last executing test programs: 15m25.291657801s ago: executing program 0 (id=3218): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xa, 0x5, &(0x7f0000000680)=ANY=[@ANYBLOB="660a0000000000006111a30000000000180000000000000101000000000000009500"], &(0x7f0000000000)='GPL\x00'}, 0x94) 15m25.131648295s ago: executing program 0 (id=3221): socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000880)={0x2, 0x4e1c, @multicast2=0xe000000d}, 0x10, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=r0, @ANYBLOB="ac1417bb008000001100000038000000000000000000000007000000070e43aa5889c23ef593ae6bcd1844187c8073b5c9e00000000600000003000000080000000900001400000000000000000000000100000005000000000000001400000000000000000000000700000001000000000000001400000000000000000000000100000003000000000000001c000000000000000000000008"], 0xc0}, 0x240008c4) 15m24.843086191s ago: executing program 0 (id=3223): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) socket$kcm(0x2, 0x200000000000001, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) r0 = socket$kcm(0x10, 0x2, 0x10) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x40) r1 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1b0000001a007f029e", 0x9}, {&(0x7f0000000200)="68cabf2dfb58fc0a01008888ffff", 0xe}], 0x2}, 0x0) recvmsg$unix(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000000240)=""/4096, 0x1000}], 0x1}, 0x0) 15m23.675265277s ago: executing program 0 (id=3235): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x770f3639, 0x7}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x80, &(0x7f0000000140)=[{0x0}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800000000000000100100000d0000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000601fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) 15m23.307606826s ago: executing program 0 (id=3238): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x13, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000001fffffff00b7080000020000006b8a00fe00000000c7080000010000007b8af0ff00000000bda100000000000007000000f8ffffffbfa400000000000007040000f0ffffffb7020000080000fa18230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000002200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 15m23.051607561s ago: executing program 0 (id=3243): syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000fc0)={0x3, 0x80, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x400, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23ffffff, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0xf, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x106}, 0x0, 0x10, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000240)=r1}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x101c0) write$cgroup_subtree(r4, &(0x7f0000000180)=ANY=[@ANYRES8=r3, @ANYBLOB="3ee901"], 0x9a) ioctl$TUNSETSNDBUF(r4, 0x400454d4, &(0x7f0000000340)=0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000003c0)="b9808c8e5ceba125153bdf11f98e", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_clone(0x40100000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0xc0126080, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x1c, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7020000000000008500000008000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b8000005000000a0", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) syz_clone(0x41980100, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) syz_clone(0x2138a100, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4040}, 0x8880) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) 15m7.996398731s ago: executing program 32 (id=3243): syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000fc0)={0x3, 0x80, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x400, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23ffffff, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0xf, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x106}, 0x0, 0x10, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000240)=r1}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x101c0) write$cgroup_subtree(r4, &(0x7f0000000180)=ANY=[@ANYRES8=r3, @ANYBLOB="3ee901"], 0x9a) ioctl$TUNSETSNDBUF(r4, 0x400454d4, &(0x7f0000000340)=0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000003c0)="b9808c8e5ceba125153bdf11f98e", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_clone(0x40100000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0xc0126080, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x1c, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7020000000000008500000008000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b8000005000000a0", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) syz_clone(0x41980100, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) syz_clone(0x2138a100, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4040}, 0x8880) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) 2m44.19779959s ago: executing program 4 (id=7105): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40, 0xe59}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001240)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d19f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981179186e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2a434b9048ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d6356e4450d043ed20d313cd56a56d2e4cdf26f19af9a41695a58a9b6b45af1ca939b18d7b57791b99cfc6ec2a0848c29fea4eb8b82395a38e8aca5ab4bfc2ad8acf2e51b766f8ecd16194ad41ec097082f7fa32179ef99dafa6c2aa206a25ddc33e6f0a09169eeff428c71f54e1dfcfcd7cfc8f6e169f11c47d504"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8712360000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x200000000000000) socketpair(0x2, 0x2, 0x11, 0x0) r6 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000000)='cpu<=0||!') syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, 0x0) 2m43.324120868s ago: executing program 4 (id=7109): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000340)) r0 = socket$kcm(0x2, 0x922000000001, 0x106) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x3, 0x830b}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xe, 0x17, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x29, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x25, 0x0, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x37}}, &(0x7f0000000480)='GPL\x00'}, 0x80) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x4044) sendmsg$inet(0xffffffffffffffff, 0x0, 0x48000) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) 2m42.7415291s ago: executing program 4 (id=7115): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0xfe, 0x1, 0x4, 0x1, 0x0, 0x7, 0x90200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x3c0c, 0x200000000000c8, 0xfffffffc, 0x5, 0x400000000003, 0x4, 0x0, 0x0, 0x10, 0x0, 0xd870}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) r1 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0x11, &(0x7f0000000000), 0x8) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce81287a8800fe08000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef) 2m41.498564676s ago: executing program 4 (id=7121): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019000800004460bc06000000a701251e6182949a3651fbffffffd4d4938037e7c7a0a03400ac094fe3c51c268811000096859fc57a000000", 0x51}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8000) recvmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000000700)=""/176, 0xb0}, {&(0x7f0000000940)=""/4060, 0xfdc}, {&(0x7f0000000240)=""/101, 0x65}, {&(0x7f0000000600)=""/231, 0xe7}, {&(0x7f00000000c0)=""/199, 0xc7}, {&(0x7f00000019c0)=""/4085, 0xff5}], 0x6}, 0x120) recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0xffc3, 0x0}, 0x80) 2m40.295052031s ago: executing program 4 (id=7129): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, 0x0, 0x8000) recvmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000000700)=""/176, 0xb0}, {&(0x7f0000000940)=""/4060, 0xfdc}, {&(0x7f00000007c0)=""/190, 0xbe}, {&(0x7f00000019c0)=""/4085, 0xff5}], 0x4}, 0x120) recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0xffc3, 0x0}, 0x80) 2m39.270858782s ago: executing program 4 (id=7138): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000001, 0x8}, 0x7602, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r4 = syz_clone(0x41304000, &(0x7f0000000340)="de4fdd7b7330ffca8c7cc43c4674c5a9947f5f8bcacdc0cdfee5adc5c6d2321a32f976c85c0bd66ee108d5f0d1aa8abcd3b73383755f44033850828a2ab95fb7e6c1c411e7b70518e7381a6e0f785e439d70fef01d27aaa2d53646eca8aca0915810487e3406eabde3b4958319b4a6fd2f295589c975b42d3803fdbf93b5008d8730f30278a7b7e303dc29e4fd287f928a66a953a1baed51b12818f256552c06db2bfe38f01c921e0b619ce2e718bdede473d7d0e2ce6fde69377671c1a8a2060f5adef25cac998393e4a17c7bd97f64ba5c90857e25a56cbee5ab73b5b0eb4fbfc976e0752b32", 0xe7, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000680)="f7e2a7eb6bed1b26a91f8d84ec6c9223619ffbe3c25588eecf385154d4d485b42b20b08b952ff662416f114fb73c84d2a9f10a43b2ee449bf33ba9ce2b54598c89abec5f8eb411726dec0f5743cc4d9036dc932c475e9cf96dc2c279446f21f1939731866157eb675b7312f7fe3ca65c7e9b9b69b96af8216604ca9fa8f203e570eab9c77d22b6b41f4e366edfda84e35e16bcadde28fc461290924d62336f15f7b88e5ac97cefeb78a84bc05e0d3eb6d42cbc71902b0401208ccd6740277d78120a68c9c9a20caf844402c232957ec13352ba43edf243a1c5f167") write$cgroup_pid(r3, &(0x7f00000000c0)=r4, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f00000001c0), 0x12) 2m24.141226339s ago: executing program 33 (id=7138): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000001, 0x8}, 0x7602, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r4 = syz_clone(0x41304000, &(0x7f0000000340)="de4fdd7b7330ffca8c7cc43c4674c5a9947f5f8bcacdc0cdfee5adc5c6d2321a32f976c85c0bd66ee108d5f0d1aa8abcd3b73383755f44033850828a2ab95fb7e6c1c411e7b70518e7381a6e0f785e439d70fef01d27aaa2d53646eca8aca0915810487e3406eabde3b4958319b4a6fd2f295589c975b42d3803fdbf93b5008d8730f30278a7b7e303dc29e4fd287f928a66a953a1baed51b12818f256552c06db2bfe38f01c921e0b619ce2e718bdede473d7d0e2ce6fde69377671c1a8a2060f5adef25cac998393e4a17c7bd97f64ba5c90857e25a56cbee5ab73b5b0eb4fbfc976e0752b32", 0xe7, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000680)="f7e2a7eb6bed1b26a91f8d84ec6c9223619ffbe3c25588eecf385154d4d485b42b20b08b952ff662416f114fb73c84d2a9f10a43b2ee449bf33ba9ce2b54598c89abec5f8eb411726dec0f5743cc4d9036dc932c475e9cf96dc2c279446f21f1939731866157eb675b7312f7fe3ca65c7e9b9b69b96af8216604ca9fa8f203e570eab9c77d22b6b41f4e366edfda84e35e16bcadde28fc461290924d62336f15f7b88e5ac97cefeb78a84bc05e0d3eb6d42cbc71902b0401208ccd6740277d78120a68c9c9a20caf844402c232957ec13352ba43edf243a1c5f167") write$cgroup_pid(r3, &(0x7f00000000c0)=r4, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f00000001c0), 0x12) 1m6.862336743s ago: executing program 2 (id=7603): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="1803000000000000000000000400000085100000060000123448eb9a93628ac2319d8c00180000000000000000000000000000006500000000000000180002000000000000000000000000009500000000000000040300000000000095000000000000005f9176e10a9c20e59510b1f3a5266ce8ce66fdd1ec8cd0393091bf61df02f8764ab8be0c302739d9a842c400f60a61cbc0a9a411fda376998bbdc75e85945ca4b62c28e5"], &(0x7f0000000000)='GPL\x00'}, 0x94) 1m6.280288255s ago: executing program 2 (id=7604): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x8}, 0x11c002, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f97e24fc602f000e0040740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x74000000}, 0x0) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000001500)=""/4073, 0xfe9}], 0x1}, 0x12040) close(0x3) r5 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000100)) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x300, &(0x7f00000001c0)=[{&(0x7f0000000940)="2e00000010008188e6b62aa73772cc9f1ba1f8482e0000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0x0) r6 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup(r6, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) r7 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}, 0xa5}, r7, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$kcm(0x11, 0x2, 0x300) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x890b, &(0x7f0000000580)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12t\x02\x006\xe3\xd7\\b\x00\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x01\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(\x04\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x02\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x04.\x9aL\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0xbb, &(0x7f0000000280)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x58, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001b00)={r12, 0xe0, &(0x7f0000001a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400001d0, &(0x7f0000000700), ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6, &(0x7f0000000740)=[0x0, 0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xde, &(0x7f0000000240)=[{}], 0x8, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0xfa, 0x8, 0x8, &(0x7f00000019c0)}}, 0x10) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x9, 0x2, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r15 = socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$kcm(r15, &(0x7f0000000380)={&(0x7f0000000000)=@phonet={0x23, 0x0, 0x0, 0x7}, 0x14, &(0x7f0000000340)=[{&(0x7f0000000200)="b3", 0x1}, {0x0}], 0x2}, 0x0) r16 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001b80)=@o_path={&(0x7f0000001b40)='./file0\x00', 0x0, 0x4008, r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000025c0)={0xd, 0xe, &(0x7f0000001d00)=ANY=[@ANYBLOB="b7080000000000007b8af8ff000089f662dbabb4e046220000b7080000ad0000007b8af0ff00000000bfa100000000000007010000f8f1ffffbfa400000000000007040000f0ffffffb7020000080000001823004f", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a50000000578090008000000"], &(0x7f0000000200)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x17, '\x00', r13, @sock_ops=0x3, r8, 0x8, &(0x7f0000000680)={0x4, 0x1}, 0x8, 0x10, &(0x7f00000006c0)={0x3, 0x4, 0x7, 0x1d}, 0x10, r14, r12, 0x3, &(0x7f0000001bc0)=[r16], &(0x7f0000001c00)=[{0x2, 0x5, 0x2, 0xa}, {0x0, 0x3, 0x5, 0x4}, {0x1, 0x2, 0x1, 0x9}], 0x10, 0x100}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r11, 0x40042408, r12) 1m4.435248384s ago: executing program 2 (id=7624): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x7, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x5, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x1, @perf_config_ext={0x105, 0x10001}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x9, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0x11, 0x200000000000002, 0x300) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0xfffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594", 0xf}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="11000000040000000400"], 0x48) socket$kcm(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) close(0x4) recvmsg(r3, &(0x7f0000002440)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0x13, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002420702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000022850000009400000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0xf8, 0x0, 0x0, 0x11}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB], 0xfe33) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x40841, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) 1m3.103192151s ago: executing program 2 (id=7623): socket$kcm(0x2, 0x2, 0x84) socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x4) socket$kcm(0xa, 0x5, 0x0) perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2d0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x10c002, 0xac5d, 0x10000200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, 0x0) close(0xffffffffffffffff) r1 = socket$kcm(0xa, 0x5, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = socket$kcm(0x2b, 0x1, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x17) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={r3}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=ANY=[@ANYRES8=r1, @ANYRES32=r3, @ANYBLOB="0000000000000000610000000000000095"], &(0x7f0000000d40)='syzkaller\x00'}, 0x94) setsockopt$sock_attach_bpf(r2, 0x0, 0x60, 0x0, 0x20) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[@ANYBLOB='-4'], 0xc) sendmsg$kcm(r1, &(0x7f0000000600)={&(0x7f0000000100)=@l2tp={0x2, 0x0, @private=0xa010100}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000003280)=ANY=[@ANYBLOB="20000000000000008400000008000000941f6721e757691d02000000000000001800000000000000840000000700000062"], 0x38}, 0x41) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="1808000000000000180200"/28, @ANYRES32, @ANYRES8], &(0x7f0000000280)='GPL\x00', 0xffffffff, 0xde, &(0x7f0000000340)=""/222}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0xfc, 0x0, 0x0, 0x0, 0x2000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000002}, 0x0, 0x5, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10}, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r6, 0x29, 0x6, 0x0, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 1m2.195936131s ago: executing program 2 (id=7629): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000800000004000000000000120000000003000000000000080100000000000000000000020200000000002e2e5f"], 0x0, 0x44}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x9}, 0x0, 0xa, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x6, 0x8, &(0x7f0000000000)=r0, 0x4) r1 = socket$kcm(0x10, 0x2, 0x4) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="24e84b13d10b8197015df07dcf4732", 0xf}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000001c0)=@rxrpc=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000280)="f8363c677c008a6677f1a9bab6053b555601b1d32186221c9f1252303ebbc227d343f7bdaf06b16c182deb669208a84dc406422a4fbfa58c8ac13f23364aea27d7a6d9fc9f249e1479779dfb73bea698cf42e2aecf600d2943d4bc35a89a6fa4e96de40de9077a8acc1ff8d8f588db944f5e744765ba931d08a3bcf138fac02d2c2ad6bf7c23a246aa5a15ce36f083e3582e35145ea5eafd5018f2ade993d1b34f55abf70133bb312d208dccdabd907a15065388913595", 0xb7}], 0x1, &(0x7f0000000480)=[{0x90, 0x10d, 0x7, "ebbbeac6eaf6bf44d3f16d9276dc593d1de4eb7b12b9928720aefe1f5d655fefd5ad16aa038eb20696b28d595f8b05797acf0464eb8ca1c81bff362d2b9e845b708029292930ead057de2d7f1e06c253c6885a0339ccee3197c42582de64d5195b568a8340494321bc194beba5e2255a9d2577c5f35414e9ce0d"}, {0x50, 0x1, 0x10001, "e5a3d17495f17ab6e52754f731a8b1dc6a0e24a654073bd87f97b92c789a0a1ab6b2095618b4aea2ac505e74a1961d59ecc813a9ee976b9ab09e2e"}], 0xe0}, 0xc000) socket$kcm(0xa, 0x3, 0x73) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @multicast}) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz0\x00', 0x200002, 0x0) 1m0.618369383s ago: executing program 2 (id=7638): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="d80000001d0081054e81f783db4cb904021d080006010000e8fc3ca10a0015000600142603600e1208000f0000000401a80001000047880000000000035c0461c1d67f6f94007134cf6efb8000feea60d8a8a007a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6279d54ca397c388b0dd6e4edef3d7b00"/216, 0xd8}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x2, 0x3, 0x84) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_config_ext={0x9, 0xf8e}, 0x4481, 0x0, 0x0, 0x0, 0x2, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x4}, 0x108282, 0xac5d, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000560013f16ff28e036afc004a07"], 0xfe33) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) syz_clone(0x62005000, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="0b00000007000000030001000100000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000015000000000000000000000006000000ffffedff000000006c9b912828e80700c9b919be5e76f54fd7050856b680eb8b3d00b73e57cc01d33198069b6b5b1529d9edc462625d2684bbd193bdb62eb1dc80eb0d150c94f09ea605c360cf4103d497348513160d63a981f6439513beb0fd9e5cb51e5da13ed8fd6bf83ed8d9663fb115a192589e9f296e8b82f7770220fd4783a1cc52ec0fa89bb65deed5228617c72e79d5bf5220d5201b35f5682eb12f0a06e454e174d46c04aa621900"/213], 0x50) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0xfd, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x6, 0x9922, 0x2, 0x7, 0x0, 0xe, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x27, 0x5, 0x0, &(0x7f00000000c0)="0005000000", 0x0, 0x405, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmsg$unix(r3, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r5, &(0x7f0000000180)=ANY=[@ANYRES8=r4, @ANYBLOB="3ee901"], 0x9a) sendmsg$inet(r1, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000400)=[{&(0x7f0000001040)="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", 0x42b}, {&(0x7f0000000740)="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", 0x48f}], 0x2, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x14}, @local}}}], 0x20}, 0x4080) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x2}, 0x8000, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4861, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$SIOCSIFHWADDR(r6, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="8000230d1100"}) 45.416379441s ago: executing program 34 (id=7638): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="d80000001d0081054e81f783db4cb904021d080006010000e8fc3ca10a0015000600142603600e1208000f0000000401a80001000047880000000000035c0461c1d67f6f94007134cf6efb8000feea60d8a8a007a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6279d54ca397c388b0dd6e4edef3d7b00"/216, 0xd8}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x2, 0x3, 0x84) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_config_ext={0x9, 0xf8e}, 0x4481, 0x0, 0x0, 0x0, 0x2, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x4}, 0x108282, 0xac5d, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000560013f16ff28e036afc004a07"], 0xfe33) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) syz_clone(0x62005000, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="0b00000007000000030001000100000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000015000000000000000000000006000000ffffedff000000006c9b912828e80700c9b919be5e76f54fd7050856b680eb8b3d00b73e57cc01d33198069b6b5b1529d9edc462625d2684bbd193bdb62eb1dc80eb0d150c94f09ea605c360cf4103d497348513160d63a981f6439513beb0fd9e5cb51e5da13ed8fd6bf83ed8d9663fb115a192589e9f296e8b82f7770220fd4783a1cc52ec0fa89bb65deed5228617c72e79d5bf5220d5201b35f5682eb12f0a06e454e174d46c04aa621900"/213], 0x50) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0xfd, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x6, 0x9922, 0x2, 0x7, 0x0, 0xe, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x27, 0x5, 0x0, &(0x7f00000000c0)="0005000000", 0x0, 0x405, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmsg$unix(r3, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r5, &(0x7f0000000180)=ANY=[@ANYRES8=r4, @ANYBLOB="3ee901"], 0x9a) sendmsg$inet(r1, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000400)=[{&(0x7f0000001040)="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", 0x42b}, {&(0x7f0000000740)="0d113311d7af2c7d0a6b8bcc9ab77974b333be01b290ffa314fa9cb227694f5b326544c9c1d4563f937db955e0373639d6292234c292c5615d82c851b91585b7ad8748faf0d8e5d65994adbb137c7851edbb4a3485ffd64e1caf3117861898d4ba6e04c15a94496cc8c23793136c93ba88db52f098b37fcf3f6c16df2f500f5b2005def16d46d96544649249c26098820ed60c94032f6fc134664ae10a613d15d140a948b4b45471dea34c0f527fca192dfa77f262ec22b914476238014687f231fe251b57f7689e4850e2c1eaf49ad1773a1f971ba9d8a900e5e2121370ebf1a0c8af1eca3921046277767b7740008731fdcffcddbc2cb867ea2959a735c164e4c650454d43dd6034dd22e31d94df846ab6d1b1e7c2463e349ffda978a5e783bdda9e6fafb2ca73fb02ccc54ab9309988741fdfbef9000b605a2d3890468834f7d7f705f8da1905283343b78f30bc48c2c3c351e955823ca8e6e82f695252f0aecc64025cf1e26d4be77f4b4f96d9b45226436aa43cc78afe578fe8c44047eb9f66bfbc3f3daeaadda3c088299586d35c7a868a8122428161cff48106cd5529695a27ba78f1d124cab474705be18a40ad26131f48d25f1e1c7a19e23433ff6d6284cf70278d53d12b41a171ec23143601a31732cf143f386a4fdc49bd8f1c10af3a4a3f2d8afdd131cdee0e6aebfdc1fef1831abaa01741cf774eeed7a043d6368c2fd43371633089fa9fa50c7e41185d32cdbc49c0bec369fdd7ab788bbe8cc87676f8597dc626556bbaef0bcd5e1a43bcc4e2c59f310e1c2bf2fea0f360b33408fb2e1a1024e3d88dff19496f384b0b4ea97c0281904010a7eb34a3d6bec959f6d59a0016d28da834b382e6e2c606236dcd17925b95f667e899a6b59ef20c1a96f0053ffb7c5a07b8ac6f20fa791d15c19b814f049e0b2da6f5799daf4d345aa475766367f99c160e8a08fd7f1e42e5b38eacba4f40eed3fccbfb89f4b644afb1e76eb4913e27e1540e2d4ec8ed8748b4756824a65c933d4120d1c2fc7f343ce0958478a97aa352fc2ddaf917fb2ae7bcce4d6f9d4b32387baff970a701ce01a73937cf0f12f6e41b86a06ea1b971d1ad7f92c0562a7778ec6c060000717217834e25b4b25f06134bbfc29f125c36c7e80e92a13127c70b37da8f1be6a3948593a6693fa07a91b00405d8ea47c88ccd02e7a64e0bd31d115c93f7c0dfe1c51d338b08c9825a29802ba8bc5c4655072da6dd2c27ce6684e1c2dd7dc95dcf90f934ade45fe5377a813975aefe4006ddb535f03db5a82f71f50cc7935c6809c73e705e84a959f70ff71df55ecce6a4a182fe3ef45a506fcd0f49b6eb9e9cbc8cd553481b9162a9086bf31c8cab7b1c3c7f703cd26d96b48dee0771b4a6d2513a37fec94a6649cfdbafc26b17a7bb2adb72477d34a74e4165850f76473f41c116e7adec0bdafae8aff515c781092e2d2f70fefebbd36d0e1cf5a01ea61f142756b8195e1fc400ca73162eb51d3a14a1c8ea2be43d3bbc230c7011273c1c9f035895fa45e8ba5eb8bef0660e952f3327720bd3817d098277b01ee0d8394a4d7752866da8f3258f243150df19ddb87ea24bc2f5de0394870e23a0f723013a226caa72e896e9f986e9aa40a6a4a21cfb6c", 0x48f}], 0x2, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x14}, @local}}}], 0x20}, 0x4080) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x2}, 0x8000, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4861, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$SIOCSIFHWADDR(r6, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="8000230d1100"}) 24.471162969s ago: executing program 7 (id=7685): openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x600080, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27}]}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 24.151907556s ago: executing program 7 (id=7791): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x24080, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc006, 0xac5d, 0xffffffff, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, r0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000f40)=@bpf_lsm={0x1d, 0x22, 0x0, 0x0, 0xfffffff6, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf2db}, 0x94) perf_event_open(0x0, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x80000000000000, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r3, 0x0, 0xfdef) 23.862101422s ago: executing program 7 (id=7793): socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000880)={0x2, 0x4e1c, @multicast2=0xe000000d}, 0x10, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=r0, @ANYBLOB="ac1417bb008000000000000038fd0000000000000000000007000000070e43aa5889c23ef593ae6bcd1844187c8073b5c9e00000000600000003000000080000000900001400000000000000000000000100000005000000000000001400000000000000000000000700000001000000000000001400000000000000000000000100000003000000000000001c000000000000000000000008"], 0xc0}, 0x240008c4) 23.618999087s ago: executing program 7 (id=7796): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x10b241, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x50) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0x3100, 0x3100, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd6372ce22fdb911"], 0x3e) syz_clone(0x10e3a2f080, 0x0, 0x0, 0x0, 0x0, 0x0) 11.273000014s ago: executing program 6 (id=7831): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000018000000010b000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRESOCT=r0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000078850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80008, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x152, 0x1, 0x0, 0x2, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10, 0x6f}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{0xffffffffffffffff, 0xffffffffffffffff}, 0x0, &(0x7f0000000180)}, 0xffffffffffffff6e) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\v\x00'], 0x50) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x401c5820, &(0x7f0000000040)=0x189fe) close(r5) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x110e22fff6) ioctl$TUNGETDEVNETNS(r5, 0x54e3, 0x0) ioctl$TUNGETVNETLE(r5, 0x40047451, &(0x7f0000000180)) ioctl$TUNGETVNETLE(r5, 0x40047451, &(0x7f00000002c0)) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$ITER_CREATE(0x21, &(0x7f0000000a00), 0x8) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=r4, @ANYBLOB="0000001000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000084e1634534ecf100000000000000800000000046502c2744f049c3b10000e9ffff45a7b6c77200"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000b40)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000ac0), &(0x7f0000000b00)='%pI4 \x00'}, 0x20) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000200000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c40)={0x18, 0xf, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000001000000000000000c00000097b60800f0ffffff18290000", @ANYRES32=r1, @ANYBLOB="000000000700000018110000f91b9d2b5e1d3df7a0cfe8d8574a4e837f2fda69587647ce645bc597cc8c7f4f7fae9ca7b3", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000820000009500000000000000"], &(0x7f00000003c0)='syzkaller\x00', 0x8c94, 0xc8, &(0x7f00000008c0)=""/200, 0x41100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000009c0)={0x3, 0x7, 0x1, 0xfffffff7}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000b80)=[r1, r9, r10, r1, r3, r11, r12], &(0x7f0000000bc0)=[{0x4, 0x1, 0xb, 0x7}, {0x4, 0x4, 0xb, 0x5}, {0x0, 0x1, 0x8, 0x1}, {0x2, 0x5, 0xf, 0x4}, {0x4, 0x2, 0x6, 0xa}], 0x10, 0x9}, 0x94) perf_event_open$cgroup(&(0x7f0000000080)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xb16}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r8) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') 10.603430328s ago: executing program 5 (id=7833): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0, 0xb}, 0x4021, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) socket$kcm(0x11, 0x200000000000002, 0x300) socketpair(0xf, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) close(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18030000000000000000000000000100851000000600000018000000000000000f000000000000003f00000000000000180000000000000000000000000000009500000000000000370300000100000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000000)="5c00000014006b05c84e21000ab16d6e230675f802000000060002007a17d30460bc24eab556a705251e6182949a36c23d3b48dfd8cdbfb367b498fa51f60a64c9f4d4938037e786a6d0bdd7", 0x4c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r2 = perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0xa, 0x6, 0x6, 0x7e, 0x0, 0x0, 0x4, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd8, 0x1, @perf_bp={0x0, 0x2}, 0x100000, 0x5, 0x100, 0x8, 0x401, 0xfffff255, 0x2, 0x0, 0x1, 0x0, 0xf74}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, 0x0, 0x5}, 0x94) r3 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={0xffffffffffffffff, 0x18000000000002a0, 0x28, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f088a8", 0x0, 0xd5b1, 0x60000300, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$ITER_CREATE(0x21, &(0x7f0000000880), 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0xc, &(0x7f00000003c0)=@raw=[@map_val={0x18, 0x7, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x40}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x8}], &(0x7f0000000540)='GPL\x00', 0x10000, 0xc2, &(0x7f0000000580)=""/194, 0x41000, 0x4a, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000006c0)={0x0, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000940)=[{0x2, 0x1, 0xa, 0x4}, {0x4, 0x3}, {0x3, 0x3, 0xc, 0x2}, {0x4, 0x5, 0x0, 0xa}], 0x10, 0xf4}, 0x94) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x4, 0x0, 0x0, 0x0, 0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe}, 0x0, 0x0, 0x42ba}, 0x0, 0x2, 0xffffffffffffffff, 0x3) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f000000", 0x21}], 0x1}, 0x0) 9.727619947s ago: executing program 6 (id=7836): openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x600080, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x10000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27}]}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 8.984819742s ago: executing program 5 (id=7837): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019000800004460bc06000000a701251e6182949a3651fbffffffd4d4938037e7c7a0a03400ac094fe3c51c268811000096859fc57a00000000000000002571cd53b9", 0x5b}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8000) recvmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000000700)=""/176, 0xb0}, {&(0x7f0000000940)=""/4060, 0xfdc}, {&(0x7f0000000580)=""/88, 0x58}, {&(0x7f0000000600)=""/231, 0xe7}, {&(0x7f00000007c0)=""/185, 0x3d}, {&(0x7f00000019c0)=""/4085, 0xff5}], 0x6}, 0x120) recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0xffc3, 0x0}, 0x80) 7.720789859s ago: executing program 35 (id=7796): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x10b241, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x50) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0x3100, 0x3100, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd6372ce22fdb911"], 0x3e) syz_clone(0x10e3a2f080, 0x0, 0x0, 0x0, 0x0, 0x0) 7.711688549s ago: executing program 6 (id=7840): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffff56a, 0x100000000}, 0x250a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRESHEX=r1, @ANYBLOB="4324d463864b07da81aeee40b5c674934da237c3041b17b42c0b696651fc5ec09d24596a52727eefceb5d172c9dd13571811bdb8a1b5a763abd885aeea0462e2655bb9335dce1c8bd80c000001459c8339f605e1c88cdbf3f14180d6451212a407ea40713c0f240ca023840825f11cd0ad5b17fd5f8543e416cc18c5db51f91f429b58ceaf7cf62204bace6f10b74f36136f09a3cc635fb89d06eb6bb137dba44446f6d14cf5f3c09b978a05ac9f76ff840ee228e69a2838382ced1beffa96f5759b24604baabab686abc559f0702f99", @ANYBLOB='\x00'/20, @ANYRESHEX, @ANYRES64=r0, @ANYRESOCT=r1, @ANYRESHEX, @ANYBLOB="dbf25b4f0f2d77b18bf6e5058970c5f3c65dd54e9dc1d7c51ba643df135bc0f0106a97009e43a2fc0dfa6b798331e394b9ee8489207cc47319945e71a1f9b931c73cabdc61f794df51387f0b3757438bd8d3b75874659f4bd2b63323a6d730006f3e6441ac176073cf0021"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r2, &(0x7f0000000140), &(0x7f0000000080)=""/6, 0x2}, 0x20) r3 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000400000008000000"], 0x50) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)=@generic={&(0x7f00000001c0)='./file0\x00', r4}, 0x18) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000040)}, 0x2085, 0x0, 0x4d, 0x6, 0x802, 0xde6, 0x4, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x2, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x11, 0x3, 0x0) sendmsg$inet(r3, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1}, 0x3e8) 7.222607839s ago: executing program 5 (id=7841): socket$kcm(0x29, 0x7, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x3}, 0x50) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000011c0)=@bpf_ext={0x1c, 0x5, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x10}, [@map_fd={0x18, 0x5}]}, &(0x7f0000000100)='syzkaller\x00', 0x3, 0x1000, &(0x7f0000000140)=""/4096, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001140)={0x9, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x2e0d1, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000001180)=[{0x2, 0x1, 0x3, 0x1}], 0x10, 0x4}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000012c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000001280)=r1}, 0x20) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000001300), 0x12) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000015c0)={r0, 0x58, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001680)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xc, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3}, 0x50) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x1b, &(0x7f0000001340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, [@tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x1}, @generic={0xcd, 0x1, 0x8, 0x2, 0x5}, @jmp={0x5, 0x0, 0xb, 0x8, 0x2, 0xfffffffffffffff8, 0x10}, @alu={0x7, 0x0, 0x7, 0x9, 0x3, 0x80, 0xfffffffffffffff0}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000001440)='GPL\x00', 0x8, 0x9a, &(0x7f0000001480)=""/154, 0x40f00, 0x0, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001600)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000001640)={0x4, 0x1, 0x5, 0x1}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000001700)=[r0, r4], &(0x7f0000001740)=[{0x0, 0x4, 0xe, 0x4}, {0x5, 0x5, 0x1}, {0x1, 0x2, 0xc, 0x7}, {0x1, 0x1, 0x7, 0x8}, {0x5, 0x1, 0x10, 0x3}, {0x0, 0x1, 0x1, 0xa}], 0x10, 0x3ff}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001880)=@bloom_filter={0x1e, 0x0, 0x0, 0x7, 0x2b112, r2, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x5, 0xa}, 0x50) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000001900)=r6, 0x4) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001c80)={&(0x7f0000001b80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x8c, 0x8c, 0x7, [@int={0xd, 0x0, 0x0, 0x1, 0x0, 0x80, 0x0, 0x1, 0x4}, @decl_tag={0x4, 0x0, 0x0, 0x11, 0x2, 0x4}, @ptr={0x8, 0x0, 0x0, 0x2, 0x5}, @float={0xf, 0x0, 0x0, 0x10, 0x8}, @volatile={0x8, 0x0, 0x0, 0x9, 0x4}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x3, 0x7ff}}, @struct={0x2, 0x3, 0x0, 0x4, 0x0, 0xe80, [{0x7, 0x2, 0x5}, {0xc, 0x4, 0x8}, {0x8, 0x3, 0x8}]}]}, {0x0, [0x0, 0x30, 0x61, 0x5f, 0x61]}}, &(0x7f0000001c40)=""/20, 0xab, 0x14, 0x0, 0x9241}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001d40)={0x6d8e1b84, 0x0}, 0x8) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001dc0)=@bpf_lsm={0x1d, 0x19, &(0x7f0000001940)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @generic={0x6, 0x3, 0x6, 0x101, 0x8b}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001a40)='syzkaller\x00', 0x5, 0xf8, &(0x7f0000001a80)=""/248, 0x41100, 0x2, '\x00', 0x0, 0x1b, r7, 0x8, &(0x7f0000001cc0)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000001d00)={0x0, 0x4, 0xe, 0x9}, 0x10, r8, 0x0, 0x3, 0x0, &(0x7f0000001d80)=[{0x5, 0x1, 0xc, 0x3}, {0x0, 0x5, 0x7, 0xe}, {0x5, 0x5, 0x6, 0xc}], 0x10, 0x1000}, 0x94) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000002000)={r0, &(0x7f0000001e80)="a25d9651b9bcc6e2b6262eddacbc2fe5052615ac8e251cdd6cd67c61d91de25b97ba4d5dc23c77f5a6ae9da8f7900a74cce7dac1fd1bd5d094dd31b320fc0274747a9b118592a6ac64c611211dfb0d8e1b17cf8ae50492091f021b07cd63e2938034dd72157baf9d89b6b9663c973cd57481c5eea34c2ef87119f6db7d8975590a0b35512544c1", &(0x7f0000001f40)=""/157}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000002280)={0x1d, 0xf, &(0x7f0000002040)=@raw=[@cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffc}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x10}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x48}}], &(0x7f00000020c0)='syzkaller\x00', 0x9, 0x84, &(0x7f0000002100)=""/132, 0x41100, 0x2, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x8, &(0x7f00000021c0)={0x0, 0x2}, 0x8, 0x10, 0x0, 0x0, r8, 0xffffffffffffffff, 0x2, &(0x7f0000002200)=[r0], &(0x7f0000002240)=[{0x4, 0x2, 0xf, 0x4}, {0x4, 0x1, 0xf, 0x5}], 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002480)={r5, 0x0, 0x50, 0xb, &(0x7f0000002340)="346791573feefc60ad6ac07fd18d4e7b278ad87bee2275e50c7571a731146a4550f57b0df1d552a4618d9dc77b76ea6de5b906e8457efa83237bb33c7c841e5935d836f4274b5f72b4cf193d9eb4e2b7", &(0x7f00000023c0)=""/11, 0x6, 0x0, 0x3d, 0x1a, &(0x7f0000002400)="542582af8f5813ea37ec9777aad7d3bb830d9539c3a7492ffaae72ce32ca1053c973bc2da5a0aab33ac60053bbc9b134cfa125fd1c48e33bb457b09070", &(0x7f0000002440)="b92d9598235c4d66b8b71e09a5bbc1b15f2be8a79bf8cba8dd1e", 0x4}, 0x50) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002740)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x0, '\x00', r3, 0xffffffffffffffff, 0x0, 0x4, 0x5}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002880)=@bpf_ext={0x1c, 0x11, &(0x7f0000002500)=@raw=[@jmp={0x5, 0x1, 0x1, 0x0, 0xa, 0xfffffffffffffffe, 0xfffffffffffffff0}, @map_fd={0x18, 0x8, 0x1, 0x0, r4}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xff}}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x2}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x3}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x7}], &(0x7f00000025c0)='GPL\x00', 0x9, 0xbf, &(0x7f0000002600)=""/191, 0x0, 0x1, '\x00', r3, 0x0, r7, 0x8, &(0x7f00000026c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000002700)={0x1, 0xe, 0x10001, 0x4}, 0x10, 0x220bb, r9, 0x5, &(0x7f00000027c0)=[r2, r4, r10, r2, r6], &(0x7f0000002800)=[{0x0, 0x4, 0x5, 0x8}, {0x1, 0x5, 0x1, 0x6}, {0x4, 0x4, 0x0, 0xb}, {0x0, 0x3, 0xc, 0x1}, {0x0, 0x2, 0xf, 0x1}], 0x10, 0x101}, 0x94) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002940)=r8, 0x4) close(r0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000002a80)={@map=r2, 0x24, 0x1, 0x3, &(0x7f0000002980)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f00000029c0)=[0x0, 0x0], &(0x7f0000002a00)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002a40)=[0x0, 0x0], 0x0}, 0x40) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000002b00)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000002ac0)={@ifindex=r3, 0xffffffffffffffff, 0x1a, 0x2004, 0x0, @value=r12, @void, @void, @void, r11}, 0x20) recvmsg$unix(r12, &(0x7f0000002d00)={0x0, 0x0, &(0x7f0000002bc0)=[{&(0x7f0000002b40)=""/99, 0x63}], 0x1, &(0x7f0000002c00)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe0}, 0x40010162) r18 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002d40)={0x1b, 0x0, 0x0, 0x8000, 0x0, r13, 0x6, '\x00', r3, r17, 0x1, 0x5, 0x1}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000002e40)={r18, 0x58, &(0x7f0000002dc0)}, 0x10) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000002ec0)={0x1, 0x80, 0x7f, 0x7f, 0x57, 0x6, 0x0, 0x4, 0x15081, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x7, 0x6, @perf_bp={&(0x7f0000002e80), 0xb}, 0x2, 0xffffffff, 0x918, 0x0, 0x5, 0x1, 0x7, 0x0, 0x6, 0x0, 0x66}, r16, 0xa, r14, 0x19) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000032c0)={r1, 0xe0, &(0x7f00000031c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000003000)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, &(0x7f0000003040)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000003080)=[0x0, 0x0], 0x0, 0x1a, &(0x7f00000030c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000003100), &(0x7f0000003140), 0x8, 0x81, 0x8, 0x8, &(0x7f0000003180)}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000003700)=@bpf_ext={0x1c, 0x0, &(0x7f0000002f40), &(0x7f0000002f80)='syzkaller\x00', 0x6, 0xb, &(0x7f0000002fc0)=""/11, 0x41100, 0x49, '\x00', r19, 0x0, r15, 0x8, &(0x7f0000003300)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000003340)={0x3, 0x3, 0x5, 0x1}, 0x10, 0xe47f, 0xffffffffffffffff, 0x5, &(0x7f0000003640)=[0xffffffffffffffff, 0x1, r4, r6, r10], &(0x7f0000003680)=[{0x3, 0x2, 0xd, 0x8}, {0x5, 0x5, 0xd, 0x5}, {0x3, 0x1, 0x1, 0x7}, {0x4, 0x2, 0xf}, {0x4, 0x4, 0x0, 0xa}], 0x10, 0x8}, 0x94) 6.181550271s ago: executing program 1 (id=7844): r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000000940)=""/4060, 0xfdc}, {&(0x7f0000000240)=""/101, 0x65}, {&(0x7f0000000600)=""/231, 0xe7}, {&(0x7f00000000c0)=""/199, 0xc7}, {&(0x7f00000019c0)=""/4085, 0xff5}], 0x5}, 0x120) recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0xffc3, 0x0}, 0x80) 6.117790472s ago: executing program 6 (id=7845): perf_event_open(0x0, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) socket$kcm(0x2c, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x4) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000600)=ANY=[@ANYBLOB="61124c000000000061133c0000000000bf2000000018000007000000080000003d0301000000000095000000000000006916000000000000bf67000000000000170600000fff07006706000002000000070600000ee60000bf050000000000001f650000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070500000419311f3d2401000000000095000000000000000500000000000000950000000000000032ed3c5be95e76b67754bb12dc8c27df8ecf264e0f84f9f17d3c30e3c72fe9755ba08508460b603daf5a7d1dbdd2d17f2f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a674f888a08034b7dd399703d6c4f633a9a4f16d0a3e1282ee45a010fb94fa9de56c9d8a814261bdb94a6538b89dc6c60bf70d742a81b72bab8395fa64810b5b1bfd3782519518c51231422bb8fab4d4d897db2c544c0ec50b8eac8c63d2b1cd06a39702bd547f5ebaa6954f01cef3c9bacec15e2e3b2bd352e93a22adfe8efe33ffa78b02af242f8ee5476d4ef7a6f0c4704403b9bad2b648e90fff24f69a5ef05f5408ea197ed09a9510ee6063229de2984abdd46ea3ec78e3127002ed37c2564b8f8a621483fb2a5ff221e0d831d64759d17b8c59d0f2b06e7f6b7958fb5b939af4be5e55a95f8c6d785a91c7c3f0c17ae7f9ac5ff05f5ecddf0cef90d50e763be96496661c749e21ab63a1f50b30a65a9027ba357bf8c614497ee59b68bf6a5d45c81c567e347d545741fbbbea3e47b1750f272980087b7f8a13cce7014137f250370b8a70ae3eaf6d6f17759c3886871e97d063b7f26eed3226bb0b9ee6320a2b02fea7a06a0e37182adf"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) 5.883215137s ago: executing program 5 (id=7846): r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0xf, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000bf0200000000000085000000cc000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x104007, 0xac5d, 0x0, 0x0, 0x10001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="0300000004000000040000000a0000000000000011c08b8407b929d01628bd4fe20131c71f02c142e4e4db3baf47f1a7086b218f272a055798c4ccf385bcf7394e3d47114e814ca311ae32eba2732de28b18b424c7d3e573eaf4bc2a4730d7e4ef7c4f80d105eb55e1a5df2081196598250f4aa43a03c135e822655b77822d1fa1ecd1f0af0e2f8615eec4687cb8685333d80d18091547a3b75224fd6dbbfd359c357c4282e4178033b9d654e4f23392832b11e6e311e6417074489c24b1a33eb85d0e99b4687440a97596a2f850fcb044621da2f32c7a3143e7da00b1d864e1322085df41ff80c6b8ebebcdac716a74", @ANYRES32=0x1, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000010000000500"/28], 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r1, @ANYBLOB="0a0600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000020000000000004000000000000000000000001800000000"], 0x50) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0700000004000000000100000400000020000000", @ANYRES32=0x1, @ANYBLOB="a0fb1bcf516a54e898fb96d2100000000000000000000000010000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x50) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000980)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240061762cec159f816f00000000000203000000040000000000000b000000000000400000000009020000000000"], 0x0, 0x3e, 0x0, 0x0, 0xffffffff}, 0x28) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080), 0x1, 0x0, 0x3e}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000010c0)={r5, 0xfffffffffffffd62, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0}}, 0x10) sendmsg$inet(r4, &(0x7f0000000000)={0x0, 0xffffffffffffffef, &(0x7f0000000040)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a076b876c1d0048007ea60864160af36504001a0038001d00", 0x28}, {&(0x7f00000000c0)="83d2ff5f00000080d2898a0cc6d6703b87eb28f77b09bc7e64f918fa3be4664d327d90424d5503002800"/52, 0x34}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) r7 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) ioctl$PERF_EVENT_IOC_RESET(r3, 0x2403, 0x5) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002400)={r2, 0x0, 0xc, 0x1000, &(0x7f0000000200)="bb8875ab7143f621b339dd17", &(0x7f00000012c0)=""/4096, 0x873, 0x0, 0x5c, 0xa7, &(0x7f00000022c0)="3fa73878bb863e9b2790ea7c7dd629552b4a98316c0c5895d0338fce064059fb6a135870df1ec7b3a7c98170db50d7d8f9376b000d1eddb27b17f561934c18c85b3557e1ac293e2860af3fe18c2356f7d2cafbef6f4c95e133a121a2", &(0x7f0000002340)="400e2825c068a9115a59b2a64f8bcef359e0f56fd4858f2084aa843f6facd9341d568bd949228d10b22c35bc110e6c4bfd4346de119a7222fb59f65197d273f9ffed9a6f555adc34732ea5e1d465635c741b479b699a865fcb8d7a97eb834d9d6e497626886129b7bbed84e985f069575cd4ddfadc722be4e0c3efef6c5d5faf4a951df0932e71bc6d8de6f780f3234cadd6711b0d5b6aaafd4806c5425f84296cb3866c319164", 0x3, 0x0, 0x8}, 0x50) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000140)="5c00000013006bcc9e3b6f5c441d0000007ea60864160af36514000cc00800020007000200060001c003000000000000fd", 0x31}, {&(0x7f00000005c0)="924c7396c1fea27ae669b738e0cb6fefac6208c9823a14bd252234a4417598d697f2f4eb001ea95ca779ac35341503dbcc07f04fe9b0225f258bc4e807ed2b3c3db3ea562f54e3fddb2b06be2db322035f2b1face549479121492709d2408689f144720ed0306e376ee3e3308247a3beab006dc949b2bdfda513514cd47b81170200000045e26928f1e3cb049a4805488919110b3073ab5aca13c2bb95d3750b650bc549f49d2ef73bb857ded8525f3b7106ae146ed88e956cb6a31320c5d3aa384a153a4c4ec27e5f979a53ce98f2cb52b2c6e1dd2120cc88deadb6c120238bc05f812a0fe662218767f08c7d4f96ed41324b004c8f192887493fb2705b780e966c114c369d9b73d0df6e6e2b3ec29a1140b48cb71e4e8c55ea1311d2c291dc2a9a32f3d68bee3945abb5aaf90566e25ffee83bc12cbb3c8da16a3585abc8f60eab85836ea2dfb0f9e841d444755ff80488e96fc74bc686f9954795e4d09127263de410b046", 0x166}, {&(0x7f0000000440)="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", 0x10e}], 0x3, 0x0, 0x0, 0x1f00c00e}, 0x4008052) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x3, 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000085100000ffffffff"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f00}, 0x94) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r8, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x3, 0x11, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000100000000000000000000008500000027000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r9, @ANYBLOB="000000000000000000a50000009500000000000000"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1e190, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r10 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r10, 0x29, 0x23, &(0x7f0000000040), 0x12b) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x11, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002c000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2, 0x0, 0x0, 0x1000000}, 0x0) 4.640426173s ago: executing program 1 (id=7848): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffff56a, 0x100000000}, 0x250a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRESHEX=r1, @ANYBLOB="4324d463864b07da81aeee40b5c674934da237c3041b17b42c0b696651fc5ec09d24596a52727eefceb5d172c9dd13571811bdb8a1b5a763abd885aeea0462e2655bb9335dce1c8bd80c000001459c8339f605e1c88cdbf3f14180d6451212a407ea40713c0f240ca023840825f11cd0ad5b17fd5f8543e416cc18c5db51f91f429b58ceaf7cf62204bace6f10b74f36136f09a3cc635fb89d06eb6bb137dba44446f6d14cf5f3c09b978a05ac9f76ff840ee228e69a2838382ced1beffa96f5759b24604baabab686abc559f0702f99", @ANYBLOB='\x00'/20, @ANYRESHEX, @ANYRES64=r0, @ANYRESOCT=r1, @ANYRESHEX, @ANYBLOB="dbf25b4f0f2d77b18bf6e5058970c5f3c65dd54e9dc1d7c51ba643df135bc0f0106a97009e43a2fc0dfa6b798331e394b9ee8489207cc47319945e71a1f9b931c73cabdc61f794df51387f0b3757438bd8d3b75874659f4bd2b63323a6d730006f3e6441ac176073cf0021"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r2, &(0x7f0000000140), &(0x7f0000000080)=""/6, 0x2}, 0x20) r3 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000400000008000000"], 0x50) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)=@generic={&(0x7f00000001c0)='./file0\x00', r4}, 0x18) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000040)}, 0x2085, 0x0, 0x4d, 0x6, 0x802, 0xde6, 0x4, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x2, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x11, 0x3, 0x0) sendmsg$inet(r3, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1}, 0x3e8) 4.515562146s ago: executing program 6 (id=7849): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = socket$kcm(0xa, 0x2, 0x73) r1 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(r2) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x2020200, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) socket$kcm(0xa, 0x7, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xe, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3}, 0x48) socket$kcm(0x1e, 0x4, 0x0) r5 = socket$kcm(0x1e, 0x0, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000880)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d0019feffe69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb46c4c0a285057e3061b9781e", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000400)=""/164, 0xa4}, {&(0x7f0000001c40)=""/4156, 0x103c}, {&(0x7f0000001480)=""/196, 0xc4}, {&(0x7f0000000140)=""/143, 0x8f}, {&(0x7f00000009c0)=""/196, 0xc4}, {&(0x7f00000002c0)=""/83, 0x53}], 0x6}, 0x0) close(0x3) socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0xfc00, @multicast2}, 0x3c, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f81510ff6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e02721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06102f6f2c7171dc7f76e1931b3e4deb569ef9d07d5f86a848f50942e93c419c3a23489f14803b08182dfd48b8d4375be6b7f805a21209c05e5927693a8834c8d5a5acbd47ed8a30a8a741d1ad77639b56b3b90c0b2023fa334befd28b2e27cbcd94b0ce7437f88ce67a925cea6d6d7e5313de6d328b1124a8b9ef83fe39ca3da97d33c60b7fd4af67d3c8fccb595a27a5bffc71e5a5b2ec966828993b0c0f83cbc55f9a7fb66a4101d5c83b77885072b6e2b2ceebe32f635509698c05089b9ff1cb1959b211e114dadb224ef2d5e7a3c55b3ac00fcdc9018577603c6301e5d4341b3d7eeb2665349d448d28d5d108f576408cbe533a6adbba18ebb2d84bb9af81108506a2f50fb56d595579000747930449fdf4ed01715ec624a0cb73636a35b9136f10b79e3d7ded09008b92e92c64e26e6b6d17f18b70b1d9813de8d2ff151c7a6a0452c660a57c33f13e2d9b88fa5f5c0505722d2e787a425e4a3e9b5efa9668e9199f5fb9fe7d5b8a57719a57df152e7f2c6a1087a2a24084f82455b65353a70559f04d5ed12defb81497ea69c1c7e69c373524770b7473c16a69c7a3648a9dd93377b89cdff61cf62512d1ee67a55ea67993937c1f55a2179bc9c8a337364cfb84d295adda1ad9700fc2f5c11cbfc1b90affb4666c6e7e23a6f7751410a5651819f29f690c6dba2b8a67e0f7f8cc377feb1854c393578994c85391ba21b3961aed477f771645571dc7d6cae72bf79c82a92a4edc3742b1398060a0a5c9e81c016b7f2ae3db529c6ff824cc28678764d8ab49d7dc68e5b0556c9e7ffb6fef442776d86fbd458741830e57f22a1f8513b92abd5b2df93a67cc560134078f0b8ecc3276e40aadef5cd579888b86b4988f396679250701f3869e7493b33692035ecd94aca5189fd0a0893ccc5bb19c0b4caca86cf90ebc2a5558f39cccb33f6773a4e425bf551fb3b6456ee1cc62fa1843a9e5539bb2d02ae6ef82533a9dbcfb562c1ab18c1f639ae7ff02083746f74a15ba2d10e4b955940a5d6f488d326a99f287c48ad463ce40367aeeff519cbad0a2d7fdbfa48bff75955467977764c2be2bd2ffa18396c46920c40c50a4037003666406d177e2cd20aee423d07169d8f611f635ba0b62b61265ff2c5548446a2423dd1038482b6852b2d9d2f90aa05d82c5e2c3d1af0c7aad72d82b3da67471af7b037bb0424a785e73f35b5a10a2ab300a195c20cd119a5390e0cd5d49c70bd80883b933e843d0d2902749dcf3c140c708a0f004b7a2f50bf311305dc01719016fcce5863815ca7951de710fcb71cd177551ff6fcd9f8bf01b93868f24c6129b6d7917125338cf62110083093fc7f862015d48450d992f2bb43e601cab19b2ea7b83962a382fc2a31fdf2358bf8a9a9e506eaa7b6eb5e7444d1ef459b24ffa51362abce902dfd84201a0e4b5a3b62757aad54fb65b83821c6bba663886de092065a565921ea3eb6781bb8ed4f4db3abcfeeb379b7e52fca790bea719918e299ab01bf5e92177d134360bf7a16a59e9d03d3dcfb0a25599237e3d41b3f0026c9402b1fb1894426303413a2cbcf7c72807ca694afa285990d07c3bca26413c9947b3b344aafc04544b8c11416e0312b028da7302e316c3966d41884b15055a49a4a0b3eac8e11f88a5615fb0af582f065d28e5a454447e9d0cfc60356439ebf7e1d0a00f5b9cc6daf2bd7195ba96b4d1a0679ff0fb1c01282c378a880f90f460889b67d76d4d0e8db6c928d113533d1d10b810303c43d8ff622c5bab7f095b96e64bf9daa48a2bdf3d9d40bac00cf1b66df61a4f7c3e21938e876f81b1179dce6a008f28eb682cae690ced0ea0d542da604d8056f2b1813ed36683c4c51aeb2650772cfb1c55d4e60604ff06344cfc271b2175a6c94defb807af240b483e24298ca73bfc743ca2ca2e77e6d5b817b3c1986601537faf59ac84c74d8bd0c068cb8e6bd03ac2dcf5793fb4a00b3c901a33aa3ee86e4f0db317b94bb8678ab26e36d305ebac4b0f7f164947148255b562dd0f87648499d45bccfb7d8c9d5624cadf8160a396e79fbcdc100058ba4606e41c02fb2cc0dc6c36196bd28acfde82a18cda2321d2d83fecd3b85380667cd1d0bc68298c6c8f10421a80c8fa86912b6c3e8ddd9d9668520d5151409e6b77f0d7730b374a68a744151bfbd123cfdf871e8c24e70d2ca3b50e84a48e0b78c1781000cfc848d43584985763a76c0ab9ba882c55e3e4aa8f2174255db38adb8350b48a77be22a869d13d183325f859b883464e5e46de5ea8a92532b9a794daaeff657cd361f7f158f8bebe36e9de1f5b9721d4263dcc9472229bc02d3f552180abfb25ca7aa36cb914d99c09fd5bb99dcab9b4e3c634d18fc7dfe84dc4425ad1e39c3e7410d49b4ea0a8a2958688c7725822f6dfc0827d19dc385e0e35a949941e4dd1aaeaab9ebe402f8c584bca7efc829f2ccfb63fd7bde1c182a67c14f9d3f033ca674e2604e89cd55a15419f956cd61a755c1b13554dae98e77be078aadfc131c9677381f1dbe6ef194eb17603a463e8b844ab46a6046e1f07d96d66de669359bff4c3d80948a4de3abb2f171a09b5d8999c379fb62244114e218c79805df7d899e5661320ee6721d652b95f09e4dfe69bd67099c73294b17ab574e0b966aa3ab44478965b9dca3cb3b9282945f24ccdd07c638ae25a84a728ca24f87ff49d718121a694be46f3616e27b1041b3c6cd24b9cf775bfc28dfbe0a009048f0599f2d5d6586cfd1e7f7fe69872d08b98f60d28e6af0d49d7f06ad71a7b5c41df261aba5de114022c7288bc265cc17909fdeadc3d7b256d7ab3b96e40f857060f16b54a6bb7248ee571f87ace5ee39eab412706cf52fa711468b21ea129c3f44bceb429fcc1a0ac2aa87b9365077dcfcfa9a1b32a0a09699197c20019a66cbd0a897feab3706c23123b888ada643d4560082033e31596b0483578968e3c9593ebd97141c228a42fc7645f92171c120aabca36657683fd7c72fcb87217f124d6fabc52f1d221d8410b47b0ad4bd944bf4085365e9b52a53911ab4ee142c5a1ebbe034c9d98c538c066f2dc0acf372eb2397dcac765055123e0ba19be22b18c886bf0f7490abe9fde91ffa62e059962bd134be8501cb5b715a744b1398e2c4c7e8afe72e189dda0654296afa1c1f99ab7d800fa40f72a758625c833b6fc7b7d42250522b456e1e7de815350c36c9cb2f4d1c9cb99109f89b456c559463f11b8b58247809b17a4ed4912bd0a47a529f1364d6dc593ea7f3eb98962078ac90e5012ee1c7b4b9ed5a8c7a9c0231b4ce425693faab64fa0f3482a04d4be2e06ee5d103694d288810a1a7f4d1e908dd82dd2016a064ece5cd67ef1dd5f4cda728fc6f1ccdd949dd8f775d862621507248ef4c83ae274969d19c7ddb02a4e8a1ab2b7aa539a442b22735ceedeefe60a1059dfaaa0979ce8d5387b5a047841fd9749b88ca91216b02d7926408a01916b7781bb7167528ccdb9a486d173437a5ba3e552c8674dff2cc9b21054e0e4f86b61b8723fca58ceef4413bffae9e9be79c5b9788f5449811ce78be9bc7a86375a670197baaef751beabcba0aa6c7c33f1cd702cb78ec39fa1f17d9da733d6abf2b80f9c51ac8f6f664b24edc53a7c9525c3016bd05c67272375fe816b2b121f2de68b885a0fd8f8b8c6c342237b632f6414a3eb3480f5f42106c5812e9bfd4e8c8dea8d08525d9aa1da7c7c2ee7ff3d31b79b211dd01e304a8ffc83a89a59f3b1e2ef5e969b6d90bea7e161066f25622fad914bff52bacd2807093dda1838b529ee57f718b374ce2841b924a42457867547a6edcb8412d85f11796742bf640b5819a9546357df778c332af5983c4373a95d9c58b52dba445eee92e6911824f0c534e7a5934d9eac9b7f6fec22002fc53a3003a3304217f567b47cd326edc5f48eb1f46bb20d1e10e72239afc9769344590cf48902aba5405b7d4baa31a912ab398a2f2d3f037614bb56a89244ece50f3a1e058d274f1e70f944eb8a305be91e561e5eb843d057a81f4deb84a6335ec81ca964cdae5f318d4e9aaea2c477cc279c00c698bcfe4b8e04c09079d8f3f5438d9d45a00f50d2f9b245c8c68eebf247e25ba8d26f8b95b21ac9ceb50c0aa2e4bdc032024db216b92f9350a90ac79341af14d3fa8ba908096e1b503341aed667bb184c672dac85fc4f335b3871c3b4e55ea219a857d2d2e135358f6b45a20b3e7de8e09b2041eb7c5084a80258fb524a983752659298a251e178b56f96bc67ae0a78ec92f92d92c9cf0edb5dcb11e739d69410ad44c8df00caa030d7d89f2ec38bd7698115c423cf3e6048793aca08ffbcdac766f1553773fa00031c1d75246e4e1eddf8948d02a3de6d67fd7329e45070f29044587f1e0db50d04e673191a63e30f96ee0d8d52738fab36a7fe2c6ab9301d401e7ca5b1f039193a580e40abbdf40c2d7e27809dec80815d37adae9fe7fb9d3a974c9fc03944d7338d000b81170be4c6792ed6b3b827194b3ae11e2acfca48498d1126aacf80f3d574256ef7f75552ff087a819e", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0xb, 0xfc00}}, @ip_tos_u8={{0x18, 0x29, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @remote}}}], 0x50}, 0x0) 3.421701968s ago: executing program 3 (id=7850): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x24080, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc006, 0xac5d, 0xffffffff, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, r0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000f40)=@bpf_lsm={0x1d, 0x22, 0x0, 0x0, 0xfffffff6, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf2db}, 0x94) perf_event_open(0x0, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x80000000000000, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce81ea031100fe08000e40"], 0xfdef) 3.270024962s ago: executing program 1 (id=7851): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019000800004460bc06000000a701251e6182949a3651fbffffffd4d4938037e7c7a0a03400ac094fe3c51c268811000096859fc57a00000000000000002571cd53b985", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8000) recvmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000000700)=""/176, 0xb0}, {&(0x7f0000000940)=""/4060, 0xfdc}, {&(0x7f00000019c0)=""/4085, 0xff5}], 0x3}, 0x120) recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0xffc3, 0x0}, 0x80) 3.058789536s ago: executing program 5 (id=7852): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2d0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x10c002, 0xac5d, 0x10000200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x40086602, 0x8230794d6280073) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x58}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="620a79ffffffffff7110b3000000000085000000500000009500000000000000"], &(0x7f0000000480)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0xfe, 0x1, 0x4, 0x1, 0x0, 0x100000020000007, 0x90200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x3c0c, 0x200000000000c8, 0xfffffffc, 0x5, 0x400000000003, 0x4, 0x0, 0x0, 0x10, 0x0, 0xd870}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="b702000003460200bfa30000000000001702000000feffff7a0af0ff14ffffff79a4f0ff00000000b7060000ff0800007e640200000000005502faff037202000404000001007d60a6040000001000006a0a58fe39000f00850000003f000000bc600000000000009500000000000000a81bbfa32d51a7d0679fd43041097666ab982de7b0efc5733ed236e4add6de094e0832aaa6912a8b2ce571c4580034fb000000e3a94bd24d2eb3860d808922433e3e0f242a46b3009a54f4077db0d4968a384b0559c7919b893d3b72cd6c832e986440ff0a7e8620cb231ccd00000000000000000000007777e2704653f620b2272c3c7fea60491073847c4b7bbaed91f33fb382d91ae8e18c9b6c9f0322ec5f1c7cc5869ff455896712198c4e2ddf8b86e714229527ca40b24cfd6a1f00e891728807982d90e116bba29bb70900000000000000c63ad2e7402f9cb424ac416e66af9ebbfea905d37cf226312cb81ec8439cea06e7fa5e5b3596301460142f83b464d9e57dfdb06dcf9101000100130033d649d2110cf2e1f4682c24a314447c5e0807f0b1766ebdecbd061772daa52a38539295d3fea7a7e669441e1ff04114dfa904fb43897f8d9c3c287acb"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) sendmsg$inet(r3, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x800) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce81287a8800fe08000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef) 2.341791691s ago: executing program 3 (id=7853): perf_event_open(0x0, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) socket$kcm(0x2c, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) 1.602355247s ago: executing program 3 (id=7854): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffff56a, 0x100000000}, 0x250a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRESHEX=r1, @ANYBLOB="4324d463864b07da81aeee40b5c674934da237c3041b17b42c0b696651fc5ec09d24596a52727eefceb5d172c9dd13571811bdb8a1b5a763abd885aeea0462e2655bb9335dce1c8bd80c000001459c8339f605e1c88cdbf3f14180d6451212a407ea40713c0f240ca023840825f11cd0ad5b17fd5f8543e416cc18c5db51f91f429b58ceaf7cf62204bace6f10b74f36136f09a3cc635fb89d06eb6bb137dba44446f6d14cf5f3c09b978a05ac9f76ff840ee228e69a2838382ced1beffa96f5759b24604baabab686abc559f0702f99", @ANYBLOB='\x00'/20, @ANYRESHEX, @ANYRES64=r0, @ANYRESOCT=r1, @ANYRESHEX, @ANYBLOB="dbf25b4f0f2d77b18bf6e5058970c5f3c65dd54e9dc1d7c51ba643df135bc0f0106a97009e43a2fc0dfa6b798331e394b9ee8489207cc47319945e71a1f9b931c73cabdc61f794df51387f0b3757438bd8d3b75874659f4bd2b63323a6d730006f3e6441ac176073cf0021"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r2, &(0x7f0000000140), &(0x7f0000000080)=""/6, 0x2}, 0x20) r3 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000400000008000000"], 0x50) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)=@generic={&(0x7f00000001c0)='./file0\x00', r4}, 0x18) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000040)}, 0x2085, 0x0, 0x4d, 0x6, 0x802, 0xde6, 0x4, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x2, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x11, 0x3, 0x0) sendmsg$inet(r3, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1}, 0x3e8) 1.602060227s ago: executing program 6 (id=7855): syz_clone(0x40000200, &(0x7f0000001240), 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xa}, 0x10c002, 0xac5d, 0x0, 0x8, 0x0, 0x10000000}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x5, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002c80)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x10, 0x1c, &(0x7f00000006c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100013800002c00000000000000b7020000000000007b2af8ff00000000b50900000000ffffdbaaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffc7020000080000001822000094745aaf0f72c107f10419b6aa", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0xa1000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)="f5f015424912b66780a9a793b720bb8c1d0c84f3f6f948568c902382b976549688355e9c8c5ea9f9f6674e63e8ec8e60123ec8a0170ac7f1b06ce65058edbbd4e25d02d736aa031d72bb69c5763376ca9701009dfc") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48}, 0x94) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r5, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="98eb000014006bcd9e", 0xeb98}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) close(r1) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYBLOB="3eca", @ANYRES8=r6], 0x9a) bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r7}, 0x8) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0a00000004000000060000000700000018040000", @ANYRES32=0x1, @ANYBLOB='\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ffffffff"], 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f0006", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x34044001) socket$kcm(0x10, 0x2, 0x0) 1.600724847s ago: executing program 1 (id=7863): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019000800004460bc06000000a701251e6182949a3651fbffffffd4d4938037e7c7a0a03400ac094fe3c51c268811000096859fc57a00000000000000002571cd53b985", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8000) recvmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000000700)=""/176, 0xb0}, {&(0x7f0000000940)=""/4060, 0xfdc}, {&(0x7f00000019c0)=""/4085, 0xff5}], 0x3}, 0x120) recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0xffc3, 0x0}, 0x80) 1.391425111s ago: executing program 5 (id=7856): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40, 0xe59}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="5c00000012006b000040017ea608601602f3650400010008000000000002009ee517c356a7b0251e616859ad3a78a76e807c857e21bea297bff435cf01c937e786a6d0bdc7fcf50e4509c5cc68b7ed9c232d786c3500000000000074", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000120000000000000000"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001240)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d19f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981179186e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2a434b9048ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d6356e4450d043ed20d313cd56a56d2e4cdf26f19af9a41695a58a9b6b45af1ca939b18d7b57791b99cfc6ec2a0848c29fea4eb8b82395a38e8aca5ab4bfc2ad8acf2e51b766f8ecd16194ad41ec097082f7fa32179ef99dafa6c2aa206a25ddc33e6f0a09169eeff428c71f54e1dfcfcd7cfc8f6e169f11c47d504"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8712360000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x200000000000000) socketpair(0x2, 0x2, 0x11, 0x0) r6 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000000)='cpu<=0||!') syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, 0x0) 826.504133ms ago: executing program 3 (id=7857): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019000800004460bc06000000a701251e6182949a3651fbffffffd4d4938037e7c7a0a03400ac094fe3c51c268811000096859fc57a00000000000000002571cd53b985", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8000) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000000940)=""/4060, 0xfdc}, {&(0x7f0000000240)=""/101, 0x65}, {&(0x7f0000000600)=""/231, 0xe7}, {&(0x7f00000000c0)=""/199, 0xc7}, {&(0x7f00000019c0)=""/4085, 0xff5}], 0x5}, 0x120) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0xffc3, 0x0}, 0x80) 596.172028ms ago: executing program 1 (id=7858): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x13, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000006b8a00fe00000009c7080000010000007b8af0ff00000000bda100000000000007000000f8ffffffbfa400000000000007040000f0ffffffb7020000080000fa18230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000004a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 339.563213ms ago: executing program 3 (id=7859): r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000280)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e22, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000100100000d000000aa0000006900000018000000000000001001000001"], 0x30}, 0x1100000000000000) 191.672126ms ago: executing program 1 (id=7860): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffff56a, 0x100000000}, 0x250a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRESHEX=r1, @ANYBLOB="4324d463864b07da81aeee40b5c674934da237c3041b17b42c0b696651fc5ec09d24596a52727eefceb5d172c9dd13571811bdb8a1b5a763abd885aeea0462e2655bb9335dce1c8bd80c000001459c8339f605e1c88cdbf3f14180d6451212a407ea40713c0f240ca023840825f11cd0ad5b17fd5f8543e416cc18c5db51f91f429b58ceaf7cf62204bace6f10b74f36136f09a3cc635fb89d06eb6bb137dba44446f6d14cf5f3c09b978a05ac9f76ff840ee228e69a2838382ced1beffa96f5759b24604baabab686abc559f0702f99", @ANYBLOB='\x00'/20, @ANYRESHEX, @ANYRES64=r0, @ANYRESOCT=r1, @ANYRESHEX, @ANYBLOB="dbf25b4f0f2d77b18bf6e5058970c5f3c65dd54e9dc1d7c51ba643df135bc0f0106a97009e43a2fc0dfa6b798331e394b9ee8489207cc47319945e71a1f9b931c73cabdc61f794df51387f0b3757438bd8d3b75874659f4bd2b63323a6d730006f3e6441ac176073cf0021"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r2, &(0x7f0000000140), &(0x7f0000000080)=""/6, 0x2}, 0x20) r3 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000400000008000000"], 0x50) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)=@generic={&(0x7f00000001c0)='./file0\x00', r4}, 0x18) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000040)}, 0x2085, 0x0, 0x4d, 0x6, 0x802, 0xde6, 0x4, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x2, 0xffffffffffffffff, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x11, 0x3, 0x0) sendmsg$inet(r3, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1}, 0x3e8) 0s ago: executing program 3 (id=7861): r0 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x11, 0x68, &(0x7f0000000100), 0x120) close(r0) r1 = socket$kcm(0x25, 0x5, 0x0) r2 = socket$kcm(0xa, 0x6, 0x0) sendmsg$inet(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x300080c5) socket$kcm(0xa, 0x5, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000008000000400000000300000041000000", @ANYRES32, @ANYBLOB="00ff000000000000000000000000000000ffe800", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000040), 0x1003, r4}, 0x38) socket$kcm(0x11, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="08000000040000000400000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r6}, &(0x7f00000000c0), &(0x7f0000000100)=r5}, 0x20) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x4000, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0xffffffffffffffff, 0x100000000, 0xffffffffffffffff, 0x0) r7 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r7, &(0x7f0000000680)={&(0x7f0000000380)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000500)=""/253, 0xfd}], 0x1, &(0x7f0000000640)=""/9, 0x9}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r6}, &(0x7f0000000200), &(0x7f0000000240)=r5}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r8 = socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x9, 0x0, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x10, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1000000}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b070002000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x55097aa4, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02002d000b02d25a806f8c6394f9031a04000a740100053582c137153e3702df0c6400f01700d1bd00000000", 0x33fe0}], 0x1}, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000008c0)}, 0x2000c804) kernel console output (not intermixed with test programs): ftover after parsing attributes in process `syz.1.6615'. [ 1444.067674][T26632] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6615'. [ 1444.677517][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1444.713744][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1444.828179][ T7743] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1444.847214][ T7743] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1444.900148][ T7743] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1444.943595][ T7743] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1444.982567][T26354] device veth0_vlan entered promiscuous mode [ 1445.072367][T26354] device veth1_vlan entered promiscuous mode [ 1445.203316][ T7743] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1445.221381][ T7743] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1445.254110][T26354] device veth0_macvtap entered promiscuous mode [ 1445.276811][T26354] device veth1_macvtap entered promiscuous mode [ 1445.341288][T26354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1445.370763][T26354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1445.399475][T26354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1445.426181][T26354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1445.449313][T26354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1445.468863][T26354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1445.489459][T26354] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1445.507651][ T7764] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1445.518610][ T7764] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1445.538010][ T7764] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1445.562542][ T7764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1445.589789][T26354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1445.601778][T26354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1445.613549][T26354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1445.624931][T26354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1445.646161][T26354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1445.662302][T26354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1445.687885][T26354] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1445.741920][T26354] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1445.751904][T26354] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1445.761384][T26354] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1445.772407][T26354] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1445.814435][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1445.850161][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1446.179090][ T7916] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1446.203026][ T7916] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1446.248346][T26698] device pim6reg1 entered promiscuous mode [ 1446.283504][ T7743] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1446.519184][ T7916] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1446.587081][ T7916] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1446.632436][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1447.698613][T26759] device pim6reg1 entered promiscuous mode [ 1447.726213][T26761] FAULT_INJECTION: forcing a failure. [ 1447.726213][T26761] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1447.837652][T26761] CPU: 0 PID: 26761 Comm: syz.1.6650 Not tainted syzkaller #0 [ 1447.845303][T26761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1447.855405][T26761] Call Trace: [ 1447.858718][T26761] [ 1447.861679][T26761] dump_stack_lvl+0x188/0x24e [ 1447.866404][T26761] ? show_regs_print_info+0x12/0x12 [ 1447.871648][T26761] ? load_image+0x410/0x410 [ 1447.876199][T26761] ? __lock_acquire+0x7c40/0x7c40 [ 1447.881292][T26761] should_fail_ex+0x390/0x4c0 [ 1447.886021][T26761] _copy_from_iter+0x1c0/0x1130 [ 1447.890910][T26761] ? __lock_acquire+0x7c40/0x7c40 [ 1447.895981][T26761] ? sock_alloc_send_pskb+0x89d/0x9a0 [ 1447.901407][T26761] ? copyout_mc+0x110/0x110 [ 1447.905955][T26761] ? __virt_addr_valid+0x188/0x540 [ 1447.911118][T26761] ? __virt_addr_valid+0x188/0x540 [ 1447.916276][T26761] ? __virt_addr_valid+0x467/0x540 [ 1447.921436][T26761] ? __check_object_size+0x4f6/0xa70 [ 1447.926769][T26761] skb_copy_datagram_from_iter+0xee/0x6b0 [ 1447.932634][T26761] ? skb_put+0x10e/0x200 [ 1447.936921][T26761] tun_get_user+0xc41/0x3c20 [ 1447.941595][T26761] ? rcu_read_unlock+0xa0/0xa0 [ 1447.946407][T26761] ? tun_get+0x1c/0x2e0 [ 1447.950607][T26761] ? __lock_acquire+0x7c40/0x7c40 [ 1447.955677][T26761] ? tun_get+0x1c/0x2e0 [ 1447.960050][T26761] tun_chr_write_iter+0x112/0x1f0 [ 1447.965112][T26761] vfs_write+0x482/0x9a0 [ 1447.969400][T26761] ? file_end_write+0x250/0x250 [ 1447.974300][T26761] ? __fget_files+0x3fc/0x460 [ 1447.979128][T26761] ? __fdget_pos+0x1d4/0x360 [ 1447.983772][T26761] ? ksys_write+0x70/0x260 [ 1447.988255][T26761] ksys_write+0x14d/0x260 [ 1447.992684][T26761] ? __ia32_sys_read+0x80/0x80 [ 1447.997498][T26761] ? lockdep_hardirqs_on+0x94/0x140 [ 1448.002737][T26761] do_syscall_64+0x4c/0xa0 [ 1448.007197][T26761] ? clear_bhb_loop+0x60/0xb0 [ 1448.011927][T26761] ? clear_bhb_loop+0x60/0xb0 [ 1448.016642][T26761] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1448.022629][T26761] RIP: 0033:0x7f4d67d9de99 [ 1448.027086][T26761] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1448.046736][T26761] RSP: 002b:00007f4d68c9c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1448.055201][T26761] RAX: ffffffffffffffda RBX: 00007f4d68025fa0 RCX: 00007f4d67d9de99 [ 1448.063225][T26761] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8 [ 1448.071247][T26761] RBP: 00007f4d68c9c090 R08: 0000000000000000 R09: 0000000000000000 [ 1448.079283][T26761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1448.087293][T26761] R13: 00007f4d68026038 R14: 00007f4d68025fa0 R15: 00007ffdbcca4ff8 [ 1448.095321][T26761] [ 1448.117457][T26767] FAULT_INJECTION: forcing a failure. [ 1448.117457][T26767] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1448.136497][T26767] CPU: 1 PID: 26767 Comm: syz.3.6653 Not tainted syzkaller #0 [ 1448.144041][T26767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1448.154229][T26767] Call Trace: [ 1448.157544][T26767] [ 1448.160515][T26767] dump_stack_lvl+0x188/0x24e [ 1448.165238][T26767] ? show_regs_print_info+0x12/0x12 [ 1448.170482][T26767] ? load_image+0x410/0x410 [ 1448.175029][T26767] ? __lock_acquire+0x7c40/0x7c40 [ 1448.180107][T26767] should_fail_ex+0x390/0x4c0 [ 1448.184829][T26767] _copy_from_user+0x2c/0x170 [ 1448.189546][T26767] __sys_bpf+0x2ea/0x780 [ 1448.193848][T26767] ? bpf_link_show_fdinfo+0x380/0x380 [ 1448.199286][T26767] ? lock_chain_count+0x20/0x20 [ 1448.204195][T26767] __x64_sys_bpf+0x78/0x90 [ 1448.208657][T26767] do_syscall_64+0x4c/0xa0 [ 1448.213123][T26767] ? clear_bhb_loop+0x60/0xb0 [ 1448.217844][T26767] ? clear_bhb_loop+0x60/0xb0 [ 1448.222599][T26767] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1448.228533][T26767] RIP: 0033:0x7f79c2d9de99 [ 1448.232983][T26767] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1448.252633][T26767] RSP: 002b:00007f79c3c8b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1448.261094][T26767] RAX: ffffffffffffffda RBX: 00007f79c3025fa0 RCX: 00007f79c2d9de99 [ 1448.269113][T26767] RDX: 000000000000000c RSI: 0000200000000080 RDI: 000000000000000a [ 1448.277125][T26767] RBP: 00007f79c3c8b090 R08: 0000000000000000 R09: 0000000000000000 [ 1448.285174][T26767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1448.293186][T26767] R13: 00007f79c3026038 R14: 00007f79c3025fa0 R15: 00007ffe65522dd8 [ 1448.301216][T26767] [ 1448.815590][T26785] netlink: 64535 bytes leftover after parsing attributes in process `syz.1.6657'. [ 1451.860653][T26830] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6671'. [ 1452.308250][T26840] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6677'. [ 1452.374812][T26840] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6677'. [ 1452.458965][T26842] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6677'. [ 1452.515254][T26847] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6677'. [ 1454.549701][T26896] netlink: 'syz.4.6692': attribute type 10 has an invalid length. [ 1455.141038][T26915] netlink: 'syz.1.6698': attribute type 10 has an invalid length. [ 1455.182896][T26915] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6698'. [ 1455.203240][T26915] device dummy0 entered promiscuous mode [ 1455.209831][T26915] bridge0: port 3(dummy0) entered blocking state [ 1455.290175][T26915] bridge0: port 3(dummy0) entered disabled state [ 1455.309597][T26915] bridge0: port 3(dummy0) entered blocking state [ 1455.316426][T26915] bridge0: port 3(dummy0) entered forwarding state [ 1455.915633][T26939] device pim6reg1 entered promiscuous mode [ 1455.989936][T26943] netlink: 'syz.5.6704': attribute type 10 has an invalid length. [ 1456.045013][T26943] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6704'. [ 1456.101702][T26943] batman_adv: batadv0: Adding interface: veth0_vlan [ 1456.137045][T26943] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1456.189998][T26943] batman_adv: batadv0: Interface activated: veth0_vlan [ 1456.398973][T26953] netlink: 'syz.4.6707': attribute type 29 has an invalid length. [ 1456.506467][T26953] netlink: 'syz.4.6707': attribute type 29 has an invalid length. [ 1456.564128][T26951] netlink: 'syz.4.6707': attribute type 29 has an invalid length. [ 1456.693763][T26952] netlink: 'syz.2.6706': attribute type 10 has an invalid length. [ 1456.815141][T26952] netlink: 55 bytes leftover after parsing attributes in process `syz.2.6706'. [ 1458.067019][T26952] team0: Port device macvlan0 removed [ 1461.563426][T27003] netlink: 'syz.3.6720': attribute type 10 has an invalid length. [ 1461.571321][T27003] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6720'. [ 1463.525684][T27047] FAULT_INJECTION: forcing a failure. [ 1463.525684][T27047] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1463.583038][T27047] CPU: 0 PID: 27047 Comm: syz.4.6732 Not tainted syzkaller #0 [ 1463.590605][T27047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1463.600706][T27047] Call Trace: [ 1463.604022][T27047] [ 1463.606988][T27047] dump_stack_lvl+0x188/0x24e [ 1463.611713][T27047] ? show_regs_print_info+0x12/0x12 [ 1463.616952][T27047] ? load_image+0x410/0x410 [ 1463.621506][T27047] ? __lock_acquire+0x7c40/0x7c40 [ 1463.626578][T27047] ? __bpf_prog_test_run_raw_tp+0x2a6/0x430 [ 1463.632511][T27047] should_fail_ex+0x390/0x4c0 [ 1463.637213][T27047] _copy_to_user+0x2c/0x130 [ 1463.641731][T27047] bpf_prog_test_run_raw_tp+0x4de/0x680 [ 1463.647294][T27047] ? trace_bpf_test_finish+0x220/0x220 [ 1463.652773][T27047] ? trace_bpf_test_finish+0x220/0x220 [ 1463.658239][T27047] bpf_prog_test_run+0x31c/0x390 [ 1463.663200][T27047] __sys_bpf+0x62b/0x780 [ 1463.667455][T27047] ? bpf_link_show_fdinfo+0x380/0x380 [ 1463.672878][T27047] ? lock_chain_count+0x20/0x20 [ 1463.677761][T27047] __x64_sys_bpf+0x78/0x90 [ 1463.682191][T27047] do_syscall_64+0x4c/0xa0 [ 1463.686725][T27047] ? clear_bhb_loop+0x60/0xb0 [ 1463.691415][T27047] ? clear_bhb_loop+0x60/0xb0 [ 1463.696107][T27047] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1463.702016][T27047] RIP: 0033:0x7f0e9319de99 [ 1463.706441][T27047] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1463.726144][T27047] RSP: 002b:00007f0e9409b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1463.734568][T27047] RAX: ffffffffffffffda RBX: 00007f0e93425fa0 RCX: 00007f0e9319de99 [ 1463.742551][T27047] RDX: 000000000000000c RSI: 0000200000000080 RDI: 000000000000000a [ 1463.750621][T27047] RBP: 00007f0e9409b090 R08: 0000000000000000 R09: 0000000000000000 [ 1463.758688][T27047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1463.766670][T27047] R13: 00007f0e93426038 R14: 00007f0e93425fa0 R15: 00007ffd709e5ba8 [ 1463.774663][T27047] [ 1464.218465][T27053] netlink: 'syz.4.6735': attribute type 21 has an invalid length. [ 1464.237492][T27053] netlink: 'syz.4.6735': attribute type 1 has an invalid length. [ 1464.409035][T27054] device pim6reg1 entered promiscuous mode [ 1464.790302][T27070] netlink: 'syz.4.6739': attribute type 10 has an invalid length. [ 1464.878486][T27070] netlink: 55 bytes leftover after parsing attributes in process `syz.4.6739'. [ 1464.899018][T27070] batman_adv: batadv0: Interface deactivated: veth0_vlan [ 1466.915848][T27070] batman_adv: batadv0: Removing interface: veth0_vlan [ 1467.011463][T27070] team0: Port device macvlan0 removed [ 1467.104630][T27101] netlink: 'syz.2.6746': attribute type 10 has an invalid length. [ 1467.123093][T27101] netlink: 55 bytes leftover after parsing attributes in process `syz.2.6746'. [ 1467.349623][T27107] netlink: 'syz.5.6750': attribute type 10 has an invalid length. [ 1467.368645][T27107] netlink: 55 bytes leftover after parsing attributes in process `syz.5.6750'. [ 1467.900043][T27129] netlink: 'syz.5.6754': attribute type 17 has an invalid length. [ 1467.920496][T27129] netlink: 148 bytes leftover after parsing attributes in process `syz.5.6754'. [ 1468.066630][T27122] device pim6reg1 entered promiscuous mode [ 1468.856133][T27149] netlink: 'syz.5.6760': attribute type 10 has an invalid length. [ 1468.877455][T27149] netlink: 55 bytes leftover after parsing attributes in process `syz.5.6760'. [ 1468.913531][T27149] batman_adv: batadv0: Interface deactivated: veth0_vlan [ 1470.154511][T27149] batman_adv: batadv0: Removing interface: veth0_vlan [ 1470.343697][T27168] netlink: 'syz.2.6765': attribute type 39 has an invalid length. [ 1471.234679][T27179] device pim6reg1 entered promiscuous mode [ 1472.811769][T27218] netlink: 'syz.1.6780': attribute type 10 has an invalid length. [ 1472.833742][T27218] netlink: 55 bytes leftover after parsing attributes in process `syz.1.6780'. [ 1472.895729][T27218] batman_adv: batadv0: Interface deactivated: veth0_vlan [ 1474.095948][T27218] batman_adv: batadv0: Removing interface: veth0_vlan [ 1474.250965][T27228] netlink: 35840 bytes leftover after parsing attributes in process `syz.3.6784'. [ 1474.816272][T27262] netlink: 'syz.3.6791': attribute type 29 has an invalid length. [ 1474.974239][T27262] netlink: 'syz.3.6791': attribute type 29 has an invalid length. [ 1475.014036][T27267] netlink: 'syz.3.6791': attribute type 29 has an invalid length. [ 1475.213512][T27264] device pim6reg1 entered promiscuous mode [ 1476.873094][T27319] device pim6reg1 entered promiscuous mode [ 1477.712776][T27353] delete_channel: no stack [ 1477.739826][ T4288] Bluetooth: hci3: ISO packet for unknown connection handle 7 [ 1478.951349][T27385] device pim6reg1 entered promiscuous mode [ 1482.127223][T27420] netlink: 'syz.2.6840': attribute type 10 has an invalid length. [ 1482.135859][T27420] netlink: 55 bytes leftover after parsing attributes in process `syz.2.6840'. [ 1482.328414][T27431] FAULT_INJECTION: forcing a failure. [ 1482.328414][T27431] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1482.380781][T27431] CPU: 0 PID: 27431 Comm: syz.3.6843 Not tainted syzkaller #0 [ 1482.388334][T27431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1482.398434][T27431] Call Trace: [ 1482.401745][T27431] [ 1482.404712][T27431] dump_stack_lvl+0x188/0x24e [ 1482.409448][T27431] ? show_regs_print_info+0x12/0x12 [ 1482.414694][T27431] ? load_image+0x410/0x410 [ 1482.419240][T27431] ? __lock_acquire+0x7c40/0x7c40 [ 1482.424313][T27431] should_fail_ex+0x390/0x4c0 [ 1482.429046][T27431] _copy_from_user+0x2c/0x170 [ 1482.433849][T27431] iovec_from_user+0x143/0x360 [ 1482.438640][T27431] __import_iovec+0x6c/0x510 [ 1482.443255][T27431] import_iovec+0x6f/0xa0 [ 1482.447605][T27431] ___sys_sendmsg+0x252/0x360 [ 1482.452308][T27431] ? __sys_sendmsg+0x2a0/0x2a0 [ 1482.457107][T27431] ? __lock_acquire+0x7c40/0x7c40 [ 1482.462164][T27431] __se_sys_sendmsg+0x1c3/0x2b0 [ 1482.467033][T27431] ? __x64_sys_sendmsg+0x80/0x80 [ 1482.471995][T27431] ? lockdep_hardirqs_on+0x94/0x140 [ 1482.477206][T27431] do_syscall_64+0x4c/0xa0 [ 1482.481638][T27431] ? clear_bhb_loop+0x60/0xb0 [ 1482.486337][T27431] ? clear_bhb_loop+0x60/0xb0 [ 1482.491061][T27431] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1482.496969][T27431] RIP: 0033:0x7f79c2d9de99 [ 1482.501394][T27431] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1482.521097][T27431] RSP: 002b:00007f79c3c8b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1482.529613][T27431] RAX: ffffffffffffffda RBX: 00007f79c3025fa0 RCX: 00007f79c2d9de99 [ 1482.537593][T27431] RDX: 0000000000004000 RSI: 0000200000000000 RDI: 0000000000000004 [ 1482.545574][T27431] RBP: 00007f79c3c8b090 R08: 0000000000000000 R09: 0000000000000000 [ 1482.553639][T27431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1482.561616][T27431] R13: 00007f79c3026038 R14: 00007f79c3025fa0 R15: 00007ffe65522dd8 [ 1482.569610][T27431] [ 1482.601009][T27437] netlink: 'syz.5.6844': attribute type 10 has an invalid length. [ 1482.609614][T27437] netlink: 55 bytes leftover after parsing attributes in process `syz.5.6844'. [ 1482.758928][T27433] netlink: 'syz.4.6845': attribute type 10 has an invalid length. [ 1483.481036][T27453] device pim6reg1 entered promiscuous mode [ 1484.129512][T27489] netlink: 'syz.5.6861': attribute type 10 has an invalid length. [ 1484.254194][T27489] team0: Device vxcan1 is of different type [ 1484.314272][T27490] netlink: 'syz.4.6863': attribute type 21 has an invalid length. [ 1484.620291][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.626882][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1485.566497][T27517] FAULT_INJECTION: forcing a failure. [ 1485.566497][T27517] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1485.579987][T27517] CPU: 0 PID: 27517 Comm: syz.4.6872 Not tainted syzkaller #0 [ 1485.587498][T27517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1485.597683][T27517] Call Trace: [ 1485.601088][T27517] [ 1485.604051][T27517] dump_stack_lvl+0x188/0x24e [ 1485.608788][T27517] ? show_regs_print_info+0x12/0x12 [ 1485.614034][T27517] ? load_image+0x410/0x410 [ 1485.618577][T27517] ? __lock_acquire+0x7c40/0x7c40 [ 1485.623741][T27517] should_fail_ex+0x390/0x4c0 [ 1485.628464][T27517] _copy_from_user+0x2c/0x170 [ 1485.633186][T27517] __sys_bpf+0x2ea/0x780 [ 1485.637496][T27517] ? bpf_link_show_fdinfo+0x380/0x380 [ 1485.642898][T27517] ? lock_chain_count+0x20/0x20 [ 1485.647775][T27517] __x64_sys_bpf+0x78/0x90 [ 1485.652401][T27517] do_syscall_64+0x4c/0xa0 [ 1485.656829][T27517] ? clear_bhb_loop+0x60/0xb0 [ 1485.661521][T27517] ? clear_bhb_loop+0x60/0xb0 [ 1485.666212][T27517] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1485.672118][T27517] RIP: 0033:0x7f0e9319de99 [ 1485.676566][T27517] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1485.696228][T27517] RSP: 002b:00007f0e9409b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1485.704670][T27517] RAX: ffffffffffffffda RBX: 00007f0e93425fa0 RCX: 00007f0e9319de99 [ 1485.712655][T27517] RDX: 0000000000000028 RSI: 0000200000000640 RDI: 0000000000000012 [ 1485.720663][T27517] RBP: 00007f0e9409b090 R08: 0000000000000000 R09: 0000000000000000 [ 1485.728643][T27517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1485.736630][T27517] R13: 00007f0e93426038 R14: 00007f0e93425fa0 R15: 00007ffd709e5ba8 [ 1485.744653][T27517] [ 1487.191887][T27538] sock: sock_set_timeout: `syz.2.6877' (pid 27538) tries to set negative timeout [ 1488.843854][T27538] netlink: 'syz.2.6877': attribute type 10 has an invalid length. [ 1488.851753][T27538] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6877'. [ 1489.146667][T27556] netlink: 'syz.3.6878': attribute type 29 has an invalid length. [ 1489.255494][T27556] netlink: 'syz.3.6878': attribute type 29 has an invalid length. [ 1489.294696][T27556] netlink: 'syz.3.6878': attribute type 29 has an invalid length. [ 1489.331623][T27562] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6881'. [ 1489.368607][T27562] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6881'. [ 1489.404789][T27563] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6881'. [ 1489.414631][T27562] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6881'. [ 1489.899136][T27581] device syzkaller0 entered promiscuous mode [ 1492.846238][T27592] device pim6reg1 entered promiscuous mode [ 1492.872740][T27601] netlink: 180 bytes leftover after parsing attributes in process `syz.1.6893'. [ 1493.288362][T27620] netlink: 'syz.4.6898': attribute type 14 has an invalid length. [ 1493.317734][T27620] netlink: 156 bytes leftover after parsing attributes in process `syz.4.6898'. [ 1493.525239][T27628] netlink: 10 bytes leftover after parsing attributes in process `syz.2.6902'. [ 1493.593448][T27629] netlink: 'syz.2.6902': attribute type 9 has an invalid length. [ 1493.664955][T27630] netlink: 'syz.2.6902': attribute type 9 has an invalid length. [ 1493.686068][T27634] netlink: 'syz.5.6904': attribute type 10 has an invalid length. [ 1493.699669][T27634] device veth1_macvtap left promiscuous mode [ 1494.041957][T27646] device pim6reg1 entered promiscuous mode [ 1494.482541][T27661] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6912'. [ 1494.521887][T27663] netlink: 'syz.2.6911': attribute type 10 has an invalid length. [ 1494.548058][T27663] netlink: 55 bytes leftover after parsing attributes in process `syz.2.6911'. [ 1497.200736][T27674] netlink: 'syz.4.6916': attribute type 9 has an invalid length. [ 1497.215072][T27674] netlink: 61967 bytes leftover after parsing attributes in process `syz.4.6916'. [ 1497.765386][T27708] FAULT_INJECTION: forcing a failure. [ 1497.765386][T27708] name failslab, interval 1, probability 0, space 0, times 0 [ 1497.852326][T27708] CPU: 1 PID: 27708 Comm: syz.5.6923 Not tainted syzkaller #0 [ 1497.859887][T27708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1497.869962][T27708] Call Trace: [ 1497.873254][T27708] [ 1497.876192][T27708] dump_stack_lvl+0x188/0x24e [ 1497.880893][T27708] ? show_regs_print_info+0x12/0x12 [ 1497.886106][T27708] ? load_image+0x410/0x410 [ 1497.890817][T27708] ? __might_sleep+0xd0/0xd0 [ 1497.895416][T27708] ? __lock_acquire+0x7c40/0x7c40 [ 1497.900474][T27708] should_fail_ex+0x390/0x4c0 [ 1497.905175][T27708] should_failslab+0x5/0x20 [ 1497.909686][T27708] slab_pre_alloc_hook+0x59/0x300 [ 1497.914731][T27708] kmem_cache_alloc_node+0x5a/0x310 [ 1497.919945][T27708] ? __alloc_skb+0xf9/0x7d0 [ 1497.924552][T27708] __alloc_skb+0xf9/0x7d0 [ 1497.928897][T27708] netlink_sendmsg+0x654/0xbd0 [ 1497.933862][T27708] ? netlink_getsockopt+0x550/0x550 [ 1497.939103][T27708] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1497.944752][T27708] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1497.950046][T27708] ? security_socket_sendmsg+0x7c/0xa0 [ 1497.955516][T27708] ? netlink_getsockopt+0x550/0x550 [ 1497.960836][T27708] ____sys_sendmsg+0x5ed/0x9a0 [ 1497.965735][T27708] ? __sys_sendmsg_sock+0x30/0x30 [ 1497.970821][T27708] ? __import_iovec+0x306/0x510 [ 1497.975701][T27708] ? import_iovec+0x6f/0xa0 [ 1497.980221][T27708] ___sys_sendmsg+0x2a2/0x360 [ 1497.984918][T27708] ? __sys_sendmsg+0x2a0/0x2a0 [ 1497.989707][T27708] ? __lock_acquire+0x7c40/0x7c40 [ 1497.994860][T27708] __se_sys_sendmsg+0x1c3/0x2b0 [ 1497.999902][T27708] ? __x64_sys_sendmsg+0x80/0x80 [ 1498.004866][T27708] ? lockdep_hardirqs_on+0x94/0x140 [ 1498.010076][T27708] do_syscall_64+0x4c/0xa0 [ 1498.014514][T27708] ? clear_bhb_loop+0x60/0xb0 [ 1498.019351][T27708] ? clear_bhb_loop+0x60/0xb0 [ 1498.024038][T27708] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1498.029943][T27708] RIP: 0033:0x7fde2739de99 [ 1498.034369][T27708] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1498.054159][T27708] RSP: 002b:00007fde28229028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1498.062584][T27708] RAX: ffffffffffffffda RBX: 00007fde27625fa0 RCX: 00007fde2739de99 [ 1498.070564][T27708] RDX: 0000000000004000 RSI: 0000200000000000 RDI: 0000000000000004 [ 1498.078542][T27708] RBP: 00007fde28229090 R08: 0000000000000000 R09: 0000000000000000 [ 1498.086698][T27708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1498.094675][T27708] R13: 00007fde27626038 R14: 00007fde27625fa0 R15: 00007ffceeaaf618 [ 1498.102668][T27708] [ 1498.698433][T27719] netlink: 14548 bytes leftover after parsing attributes in process `syz.1.6928'. [ 1499.851970][T27757] device pim6reg1 entered promiscuous mode [ 1499.967790][T27763] netlink: 'syz.1.6945': attribute type 10 has an invalid length. [ 1500.046791][T27763] bridge0: port 2(bridge_slave_1) entered disabled state [ 1500.079609][T27763] device bridge_slave_1 left promiscuous mode [ 1500.118264][T27763] bridge0: port 2(bridge_slave_1) entered disabled state [ 1500.138799][T27763] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1500.163633][T27767] netlink: 'syz.5.6946': attribute type 10 has an invalid length. [ 1500.211234][T27767] device geneve0 entered promiscuous mode [ 1500.250564][T27767] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 1501.835977][T27815] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6962'. [ 1501.885673][T27815] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6962'. [ 1501.938209][T27820] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6962'. [ 1501.950834][T27819] netlink: 60 bytes leftover after parsing attributes in process `syz.5.6964'. [ 1502.003769][T27815] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6962'. [ 1502.024147][T27819] netlink: 60 bytes leftover after parsing attributes in process `syz.5.6964'. [ 1502.326284][T27832] netlink: 'syz.4.6965': attribute type 29 has an invalid length. [ 1502.510495][T27823] netlink: 152 bytes leftover after parsing attributes in process `syz.5.6964'. [ 1502.528863][T27821] netlink: 60 bytes leftover after parsing attributes in process `syz.5.6964'. [ 1502.571051][T27832] netlink: 'syz.4.6965': attribute type 29 has an invalid length. [ 1502.598999][T27819] netlink: 60 bytes leftover after parsing attributes in process `syz.5.6964'. [ 1502.632094][T27824] device pim6reg1 entered promiscuous mode [ 1502.662939][T27835] netlink: 'syz.4.6965': attribute type 29 has an invalid length. [ 1503.057393][T27852] netlink: 'syz.1.6970': attribute type 4 has an invalid length. [ 1503.652487][T27873] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6978'. [ 1503.912436][T27878] device syzkaller0 entered promiscuous mode [ 1506.956976][T27896] __nla_validate_parse: 4 callbacks suppressed [ 1506.956992][T27896] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6986'. [ 1506.983041][T27894] device pim6reg1 entered promiscuous mode [ 1507.136132][T27910] netlink: 60 bytes leftover after parsing attributes in process `syz.5.6997'. [ 1507.162996][T27910] netlink: 60 bytes leftover after parsing attributes in process `syz.5.6997'. [ 1507.185194][T27910] netlink: 60 bytes leftover after parsing attributes in process `syz.5.6997'. [ 1507.202562][T27910] netlink: 60 bytes leftover after parsing attributes in process `syz.5.6997'. [ 1507.316828][T27916] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6991'. [ 1507.386347][T27916] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6991'. [ 1507.410365][T27917] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6991'. [ 1507.639886][T27932] device syzkaller0 entered promiscuous mode [ 1507.682200][T27929] netlink: 'syz.2.6994': attribute type 4 has an invalid length. [ 1510.215934][T27948] device pim6reg1 entered promiscuous mode [ 1510.479639][T27958] netlink: 60 bytes leftover after parsing attributes in process `syz.5.7004'. [ 1510.506221][T27958] netlink: 60 bytes leftover after parsing attributes in process `syz.5.7004'. [ 1510.579751][T27956] netlink: 'syz.4.7003': attribute type 10 has an invalid length. [ 1511.624359][T27994] device pim6reg1 entered promiscuous mode [ 1512.126607][T28009] __nla_validate_parse: 6 callbacks suppressed [ 1512.126630][T28009] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7021'. [ 1512.219757][T28009] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7021'. [ 1512.253715][T28011] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7021'. [ 1512.386563][T28010] netlink: 'syz.3.7020': attribute type 10 has an invalid length. [ 1512.420633][T28010] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7020'. [ 1512.445783][T28013] netlink: 76 bytes leftover after parsing attributes in process `syz.5.7022'. [ 1514.291446][T28050] device pim6reg1 entered promiscuous mode [ 1514.603944][T28069] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7037'. [ 1514.634711][T28069] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7037'. [ 1514.651809][T28069] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7037'. [ 1514.665450][T28070] netlink: 'syz.5.7038': attribute type 10 has an invalid length. [ 1514.674822][T28070] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7038'. [ 1516.433958][T28100] device pim6reg1 entered promiscuous mode [ 1516.816458][T28117] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7055'. [ 1516.821027][T28113] netlink: 'syz.2.7052': attribute type 10 has an invalid length. [ 1517.039371][T28121] device syzkaller0 entered promiscuous mode [ 1520.282022][T28140] netlink: 'syz.3.7062': attribute type 10 has an invalid length. [ 1520.290199][T28140] bridge0: port 4(macsec0) entered blocking state [ 1520.297144][T28140] bridge0: port 4(macsec0) entered disabled state [ 1520.306195][T28140] device macsec0 entered promiscuous mode [ 1520.315551][T28145] __nla_validate_parse: 4 callbacks suppressed [ 1520.315567][T28145] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7065'. [ 1520.351623][T28148] netlink: 'syz.4.7066': attribute type 41 has an invalid length. [ 1520.514122][T28155] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7068'. [ 1520.599189][T28155] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7068'. [ 1520.642527][T28159] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7068'. [ 1520.779089][T28155] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7068'. [ 1520.858486][T28165] netlink: 'syz.3.7070': attribute type 10 has an invalid length. [ 1521.080588][T28165] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7070'. [ 1521.526906][T28179] FAULT_INJECTION: forcing a failure. [ 1521.526906][T28179] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1521.604812][T28179] CPU: 0 PID: 28179 Comm: syz.5.7074 Not tainted syzkaller #0 [ 1521.612446][T28179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1521.622544][T28179] Call Trace: [ 1521.625857][T28179] [ 1521.628827][T28179] dump_stack_lvl+0x188/0x24e [ 1521.633522][T28179] ? show_regs_print_info+0x12/0x12 [ 1521.638752][T28179] ? load_image+0x410/0x410 [ 1521.643393][T28179] ? __might_fault+0xa6/0x120 [ 1521.648130][T28179] should_fail_ex+0x390/0x4c0 [ 1521.652865][T28179] copyin+0x1b/0x120 [ 1521.656816][T28179] _copy_from_iter+0x447/0x1130 [ 1521.661727][T28179] ? copyout_mc+0x110/0x110 [ 1521.666278][T28179] ? __sanitizer_cov_trace_const_cmp4+0x4/0x80 [ 1521.672471][T28179] ? __virt_addr_valid+0x467/0x540 [ 1521.677627][T28179] ? __phys_addr_symbol+0x2b/0x70 [ 1521.682690][T28179] ? __check_object_size+0x4f6/0xa70 [ 1521.688071][T28179] netlink_sendmsg+0x755/0xbd0 [ 1521.692898][T28179] ? netlink_getsockopt+0x550/0x550 [ 1521.698143][T28179] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1521.703736][T28179] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1521.709148][T28179] ? security_socket_sendmsg+0x7c/0xa0 [ 1521.714741][T28179] ? netlink_getsockopt+0x550/0x550 [ 1521.719988][T28179] ____sys_sendmsg+0x5ed/0x9a0 [ 1521.724807][T28179] ? __sys_sendmsg_sock+0x30/0x30 [ 1521.729871][T28179] ? __import_iovec+0x306/0x510 [ 1521.734772][T28179] ? import_iovec+0x6f/0xa0 [ 1521.739321][T28179] ___sys_sendmsg+0x2a2/0x360 [ 1521.744044][T28179] ? __sys_sendmsg+0x2a0/0x2a0 [ 1521.748881][T28179] ? __lock_acquire+0x7c40/0x7c40 [ 1521.753979][T28179] __se_sys_sendmsg+0x1c3/0x2b0 [ 1521.758879][T28179] ? __x64_sys_sendmsg+0x80/0x80 [ 1521.763882][T28179] ? lockdep_hardirqs_on+0x94/0x140 [ 1521.769123][T28179] do_syscall_64+0x4c/0xa0 [ 1521.773586][T28179] ? clear_bhb_loop+0x60/0xb0 [ 1521.778307][T28179] ? clear_bhb_loop+0x60/0xb0 [ 1521.783067][T28179] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1521.789071][T28179] RIP: 0033:0x7fde2739de99 [ 1521.793530][T28179] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1521.813166][T28179] RSP: 002b:00007fde28229028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1521.821605][T28179] RAX: ffffffffffffffda RBX: 00007fde27625fa0 RCX: 00007fde2739de99 [ 1521.829580][T28179] RDX: 0000000000004000 RSI: 0000200000000000 RDI: 0000000000000004 [ 1521.837569][T28179] RBP: 00007fde28229090 R08: 0000000000000000 R09: 0000000000000000 [ 1521.845566][T28179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1521.853561][T28179] R13: 00007fde27626038 R14: 00007fde27625fa0 R15: 00007ffceeaaf618 [ 1521.862071][T28179] [ 1522.400601][T28207] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7082'. [ 1522.410274][T28207] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7082'. [ 1522.426505][T28207] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7082'. [ 1522.438499][T28213] netlink: 'syz.5.7084': attribute type 10 has an invalid length. [ 1522.470651][T28207] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7082'. [ 1522.743413][T28220] netlink: 'syz.2.7087': attribute type 10 has an invalid length. [ 1523.553827][T28246] FAULT_INJECTION: forcing a failure. [ 1523.553827][T28246] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1523.583066][T28246] CPU: 1 PID: 28246 Comm: syz.2.7095 Not tainted syzkaller #0 [ 1523.590605][T28246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1523.600786][T28246] Call Trace: [ 1523.604095][T28246] [ 1523.607053][T28246] dump_stack_lvl+0x188/0x24e [ 1523.611780][T28246] ? show_regs_print_info+0x12/0x12 [ 1523.617032][T28246] ? load_image+0x410/0x410 [ 1523.621612][T28246] ? __lock_acquire+0x7c40/0x7c40 [ 1523.626785][T28246] should_fail_ex+0x390/0x4c0 [ 1523.631524][T28246] _copy_from_user+0x2c/0x170 [ 1523.636248][T28246] ___sys_sendmsg+0x1c3/0x360 [ 1523.640979][T28246] ? __sys_sendmsg+0x2a0/0x2a0 [ 1523.645806][T28246] ? __lock_acquire+0x7c40/0x7c40 [ 1523.650906][T28246] __se_sys_sendmsg+0x1c3/0x2b0 [ 1523.655815][T28246] ? __x64_sys_sendmsg+0x80/0x80 [ 1523.660817][T28246] ? lockdep_hardirqs_on+0x94/0x140 [ 1523.666063][T28246] do_syscall_64+0x4c/0xa0 [ 1523.670535][T28246] ? clear_bhb_loop+0x60/0xb0 [ 1523.675252][T28246] ? clear_bhb_loop+0x60/0xb0 [ 1523.679989][T28246] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1523.685928][T28246] RIP: 0033:0x7f4deb79de99 [ 1523.690392][T28246] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1523.710042][T28246] RSP: 002b:00007f4dec6c8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1523.718597][T28246] RAX: ffffffffffffffda RBX: 00007f4deba25fa0 RCX: 00007f4deb79de99 [ 1523.726613][T28246] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 1523.734713][T28246] RBP: 00007f4dec6c8090 R08: 0000000000000000 R09: 0000000000000000 [ 1523.742727][T28246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1523.750740][T28246] R13: 00007f4deba26038 R14: 00007f4deba25fa0 R15: 00007fffecd48e48 [ 1523.758768][T28246] [ 1524.669058][T28270] netlink: 'syz.4.7105': attribute type 10 has an invalid length. [ 1525.432982][T28284] __nla_validate_parse: 10 callbacks suppressed [ 1525.433004][T28284] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7111'. [ 1525.501563][T28284] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7111'. [ 1525.577138][T28289] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7111'. [ 1525.710402][T28292] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7111'. [ 1527.015594][T28317] netlink: 'syz.1.7119': attribute type 10 has an invalid length. [ 1527.290496][T28317] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7119'. [ 1527.485780][T28319] netlink: 'syz.2.7114': attribute type 2 has an invalid length. [ 1527.624503][T28319] netlink: 'syz.2.7114': attribute type 4 has an invalid length. [ 1527.709449][T28319] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7114'. [ 1528.341382][T28348] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7127'. [ 1528.355100][T28346] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7128'. [ 1528.373212][T28348] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7127'. [ 1528.400757][T28346] netlink: 'syz.5.7128': attribute type 3 has an invalid length. [ 1528.418023][T28351] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7127'. [ 1528.438063][T28349] delete_channel: no stack [ 1528.447825][T28349] delete_channel: no stack [ 1528.529330][T28353] netlink: 'syz.3.7130': attribute type 7 has an invalid length. [ 1529.418750][T28376] netlink: 'syz.5.7137': attribute type 10 has an invalid length. [ 1529.571889][T28381] netlink: 'syz.1.7139': attribute type 15 has an invalid length. [ 1529.604901][T28381] netlink: 'syz.1.7139': attribute type 7 has an invalid length. [ 1531.178135][T28407] FAULT_INJECTION: forcing a failure. [ 1531.178135][T28407] name failslab, interval 1, probability 0, space 0, times 0 [ 1531.231153][T28407] CPU: 0 PID: 28407 Comm: syz.2.7146 Not tainted syzkaller #0 [ 1531.238685][T28407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1531.248774][T28407] Call Trace: [ 1531.252080][T28407] [ 1531.255092][T28407] dump_stack_lvl+0x188/0x24e [ 1531.259819][T28407] ? show_regs_print_info+0x12/0x12 [ 1531.265060][T28407] ? load_image+0x410/0x410 [ 1531.269604][T28407] ? verify_lock_unused+0x140/0x140 [ 1531.274848][T28407] should_fail_ex+0x390/0x4c0 [ 1531.279567][T28407] should_failslab+0x5/0x20 [ 1531.284095][T28407] slab_pre_alloc_hook+0x59/0x300 [ 1531.289158][T28407] kmem_cache_alloc+0x56/0x2f0 [ 1531.293950][T28407] ? skb_clone+0x1e7/0x370 [ 1531.298416][T28407] skb_clone+0x1e7/0x370 [ 1531.302696][T28407] __netlink_deliver_tap+0x3e4/0x7e0 [ 1531.308029][T28407] ? netlink_deliver_tap+0x2e/0x1b0 [ 1531.313275][T28407] netlink_deliver_tap+0x19c/0x1b0 [ 1531.318427][T28407] netlink_unicast+0x777/0x920 [ 1531.323240][T28407] netlink_sendmsg+0x8ad/0xbd0 [ 1531.328052][T28407] ? netlink_getsockopt+0x550/0x550 [ 1531.333293][T28407] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1531.338879][T28407] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1531.344195][T28407] ? security_socket_sendmsg+0x7c/0xa0 [ 1531.349684][T28407] ? netlink_getsockopt+0x550/0x550 [ 1531.354919][T28407] ____sys_sendmsg+0x5ed/0x9a0 [ 1531.359727][T28407] ? __sys_sendmsg_sock+0x30/0x30 [ 1531.364783][T28407] ? __import_iovec+0x306/0x510 [ 1531.369681][T28407] ? import_iovec+0x6f/0xa0 [ 1531.374259][T28407] ___sys_sendmsg+0x2a2/0x360 [ 1531.378982][T28407] ? __sys_sendmsg+0x2a0/0x2a0 [ 1531.383864][T28407] ? __lock_acquire+0x7c40/0x7c40 [ 1531.388951][T28407] __se_sys_sendmsg+0x1c3/0x2b0 [ 1531.393849][T28407] ? __x64_sys_sendmsg+0x80/0x80 [ 1531.398848][T28407] ? lockdep_hardirqs_on+0x94/0x140 [ 1531.404085][T28407] do_syscall_64+0x4c/0xa0 [ 1531.408539][T28407] ? clear_bhb_loop+0x60/0xb0 [ 1531.413252][T28407] ? clear_bhb_loop+0x60/0xb0 [ 1531.417975][T28407] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1531.423906][T28407] RIP: 0033:0x7f4deb79de99 [ 1531.428351][T28407] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1531.448080][T28407] RSP: 002b:00007f4dec6c8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1531.456529][T28407] RAX: ffffffffffffffda RBX: 00007f4deba25fa0 RCX: 00007f4deb79de99 [ 1531.464529][T28407] RDX: 0000000000004000 RSI: 0000200000000000 RDI: 0000000000000004 [ 1531.472540][T28407] RBP: 00007f4dec6c8090 R08: 0000000000000000 R09: 0000000000000000 [ 1531.480542][T28407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1531.489767][T28407] R13: 00007f4deba26038 R14: 00007f4deba25fa0 R15: 00007fffecd48e48 [ 1531.497804][T28407] [ 1531.705330][T28407] netlink: 'syz.2.7146': attribute type 10 has an invalid length. [ 1531.730399][T28407] __nla_validate_parse: 8 callbacks suppressed [ 1531.730420][T28407] netlink: 55 bytes leftover after parsing attributes in process `syz.2.7146'. [ 1531.943799][T28414] delete_channel: no stack [ 1532.050229][T28414] delete_channel: no stack [ 1532.163841][T28423] FAULT_INJECTION: forcing a failure. [ 1532.163841][T28423] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1532.177673][T28423] CPU: 0 PID: 28423 Comm: syz.2.7151 Not tainted syzkaller #0 [ 1532.185180][T28423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1532.195252][T28423] Call Trace: [ 1532.198560][T28423] [ 1532.201502][T28423] dump_stack_lvl+0x188/0x24e [ 1532.206202][T28423] ? show_regs_print_info+0x12/0x12 [ 1532.211415][T28423] ? load_image+0x410/0x410 [ 1532.215934][T28423] ? __lock_acquire+0x7c40/0x7c40 [ 1532.220980][T28423] should_fail_ex+0x390/0x4c0 [ 1532.225677][T28423] _copy_from_user+0x2c/0x170 [ 1532.230365][T28423] btf_new_fd+0x326/0x760 [ 1532.234785][T28423] __sys_bpf+0x612/0x780 [ 1532.239046][T28423] ? bpf_link_show_fdinfo+0x380/0x380 [ 1532.244530][T28423] ? lock_chain_count+0x20/0x20 [ 1532.249399][T28423] __x64_sys_bpf+0x78/0x90 [ 1532.253828][T28423] do_syscall_64+0x4c/0xa0 [ 1532.258258][T28423] ? clear_bhb_loop+0x60/0xb0 [ 1532.262947][T28423] ? clear_bhb_loop+0x60/0xb0 [ 1532.267642][T28423] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1532.273567][T28423] RIP: 0033:0x7f4deb79de99 [ 1532.277999][T28423] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1532.297617][T28423] RSP: 002b:00007f4dec6c8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1532.306127][T28423] RAX: ffffffffffffffda RBX: 00007f4deba25fa0 RCX: 00007f4deb79de99 [ 1532.314121][T28423] RDX: 0000000000000028 RSI: 0000200000000640 RDI: 0000000000000012 [ 1532.322101][T28423] RBP: 00007f4dec6c8090 R08: 0000000000000000 R09: 0000000000000000 [ 1532.330082][T28423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1532.338060][T28423] R13: 00007f4deba26038 R14: 00007f4deba25fa0 R15: 00007fffecd48e48 [ 1532.346047][T28423] [ 1532.785512][T28435] netlink: 'syz.2.7153': attribute type 10 has an invalid length. [ 1532.855060][T28435] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7153'. [ 1533.720350][T28450] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7160'. [ 1533.788714][T28450] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7160'. [ 1533.861140][T28454] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7160'. [ 1533.902345][T28452] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7160'. [ 1534.102964][T28456] netlink: 'syz.3.7163': attribute type 10 has an invalid length. [ 1534.171219][T28456] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 1534.867516][T28474] netlink: 'syz.2.7169': attribute type 10 has an invalid length. [ 1534.885981][T28474] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7169'. [ 1535.329650][T28487] netlink: 60 bytes leftover after parsing attributes in process `syz.5.7173'. [ 1535.371430][T28487] netlink: 60 bytes leftover after parsing attributes in process `syz.5.7173'. [ 1535.400560][T28488] netlink: 60 bytes leftover after parsing attributes in process `syz.5.7173'. [ 1536.651343][T28521] netlink: 'syz.2.7184': attribute type 10 has an invalid length. [ 1537.295053][T28527] __nla_validate_parse: 2 callbacks suppressed [ 1537.295075][T28527] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7187'. [ 1537.350559][T28527] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7187'. [ 1537.368208][T28532] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7187'. [ 1538.007669][T28559] netlink: 'syz.2.7197': attribute type 10 has an invalid length. [ 1538.017153][T28559] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7197'. [ 1538.543172][T28569] netlink: 14 bytes leftover after parsing attributes in process `syz.2.7200'. [ 1538.553475][T28569] openvswitch: netlink: Flow key attr not present in new flow. [ 1538.823657][T28575] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.7201'. [ 1538.862507][T28575] netlink: 43 bytes leftover after parsing attributes in process `syz.1.7201'. [ 1539.613405][T28594] netlink: 'syz.3.7210': attribute type 10 has an invalid length. [ 1539.621334][T28594] netlink: 55 bytes leftover after parsing attributes in process `syz.3.7210'. [ 1539.662433][T28592] netlink: 'syz.5.7209': attribute type 10 has an invalid length. [ 1539.679578][T28592] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7209'. [ 1541.139021][T28627] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7220'. [ 1541.707146][ T4288] Bluetooth: hci1: unexpected event 0x2c length: 151 > 17 [ 1541.707189][ T4288] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 1541.765596][T28639] netlink: 'syz.3.7225': attribute type 10 has an invalid length. [ 1541.936154][T28641] netlink: 'syz.5.7226': attribute type 10 has an invalid length. [ 1541.952885][T28641] FAULT_INJECTION: forcing a failure. [ 1541.952885][T28641] name failslab, interval 1, probability 0, space 0, times 0 [ 1541.990775][T28641] CPU: 0 PID: 28641 Comm: syz.5.7226 Not tainted syzkaller #0 [ 1541.998318][T28641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1542.008407][T28641] Call Trace: [ 1542.011714][T28641] [ 1542.014671][T28641] dump_stack_lvl+0x188/0x24e [ 1542.019391][T28641] ? show_regs_print_info+0x12/0x12 [ 1542.024633][T28641] ? load_image+0x410/0x410 [ 1542.029175][T28641] ? __might_sleep+0xd0/0xd0 [ 1542.033893][T28641] ? __lock_acquire+0x7c40/0x7c40 [ 1542.038958][T28641] should_fail_ex+0x390/0x4c0 [ 1542.043685][T28641] should_failslab+0x5/0x20 [ 1542.048220][T28641] slab_pre_alloc_hook+0x59/0x300 [ 1542.053584][T28641] kmem_cache_alloc_node+0x5a/0x310 [ 1542.058903][T28641] ? __alloc_skb+0xf9/0x7d0 [ 1542.063458][T28641] __alloc_skb+0xf9/0x7d0 [ 1542.067882][T28641] netlink_ack+0x373/0x1160 [ 1542.072436][T28641] ? ref_tracker_free+0x682/0x830 [ 1542.077568][T28641] ? refcount_inc+0x70/0x70 [ 1542.082102][T28641] ? netlink_dump+0xcd0/0xcd0 [ 1542.086825][T28641] ? __copy_skb_header+0x3ba/0x4f0 [ 1542.091977][T28641] ? __skb_clone+0x446/0x6c0 [ 1542.096614][T28641] netlink_rcv_skb+0x26d/0x440 [ 1542.101432][T28641] ? rtnetlink_bind+0x80/0x80 [ 1542.106217][T28641] ? netlink_ack+0x1160/0x1160 [ 1542.111031][T28641] ? netlink_deliver_tap+0x2e/0x1b0 [ 1542.116277][T28641] netlink_unicast+0x7ad/0x920 [ 1542.121097][T28641] netlink_sendmsg+0x8ad/0xbd0 [ 1542.125907][T28641] ? netlink_getsockopt+0x550/0x550 [ 1542.131237][T28641] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1542.136997][T28641] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1542.142329][T28641] ? security_socket_sendmsg+0x7c/0xa0 [ 1542.147912][T28641] ? netlink_getsockopt+0x550/0x550 [ 1542.153149][T28641] ____sys_sendmsg+0x5ed/0x9a0 [ 1542.157958][T28641] ? __sys_sendmsg_sock+0x30/0x30 [ 1542.163013][T28641] ? __import_iovec+0x306/0x510 [ 1542.167914][T28641] ? import_iovec+0x6f/0xa0 [ 1542.172460][T28641] ___sys_sendmsg+0x2a2/0x360 [ 1542.177182][T28641] ? __sys_sendmsg+0x2a0/0x2a0 [ 1542.182006][T28641] ? trace_call_bpf+0xbf/0x6b0 [ 1542.186838][T28641] __se_sys_sendmsg+0x1c3/0x2b0 [ 1542.191723][T28641] ? perf_trace_preemptirq_template+0x268/0x320 [ 1542.198006][T28641] ? __x64_sys_sendmsg+0x80/0x80 [ 1542.203001][T28641] ? lockdep_hardirqs_on+0x94/0x140 [ 1542.208231][T28641] do_syscall_64+0x4c/0xa0 [ 1542.212679][T28641] ? clear_bhb_loop+0x60/0xb0 [ 1542.217389][T28641] ? clear_bhb_loop+0x60/0xb0 [ 1542.222114][T28641] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1542.228037][T28641] RIP: 0033:0x7fde2739de99 [ 1542.232503][T28641] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1542.252161][T28641] RSP: 002b:00007fde28229028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1542.260613][T28641] RAX: ffffffffffffffda RBX: 00007fde27625fa0 RCX: 00007fde2739de99 [ 1542.268619][T28641] RDX: 0000000000004000 RSI: 0000200000000000 RDI: 0000000000000004 [ 1542.276625][T28641] RBP: 00007fde28229090 R08: 0000000000000000 R09: 0000000000000000 [ 1542.284625][T28641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1542.292622][T28641] R13: 00007fde27626038 R14: 00007fde27625fa0 R15: 00007ffceeaaf618 [ 1542.300656][T28641] [ 1545.649381][T28682] netlink: 'syz.2.7238': attribute type 10 has an invalid length. [ 1545.677203][T28682] __nla_validate_parse: 2 callbacks suppressed [ 1545.677249][T28682] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7238'. [ 1546.053313][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.059716][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.179840][ T4280] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1546.200741][ T4280] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1546.209878][ T4280] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1546.222302][ T4280] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1546.230926][ T4280] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1546.258433][ T4280] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1546.350297][T28701] netlink: 'syz.1.7243': attribute type 10 has an invalid length. [ 1546.371839][T28701] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 1546.735051][T28709] FAULT_INJECTION: forcing a failure. [ 1546.735051][T28709] name failslab, interval 1, probability 0, space 0, times 0 [ 1546.763692][T28709] CPU: 1 PID: 28709 Comm: syz.5.7246 Not tainted syzkaller #0 [ 1546.771223][T28709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1546.781295][T28709] Call Trace: [ 1546.784589][T28709] [ 1546.787533][T28709] dump_stack_lvl+0x188/0x24e [ 1546.792243][T28709] ? show_regs_print_info+0x12/0x12 [ 1546.797468][T28709] ? load_image+0x410/0x410 [ 1546.802003][T28709] ? __might_sleep+0xd0/0xd0 [ 1546.806606][T28709] ? __lock_acquire+0x7c40/0x7c40 [ 1546.811660][T28709] should_fail_ex+0x390/0x4c0 [ 1546.816368][T28709] should_failslab+0x5/0x20 [ 1546.820880][T28709] slab_pre_alloc_hook+0x59/0x300 [ 1546.825928][T28709] kmem_cache_alloc_node+0x5a/0x310 [ 1546.831234][T28709] ? __alloc_skb+0xf9/0x7d0 [ 1546.835760][T28709] __alloc_skb+0xf9/0x7d0 [ 1546.840210][T28709] netlink_sendmsg+0x654/0xbd0 [ 1546.845011][T28709] ? netlink_getsockopt+0x550/0x550 [ 1546.850233][T28709] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1546.855816][T28709] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1546.861134][T28709] ? security_socket_sendmsg+0x7c/0xa0 [ 1546.866660][T28709] ? netlink_getsockopt+0x550/0x550 [ 1546.871892][T28709] ____sys_sendmsg+0x5ed/0x9a0 [ 1546.876695][T28709] ? __sys_sendmsg_sock+0x30/0x30 [ 1546.881735][T28709] ? __import_iovec+0x306/0x510 [ 1546.886617][T28709] ? import_iovec+0x6f/0xa0 [ 1546.891143][T28709] ___sys_sendmsg+0x2a2/0x360 [ 1546.895869][T28709] ? __sys_sendmsg+0x2a0/0x2a0 [ 1546.900703][T28709] ? trace_call_bpf+0xbf/0x6b0 [ 1546.905524][T28709] __se_sys_sendmsg+0x1c3/0x2b0 [ 1546.910392][T28709] ? perf_trace_preemptirq_template+0x268/0x320 [ 1546.916658][T28709] ? __x64_sys_sendmsg+0x80/0x80 [ 1546.921634][T28709] ? lockdep_hardirqs_on+0x94/0x140 [ 1546.926858][T28709] do_syscall_64+0x4c/0xa0 [ 1546.931302][T28709] ? clear_bhb_loop+0x60/0xb0 [ 1546.935998][T28709] ? clear_bhb_loop+0x60/0xb0 [ 1546.940718][T28709] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1546.946654][T28709] RIP: 0033:0x7fde2739de99 [ 1546.951087][T28709] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1546.970716][T28709] RSP: 002b:00007fde28229028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1546.979151][T28709] RAX: ffffffffffffffda RBX: 00007fde27625fa0 RCX: 00007fde2739de99 [ 1546.987137][T28709] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 1546.995120][T28709] RBP: 00007fde28229090 R08: 0000000000000000 R09: 0000000000000000 [ 1547.003109][T28709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1547.011184][T28709] R13: 00007fde27626038 R14: 00007fde27625fa0 R15: 00007ffceeaaf618 [ 1547.019195][T28709] [ 1547.298098][T28694] chnl_net:caif_netlink_parms(): no params data found [ 1547.509433][T28694] bridge0: port 1(bridge_slave_0) entered blocking state [ 1547.517252][T28694] bridge0: port 1(bridge_slave_0) entered disabled state [ 1547.526854][T28694] device bridge_slave_0 entered promiscuous mode [ 1547.549949][T28694] bridge0: port 2(bridge_slave_1) entered blocking state [ 1547.560595][T28694] bridge0: port 2(bridge_slave_1) entered disabled state [ 1547.577970][T28694] device bridge_slave_1 entered promiscuous mode [ 1547.669537][T28694] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1547.695325][T28694] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1547.751810][T28694] team0: Port device team_slave_0 added [ 1547.811089][T28694] team0: Port device team_slave_1 added [ 1547.924082][T28694] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1548.042613][T28694] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1548.097432][T28694] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1548.117018][T28694] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1548.139643][T28694] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1548.172601][T28694] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1548.283055][ T4288] Bluetooth: hci5: command 0x0409 tx timeout [ 1548.384010][T28736] netlink: 'syz.3.7253': attribute type 10 has an invalid length. [ 1548.404111][T28736] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7253'. [ 1548.675887][T28694] device hsr_slave_0 entered promiscuous mode [ 1548.683552][T28694] device hsr_slave_1 entered promiscuous mode [ 1548.690727][T28694] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1548.698476][T28694] Cannot create hsr debugfs directory [ 1548.767572][T28748] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7257'. [ 1548.808885][T28748] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7257'. [ 1548.851853][T28749] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7257'. [ 1548.907702][T28748] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7257'. [ 1549.350480][T28694] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1549.617623][T28694] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1549.659031][T28694] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1549.734709][T28756] netlink: 'syz.3.7259': attribute type 10 has an invalid length. [ 1549.772624][T28756] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.7259'. [ 1549.823514][T28694] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1550.361121][T28694] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1550.420808][ T4288] Bluetooth: hci5: command 0x041b tx timeout [ 1550.467503][ T7764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1550.493980][ T7764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1550.563758][T28694] 8021q: adding VLAN 0 to HW filter on device team0 [ 1550.626823][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1550.648405][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1550.686764][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 1550.694014][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1550.822337][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1550.862234][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1550.944783][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1550.996731][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 1551.003996][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1551.115743][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1551.169117][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1551.239405][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1551.294220][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1551.344223][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1551.403170][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1551.462215][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1551.514850][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1551.564570][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1551.590796][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1551.638356][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1551.710899][T28694] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1552.153825][T28786] netlink: 'syz.1.7268': attribute type 10 has an invalid length. [ 1552.161729][T28786] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7268'. [ 1552.442777][ T4280] Bluetooth: hci5: command 0x040f tx timeout [ 1553.015492][ T7724] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1553.050271][ T7724] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1553.131687][T28694] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1553.242754][ T4280] Bluetooth: hci3: command 0x0406 tx timeout [ 1554.532725][ T4288] Bluetooth: hci5: command 0x0419 tx timeout [ 1554.672476][T28818] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7277'. [ 1554.712947][T28818] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7277'. [ 1554.741787][T28818] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7277'. [ 1554.774333][T28818] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7277'. [ 1555.197841][T28828] netlink: 'syz.3.7280': attribute type 10 has an invalid length. [ 1555.245517][T28828] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7280'. [ 1555.476322][ T7743] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1555.492435][ T7743] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1555.585519][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1555.607564][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1555.626064][T28694] device veth0_vlan entered promiscuous mode [ 1555.643273][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1555.651998][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1555.680866][T28694] device veth1_vlan entered promiscuous mode [ 1555.889222][ T7743] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1555.899958][ T7743] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1555.909956][ T7743] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1555.919785][ T7743] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1556.151867][T28842] netlink: 'syz.5.7281': attribute type 29 has an invalid length. [ 1556.163428][T28694] device veth0_macvtap entered promiscuous mode [ 1556.265626][T28842] netlink: 'syz.5.7281': attribute type 29 has an invalid length. [ 1556.300920][T28840] netlink: 'syz.5.7281': attribute type 29 has an invalid length. [ 1556.337168][T28694] device veth1_macvtap entered promiscuous mode [ 1556.402339][T28694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1556.448710][T28694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1556.487293][T28694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1556.515467][T28694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1556.526309][T28694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1556.548916][T28694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1556.559504][T28694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1556.592290][T28694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1556.617563][T28694] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1556.631876][ T7724] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1556.657041][ T7724] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1556.693429][ T7724] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1556.723721][ T7724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1556.749029][T28694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1556.772053][T28694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1556.801747][T28694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1556.826338][T28694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1556.842210][T28861] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7289'. [ 1556.851443][T28694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1556.862759][T28694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1556.874999][T28694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1556.886099][T28694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1556.942567][T28694] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1556.960162][T28694] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1556.976150][T28694] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1556.990576][T28694] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1557.017873][T28694] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1557.045474][T28861] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7289'. [ 1557.056898][ T7764] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1557.073749][ T7764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1557.108460][T28863] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7289'. [ 1557.302915][ T7764] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1557.310808][ T7764] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1557.384237][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1557.435033][T28873] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7294'. [ 1557.448207][ T7764] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1557.462193][ T7764] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1557.473359][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1557.497947][T28873] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7294'. [ 1557.513655][T28875] netlink: 'syz.1.7293': attribute type 10 has an invalid length. [ 1557.531930][T28875] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7293'. [ 1557.553334][T28873] FAULT_INJECTION: forcing a failure. [ 1557.553334][T28873] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1557.854778][T28877] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7294'. [ 1557.962824][T28873] CPU: 1 PID: 28873 Comm: syz.2.7294 Not tainted syzkaller #0 [ 1557.970377][T28873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1557.980481][T28873] Call Trace: [ 1557.983800][T28873] [ 1557.986777][T28873] dump_stack_lvl+0x188/0x24e [ 1557.991522][T28873] ? show_regs_print_info+0x12/0x12 [ 1557.996855][T28873] ? load_image+0x410/0x410 [ 1558.001422][T28873] ? __lock_acquire+0x7c40/0x7c40 [ 1558.006505][T28873] should_fail_ex+0x390/0x4c0 [ 1558.011228][T28873] _copy_from_user+0x2c/0x170 [ 1558.015960][T28873] ___sys_recvmsg+0x170/0x590 [ 1558.020686][T28873] ? __sys_recvmsg+0x2a0/0x2a0 [ 1558.025504][T28873] ? trace_call_bpf+0xbf/0x6b0 [ 1558.030319][T28873] ? trace_call_bpf+0x5d6/0x6b0 [ 1558.035230][T28873] ? __fget_files+0x3fc/0x460 [ 1558.039968][T28873] __x64_sys_recvmsg+0x20d/0x2e0 [ 1558.044950][T28873] ? perf_trace_preemptirq_template+0x268/0x320 [ 1558.051244][T28873] ? ___sys_recvmsg+0x590/0x590 [ 1558.056176][T28873] ? lockdep_hardirqs_on+0x94/0x140 [ 1558.061415][T28873] do_syscall_64+0x4c/0xa0 [ 1558.065866][T28873] ? clear_bhb_loop+0x60/0xb0 [ 1558.070580][T28873] ? clear_bhb_loop+0x60/0xb0 [ 1558.075300][T28873] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1558.081229][T28873] RIP: 0033:0x7f4deb79de99 [ 1558.085681][T28873] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1558.105418][T28873] RSP: 002b:00007f4dec6c8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1558.113890][T28873] RAX: ffffffffffffffda RBX: 00007f4deba25fa0 RCX: 00007f4deb79de99 [ 1558.121988][T28873] RDX: 0000000000000080 RSI: 0000200000000900 RDI: 0000000000000003 [ 1558.130002][T28873] RBP: 00007f4dec6c8090 R08: 0000000000000000 R09: 0000000000000000 [ 1558.138029][T28873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1558.146045][T28873] R13: 00007f4deba26038 R14: 00007f4deba25fa0 R15: 00007fffecd48e48 [ 1558.154080][T28873] [ 1558.994953][T28900] netlink: 60 bytes leftover after parsing attributes in process `syz.5.7302'. [ 1559.004192][T28900] netlink: 60 bytes leftover after parsing attributes in process `syz.5.7302'. [ 1559.032005][T28900] netlink: 60 bytes leftover after parsing attributes in process `syz.5.7302'. [ 1559.282436][T28913] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7306'. [ 1559.530520][T28918] netlink: 'syz.2.7307': attribute type 10 has an invalid length. [ 1559.553057][T28918] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7307'. [ 1564.136139][T28936] netlink: 'syz.2.7313': attribute type 10 has an invalid length. [ 1564.145214][T28936] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.7313'. [ 1564.154943][T28958] netlink: 'syz.6.7321': attribute type 10 has an invalid length. [ 1564.169878][T28958] netlink: 55 bytes leftover after parsing attributes in process `syz.6.7321'. [ 1564.621973][T28978] netlink: 'syz.2.7327': attribute type 10 has an invalid length. [ 1565.501462][T28978] device geneve0 entered promiscuous mode [ 1565.520316][T28978] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 1565.545532][T28974] netlink: 'syz.5.7325': attribute type 10 has an invalid length. [ 1565.563277][T28974] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7325'. [ 1565.697223][T28976] netlink: 'syz.1.7324': attribute type 3 has an invalid length. [ 1565.751795][T28976] netlink: 152 bytes leftover after parsing attributes in process `syz.1.7324'. [ 1566.025419][T28990] device syzkaller0 entered promiscuous mode [ 1566.169603][T28997] sctp: [Deprecated]: syz.6.7332 (pid 28997) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1566.169603][T28997] Use struct sctp_sack_info instead [ 1568.905872][T28996] netlink: 10 bytes leftover after parsing attributes in process `syz.6.7332'. [ 1568.931477][T29000] netlink: 'syz.1.7334': attribute type 10 has an invalid length. [ 1569.048644][T29019] netlink: 60 bytes leftover after parsing attributes in process `syz.6.7339'. [ 1569.236425][T29000] team0: Device wg1 is of different type [ 1569.422903][T29019] netlink: 60 bytes leftover after parsing attributes in process `syz.6.7339'. [ 1569.453016][T29022] netlink: 132 bytes leftover after parsing attributes in process `syz.6.7339'. [ 1569.477606][T29025] netlink: 'syz.2.7340': attribute type 10 has an invalid length. [ 1569.543136][T29025] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7340'. [ 1569.634691][T29020] netlink: 60 bytes leftover after parsing attributes in process `syz.6.7339'. [ 1569.743890][T29022] netlink: 60 bytes leftover after parsing attributes in process `syz.6.7339'. [ 1570.290969][T29035] netlink: 60 bytes leftover after parsing attributes in process `syz.6.7343'. [ 1570.335705][T29035] netlink: 60 bytes leftover after parsing attributes in process `syz.6.7343'. [ 1570.386324][T29035] netlink: 60 bytes leftover after parsing attributes in process `syz.6.7343'. [ 1572.440268][T29073] netlink: 'syz.3.7354': attribute type 10 has an invalid length. [ 1572.607786][T29079] device pim6reg1 entered promiscuous mode [ 1572.669507][T29082] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7357'. [ 1572.787374][T29082] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7357'. [ 1572.809451][T29078] netlink: 'syz.6.7356': attribute type 10 has an invalid length. [ 1573.429077][T29078] batman_adv: batadv0: Adding interface: veth0_vlan [ 1573.439201][T29078] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1573.477070][T29078] batman_adv: batadv0: Interface activated: veth0_vlan [ 1574.458266][T29114] netlink: 'syz.5.7365': attribute type 29 has an invalid length. [ 1574.506122][T29114] netlink: 'syz.5.7365': attribute type 29 has an invalid length. [ 1574.563886][T29116] netlink: 'syz.5.7365': attribute type 29 has an invalid length. [ 1575.203835][T29135] __nla_validate_parse: 2 callbacks suppressed [ 1575.203856][T29135] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7373'. [ 1575.311914][T29135] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7373'. [ 1575.383425][T29142] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7373'. [ 1575.427801][T29133] netlink: 'syz.6.7374': attribute type 10 has an invalid length. [ 1575.566901][T29133] netlink: 40 bytes leftover after parsing attributes in process `syz.6.7374'. [ 1575.950063][T29137] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7373'. [ 1575.988543][T29132] device pim6reg1 entered promiscuous mode [ 1576.844118][T29167] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7384'. [ 1576.869013][T29167] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7384'. [ 1576.932940][T29169] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7384'. [ 1576.954162][T29167] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7384'. [ 1577.188531][T29178] netlink: 60 bytes leftover after parsing attributes in process `syz.5.7388'. [ 1577.565048][T29190] netlink: 'syz.5.7392': attribute type 10 has an invalid length. [ 1577.596225][T29190] bridge0: port 2(bridge_slave_1) entered disabled state [ 1577.612168][T29190] bridge0: port 1(bridge_slave_0) entered disabled state [ 1577.931692][T29190] bridge0: port 2(bridge_slave_1) entered blocking state [ 1577.939843][T29190] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1577.950298][T29190] bridge0: port 1(bridge_slave_0) entered blocking state [ 1577.958311][T29190] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1578.359013][T29190] team0: Port device bridge0 added [ 1578.368777][T29186] netlink: 'syz.6.7391': attribute type 10 has an invalid length. [ 1578.387141][T29184] device pim6reg1 entered promiscuous mode [ 1579.385307][T29232] netlink: 'syz.3.7405': attribute type 19 has an invalid length. [ 1579.427774][T29232] delete_channel: no stack [ 1580.096611][T29240] netlink: 'syz.5.7407': attribute type 10 has an invalid length. [ 1580.521756][T29242] device pim6reg1 entered promiscuous mode [ 1580.557339][T29254] __nla_validate_parse: 11 callbacks suppressed [ 1580.557408][T29254] netlink: 63503 bytes leftover after parsing attributes in process `syz.6.7411'. [ 1580.666702][ T4288] Bluetooth: hci1: unexpected event 0x2c length: 151 > 17 [ 1580.666744][ T4288] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 1580.921391][T29265] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7416'. [ 1580.945214][T29267] netlink: 'syz.6.7417': attribute type 10 has an invalid length. [ 1581.028887][T29265] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7416'. [ 1581.096668][T29271] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7416'. [ 1581.117729][T29274] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7416'. [ 1585.275427][T29290] netlink: 'syz.2.7423': attribute type 10 has an invalid length. [ 1585.283546][T29290] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7423'. [ 1585.305028][T29301] netlink: 'syz.5.7425': attribute type 10 has an invalid length. [ 1585.325599][T29301] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7425'. [ 1585.552266][T29315] netlink: 'syz.6.7430': attribute type 10 has an invalid length. [ 1585.678290][T29319] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7431'. [ 1585.732435][T29315] device geneve0 entered promiscuous mode [ 1585.811272][T29315] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 1585.835064][T29319] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7431'. [ 1585.850833][T29321] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7431'. [ 1585.869736][T29324] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7431'. [ 1586.204270][T29339] netlink: 'syz.5.7437': attribute type 10 has an invalid length. [ 1586.224506][T29339] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7437'. [ 1586.937851][T29353] device pim6reg1 entered promiscuous mode [ 1589.494233][T29373] netlink: 60 bytes leftover after parsing attributes in process `syz.6.7446'. [ 1589.527453][T29373] netlink: 60 bytes leftover after parsing attributes in process `syz.6.7446'. [ 1589.571690][T29376] netlink: 60 bytes leftover after parsing attributes in process `syz.6.7446'. [ 1589.612556][T29373] netlink: 60 bytes leftover after parsing attributes in process `syz.6.7446'. [ 1590.285106][T29383] netlink: 'syz.6.7449': attribute type 10 has an invalid length. [ 1590.370036][T29383] netlink: 40 bytes leftover after parsing attributes in process `syz.6.7449'. [ 1592.251962][T29422] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7459'. [ 1592.264683][T29408] device pim6reg1 entered promiscuous mode [ 1592.369812][T29422] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7459'. [ 1592.387451][T29423] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7459'. [ 1592.397547][T29425] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7459'. [ 1595.089146][T29458] netlink: 60 bytes leftover after parsing attributes in process `syz.5.7470'. [ 1596.758535][T29438] netlink: 'syz.1.7464': attribute type 10 has an invalid length. [ 1596.766569][T29438] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7464'. [ 1596.784042][T29458] netlink: 60 bytes leftover after parsing attributes in process `syz.5.7470'. [ 1596.809428][T29465] device pim6reg1 entered promiscuous mode [ 1597.459198][T29494] netlink: 'syz.5.7479': attribute type 46 has an invalid length. [ 1597.467707][T29494] netlink: 55 bytes leftover after parsing attributes in process `syz.5.7479'. [ 1597.711570][T29500] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7481'. [ 1597.731585][T29500] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7481'. [ 1597.750526][T29500] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7481'. [ 1597.777728][T29500] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7481'. [ 1597.841683][T29502] netlink: 'syz.5.7483': attribute type 10 has an invalid length. [ 1597.850292][T29502] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7483'. [ 1598.011225][T29504] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7484'. [ 1598.045134][T29504] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7484'. [ 1598.092573][T29505] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7484'. [ 1598.122420][T29504] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7484'. [ 1598.421416][T29514] FAULT_INJECTION: forcing a failure. [ 1598.421416][T29514] name failslab, interval 1, probability 0, space 0, times 0 [ 1598.441810][T29514] CPU: 1 PID: 29514 Comm: syz.1.7487 Not tainted syzkaller #0 [ 1598.449335][T29514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1598.459439][T29514] Call Trace: [ 1598.462753][T29514] [ 1598.465721][T29514] dump_stack_lvl+0x188/0x24e [ 1598.470454][T29514] ? show_regs_print_info+0x12/0x12 [ 1598.475710][T29514] ? load_image+0x410/0x410 [ 1598.480259][T29514] ? perf_trace_lock+0xf8/0x390 [ 1598.485174][T29514] ? verify_lock_unused+0x140/0x140 [ 1598.490426][T29514] ? perf_trace_lock+0xf8/0x390 [ 1598.495329][T29514] should_fail_ex+0x390/0x4c0 [ 1598.500059][T29514] should_failslab+0x5/0x20 [ 1598.504685][T29514] slab_pre_alloc_hook+0x59/0x300 [ 1598.509939][T29514] kmem_cache_alloc+0x56/0x2f0 [ 1598.514754][T29514] ? skb_clone+0x1e7/0x370 [ 1598.519244][T29514] skb_clone+0x1e7/0x370 [ 1598.523544][T29514] __netlink_deliver_tap+0x3e4/0x7e0 [ 1598.528897][T29514] ? netlink_deliver_tap+0x2e/0x1b0 [ 1598.534150][T29514] netlink_deliver_tap+0x19c/0x1b0 [ 1598.539317][T29514] netlink_unicast+0x777/0x920 [ 1598.544138][T29514] netlink_sendmsg+0x8ad/0xbd0 [ 1598.548960][T29514] ? netlink_getsockopt+0x550/0x550 [ 1598.554248][T29514] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1598.559836][T29514] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1598.565159][T29514] ? security_socket_sendmsg+0x7c/0xa0 [ 1598.570635][T29514] ? netlink_getsockopt+0x550/0x550 [ 1598.575862][T29514] ____sys_sendmsg+0x5ed/0x9a0 [ 1598.580661][T29514] ? __sys_sendmsg_sock+0x30/0x30 [ 1598.585702][T29514] ? __import_iovec+0x306/0x510 [ 1598.590585][T29514] ? import_iovec+0x6f/0xa0 [ 1598.595114][T29514] ___sys_sendmsg+0x2a2/0x360 [ 1598.599822][T29514] ? __sys_sendmsg+0x2a0/0x2a0 [ 1598.604635][T29514] ? __lock_acquire+0x7c40/0x7c40 [ 1598.609740][T29514] __se_sys_sendmsg+0x1c3/0x2b0 [ 1598.614634][T29514] ? __x64_sys_sendmsg+0x80/0x80 [ 1598.619715][T29514] ? lockdep_hardirqs_on+0x94/0x140 [ 1598.624934][T29514] do_syscall_64+0x4c/0xa0 [ 1598.629368][T29514] ? clear_bhb_loop+0x60/0xb0 [ 1598.634061][T29514] ? clear_bhb_loop+0x60/0xb0 [ 1598.638761][T29514] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1598.644674][T29514] RIP: 0033:0x7f4d67d9de99 [ 1598.649130][T29514] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1598.669359][T29514] RSP: 002b:00007f4d68c9c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1598.677807][T29514] RAX: ffffffffffffffda RBX: 00007f4d68025fa0 RCX: 00007f4d67d9de99 [ 1598.685882][T29514] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 1598.693872][T29514] RBP: 00007f4d68c9c090 R08: 0000000000000000 R09: 0000000000000000 [ 1598.701857][T29514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1598.710017][T29514] R13: 00007f4d68026038 R14: 00007f4d68025fa0 R15: 00007ffdbcca4ff8 [ 1598.718023][T29514] [ 1598.852381][T29511] device pim6reg1 entered promiscuous mode [ 1599.570027][T29547] netlink: 'syz.1.7500': attribute type 10 has an invalid length. [ 1599.801855][T29551] device syzkaller0 entered promiscuous mode [ 1602.565223][T29585] __nla_validate_parse: 5 callbacks suppressed [ 1602.565246][T29585] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7512'. [ 1603.502963][T29585] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7512'. [ 1603.650493][T29589] netlink: 'syz.5.7513': attribute type 10 has an invalid length. [ 1603.721663][T29589] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1604.054399][T29599] netlink: 'syz.2.7516': attribute type 10 has an invalid length. [ 1604.124909][T29599] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7516'. [ 1605.870181][T29626] netlink: 'syz.3.7521': attribute type 29 has an invalid length. [ 1605.896470][T29626] netlink: 'syz.3.7521': attribute type 29 has an invalid length. [ 1605.924738][T29630] netlink: 'syz.5.7522': attribute type 29 has an invalid length. [ 1605.934778][T29632] netlink: 'syz.3.7521': attribute type 29 has an invalid length. [ 1605.983352][T29630] netlink: 'syz.5.7522': attribute type 29 has an invalid length. [ 1606.030906][T29630] netlink: 'syz.5.7522': attribute type 29 has an invalid length. [ 1606.054200][T29636] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7525'. [ 1606.079378][T29636] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7525'. [ 1606.163636][T29636] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7525'. [ 1606.231046][T29633] netlink: 'syz.5.7522': attribute type 29 has an invalid length. [ 1606.286765][T29636] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7525'. [ 1606.953913][T29643] device pim6reg1 entered promiscuous mode [ 1607.487416][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.493965][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.708220][T29651] netlink: 'syz.6.7530': attribute type 10 has an invalid length. [ 1607.727775][T29651] netlink: 40 bytes leftover after parsing attributes in process `syz.6.7530'. [ 1608.302154][T29666] netlink: 55 bytes leftover after parsing attributes in process `syz.6.7534'. [ 1608.541821][T29676] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7536'. [ 1608.570393][T29676] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7536'. [ 1608.660637][T29681] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7536'. [ 1608.732890][T29676] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7536'. [ 1608.924612][T29684] device syzkaller0 entered promiscuous mode [ 1609.099360][T29693] validate_nla: 1 callbacks suppressed [ 1609.099398][T29693] netlink: 'syz.2.7542': attribute type 10 has an invalid length. [ 1609.158210][T29693] bridge0: port 4(macsec0) entered blocking state [ 1609.172056][T29693] bridge0: port 4(macsec0) entered disabled state [ 1609.212421][T29693] device macsec0 entered promiscuous mode [ 1609.324430][T29690] device pim6reg1 entered promiscuous mode [ 1610.419897][ T4288] Bluetooth: hci0: ISO packet for unknown connection handle 44 [ 1612.785479][T29701] netlink: 'syz.1.7544': attribute type 10 has an invalid length. [ 1612.796666][T29701] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7544'. [ 1613.299778][T29734] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7552'. [ 1613.328923][T29734] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7552'. [ 1613.378257][T29737] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7552'. [ 1613.403968][T29734] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7552'. [ 1614.164101][T29758] netlink: 'syz.5.7561': attribute type 10 has an invalid length. [ 1614.193925][T29758] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7561'. [ 1614.341454][T29751] device pim6reg1 entered promiscuous mode [ 1614.594269][T29775] FAULT_INJECTION: forcing a failure. [ 1614.594269][T29775] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1614.653062][T29775] CPU: 1 PID: 29775 Comm: syz.6.7565 Not tainted syzkaller #0 [ 1614.660780][T29775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1614.670879][T29775] Call Trace: [ 1614.674627][T29775] [ 1614.677592][T29775] dump_stack_lvl+0x188/0x24e [ 1614.682319][T29775] ? show_regs_print_info+0x12/0x12 [ 1614.687567][T29775] ? load_image+0x410/0x410 [ 1614.692118][T29775] ? __lock_acquire+0x7c40/0x7c40 [ 1614.697205][T29775] should_fail_ex+0x390/0x4c0 [ 1614.701947][T29775] _copy_to_user+0x2c/0x130 [ 1614.706489][T29775] bpf_verifier_vlog+0x172/0x3a0 [ 1614.711551][T29775] __btf_verifier_log+0xdf/0x130 [ 1614.716543][T29775] ? btf_check_sec_info+0x350/0x350 [ 1614.721792][T29775] ? btf_parse_hdr+0x1dd/0x7d0 [ 1614.726599][T29775] btf_parse_hdr+0x400/0x7d0 [ 1614.731240][T29775] btf_new_fd+0x367/0x760 [ 1614.735618][T29775] __sys_bpf+0x612/0x780 [ 1614.739907][T29775] ? bpf_link_show_fdinfo+0x380/0x380 [ 1614.745323][T29775] ? lock_chain_count+0x20/0x20 [ 1614.750206][T29775] __x64_sys_bpf+0x78/0x90 [ 1614.754651][T29775] do_syscall_64+0x4c/0xa0 [ 1614.759114][T29775] ? clear_bhb_loop+0x60/0xb0 [ 1614.763828][T29775] ? clear_bhb_loop+0x60/0xb0 [ 1614.768539][T29775] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1614.774461][T29775] RIP: 0033:0x7f7d8239de99 [ 1614.778901][T29775] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1614.798528][T29775] RSP: 002b:00007f7d8322e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1614.806988][T29775] RAX: ffffffffffffffda RBX: 00007f7d82625fa0 RCX: 00007f7d8239de99 [ 1614.814994][T29775] RDX: 0000000000000028 RSI: 0000200000000640 RDI: 0000000000000012 [ 1614.823024][T29775] RBP: 00007f7d8322e090 R08: 0000000000000000 R09: 0000000000000000 [ 1614.831148][T29775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1614.839149][T29775] R13: 00007f7d82626038 R14: 00007f7d82625fa0 R15: 00007ffc2f20fe08 [ 1614.847159][T29775] [ 1614.891028][T29778] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7567'. [ 1614.939298][T29778] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7567'. [ 1614.951568][T29782] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7567'. [ 1614.970359][T29778] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7567'. [ 1615.370390][T29794] FAULT_INJECTION: forcing a failure. [ 1615.370390][T29794] name failslab, interval 1, probability 0, space 0, times 0 [ 1615.406020][T29794] CPU: 1 PID: 29794 Comm: syz.1.7574 Not tainted syzkaller #0 [ 1615.413644][T29794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1615.423738][T29794] Call Trace: [ 1615.427052][T29794] [ 1615.430025][T29794] dump_stack_lvl+0x188/0x24e [ 1615.434754][T29794] ? show_regs_print_info+0x12/0x12 [ 1615.440000][T29794] ? load_image+0x410/0x410 [ 1615.444549][T29794] ? __might_sleep+0xd0/0xd0 [ 1615.449184][T29794] ? __lock_acquire+0x7c40/0x7c40 [ 1615.454346][T29794] should_fail_ex+0x390/0x4c0 [ 1615.459165][T29794] should_failslab+0x5/0x20 [ 1615.463704][T29794] slab_pre_alloc_hook+0x59/0x300 [ 1615.468771][T29794] ? __inet_diag_dump_start+0x8b/0x970 [ 1615.474350][T29794] __kmem_cache_alloc_node+0x4f/0x270 [ 1615.479768][T29794] ? __inet_diag_dump_start+0x8b/0x970 [ 1615.485271][T29794] kmalloc_trace+0x26/0xe0 [ 1615.489740][T29794] __inet_diag_dump_start+0x8b/0x970 [ 1615.495070][T29794] ? netlink_lookup+0x30/0x200 [ 1615.499887][T29794] __netlink_dump_start+0x3f0/0x6f0 [ 1615.505158][T29794] inet_diag_handler_cmd+0x1d2/0x2b0 [ 1615.510496][T29794] ? inet_diag_unregister+0xb0/0xb0 [ 1615.515745][T29794] ? __mutex_trylock_common+0x15c/0x260 [ 1615.521339][T29794] ? inet_diag_handler_get_info+0xb90/0xb90 [ 1615.527360][T29794] ? inet_diag_dump_start+0x20/0x20 [ 1615.532678][T29794] ? inet_diag_dump+0x50/0x50 [ 1615.537399][T29794] ? sock_diag_lock_handler+0x19/0x280 [ 1615.542991][T29794] ? inet_diag_unregister+0xb0/0xb0 [ 1615.548241][T29794] sock_diag_rcv_msg+0x3c7/0x5e0 [ 1615.553226][T29794] netlink_rcv_skb+0x1ef/0x440 [ 1615.558034][T29794] ? sock_diag_bind+0xa0/0xa0 [ 1615.562760][T29794] ? netlink_ack+0x1160/0x1160 [ 1615.567575][T29794] ? netlink_deliver_tap+0x2e/0x1b0 [ 1615.572827][T29794] sock_diag_rcv+0x26/0x40 [ 1615.577289][T29794] netlink_unicast+0x7ad/0x920 [ 1615.582123][T29794] netlink_sendmsg+0x8ad/0xbd0 [ 1615.586945][T29794] ? netlink_getsockopt+0x550/0x550 [ 1615.592202][T29794] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1615.597800][T29794] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1615.603135][T29794] ? security_socket_sendmsg+0x7c/0xa0 [ 1615.608655][T29794] ? netlink_getsockopt+0x550/0x550 [ 1615.613880][T29794] ____sys_sendmsg+0x5ed/0x9a0 [ 1615.618698][T29794] ? __sys_sendmsg_sock+0x30/0x30 [ 1615.623771][T29794] ? __import_iovec+0x306/0x510 [ 1615.628682][T29794] ? import_iovec+0x6f/0xa0 [ 1615.633233][T29794] ___sys_sendmsg+0x2a2/0x360 [ 1615.637970][T29794] ? __sys_sendmsg+0x2a0/0x2a0 [ 1615.643237][T29794] ? __lock_acquire+0x7c40/0x7c40 [ 1615.648344][T29794] __se_sys_sendmsg+0x1c3/0x2b0 [ 1615.653249][T29794] ? __x64_sys_sendmsg+0x80/0x80 [ 1615.658266][T29794] ? lockdep_hardirqs_on+0x94/0x140 [ 1615.661466][T29804] netlink: 'syz.6.7577': attribute type 10 has an invalid length. [ 1615.663528][T29794] do_syscall_64+0x4c/0xa0 [ 1615.663593][T29794] ? clear_bhb_loop+0x60/0xb0 [ 1615.663618][T29794] ? clear_bhb_loop+0x60/0xb0 [ 1615.663646][T29794] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1615.691547][T29794] RIP: 0033:0x7f4d67d9de99 [ 1615.695983][T29794] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1615.715620][T29794] RSP: 002b:00007f4d68c9c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1615.724065][T29794] RAX: ffffffffffffffda RBX: 00007f4d68025fa0 RCX: 00007f4d67d9de99 [ 1615.732061][T29794] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 1615.740057][T29794] RBP: 00007f4d68c9c090 R08: 0000000000000000 R09: 0000000000000000 [ 1615.748044][T29794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1615.756115][T29794] R13: 00007f4d68026038 R14: 00007f4d68025fa0 R15: 00007ffdbcca4ff8 [ 1615.764112][T29794] [ 1615.777631][T29805] device pim6reg1 entered promiscuous mode [ 1616.487336][T29818] netlink: 'syz.3.7580': attribute type 29 has an invalid length. [ 1616.587106][T29818] netlink: 'syz.3.7580': attribute type 29 has an invalid length. [ 1621.180038][T29849] netlink: 'syz.1.7591': attribute type 10 has an invalid length. [ 1621.188662][T29849] __nla_validate_parse: 1 callbacks suppressed [ 1621.188680][T29849] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7591'. [ 1621.223613][T29850] device pim6reg1 entered promiscuous mode [ 1622.508263][T29891] netlink: 'syz.2.7604': attribute type 10 has an invalid length. [ 1622.742248][T29891] team0: Device hsr_slave_0 failed to register rx_handler [ 1623.059907][T29902] netlink: 'syz.1.7608': attribute type 10 has an invalid length. [ 1623.103543][T29902] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7608'. [ 1624.086825][T29927] netlink: 'syz.1.7622': attribute type 10 has an invalid length. [ 1624.154686][T29927] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7622'. [ 1625.850740][T29972] netlink: 'syz.3.7625': attribute type 10 has an invalid length. [ 1626.147320][T29972] team0: Device hsr_slave_0 failed to register rx_handler [ 1626.759744][T29990] netlink: 'syz.6.7630': attribute type 10 has an invalid length. [ 1626.789588][T29990] netlink: 40 bytes leftover after parsing attributes in process `syz.6.7630'. [ 1627.638352][T30015] netlink: 'syz.3.7635': attribute type 10 has an invalid length. [ 1627.662824][T30015] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7635'. [ 1628.261299][T30031] mac80211_hwsim hwsim54 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1629.071684][T30045] netlink: 'syz.5.7643': attribute type 10 has an invalid length. [ 1629.079980][T30045] bridge0: port 3(macsec0) entered blocking state [ 1629.106416][T30045] bridge0: port 3(macsec0) entered disabled state [ 1629.131401][T30045] device macsec0 entered promiscuous mode [ 1629.659743][T30053] netlink: 'syz.5.7645': attribute type 10 has an invalid length. [ 1629.699605][T30053] 8021q: adding VLAN 0 to HW filter on device team0 [ 1629.781656][T30053] bond0: (slave team0): Enslaving as an active interface with an up link [ 1629.833954][T30050] netlink: 'syz.6.7646': attribute type 10 has an invalid length. [ 1629.863229][T30050] netlink: 40 bytes leftover after parsing attributes in process `syz.6.7646'. [ 1630.992041][ T9] wlan1: Trigger new scan to find an IBSS to join [ 1632.474821][T30086] delete_channel: no stack [ 1632.609128][T30073] netlink: 'syz.5.7650': attribute type 10 has an invalid length. [ 1632.649939][T30073] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7650'. [ 1635.044471][ T46] wlan1: Trigger new scan to find an IBSS to join [ 1635.090065][ T4288] Bluetooth: hci3: unexpected event 0x2c length: 151 > 17 [ 1636.254873][ T46] wlan1: Creating new IBSS network, BSSID fe:85:0f:bf:f3:32 [ 1637.173218][T30122] netlink: 'syz.1.7661': attribute type 10 has an invalid length. [ 1637.390707][T30122] team0: Device hsr_slave_0 failed to register rx_handler [ 1638.547084][T30131] netlink: 'syz.6.7663': attribute type 10 has an invalid length. [ 1638.562876][T30131] netlink: 40 bytes leftover after parsing attributes in process `syz.6.7663'. [ 1639.626474][T30164] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7672'. [ 1639.990955][T30164] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7672'. [ 1640.031934][T30165] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7672'. [ 1640.624661][T30166] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7672'. [ 1641.049614][ T4288] Bluetooth: hci0: unexpected event 0x2c length: 151 > 17 [ 1641.125896][T30178] device syzkaller0 entered promiscuous mode [ 1642.862069][T30205] netlink: 'syz.3.7684': attribute type 29 has an invalid length. [ 1643.530955][ T4280] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1643.559911][ T4280] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1643.569270][ T4280] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1643.590805][ T4280] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1643.600246][ T4280] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1643.608018][ T4280] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1645.177594][T30185] netlink: 'syz.6.7678': attribute type 10 has an invalid length. [ 1645.185685][T30185] netlink: 40 bytes leftover after parsing attributes in process `syz.6.7678'. [ 1645.248528][T30205] netlink: 'syz.3.7684': attribute type 29 has an invalid length. [ 1645.732799][ T4280] Bluetooth: hci6: command 0x0409 tx timeout [ 1646.003133][ T4280] Bluetooth: hci2: unexpected event 0x2c length: 151 > 17 [ 1646.835466][T30210] chnl_net:caif_netlink_parms(): no params data found [ 1647.221597][T30210] bridge0: port 1(bridge_slave_0) entered blocking state [ 1647.292840][T30210] bridge0: port 1(bridge_slave_0) entered disabled state [ 1647.301299][T30210] device bridge_slave_0 entered promiscuous mode [ 1647.348004][T30210] bridge0: port 2(bridge_slave_1) entered blocking state [ 1647.386180][T30210] bridge0: port 2(bridge_slave_1) entered disabled state [ 1647.402581][T30266] syz.6.7697[30266] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1647.404161][T30210] device bridge_slave_1 entered promiscuous mode [ 1647.424608][T30266] syz.6.7697[30266] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1647.565769][T30264] netlink: 'syz.5.7698': attribute type 10 has an invalid length. [ 1647.665216][T30264] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7698'. [ 1647.837400][T30210] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1647.838126][ T4280] Bluetooth: hci6: command 0x041b tx timeout [ 1647.991760][T30210] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1648.101408][T30210] team0: Port device team_slave_0 added [ 1648.140931][T30210] team0: Port device team_slave_1 added [ 1648.221986][T30210] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1648.242646][T30210] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1648.299796][T30210] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1648.341936][T30210] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1648.371727][T30210] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1648.432696][T30210] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1648.578132][T30210] device hsr_slave_0 entered promiscuous mode [ 1648.623511][T30210] device hsr_slave_1 entered promiscuous mode [ 1648.649393][T30210] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1648.668825][T30210] Cannot create hsr debugfs directory [ 1648.821484][T30297] netlink: 60 bytes leftover after parsing attributes in process `syz.6.7705'. [ 1648.896975][T30297] netlink: 60 bytes leftover after parsing attributes in process `syz.6.7705'. [ 1648.945428][T30298] netlink: 60 bytes leftover after parsing attributes in process `syz.6.7705'. [ 1648.984427][T30299] netlink: 60 bytes leftover after parsing attributes in process `syz.6.7705'. [ 1649.482573][T30210] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1649.843318][T30210] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1649.882961][ T4280] Bluetooth: hci6: command 0x040f tx timeout [ 1649.925038][T30210] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1650.119548][T30210] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1650.783582][T30210] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1650.824805][T30325] netlink: 'syz.5.7711': attribute type 10 has an invalid length. [ 1650.878957][T30325] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7711'. [ 1650.980241][T30334] netlink: 'syz.1.7714': attribute type 3 has an invalid length. [ 1651.027525][T30334] netlink: 140 bytes leftover after parsing attributes in process `syz.1.7714'. [ 1651.072112][T30328] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7712'. [ 1651.160629][ T7764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1651.184317][ T7764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1651.228068][T30339] netlink: 60 bytes leftover after parsing attributes in process `syz.6.7715'. [ 1651.231567][T30210] 8021q: adding VLAN 0 to HW filter on device team0 [ 1651.287549][T30339] netlink: 60 bytes leftover after parsing attributes in process `syz.6.7715'. [ 1651.346276][T30340] netlink: 60 bytes leftover after parsing attributes in process `syz.6.7715'. [ 1651.386626][ T7916] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1651.427831][ T7916] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1651.467598][ T7916] bridge0: port 1(bridge_slave_0) entered blocking state [ 1651.474987][ T7916] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1651.512199][T30341] netlink: 60 bytes leftover after parsing attributes in process `syz.6.7715'. [ 1651.571561][ T7916] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1651.598240][ T7916] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1651.632401][ T7916] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1651.688312][ T7916] bridge0: port 2(bridge_slave_1) entered blocking state [ 1651.695534][ T7916] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1651.793889][ T7916] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1651.853991][ T7916] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1651.940707][ T7916] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1651.970486][ T7916] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1651.973183][ T4280] Bluetooth: hci6: command 0x0419 tx timeout [ 1652.013970][ T7916] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1652.023590][ T7916] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1652.063607][ T7916] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1652.084271][ T7916] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1652.094351][ T7916] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1652.107794][ T7916] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1652.123490][ T7916] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1652.148315][T30210] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1652.949250][T30372] netlink: 'syz.3.7725': attribute type 10 has an invalid length. [ 1653.114858][T30372] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7725'. [ 1653.223758][T30376] netlink: 'syz.5.7727': attribute type 2 has an invalid length. [ 1653.260103][T30376] netlink: 'syz.5.7727': attribute type 1 has an invalid length. [ 1653.360921][T30376] netlink: 170140 bytes leftover after parsing attributes in process `syz.5.7727'. [ 1653.766618][T30303] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1653.844672][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1653.858855][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1653.931759][T30210] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1653.978714][T30385] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7728'. [ 1654.181339][T30303] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1654.373862][T30303] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1654.661146][T30303] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1655.340342][T30421] netlink: 'syz.1.7739': attribute type 10 has an invalid length. [ 1655.607406][T30310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1655.642168][T30310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1655.871395][T30439] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1655.878744][T30439] IPv6: NLM_F_CREATE should be set when creating new route [ 1655.886163][T30439] IPv6: NLM_F_CREATE should be set when creating new route [ 1655.893478][T30439] IPv6: NLM_F_CREATE should be set when creating new route [ 1655.904443][T30443] __nla_validate_parse: 5 callbacks suppressed [ 1655.904462][T30443] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7742'. [ 1655.979675][T30443] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7742'. [ 1656.188577][T30210] device veth0_vlan entered promiscuous mode [ 1656.233953][ T7724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1656.271189][ T7724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1656.464019][ T7724] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1656.493057][ T7724] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1656.567900][T30210] device veth1_vlan entered promiscuous mode [ 1656.714777][T30310] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1656.973600][T30310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1657.013024][T30310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1657.045263][T30210] device veth0_macvtap entered promiscuous mode [ 1657.152049][T30210] device veth1_macvtap entered promiscuous mode [ 1657.165906][T30477] syz.5.7751[30477] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1657.166718][T30477] syz.5.7751[30477] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1657.231093][T30210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1657.290633][T30210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1657.314305][T30210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1657.325604][T30210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1657.335912][T30210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1657.350094][T30210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1657.365090][T30210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1657.382933][T30210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1657.399261][T30210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1657.416740][T30210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1657.436769][T30210] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1657.474126][T30210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1657.515442][T30210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1657.546248][T30210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1657.577450][T30210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1657.597897][T30210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1657.641170][T30210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1657.692693][T30210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1657.714278][T30210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1657.732707][T30210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1657.758394][T30210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1657.803098][T30210] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1657.852095][T30310] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1657.893687][T30310] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1657.910753][T30310] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1657.945731][T30310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1657.957326][T30310] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1657.974157][T30310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1658.524342][T30491] netlink: 'syz.6.7756': attribute type 10 has an invalid length. [ 1658.553773][T30491] netlink: 40 bytes leftover after parsing attributes in process `syz.6.7756'. [ 1658.611687][T30502] netlink: 'syz.1.7758': attribute type 10 has an invalid length. [ 1658.631872][T30502] bridge0: port 2(macsec0) entered blocking state [ 1658.665668][T30502] bridge0: port 2(macsec0) entered disabled state [ 1658.701322][T30502] device macsec0 entered promiscuous mode [ 1658.783920][T30210] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1658.844076][T30210] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1658.875510][T30210] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1658.915143][T30210] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1659.322511][T30303] device hsr_slave_0 left promiscuous mode [ 1659.401629][T30303] device hsr_slave_1 left promiscuous mode [ 1659.468373][T30303] device macsec0 left promiscuous mode [ 1659.479707][T30303] bridge0: port 4(macsec0) entered disabled state [ 1659.553992][T30303] bridge0: port 3(dummy0) entered disabled state [ 1659.642540][T30303] device bridge_slave_1 left promiscuous mode [ 1659.649302][T30303] bridge0: port 2(bridge_slave_1) entered disabled state [ 1659.673260][T30303] device bridge_slave_0 left promiscuous mode [ 1659.680879][T30303] bridge0: port 1(bridge_slave_0) entered disabled state [ 1659.769846][T30303] device veth0_macvtap left promiscuous mode [ 1660.506295][T30303] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 1661.792409][T30303] team0 (unregistering): Port device team_slave_1 removed [ 1661.848218][T30303] team0 (unregistering): Port device team_slave_0 removed [ 1661.906133][T30303] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1662.007363][T30303] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1662.849763][T30303] bond0 (unregistering): Released all slaves [ 1663.023289][T30560] netlink: 'syz.1.7773': attribute type 10 has an invalid length. [ 1663.034940][T30560] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7773'. [ 1663.067090][T30594] FAULT_INJECTION: forcing a failure. [ 1663.067090][T30594] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1663.098953][T30594] CPU: 1 PID: 30594 Comm: syz.5.7784 Not tainted syzkaller #0 [ 1663.106506][T30594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1663.116604][T30594] Call Trace: [ 1663.119915][T30594] [ 1663.122872][T30594] dump_stack_lvl+0x188/0x24e [ 1663.127595][T30594] ? show_regs_print_info+0x12/0x12 [ 1663.132832][T30594] ? load_image+0x410/0x410 [ 1663.137373][T30594] ? __lock_acquire+0x7c40/0x7c40 [ 1663.142444][T30594] should_fail_ex+0x390/0x4c0 [ 1663.147170][T30594] _copy_to_user+0x2c/0x130 [ 1663.151715][T30594] bpf_verifier_vlog+0x172/0x3a0 [ 1663.156733][T30594] __btf_verifier_log+0xdf/0x130 [ 1663.161691][T30594] ? btf_check_sec_info+0x350/0x350 [ 1663.166914][T30594] ? btf_parse_hdr+0x1dd/0x7d0 [ 1663.171719][T30594] btf_parse_hdr+0x480/0x7d0 [ 1663.176326][T30594] btf_new_fd+0x367/0x760 [ 1663.180694][T30594] __sys_bpf+0x612/0x780 [ 1663.184959][T30594] ? bpf_link_show_fdinfo+0x380/0x380 [ 1663.190365][T30594] ? lock_chain_count+0x20/0x20 [ 1663.195236][T30594] __x64_sys_bpf+0x78/0x90 [ 1663.199689][T30594] do_syscall_64+0x4c/0xa0 [ 1663.204207][T30594] ? clear_bhb_loop+0x60/0xb0 [ 1663.208902][T30594] ? clear_bhb_loop+0x60/0xb0 [ 1663.213598][T30594] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1663.219514][T30594] RIP: 0033:0x7fde2739de99 [ 1663.223958][T30594] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1663.243757][T30594] RSP: 002b:00007fde28229028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1663.252186][T30594] RAX: ffffffffffffffda RBX: 00007fde27625fa0 RCX: 00007fde2739de99 [ 1663.260251][T30594] RDX: 0000000000000028 RSI: 0000200000000640 RDI: 0000000000000012 [ 1663.268321][T30594] RBP: 00007fde28229090 R08: 0000000000000000 R09: 0000000000000000 [ 1663.276303][T30594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1663.284281][T30594] R13: 00007fde27626038 R14: 00007fde27625fa0 R15: 00007ffceeaaf618 [ 1663.292275][T30594] [ 1663.473631][T30597] FAULT_INJECTION: forcing a failure. [ 1663.473631][T30597] name failslab, interval 1, probability 0, space 0, times 0 [ 1663.497757][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1663.514131][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1663.542510][T30597] CPU: 1 PID: 30597 Comm: syz.6.7785 Not tainted syzkaller #0 [ 1663.550054][T30597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1663.560239][T30597] Call Trace: [ 1663.563561][T30597] [ 1663.566534][T30597] dump_stack_lvl+0x188/0x24e [ 1663.571260][T30597] ? verify_lock_unused+0x140/0x140 [ 1663.576511][T30597] ? show_regs_print_info+0x12/0x12 [ 1663.581849][T30597] ? load_image+0x410/0x410 [ 1663.586413][T30597] should_fail_ex+0x390/0x4c0 [ 1663.591218][T30597] should_failslab+0x5/0x20 [ 1663.596025][T30597] slab_pre_alloc_hook+0x59/0x300 [ 1663.601184][T30597] kmem_cache_alloc+0x56/0x2f0 [ 1663.605999][T30597] ? skb_clone+0x1e7/0x370 [ 1663.610465][T30597] skb_clone+0x1e7/0x370 [ 1663.614766][T30597] __netlink_deliver_tap+0x3e4/0x7e0 [ 1663.620630][T30597] ? netlink_deliver_tap+0x2e/0x1b0 [ 1663.625875][T30597] netlink_deliver_tap+0x19c/0x1b0 [ 1663.631040][T30597] __netlink_sendskb+0x4b/0x90 [ 1663.635849][T30597] netlink_dump+0x92e/0xcd0 [ 1663.640432][T30597] ? netlink_lookup+0x200/0x200 [ 1663.645332][T30597] ? __inet_diag_dump_start+0x805/0x970 [ 1663.650927][T30597] __netlink_dump_start+0x52c/0x6f0 [ 1663.656217][T30597] inet_diag_handler_cmd+0x1d2/0x2b0 [ 1663.661561][T30597] ? inet_diag_unregister+0xb0/0xb0 [ 1663.666809][T30597] ? __mutex_trylock_common+0x15c/0x260 [ 1663.672401][T30597] ? inet_diag_handler_get_info+0xb90/0xb90 [ 1663.678425][T30597] ? inet_diag_dump_start+0x20/0x20 [ 1663.683681][T30597] ? inet_diag_dump+0x50/0x50 [ 1663.688509][T30597] ? sock_diag_lock_handler+0x19/0x280 [ 1663.694029][T30597] ? inet_diag_unregister+0xb0/0xb0 [ 1663.699268][T30597] sock_diag_rcv_msg+0x3c7/0x5e0 [ 1663.704258][T30597] netlink_rcv_skb+0x1ef/0x440 [ 1663.709065][T30597] ? sock_diag_bind+0xa0/0xa0 [ 1663.713805][T30597] ? netlink_ack+0x1160/0x1160 [ 1663.718613][T30597] ? netlink_deliver_tap+0x2e/0x1b0 [ 1663.723830][T30597] sock_diag_rcv+0x26/0x40 [ 1663.728271][T30597] netlink_unicast+0x7ad/0x920 [ 1663.733177][T30597] netlink_sendmsg+0x8ad/0xbd0 [ 1663.738011][T30597] ? netlink_getsockopt+0x550/0x550 [ 1663.743352][T30597] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1663.748934][T30597] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1663.754230][T30597] ? security_socket_sendmsg+0x7c/0xa0 [ 1663.759715][T30597] ? netlink_getsockopt+0x550/0x550 [ 1663.765234][T30597] ____sys_sendmsg+0x5ed/0x9a0 [ 1663.770238][T30597] ? __sys_sendmsg_sock+0x30/0x30 [ 1663.775311][T30597] ? __import_iovec+0x306/0x510 [ 1663.776886][T30311] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1663.780214][T30597] ? import_iovec+0x6f/0xa0 [ 1663.792616][T30597] ___sys_sendmsg+0x2a2/0x360 [ 1663.794951][T30311] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1663.797327][T30597] ? __sys_sendmsg+0x2a0/0x2a0 [ 1663.797380][T30597] ? __lock_acquire+0x7c40/0x7c40 [ 1663.814543][T30597] __se_sys_sendmsg+0x1c3/0x2b0 [ 1663.819468][T30597] ? __x64_sys_sendmsg+0x80/0x80 [ 1663.824653][T30597] ? lockdep_hardirqs_on+0x94/0x140 [ 1663.829968][T30597] do_syscall_64+0x4c/0xa0 [ 1663.834652][T30597] ? clear_bhb_loop+0x60/0xb0 [ 1663.839704][T30597] ? clear_bhb_loop+0x60/0xb0 [ 1663.844447][T30597] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1663.850609][T30597] RIP: 0033:0x7f7d8239de99 [ 1663.855187][T30597] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1663.874847][T30597] RSP: 002b:00007f7d8322e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1663.882908][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1663.883290][T30597] RAX: ffffffffffffffda RBX: 00007f7d82625fa0 RCX: 00007f7d8239de99 [ 1663.883312][T30597] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 1663.883326][T30597] RBP: 00007f7d8322e090 R08: 0000000000000000 R09: 0000000000000000 [ 1663.896834][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1663.898496][T30597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1663.898515][T30597] R13: 00007f7d82626038 R14: 00007f7d82625fa0 R15: 00007ffc2f20fe08 [ 1663.898548][T30597] [ 1664.549933][T30622] netlink: 'syz.6.7790': attribute type 10 has an invalid length. [ 1664.886072][T30631] netlink: 60 bytes leftover after parsing attributes in process `syz.6.7794'. [ 1664.977690][T30631] netlink: 60 bytes leftover after parsing attributes in process `syz.6.7794'. [ 1664.993044][T30633] netlink: 60 bytes leftover after parsing attributes in process `syz.6.7794'. [ 1665.381517][T30635] netlink: 'syz.5.7795': attribute type 10 has an invalid length. [ 1665.466541][T30635] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7795'. [ 1665.544983][T30644] netlink: 'syz.6.7797': attribute type 1 has an invalid length. [ 1665.788625][T30644] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1666.883798][T30645] netlink: 'syz.6.7797': attribute type 10 has an invalid length. [ 1667.400260][T30645] team0: Port device dummy0 added [ 1668.926563][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.935186][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1670.807758][T30703] netlink: 'syz.1.7811': attribute type 29 has an invalid length. [ 1671.052300][ T4288] Bluetooth: hci5: command 0x0406 tx timeout [ 1671.751248][T30707] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7811'. [ 1672.340951][T30703] netlink: 'syz.1.7811': attribute type 29 has an invalid length. [ 1672.432914][T30699] netlink: 'syz.3.7810': attribute type 10 has an invalid length. [ 1672.440826][T30699] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7810'. [ 1672.601175][T30709] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7811'. [ 1673.008658][T30716] netlink: 'syz.5.7814': attribute type 1 has an invalid length. [ 1673.076511][T30716] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1674.311159][T30728] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7815'. [ 1674.382574][T30720] netlink: 'syz.5.7814': attribute type 10 has an invalid length. [ 1674.455688][T30720] team0: Port device dummy0 added [ 1674.612402][T30739] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7818'. [ 1674.858386][T30739] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7818'. [ 1674.892290][T30742] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7818'. [ 1675.369305][T30744] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7818'. [ 1676.765027][T30773] netlink: 'syz.5.7826': attribute type 10 has an invalid length. [ 1677.026227][T30773] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7826'. [ 1677.587727][T30788] netlink: 10 bytes leftover after parsing attributes in process `syz.3.7830'. [ 1679.123768][T30813] device pim6reg1 entered promiscuous mode [ 1682.758121][T30851] netlink: 'syz.3.7843': attribute type 10 has an invalid length. [ 1682.922798][T30851] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7843'. [ 1683.087692][ T4288] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1683.098947][ T4288] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1683.108501][ T4288] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1683.126536][ T4288] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1683.135392][ T4288] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1683.146771][ T4288] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1683.384089][T30862] netlink: 'syz.5.7846': attribute type 29 has an invalid length. [ 1683.942985][T30862] netlink: 'syz.5.7846': attribute type 29 has an invalid length. [ 1684.438495][T30862] netlink: 60 bytes leftover after parsing attributes in process `syz.5.7846'. [ 1684.833484][T30857] netlink: 60 bytes leftover after parsing attributes in process `syz.5.7846'. [ 1684.978219][T30879] netlink: 'syz.6.7849': attribute type 29 has an invalid length. [ 1685.016258][T30879] netlink: 'syz.6.7849': attribute type 29 has an invalid length. [ 1685.162801][ T4280] Bluetooth: hci1: command 0x0409 tx timeout [ 1685.189757][T30882] netlink: 'syz.6.7849': attribute type 29 has an invalid length. [ 1685.348853][T30856] chnl_net:caif_netlink_parms(): no params data found [ 1685.616267][T30888] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7851'. [ 1685.805472][T30888] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7851'. [ 1685.866350][T30891] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7851'. [ 1686.044176][T30893] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7851'. [ 1686.154992][T30856] bridge0: port 1(bridge_slave_0) entered blocking state [ 1686.212789][T30856] bridge0: port 1(bridge_slave_0) entered disabled state [ 1686.221449][T30856] device bridge_slave_0 entered promiscuous mode [ 1686.315373][T30856] bridge0: port 2(bridge_slave_1) entered blocking state [ 1686.362728][T30856] bridge0: port 2(bridge_slave_1) entered disabled state [ 1686.482803][T30856] device bridge_slave_1 entered promiscuous mode [ 1686.670243][T30856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1686.775900][T30856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1686.966065][T30856] team0: Port device team_slave_0 added [ 1687.104127][T30906] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7863'. [ 1687.252450][ T4288] Bluetooth: hci1: command 0x041b tx timeout [ 1687.305758][T30856] team0: Port device team_slave_1 added [ 1687.509228][T30906] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7863'. [ 1687.608878][T30910] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7863'. [ 1687.773566][T30856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1687.780609][T30856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1687.928833][T30856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1688.170633][T30302] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1688.259212][T30856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1688.279846][T30856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1688.410148][T30856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1688.483755][T30920] netlink: 'syz.5.7856': attribute type 10 has an invalid length. [ 1688.523533][T30920] __nla_validate_parse: 1 callbacks suppressed [ 1688.523554][T30920] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7856'. [ 1689.107737][T30933] netlink: 'syz.3.7861': attribute type 1 has an invalid length. [ 1689.365450][ T4280] Bluetooth: hci1: command 0x040f tx timeout [ 1690.112242][ T27] INFO: task syz.4.7138:28379 blocked for more than 143 seconds. [ 1690.114979][T30933] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.7861'. [ 1690.120389][ T27] Not tainted syzkaller #0 [ 1690.135985][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1690.163725][ T27] task:syz.4.7138 state:D stack:22704 pid:28379 ppid:23727 flags:0x00004006 [ 1690.252850][ T27] Call Trace: [ 1690.260921][ T27] [ 1690.268174][ T27] __schedule+0x107f/0x4030 [ 1690.278251][ T27] ? __lock_acquire+0x7c40/0x7c40 [ 1690.297112][ T27] ? __sched_text_start+0x8/0x8 [ 1690.312335][ T27] ? task_work_cancel+0xa1/0x220 [ 1690.327823][ T27] ? task_work_cancel_func+0x210/0x210 [ 1690.369340][ T27] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1690.403579][ T27] schedule+0xb9/0x180 [ 1690.425721][ T27] ? _free_event+0x10d/0x1050 [ 1690.477902][ T27] _free_event+0x176/0x1050 [ 1690.504071][ T27] perf_event_release_kernel+0x7c4/0x850 [ 1690.537529][ T27] ? __might_sleep+0xd0/0xd0 [ 1690.562530][ T27] ? calc_timer_values+0x410/0x410 [ 1690.588599][ T27] ? __might_sleep+0xd0/0xd0 [ 1690.609483][ T27] ? perf_mmap+0x1470/0x1470 [ 1690.630062][ T27] perf_release+0x37/0x40 [ 1690.634523][ T27] __fput+0x20a/0x8b0 [ 1690.638562][ T27] task_work_run+0x1d0/0x260 [ 1690.658959][ T27] ? task_work_cancel+0x220/0x220 [ 1690.677981][ T27] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1690.695456][ T27] ? _raw_spin_unlock+0x40/0x40 [ 1690.700556][ T27] ? memcpy+0x3c/0x60 [ 1690.718767][ T27] get_signal+0x118d/0x1340 [ 1690.730634][ T27] ? add_device_randomness+0xc2/0x100 [ 1690.741408][ T27] ? crng_reseed+0x190/0x190 [ 1690.751687][ T27] ? __lock_acquire+0x7c40/0x7c40 [ 1690.767781][ T27] ? migrate_enable+0x148/0x220 [ 1690.777321][ T27] arch_do_signal_or_restart+0xc4/0x1310 [ 1690.791779][ T27] ? create_io_thread+0x170/0x170 [ 1690.801460][ T27] ? perf_trace_preemptirq_template+0xa8/0x320 [ 1690.818114][ T27] ? irqentry_enter+0x33/0x50 [ 1690.831066][ T27] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1690.847325][ T27] ? get_sigframe_size+0x10/0x10 [ 1690.858630][ T27] ? lock_chain_count+0x20/0x20 [ 1690.869071][ T27] ? rcu_is_watching+0x11/0xa0 [ 1690.878651][ T27] exit_to_user_mode_loop+0x70/0x110 [ 1690.890091][ T27] exit_to_user_mode_prepare+0xee/0x180 [ 1690.902877][ T27] syscall_exit_to_user_mode+0x16/0x40 [ 1690.915240][ T27] do_syscall_64+0x58/0xa0 [ 1690.924427][ T27] ? clear_bhb_loop+0x60/0xb0 [ 1690.936827][ T27] ? clear_bhb_loop+0x60/0xb0 [ 1690.946151][ T27] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1690.960678][ T27] RIP: 0033:0x7f0e9319de99 [ 1690.968743][ T27] RSP: 002b:00007f0e9409afd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1690.983907][ T27] RAX: fffffffffffffffc RBX: 00007f0e93425fa0 RCX: 00007f0e9319de99 [ 1691.000974][ T27] RDX: 00002000000004c0 RSI: 0000200000000420 RDI: 0000000041304000 [ 1691.020726][ T27] RBP: 00007f0e93233eaf R08: 0000200000000680 R09: 0000200000000680 [ 1691.031427][ T27] R10: 0000200000000500 R11: 0000000000000206 R12: 0000000000000000 [ 1691.050532][ T27] R13: 00007f0e93426038 R14: 00007f0e93425fa0 R15: 00007ffd709e5ba8 [ 1691.068600][ T27] [ 1691.075270][ T27] [ 1691.075270][ T27] Showing all locks held in the system: [ 1691.087436][T30302] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1691.090582][ T27] 1 lock held by rcu_tasks_kthre/12: [ 1691.117295][ T27] #0: ffffffff8cb2e4f0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xef0 [ 1691.135108][ T27] 1 lock held by rcu_tasks_trace/13: [ 1691.146146][ T27] #0: ffffffff8cb2ed10 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xef0 [ 1691.160417][ T27] 2 locks held by kworker/1:0/22: [ 1691.165824][ T27] #0: ffff888017472138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 1691.176409][ T27] #1: ffffc900001c7d00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 1691.187921][ T27] 1 lock held by khungtaskd/27: [ 1691.192931][ T27] #0: ffffffff8cb2db60 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 1691.203200][ T27] 2 locks held by dhcpcd/3931: [ 1691.207990][ T27] #0: ffffffff8ddb9310 (cb_lock){++++}-{3:3}, at: genl_rcv+0x15/0x40 [ 1691.216352][ T27] #1: ffffffff8dd58c28 (rtnl_mutex){+.+.}-{3:3}, at: nl80211_pre_doit+0x5a/0x890 [ 1691.227078][ T27] 2 locks held by getty/4028: [ 1691.231852][ T27] #0: ffff88802fad6098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 1691.242036][ T27] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x41e/0x1360 [ 1691.252642][ T27] 3 locks held by kworker/1:6/4369: [ 1691.258191][ T27] #0: ffff88814d7b4938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 1691.270334][ T27] #1: ffffc90004447d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 1691.283209][ T27] #2: ffffffff8dd58c28 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xc4/0x1500 [ 1691.292730][ T27] 3 locks held by kworker/u4:2/30301: [ 1691.298171][ T27] #0: ffff888017479138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 1691.309425][ T27] #1: ffffc9000fa6fd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 1691.321082][ T27] #2: ffffffff8dd58c28 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xa/0x50 [ 1691.330368][ T27] 6 locks held by kworker/u4:6/30302: [ 1691.335855][ T27] #0: ffff88801761e938 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 1691.346264][ T27] #1: ffffc9000ffafd00 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 1691.356274][ T27] #2: ffffffff8dd4bd90 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x148/0xba0 [ 1691.366301][ T27] #3: ffff88802ecfe2f8 (&devlink->lock_key#18){+.+.}-{3:3}, at: devlink_pernet_pre_exit+0x104/0x280 [ 1691.377698][ T27] #4: ffffffff8dd58c28 (rtnl_mutex){+.+.}-{3:3}, at: nsim_destroy+0x3b/0x150 [ 1691.386807][ T27] #5: ffffffff8cb33838 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3c0/0x890 [ 1691.397865][ T27] 1 lock held by syz-executor/30856: [ 1691.403457][ T4280] Bluetooth: hci1: command 0x0419 tx timeout [ 1691.409564][ T27] #0: ffffffff8dd58c28 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x80d/0xfb0 [ 1691.419258][ T27] 2 locks held by syz.6.7855/30913: [ 1691.424544][ T27] #0: ffffffff8dd4bd90 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x324/0x5b0 [ 1691.434259][ T27] #1: ffffffff8dd58c28 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x29c/0x7a0 [ 1691.443954][ T27] 1 lock held by syz.5.7856/30916: [ 1691.449114][ T27] #0: ffffffff8cb82c88 (event_mutex){+.+.}-{3:3}, at: perf_trace_destroy+0x2a/0x140 [ 1691.458741][ T27] 1 lock held by syz.1.7860/30928: [ 1691.464439][ T27] #0: ffffffff8cb82c88 (event_mutex){+.+.}-{3:3}, at: perf_trace_destroy+0x2a/0x140 [ 1691.474319][ T27] 2 locks held by syz.3.7861/30931: [ 1691.479554][ T27] #0: ffff88804042d010 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x82/0x210 [ 1691.490333][ T27] #1: ffffffff8cb33838 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x2ec/0x890 [ 1691.523438][T30931] caif:caif_disconnect_client(): nothing to disconnect [ 1691.532943][ T27] [ 1691.536770][ T27] ============================================= [ 1691.536770][ T27] [ 1691.556302][ T27] NMI backtrace for cpu 0 [ 1691.560708][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 1691.567954][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1691.578061][ T27] Call Trace: [ 1691.581384][ T27] [ 1691.584354][ T27] dump_stack_lvl+0x188/0x24e [ 1691.589083][ T27] ? ct_irq_enter_irqson+0x170/0x170 [ 1691.594414][ T27] ? show_regs_print_info+0x12/0x12 [ 1691.599665][ T27] ? load_image+0x410/0x410 [ 1691.604213][ T27] ? vprintk_emit+0x59f/0x6a0 [ 1691.608945][ T27] ? nmi_cpu_backtrace+0x1cb/0x460 [ 1691.614109][ T27] nmi_cpu_backtrace+0x3e6/0x460 [ 1691.619095][ T27] ? nmi_trigger_cpumask_backtrace+0x450/0x450 [ 1691.625287][ T27] ? _printk+0xda/0x130 [ 1691.629564][ T27] ? load_image+0x410/0x410 [ 1691.634122][ T27] ? load_image+0x410/0x410 [ 1691.638661][ T27] ? nmi_trigger_cpumask_backtrace+0xf3/0x450 [ 1691.644767][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 1691.650935][ T27] nmi_trigger_cpumask_backtrace+0x1d4/0x450 [ 1691.657048][ T27] watchdog+0xf0e/0xf50 [ 1691.661254][ T27] ? watchdog+0x1ed/0xf50 [ 1691.665671][ T27] kthread+0x29d/0x330 [ 1691.669833][ T27] ? hungtask_pm_notify+0x40/0x40 [ 1691.674911][ T27] ? kthread_blkcg+0xd0/0xd0 [ 1691.679537][ T27] ret_from_fork+0x1f/0x30 [ 1691.684030][ T27] [ 1691.687741][ T27] Sending NMI from CPU 0 to CPUs 1: [ 1691.693133][ C1] NMI backtrace for cpu 1 [ 1691.693146][ C1] CPU: 1 PID: 3637 Comm: udevd Not tainted syzkaller #0 [ 1691.693162][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1691.693170][ C1] RIP: 0010:check_preemption_disabled+0x49/0x110 [ 1691.693193][ C1] Code: 65 8b 0d 42 10 d2 75 f7 c1 ff ff ff 7f 74 1f 65 48 8b 0c 25 28 00 00 00 48 3b 4c 24 08 0f 85 c4 00 00 00 48 83 c4 10 5b 41 5e <41> 5f 5d c3 48 c7 04 24 00 00 00 00 9c 8f 04 24 f7 04 24 00 02 00 [ 1691.693206][ C1] RSP: 0018:ffffc900032e7aa8 EFLAGS: 00000082 [ 1691.693220][ C1] RAX: 0000000000000001 RBX: 000000000003ee90 RCX: 6b1bc5d9d752ce00 [ 1691.693231][ C1] RDX: 0000000080040003 RSI: ffffffff8adf42c0 RDI: ffffffff8adf4280 [ 1691.693241][ C1] RBP: 0000000000000246 R08: 0000000000000000 R09: 0000000080040004 [ 1691.693251][ C1] R10: dffffc0000000000 R11: fffffbfff2162049 R12: ffff8880b8f3ee90 [ 1691.693263][ C1] R13: ffff8880b8f3ee70 R14: ffff8880b8f3ee70 R15: ffff888066248000 [ 1691.693273][ C1] FS: 00007fe09721a880(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1691.693287][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1691.693297][ C1] CR2: 00007ffc2f20efb8 CR3: 000000007b43b000 CR4: 00000000003506e0 [ 1691.693312][ C1] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 1691.693321][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1691.693331][ C1] Call Trace: [ 1691.693337][ C1] [ 1691.693343][ C1] ___slab_alloc+0xff3/0x1240 [ 1691.693363][ C1] ? ___slab_alloc+0x20e/0x1240 [ 1691.693379][ C1] ? get_obj_cgroup_from_current+0x1c5/0x280 [ 1691.693461][ C1] ? kvmalloc_node+0x6c/0x180 [ 1691.693500][ C1] ? kvmalloc_node+0x6c/0x180 [ 1691.693520][ C1] __kmem_cache_alloc_node+0x126/0x270 [ 1691.693538][ C1] ? kvmalloc_node+0x6c/0x180 [ 1691.693556][ C1] __kmalloc_node+0xa2/0x240 [ 1691.693578][ C1] kvmalloc_node+0x6c/0x180 [ 1691.693599][ C1] seq_read_iter+0x1de/0xc50 [ 1691.693616][ C1] ? cp_old_stat+0x670/0x670 [ 1691.693636][ C1] ? common_file_perm+0x171/0x1c0 [ 1691.693655][ C1] ? kernfs_fop_read_iter+0x143/0x680 [ 1691.693676][ C1] vfs_read+0x471/0x960 [ 1691.693699][ C1] ? kernel_read+0x1e0/0x1e0 [ 1691.693719][ C1] ? __x64_sys_newfstat+0x19a/0x220 [ 1691.693741][ C1] ? __fdget_pos+0x2b5/0x360 [ 1691.693763][ C1] ksys_read+0x14d/0x260 [ 1691.693783][ C1] ? vfs_write+0x9a0/0x9a0 [ 1691.693804][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 1691.693820][ C1] do_syscall_64+0x4c/0xa0 [ 1691.693838][ C1] ? clear_bhb_loop+0x60/0xb0 [ 1691.693864][ C1] ? clear_bhb_loop+0x60/0xb0 [ 1691.693882][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1691.693899][ C1] RIP: 0033:0x7fe096aa7407 [ 1691.693911][ C1] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1691.693923][ C1] RSP: 002b:00007ffef5052060 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 1691.693938][ C1] RAX: ffffffffffffffda RBX: 00007fe09721a880 RCX: 00007fe096aa7407 [ 1691.693948][ C1] RDX: 0000000000001000 RSI: 0000560b84c54550 RDI: 000000000000000c [ 1691.693957][ C1] RBP: 00007fe096befff0 R08: 0000000000000000 R09: 0000000000000000 [ 1691.693967][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000000a [ 1691.693976][ C1] R13: 00007fe096befea0 R14: 0000000000000000 R15: 0000560b84c467a0 [ 1691.693992][ C1] [ 1691.717582][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 1691.717598][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 1691.717616][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1691.717626][ T27] Call Trace: [ 1691.717634][ T27] [ 1691.717642][ T27] dump_stack_lvl+0x188/0x24e [ 1691.717670][ T27] ? memcpy+0x3c/0x60 [ 1691.717688][ T27] ? show_regs_print_info+0x12/0x12 [ 1691.717710][ T27] ? load_image+0x410/0x410 [ 1691.717739][ T27] panic+0x2d3/0x710 [ 1691.717755][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 1691.717783][ T27] ? bpf_jit_dump+0xd0/0xd0 [ 1691.717799][ T27] ? __irq_work_queue_local+0x12c/0x190 [ 1691.717828][ T27] ? nmi_trigger_cpumask_backtrace+0x35b/0x450 [ 1691.717853][ T27] ? nmi_trigger_cpumask_backtrace+0x360/0x450 [ 1691.717878][ T27] watchdog+0xf4d/0xf50 [ 1691.717901][ T27] ? watchdog+0x1ed/0xf50 [ 1691.717925][ T27] kthread+0x29d/0x330 [ 1691.717940][ T27] ? hungtask_pm_notify+0x40/0x40 [ 1691.717959][ T27] ? kthread_blkcg+0xd0/0xd0 [ 1691.717976][ T27] ret_from_fork+0x1f/0x30 [ 1691.718010][ T27] [ 1691.724169][ T27] Kernel Offset: disabled [ 1692.146718][ T27] Rebooting in 86400 seconds..