}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r3, 0x29, 0x43, 0x0, 0x0) (async) setsockopt$sock_attach_bpf(r3, 0x29, 0x43, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000064006bcd9e3fe3dc4e48aa31086b8703130000001f03000000000000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffa}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) close(0x3) (async) close(0x3) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{}, 0x0, 0x0}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{}, 0x0, 0x0}, 0x20) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1000}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d08000b000000e8fe55a1180015000600142603600e1209000d0000000401a80016000a0001", 0x37}], 0x1}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe5538250015000600149b0000001208000313eba96240a8002b", 0x33}], 0x1}, 0x80) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe5538250015000600149b0000001208000313eba96240a8002b", 0x33}], 0x1}, 0x80) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0xfe33) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r5, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f00000001c0)}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x54b2ac04}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r9}, 0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001b40)={0xffffffffffffffff, 0xe0, &(0x7f0000001a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001880), ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8, &(0x7f00000018c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001900)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x81, &(0x7f0000001940)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000001980), &(0x7f00000019c0), 0x8, 0x1b, 0x8, 0x0, 0x0}}, 0x10) 15.946585976s ago: executing program 4 (id=2800): r0 = socket$kcm(0x10, 0x3, 0x10) r1 = socket$kcm(0x11, 0xa, 0x300) recvmsg(r1, &(0x7f0000000200)={&(0x7f00000000c0)=@nfc, 0x80, &(0x7f0000000140), 0x0, &(0x7f0000000180)=""/128, 0x80}, 0x10000) r2 = socket$kcm(0xa, 0x3, 0x73) sendmsg$kcm(r2, &(0x7f0000000100)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0xff, @remote}, 0x80, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000029"], 0x28}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="1400000017000b63d25a80648c2594f926a3c92b", 0x14}], 0x1}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$tipc(r4, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0x10, &(0x7f0000000b40)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001a00), 0x101d0}], 0x4}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x700, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000033000b0fd25a806c8c6f94f90724fc60", 0x33fe0}], 0x1}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r7 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r7, 0x3) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r6, &(0x7f00000000c0), 0x0}, 0x20) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000b80)=""/4096, 0x1000}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600073582c137153e37080c188008ac0f000300", 0x33fe0}], 0x1, 0x0, 0x0, 0x8100000}, 0x0) 215.377945ms ago: executing program 33 (id=2798): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x8000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xf101}) ioctl$TUNSETCARRIER(r0, 0x400454e2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r3, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d80)={r3, 0xe0, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5, &(0x7f0000000b00)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000b40)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x21, &(0x7f0000000b80)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000bc0), &(0x7f0000000c00), 0x8, 0xd, 0x8, 0x8, &(0x7f0000000c40)}}, 0x10) perf_event_open(&(0x7f0000000e40)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0x4a1b1, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x2004, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x68}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x80) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r1, @ANYBLOB="830800"/20, @ANYRES32=r5, @ANYRES32=r2, @ANYBLOB="01000000000000000400"/28], 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f00000001c0)={r4}, 0xc) r6 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r6, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000340)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x36}, @multicast1}}}], 0x20}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007008500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r7}, 0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000940)={r1, 0x58, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$inet(r6, &(0x7f0000000ac0)={&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000840)=[{&(0x7f0000000380)="161e7e3231d015df9efbb2a824e58d2e56f47daaf7f226de22e0d712a00046852f24025dd767d769bf0c760e420b565956499d5be92da2306de2272a41e15d4ed93f264c649dbbbbeb589195c2cae766a9b5a81b07ab328aa9d3347d0dd48b137134090d7e28905ddb0542df4dd5a8f0d6b4616e8fc957e1ac303b920ef14896b19ad32855c8501abefcd43e7ed2ee65daad86584877015fad7e3f5b3a5bf3ca76", 0xa1}, {&(0x7f0000000440)="a82184227c", 0x5}, {&(0x7f0000000480)="a8016069832d7e68cf97412f1f795419d78a74ed51def336370a19a399663b4f7b52758cd5", 0x25}, {&(0x7f00000005c0)="b6b5368cc67b7478184c1f8ded36779aeb8a5a26c21d0cafa9dcafe3896dc981a21c8ba6eb6f3b1cae365cef3a0c24896be1d8b0de7ae405c2d8cdb57a49a4fe7318374ab4b061e9ece3908e23131021ed5bb095ffa658619a7596b0104f273a0586fa81c60d2cb113d12c59f9792c2b69f051bef9ea8bf179f9a41bb851b20bab13c3f96ea512ae2ad7dc092d6efcc5a567a3195f2301f1cfa471e95ac715bf21790287b5ce0d940ad23ae765b1a037099e8a1b5f8a6527b89580b1215c29990d6cbc7d054164f046ec4624ae83accca2ff3f851878d92482cabb36cb924e5ed8ce43facde1d269e13ca81a88", 0xed}, {&(0x7f00000006c0)="d825b941ee13ac2f966ebef845efa11412caf59127baef5e453b098132250115d3d0544282e11d4a1cdb2a56eb447c2afd47252297e5ae86d191bc3c1222b2d758a01ce038058fbbd45341e5e5b4b5a18e63d369c577382b04875894b64a9c49", 0x60}, {&(0x7f0000000740)="bf2a91e94548844bc89e494a9052aeb20c41926332a4fc5b43a6246b04112decfc03384b97da3cb2bfea4a8431312305ba193434067af49bba3a3784e4dbc0f361f5204e3793b80632fdab19f3b8cc45c6f93636a1f2162aa10d5c25ed26f8e3c2932bdc50a0612b9031020c8964accef8fd87b5a60915e35af048a88e36c828a7d596d627ba2e53f0da569eb377d589e8584df6e6f80edd2c6ad4a0cd86692c1f0010c11f3f8a2c7fcfe9a12d2a2f0666722aa5ba20de0470921918f6dd63e4b48efcf86e3034", 0xc7}], 0x6, &(0x7f0000000980)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @multicast1}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_retopts={{0x14, 0x0, 0x7, {[@noop]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_retopts={{0x18, 0x0, 0x7, {[@cipso={0x86, 0x6, 0xffffffffffffffff}, @end]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @empty, @remote}}}, @ip_retopts={{0x6c, 0x0, 0x7, {[@noop, @timestamp={0x44, 0x1c, 0x49, 0x0, 0xe, [0x5, 0x2, 0x9, 0x8, 0x10, 0xfffffffb]}, @rr={0x7, 0xf, 0xb0, [@empty, @multicast1, @loopback]}, @generic={0x89, 0x2}, @generic={0x86, 0x3, "12"}, @timestamp_prespec={0x44, 0xc, 0x94, 0x3, 0xb, [{@loopback, 0x1}]}, @rr={0x7, 0x13, 0xdd, [@remote, @multicast2, @private=0xa010100, @multicast2]}, @generic={0x82, 0x9, "a0ad319caba353"}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}], 0x128}, 0x0) 0s ago: executing program 34 (id=2799): perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0}, 0x20, 0x10000, 0x9e6, 0x7, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd}, 0x39) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) setsockopt$sock_attach_bpf(r1, 0x88, 0x67, &(0x7f00000002c0)=r2, 0x4) sendmsg$inet(r1, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000001bc0)=[{&(0x7f0000000100)="00446916ab", 0x5}], 0x1, &(0x7f0000001b40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xe}, @local}}}], 0x20}, 0x0) (async) sendmsg$inet(r1, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000001bc0)=[{&(0x7f0000000100)="00446916ab", 0x5}], 0x1, &(0x7f0000001b40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xe}, @local}}}], 0x20}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r3, 0x29, 0x43, 0x0, 0x0) (async) setsockopt$sock_attach_bpf(r3, 0x29, 0x43, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000064006bcd9e3fe3dc4e48aa31086b8703130000001f03000000000000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffa}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) close(0x3) (async) close(0x3) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{}, 0x0, 0x0}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{}, 0x0, 0x0}, 0x20) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1000}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d08000b000000e8fe55a1180015000600142603600e1209000d0000000401a80016000a0001", 0x37}], 0x1}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe5538250015000600149b0000001208000313eba96240a8002b", 0x33}], 0x1}, 0x80) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe5538250015000600149b0000001208000313eba96240a8002b", 0x33}], 0x1}, 0x80) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0xfe33) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r5, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f00000001c0)}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x54b2ac04}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r9}, 0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001b40)={0xffffffffffffffff, 0xe0, &(0x7f0000001a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001880), ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8, &(0x7f00000018c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001900)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x81, &(0x7f0000001940)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000001980), &(0x7f00000019c0), 0x8, 0x1b, 0x8, 0x0, 0x0}}, 0x10) kernel console output (not intermixed with test programs): rfect channel medium [ 482.356801][T11909] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.504653][T11910] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1771'. [ 482.548481][T11910] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1771'. [ 482.600380][T11909] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1771'. [ 482.649265][T11903] netlink: 'syz.2.1769': attribute type 10 has an invalid length. [ 482.708748][T11903] netlink: 209216 bytes leftover after parsing attributes in process `syz.2.1769'. [ 482.721806][T11903] openvswitch: netlink: Message has 4 unknown bytes. [ 483.125592][T11921] netlink: 202328 bytes leftover after parsing attributes in process `syz.1.1772'. [ 483.803925][ T5785] Bluetooth: hci4: command 0x0406 tx timeout [ 484.435528][T11931] netlink: 'syz.2.1776': attribute type 28 has an invalid length. [ 484.786518][T11931] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1776'. [ 484.837161][T11918] netlink: 1057 bytes leftover after parsing attributes in process `syz.1.1772'. [ 486.151255][T11951] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 486.158318][T11951] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 486.447244][T11954] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 486.829264][T11961] netlink: 'syz.1.1783': attribute type 2 has an invalid length. [ 487.031550][T11961] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1783'. [ 487.856825][T11968] netlink: 'syz.4.1786': attribute type 3 has an invalid length. [ 487.901902][T11968] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1786'. [ 494.482152][T12066] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 494.609154][T12067] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1814'. [ 496.184249][T12097] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1825'. [ 496.527916][T12104] netlink: 'syz.4.1828': attribute type 10 has an invalid length. [ 496.563178][T12104] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1828'. [ 498.352321][T12154] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1846'. [ 499.011364][T12173] netlink: 'syz.4.1851': attribute type 21 has an invalid length. [ 499.052848][T12173] netlink: 144308 bytes leftover after parsing attributes in process `syz.4.1851'. [ 500.148386][T12200] Q6`Ҙ: renamed from lo (while UP) [ 500.497279][T12205] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1861'. [ 501.010640][T12216] netlink: 'syz.1.1868': attribute type 3 has an invalid length. [ 501.061886][T12216] netlink: 'syz.1.1868': attribute type 1 has an invalid length. [ 501.069750][T12216] netlink: 'syz.1.1868': attribute type 1 has an invalid length. [ 501.106490][T12216] netlink: 'syz.1.1868': attribute type 2 has an invalid length. [ 501.124597][T12216] netlink: 198100 bytes leftover after parsing attributes in process `syz.1.1868'. [ 501.869933][ T51] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30 [ 501.879879][ T51] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30 [ 501.888268][ T51] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0' [ 501.899217][ T51] CPU: 0 PID: 51 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 501.906657][ T51] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 501.916734][ T51] Workqueue: hci0 hci_rx_work [ 501.921564][ T51] Call Trace: [ 501.924857][ T51] [ 501.927802][ T51] dump_stack_lvl+0x18c/0x250 [ 501.932513][ T51] ? show_regs_print_info+0x20/0x20 [ 501.937731][ T51] ? load_image+0x420/0x420 [ 501.942267][ T51] sysfs_create_dir_ns+0x26e/0x2a0 [ 501.947419][ T51] ? __lock_acquire+0x7d80/0x7d80 [ 501.952500][ T51] ? sysfs_warn_dup+0xa0/0xa0 [ 501.957197][ T51] ? do_raw_spin_unlock+0x121/0x230 [ 501.962421][ T51] kobject_add_internal+0x617/0xc90 [ 501.967675][ T51] kobject_add+0x164/0x240 [ 501.972114][ T51] ? kobject_init+0x1d0/0x1d0 [ 501.977198][ T51] ? get_device_parent+0x366/0x390 [ 501.982620][ T51] device_add+0x3fa/0xc40 [ 501.986986][ T51] hci_conn_add_sysfs+0xd5/0x1e0 [ 501.992018][ T51] le_conn_complete_evt+0xe9f/0x1480 [ 501.997363][ T51] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 502.003620][ T51] ? bt_info+0x180/0x180 [ 502.007887][ T51] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 502.013592][ T51] ? mutex_unlock+0x10/0x10 [ 502.018109][ T51] ? skb_pull_data+0xf0/0x1f0 [ 502.022817][ T51] hci_le_enh_conn_complete_evt+0x189/0x460 [ 502.028762][ T51] ? hci_le_remote_conn_param_req_evt+0xcb0/0xcb0 [ 502.035230][ T51] ? hci_remote_host_features_evt+0x150/0x150 [ 502.041325][ T51] hci_event_packet+0x7b4/0x1280 [ 502.046285][ T51] ? __lock_acquire+0x7d80/0x7d80 [ 502.051325][ T51] ? lock_chain_count+0x20/0x20 [ 502.056193][ T51] ? bis_list+0x290/0x290 [ 502.060543][ T51] ? lockdep_hardirqs_on+0x98/0x150 [ 502.065760][ T51] ? hci_send_to_monitor+0xd7/0x4f0 [ 502.070980][ T51] hci_rx_work+0x43a/0xd60 [ 502.075426][ T51] ? process_scheduled_works+0x975/0x1600 [ 502.081165][ T51] process_scheduled_works+0xa60/0x1600 [ 502.086755][ T51] ? worker_attach_to_pool+0x370/0x370 [ 502.092241][ T51] ? assign_work+0x3cc/0x5d0 [ 502.096857][ T51] worker_thread+0xa5e/0xfe0 [ 502.101504][ T51] kthread+0x2fa/0x390 [ 502.105685][ T51] ? pr_cont_work+0x550/0x550 [ 502.110383][ T51] ? kthread_blkcg+0xd0/0xd0 [ 502.114991][ T51] ret_from_fork+0x48/0x80 [ 502.119458][ T51] ? kthread_blkcg+0xd0/0xd0 [ 502.124072][ T51] ret_from_fork_asm+0x11/0x20 [ 502.128891][ T51] [ 502.137098][ T51] kobject: kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 502.151383][ T51] Bluetooth: hci0: failed to register connection device [ 502.215829][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.222731][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.757748][T12253] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.1882'. [ 504.203119][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 505.549432][T12312] syzkaller0: tun_chr_ioctl cmd 2147767506 [ 505.585579][T12314] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1903'. [ 505.595926][T12311] netlink: 'syz.4.1902': attribute type 7 has an invalid length. [ 505.625451][T12318] netlink: 'syz.1.1904': attribute type 2 has an invalid length. [ 505.633605][T12318] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1904'. [ 505.643364][T12318] netlink: 'syz.1.1904': attribute type 2 has an invalid length. [ 505.651847][T12318] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1904'. [ 505.665625][T12318] netlink: 'syz.1.1904': attribute type 2 has an invalid length. [ 505.680832][T12311] netlink: 186384 bytes leftover after parsing attributes in process `syz.4.1902'. [ 505.701755][T12318] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1904'. [ 505.717543][T12314] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 505.759082][T12314] CPU: 0 PID: 12314 Comm: syz.2.1903 Not tainted syzkaller #0 [ 505.766634][T12314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 505.776725][T12314] Call Trace: [ 505.780040][T12314] [ 505.783008][T12314] dump_stack_lvl+0x18c/0x250 [ 505.787749][T12314] ? show_regs_print_info+0x20/0x20 [ 505.792998][T12314] ? load_image+0x420/0x420 [ 505.797557][T12314] sysfs_warn_dup+0x8e/0xa0 [ 505.802104][T12314] sysfs_do_create_link_sd+0xc0/0x110 [ 505.807546][T12314] device_add_class_symlinks+0x1cf/0x240 [ 505.813267][T12314] device_add+0x4f9/0xc40 [ 505.817640][T12314] wiphy_register+0x1d99/0x2ac0 [ 505.822633][T12314] ? cfg80211_event_work+0x40/0x40 [ 505.827758][T12314] ? minstrel_ht_alloc+0x88a/0x990 [ 505.832947][T12314] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 505.839072][T12314] ieee80211_register_hw+0x2dd8/0x3b30 [ 505.844580][T12314] ? ieee80211_register_hw+0xef1/0x3b30 [ 505.850148][T12314] ? ieee80211_tasklet_handler+0x20/0x20 [ 505.855791][T12314] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 505.861713][T12314] ? __debug_object_init+0xec/0x450 [ 505.866937][T12314] ? __asan_memset+0x22/0x40 [ 505.871552][T12314] ? __hrtimer_init+0x189/0x270 [ 505.876420][T12314] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 505.882217][T12314] ? mac80211_hwsim_free+0x220/0x220 [ 505.887520][T12314] ? rcu_is_watching+0x15/0xb0 [ 505.892302][T12314] ? kstrndup+0xbd/0x140 [ 505.896575][T12314] hwsim_new_radio_nl+0xdad/0x1a70 [ 505.901712][T12314] ? __nla_validate+0x50/0x50 [ 505.906420][T12314] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 505.912782][T12314] ? __nla_parse+0x40/0x50 [ 505.917217][T12314] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 505.923630][T12314] genl_family_rcv_msg_doit+0x21a/0x310 [ 505.929228][T12314] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 505.935152][T12314] ? bpf_lsm_capable+0x9/0x10 [ 505.939850][T12314] ? security_capable+0x89/0xb0 [ 505.944730][T12314] genl_rcv_msg+0x611/0x7a0 [ 505.949260][T12314] ? genl_bind+0x360/0x360 [ 505.953696][T12314] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 505.960044][T12314] ? ref_tracker_free+0x686/0x830 [ 505.965085][T12314] ? __kasan_kmalloc_large+0x8b/0xa0 [ 505.970394][T12314] netlink_rcv_skb+0x235/0x4c0 [ 505.975178][T12314] ? genl_bind+0x360/0x360 [ 505.979614][T12314] ? netlink_ack+0x1160/0x1160 [ 505.984498][T12314] ? __lock_acquire+0x7d80/0x7d80 [ 505.989545][T12314] ? down_read+0x1ac/0x2e0 [ 505.993981][T12314] genl_rcv+0x28/0x40 [ 505.998014][T12314] netlink_unicast+0x7b1/0x930 [ 506.002847][T12314] netlink_sendmsg+0x8d0/0xbf0 [ 506.007655][T12314] ? netlink_getsockopt+0x590/0x590 [ 506.012879][T12314] ? apparmor_socket_sendmsg+0x8e/0x330 [ 506.018440][T12314] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 506.023746][T12314] ? security_socket_sendmsg+0x80/0xa0 [ 506.029255][T12314] ? netlink_getsockopt+0x590/0x590 [ 506.034477][T12314] ____sys_sendmsg+0x61b/0x980 [ 506.039273][T12314] ? __asan_memset+0x22/0x40 [ 506.044059][T12314] ? __sys_sendmsg_sock+0x30/0x30 [ 506.049117][T12314] ? __import_iovec+0x5f2/0x850 [ 506.054020][T12314] ? import_iovec+0x73/0xa0 [ 506.058546][T12314] ___sys_sendmsg+0x2a6/0x360 [ 506.063252][T12314] ? __sys_sendmsg+0x2b0/0x2b0 [ 506.068200][T12314] __se_sys_sendmsg+0x1d0/0x2c0 [ 506.073106][T12314] ? perf_trace_preemptirq_template+0x269/0x330 [ 506.079381][T12314] ? __x64_sys_sendmsg+0x80/0x80 [ 506.084357][T12314] ? lockdep_hardirqs_on+0x98/0x150 [ 506.089576][T12314] do_syscall_64+0x55/0xb0 [ 506.094015][T12314] ? clear_bhb_loop+0x40/0x90 [ 506.098706][T12314] ? clear_bhb_loop+0x40/0x90 [ 506.103434][T12314] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 506.109441][T12314] RIP: 0033:0x7f958599de99 [ 506.113917][T12314] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 506.133540][T12314] RSP: 002b:00007f95868a8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 506.141973][T12314] RAX: ffffffffffffffda RBX: 00007f9585c25fa0 RCX: 00007f958599de99 [ 506.149957][T12314] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 506.157941][T12314] RBP: 00007f9585a33eaf R08: 0000000000000000 R09: 0000000000000000 [ 506.165932][T12314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 506.173920][T12314] R13: 00007f9585c26038 R14: 00007f9585c25fa0 R15: 00007ffe3d698858 [ 506.181937][T12314] [ 506.286288][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 506.577027][T12327] netlink: 'syz.2.1906': attribute type 10 has an invalid length. [ 506.876344][T12338] netlink: 35840 bytes leftover after parsing attributes in process `syz.1.1907'. [ 508.374185][T12374] netlink: 'syz.2.1921': attribute type 7 has an invalid length. [ 508.470133][T12378] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.1923'. [ 508.486248][T12376] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1922'. [ 508.502764][T12376] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1922'. [ 508.547430][T12376] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1922'. [ 508.613884][T12382] netlink: 'syz.2.1924': attribute type 10 has an invalid length. [ 509.397416][ T35] tipc: Subscription rejected, illegal request [ 509.572009][T12407] netlink: 'syz.2.1934': attribute type 6 has an invalid length. [ 510.670753][T12437] __nla_validate_parse: 3 callbacks suppressed [ 510.670793][T12437] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.1945'. [ 510.738716][T12437] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 510.746617][T12437] IPv6: NLM_F_CREATE should be set when creating new route [ 510.755154][T12437] IPv6: NLM_F_CREATE should be set when creating new route [ 510.763337][T12437] IPv6: NLM_F_CREATE should be set when creating new route [ 510.806328][T12440] netlink: 'syz.4.1945': attribute type 9 has an invalid length. [ 510.837705][T12440] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.1945'. [ 511.073181][T12443] netlink: 'syz.0.1947': attribute type 41 has an invalid length. [ 511.081133][T12444] netlink: 'syz.0.1947': attribute type 41 has an invalid length. [ 514.615056][T12497] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1964'. [ 515.729740][T12508] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 515.861173][T12508] netlink: 'syz.4.1970': attribute type 9 has an invalid length. [ 515.884025][T12508] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.1970'. [ 516.503928][T12520] netlink: 'syz.0.1974': attribute type 6 has an invalid length. [ 516.513032][T12512] netlink: 'syz.4.1970': attribute type 9 has an invalid length. [ 516.548960][T12520] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1974'. [ 516.558954][T12512] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.1970'. [ 518.379955][T12562] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 518.387945][T12562] IPv6: NLM_F_CREATE should be set when creating new route [ 518.395987][T12562] IPv6: NLM_F_CREATE should be set when creating new route [ 518.403860][T12562] IPv6: NLM_F_CREATE should be set when creating new route [ 518.433303][T12565] netlink: 'syz.2.1988': attribute type 9 has an invalid length. [ 518.456628][T12565] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1988'. [ 518.475523][T12560] netlink: 'syz.4.1989': attribute type 6 has an invalid length. [ 518.504951][T12560] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1989'. [ 518.585618][T12562] netlink: 'syz.2.1988': attribute type 9 has an invalid length. [ 518.626260][T12562] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1988'. [ 519.492602][T12582] netlink: 'syz.0.1996': attribute type 2 has an invalid length. [ 519.512404][T12582] netlink: 'syz.0.1996': attribute type 1 has an invalid length. [ 519.531944][T12582] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.1996'. [ 519.671759][T12585] netlink: 'syz.0.1996': attribute type 21 has an invalid length. [ 519.709177][T12589] netlink: 'syz.2.1997': attribute type 13 has an invalid length. [ 519.788005][T12589] netlink: 24643 bytes leftover after parsing attributes in process `syz.2.1997'. [ 520.928393][T12611] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.2002'. [ 521.664857][T12623] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 521.735968][T12626] netlink: 'syz.1.2007': attribute type 9 has an invalid length. [ 521.772954][T12624] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 521.781801][T12626] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2007'. [ 521.923922][T12623] netlink: 'syz.1.2007': attribute type 9 has an invalid length. [ 521.956687][T12623] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2007'. [ 521.964222][T12628] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2009'. [ 521.995955][T12628] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2009'. [ 522.674610][T12632] Q6`Ҙ: renamed from lo (while UP) [ 522.680974][T12627] delete_channel: no stack [ 522.760914][T12628] netlink: 'syz.4.2009': attribute type 11 has an invalid length. [ 522.785061][T12628] netlink: 184116 bytes leftover after parsing attributes in process `syz.4.2009'. [ 522.856907][T12635] A link change request failed with some changes committed already. Interface Q6`Ҙ may have been left with an inconsistent configuration, please check. [ 523.002851][T12637] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2010'. [ 523.037211][T12628] debugfs: Directory '!!' with parent 'ieee80211' already present! [ 523.098632][T12646] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.2014'. [ 524.017031][T12659] netlink: 'syz.1.2020': attribute type 153 has an invalid length. [ 524.036244][T12659] netlink: 91080 bytes leftover after parsing attributes in process `syz.1.2020'. [ 524.360836][T12671] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 524.368568][T12671] IPv6: NLM_F_CREATE should be set when creating new route [ 524.376802][T12671] IPv6: NLM_F_CREATE should be set when creating new route [ 524.384599][T12671] IPv6: NLM_F_CREATE should be set when creating new route [ 524.537926][T12676] netlink: 'syz.0.2021': attribute type 9 has an invalid length. [ 524.602008][T12676] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2021'. [ 524.651038][T12671] netlink: 'syz.0.2021': attribute type 9 has an invalid length. [ 525.619815][T12696] FAULT_INJECTION: forcing a failure. [ 525.619815][T12696] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 525.642260][T12696] CPU: 1 PID: 12696 Comm: syz.4.2031 Not tainted syzkaller #0 [ 525.649825][T12696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 525.659929][T12696] Call Trace: [ 525.663259][T12696] [ 525.666230][T12696] dump_stack_lvl+0x18c/0x250 [ 525.670976][T12696] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 525.677195][T12696] ? show_regs_print_info+0x20/0x20 [ 525.682458][T12696] ? load_image+0x420/0x420 [ 525.687032][T12696] should_fail_ex+0x394/0x4c0 [ 525.691778][T12696] _copy_from_user+0x2f/0xe0 [ 525.696431][T12696] __sys_bpf+0x23e/0x890 [ 525.700725][T12696] ? bpf_link_show_fdinfo+0x390/0x390 [ 525.706156][T12696] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 525.712384][T12696] __x64_sys_bpf+0x7c/0x90 [ 525.716861][T12696] do_syscall_64+0x55/0xb0 [ 525.721332][T12696] ? clear_bhb_loop+0x40/0x90 [ 525.726203][T12696] ? clear_bhb_loop+0x40/0x90 [ 525.730897][T12696] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 525.736814][T12696] RIP: 0033:0x7f72d699de99 [ 525.741249][T12696] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 525.760874][T12696] RSP: 002b:00007f72d790f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 525.769304][T12696] RAX: ffffffffffffffda RBX: 00007f72d6c25fa0 RCX: 00007f72d699de99 [ 525.777288][T12696] RDX: 0000000000000028 RSI: 0000200000000180 RDI: 0000000000000012 [ 525.785271][T12696] RBP: 00007f72d790f090 R08: 0000000000000000 R09: 0000000000000000 [ 525.793253][T12696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 525.801232][T12696] R13: 00007f72d6c26038 R14: 00007f72d6c25fa0 R15: 00007ffca8321e18 [ 525.809315][T12696] [ 526.031629][T12703] netlink: 'syz.4.2033': attribute type 10 has an invalid length. [ 526.086008][T12703] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 526.199903][T12703] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 526.494659][T12706] syzkaller0: entered promiscuous mode [ 526.501104][T12706] syzkaller0: entered allmulticast mode [ 528.272191][T12755] netlink: 'syz.0.2039': attribute type 10 has an invalid length. [ 528.491753][T12755] hsr_slave_0: left promiscuous mode [ 528.894309][T12755] hsr_slave_1: left promiscuous mode [ 531.636863][T12785] FAULT_INJECTION: forcing a failure. [ 531.636863][T12785] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 531.705183][T12785] CPU: 0 PID: 12785 Comm: syz.2.2055 Not tainted syzkaller #0 [ 531.712737][T12785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 531.722847][T12785] Call Trace: [ 531.726165][T12785] [ 531.729135][T12785] dump_stack_lvl+0x18c/0x250 [ 531.733877][T12785] ? show_regs_print_info+0x20/0x20 [ 531.739139][T12785] ? load_image+0x420/0x420 [ 531.743689][T12785] ? __lock_acquire+0x7d80/0x7d80 [ 531.748747][T12785] ? snprintf+0xe9/0x140 [ 531.753029][T12785] should_fail_ex+0x394/0x4c0 [ 531.757740][T12785] _copy_to_user+0x2f/0xa0 [ 531.762202][T12785] simple_read_from_buffer+0xe7/0x150 [ 531.767650][T12785] proc_fail_nth_read+0x1e8/0x260 [ 531.772721][T12785] ? proc_fault_inject_write+0x360/0x360 [ 531.778390][T12785] ? fsnotify_perm+0x271/0x5e0 [ 531.783174][T12785] ? proc_fault_inject_write+0x360/0x360 [ 531.788824][T12785] vfs_read+0x298/0x990 [ 531.793012][T12785] ? kernel_read+0x1e0/0x1e0 [ 531.797619][T12785] ? __fget_files+0x28/0x460 [ 531.802224][T12785] ? __fget_files+0x3fc/0x460 [ 531.806923][T12785] ? __fdget_pos+0x2a3/0x330 [ 531.811534][T12785] ? ksys_read+0x74/0x260 [ 531.815891][T12785] ksys_read+0x151/0x260 [ 531.820150][T12785] ? vfs_write+0x9a0/0x9a0 [ 531.824607][T12785] do_syscall_64+0x55/0xb0 [ 531.829128][T12785] ? clear_bhb_loop+0x40/0x90 [ 531.833828][T12785] ? clear_bhb_loop+0x40/0x90 [ 531.838553][T12785] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 531.844467][T12785] RIP: 0033:0x7f958595e6ce [ 531.848898][T12785] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 531.868517][T12785] RSP: 002b:00007f95868a7fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 531.876946][T12785] RAX: ffffffffffffffda RBX: 00007f95868a86c0 RCX: 00007f958595e6ce [ 531.884928][T12785] RDX: 000000000000000f RSI: 00007f95868a80a0 RDI: 0000000000000008 [ 531.892909][T12785] RBP: 00007f95868a8090 R08: 0000000000000000 R09: 0000000000000000 [ 531.900888][T12785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 531.908870][T12785] R13: 00007f9585c26038 R14: 00007f9585c25fa0 R15: 00007ffe3d698858 [ 531.916867][T12785] [ 532.236702][T12799] netlink: 'syz.4.2061': attribute type 10 has an invalid length. [ 532.365957][T12802] netlink: 'syz.2.2060': attribute type 29 has an invalid length. [ 532.375653][T12799] dummy0: entered promiscuous mode [ 532.430925][T12799] dummy0: entered allmulticast mode [ 532.463027][T12799] team0: Port device dummy0 added [ 532.489727][T12802] netlink: 'syz.2.2060': attribute type 29 has an invalid length. [ 532.543575][T12797] netlink: 'syz.2.2060': attribute type 29 has an invalid length. [ 532.889625][T12811] __nla_validate_parse: 2 callbacks suppressed [ 532.889667][T12811] netlink: 134736 bytes leftover after parsing attributes in process `syz.2.2066'. [ 533.274530][T12824] netlink: 'syz.1.2069': attribute type 1 has an invalid length. [ 533.283223][T12824] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.2069'. [ 533.959598][T12839] netlink: 'syz.0.2074': attribute type 10 has an invalid length. [ 534.008338][T12839] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.2074'. [ 534.521872][T12855] netlink: 'syz.4.2082': attribute type 21 has an invalid length. [ 534.552117][T12855] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2082'. [ 534.852641][T12870] netlink: 'syz.2.2086': attribute type 13 has an invalid length. [ 534.876468][T12870] netlink: 24643 bytes leftover after parsing attributes in process `syz.2.2086'. [ 536.582466][T12888] netlink: 'syz.4.2092': attribute type 29 has an invalid length. [ 536.595672][T12888] netlink: 'syz.4.2092': attribute type 29 has an invalid length. [ 536.642233][T12890] netlink: 'syz.4.2092': attribute type 29 has an invalid length. [ 536.949298][T12900] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.2094'. [ 537.350883][T12905] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2097'. [ 537.382980][T12905] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2097'. [ 537.710761][T12919] netlink: 'syz.2.2097': attribute type 11 has an invalid length. [ 537.812242][T12919] netlink: 184116 bytes leftover after parsing attributes in process `syz.2.2097'. [ 538.076588][T12917] netlink: 180 bytes leftover after parsing attributes in process `syz.4.2099'. [ 538.226405][T12919] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 538.270675][T12919] CPU: 0 PID: 12919 Comm: syz.2.2097 Not tainted syzkaller #0 [ 538.278246][T12919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 538.288317][T12919] Call Trace: [ 538.291613][T12919] [ 538.294556][T12919] dump_stack_lvl+0x18c/0x250 [ 538.299263][T12919] ? show_regs_print_info+0x20/0x20 [ 538.304481][T12919] ? load_image+0x420/0x420 [ 538.309018][T12919] sysfs_warn_dup+0x8e/0xa0 [ 538.313538][T12919] sysfs_do_create_link_sd+0xc0/0x110 [ 538.318926][T12919] device_add_class_symlinks+0x1cf/0x240 [ 538.324621][T12919] device_add+0x4f9/0xc40 [ 538.328971][T12919] wiphy_register+0x1d99/0x2ac0 [ 538.333858][T12919] ? cfg80211_event_work+0x40/0x40 [ 538.338988][T12919] ? minstrel_ht_alloc+0x88a/0x990 [ 538.344129][T12919] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 538.350305][T12919] ieee80211_register_hw+0x2dd8/0x3b30 [ 538.355794][T12919] ? ieee80211_register_hw+0xef1/0x3b30 [ 538.361365][T12919] ? ieee80211_tasklet_handler+0x20/0x20 [ 538.367018][T12919] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 538.372937][T12919] ? __debug_object_init+0xec/0x450 [ 538.378157][T12919] ? __asan_memset+0x22/0x40 [ 538.382774][T12919] ? __hrtimer_init+0x189/0x270 [ 538.387652][T12919] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 538.393417][T12919] ? mac80211_hwsim_free+0x220/0x220 [ 538.398718][T12919] ? rcu_is_watching+0x15/0xb0 [ 538.403507][T12919] ? kstrndup+0xbd/0x140 [ 538.407782][T12919] hwsim_new_radio_nl+0xdad/0x1a70 [ 538.412924][T12919] ? __nla_validate+0x50/0x50 [ 538.417637][T12919] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 538.423997][T12919] ? __nla_parse+0x40/0x50 [ 538.428438][T12919] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 538.434795][T12919] genl_family_rcv_msg_doit+0x21a/0x310 [ 538.440375][T12919] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 538.446309][T12919] ? bpf_lsm_capable+0x9/0x10 [ 538.451095][T12919] ? security_capable+0x89/0xb0 [ 538.455967][T12919] genl_rcv_msg+0x611/0x7a0 [ 538.460639][T12919] ? genl_bind+0x360/0x360 [ 538.465097][T12919] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 538.471455][T12919] ? ref_tracker_free+0x686/0x830 [ 538.476500][T12919] ? __kasan_kmalloc_large+0x8b/0xa0 [ 538.481816][T12919] netlink_rcv_skb+0x235/0x4c0 [ 538.486690][T12919] ? genl_bind+0x360/0x360 [ 538.491133][T12919] ? netlink_ack+0x1160/0x1160 [ 538.495929][T12919] ? __lock_acquire+0x7d80/0x7d80 [ 538.500980][T12919] ? down_read+0x1ac/0x2e0 [ 538.505415][T12919] genl_rcv+0x28/0x40 [ 538.509417][T12919] netlink_unicast+0x7b1/0x930 [ 538.514212][T12919] netlink_sendmsg+0x8d0/0xbf0 [ 538.519011][T12919] ? netlink_getsockopt+0x590/0x590 [ 538.524231][T12919] ? apparmor_socket_sendmsg+0x8e/0x330 [ 538.529816][T12919] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 538.535120][T12919] ? security_socket_sendmsg+0x80/0xa0 [ 538.540600][T12919] ? netlink_getsockopt+0x590/0x590 [ 538.545821][T12919] ____sys_sendmsg+0x61b/0x980 [ 538.550615][T12919] ? __asan_memset+0x22/0x40 [ 538.555228][T12919] ? __sys_sendmsg_sock+0x30/0x30 [ 538.560283][T12919] ? __import_iovec+0x5f2/0x850 [ 538.565164][T12919] ? import_iovec+0x73/0xa0 [ 538.569689][T12919] ___sys_sendmsg+0x2a6/0x360 [ 538.574400][T12919] ? __sys_sendmsg+0x2b0/0x2b0 [ 538.579212][T12919] ? trace_call_bpf+0xc3/0x6c0 [ 538.584033][T12919] __se_sys_sendmsg+0x1d0/0x2c0 [ 538.588910][T12919] ? __x64_sys_sendmsg+0x80/0x80 [ 538.593886][T12919] ? lockdep_hardirqs_on+0x98/0x150 [ 538.599105][T12919] do_syscall_64+0x55/0xb0 [ 538.603541][T12919] ? clear_bhb_loop+0x40/0x90 [ 538.608230][T12919] ? clear_bhb_loop+0x40/0x90 [ 538.612925][T12919] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 538.618841][T12919] RIP: 0033:0x7f958599de99 [ 538.623277][T12919] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 538.642898][T12919] RSP: 002b:00007f9586866028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 538.651330][T12919] RAX: ffffffffffffffda RBX: 00007f9585c26180 RCX: 00007f958599de99 [ 538.659415][T12919] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000c [ 538.667401][T12919] RBP: 00007f9585a33eaf R08: 0000000000000000 R09: 0000000000000000 [ 538.675384][T12919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 538.683369][T12919] R13: 00007f9585c26218 R14: 00007f9585c26180 R15: 00007ffe3d698858 [ 538.691392][T12919] [ 538.784901][T12904] delete_channel: no stack [ 538.997091][T12931] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2102'. [ 539.743621][T12940] netlink: 'syz.4.2107': attribute type 1 has an invalid length. [ 539.913885][T12941] netlink: 'syz.2.2103': attribute type 4 has an invalid length. [ 539.939392][T12941] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2103'. [ 540.128940][T12948] syzkaller0: entered promiscuous mode [ 540.135123][T12948] syzkaller0: entered allmulticast mode [ 540.250898][T12956] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2112'. [ 540.265625][T12956] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2112'. [ 541.116837][T12955] delete_channel: no stack [ 541.120466][T12956] netlink: 'syz.0.2112': attribute type 11 has an invalid length. [ 541.130645][T12956] netlink: 184116 bytes leftover after parsing attributes in process `syz.0.2112'. [ 543.205011][T12956] debugfs: Directory '!!' with parent 'ieee80211' already present! [ 543.399544][T12965] netlink: 'syz.4.2115': attribute type 10 has an invalid length. [ 543.426896][T12965] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2115'. [ 543.740606][T12963] netlink: 180 bytes leftover after parsing attributes in process `syz.0.2114'. [ 544.455446][T12993] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.2123'. [ 544.978201][T13008] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2126'. [ 545.276185][T13020] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.2131'. [ 547.531122][T13073] netlink: 'syz.4.2151': attribute type 2 has an invalid length. [ 547.539804][T13073] netlink: 'syz.4.2151': attribute type 8 has an invalid length. [ 547.550106][T13073] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2151'. [ 547.792936][T13076] netlink: 'syz.1.2152': attribute type 10 has an invalid length. [ 547.812366][T13076] bridge0: left allmulticast mode [ 548.220883][T13084] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2154'. [ 548.555011][T13095] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.2159'. [ 548.867925][T13098] netlink: 135056 bytes leftover after parsing attributes in process `syz.0.2161'. [ 548.931605][T13098] openvswitch: netlink: Tunnel attr 8545 out of range max 16 [ 549.286821][T13106] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.2162'. [ 549.384847][T13108] netlink: 'syz.1.2163': attribute type 8 has an invalid length. [ 549.431528][T13108] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2163'. [ 549.769053][T13115] netlink: 'syz.0.2165': attribute type 39 has an invalid length. [ 550.482187][T13133] : port 1(ip6gretap0) entered blocking state [ 550.489606][T13133] : port 1(ip6gretap0) entered disabled state [ 550.497910][T13133] ip6gretap0: entered allmulticast mode [ 550.551301][T13133] ip6gretap0: entered promiscuous mode [ 550.654582][T13138] netlink: 'syz.0.2171': attribute type 10 has an invalid length. [ 550.881469][T13133] macsec0: entered promiscuous mode [ 550.928279][T13133] macsec0: entered allmulticast mode [ 550.937064][T13133] veth1_macvtap: entered allmulticast mode [ 551.281798][T13155] netlink: 192 bytes leftover after parsing attributes in process `syz.4.2178'. [ 551.363268][T13157] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 551.608457][T13151] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 551.643497][T13151] syzkaller1: linktype set to 769 [ 551.852649][T13173] macvlan1: entered promiscuous mode [ 551.860575][T13173] macvlan1: entered allmulticast mode [ 551.871746][T13173] veth1_vlan: entered allmulticast mode [ 552.734258][T13194] netlink: 'syz.1.2188': attribute type 2 has an invalid length. [ 552.755734][T13194] netlink: 17267 bytes leftover after parsing attributes in process `syz.1.2188'. [ 553.994577][T13223] netlink: 'syz.2.2198': attribute type 3 has an invalid length. [ 554.018752][T13223] netlink: 16066 bytes leftover after parsing attributes in process `syz.2.2198'. [ 554.077326][T13225] netlink: 'syz.0.2199': attribute type 29 has an invalid length. [ 554.087907][T13225] netlink: 'syz.0.2199': attribute type 29 has an invalid length. [ 554.112928][T13225] netlink: 'syz.0.2199': attribute type 3 has an invalid length. [ 554.121211][T13225] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2199'. [ 555.700733][T13256] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 555.831918][T13256] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2207'. [ 556.160125][T13261] netlink: 196 bytes leftover after parsing attributes in process `syz.2.2209'. [ 556.459238][T13277] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2212'. [ 556.635737][T13268] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 556.919528][T13294] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2217'. [ 557.085972][T13294] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2217'. [ 561.143026][T13335] syz.1.2227[13335] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 561.143410][T13335] syz.1.2227[13335] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 561.170200][T13337] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2226'. [ 561.205612][T13337] netlink: 6 bytes leftover after parsing attributes in process `syz.4.2226'. [ 561.216599][T13338] netlink: 'syz.2.2228': attribute type 39 has an invalid length. [ 562.820388][T13380] sctp: [Deprecated]: syz.0.2242 (pid 13380) Use of int in maxseg socket option. [ 562.820388][T13380] Use struct sctp_assoc_value instead [ 563.653429][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.660123][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.807361][T11849] bond0: (slave syz_tun): Releasing backup interface [ 564.987074][T13428] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 564.996928][T13428] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 565.006167][T13428] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 565.016312][T13428] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 565.025988][T13428] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 565.035246][T13428] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 565.377690][T13427] chnl_net:caif_netlink_parms(): no params data found [ 565.623521][T13427] bridge0: port 1(bridge_slave_0) entered blocking state [ 565.630815][T13427] bridge0: port 1(bridge_slave_0) entered disabled state [ 565.639215][T13427] bridge_slave_0: entered allmulticast mode [ 565.648211][T13427] bridge_slave_0: entered promiscuous mode [ 565.700323][T13427] bridge0: port 2(bridge_slave_1) entered blocking state [ 565.709363][T13449] FAULT_INJECTION: forcing a failure. [ 565.709363][T13449] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 565.724671][T13427] bridge0: port 2(bridge_slave_1) entered disabled state [ 565.732076][T13427] bridge_slave_1: entered allmulticast mode [ 565.739758][T13427] bridge_slave_1: entered promiscuous mode [ 565.745867][T13449] CPU: 0 PID: 13449 Comm: syz.2.2266 Not tainted syzkaller #0 [ 565.753367][T13449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 565.763439][T13449] Call Trace: [ 565.766731][T13449] [ 565.769673][T13449] dump_stack_lvl+0x18c/0x250 [ 565.774499][T13449] ? show_regs_print_info+0x20/0x20 [ 565.779747][T13449] ? load_image+0x420/0x420 [ 565.784280][T13449] ? __lock_acquire+0x7d80/0x7d80 [ 565.789325][T13449] ? snprintf+0xe9/0x140 [ 565.793595][T13449] should_fail_ex+0x394/0x4c0 [ 565.798295][T13449] _copy_to_user+0x2f/0xa0 [ 565.802768][T13449] simple_read_from_buffer+0xe7/0x150 [ 565.808215][T13449] proc_fail_nth_read+0x1e8/0x260 [ 565.813263][T13449] ? proc_fault_inject_write+0x360/0x360 [ 565.818915][T13449] ? fsnotify_perm+0x271/0x5e0 [ 565.823703][T13449] ? proc_fault_inject_write+0x360/0x360 [ 565.829359][T13449] vfs_read+0x298/0x990 [ 565.833626][T13449] ? kernel_read+0x1e0/0x1e0 [ 565.838235][T13449] ? __fget_files+0x28/0x460 [ 565.842847][T13449] ? __fget_files+0x3fc/0x460 [ 565.847547][T13449] ? __fdget_pos+0x2a3/0x330 [ 565.852160][T13449] ? ksys_read+0x74/0x260 [ 565.856532][T13449] ksys_read+0x151/0x260 [ 565.860799][T13449] ? vfs_write+0x9a0/0x9a0 [ 565.865263][T13449] ? lockdep_hardirqs_on+0x98/0x150 [ 565.870479][T13449] do_syscall_64+0x55/0xb0 [ 565.875010][T13449] ? clear_bhb_loop+0x40/0x90 [ 565.879700][T13449] ? clear_bhb_loop+0x40/0x90 [ 565.884393][T13449] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 565.890304][T13449] RIP: 0033:0x7f958595e6ce [ 565.894736][T13449] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 565.914360][T13449] RSP: 002b:00007f95868a7fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 565.922790][T13449] RAX: ffffffffffffffda RBX: 00007f95868a86c0 RCX: 00007f958595e6ce [ 565.930772][T13449] RDX: 000000000000000f RSI: 00007f95868a80a0 RDI: 0000000000000004 [ 565.938753][T13449] RBP: 00007f95868a8090 R08: 0000000000000000 R09: 0000000000000000 [ 565.946735][T13449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 565.954718][T13449] R13: 00007f9585c26038 R14: 00007f9585c25fa0 R15: 00007ffe3d698858 [ 565.962807][T13449] [ 565.997381][T13427] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 566.010765][T13427] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 566.086645][T13427] team0: Port device team_slave_0 added [ 566.096392][T13427] team0: Port device team_slave_1 added [ 566.139158][T13427] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 566.156966][T13427] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 566.210424][T13427] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 566.225768][T13427] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 566.233185][T13427] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 566.259377][T13427] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 566.362226][T13427] hsr_slave_0: entered promiscuous mode [ 566.377053][T13427] hsr_slave_1: entered promiscuous mode [ 566.390227][T13427] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 566.398843][T13427] Cannot create hsr debugfs directory [ 566.806629][T13427] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.085497][T13427] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.090577][T13428] Bluetooth: hci0: command tx timeout [ 567.332612][T13427] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.464077][T13427] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.761228][T13427] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 567.784058][T13427] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 567.821359][T13427] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 567.848186][T13427] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 568.131054][T13427] 8021q: adding VLAN 0 to HW filter on device bond0 [ 568.190047][T13427] 8021q: adding VLAN 0 to HW filter on device team0 [ 568.253708][ T7239] bridge0: port 1(bridge_slave_0) entered blocking state [ 568.260916][ T7239] bridge0: port 1(bridge_slave_0) entered forwarding state [ 568.298781][ T7239] bridge0: port 2(bridge_slave_1) entered blocking state [ 568.306070][ T7239] bridge0: port 2(bridge_slave_1) entered forwarding state [ 569.107192][T13427] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 569.171840][T13428] Bluetooth: hci0: command tx timeout [ 569.229788][T13427] veth0_vlan: entered promiscuous mode [ 569.278105][T13523] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.2294'. [ 569.279783][T13427] veth1_vlan: entered promiscuous mode [ 569.398679][T13427] veth0_macvtap: entered promiscuous mode [ 569.441298][T13427] veth1_macvtap: entered promiscuous mode [ 569.475283][T13427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 569.492913][T13427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.508787][T13427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 569.519714][T13427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.530139][T13427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 569.540904][T13427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.553926][T13427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 569.564807][T13427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.580200][T13427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 569.591195][T13427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.603531][T13427] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 569.641312][T13427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 569.663275][T13427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.675826][T13427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 569.711935][T13427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.738273][T13427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 569.749638][T13427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.760177][T13427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 569.771300][T13427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.781538][T13427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 569.792524][T13427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.807863][T13427] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 569.855896][T13427] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.872238][T13427] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.881023][T13427] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.900437][T13427] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.196527][ T1136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 570.243008][ T1136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 570.296634][T12990] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 570.328326][T12990] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 570.985094][T13561] netlink: 207508 bytes leftover after parsing attributes in process `syz.4.2304'. [ 571.274628][T13428] Bluetooth: hci0: command tx timeout [ 572.758167][T13589] netlink: 'syz.2.2313': attribute type 2 has an invalid length. [ 572.789528][T13589] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2313'. [ 573.222864][T13605] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2318'. [ 573.321709][T13428] Bluetooth: hci0: command tx timeout [ 573.916440][T13624] syz.4.2324: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 574.079680][T13624] CPU: 1 PID: 13624 Comm: syz.4.2324 Not tainted syzkaller #0 [ 574.087246][T13624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 574.097354][T13624] Call Trace: [ 574.100687][T13624] [ 574.103671][T13624] dump_stack_lvl+0x18c/0x250 [ 574.108420][T13624] ? show_regs_print_info+0x20/0x20 [ 574.113704][T13624] ? load_image+0x420/0x420 [ 574.118331][T13624] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 574.124831][T13624] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 574.131416][T13624] warn_alloc+0x246/0x340 [ 574.135933][T13624] ? stack_trace_save+0xaa/0x100 [ 574.140959][T13624] ? zone_watermark_ok_safe+0x230/0x230 [ 574.146617][T13624] ? kasan_set_track+0x5f/0x70 [ 574.151444][T13624] ? kasan_set_track+0x4e/0x70 [ 574.156293][T13624] ? __kasan_kmalloc+0x8f/0xa0 [ 574.161150][T13624] ? xsk_init_queue+0xad/0x100 [ 574.165995][T13624] ? xsk_setsockopt+0x4c9/0x750 [ 574.170953][T13624] ? do_sock_setsockopt+0x175/0x1a0 [ 574.176392][T13624] ? __x64_sys_setsockopt+0x182/0x200 [ 574.181958][T13624] __vmalloc_node_range+0x129/0x1320 [ 574.187474][T13624] ? free_vm_area+0x50/0x50 [ 574.192124][T13624] vmalloc_user+0x74/0x80 [ 574.196530][T13624] ? xskq_create+0xbf/0x170 [ 574.201107][T13624] xskq_create+0xbf/0x170 [ 574.205524][T13624] xsk_init_queue+0xad/0x100 [ 574.210207][T13624] xsk_setsockopt+0x4c9/0x750 [ 574.214974][T13624] ? xsk_poll+0x670/0x670 [ 574.219399][T13624] ? __fget_files+0x28/0x460 [ 574.224069][T13624] ? aa_sock_opt_perm+0x74/0x100 [ 574.229097][T13624] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 574.234707][T13624] ? security_socket_setsockopt+0x7e/0xa0 [ 574.240496][T13624] ? xsk_poll+0x670/0x670 [ 574.244908][T13624] do_sock_setsockopt+0x175/0x1a0 [ 574.250005][T13624] ? __fdget+0x180/0x210 [ 574.254340][T13624] __x64_sys_setsockopt+0x182/0x200 [ 574.259638][T13624] do_syscall_64+0x55/0xb0 [ 574.264124][T13624] ? clear_bhb_loop+0x40/0x90 [ 574.268862][T13624] ? clear_bhb_loop+0x40/0x90 [ 574.273607][T13624] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 574.279566][T13624] RIP: 0033:0x7f72d699de99 [ 574.284133][T13624] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 574.303809][T13624] RSP: 002b:00007f72d78ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 574.312315][T13624] RAX: ffffffffffffffda RBX: 00007f72d6c26090 RCX: 00007f72d699de99 [ 574.320345][T13624] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000009 [ 574.328376][T13624] RBP: 00007f72d6a33eaf R08: 0000000000000004 R09: 0000000000000000 [ 574.336403][T13624] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 574.344433][T13624] R13: 00007f72d6c26128 R14: 00007f72d6c26090 R15: 00007ffca8321e18 [ 574.352548][T13624] [ 574.405431][T13624] Mem-Info: [ 574.408688][T13624] active_anon:6427 inactive_anon:0 isolated_anon:0 [ 574.408688][T13624] active_file:18537 inactive_file:40144 isolated_file:0 [ 574.408688][T13624] unevictable:768 dirty:61 writeback:0 [ 574.408688][T13624] slab_reclaimable:11060 slab_unreclaimable:103567 [ 574.408688][T13624] mapped:29714 shmem:1361 pagetables:597 [ 574.408688][T13624] sec_pagetables:0 bounce:0 [ 574.408688][T13624] kernel_misc_reclaimable:0 [ 574.408688][T13624] free:1323746 free_pcp:9255 free_cma:0 [ 574.583135][T13624] Node 0 active_anon:25708kB inactive_anon:0kB active_file:74148kB inactive_file:160372kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118856kB dirty:240kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10844kB pagetables:2388kB sec_pagetables:0kB all_unreclaimable? no [ 574.728701][T13624] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 574.841691][T13624] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 574.882050][T13624] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 574.888636][T13624] Node 0 DMA32 free:1380296kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:25640kB inactive_anon:0kB active_file:74148kB inactive_file:159544kB unevictable:1536kB writepending:244kB present:3129332kB managed:2586848kB mlocked:0kB bounce:0kB free_pcp:23204kB local_pcp:6580kB free_cma:0kB [ 574.930436][T13624] lowmem_reserve[]: 0 0 0 0 0 [ 574.940662][T13624] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:4kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 574.981534][T13624] lowmem_reserve[]: 0 0 0 0 0 [ 574.986369][T13624] Node 1 Normal free:3899320kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:13568kB local_pcp:7552kB free_cma:0kB [ 575.021834][T13624] lowmem_reserve[]: 0 0 0 0 0 [ 575.027241][T13624] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 575.072780][T13624] Node 0 DMA32: 84*4kB (UME) 723*8kB (ME) 813*16kB (UME) 523*32kB (ME) 117*64kB (M) 107*128kB (UM) 68*256kB (UME) 40*512kB (UME) 29*1024kB (UME) 9*2048kB (UME) 302*4096kB (UM) = 1380056kB [ 575.093947][T13624] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 575.116792][T13624] Node 1 Normal: 232*4kB (UME) 63*8kB (UME) 46*16kB (UME) 144*32kB (UME) 55*64kB (UME) 15*128kB (UME) 2*256kB (UM) 1*512kB (U) 1*1024kB (E) 1*2048kB (E) 948*4096kB (M) = 3899320kB [ 575.139423][T13624] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 575.149786][T13624] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 575.177962][T13624] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 575.188249][T13624] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 575.197760][T13624] 60042 total pagecache pages [ 575.207176][T13624] 0 pages in swap cache [ 575.213046][T13624] Free swap = 124996kB [ 575.222127][T13624] Total swap = 124996kB [ 575.226388][T13624] 2097051 pages RAM [ 575.230231][T13624] 0 pages HighMem/MovableOnly [ 575.258315][T13624] 416953 pages reserved [ 575.273441][T13624] 0 pages cma reserved [ 575.504882][T13646] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2332'. [ 575.601663][T13650] netlink: 'syz.1.2333': attribute type 3 has an invalid length. [ 575.617136][T13650] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2333'. [ 577.381776][T13674] netlink: 'syz.0.2342': attribute type 29 has an invalid length. [ 577.399624][T13674] netlink: 'syz.0.2342': attribute type 29 has an invalid length. [ 578.313858][T13701] netlink: 'syz.0.2351': attribute type 21 has an invalid length. [ 578.323704][T13701] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2351'. [ 580.018458][T13736] FAULT_INJECTION: forcing a failure. [ 580.018458][T13736] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 580.071769][T13736] CPU: 0 PID: 13736 Comm: syz.2.2363 Not tainted syzkaller #0 [ 580.079337][T13736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 580.089531][T13736] Call Trace: [ 580.093073][T13736] [ 580.096345][T13736] dump_stack_lvl+0x18c/0x250 [ 580.101189][T13736] ? lock_chain_count+0x20/0x20 [ 580.106195][T13736] ? show_regs_print_info+0x20/0x20 [ 580.111484][T13736] ? load_image+0x420/0x420 [ 580.116052][T13736] ? lockdep_hardirqs_on+0x98/0x150 [ 580.121389][T13736] should_fail_ex+0x394/0x4c0 [ 580.126761][T13736] _copy_from_user+0x2f/0xe0 [ 580.131588][T13736] __sys_bpf+0x23e/0x890 [ 580.135868][T13736] ? bpf_link_show_fdinfo+0x390/0x390 [ 580.141454][T13736] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 580.147679][T13736] __x64_sys_bpf+0x7c/0x90 [ 580.152119][T13736] do_syscall_64+0x55/0xb0 [ 580.156558][T13736] ? clear_bhb_loop+0x40/0x90 [ 580.161769][T13736] ? clear_bhb_loop+0x40/0x90 [ 580.166495][T13736] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 580.172872][T13736] RIP: 0033:0x7f958599de99 [ 580.177320][T13736] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 580.197137][T13736] RSP: 002b:00007f95868a8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 580.205579][T13736] RAX: ffffffffffffffda RBX: 00007f9585c25fa0 RCX: 00007f958599de99 [ 580.213568][T13736] RDX: 0000000000000010 RSI: 0000200000003b00 RDI: 000000000000000f [ 580.222314][T13736] RBP: 00007f95868a8090 R08: 0000000000000000 R09: 0000000000000000 [ 580.232510][T13736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 580.240648][T13736] R13: 00007f9585c26038 R14: 00007f9585c25fa0 R15: 00007ffe3d698858 [ 580.248662][T13736] [ 580.792859][T13749] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.2367'. [ 580.903354][T13751] netlink: 'syz.0.2367': attribute type 3 has an invalid length. [ 581.338706][T13762] netlink: 'syz.2.2372': attribute type 10 has an invalid length. [ 581.635164][T13764] netlink: 'syz.1.2373': attribute type 25 has an invalid length. [ 581.658022][T13754] netlink: 'syz.4.2369': attribute type 9 has an invalid length. [ 581.666724][T13754] netlink: 399 bytes leftover after parsing attributes in process `syz.4.2369'. [ 581.691849][T13764] netlink: 'syz.1.2373': attribute type 9 has an invalid length. [ 582.111941][T13779] netlink: 6 bytes leftover after parsing attributes in process `syz.1.2377'. [ 583.013720][T13786] FAULT_INJECTION: forcing a failure. [ 583.013720][T13786] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 583.029500][T13786] CPU: 1 PID: 13786 Comm: syz.0.2378 Not tainted syzkaller #0 [ 583.040594][T13786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 583.052782][T13786] Call Trace: [ 583.061516][T13786] [ 583.066880][T13786] dump_stack_lvl+0x18c/0x250 [ 583.072297][T13786] ? show_regs_print_info+0x20/0x20 [ 583.078114][T13786] ? load_image+0x420/0x420 [ 583.083669][T13786] ? __might_fault+0xaa/0x120 [ 583.089543][T13786] ? __lock_acquire+0x7d80/0x7d80 [ 583.095184][T13786] should_fail_ex+0x394/0x4c0 [ 583.101425][T13786] _copy_from_user+0x2f/0xe0 [ 583.106528][T13786] btf_get_info_by_fd+0x111/0x5d0 [ 583.114643][T13786] ? __fget_files+0x28/0x460 [ 583.120718][T13786] ? btf_get_by_fd+0x160/0x160 [ 583.126310][T13786] ? __fdget+0x180/0x210 [ 583.132025][T13786] bpf_obj_get_info_by_fd+0xc1c/0x3120 [ 583.138667][T13786] ? verify_lock_unused+0x140/0x140 [ 583.144819][T13786] ? bpf_map_get_fd_by_id+0x330/0x330 [ 583.150878][T13786] ? get_pid_task+0x20/0x1e0 [ 583.156866][T13786] ? __might_fault+0xaa/0x120 [ 583.161865][T13786] ? __lock_acquire+0x7d80/0x7d80 [ 583.167117][T13786] ? file_end_write+0x159/0x250 [ 583.172166][T13786] ? __might_fault+0xaa/0x120 [ 583.176892][T13786] ? __might_fault+0xc6/0x120 [ 583.181766][T13786] ? __might_fault+0xaa/0x120 [ 583.186994][T13786] ? bpf_lsm_bpf+0x9/0x10 [ 583.191469][T13786] ? security_bpf+0x7e/0xa0 [ 583.197105][T13786] __sys_bpf+0x7eb/0x890 [ 583.201444][T13786] ? bpf_link_show_fdinfo+0x390/0x390 [ 583.207101][T13786] ? lock_chain_count+0x20/0x20 [ 583.214114][T13786] __x64_sys_bpf+0x7c/0x90 [ 583.218947][T13786] do_syscall_64+0x55/0xb0 [ 583.224701][T13786] ? clear_bhb_loop+0x40/0x90 [ 583.230676][T13786] ? clear_bhb_loop+0x40/0x90 [ 583.236287][T13786] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 583.242574][T13786] RIP: 0033:0x7f3bbad9de99 [ 583.247995][T13786] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 583.269217][T13786] RSP: 002b:00007f3bbbc53028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 583.278817][T13786] RAX: ffffffffffffffda RBX: 00007f3bbb026090 RCX: 00007f3bbad9de99 [ 583.287341][T13786] RDX: 0000000000000010 RSI: 0000200000003b00 RDI: 000000000000000f [ 583.298471][T13786] RBP: 00007f3bbbc53090 R08: 0000000000000000 R09: 0000000000000000 [ 583.307891][T13786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 583.318440][T13786] R13: 00007f3bbb026128 R14: 00007f3bbb026090 R15: 00007ffd6c4e96d8 [ 583.327134][T13786] [ 583.572299][T13793] netlink: 61963 bytes leftover after parsing attributes in process `syz.4.2383'. [ 585.003369][T13824] FAULT_INJECTION: forcing a failure. [ 585.003369][T13824] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 585.057748][T13824] CPU: 1 PID: 13824 Comm: syz.0.2392 Not tainted syzkaller #0 [ 585.067967][T13824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 585.079330][T13824] Call Trace: [ 585.083272][T13824] [ 585.087162][T13824] dump_stack_lvl+0x18c/0x250 [ 585.094371][T13824] ? show_regs_print_info+0x20/0x20 [ 585.102366][T13824] ? load_image+0x420/0x420 [ 585.108440][T13824] ? __might_fault+0xaa/0x120 [ 585.114957][T13824] ? __lock_acquire+0x7d80/0x7d80 [ 585.122443][T13824] ? __virt_addr_valid+0x10c/0x380 [ 585.128484][T13824] should_fail_ex+0x394/0x4c0 [ 585.134366][T13824] _copy_to_user+0x2f/0xa0 [ 585.142101][T13824] btf_get_info_by_fd+0x1e5/0x5d0 [ 585.148360][T13824] ? btf_get_by_fd+0x160/0x160 [ 585.155006][T13824] ? __fdget+0x180/0x210 [ 585.159549][T13824] bpf_obj_get_info_by_fd+0xc1c/0x3120 [ 585.165353][T13824] ? verify_lock_unused+0x140/0x140 [ 585.172399][T13824] ? trace_event_raw_event_lock+0x240/0x240 [ 585.179930][T13824] ? bpf_map_get_fd_by_id+0x330/0x330 [ 585.186910][T13824] ? perf_trace_lock+0xfc/0x3b0 [ 585.192366][T13824] ? trace_call_bpf+0xc3/0x6c0 [ 585.197491][T13824] ? trace_event_raw_event_lock+0x240/0x240 [ 585.204865][T13824] ? __might_fault+0xaa/0x120 [ 585.210085][T13824] ? __lock_acquire+0x7d80/0x7d80 [ 585.216884][T13824] ? file_end_write+0x159/0x250 [ 585.222419][T13824] ? __might_fault+0xaa/0x120 [ 585.228649][T13824] ? __might_fault+0xc6/0x120 [ 585.233904][T13824] ? __might_fault+0xaa/0x120 [ 585.238727][T13824] ? bpf_lsm_bpf+0x9/0x10 [ 585.243651][T13824] ? security_bpf+0x7e/0xa0 [ 585.248413][T13824] __sys_bpf+0x7eb/0x890 [ 585.252926][T13824] ? bpf_link_show_fdinfo+0x390/0x390 [ 585.261537][T13824] ? lock_chain_count+0x20/0x20 [ 585.267591][T13824] __x64_sys_bpf+0x7c/0x90 [ 585.272593][T13824] do_syscall_64+0x55/0xb0 [ 585.278923][T13824] ? clear_bhb_loop+0x40/0x90 [ 585.285104][T13824] ? clear_bhb_loop+0x40/0x90 [ 585.290269][T13824] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 585.298747][T13824] RIP: 0033:0x7f3bbad9de99 [ 585.304084][T13824] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 585.329109][T13824] RSP: 002b:00007f3bbbc53028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 585.338368][T13824] RAX: ffffffffffffffda RBX: 00007f3bbb026090 RCX: 00007f3bbad9de99 [ 585.347782][T13824] RDX: 0000000000000010 RSI: 0000200000003b00 RDI: 000000000000000f [ 585.358397][T13824] RBP: 00007f3bbbc53090 R08: 0000000000000000 R09: 0000000000000000 [ 585.368350][T13824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 585.379928][T13824] R13: 00007f3bbb026128 R14: 00007f3bbb026090 R15: 00007ffd6c4e96d8 [ 585.388847][T13824] [ 586.838032][T13842] netlink: 'syz.1.2399': attribute type 3 has an invalid length. [ 586.891203][T13842] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.2399'. [ 587.453639][T13859] FAULT_INJECTION: forcing a failure. [ 587.453639][T13859] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 587.604261][T13859] CPU: 0 PID: 13859 Comm: syz.1.2404 Not tainted syzkaller #0 [ 587.612188][T13859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 587.623433][T13859] Call Trace: [ 587.626852][T13859] [ 587.630439][T13859] dump_stack_lvl+0x18c/0x250 [ 587.635335][T13859] ? show_regs_print_info+0x20/0x20 [ 587.641103][T13859] ? load_image+0x420/0x420 [ 587.645973][T13859] ? __lock_acquire+0x7d80/0x7d80 [ 587.652474][T13859] ? verify_lock_unused+0x140/0x140 [ 587.659030][T13859] should_fail_ex+0x394/0x4c0 [ 587.664818][T13859] prepare_alloc_pages+0x1e1/0x5b0 [ 587.670365][T13859] __alloc_pages+0x134/0x460 [ 587.675203][T13859] ? zone_statistics+0x170/0x170 [ 587.680282][T13859] ? mt_find+0x169/0x640 [ 587.684744][T13859] ? handle_mm_fault+0xe6/0x4a50 [ 587.690185][T13859] ? __lock_acquire+0x7d80/0x7d80 [ 587.696631][T13859] __folio_alloc+0x10/0x20 [ 587.701384][T13859] vma_alloc_folio+0x474/0x8f0 [ 587.706574][T13859] ? handle_mm_fault+0xe6/0x4a50 [ 587.711587][T13859] handle_mm_fault+0x1ab6/0x4a50 [ 587.716952][T13859] ? handle_mm_fault+0xe6/0x4a50 [ 587.723764][T13859] ? numa_migrate_prep+0x350/0x350 [ 587.730445][T13859] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 587.736583][T13859] do_user_addr_fault+0x736/0x12d0 [ 587.741853][T13859] exc_page_fault+0x64/0x100 [ 587.746781][T13859] asm_exc_page_fault+0x26/0x30 [ 587.752134][T13859] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 587.758938][T13859] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 [ 587.780822][T13859] RSP: 0018:ffffc9000bbcf910 EFLAGS: 00050206 [ 587.787396][T13859] RAX: ffffffff84312701 RBX: 0000000000000052 RCX: 0000000000000052 [ 587.796423][T13859] RDX: 0000000000000000 RSI: ffff88803093db00 RDI: 0000200000002a00 [ 587.806000][T13859] RBP: ffffc9000bbcfa30 R08: 0000000000000001 R09: 0000000000000002 [ 587.814931][T13859] R10: dffffc0000000000 R11: ffffed1006127b6a R12: 0000200000002a52 [ 587.822966][T13859] R13: ffff88803093db00 R14: 0000200000002a00 R15: ffff88803093db00 [ 587.831471][T13859] ? _copy_from_user+0x51/0xe0 [ 587.837011][T13859] _copy_to_user+0x85/0xa0 [ 587.842178][T13859] btf_get_info_by_fd+0x1e5/0x5d0 [ 587.847439][T13859] ? btf_get_by_fd+0x160/0x160 [ 587.852244][T13859] ? __fdget+0x180/0x210 [ 587.856990][T13859] bpf_obj_get_info_by_fd+0xc1c/0x3120 [ 587.862897][T13859] ? verify_lock_unused+0x140/0x140 [ 587.868783][T13859] ? bpf_map_get_fd_by_id+0x330/0x330 [ 587.874866][T13859] ? __might_fault+0xaa/0x120 [ 587.880781][T13859] ? __lock_acquire+0x7d80/0x7d80 [ 587.885959][T13859] ? file_end_write+0x159/0x250 [ 587.891046][T13859] ? __might_fault+0xaa/0x120 [ 587.895775][T13859] ? __might_fault+0xc6/0x120 [ 587.900844][T13859] ? __might_fault+0xaa/0x120 [ 587.906319][T13859] ? bpf_lsm_bpf+0x9/0x10 [ 587.910818][T13859] ? security_bpf+0x7e/0xa0 [ 587.915647][T13859] __sys_bpf+0x7eb/0x890 [ 587.921253][T13859] ? bpf_link_show_fdinfo+0x390/0x390 [ 587.927136][T13859] ? lock_chain_count+0x20/0x20 [ 587.932683][T13859] __x64_sys_bpf+0x7c/0x90 [ 587.938492][T13859] do_syscall_64+0x55/0xb0 [ 587.943419][T13859] ? clear_bhb_loop+0x40/0x90 [ 587.948489][T13859] ? clear_bhb_loop+0x40/0x90 [ 587.956087][T13859] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 587.962598][T13859] RIP: 0033:0x7f939ed9de99 [ 587.967379][T13859] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 587.988646][T13859] RSP: 002b:00007f939fcc0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 587.997396][T13859] RAX: ffffffffffffffda RBX: 00007f939f026090 RCX: 00007f939ed9de99 [ 588.006591][T13859] RDX: 0000000000000010 RSI: 0000200000003b00 RDI: 000000000000000f [ 588.014882][T13859] RBP: 00007f939fcc0090 R08: 0000000000000000 R09: 0000000000000000 [ 588.025527][T13859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 588.034247][T13859] R13: 00007f939f026128 R14: 00007f939f026090 R15: 00007fffb72bf118 [ 588.042641][T13859] [ 588.834592][ T5782] bond0: (slave syz_tun): Releasing backup interface [ 589.162635][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 589.174516][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 589.183707][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 589.192806][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 589.201114][ T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 589.209601][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 589.454089][T12990] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 589.469112][T12990] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 589.478437][T12990] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 589.496150][T12990] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 589.514023][T12990] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi [ 589.539183][T12990] batman_adv: batadv0: Removing interface: veth1_virt_wifi [ 589.548380][T12990] bridge_slave_0: left allmulticast mode [ 589.574040][T12990] bridge_slave_0: left promiscuous mode [ 589.589445][T12990] bridge0: port 1(bridge_slave_0) entered disabled state [ 589.676135][T12990] veth1_macvtap: left promiscuous mode [ 589.691129][T12990] veth0_macvtap: left promiscuous mode [ 590.621120][T12990] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 590.688718][T12990] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 590.749968][T12990] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 591.150277][T12990] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 591.160287][T12990] bond0 (unregistering): Released all slaves [ 591.241674][ T51] Bluetooth: hci1: command tx timeout [ 591.311250][T13883] C: renamed from team_slave_0 (while UP) [ 591.322980][T13883] netlink: 'syz.4.2411': attribute type 4 has an invalid length. [ 591.344759][T13883] netlink: 116 bytes leftover after parsing attributes in process `syz.4.2411'. [ 591.361315][T13883] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 591.795801][T13893] netlink: 'syz.4.2414': attribute type 29 has an invalid length. [ 591.984177][T13893] netlink: 'syz.4.2414': attribute type 29 has an invalid length. [ 592.316539][T13869] chnl_net:caif_netlink_parms(): no params data found [ 592.537376][T13869] bridge0: port 1(bridge_slave_0) entered blocking state [ 592.546211][T13869] bridge0: port 1(bridge_slave_0) entered disabled state [ 592.553641][T13869] bridge_slave_0: entered allmulticast mode [ 592.562668][T13869] bridge_slave_0: entered promiscuous mode [ 592.573715][T13869] bridge0: port 2(bridge_slave_1) entered blocking state [ 592.581923][T13869] bridge0: port 2(bridge_slave_1) entered disabled state [ 592.589429][T13869] bridge_slave_1: entered allmulticast mode [ 592.598471][T13869] bridge_slave_1: entered promiscuous mode [ 592.842159][T13869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 592.865867][T13915] netlink: 'syz.1.2419': attribute type 16 has an invalid length. [ 592.868327][T13869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 592.880044][T13915] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2419'. [ 593.006409][T13869] team0: Port device team_slave_0 added [ 593.018035][T13869] team0: Port device team_slave_1 added [ 593.094973][T13869] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 593.125641][T13869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 593.198223][T13869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 593.225021][T13924] netlink: 'syz.4.2423': attribute type 21 has an invalid length. [ 593.235847][T13869] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 593.249213][T13869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 593.289132][T13869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 593.322044][ T51] Bluetooth: hci1: command tx timeout [ 593.341325][T13924] netlink: 'syz.4.2423': attribute type 21 has an invalid length. [ 593.440386][T13869] hsr_slave_0: entered promiscuous mode [ 593.457429][T13869] hsr_slave_1: entered promiscuous mode [ 593.478568][T13869] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 593.487880][T13869] Cannot create hsr debugfs directory [ 594.250014][T13869] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.476663][T13869] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.855053][T13869] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.011920][T13869] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.407558][ T51] Bluetooth: hci1: command tx timeout [ 595.539809][T13969] netlink: 'syz.0.2434': attribute type 4 has an invalid length. [ 595.700513][T13869] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 595.736818][T13869] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 595.859557][T13869] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 595.896894][T13869] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 595.933125][T13975] netlink: 'syz.0.2439': attribute type 58 has an invalid length. [ 595.941150][T13975] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2439'. [ 595.964352][T13978] netlink: 16410 bytes leftover after parsing attributes in process `syz.4.2440'. [ 596.682508][T13869] 8021q: adding VLAN 0 to HW filter on device bond0 [ 596.755242][T13869] 8021q: adding VLAN 0 to HW filter on device team0 [ 596.806657][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 596.813969][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 596.863281][T12990] bridge0: port 2(bridge_slave_1) entered blocking state [ 596.871321][T12990] bridge0: port 2(bridge_slave_1) entered forwarding state [ 597.073768][T13869] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 597.482539][ T51] Bluetooth: hci1: command tx timeout [ 597.708783][T13999] FAULT_INJECTION: forcing a failure. [ 597.708783][T13999] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 597.714185][T13869] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 597.729961][T13999] CPU: 0 PID: 13999 Comm: syz.4.2445 Not tainted syzkaller #0 [ 597.737577][T13999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 597.747791][T13999] Call Trace: [ 597.751122][T13999] [ 597.754159][T13999] dump_stack_lvl+0x18c/0x250 [ 597.758997][T13999] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 597.765231][T13999] ? show_regs_print_info+0x20/0x20 [ 597.770528][T13999] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 597.777295][T13999] should_fail_ex+0x394/0x4c0 [ 597.782067][T13999] _copy_from_user+0x2f/0xe0 [ 597.786720][T13999] ___sys_sendmsg+0x1c7/0x360 [ 597.791532][T13999] ? __sys_sendmsg+0x2b0/0x2b0 [ 597.796479][T13999] __se_sys_sendmsg+0x1d0/0x2c0 [ 597.801750][T13999] ? __x64_sys_sendmsg+0x80/0x80 [ 597.806792][T13999] do_syscall_64+0x55/0xb0 [ 597.811296][T13999] ? clear_bhb_loop+0x40/0x90 [ 597.816035][T13999] ? clear_bhb_loop+0x40/0x90 [ 597.820777][T13999] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 597.826749][T13999] RIP: 0033:0x7f72d699de99 [ 597.831316][T13999] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 597.849432][T13869] veth0_vlan: entered promiscuous mode [ 597.850950][T13999] RSP: 002b:00007f72d790f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 597.864934][T13999] RAX: ffffffffffffffda RBX: 00007f72d6c25fa0 RCX: 00007f72d699de99 [ 597.873049][T13999] RDX: 0000000004000000 RSI: 0000200000000040 RDI: 000000000000000d [ 597.881082][T13999] RBP: 00007f72d790f090 R08: 0000000000000000 R09: 0000000000000000 [ 597.887318][T13869] veth1_vlan: entered promiscuous mode [ 597.889265][T13999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 597.889285][T13999] R13: 00007f72d6c26038 R14: 00007f72d6c25fa0 R15: 00007ffca8321e18 [ 597.889317][T13999] [ 598.155733][T13869] veth0_macvtap: entered promiscuous mode [ 598.282277][T13869] veth1_macvtap: entered promiscuous mode [ 598.650786][T13869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 598.668488][T13869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 598.679796][T13869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 598.691191][T13869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 598.702179][T13869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 598.721291][T13869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 598.733319][T13869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 598.750150][T13869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 598.761169][T13869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 598.773445][T13869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 598.787222][T13869] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 598.844419][T13869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 598.894287][T13869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 598.911690][T13869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 598.923135][T13869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 598.933751][T13869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 598.945750][T13869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 598.956740][T13869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 598.967861][T13869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 598.979029][T13869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 598.990284][T13869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 599.013154][T13869] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 599.103696][ T3478] hsr_slave_0: left promiscuous mode [ 599.191707][ T3478] hsr_slave_1: left promiscuous mode [ 599.237563][ T3478] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 599.264705][ T3478] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 599.731083][T14039] FAULT_INJECTION: forcing a failure. [ 599.731083][T14039] name failslab, interval 1, probability 0, space 0, times 0 [ 599.746918][T14039] CPU: 0 PID: 14039 Comm: syz.4.2458 Not tainted syzkaller #0 [ 599.754631][T14039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 599.764750][T14039] Call Trace: [ 599.768188][T14039] [ 599.771179][T14039] dump_stack_lvl+0x18c/0x250 [ 599.776034][T14039] ? show_regs_print_info+0x20/0x20 [ 599.781394][T14039] ? load_image+0x420/0x420 [ 599.786144][T14039] ? __might_sleep+0xe0/0xe0 [ 599.791018][T14039] ? __lock_acquire+0x7d80/0x7d80 [ 599.796289][T14039] should_fail_ex+0x394/0x4c0 [ 599.801219][T14039] should_failslab+0x9/0x20 [ 599.806351][T14039] slab_pre_alloc_hook+0x59/0x300 [ 599.811467][T14039] ? __lock_acquire+0x7d80/0x7d80 [ 599.816838][T14039] kmem_cache_alloc_node+0x5e/0x310 [ 599.822372][T14039] ? __alloc_skb+0x103/0x2c0 [ 599.827064][T14039] __alloc_skb+0x103/0x2c0 [ 599.831607][T14039] netlink_sendmsg+0x66a/0xbf0 [ 599.836552][T14039] ? apparmor_socket_sendmsg+0x19/0x330 [ 599.842251][T14039] ? netlink_getsockopt+0x590/0x590 [ 599.847732][T14039] ? apparmor_socket_sendmsg+0x8e/0x330 [ 599.853531][T14039] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 599.859152][T14039] ? security_socket_sendmsg+0x80/0xa0 [ 599.864772][T14039] ? netlink_getsockopt+0x590/0x590 [ 599.870036][T14039] ____sys_sendmsg+0x61b/0x980 [ 599.874889][T14039] ? __sys_sendmsg_sock+0x30/0x30 [ 599.880861][T14039] ___sys_sendmsg+0x2a6/0x360 [ 599.885693][T14039] ? __sys_sendmsg+0x2b0/0x2b0 [ 599.890684][T14039] __se_sys_sendmsg+0x1d0/0x2c0 [ 599.896600][T14039] ? __x64_sys_sendmsg+0x80/0x80 [ 599.902432][T14039] do_syscall_64+0x55/0xb0 [ 599.907793][T14039] ? clear_bhb_loop+0x40/0x90 [ 599.916889][T14039] ? clear_bhb_loop+0x40/0x90 [ 599.921821][T14039] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 599.927876][T14039] RIP: 0033:0x7f72d699de99 [ 599.932429][T14039] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 599.952363][T14039] RSP: 002b:00007f72d790f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 599.961282][T14039] RAX: ffffffffffffffda RBX: 00007f72d6c25fa0 RCX: 00007f72d699de99 [ 599.969342][T14039] RDX: 0000000004000000 RSI: 0000200000000040 RDI: 000000000000000d [ 599.977462][T14039] RBP: 00007f72d790f090 R08: 0000000000000000 R09: 0000000000000000 [ 599.985746][T14039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 599.993854][T14039] R13: 00007f72d6c26038 R14: 00007f72d6c25fa0 R15: 00007ffca8321e18 [ 600.001983][T14039] [ 600.110905][ T3478] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 600.130625][ T3478] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 600.160485][ T3478] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi [ 600.170017][ T3478] batman_adv: batadv0: Removing interface: veth1_virt_wifi [ 600.179087][ T3478] hsr0: left allmulticast mode [ 600.185299][ T3478] bridge0: port 3(hsr0) entered disabled state [ 600.196422][ T3478] bridge_slave_0: left allmulticast mode [ 600.283040][ T3478] bridge_slave_0: left promiscuous mode [ 600.289383][ T3478] bridge0: port 1(bridge_slave_0) entered disabled state [ 600.353678][ T3478] veth1_macvtap: left promiscuous mode [ 600.359456][ T3478] veth0_macvtap: left promiscuous mode [ 601.212964][T14043] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.2459'. [ 601.418564][ T3478] team0 (unregistering): Port device geneve1 removed [ 601.499531][ T3478] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 602.012799][ T3478] team0 (unregistering): Port device team_slave_1 removed [ 602.137617][ T3478] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 602.199559][ T3478] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 602.269324][ T3478] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 602.632450][ T3478] team0 (unregistering): Port device dummy0 removed [ 602.667490][ T3478] team0 (unregistering): Port device bridge0 removed [ 602.719217][ T3478] bond0 (unregistering): Released all slaves [ 602.837191][T13869] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.847038][T13869] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.856175][T13869] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.864963][T13869] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.132360][ T7242] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 603.140462][ T7242] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 603.255776][T14054] netlink: 'syz.0.2461': attribute type 3 has an invalid length. [ 603.264129][ T7242] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 603.290674][T14054] netlink: 'syz.0.2461': attribute type 6 has an invalid length. [ 603.292429][ T7242] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 603.306508][T14054] netlink: 144448 bytes leftover after parsing attributes in process `syz.0.2461'. [ 604.232749][T14079] netlink: 'syz.4.2471': attribute type 10 has an invalid length. [ 604.278213][T14079] mac80211_hwsim hwsim19 wlan1: entered promiscuous mode [ 604.319875][T14079] mac80211_hwsim hwsim19 wlan1: entered allmulticast mode [ 604.349014][T14079] team0: Port device wlan1 added [ 604.685854][T14083] syzkaller0: entered promiscuous mode [ 604.697800][T14083] syzkaller0: entered allmulticast mode [ 604.730291][T14091] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2473'. [ 604.749202][T14091] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 604.770214][T14092] netlink: 'syz.1.2473': attribute type 153 has an invalid length. [ 604.789214][T14092] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.2473'. [ 605.819306][T14106] FAULT_INJECTION: forcing a failure. [ 605.819306][T14106] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 605.834839][T14106] CPU: 1 PID: 14106 Comm: syz.2.2477 Not tainted syzkaller #0 [ 605.842371][T14106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 605.852465][T14106] Call Trace: [ 605.855752][T14106] [ 605.858700][T14106] dump_stack_lvl+0x18c/0x250 [ 605.863632][T14106] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 605.869903][T14106] ? show_regs_print_info+0x20/0x20 [ 605.875153][T14106] ? load_image+0x420/0x420 [ 605.879818][T14106] should_fail_ex+0x394/0x4c0 [ 605.884545][T14106] copyin+0x1a/0x90 [ 605.888449][T14106] _copy_from_iter+0x3ec/0x1290 [ 605.893413][T14106] ? copyout_mc+0x70/0x70 [ 605.897773][T14106] ? __virt_addr_valid+0x10c/0x380 [ 605.902996][T14106] ? __virt_addr_valid+0x10c/0x380 [ 605.908246][T14106] ? __virt_addr_valid+0x10c/0x380 [ 605.913435][T14106] ? __check_object_size+0x4fc/0xa40 [ 605.918754][T14106] netlink_sendmsg+0x76b/0xbf0 [ 605.923552][T14106] ? netlink_getsockopt+0x590/0x590 [ 605.928885][T14106] ? apparmor_socket_sendmsg+0x8e/0x330 [ 605.934559][T14106] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 605.939949][T14106] ? security_socket_sendmsg+0x80/0xa0 [ 605.945468][T14106] ? netlink_getsockopt+0x590/0x590 [ 605.950799][T14106] ____sys_sendmsg+0x61b/0x980 [ 605.956414][T14106] ? iovec_from_user+0x134/0x240 [ 605.962815][T14106] ? __asan_memset+0x22/0x40 [ 605.967457][T14106] ? __sys_sendmsg_sock+0x30/0x30 [ 605.972786][T14106] ? __import_iovec+0x3fa/0x850 [ 605.978227][T14106] ? import_iovec+0x73/0xa0 [ 605.982840][T14106] ___sys_sendmsg+0x2a6/0x360 [ 605.987947][T14106] ? __sys_sendmsg+0x2b0/0x2b0 [ 605.992790][T14106] __se_sys_sendmsg+0x1d0/0x2c0 [ 605.997916][T14106] ? __x64_sys_sendmsg+0x80/0x80 [ 606.003341][T14106] ? syscall_enter_from_user_mode+0x2e/0x80 [ 606.009791][T14106] do_syscall_64+0x55/0xb0 [ 606.014582][T14106] ? clear_bhb_loop+0x40/0x90 [ 606.019923][T14106] ? clear_bhb_loop+0x40/0x90 [ 606.025268][T14106] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 606.031836][T14106] RIP: 0033:0x7f58f4b9de99 [ 606.036844][T14106] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 606.058267][T14106] RSP: 002b:00007f58f5a26028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 606.067317][T14106] RAX: ffffffffffffffda RBX: 00007f58f4e25fa0 RCX: 00007f58f4b9de99 [ 606.075876][T14106] RDX: 0000000004000000 RSI: 0000200000000040 RDI: 000000000000000d [ 606.086048][T14106] RBP: 00007f58f5a26090 R08: 0000000000000000 R09: 0000000000000000 [ 606.096515][T14106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 606.105428][T14106] R13: 00007f58f4e26038 R14: 00007f58f4e25fa0 R15: 00007fff496fc788 [ 606.114422][T14106] [ 608.269527][T14078] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 608.830154][T14122] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.2483'. [ 608.858778][T14122] netlink: zone id is out of range [ 608.878348][T14122] netlink: zone id is out of range [ 608.897276][T14122] netlink: zone id is out of range [ 608.913756][T14122] netlink: zone id is out of range [ 608.943038][T14122] netlink: zone id is out of range [ 608.965062][T14122] netlink: zone id is out of range [ 608.992221][T14122] netlink: zone id is out of range [ 609.002872][T14122] netlink: zone id is out of range [ 609.031144][T14122] netlink: zone id is out of range [ 609.309041][T14137] FAULT_INJECTION: forcing a failure. [ 609.309041][T14137] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 609.343203][T14137] CPU: 1 PID: 14137 Comm: syz.0.2487 Not tainted syzkaller #0 [ 609.350856][T14137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 609.361049][T14137] Call Trace: [ 609.364371][T14137] [ 609.367536][T14137] dump_stack_lvl+0x18c/0x250 [ 609.372289][T14137] ? show_regs_print_info+0x20/0x20 [ 609.377549][T14137] ? load_image+0x420/0x420 [ 609.382130][T14137] ? __might_fault+0xaa/0x120 [ 609.386877][T14137] should_fail_ex+0x394/0x4c0 [ 609.391700][T14137] copyin+0x1a/0x90 [ 609.395560][T14137] _copy_from_iter+0x532/0x1290 [ 609.400496][T14137] ? copyout_mc+0x70/0x70 [ 609.405099][T14137] ? __virt_addr_valid+0x10c/0x380 [ 609.410287][T14137] ? __virt_addr_valid+0x10c/0x380 [ 609.415733][T14137] ? __virt_addr_valid+0x10c/0x380 [ 609.420920][T14137] ? __check_object_size+0x4fc/0xa40 [ 609.426359][T14137] netlink_sendmsg+0x76b/0xbf0 [ 609.432208][T14137] ? netlink_getsockopt+0x590/0x590 [ 609.437512][T14137] ? apparmor_socket_sendmsg+0x8e/0x330 [ 609.443473][T14137] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 609.448907][T14137] ? security_socket_sendmsg+0x80/0xa0 [ 609.455212][T14137] ? netlink_getsockopt+0x590/0x590 [ 609.460495][T14137] ____sys_sendmsg+0x61b/0x980 [ 609.465518][T14137] ? __asan_memset+0x22/0x40 [ 609.470174][T14137] ? __sys_sendmsg_sock+0x30/0x30 [ 609.475322][T14137] ? __import_iovec+0x3fa/0x850 [ 609.480208][T14137] ? import_iovec+0x73/0xa0 [ 609.484741][T14137] ___sys_sendmsg+0x2a6/0x360 [ 609.489446][T14137] ? __sys_sendmsg+0x2b0/0x2b0 [ 609.495093][T14137] __se_sys_sendmsg+0x1d0/0x2c0 [ 609.499998][T14137] ? __x64_sys_sendmsg+0x80/0x80 [ 609.505475][T14137] ? syscall_enter_from_user_mode+0x2e/0x80 [ 609.511418][T14137] do_syscall_64+0x55/0xb0 [ 609.516020][T14137] ? clear_bhb_loop+0x40/0x90 [ 609.520798][T14137] ? clear_bhb_loop+0x40/0x90 [ 609.525507][T14137] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 609.531746][T14137] RIP: 0033:0x7f3bbad9de99 [ 609.536266][T14137] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 609.556520][T14137] RSP: 002b:00007f3bbbc74028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 609.565224][T14137] RAX: ffffffffffffffda RBX: 00007f3bbb025fa0 RCX: 00007f3bbad9de99 [ 609.574052][T14137] RDX: 0000000004000000 RSI: 0000200000000040 RDI: 000000000000000d [ 609.582070][T14137] RBP: 00007f3bbbc74090 R08: 0000000000000000 R09: 0000000000000000 [ 609.590104][T14137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 609.598126][T14137] R13: 00007f3bbb026038 R14: 00007f3bbb025fa0 R15: 00007ffd6c4e96d8 [ 609.606514][T14137] [ 610.529369][T14165] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2496'. [ 610.539137][T14165] netlink: 'syz.2.2496': attribute type 6 has an invalid length. [ 610.646544][T14167] netlink: 'syz.1.2497': attribute type 153 has an invalid length. [ 610.671665][T14167] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.2497'. [ 611.323796][T14181] FAULT_INJECTION: forcing a failure. [ 611.323796][T14181] name failslab, interval 1, probability 0, space 0, times 0 [ 611.359020][T14181] CPU: 0 PID: 14181 Comm: syz.1.2501 Not tainted syzkaller #0 [ 611.366833][T14181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 611.376973][T14181] Call Trace: [ 611.380293][T14181] [ 611.383257][T14181] dump_stack_lvl+0x18c/0x250 [ 611.387994][T14181] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 611.394195][T14181] ? show_regs_print_info+0x20/0x20 [ 611.399453][T14181] ? load_image+0x420/0x420 [ 611.404018][T14181] should_fail_ex+0x394/0x4c0 [ 611.408818][T14181] should_failslab+0x9/0x20 [ 611.413540][T14181] slab_pre_alloc_hook+0x59/0x300 [ 611.418692][T14181] ? lockdep_hardirqs_on+0x98/0x150 [ 611.424129][T14181] kmem_cache_alloc+0x5a/0x2c0 [ 611.429320][T14181] ? skb_clone+0x1eb/0x370 [ 611.434003][T14181] skb_clone+0x1eb/0x370 [ 611.438329][T14181] __netlink_deliver_tap+0x411/0x7f0 [ 611.443943][T14181] ? netlink_deliver_tap+0x2e/0x1b0 [ 611.449232][T14181] netlink_deliver_tap+0x19c/0x1b0 [ 611.455294][T14181] netlink_unicast+0x77b/0x930 [ 611.460287][T14181] netlink_sendmsg+0x8d0/0xbf0 [ 611.465299][T14181] ? netlink_getsockopt+0x590/0x590 [ 611.470670][T14181] ? apparmor_socket_sendmsg+0x8e/0x330 [ 611.476293][T14181] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 611.481646][T14181] ? security_socket_sendmsg+0x80/0xa0 [ 611.487166][T14181] ? netlink_getsockopt+0x590/0x590 [ 611.492696][T14181] ____sys_sendmsg+0x61b/0x980 [ 611.497506][T14181] ? __asan_memset+0x22/0x40 [ 611.502131][T14181] ? __sys_sendmsg_sock+0x30/0x30 [ 611.507200][T14181] ? __import_iovec+0x3fa/0x850 [ 611.512120][T14181] ? import_iovec+0x73/0xa0 [ 611.516663][T14181] ___sys_sendmsg+0x2a6/0x360 [ 611.521387][T14181] ? __sys_sendmsg+0x2b0/0x2b0 [ 611.526250][T14181] __se_sys_sendmsg+0x1d0/0x2c0 [ 611.531166][T14181] ? __x64_sys_sendmsg+0x80/0x80 [ 611.536238][T14181] ? syscall_enter_from_user_mode+0x2e/0x80 [ 611.542292][T14181] do_syscall_64+0x55/0xb0 [ 611.546864][T14181] ? clear_bhb_loop+0x40/0x90 [ 611.551606][T14181] ? clear_bhb_loop+0x40/0x90 [ 611.556335][T14181] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 611.562364][T14181] RIP: 0033:0x7f939ed9de99 [ 611.566892][T14181] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 611.586687][T14181] RSP: 002b:00007f939fce1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 611.595318][T14181] RAX: ffffffffffffffda RBX: 00007f939f025fa0 RCX: 00007f939ed9de99 [ 611.603420][T14181] RDX: 0000000004000000 RSI: 0000200000000040 RDI: 000000000000000d [ 611.611423][T14181] RBP: 00007f939fce1090 R08: 0000000000000000 R09: 0000000000000000 [ 611.619518][T14181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 611.627710][T14181] R13: 00007f939f026038 R14: 00007f939f025fa0 R15: 00007fffb72bf118 [ 611.635728][T14181] [ 612.113655][ T51] Bluetooth: hci0: ISO packet for unknown connection handle 10 [ 612.391019][T14201] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2509'. [ 612.830052][T14208] FAULT_INJECTION: forcing a failure. [ 612.830052][T14208] name failslab, interval 1, probability 0, space 0, times 0 [ 612.861174][T14208] CPU: 0 PID: 14208 Comm: syz.4.2512 Not tainted syzkaller #0 [ 612.869695][T14208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 612.879973][T14208] Call Trace: [ 612.883304][T14208] [ 612.886277][T14208] dump_stack_lvl+0x18c/0x250 [ 612.891117][T14208] ? show_regs_print_info+0x20/0x20 [ 612.896394][T14208] ? load_image+0x420/0x420 [ 612.901152][T14208] ? __might_sleep+0xe0/0xe0 [ 612.905982][T14208] ? __lock_acquire+0x7d80/0x7d80 [ 612.911072][T14208] should_fail_ex+0x394/0x4c0 [ 612.915824][T14208] should_failslab+0x9/0x20 [ 612.920393][T14208] slab_pre_alloc_hook+0x59/0x300 [ 612.925493][T14208] kmem_cache_alloc_node+0x5e/0x310 [ 612.930765][T14208] ? __alloc_skb+0x103/0x2c0 [ 612.935422][T14208] __alloc_skb+0x103/0x2c0 [ 612.939869][T14208] netlink_ack+0x377/0x1160 [ 612.944791][T14208] ? netlink_dump+0xec0/0xec0 [ 612.949518][T14208] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 612.955554][T14208] netlink_rcv_skb+0x2b3/0x4c0 [ 612.960370][T14208] ? rtnetlink_bind+0x80/0x80 [ 612.965175][T14208] ? netlink_ack+0x1160/0x1160 [ 612.970515][T14208] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 612.976720][T14208] netlink_unicast+0x7b1/0x930 [ 612.981524][T14208] netlink_sendmsg+0x8d0/0xbf0 [ 612.986336][T14208] ? netlink_getsockopt+0x590/0x590 [ 612.991758][T14208] ? apparmor_socket_sendmsg+0x8e/0x330 [ 612.997429][T14208] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 613.002748][T14208] ? security_socket_sendmsg+0x80/0xa0 [ 613.008232][T14208] ? netlink_getsockopt+0x590/0x590 [ 613.013590][T14208] ____sys_sendmsg+0x61b/0x980 [ 613.018443][T14208] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 613.024685][T14208] ? __asan_memset+0x22/0x40 [ 613.029803][T14208] ? __sys_sendmsg_sock+0x30/0x30 [ 613.034990][T14208] ? __import_iovec+0x3fa/0x850 [ 613.040266][T14208] ? import_iovec+0x73/0xa0 [ 613.045020][T14208] ___sys_sendmsg+0x2a6/0x360 [ 613.049944][T14208] ? get_pid_task+0x20/0x1e0 [ 613.054989][T14208] ? __sys_sendmsg+0x2b0/0x2b0 [ 613.060241][T14208] ? __lock_acquire+0x7d80/0x7d80 [ 613.066349][T14208] __se_sys_sendmsg+0x1d0/0x2c0 [ 613.071380][T14208] ? __x64_sys_sendmsg+0x80/0x80 [ 613.076487][T14208] ? lockdep_hardirqs_on+0x98/0x150 [ 613.081944][T14208] do_syscall_64+0x55/0xb0 [ 613.086393][T14208] ? clear_bhb_loop+0x40/0x90 [ 613.091114][T14208] ? clear_bhb_loop+0x40/0x90 [ 613.095918][T14208] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 613.101846][T14208] RIP: 0033:0x7f72d699de99 [ 613.106289][T14208] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 613.126123][T14208] RSP: 002b:00007f72d790f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 613.134953][T14208] RAX: ffffffffffffffda RBX: 00007f72d6c25fa0 RCX: 00007f72d699de99 [ 613.142956][T14208] RDX: 0000000004000000 RSI: 0000200000000040 RDI: 000000000000000d [ 613.151071][T14208] RBP: 00007f72d790f090 R08: 0000000000000000 R09: 0000000000000000 [ 613.159172][T14208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 613.167176][T14208] R13: 00007f72d6c26038 R14: 00007f72d6c25fa0 R15: 00007ffca8321e18 [ 613.175268][T14208] [ 613.946322][T14226] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2515'. [ 614.415681][T14233] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2517'. [ 615.693522][T14252] netlink: 'syz.2.2524': attribute type 10 has an invalid length. [ 615.939661][T14252] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 616.596814][T14237] delete_channel: no stack [ 617.683996][T14286] FAULT_INJECTION: forcing a failure. [ 617.683996][T14286] name failslab, interval 1, probability 0, space 0, times 0 [ 617.730098][T14286] CPU: 1 PID: 14286 Comm: syz.4.2534 Not tainted syzkaller #0 [ 617.737652][T14286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 617.747781][T14286] Call Trace: [ 617.751092][T14286] [ 617.754047][T14286] dump_stack_lvl+0x18c/0x250 [ 617.758851][T14286] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 617.764617][T14286] ? show_regs_print_info+0x20/0x20 [ 617.769942][T14286] ? load_image+0x420/0x420 [ 617.774471][T14286] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 617.780503][T14286] should_fail_ex+0x394/0x4c0 [ 617.785231][T14286] should_failslab+0x9/0x20 [ 617.789767][T14286] slab_pre_alloc_hook+0x59/0x300 [ 617.795102][T14286] ? lockdep_hardirqs_on+0x98/0x150 [ 617.800353][T14286] kmem_cache_alloc+0x5a/0x2c0 [ 617.805143][T14286] ? skb_clone+0x1eb/0x370 [ 617.809584][T14286] skb_clone+0x1eb/0x370 [ 617.813924][T14286] __netlink_deliver_tap+0x411/0x7f0 [ 617.819272][T14286] ? netlink_deliver_tap+0x2e/0x1b0 [ 617.824587][T14286] netlink_deliver_tap+0x19c/0x1b0 [ 617.829817][T14286] netlink_sendskb+0x68/0x130 [ 617.834518][T14286] netlink_ack+0xcd5/0x1160 [ 617.839077][T14286] ? netlink_dump+0xec0/0xec0 [ 617.843784][T14286] ? kasan_check_range+0xa8/0x290 [ 617.848838][T14286] netlink_rcv_skb+0x2b3/0x4c0 [ 617.853629][T14286] ? rtnetlink_bind+0x80/0x80 [ 617.858366][T14286] ? netlink_ack+0x1160/0x1160 [ 617.863188][T14286] ? __lock_acquire+0x7d80/0x7d80 [ 617.868259][T14286] ? netlink_deliver_tap+0x2e/0x1b0 [ 617.873542][T14286] netlink_unicast+0x7b1/0x930 [ 617.878481][T14286] netlink_sendmsg+0x8d0/0xbf0 [ 617.883280][T14286] ? lockdep_hardirqs_on+0x98/0x150 [ 617.888502][T14286] ? netlink_getsockopt+0x590/0x590 [ 617.893728][T14286] ? netlink_getsockopt+0x590/0x590 [ 617.898948][T14286] ____sys_sendmsg+0x61b/0x980 [ 617.903868][T14286] ? __asan_memset+0x22/0x40 [ 617.908499][T14286] ? __sys_sendmsg_sock+0x30/0x30 [ 617.913552][T14286] ? __import_iovec+0x3fa/0x850 [ 617.918694][T14286] ? import_iovec+0x73/0xa0 [ 617.923219][T14286] ___sys_sendmsg+0x2a6/0x360 [ 617.927988][T14286] ? __sys_sendmsg+0x2b0/0x2b0 [ 617.932792][T14286] ? ktime_get+0x7f/0x280 [ 617.937164][T14286] __se_sys_sendmsg+0x1d0/0x2c0 [ 617.942042][T14286] ? perf_trace_preemptirq_template+0x269/0x330 [ 617.948501][T14286] ? __x64_sys_sendmsg+0x80/0x80 [ 617.953506][T14286] ? lockdep_hardirqs_on+0x98/0x150 [ 617.958728][T14286] do_syscall_64+0x55/0xb0 [ 617.963171][T14286] ? clear_bhb_loop+0x40/0x90 [ 617.968125][T14286] ? clear_bhb_loop+0x40/0x90 [ 617.972813][T14286] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 617.978818][T14286] RIP: 0033:0x7f72d699de99 [ 617.983257][T14286] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 618.003136][T14286] RSP: 002b:00007f72d790f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 618.011654][T14286] RAX: ffffffffffffffda RBX: 00007f72d6c25fa0 RCX: 00007f72d699de99 [ 618.019637][T14286] RDX: 0000000004000000 RSI: 0000200000000040 RDI: 000000000000000d [ 618.027626][T14286] RBP: 00007f72d790f090 R08: 0000000000000000 R09: 0000000000000000 [ 618.035611][T14286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 618.043607][T14286] R13: 00007f72d6c26038 R14: 00007f72d6c25fa0 R15: 00007ffca8321e18 [ 618.051604][T14286] [ 620.693384][T14299] netlink: 'syz.1.2536': attribute type 21 has an invalid length. [ 620.750324][T14299] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2536'. [ 623.723248][T14335] FAULT_INJECTION: forcing a failure. [ 623.723248][T14335] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 623.751724][T14335] CPU: 0 PID: 14335 Comm: syz.1.2547 Not tainted syzkaller #0 [ 623.759273][T14335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 623.769377][T14335] Call Trace: [ 623.772694][T14335] [ 623.775671][T14335] dump_stack_lvl+0x18c/0x250 [ 623.780684][T14335] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 623.787056][T14335] ? show_regs_print_info+0x20/0x20 [ 623.792566][T14335] ? load_image+0x420/0x420 [ 623.797321][T14335] ? should_fail_ex+0x341/0x4c0 [ 623.802835][T14335] should_fail_ex+0x394/0x4c0 [ 623.807643][T14335] _copy_to_user+0x2f/0xa0 [ 623.812601][T14335] simple_read_from_buffer+0xe7/0x150 [ 623.818294][T14335] proc_fail_nth_read+0x1e8/0x260 [ 623.823454][T14335] ? proc_fault_inject_write+0x360/0x360 [ 623.829200][T14335] ? fsnotify_perm+0x1db/0x5e0 [ 623.834505][T14335] ? fsnotify_perm+0x271/0x5e0 [ 623.840019][T14335] ? proc_fault_inject_write+0x360/0x360 [ 623.846424][T14335] vfs_read+0x298/0x990 [ 623.850643][T14335] ? kernel_read+0x1e0/0x1e0 [ 623.855259][T14335] ? __fget_files+0x28/0x460 [ 623.860434][T14335] ? __fget_files+0x3fc/0x460 [ 623.865245][T14335] ? __fdget_pos+0x2a3/0x330 [ 623.869866][T14335] ? ksys_read+0x74/0x260 [ 623.874252][T14335] ksys_read+0x151/0x260 [ 623.878717][T14335] ? vfs_write+0x9a0/0x9a0 [ 623.883162][T14335] ? __x64_sys_read+0x70/0x90 [ 623.887991][T14335] do_syscall_64+0x55/0xb0 [ 623.892437][T14335] ? clear_bhb_loop+0x40/0x90 [ 623.897126][T14335] ? clear_bhb_loop+0x40/0x90 [ 623.901847][T14335] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 623.907763][T14335] RIP: 0033:0x7f939ed5e6ce [ 623.912201][T14335] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 623.932173][T14335] RSP: 002b:00007f939fce0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 623.940783][T14335] RAX: ffffffffffffffda RBX: 00007f939fce16c0 RCX: 00007f939ed5e6ce [ 623.948793][T14335] RDX: 000000000000000f RSI: 00007f939fce10a0 RDI: 000000000000000e [ 623.957155][T14335] RBP: 00007f939fce1090 R08: 0000000000000000 R09: 0000000000000000 [ 623.965247][T14335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 623.973433][T14335] R13: 00007f939f026038 R14: 00007f939f025fa0 R15: 00007fffb72bf118 [ 623.981556][T14335] [ 625.088896][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.096017][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.530040][T14372] mac80211_hwsim hwsim35 wlan1: entered allmulticast mode [ 626.670921][T14412] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.791161][T14417] netlink: 'syz.1.2575': attribute type 10 has an invalid length. [ 626.844281][T14417] team0: Device veth1_vlan failed to register rx_handler [ 626.858184][T14420] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.2575'. [ 627.062156][T14419] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.2577'. [ 627.940207][T14443] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2585'. [ 627.966388][T14443] debugfs: Directory '!' with parent 'ieee80211' already present! [ 628.310274][T14453] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2588'. [ 628.394824][T14451] netlink: 'syz.1.2587': attribute type 10 has an invalid length. [ 628.418830][T14451] bridge0: port 2(bridge_slave_1) entered disabled state [ 628.472853][T14451] bridge_slave_1: left allmulticast mode [ 628.487497][T14451] bridge_slave_1: left promiscuous mode [ 628.502906][T14451] bridge0: port 2(bridge_slave_1) entered disabled state [ 628.569616][T14451] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 628.680525][T14462] netlink: 'syz.4.2590': attribute type 10 has an invalid length. [ 628.712290][T14462] macvlan0: entered promiscuous mode [ 628.718637][T14462] macvlan0: entered allmulticast mode [ 628.858673][T14462] veth1_vlan: entered allmulticast mode [ 628.935942][T14462] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 629.510957][T14478] netlink: 64535 bytes leftover after parsing attributes in process `syz.4.2595'. [ 629.746744][T14480] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.2596'. [ 630.102150][T14488] sit0: entered allmulticast mode [ 630.363371][T14496] sit0: entered promiscuous mode [ 632.017111][T14531] netlink: 'syz.1.2612': attribute type 11 has an invalid length. [ 632.049671][T14531] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2612'. [ 632.094130][T14530] netlink: 'syz.1.2612': attribute type 11 has an invalid length. [ 632.111544][T14530] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2612'. [ 632.500538][T14548] netlink: 'syz.0.2619': attribute type 21 has an invalid length. [ 632.519608][T14548] netlink: 'syz.0.2619': attribute type 1 has an invalid length. [ 632.721216][T14552] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.2615'. [ 632.883557][T14545] syzkaller0: entered promiscuous mode [ 632.889426][T14545] syzkaller0: entered allmulticast mode [ 638.933305][T14597] netlink: 'syz.1.2630': attribute type 1 has an invalid length. [ 638.949183][T14597] netlink: 194236 bytes leftover after parsing attributes in process `syz.1.2630'. [ 639.896062][T14610] mac80211_hwsim hwsim36 wlan0: entered promiscuous mode [ 639.909771][T14610] mac80211_hwsim hwsim36 wlan0: entered allmulticast mode [ 640.074466][T14624] netlink: 'syz.0.2636': attribute type 29 has an invalid length. [ 640.109028][T14624] netlink: 'syz.0.2636': attribute type 29 has an invalid length. [ 640.148530][T14625] netlink: 'syz.0.2636': attribute type 29 has an invalid length. [ 640.217741][T14629] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2639'. [ 640.537829][T14639] netlink: 'syz.0.2643': attribute type 10 has an invalid length. [ 640.558807][T14639] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2643'. [ 641.196614][T14653] netlink: 'syz.1.2646': attribute type 10 has an invalid length. [ 641.218732][T14653] netlink: 1131 bytes leftover after parsing attributes in process `syz.1.2646'. [ 641.442776][T14657] netlink: 'syz.1.2648': attribute type 29 has an invalid length. [ 641.451049][T14657] netlink: 'syz.1.2648': attribute type 29 has an invalid length. [ 641.491328][T14657] netlink: 'syz.1.2648': attribute type 29 has an invalid length. [ 641.501127][T14657] netlink: 'syz.1.2648': attribute type 29 has an invalid length. [ 641.904216][T14673] netlink: 16098 bytes leftover after parsing attributes in process `syz.4.2653'. [ 642.357757][T14687] geneve0: entered promiscuous mode [ 643.724922][T14717] syzkaller0: tun_chr_ioctl cmd 2147767506 [ 644.326493][T14739] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.2680'. [ 644.539998][T14742] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.2681'. [ 645.752134][T14754] validate_nla: 5 callbacks suppressed [ 645.752179][T14754] netlink: 'syz.1.2684': attribute type 10 has an invalid length. [ 645.776161][T14754] mac80211_hwsim hwsim35 wlan1: left allmulticast mode [ 646.114210][T14754] team0: Port device wlan1 added [ 646.281990][T14764] net_ratelimit: 43 callbacks suppressed [ 646.282011][T14764] A link change request failed with some changes committed already. Interface Q6`Ҙ may have been left with an inconsistent configuration, please check. [ 646.348025][T14769] netlink: 'syz.0.2687': attribute type 10 has an invalid length. [ 648.788368][T14815] netlink: 16126 bytes leftover after parsing attributes in process `syz.4.2702'. [ 649.130595][T14832] netlink: 830 bytes leftover after parsing attributes in process `syz.4.2707'. [ 649.697657][T14850] netlink: 'syz.0.2712': attribute type 2 has an invalid length. [ 649.742903][T14850] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2712'. [ 650.052472][T14863] netlink: 'syz.2.2716': attribute type 3 has an invalid length. [ 650.060333][T14863] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2716'. [ 650.126649][T14863] netlink: 'syz.2.2716': attribute type 10 has an invalid length. [ 650.166556][T14863] bridge0: port 2(bridge_slave_1) entered disabled state [ 650.219010][T14863] bridge_slave_1: left allmulticast mode [ 650.224970][T14863] bridge_slave_1: left promiscuous mode [ 650.231027][T14863] bridge0: port 2(bridge_slave_1) entered disabled state [ 650.263982][T14863] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 650.612895][T14883] netlink: 'syz.4.2722': attribute type 39 has an invalid length. [ 650.932791][T14888] netlink: 'syz.1.2724': attribute type 2 has an invalid length. [ 650.940633][T14888] netlink: 'syz.1.2724': attribute type 8 has an invalid length. [ 651.001870][T14888] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2724'. [ 652.016866][T14902] netlink: 'syz.0.2729': attribute type 4 has an invalid length. [ 652.564102][T14889] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.2722'. [ 652.599299][T14889] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.2722'. [ 652.643794][T14883] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.2722'. [ 652.676189][T14904] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.2722'. [ 654.548138][T13428] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 654.558495][T13428] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 654.568066][T13428] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 654.577834][T13428] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 654.592738][T13428] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 654.600480][T13428] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 654.707637][T14946] netlink: 'syz.1.2743': attribute type 10 has an invalid length. [ 654.906266][T14948] netlink: 'syz.4.2744': attribute type 1 has an invalid length. [ 654.942670][T14948] netlink: 'syz.4.2744': attribute type 2 has an invalid length. [ 654.979411][T14948] netlink: 'syz.4.2744': attribute type 2 has an invalid length. [ 655.020004][T14948] netlink: 'syz.4.2744': attribute type 3 has an invalid length. [ 655.055633][T14948] netlink: 'syz.4.2744': attribute type 4 has an invalid length. [ 655.109399][T14948] netlink: 'syz.4.2744': attribute type 5 has an invalid length. [ 655.138224][T14948] netlink: 126304 bytes leftover after parsing attributes in process `syz.4.2744'. [ 655.256692][T14946] team0 (unregistering): Port device team_slave_0 removed [ 655.280985][T14946] team0 (unregistering): Port device team_slave_1 removed [ 655.314791][T14946] team0 (unregistering): Port device wlan1 removed [ 655.446644][T12989] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.714032][T12989] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.867784][T12989] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 656.681573][T13428] Bluetooth: hci3: command tx timeout [ 656.720232][T14949] chnl_net:caif_netlink_parms(): no params data found [ 657.054020][T12989] ip6gretap0 (unregistering): left allmulticast mode [ 657.060825][T12989] ip6gretap0 (unregistering): left promiscuous mode [ 657.099374][T15003] validate_nla: 6 callbacks suppressed [ 657.099393][T15003] netlink: 'syz.1.2758': attribute type 29 has an invalid length. [ 657.118648][T12989] : port 1(ip6gretap0) entered disabled state [ 657.158877][T15003] netlink: 'syz.1.2758': attribute type 3 has an invalid length. [ 657.225739][T15003] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2758'. [ 657.756546][T14949] bridge0: port 1(bridge_slave_0) entered blocking state [ 657.786524][T14949] bridge0: port 1(bridge_slave_0) entered disabled state [ 657.816678][T14949] bridge_slave_0: entered allmulticast mode [ 657.852674][T14949] bridge_slave_0: entered promiscuous mode [ 657.964894][T14949] bridge0: port 2(bridge_slave_1) entered blocking state [ 657.991634][T14949] bridge0: port 2(bridge_slave_1) entered disabled state [ 657.998996][T14949] bridge_slave_1: entered allmulticast mode [ 658.033175][T14949] bridge_slave_1: entered promiscuous mode [ 658.439345][T15031] netlink: 'syz.4.2761': attribute type 10 has an invalid length. [ 658.490700][T15031] syz_tun: entered promiscuous mode [ 658.535885][T15031] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 658.578498][T14949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 658.720185][T14949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 658.767150][T13428] Bluetooth: hci3: command tx timeout [ 659.007939][T14949] team0: Port device team_slave_0 added [ 659.019283][T14949] team0: Port device team_slave_1 added [ 659.315578][T14949] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 659.344434][T14949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 659.384528][T14949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 659.406556][T14949] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 659.421303][T14949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 659.541691][T14949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 659.866309][T14949] hsr_slave_0: entered promiscuous mode [ 659.928132][T14949] hsr_slave_1: entered promiscuous mode [ 659.962559][T14949] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 659.984394][T14949] Cannot create hsr debugfs directory [ 660.111286][T15067] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2770'. [ 660.514148][T15076] tap0: tun_chr_ioctl cmd 1074025677 [ 660.519748][T15076] tap0: linktype set to 780 [ 660.843198][T13428] Bluetooth: hci3: command tx timeout [ 661.316156][T12989] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 661.333852][T12989] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 661.346164][T12989] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 661.367322][T12989] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 661.384461][T12989] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 661.393608][T12989] batman_adv: batadv0: Removing interface: virt_wifi0 [ 661.401150][T12989] bridge_slave_0: left allmulticast mode [ 661.408768][T12989] bridge_slave_0: left promiscuous mode [ 661.415298][T12989] bridge0: port 1(bridge_slave_0) entered disabled state [ 661.441225][T12989] veth1_macvtap: left allmulticast mode [ 661.448592][T12989] veth1_macvtap: left promiscuous mode [ 661.454361][T12989] veth0_macvtap: left promiscuous mode [ 661.460252][T12989] veth1_vlan: left allmulticast mode [ 661.469678][T12989] veth1_vlan: left promiscuous mode [ 661.483135][T12989] veth0_vlan: left promiscuous mode [ 661.835402][T15117] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2783'. [ 662.794388][T12989] team0 (unregistering): Port device team_slave_1 removed [ 662.854141][T12989] team0 (unregistering): Port device C removed [ 662.921637][T13428] Bluetooth: hci3: command tx timeout [ 663.177551][T15128] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 664.098884][T15154] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.2791'. [ 664.557436][T14949] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 664.562382][T15165] netlink: 'syz.2.2792': attribute type 29 has an invalid length. [ 664.615479][T14949] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 664.650656][T15165] netlink: 'syz.2.2792': attribute type 29 has an invalid length. [ 664.683166][T15166] netlink: 'syz.2.2792': attribute type 29 has an invalid length. [ 664.727177][T14949] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 664.764166][T14949] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 664.877248][T15167] netlink: 'syz.2.2792': attribute type 29 has an invalid length. [ 665.167918][T14949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 665.219847][T14949] 8021q: adding VLAN 0 to HW filter on device team0 [ 665.299222][T12994] bridge0: port 1(bridge_slave_0) entered blocking state [ 665.306499][T12994] bridge0: port 1(bridge_slave_0) entered forwarding state [ 665.350036][T12994] bridge0: port 2(bridge_slave_1) entered blocking state [ 665.357321][T12994] bridge0: port 2(bridge_slave_1) entered forwarding state [ 665.508083][T14949] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 666.405180][T15201] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.2800'. [ 666.562155][T14949] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 666.801031][T14949] veth0_vlan: entered promiscuous mode [ 666.845608][T14949] veth1_vlan: entered promiscuous mode [ 666.958186][T14949] veth0_macvtap: entered promiscuous mode [ 666.992843][T14949] veth1_macvtap: entered promiscuous mode [ 667.049460][T14949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 667.081669][T14949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 667.102324][T14949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 667.121698][T14949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 667.149667][T14949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 667.171820][T14949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 667.192626][T14949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 667.214772][T14949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 667.238909][T14949] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 667.276008][T14949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 667.307459][T14949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 667.327876][T14949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 667.349699][T14949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 667.370056][T14949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 667.395599][T14949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 667.431403][T14949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 667.464985][T14949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 667.497481][T14949] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 667.544746][T14949] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.575746][T14949] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.600471][T14949] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.632345][T14949] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 683.163562][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 683.173054][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 683.181242][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 683.189581][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 683.199651][ T51] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 683.207251][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 684.000469][ T5785] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 684.011091][ T5785] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 684.020407][ T5785] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 684.035469][ T5785] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 684.044020][ T5785] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 684.053031][ T5785] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 684.064604][ T5785] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 684.072931][ T5785] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 684.081206][ T5785] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 684.090280][ T5785] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 684.110734][T13428] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 684.122089][T13428] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 685.241588][T15226] Bluetooth: hci5: command tx timeout [ 686.121573][T15226] Bluetooth: hci6: command tx timeout [ 686.204402][T15226] Bluetooth: hci7: command tx timeout [ 686.533688][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.540172][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.321568][T15226] Bluetooth: hci5: command tx timeout [ 688.201567][T15226] Bluetooth: hci6: command tx timeout [ 688.281467][T15226] Bluetooth: hci7: command tx timeout [ 688.607720][T15226] Bluetooth: hci0: command 0x0406 tx timeout [ 689.401471][T15226] Bluetooth: hci5: command tx timeout [ 690.281569][T15226] Bluetooth: hci6: command tx timeout [ 690.361486][T15226] Bluetooth: hci7: command tx timeout [ 691.481468][T15226] Bluetooth: hci5: command tx timeout [ 692.361573][T15226] Bluetooth: hci6: command tx timeout [ 692.441492][T15226] Bluetooth: hci7: command tx timeout [ 714.210966][T15226] Bluetooth: hci1: command 0x0406 tx timeout [ 715.462471][ T51] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 715.472053][ T51] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 715.481781][ T51] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 715.490977][ T51] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 715.499279][ T51] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 715.506962][ T51] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 744.163905][T15236] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 744.181157][T15236] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 744.189537][T15236] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 744.199512][T15236] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 744.207759][T15236] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 744.215668][T15236] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 744.441970][T15240] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 744.451942][T15240] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 744.460286][T15240] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 744.469204][T15240] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 744.477838][T15240] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 744.485412][T15240] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 745.433263][T15243] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 745.458202][T15243] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 745.467124][T15243] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 745.476027][T15243] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 745.484253][T15243] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 745.492055][T15243] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 747.976829][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.983502][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 775.692737][ T5785] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 775.710358][ T5785] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 775.718900][ T5785] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 775.733674][ T5785] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 775.741808][ T5785] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 775.749323][ T5785] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 785.881289][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 785.888065][ C0] rcu: 0-....: (1 GPs behind) idle=bd24/1/0x4000000000000000 softirq=56350/56361 fqs=5235 [ 785.899223][ C0] rcu: hardirqs softirqs csw/system [ 785.905658][ C0] rcu: number: 1296265 0 0 [ 785.912087][ C0] rcu: cputime: 19735 32754 41 ==> 52520(ms) [ 785.919897][ C0] rcu: (t=10504 jiffies g=76513 q=3211 ncpus=2) [ 785.926234][ C0] CPU: 0 PID: 15191 Comm: syz.1.2798 Not tainted syzkaller #0 [ 785.933702][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 785.943769][ C0] RIP: 0010:__list_add_valid_or_report+0x61/0xf0 [ 785.950122][ C0] Code: 89 e0 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 e7 e8 14 3a a7 fd 49 8b 14 24 4c 39 f2 75 67 4c 89 f0 48 c1 e8 03 42 80 3c 28 00 <74> 08 4c 89 f7 e8 f5 39 a7 fd 49 8b 16 48 39 da 75 5d 4d 39 f7 74 [ 785.969745][ C0] RSP: 0018:ffffc90000007660 EFLAGS: 00000246 [ 785.975829][ C0] RAX: 1ffff11003e7975b RBX: ffffffff8e4e9140 RCX: ffff88802bd28000 [ 785.983809][ C0] RDX: ffff88801f3cbad8 RSI: ffff88801f3cbad8 RDI: ffff88801f3cfad8 [ 785.991802][ C0] RBP: 0000000000001d00 R08: ffffffff8e4e913b R09: 1ffffffff1c9d227 [ 785.999785][ C0] R10: dffffc0000000000 R11: fffffbfff1c9d228 R12: ffffffff8e4e9148 [ 786.007768][ C0] R13: dffffc0000000000 R14: ffff88801f3cbad8 R15: ffff88801f3cfad8 [ 786.015839][ C0] FS: 00007f939fce16c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 786.024782][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 786.031377][ C0] CR2: 0000555574f7c4e8 CR3: 000000005efe9000 CR4: 00000000003506f0 [ 786.039362][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 786.047344][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 786.055422][ C0] Call Trace: [ 786.058748][ C0] [ 786.061609][ C0] ___neigh_create+0x19f2/0x23d0 [ 786.066663][ C0] ? __ipv6_neigh_lookup_noref+0x5a7/0x7d0 [ 786.072522][ C0] ip6_finish_output2+0x156d/0x1620 [ 786.077738][ C0] ? ip6_finish_output2+0x642/0x1620 [ 786.083126][ C0] ? nf_hook+0x390/0x390 [ 786.087474][ C0] ? ip6_finish_output+0x1b2/0x7f0 [ 786.092607][ C0] ? ip6_finish_output+0x567/0x7f0 [ 786.097858][ C0] ndisc_send_skb+0xbb9/0x1480 [ 786.102751][ C0] ? ndisc_alloc_skb+0x18c/0x450 [ 786.107771][ C0] ? ndisc_send_skb+0x201/0x1480 [ 786.112759][ C0] ? ndisc_mc_map+0x680/0x680 [ 786.117452][ C0] ? skb_dst+0xd0/0xd0 [ 786.121577][ C0] ? ipv6_get_lladdr+0x378/0x3e0 [ 786.126529][ C0] ? ipv6_get_lladdr+0x2b/0x3e0 [ 786.131489][ C0] addrconf_rs_timer+0x36b/0x640 [ 786.136529][ C0] ? addrconf_disable_policy_idev+0x480/0x480 [ 786.142623][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 786.148631][ C0] call_timer_fn+0x189/0x540 [ 786.153237][ C0] ? addrconf_disable_policy_idev+0x480/0x480 [ 786.159313][ C0] ? call_timer_fn+0xd2/0x540 [ 786.164001][ C0] ? __run_timers+0x810/0x810 [ 786.168709][ C0] ? addrconf_disable_policy_idev+0x480/0x480 [ 786.174879][ C0] __run_timers+0x570/0x810 [ 786.179431][ C0] ? detach_timer+0x2b0/0x2b0 [ 786.184138][ C0] run_timer_softirq+0x67/0xf0 [ 786.188953][ C0] handle_softirqs+0x27d/0x820 [ 786.193776][ C0] ? read_tsc+0x9/0x20 [ 786.197863][ C0] ? ktime_get+0x24b/0x280 [ 786.202299][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 786.207083][ C0] ? do_softirq+0x1a0/0x1a0 [ 786.211603][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 786.216828][ C0] __irq_exit_rcu+0xd3/0x190 [ 786.221429][ C0] ? irq_exit_rcu+0x20/0x20 [ 786.225949][ C0] irq_exit_rcu+0x9/0x20 [ 786.230198][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 786.235858][ C0] [ 786.238796][ C0] [ 786.241739][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 786.247745][ C0] RIP: 0010:finish_task_switch+0x267/0x8f0 [ 786.253587][ C0] Code: 2e 09 85 c0 0f 84 30 01 00 00 48 85 db 0f 85 4f 01 00 00 0f 1f 44 00 00 4c 89 e7 e8 43 32 38 09 e8 8e 0a 30 00 fb 4c 8b 65 b8 <49> 8d bc 24 f8 15 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 [ 786.273218][ C0] RSP: 0018:ffffc9000348f760 EFLAGS: 00000286 [ 786.279331][ C0] RAX: d2a1ffb71271b300 RBX: 0000000000000000 RCX: d2a1ffb71271b300 [ 786.287313][ C0] RDX: dffffc0000000000 RSI: ffffffff8acacb60 RDI: ffffffff8b1cfa20 [ 786.295297][ C0] RBP: ffffc9000348f7b0 R08: ffffffff911e75ff R09: 1ffffffff223cebf [ 786.303367][ C0] R10: dffffc0000000000 R11: fffffbfff223cec0 R12: ffff88802bd28000 [ 786.311360][ C0] R13: 1ffff110171c79a9 R14: dffffc0000000000 R15: ffff8880b8e3cd48 [ 786.319375][ C0] __schedule+0x15b6/0x4660 [ 786.323928][ C0] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 786.331230][ C0] ? asan.module_dtor+0x20/0x20 [ 786.336095][ C0] ? mark_lock+0x94/0x320 [ 786.340451][ C0] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 786.347661][ C0] ? lock_chain_count+0x20/0x20 [ 786.352522][ C0] ? preempt_schedule+0xc0/0xd0 [ 786.357387][ C0] preempt_schedule_common+0x82/0xc0 [ 786.362695][ C0] preempt_schedule+0xc0/0xd0 [ 786.367381][ C0] ? schedule_preempt_disabled+0x20/0x20 [ 786.373032][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 786.379210][ C0] preempt_schedule_thunk+0x1a/0x30 [ 786.384429][ C0] ? smp_call_function_single+0x488/0x5a0 [ 786.390165][ C0] smp_call_function_single+0x48d/0x5a0 [ 786.395720][ C0] ? event_function+0x300/0x300 [ 786.400619][ C0] ? flush_smp_call_function_queue+0x250/0x250 [ 786.406823][ C0] ? event_function+0x300/0x300 [ 786.411712][ C0] perf_install_in_context+0x5bb/0x920 [ 786.417188][ C0] ? alloc_file_pseudo+0x1ae/0x210 [ 786.422316][ C0] ? exclusive_event_installable+0x2c0/0x2c0 [ 786.428307][ C0] ? add_event_to_ctx+0x1170/0x1170 [ 786.433533][ C0] ? anon_inode_getfile+0x109/0x1a0 [ 786.438744][ C0] ? perf_event__header_size+0x165/0x220 [ 786.444393][ C0] __se_sys_perf_event_open+0x1841/0x1c60 [ 786.450122][ C0] ? security_bpf+0x7e/0xa0 [ 786.454682][ C0] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 786.460339][ C0] ? lock_chain_count+0x20/0x20 [ 786.465209][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 786.470416][ C0] ? __x64_sys_perf_event_open+0x20/0xc0 [ 786.476066][ C0] do_syscall_64+0x55/0xb0 [ 786.480501][ C0] ? clear_bhb_loop+0x40/0x90 [ 786.485186][ C0] ? clear_bhb_loop+0x40/0x90 [ 786.489903][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 786.495817][ C0] RIP: 0033:0x7f939ed9de99 [ 786.500255][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 786.519872][ C0] RSP: 002b:00007f939fce1028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 786.528308][ C0] RAX: ffffffffffffffda RBX: 00007f939f025fa0 RCX: 00007f939ed9de99 [ 786.536291][ C0] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000300 [ 786.544273][ C0] RBP: 00007f939ee33eaf R08: 0000000000000000 R09: 0000000000000000 [ 786.552261][ C0] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 786.560240][ C0] R13: 00007f939f026038 R14: 00007f939f025fa0 R15: 00007fffb72bf118 [ 786.568237][ C0] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 789.491791][T15251] Bluetooth: hci3: command 0x0406 tx timeout