last executing test programs: 2m47.348154271s ago: executing program 1 (id=1232): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7f}, 0x100904, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r4) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) r6 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) sendmsg$sock(r6, &(0x7f0000000380)={&(0x7f0000000080)=@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000140)='\a', 0x1}], 0x1}, 0x4004010) setsockopt$sock_attach_bpf(r6, 0x84, 0x14, &(0x7f0000000000)=r8, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r8, 0x0, 0x5b, 0xf1, &(0x7f00000000c0)="4f4b4d9534781d6678b50850a26ca08604d64895b578294b5d3189a1909edb9e481785e1cf1f8ca5267737102e08f606e9c07e529fad36bb43e4100d53ad5223a81b6b51232845f83b7da92f99b1c645f2f77f2fdf0d75a49e0bec", &(0x7f00000001c0)=""/241, 0x1, 0x0, 0xfa, 0xe9, &(0x7f00000002c0)="a86918aa2f3b7441997897d594a857144d06d3bb1e15300e07b5e4e75394dd04b3af555d5ef9bfc58bce94a3d7fd911dd02b3692fc2892945db6f49bc044e8c4e05a25109ecb4a2b5a05b0aef92df0b90e646dd52d535e21612903e07f6d22f383a5350b8cf71faf03c29a25a97797f446a222475b7bed6617b1ed05dcfe72473e4009ca0dc5bc400974d0352cc9b6f42a99c5d4ea81a9ae632c34f52dfcecc0df06df2d35f8c81a01f8cced11a5793c77a051a709a732b4b14032ffab59f4ab4670e5b222586444d394dffadd13fe0534f2b37dc017cc81d212286adc2573cb09c921b574e40316d24708284d6db5b9af14d7c14fd53f1a491c", &(0x7f00000003c0)="837b28bd5144bbe0a91a320c453056d7ce907fdcc940916f91bf0feabbbf8daab903dc1224b053bf172533ae6bb11e9cf0372c043d656c370de5ee63f7a559c1790f2ccbed552e6aa0170922f46becf5316e33d6b09e7642da89d7c82753d6f45ff24d0640875cac1b37eacf04fd434e4e72497f8086cdcdd62e836be6ab34697f3f042c9051ebaab37bec4d0af25dd3c3b896f61b5109af047c22ed21c629aeeb1e71ed5e397d47384e00dc9b0ba660a8e2f3ca7e06df61171bcdbad412d5f9cc79ff18bb5fb3d49d50910f6036313104656d9a803068e1264c69f8a8a9ac9c8c672427b516838417", 0x0, 0x0, 0x4}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\v'], 0x48) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) close(r3) r9 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b63d25a80648c2594f91624fc60100c214002000012050582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 2m46.041431407s ago: executing program 1 (id=1240): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x3}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x74}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x21}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f00000002c0)=r3}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000440)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)='%pS \x00'}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x2}, @jmp={0x5, 0x0, 0xd, 0xa, 0x1, 0x1, 0xfffffffffffffff0}], &(0x7f0000000040)='syzkaller\x00', 0x6, 0xf7, &(0x7f00000001c0)=""/247, 0x41100, 0x19, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x8, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x4, 0xe, 0x6, 0xd2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r0, r2, r5, r7], 0x0, 0x10, 0x6}, 0x94) r8 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r8, &(0x7f0000000300)={&(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10, 0x0}, 0x4040000) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.1GB.usage_in_bytes\x00', 0x26e1, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={r9, 0x58, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000490000000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', r10, 0x0, r9}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="000400000000000000", @ANYRES32=r10, @ANYRES32, @ANYBLOB="010000000400"/18], 0x50) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={&(0x7f0000000800)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x94, 0x94, 0x4, [@enum={0xa, 0x1, 0x0, 0x6, 0x4, [{0xc, 0x7fff}]}, @union={0x8, 0x1, 0x0, 0x5, 0x0, 0x95, [{0xb, 0x2, 0x2}]}, @decl_tag={0xc, 0x0, 0x0, 0x11, 0x5, 0x2}, @type_tag={0x4, 0x0, 0x0, 0x12, 0x1}, @func={0x3, 0x0, 0x0, 0xc, 0x4}, @fwd={0xf}, @const={0xd, 0x0, 0x0, 0xa, 0x5}, @typedef={0xa, 0x0, 0x0, 0x8, 0x3}, @int={0x1, 0x0, 0x0, 0x1, 0x0, 0x2c, 0x0, 0x5c, 0x5}, @func={0x1, 0x0, 0x0, 0xc, 0x4}]}, {0x0, [0x5f, 0x0]}}, &(0x7f0000000740)=""/5, 0xb0, 0x5, 0xe6, 0x6, 0x4a151edbd233e9b5}, 0x28) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000980)=@bpf_ext={0x1c, 0x8, &(0x7f00000006c0)=@raw=[@cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffff9}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @jmp={0x5, 0x0, 0xb, 0x2, 0x8, 0xfffffffffffffffc, 0xffffffffffffffff}, @map_fd={0x18, 0x7, 0x1, 0x0, r7}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0}], &(0x7f0000000700)='syzkaller\x00', 0x77, 0x0, 0x0, 0x41100, 0x31, '\x00', r10, 0x0, r11, 0x8, &(0x7f00000008c0)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000900)={0x3, 0x8, 0xffffffff, 0x9546}, 0x10, 0x2bc83, r1, 0x0, &(0x7f0000000940)=[r6], 0x0, 0x10, 0x5}, 0x94) 2m44.96961212s ago: executing program 1 (id=1245): r0 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x41) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000400000000000000fcffff0185000000bc0000001801000020646c2400000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000f000000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0xe, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0xf, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x108b84, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0x4000000, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) close(r3) r5 = socket$kcm(0x23, 0x5, 0x0) setsockopt$sock_attach_bpf(r5, 0x113, 0x4, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x62180, 0x0) socket$kcm(0x29, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090000000000000000000000c50000000ea20000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180018924b8193360e223a9f330000ae8b3875000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000500000095"], 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.freeze\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) close(r7) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2m44.672453678s ago: executing program 1 (id=1247): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x10, 0x0, 0x0, 0x0, 0x0, 0x88, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x11498d, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x88e}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a0000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x513, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x202, 0x0, 0xffffffff, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) write$cgroup_pid(r1, &(0x7f00000006c0)=0xffffffffffffffff, 0x12) openat$cgroup_subtree(r1, &(0x7f0000000540), 0x2, 0x0) openat$cgroup_procs(r1, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) socket$kcm(0xa, 0x3, 0x87) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb010018000000000000006c0000006c000000040000000e00000001000013090000000800000001000000000000800c0000000000000b05c5e8164cc66f716d000004400000000c00000002000000090000000900000002000000050000000900000003000000020000000900000000000007000000000c0000000000001203000000005f6100"], &(0x7f0000001c40)=""/235, 0x88, 0xeb, 0x0, 0x7}, 0x28) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f0000000401a8000100fec0ffff00000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4ed", 0xc5}], 0x1}, 0x0) r3 = socket$kcm(0x15, 0x5, 0x0) setsockopt$sock_attach_bpf(r3, 0x114, 0x8, 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000000500)={&(0x7f0000000280)={0x2, 0x4e20, @private=0xa010102}, 0x10, &(0x7f0000000440)=[{&(0x7f0000001a80)="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", 0x194}, {&(0x7f0000000a80)="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", 0x1000}, {&(0x7f0000000800)="1c52c0b0bf62fb95393ed9121cebfa92ec08dca26788ae4fe64a163e6930e70e50516c3e040b10afb14ece82ee67cc866abb810137bf342579a30d2f65d5f6e1e80070756e11ad6ada87d0e57f85fa4a3d59be4be09ef9da4a1613a3763d02f7e0983af3e6b6ba4e56677809454f04f799c2d9a182f68886ce8d495bfc52eeebda643d91e4b956ac21be0a16c5e2945ddb19ae8c5a", 0x95}], 0x3, &(0x7f0000001e00)=ANY=[@ANYBLOB="54000000000000000000000007000000441ca48364010100000000027f00000100000002e0000002fffffff89404000083173fac1414bb00000000ac14140a0a0101010a010102440cf5b164010100000008d2000000000014000000000000000000000002000000040000000000000008010000000000000000000007000000831711ffffffffac1414aa000000000a010102ac1e0001441c9b000000000500000d7900007fff0000000b0000001e000000074414ec33e0000001000003ffac14140f000067d9443cf611e0000001000002f06401010100000007e0000002000000080000000000010000ac0200aafffffff8ac14141000000008e0000001fffffff8440ca9b3000000008000000094040007441ce991e000000100000005ac141424000000c7ac141423000000064404889044244831e0000001000003ffac1414aa00000003e0000002fffffffd7f000001000003ff891f227f000001ac1e0101e00000010a010101ac1414aaac1414bbe00000010000140000000000000000000000010000000200000000000000140000000000000000000000020000007f80000000000000b1e40a0fd5933d5b0985d4673fb0a148d5426c"], 0x1a8}, 0x4000) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b81, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0xa, 0x43a1bd76, 0x9, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x21, 0x2, 0xa) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000040de0d000000000000000600000000", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000040000000200"/28], 0x50) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000200)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x7fffffff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{0x1}, 0x0, &(0x7f00000002c0)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000007c0)='cpu.stat\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0800000004000000000100000800000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000040000000000008000000000000000007c94282da3206707d4d3cc3a8c0d5ac41e6795bbf919c962b03f558128bb89e573759b0dfe011be11ac595af372bd3ab6c673dd495cbbe7b91acf055e72bde3cdebd5ec1220e6159f2c3a2481e122370d90a364178d60000000000006ef360745732ccd125885e2e952fcf1a9f0ce21e7b5c"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0xe, 0xf0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$sock_attach_bpf(r4, 0x110, 0x2, &(0x7f00000000c0), 0x4) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f848470000005e2f0042180000180e000a001400000002800000121f", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000004000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000bbffffffb702000008000000b70300000000000085000000cf00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x16, 0x5, &(0x7f0000000780)=ANY=[@ANYRES64=r0], &(0x7f00000008c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m44.29319103s ago: executing program 1 (id=1252): r0 = socket$kcm(0x2b, 0x1, 0x0) close(r0) socket$kcm(0x2, 0x2, 0x73) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f00000001c0), 0x45) close(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r1, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0), 0x0, 0x0, 0x72, 0x0, 0x0, 0x10, &(0x7f0000000580), &(0x7f0000000680), 0x8, 0x3a, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x9, &(0x7f0000000140)=ANY=[@ANYBLOB="1800060000000000000000151812000000000000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095000000000000009500000000000000"], 0x0, 0x401, 0x0, 0x0, 0x40f00, 0x8, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffa}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{0x0}], 0x1}, 0x20000801) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000404000000002e"], 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0x4, 0xa, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x2, 0x1}, 0x48) close(r4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000feffffff8500000008000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a4a00000950000000000000063afd621c4212046f6d88edde2fe6f02ec1424b4704dc18f990cb4481f7a241733e256172a4bc04ce2afb2343f3e"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000200)={&(0x7f0000000380)="bf0149f062faf1bf91f66f490333c5eaed6b805d1235d2f9dce472d1ae3095541ed40f8e42121a52ccb2618cf9b2c7cd889da11e8e75fcb2a1881a0a2cd15c7ddb9052e5075e936b6b2a4b18524a7aef2f19fdacb8b1d44a7c186a10b22150dba9342c3fe92a6b4d031340731f5eb91c962066fec6c8da2d65a7e3d355580c6c6088aac6a67c8eb1de33e80e6bc8111dd466cb0f54d43fce05f8f37c3ddc6a9efb66ce1cf1bdabe0cb6760", &(0x7f0000000a00)=""/216, &(0x7f0000000b00)="822dfab9d8922524c965e7d968f667690b50491b90705e56086fb345285d4c98d9fc5cd83a634cba4707b72a49a394e3672356c4a716559c96d062c51142babcce39946611330c8361fea997889447a16a250fa3f49b7f0e6f98c33b67b470b2d0d03ced3b09078b842bc516fbb2a05f09038c88363c0d9df5ce419a6e72413f150093450e25b264768a18271ee43a2550", &(0x7f0000000bc0)="f793ed90b363279d8c8ae663208191d4f0ebcb009f4bd32c3956ab2b1766cff29f2939035d2a10a0f8b913e83c70cc0f07d122a252c05d532d284e9bca0dbd85a99bd155623a0a3c6346344107d9ed596f1e2bc477db36f5d9b522f65884678ade514cc98eda74f66df21b011fdb06ca7e7caff6ee013c72dab7a7edecd5d22127b2caa2526eb483cfe767bbbe81906ce58895f1bf7f002f76a2959b821902097ec97c345999818e250bb0383dadbd436f618bb9b9830c1660ca63f4c2e26894ccc966d0db31c4055ba12508186229abbc80645d8b113cf69e168b9177f2f183e3", 0x6, r3, 0x4}, 0x38) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r5}, 0xc) 2m44.123804259s ago: executing program 1 (id=1255): r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x400, 0x10506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000801, 0x1}, 0x7402, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x7, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0xb14}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x81, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x80}, 0x100, 0x0, 0x3f, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000001740)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r2, 0x110, 0x2, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r4, &(0x7f00000004c0)=ANY=[@ANYBLOB="131000002c0091bcd8b8fa9f53812e4ca67e9aa648"], 0xfe33) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) close(r0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="95000000000000008ae5"], 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x2f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7429}, 0x94) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0xfdef) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000001240), 0x8) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000001280)={r7, 0xffffffffffffffff, 0x4}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r5, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000140)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0], 0x0, 0x71, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0x23, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r10) recvmsg$unix(r9, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r12 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(r11, &(0x7f0000000200)=ANY=[@ANYRES8=r10, @ANYRES8=r12], 0x12) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000600)={0x3, 0x4, 0x4, 0xa, 0x0, r7, 0x7, '\x00', r8, r11, 0x1, 0x1, 0x4}, 0x50) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f00000000c0), 0x9}, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x20000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r13 = socket$kcm(0x10, 0x2929f7fef0ea2405, 0x10) socketpair(0x22, 0x2, 0x1, &(0x7f0000000000)) sendmsg$kcm(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000032000b07d25a806f8c6394f90824fc60", 0x14}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000100)=0x3) 2m28.984639565s ago: executing program 32 (id=1255): r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x400, 0x10506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000801, 0x1}, 0x7402, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x7, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0xb14}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x81, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x80}, 0x100, 0x0, 0x3f, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000001740)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r2, 0x110, 0x2, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r4, &(0x7f00000004c0)=ANY=[@ANYBLOB="131000002c0091bcd8b8fa9f53812e4ca67e9aa648"], 0xfe33) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) close(r0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="95000000000000008ae5"], 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x2f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7429}, 0x94) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0xfdef) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000001240), 0x8) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000001280)={r7, 0xffffffffffffffff, 0x4}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r5, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000140)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0], 0x0, 0x71, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0x23, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r10) recvmsg$unix(r9, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r12 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(r11, &(0x7f0000000200)=ANY=[@ANYRES8=r10, @ANYRES8=r12], 0x12) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000600)={0x3, 0x4, 0x4, 0xa, 0x0, r7, 0x7, '\x00', r8, r11, 0x1, 0x1, 0x4}, 0x50) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f00000000c0), 0x9}, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x20000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r13 = socket$kcm(0x10, 0x2929f7fef0ea2405, 0x10) socketpair(0x22, 0x2, 0x1, &(0x7f0000000000)) sendmsg$kcm(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000032000b07d25a806f8c6394f90824fc60", 0x14}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000100)=0x3) 3.866341275s ago: executing program 2 (id=1996): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$kcm(0xa, 0x5, 0x0) perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0x9) r1 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x10000009, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x0, 0xd4, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x91eb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x82}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000010400)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x80) socket$kcm(0x10, 0x2, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = openat$cgroup_subtree(r3, 0x0, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[@ANYBLOB='+cp} +'], 0xb) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000036000000180100006420002500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001800000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="178d048604bf0bfb1945d7430008", 0x0, 0x501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 3.403396621s ago: executing program 4 (id=1998): perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x4800000000000008, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbbd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000b"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x3, 0x3800, 0x3f}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r1}, 0xc) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x5b7}, 0x100904, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = socket$kcm(0x10, 0x5, 0x4) sendmsg$inet(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="5c00000015006bab9e3fe3d86e17aa31026b876c1d0000007ea60847160af36504000a0038001d000d0000009ee517d34460bc24eab556a705251e6182949a3651f60aaf80f4b1930400e7861000bd63", 0x50}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x48800) socket$kcm(0x2, 0x5, 0x84) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='cgroup.kill\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) r4 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r4, 0x6, 0x43, &(0x7f0000000000), 0x4) 3.381627553s ago: executing program 2 (id=1999): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10c) r2 = socket$kcm(0xa, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f00000014c0)=ANY=[@ANYBLOB="18000000000000008400000000000000629a2b39f3c900dbc7a84346dd00000000000000"], 0x18}, 0x880) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$kcm(0xa, 0x5, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg(r3, &(0x7f0000001480)={&(0x7f0000001000)=@can, 0x80, &(0x7f0000001980)=[{&(0x7f0000001080)="72374cbea923bd429549812c76a9561bcc813c3676ffbb95086f3e4e3c87cebea312c7442b75648b03132bd978f52b1fda9963f2cda1c6c30c9d3f16a05850abd785a57513378b9ee106d16a339a09294c83174708a09568ac80f253ffb8c0b81301f95d819a3b0a171e8d3975dceb8d30ddb0ac7a6707d699acb239b7f8816cad679139b8ba7dd36b51c64fffd7a37bf38d8e82980713d5c55f7eaf5482dca7ce427576e437b161a0412f4353df109d8fe3788b8b068a700738d49f4b7a40d56a0a248722", 0xc5}, {&(0x7f0000001180)="3b826216cc7b4c979cfd5bdd649801d26899ef6c290346e3e57505ef09be9b9af9f7058b0d97c7675aad864d8ae4f948f03935d8b7ba79ca71e306a415625bc7e5feb3", 0x43}, {&(0x7f0000001340)="3ba7598f1d02abdd6474860d15242ef2936dc5b29867d76de0108e6137d3e8f134bfbd19606e3e11f6b5019527844a08aae2f0e3300b8b4ae28a52b2aaa016be65fba0cf4f5f4d24939f71427b31dae95ff9802e3135daa32797caae08c3927437e9662dfd921df1b966fb3f95813afc55eda6240b40d0cdb7f81cec4df13079d2e636f7009f1f4db37974bc0fbc4f4cb636b183f359144a567d42feab5af12d26c5a35adfe56a9c96c2a31ecdb93144319f314ce4069bc27ef77aa28b07f9d0745fad2d2c39e2e6d321d8e84ac26a70e9b896fd74e90b13", 0xd8}, {&(0x7f0000001680)="d57796862c5d70d2e9a0b423601d12e9db1ca7cb6c7fb321b5365348deb7e8038746cb3dc390f027f6c5bd0655864b61e2bacc4ed3d74f8c62e8ed59f6812f9e6e35ce253d712555bd5bb2cc0c95d0a56215880878b99dd0adf5bf8215024cfd756d21b2e2ae1acaf186cd476a3702a4e574329dc884d732ed8df8830b6729e9f26ff1db31042c7abd65a73495382f0608fc444a6032dbfb2d712907827cbc7926190d76651b2f860917d9e19691c4955c02ee4a8025a96bdb6c13d7abec958045264357587603b9c8cafcf9a9b203fd3451ab12b2e539c79cb76180a5a6ade0315843961cd1617ce2f85f6e", 0xec}, {&(0x7f0000001200)="a42ddb42007a3d21c73e66e5f360b93f739e3849990eebdd", 0x18}, {&(0x7f0000001240)="0df11fe943d66a84cc1963d42cb3485f85ebd5c1be53191e7087db0a0f969940c159d24fbf20d82692457d99fbfa4b7ee7702798c2cec3f986479b6a734de73f4c865bc9e9c98dda5fd26c21579b5aac647167a68ec8abed2220cfdf144a57fb7fa47c5df286334e25db2bac20fed0969c2fa2321c0157ee380ad970dd6750", 0x7f}, {&(0x7f0000001780)="e77fed37fe179de46e9fc9de12243d1415a6c7913edbe5367f20f0f45c9cb03afd387e51a1ab641521480c12b714a324c420e47640fd19acaf7bc678bb3bba386b4b5dd7fc76012cb651f632eafea59f20417cb206f7e4204a9c4b66c42ed552390ca2ed75b29240ec0978868823c92d269bb505f11f0bbcd2617318c7de8633a7da2dfb835b879650449d613a7e9457489c2b4181c475f93f297786932dc921819765dc21d24fb5b87b3c5b7ba0dc83d8caca61ace02062b9dd4628278561cd444871aa188563f631540171c2d14b6004d1b5be4124", 0xd6}, {&(0x7f0000001440)="ddf3413c0fd0c48e7a9069e553b98e9f8201c981aa435e5b64617accfe8be86c1cd317c38e9cf2b6ee93ffbb243c0b", 0x2f}, {&(0x7f0000001880)="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", 0xfd}], 0x9, &(0x7f0000002c80)=ANY=[@ANYBLOB="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"], 0x1230}, 0x400c004) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x29, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d08007b490d4f1e81f8d815000100ff05142603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) 3.028665124s ago: executing program 3 (id=2000): socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x4) close(0x3) socket$kcm(0xa, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$unix(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0xf}, 0x90208, 0x0, 0x310c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0xa, 0x2, 0x73) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'ip6gre0\x00', 0x1000}) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40305829, &(0x7f0000000040)=0x604) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000600)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000400), 0x12) perf_event_open(0x0, 0x0, 0xfffffffc00000000, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x9, 0x3, &(0x7f0000000280)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xa0, 0x72, 0xa, 0xff00}}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2f, '\x00', 0x0, @cgroup_sock}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000800)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x14694, 0xffffffffffffffff, 0x4, &(0x7f0000000740), &(0x7f0000000780)=[{0x3, 0x3, 0x3, 0x8}, {0x4, 0x2, 0xd}, {0x4, 0x3, 0x9, 0x1}, {0x2, 0x4, 0x0, 0x1}], 0x10, 0x6}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r7, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000800)={r7, &(0x7f0000000780)}, 0x20) write$cgroup_pid(r6, 0x0, 0x0) r8 = openat$cgroup_int(r5, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) r9 = syz_clone(0x100000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs$namespace(r9, &(0x7f0000000280)='ns/ipc\x00') write$cgroup_int(r8, &(0x7f00000003c0)=0xfffffffffffffffc, 0x12) 2.635005276s ago: executing program 4 (id=2001): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x101, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000400), 0x12) 2.464914896s ago: executing program 0 (id=2002): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f2, &(0x7f0000000080)) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x50) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x80880, 0x0) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000380)=0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r1}, @generic={0x66}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, @exit, @alu={0x4, 0x0, 0x6, 0x3}]}, &(0x7f0000001300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000ac0)) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x6}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, 0x0, &(0x7f00000003c0)=r4}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r3, 0x0, &(0x7f0000000240)=""/154}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000600)={0x1, 0x58, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000640), 0x4) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x5}, 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x4}, 0x50) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000840)=@generic={&(0x7f0000000800)='./file0\x00', 0x0, 0x8}, 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000900)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000880), &(0x7f00000008c0)='%ps \x00'}, 0x20) r12 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a00)=@bpf_ext={0x1c, 0x15, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xcb}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='syzkaller\x00', 0x10000000, 0xe6, &(0x7f0000000500)=""/230, 0x40f00, 0x2, '\x00', r5, 0x0, r6, 0x8, &(0x7f0000000680)={0x3, 0x4}, 0x8, 0x10, &(0x7f00000006c0)={0x3, 0xe, 0x2bf, 0xffff}, 0x10, 0x11d1c, 0xffffffffffffffff, 0x8, &(0x7f0000000940)=[r7, r8, r9, r10, 0x1, r11], &(0x7f0000000980)=[{0x2, 0x3, 0xd, 0x1}, {0x3, 0x1, 0x3, 0x5}, {0x2, 0x2, 0x8, 0x3}, {0x1, 0x1, 0x5, 0xb}, {0x5, 0x3, 0x6, 0x7}, {0x1, 0x4, 0xf, 0x5}, {0x2, 0x2, 0x4, 0x1}, {0x2, 0x1, 0x1, 0x5}], 0x10, 0x7}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000340)=r12, 0x4) 2.274089908s ago: executing program 4 (id=2003): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES32], 0x50) recvmsg$unix(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x2020) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000000700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r6 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r5}, 0x8) close(r6) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r6, 0x58}, 0x7) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000004c0)={r6, &(0x7f0000000300)="2a1684e533f88d7ebe4e267882403c899e275cbd5b9d508b20f4491f0819492e", &(0x7f0000001780)=""/4096, 0x4}, 0x20) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}, 0x15008}, r7, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r8, 0x4008240b, &(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x1, 0x7, 0x0, 0x1}, 0x48) r10 = bpf$ITER_CREATE(0x21, &(0x7f0000000280), 0x8) write$cgroup_subtree(r10, &(0x7f00000002c0)={[{0x2b, 'perf_event'}]}, 0xc) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r9, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r11) r12 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r12, &(0x7f0000000040)=ANY=[], 0xfe33) 2.193321373s ago: executing program 2 (id=2004): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x10, 0x0, 0x0, 0x0, 0x0, 0x88, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x11498d, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x88e}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a0000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x513, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x202, 0x0, 0xffffffff, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) write$cgroup_pid(r1, &(0x7f00000006c0)=0xffffffffffffffff, 0x12) openat$cgroup_subtree(r1, &(0x7f0000000540), 0x2, 0x0) openat$cgroup_procs(r1, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) socket$kcm(0xa, 0x3, 0x87) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb010018000000000000006c0000006c000000040000000e00000001000013090000000800000001000000000000800c0000000000000b05c5e8164cc66f716d000004400000000c00000002000000090000000900000002000000050000000900000003000000020000000900000000000007000000000c0000000000001203000000005f6100"], &(0x7f0000001c40)=""/235, 0x88, 0xeb, 0x0, 0x7}, 0x28) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f0000000401a8000100fec0ffff00000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4ed", 0xc5}], 0x1}, 0x0) r3 = socket$kcm(0x15, 0x5, 0x0) setsockopt$sock_attach_bpf(r3, 0x114, 0x8, 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000000500)={&(0x7f0000000280)={0x2, 0x4e20, @private=0xa010102}, 0x10, &(0x7f0000000440)=[{&(0x7f0000001a80)="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", 0x194}, {&(0x7f0000000a80)="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", 0x1000}, {&(0x7f0000000800)="1c52c0b0bf62fb95393ed9121cebfa92ec08dca26788ae4fe64a163e6930e70e50516c3e040b10afb14ece82ee67cc866abb810137bf342579a30d2f65d5f6e1e80070756e11ad6ada87d0e57f85fa4a3d59be4be09ef9da4a1613a3763d02f7e0983af3e6b6ba4e56677809454f04f799c2d9a182f68886ce8d495bfc52eeebda643d91e4b956ac21be0a16c5e2945ddb19ae8c5a", 0x95}], 0x3, &(0x7f0000001e00)=ANY=[@ANYBLOB="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"], 0x1a8}, 0x4000) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b81, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0xa, 0x43a1bd76, 0x9, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x21, 0x2, 0xa) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000040de0d000000000000000600000000", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000040000000200"/28], 0x50) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000200)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x7fffffff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000007c0)='cpu.stat\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0800000004000000000100000800000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000040000000000008000000000000000007c94282da3206707d4d3cc3a8c0d5ac41e6795bbf919c962b03f558128bb89e573759b0dfe011be11ac595af372bd3ab6c673dd495cbbe7b91acf055e72bde3cdebd5ec1220e6159f2c3a2481e122370d90a364178d60000000000006ef360745732ccd125885e2e952fcf1a9f0ce21e7b5c"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0xe, 0xf0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$sock_attach_bpf(r4, 0x110, 0x2, &(0x7f00000000c0), 0x4) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f848470000005e2f0042180000180e000a001400000002800000121f", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000004000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000bbffffffb702000008000000b70300000000000085000000cf00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x16, 0x5, &(0x7f0000000780)=ANY=[@ANYRES64=r0], &(0x7f00000008c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.166868564s ago: executing program 0 (id=2005): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0900000004000000e27f0000ffffffff08800600", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0a00000000000000000000000000000000000000114ae95464c3a3462e2808abb7fd254cbf2b395920f2e50cfacbf24e98f50a37c0ddb57df9756121b7d0cfc02cab26464827c77b46e3f7f141fa1063dcf2df0f0ac5e42357b5b8d3dc8d", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x50) (async) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x40000) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) 2.048742911s ago: executing program 3 (id=2006): r0 = getpid() r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) r2 = getpid() r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r2, 0x0, r1, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r3, 0x2401, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r3, 0x2401, 0x80ffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x15}}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.865495461s ago: executing program 0 (id=2007): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$kcm(0xa, 0x5, 0x0) perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0x9) r1 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x10000009, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x0, 0xd4, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x91eb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x82}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000010400)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x80) socket$kcm(0x10, 0x2, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = openat$cgroup_subtree(r3, 0x0, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[@ANYBLOB='+cp} +'], 0xb) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000036000000180100006420002500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001800000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="178d048604bf0bfb1945d7430008", 0x0, 0x501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 1.769802237s ago: executing program 3 (id=2008): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x803}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x1954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0x9, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="110000000002"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c00000002000000000000000000000d0a00000000000000020000060400000009000002"], &(0x7f0000000f40)=""/4073, 0x66, 0xfe9, 0x8}, 0x28) close(r0) 1.712430941s ago: executing program 2 (id=2009): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="52e9c87f16f3f4d9058302000101000018220000", @ANYRES32=r1, @ANYBLOB="00000000a00000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], &(0x7f0000000280)='GPL\x00', 0x51ff, 0x90, &(0x7f00000002c0)=""/144, 0x40f00, 0x0, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x8, 0x4}, 0x8, 0x10, &(0x7f00000003c0)={0x0, 0x10, 0x101, 0xfffffff5}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000400)=[r1, r1], &(0x7f0000000440)=[{0x4, 0x1, 0x8, 0xb}, {0x4, 0x2, 0x7, 0x4}, {0x5, 0x5, 0xb, 0xa}, {0x3, 0x4, 0x9, 0xa}], 0x10, 0x5}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) close(r6) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef436000000e3bd6efb440009000e00130010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x5, &(0x7f00000015c0)=ANY=[@ANYBLOB="180200000100000000000000040000008500000087000000850000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r8, 0x18000000000002a0, 0x6, 0x0, &(0x7f0000000000)="7c531cfc6193", 0x0, 0xd5a2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(r5, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r10, &(0x7f0000000000)=ANY=[@ANYRES8=r6, @ANYBLOB="3eca", @ANYRES8=r9], 0x9a) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000680)={@ifindex=r3, 0x26, 0x0, 0x6, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000006c0)={@map=r1, r2, 0xb, 0x2000, r4, @value=r2, @void, @void, @void, r11}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="1820000004000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x1f00, 0x0, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) 1.150062653s ago: executing program 4 (id=2010): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0xfc00) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c5842, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000640)=""/253, 0xfd}, {&(0x7f0000000140)=""/75, 0x4b}, {&(0x7f0000000340)=""/184, 0xb8}], 0x3, 0x0, 0x0, 0xf5ffffff}, 0xa845374ed9b437b2) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) sendmsg$inet(r4, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x80) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x5}, 0x50) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x89f2, &(0x7f0000000900)={'sit0\x00', @random="0000230c1100"}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000100)={'pim6reg1\x00'}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="e5db9638edbc"}) write$cgroup_devices(r3, &(0x7f0000000600)=ANY=[@ANYBLOB="1e030800dd5c9801288563a20dad001406", @ANYRESHEX, @ANYBLOB="534f4a7ce560ec9df01c5798b81e806c1ad5d19edb91b1c981e2aeaa"], 0xffdd) 845.170231ms ago: executing program 2 (id=2011): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x101, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000400), 0x12) 841.217651ms ago: executing program 0 (id=2012): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) mkdir(&(0x7f0000000040)='./file/file0/..//file0/file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20029, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xf}, 0x806, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x88}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000740)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001680)="1c0000001a0081044e81f782db4cb9040a1d08007b490d4f1e81f8d815000100ff12142603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) 713.440179ms ago: executing program 3 (id=2013): socket$kcm(0x10, 0x3, 0x10) (async) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600073582c137153e37080c188006ac0f000300", 0x33fe0}], 0x1, 0x0, 0x0, 0x8100000}, 0x0) socket$kcm(0x10, 0x2, 0x4) (async) r1 = socket$kcm(0x10, 0x2, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800f92c00000000000000001000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x8, 0x1005, &(0x7f0000000e00)=""/4101, 0x0, 0xc}, 0x22) close(0x3) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@ifindex, 0x9, 0x0, 0x40, &(0x7f0000000400)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={r3, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x57, &(0x7f0000000740)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000780), &(0x7f00000007c0), 0x8, 0x21, 0x8, 0x8, &(0x7f0000000800)}}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000540)={@map=r2, r3, 0x1a, 0x20, 0x0, @void, @void, @void, @value=r5, r4}, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x1, 0x2, 0xab, 0x6, 0x0, 0x3, 0x60020, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, @perf_bp={0x0, 0x3}, 0xa081, 0x7, 0xf, 0x7, 0x7ff, 0x400, 0x1, 0x0, 0x3, 0x0, 0x8}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x1) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000300)={0x0, 0x7fff, 0x10}, 0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={r6, 0x58, &(0x7f0000000340)}, 0x10) socket$kcm(0xa, 0x5, 0x0) (async) socket$kcm(0xa, 0x5, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) (async) r7 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f0000000280)={0x5, 0x80, 0x3d, 0xe, 0x6, 0xe, 0x0, 0x6, 0x44401, 0x5, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={&(0x7f0000000240), 0x2}, 0x80, 0x3, 0xfffffffc, 0x8, 0x1b3, 0x3, 0x2, 0x0, 0x1, 0x0, 0xf}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) (async) r8 = perf_event_open$cgroup(&(0x7f0000000280)={0x5, 0x80, 0x3d, 0xe, 0x6, 0xe, 0x0, 0x6, 0x44401, 0x5, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={&(0x7f0000000240), 0x2}, 0x80, 0x3, 0xfffffffc, 0x8, 0x1b3, 0x3, 0x2, 0x0, 0x1, 0x0, 0xf}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f00000001c0)={0x3, 0x80, 0x1, 0xde, 0x28, 0xa3, 0x0, 0x4, 0x488, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x10001, 0x8}, 0x12008, 0x5, 0x5, 0x4, 0xaf77, 0x2, 0xa, 0x0, 0x3ff, 0x0, 0x7}, r7, 0xffffffffffffffff, r8, 0xa) sendmsg$inet(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000580)='i', 0x1}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="20000000000000008400000002000000050003"], 0x20}, 0x50) 603.406095ms ago: executing program 4 (id=2014): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="95000000000000008ae5"], 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x2f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7429}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000003080)={0x11, 0xd, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x0, 0x8, 0x0, 0x0, 0x41000, 0x45, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7f}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r1, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0x7, 0x5, 0x7, 0xc1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffd}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r2, &(0x7f0000000340), 0x0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r1, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x4, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd}, [@call={0x85, 0x0, 0x0, 0x9d}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000b40)={r1, &(0x7f0000000a80), 0x0}, 0x20) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfdef) 538.382309ms ago: executing program 0 (id=2015): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x1, 0x5}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000010400)={0x11, 0x14, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNGETVNETBE(r2, 0x800454df, &(0x7f0000000000)=0x1) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000080)={0x2, &(0x7f0000000180)=[{0x20, 0x4, 0x0, 0xfffff00c}, {0x6}]}) 502.654471ms ago: executing program 2 (id=2016): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f0000000380)='cgroup.threads\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x64, &(0x7f0000000000), 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r0, 0xb, 0x1, 0x10000, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4b, 0x0, &(0x7f0000000240)=[0x0, 0x0], &(0x7f00000001c0), &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0xffffff3f) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffeffffffff}, 0xc001, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x7, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000440)={r1}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000002280)=ANY=[@ANYBLOB="850000002200000007000000000f00089500000000000000e26c9bd1a6361b80cdd6ff07000000000008bc005aac0000659f55df08f9b90788ff7f00000010000029c21ebbcde61d8ab592"], 0x0, 0x2}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000000000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f000001000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f000001ac141400000000001c00000000000000000000004700000044aa00210a2101"], 0x230}, 0x0) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90324fc60100005000a000248053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000001700), 0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000200)=ANY=[@ANYRES16=r0], 0x20) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1200000000000000040000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r9}, &(0x7f0000000040), &(0x7f0000000140)=r8}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={r9, &(0x7f00000001c0), 0x0}, 0x20) r10 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000000c0), 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000300)=ANY=[@ANYRES32=r9, @ANYRES32, @ANYBLOB="08e269402f83e73500"/19, @ANYRES32=r10, @ANYBLOB, @ANYRES64=r4], 0x20) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r12 = openat$cgroup_procs(r11, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r12, &(0x7f00000001c0), 0x12) 417.251307ms ago: executing program 3 (id=2017): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x10, 0x0, 0x0, 0x0, 0x0, 0x88, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x11498d, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x88e}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a0000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x513, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x202, 0x0, 0xffffffff, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) write$cgroup_pid(r1, &(0x7f00000006c0)=0xffffffffffffffff, 0x12) openat$cgroup_subtree(r1, &(0x7f0000000540), 0x2, 0x0) openat$cgroup_procs(r1, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) socket$kcm(0xa, 0x3, 0x87) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb010018000000000000006c0000006c000000040000000e00000001000013090000000800000001000000000000800c0000000000000b05c5e8164cc66f716d000004400000000c00000002000000090000000900000002000000050000000900000003000000020000000900000000000007000000000c0000000000001203000000005f6100"], &(0x7f0000001c40)=""/235, 0x88, 0xeb, 0x0, 0x7}, 0x28) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f0000000401a8000100fec0ffff00000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4ed", 0xc5}], 0x1}, 0x0) r3 = socket$kcm(0x15, 0x5, 0x0) setsockopt$sock_attach_bpf(r3, 0x114, 0x8, 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000000500)={&(0x7f0000000280)={0x2, 0x4e20, @private=0xa010102}, 0x10, &(0x7f0000000440)=[{&(0x7f0000001a80)="bdbbc13866becd582951c712687e092df6367e7321134e12d4178d93f4b64cebbbb2061b9554058a390d03f8cb2abfb4a2950ffb927677425c2b9fd1b843d517f284a2b776f4e353fa8e29ed3c60e64be2507b8b9b90383584ef75ecce5ca1b8417e44fbed170378052bb269c27428435f70f28bedd9d2c8cf6aa0708ee0ae270bca2d4d7754e5ddd907b69a8ad7091646142e1ae1268a0d62145e08823d7cb6d4c9f3421faaa6245cc9f15efa9d56073c27a084cd527211c95a27e10fa4ac4b153e3d84cd990b46871e488724b48dc638e9b693d96e580a068de76ebfd59da53d17982c4fb8382531bcb5e3ee2c1333d557885ec0b1413b861812ee3bd26bc79b6a35f73ef6bbcc31d933383aefe4fe1adfb5cd50e8beff923bf66278b5e53c4175efe41aa52ce53ec3e725ce651c114e0d9a81ee0330422fb740250c000079e8e25ed8c3d7b5ceab9e832405968ba69ab9373b389e48351b41823aa4e557ab5ea2f754d3e19e6a7502d382dbad8f09f810b95517b05b182730936492df93d338ffcab552872db91c2130430f70c0b491574da6", 0x194}, {&(0x7f0000000a80)="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", 0x1000}, {&(0x7f0000000800)="1c52c0b0bf62fb95393ed9121cebfa92ec08dca26788ae4fe64a163e6930e70e50516c3e040b10afb14ece82ee67cc866abb810137bf342579a30d2f65d5f6e1e80070756e11ad6ada87d0e57f85fa4a3d59be4be09ef9da4a1613a3763d02f7e0983af3e6b6ba4e56677809454f04f799c2d9a182f68886ce8d495bfc52eeebda643d91e4b956ac21be0a16c5e2945ddb19ae8c5a", 0x95}], 0x3, &(0x7f0000001e00)=ANY=[@ANYBLOB="54000000000000000000000007000000441ca48364010100000000027f00000100000002e0000002fffffff89404000083173fac1414bb00000000ac14140a0a0101010a010102440cf5b164010100000008d2000000000014000000000000000000000002000000040000000000000008010000000000000000000007000000831711ffffffffac1414aa000000000a010102ac1e0001441c9b000000000500000d7900007fff0000000b0000001e000000074414ec33e0000001000003ffac14140f000067d9443cf611e0000001000002f06401010100000007e0000002000000080000000000010000ac0200aafffffff8ac14141000000008e0000001fffffff8440ca9b3000000008000000094040007441ce991e000000100000005ac141424000000c7ac141423000000064404889044244831e0000001000003ffac1414aa00000003e0000002fffffffd7f000001000003ff891f227f000001ac1e0101e00000010a010101ac1414aaac1414bbe00000010000140000000000000000000000010000000200000000000000140000000000000000000000020000007f80000000000000b1e40a0fd5933d5b0985d4673fb0a148d5426ca4"], 0x1a8}, 0x4000) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b81, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0xa, 0x43a1bd76, 0x9, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x21, 0x2, 0xa) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000040de0d000000000000000600000000", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000040000000200"/28], 0x50) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000200)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x7fffffff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000007c0)='cpu.stat\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0800000004000000000100000800000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000040000000000008000000000000000007c94282da3206707d4d3cc3a8c0d5ac41e6795bbf919c962b03f558128bb89e573759b0dfe011be11ac595af372bd3ab6c673dd495cbbe7b91acf055e72bde3cdebd5ec1220e6159f2c3a2481e122370d90a364178d60000000000006ef360745732ccd125885e2e952fcf1a9f0ce21e7b5c"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0xe, 0xf0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$sock_attach_bpf(r4, 0x110, 0x2, &(0x7f00000000c0), 0x4) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f848470000005e2f0042180000180e000a001400000002800000121f", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000004000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000bbffffffb702000008000000b70300000000000085000000cf00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x16, 0x5, &(0x7f0000000780)=ANY=[@ANYRES64=r0], &(0x7f00000008c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 307.213663ms ago: executing program 0 (id=2018): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000010000003f00000040"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000800000095"], &(0x7f0000000340)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4002000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000200), 0x5e5, r0}, 0x38) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r0, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%+9llu \x00'}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000004c0)={r0, 0x58, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='memory.stat\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0x20, &(0x7f0000000700)={&(0x7f00000005c0)=""/83, 0x53, 0x0, &(0x7f0000000640)=""/176, 0xb0}}, 0x10) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="d8000000190081054e81f782db4cb9041c1d0800fe007c05e8fe55a10a0015000200142603600e12080005007f370401a8000600200002400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x98ffffff}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000240)={r6, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000040)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x90, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x100000cd, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000280)={r8}) ioctl$sock_kcm_SIOCKCMATTACH(r9, 0x89e0, &(0x7f00000002c0)={r6, r7}) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x7, 0x21, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x49}, [@btf_id={0x18, 0x5, 0x3, 0x0, 0x3}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @ldst={0x2, 0x0, 0x3, 0x0, 0x8, 0x1, 0xfffffffffffffff0}, @map_val={0x18, 0x3, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0xff}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x2}]}, &(0x7f00000001c0)='syzkaller\x00', 0xf92d, 0x0, 0x0, 0x41100, 0x8, '\x00', r3, @fallback=0x12, r4, 0x8, &(0x7f0000000540)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000580)={0x1, 0xe, 0x0, 0xffffffff}, 0x10, r5, r7, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) 285.484014ms ago: executing program 4 (id=2019): r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x400, 0x10506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000801, 0x1}, 0x7402, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x126400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) close(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x5a}, [@ldst={0x7}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x23) 0s ago: executing program 3 (id=2020): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$kcm(0xa, 0x5, 0x0) perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0x9) r1 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x10000009, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x0, 0xd4, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x91eb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x82}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000010400)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x80) socket$kcm(0x10, 0x2, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = openat$cgroup_subtree(r3, 0x0, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[@ANYBLOB='+cp} +'], 0xb) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000036000000180100006420002500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001800000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="178d048604bf0bfb1945d7430008", 0x0, 0x501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) kernel console output (not intermixed with test programs): lo may have been left with an inconsistent configuration, please check. [ 156.692275][ T6983] netlink: 14 bytes leftover after parsing attributes in process `syz.3.339'. [ 160.786559][ T7003] netlink: 192436 bytes leftover after parsing attributes in process `syz.3.345'. [ 160.825589][ T7003] openvswitch: netlink: Duplicate key (type 0). [ 161.691890][ T7017] netlink: 'syz.2.350': attribute type 10 has an invalid length. [ 162.469851][ T7032] netlink: 'syz.1.357': attribute type 1 has an invalid length. [ 162.487961][ T7032] netlink: 'syz.1.357': attribute type 4 has an invalid length. [ 162.536193][ T7032] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.357'. [ 164.040233][ T7066] netlink: zone id is out of range [ 164.045665][ T7066] netlink: set zone limit has 8 unknown bytes [ 164.091631][ T7066] netlink: zone id is out of range [ 164.110391][ T7066] netlink: set zone limit has 8 unknown bytes [ 164.242473][ T7067] netlink: 'syz.2.368': attribute type 10 has an invalid length. [ 165.542705][ T7109] netlink: 'syz.0.380': attribute type 10 has an invalid length. [ 165.714400][ T7108] netlink: 'syz.2.381': attribute type 29 has an invalid length. [ 165.786516][ T7108] netlink: 'syz.2.381': attribute type 29 has an invalid length. [ 165.852388][ T7119] netlink: 'syz.2.381': attribute type 29 has an invalid length. [ 167.426813][ T7149] netlink: 176 bytes leftover after parsing attributes in process `syz.1.389'. [ 167.803047][ T7151] netlink: 'syz.0.392': attribute type 10 has an invalid length. [ 168.106029][ T7159] netlink: 'syz.0.394': attribute type 25 has an invalid length. [ 168.175063][ T7159] netlink: 'syz.0.394': attribute type 1 has an invalid length. [ 168.244515][ T7159] bridge0: port 1(bridge_slave_0) entered learning state [ 168.296436][ T7159] netlink: 'syz.0.394': attribute type 25 has an invalid length. [ 168.304281][ T7159] netlink: 'syz.0.394': attribute type 1 has an invalid length. [ 168.345926][ T7159] bridge0: port 1(bridge_slave_0) entered learning state [ 168.378295][ T7159] netlink: 'syz.0.394': attribute type 25 has an invalid length. [ 168.411287][ T7165] netlink: 'syz.3.395': attribute type 1 has an invalid length. [ 168.422824][ T7159] netlink: 'syz.0.394': attribute type 1 has an invalid length. [ 168.442603][ T7167] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.398'. [ 168.452949][ T7165] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.395'. [ 168.478111][ T7159] bridge0: port 1(bridge_slave_0) entered learning state [ 168.516733][ T7167] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 168.537972][ T7167] CPU: 1 PID: 7167 Comm: syz.2.398 Not tainted syzkaller #0 [ 168.545355][ T7167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 168.555494][ T7167] Call Trace: [ 168.558827][ T7167] [ 168.561864][ T7167] dump_stack_lvl+0x18c/0x250 [ 168.566713][ T7167] ? show_regs_print_info+0x20/0x20 [ 168.571981][ T7167] ? load_image+0x400/0x400 [ 168.576561][ T7167] sysfs_warn_dup+0x8e/0xa0 [ 168.581119][ T7167] sysfs_do_create_link_sd+0xc0/0x110 [ 168.586543][ T7167] device_add_class_symlinks+0x1cf/0x240 [ 168.592244][ T7167] device_add+0x507/0xc20 [ 168.596729][ T7167] wiphy_register+0x1dad/0x2ae0 [ 168.601671][ T7167] ? cfg80211_event_work+0x40/0x40 [ 168.606846][ T7167] ? minstrel_ht_alloc+0x88a/0x990 [ 168.612023][ T7167] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 168.618173][ T7167] ieee80211_register_hw+0x3464/0x4250 [ 168.623723][ T7167] ? ieee80211_tasklet_handler+0x20/0x20 [ 168.629416][ T7167] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 168.635369][ T7167] ? __debug_object_init+0xec/0x450 [ 168.640631][ T7167] ? __asan_memset+0x22/0x40 [ 168.645277][ T7167] ? __hrtimer_init+0x186/0x270 [ 168.650181][ T7167] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 168.655998][ T7167] ? mac80211_hwsim_free+0x220/0x220 [ 168.661336][ T7167] ? rcu_is_watching+0x15/0xb0 [ 168.666153][ T7167] ? kstrndup+0xbd/0x140 [ 168.670462][ T7167] hwsim_new_radio_nl+0xdc9/0x1a90 [ 168.675644][ T7167] ? __nla_validate+0x50/0x50 [ 168.680405][ T7167] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 168.686821][ T7167] ? __nla_parse+0x40/0x50 [ 168.691305][ T7167] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 168.697698][ T7167] genl_family_rcv_msg_doit+0x211/0x310 [ 168.703314][ T7167] ? end_current_label_crit_section+0x170/0x170 [ 168.709626][ T7167] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 168.715601][ T7167] ? bpf_lsm_capable+0x9/0x10 [ 168.720375][ T7167] ? security_capable+0x89/0xb0 [ 168.725292][ T7167] genl_rcv_msg+0x619/0x7a0 [ 168.729871][ T7167] ? genl_bind+0x360/0x360 [ 168.734395][ T7167] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 168.740822][ T7167] ? perf_trace_lock+0xfc/0x3b0 [ 168.745748][ T7167] netlink_rcv_skb+0x241/0x4d0 [ 168.750755][ T7167] ? genl_bind+0x360/0x360 [ 168.755237][ T7167] ? netlink_ack+0x1180/0x1180 [ 168.760089][ T7167] ? __lock_acquire+0x7d40/0x7d40 [ 168.765222][ T7167] ? down_read+0x1ac/0x2e0 [ 168.769709][ T7167] genl_rcv+0x28/0x40 [ 168.773757][ T7167] netlink_unicast+0x751/0x8d0 [ 168.778688][ T7167] netlink_sendmsg+0x8d0/0xbf0 [ 168.783532][ T7167] ? netlink_getsockopt+0x590/0x590 [ 168.788787][ T7167] ? aa_sock_msg_perm+0x94/0x150 [ 168.793784][ T7167] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 168.799127][ T7167] ? security_socket_sendmsg+0x80/0xa0 [ 168.804652][ T7167] ? netlink_getsockopt+0x590/0x590 [ 168.810092][ T7167] ____sys_sendmsg+0x5ba/0x960 [ 168.814951][ T7167] ? __asan_memset+0x22/0x40 [ 168.819614][ T7167] ? __sys_sendmsg_sock+0x30/0x30 [ 168.824698][ T7167] ? __import_iovec+0x5f2/0x850 [ 168.829632][ T7167] ? import_iovec+0x73/0xa0 [ 168.834202][ T7167] ___sys_sendmsg+0x2a6/0x360 [ 168.838986][ T7167] ? __sys_sendmsg+0x2a0/0x2a0 [ 168.843831][ T7167] ? debug_mutex_init+0x38/0x70 [ 168.848776][ T7167] __se_sys_sendmsg+0x1c2/0x2b0 [ 168.853682][ T7167] ? __x64_sys_sendmsg+0x80/0x80 [ 168.858693][ T7167] ? lockdep_hardirqs_on+0x98/0x150 [ 168.863955][ T7167] do_syscall_64+0x55/0xa0 [ 168.868430][ T7167] ? clear_bhb_loop+0x40/0x90 [ 168.873156][ T7167] ? clear_bhb_loop+0x40/0x90 [ 168.877899][ T7167] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 168.883839][ T7167] RIP: 0033:0x7fa08159aeb9 [ 168.888317][ T7167] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.907966][ T7167] RSP: 002b:00007fa07f7f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 168.916441][ T7167] RAX: ffffffffffffffda RBX: 00007fa081815fa0 RCX: 00007fa08159aeb9 [ 168.924457][ T7167] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 168.932470][ T7167] RBP: 00007fa081608c1f R08: 0000000000000000 R09: 0000000000000000 [ 168.940491][ T7167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 168.948518][ T7167] R13: 00007fa081816038 R14: 00007fa081815fa0 R15: 00007fff35e28b98 [ 168.956557][ T7167] [ 169.033213][ T7168] netlink: 'syz.3.395': attribute type 10 has an invalid length. [ 169.127733][ T7168] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.175040][ T7168] bridge_slave_1: left allmulticast mode [ 169.185504][ T7168] bridge_slave_1: left promiscuous mode [ 169.202213][ T7168] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.289019][ T7168] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 169.326248][ T7159] netlink: 'syz.0.394': attribute type 25 has an invalid length. [ 169.416052][ T7159] bridge0: port 1(bridge_slave_0) entered learning state [ 169.674200][ T7159] bridge0: port 1(bridge_slave_0) entered learning state [ 169.723823][ T7159] bridge0: port 1(bridge_slave_0) entered learning state [ 169.819003][ T7159] bridge0: port 1(bridge_slave_0) entered learning state [ 169.874374][ T7159] bridge0: port 1(bridge_slave_0) entered learning state [ 170.047141][ T7159] bridge0: port 1(bridge_slave_0) entered learning state [ 170.868018][ T7210] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.411'. [ 170.885974][ T7210] openvswitch: netlink: Key type 4112 is out of range max 32 [ 174.233823][ T7225] validate_nla: 12 callbacks suppressed [ 174.233844][ T7225] netlink: 'syz.3.415': attribute type 10 has an invalid length. [ 175.400318][ T7251] netlink: 'syz.2.425': attribute type 10 has an invalid length. [ 176.097605][ T7275] netlink: 'syz.0.431': attribute type 12 has an invalid length. [ 176.105468][ T7275] netlink: 132 bytes leftover after parsing attributes in process `syz.0.431'. [ 177.081733][ T7296] netlink: 'syz.2.436': attribute type 21 has an invalid length. [ 177.310392][ T7300] netlink: 'syz.0.437': attribute type 7 has an invalid length. [ 180.895230][ T7318] netlink: 'syz.1.443': attribute type 3 has an invalid length. [ 180.946033][ T7318] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.443'. [ 185.139771][ T7364] netlink: 'syz.2.457': attribute type 1 has an invalid length. [ 185.154103][ T7364] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.457'. [ 185.174050][ T7364] netlink: 'syz.2.457': attribute type 4 has an invalid length. [ 185.201531][ T7364] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.457'. [ 185.543387][ T7360] netlink: 'syz.0.455': attribute type 3 has an invalid length. [ 185.596842][ T7360] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.455'. [ 185.804860][ T7375] netlink: 61967 bytes leftover after parsing attributes in process `syz.1.460'. [ 185.918189][ T7375] netlink: 60 bytes leftover after parsing attributes in process `syz.1.460'. [ 185.953960][ T7375] netlink: 60 bytes leftover after parsing attributes in process `syz.1.460'. [ 186.016704][ T7380] netlink: 60 bytes leftover after parsing attributes in process `syz.1.460'. [ 186.037511][ T7375] netlink: 60 bytes leftover after parsing attributes in process `syz.1.460'. [ 186.580578][ T7396] netlink: 14 bytes leftover after parsing attributes in process `syz.2.465'. [ 187.434382][ T7404] delete_channel: no stack [ 187.540987][ T7405] netlink: 'syz.1.467': attribute type 10 has an invalid length. [ 187.946580][ T7418] netlink: 'syz.1.478': attribute type 2 has an invalid length. [ 187.973635][ T7415] netlink: 'syz.1.478': attribute type 2 has an invalid length. [ 188.065295][ T7419] netlink: 'syz.3.470': attribute type 3 has an invalid length. [ 188.078417][ T7419] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.470'. [ 188.221343][ T7423] netlink: 'syz.0.468': attribute type 4 has an invalid length. [ 189.222813][ T7438] FAULT_INJECTION: forcing a failure. [ 189.222813][ T7438] name failslab, interval 1, probability 0, space 0, times 1 [ 189.276118][ T7438] CPU: 1 PID: 7438 Comm: syz.2.474 Not tainted syzkaller #0 [ 189.283501][ T7438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 189.293617][ T7438] Call Trace: [ 189.296945][ T7438] [ 189.299917][ T7438] dump_stack_lvl+0x18c/0x250 [ 189.304643][ T7438] ? show_regs_print_info+0x20/0x20 [ 189.309885][ T7438] ? load_image+0x400/0x400 [ 189.314421][ T7438] ? __might_sleep+0xe0/0xe0 [ 189.319040][ T7438] ? __lock_acquire+0x7d40/0x7d40 [ 189.324179][ T7438] should_fail_ex+0x39d/0x4d0 [ 189.328906][ T7438] should_failslab+0x9/0x20 [ 189.333442][ T7438] slab_pre_alloc_hook+0x59/0x310 [ 189.338501][ T7438] kmem_cache_alloc+0x5a/0x2d0 [ 189.343327][ T7438] ? getname_flags+0xbb/0x500 [ 189.348042][ T7438] getname_flags+0xbb/0x500 [ 189.352580][ T7438] __x64_sys_mkdirat+0x7c/0xa0 [ 189.357368][ T7438] do_syscall_64+0x55/0xa0 [ 189.361819][ T7438] ? clear_bhb_loop+0x40/0x90 [ 189.366532][ T7438] ? clear_bhb_loop+0x40/0x90 [ 189.371235][ T7438] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 189.377177][ T7438] RIP: 0033:0x7fa08159aeb9 [ 189.381616][ T7438] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 189.401241][ T7438] RSP: 002b:00007fa07f7f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 189.409685][ T7438] RAX: ffffffffffffffda RBX: 00007fa081815fa0 RCX: 00007fa08159aeb9 [ 189.417683][ T7438] RDX: 00000000000001ff RSI: 00002000000007c0 RDI: ffffffffffffff9c [ 189.425772][ T7438] RBP: 00007fa07f7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 189.433773][ T7438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 189.441771][ T7438] R13: 00007fa081816038 R14: 00007fa081815fa0 R15: 00007fff35e28b98 [ 189.449785][ T7438] [ 190.924994][ T7423] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 190.965097][ T7430] __nla_validate_parse: 1 callbacks suppressed [ 190.965113][ T7430] netlink: 132 bytes leftover after parsing attributes in process `syz.3.473'. [ 191.016056][ T7432] netlink: 132 bytes leftover after parsing attributes in process `syz.3.473'. [ 191.027942][ T7434] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.468'. [ 191.775061][ T7457] netlink: 'syz.3.481': attribute type 10 has an invalid length. [ 191.884137][ T7454] netlink: 763 bytes leftover after parsing attributes in process `syz.2.482'. [ 191.944580][ T5771] Bluetooth: hci3: unexpected subevent 0x0a length: 150 > 30 [ 192.168555][ T7467] FAULT_INJECTION: forcing a failure. [ 192.168555][ T7467] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 192.195866][ T7467] CPU: 1 PID: 7467 Comm: syz.3.485 Not tainted syzkaller #0 [ 192.203251][ T7467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 192.213363][ T7467] Call Trace: [ 192.216690][ T7467] [ 192.219664][ T7467] dump_stack_lvl+0x18c/0x250 [ 192.224406][ T7467] ? show_regs_print_info+0x20/0x20 [ 192.229759][ T7467] ? load_image+0x400/0x400 [ 192.234325][ T7467] ? __might_fault+0xaa/0x120 [ 192.239055][ T7467] ? __lock_acquire+0x7d40/0x7d40 [ 192.244138][ T7467] ? __kasan_slab_alloc+0x6c/0x80 [ 192.249223][ T7467] should_fail_ex+0x39d/0x4d0 [ 192.253974][ T7467] strncpy_from_user+0x36/0x2d0 [ 192.258876][ T7467] getname_flags+0xf6/0x500 [ 192.263441][ T7467] __x64_sys_mkdirat+0x7c/0xa0 [ 192.268252][ T7467] do_syscall_64+0x55/0xa0 [ 192.272809][ T7467] ? clear_bhb_loop+0x40/0x90 [ 192.277556][ T7467] ? clear_bhb_loop+0x40/0x90 [ 192.282405][ T7467] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 192.288349][ T7467] RIP: 0033:0x7f41d999aeb9 [ 192.292815][ T7467] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 192.312655][ T7467] RSP: 002b:00007f41da7c9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 192.321125][ T7467] RAX: ffffffffffffffda RBX: 00007f41d9c15fa0 RCX: 00007f41d999aeb9 [ 192.329144][ T7467] RDX: 00000000000001ff RSI: 00002000000007c0 RDI: ffffffffffffff9c [ 192.337173][ T7467] RBP: 00007f41da7c9090 R08: 0000000000000000 R09: 0000000000000000 [ 192.345284][ T7467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 192.353331][ T7467] R13: 00007f41d9c16038 R14: 00007f41d9c15fa0 R15: 00007ffe13042cf8 [ 192.361376][ T7467] [ 192.502494][ T7469] netlink: 'syz.0.486': attribute type 10 has an invalid length. [ 192.542359][ T7474] netlink: 'syz.2.487': attribute type 153 has an invalid length. [ 192.563657][ T7474] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.487'. [ 192.741805][ T7469] hsr_slave_0 (unregistering): left promiscuous mode [ 193.094894][ T7489] netlink: 'syz.3.492': attribute type 27 has an invalid length. [ 193.112396][ T7489] netlink: 152 bytes leftover after parsing attributes in process `syz.3.492'. [ 193.146499][ T7489] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 193.449193][ T7501] FAULT_INJECTION: forcing a failure. [ 193.449193][ T7501] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 193.499839][ T7501] CPU: 1 PID: 7501 Comm: syz.3.497 Not tainted syzkaller #0 [ 193.507267][ T7501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 193.517377][ T7501] Call Trace: [ 193.520707][ T7501] [ 193.523678][ T7501] dump_stack_lvl+0x18c/0x250 [ 193.528421][ T7501] ? show_regs_print_info+0x20/0x20 [ 193.533676][ T7501] ? load_image+0x400/0x400 [ 193.538237][ T7501] ? kasan_check_range+0x1ba/0x290 [ 193.543387][ T7501] should_fail_ex+0x39d/0x4d0 [ 193.548101][ T7501] _copy_to_user+0x2f/0xa0 [ 193.552551][ T7501] simple_read_from_buffer+0xe7/0x150 [ 193.557966][ T7501] proc_fail_nth_read+0x1e8/0x260 [ 193.563028][ T7501] ? proc_fault_inject_write+0x360/0x360 [ 193.568693][ T7501] ? vfs_read+0x275/0x970 [ 193.573061][ T7501] ? proc_fault_inject_write+0x360/0x360 [ 193.578734][ T7501] vfs_read+0x28b/0x970 [ 193.582954][ T7501] ? kernel_read+0x1e0/0x1e0 [ 193.587581][ T7501] ? __fget_files+0x28/0x4b0 [ 193.592196][ T7501] ? __fget_files+0x28/0x4b0 [ 193.596824][ T7501] ? __fget_files+0x43d/0x4b0 [ 193.601538][ T7501] ? __fdget_pos+0x2a3/0x330 [ 193.606161][ T7501] ? ksys_read+0x75/0x260 [ 193.610523][ T7501] ksys_read+0x150/0x260 [ 193.614800][ T7501] ? vfs_write+0x990/0x990 [ 193.619246][ T7501] ? syscall_enter_from_user_mode+0x2e/0x80 [ 193.625176][ T7501] do_syscall_64+0x55/0xa0 [ 193.629625][ T7501] ? clear_bhb_loop+0x40/0x90 [ 193.634327][ T7501] ? clear_bhb_loop+0x40/0x90 [ 193.639030][ T7501] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 193.644953][ T7501] RIP: 0033:0x7f41d995b78e [ 193.649399][ T7501] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 193.669126][ T7501] RSP: 002b:00007f41da7c8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 193.677578][ T7501] RAX: ffffffffffffffda RBX: 00007f41da7c96c0 RCX: 00007f41d995b78e [ 193.685576][ T7501] RDX: 000000000000000f RSI: 00007f41da7c90a0 RDI: 0000000000000007 [ 193.693573][ T7501] RBP: 00007f41da7c9090 R08: 0000000000000000 R09: 0000000000000000 [ 193.701568][ T7501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 193.709562][ T7501] R13: 00007f41d9c16038 R14: 00007f41d9c15fa0 R15: 00007ffe13042cf8 [ 193.717571][ T7501] [ 193.733079][ T7503] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.495'. [ 193.986648][ T5771] Bluetooth: hci3: command tx timeout [ 194.078386][ T7507] netlink: 'syz.1.499': attribute type 2 has an invalid length. [ 194.112988][ T7507] netlink: 'syz.1.499': attribute type 8 has an invalid length. [ 194.148912][ T7507] netlink: 132 bytes leftover after parsing attributes in process `syz.1.499'. [ 194.658844][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.665237][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.839282][ T5771] Bluetooth: hci0: Malformed LE Event: 0x02 [ 195.137493][ T7519] netlink: 'syz.2.504': attribute type 10 has an invalid length. [ 195.224552][ T7526] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.505'. [ 195.304172][ T7519] hsr_slave_0 (unregistering): left promiscuous mode [ 195.453037][ T7532] netlink: 'syz.1.506': attribute type 29 has an invalid length. [ 195.518141][ T7532] netlink: 'syz.1.506': attribute type 29 has an invalid length. [ 195.583684][ T7534] TCP: TCP_TX_DELAY enabled [ 196.008015][ T7542] netlink: 'syz.1.516': attribute type 10 has an invalid length. [ 197.015931][ T7554] netlink: 'syz.1.512': attribute type 17 has an invalid length. [ 197.035915][ T7554] netlink: 152 bytes leftover after parsing attributes in process `syz.1.512'. [ 197.066362][ T7554] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 197.782622][ T7576] netlink: 'syz.3.519': attribute type 10 has an invalid length. [ 198.472783][ T7572] netlink: 'syz.0.517': attribute type 10 has an invalid length. [ 198.568620][ T7572] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.576664][ T7572] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.711952][ T7572] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.719257][ T7572] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.726905][ T7572] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.734136][ T7572] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.821607][ T7572] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 198.833582][ T7587] netlink: 'syz.1.521': attribute type 10 has an invalid length. [ 199.255846][ T7592] netlink: 830 bytes leftover after parsing attributes in process `syz.1.525'. [ 199.360332][ T7600] netlink: 'syz.0.526': attribute type 10 has an invalid length. [ 199.457779][ T7600] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.551838][ T7600] bridge_slave_1: left allmulticast mode [ 199.593567][ T7600] bridge_slave_1: left promiscuous mode [ 199.626374][ T7600] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.645207][ T7600] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 200.453581][ T7630] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.535'. [ 200.826769][ T7640] netlink: 'syz.1.537': attribute type 3 has an invalid length. [ 200.847604][ T7640] netlink: 'syz.1.537': attribute type 1 has an invalid length. [ 200.882877][ T7640] netlink: 116 bytes leftover after parsing attributes in process `syz.1.537'. [ 200.924899][ T7635] netlink: 'syz.2.534': attribute type 10 has an invalid length. [ 201.640439][ T7653] netlink: 207508 bytes leftover after parsing attributes in process `syz.0.543'. [ 201.916481][ T7658] netlink: 'syz.3.545': attribute type 13 has an invalid length. [ 201.924427][ T7658] netlink: 160 bytes leftover after parsing attributes in process `syz.3.545'. [ 201.999602][ T7658] erspan0: refused to change device tx_queue_len [ 202.062627][ T7658] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 202.095637][ T7660] netlink: 'syz.1.547': attribute type 13 has an invalid length. [ 202.114033][ T7660] netlink: 160 bytes leftover after parsing attributes in process `syz.1.547'. [ 202.658200][ T7676] netlink: 'syz.1.549': attribute type 10 has an invalid length. [ 202.900378][ T7679] netlink: 'syz.2.551': attribute type 11 has an invalid length. [ 202.947284][ T7679] netlink: 140 bytes leftover after parsing attributes in process `syz.2.551'. [ 203.180040][ T7689] netlink: 153952 bytes leftover after parsing attributes in process `syz.2.551'. [ 207.521808][ T7710] validate_nla: 2 callbacks suppressed [ 207.521833][ T7710] netlink: 'syz.3.560': attribute type 10 has an invalid length. [ 207.706193][ T7710] netlink: 40 bytes leftover after parsing attributes in process `syz.3.560'. [ 207.787663][ T7710] ipvlan1: entered promiscuous mode [ 207.847167][ T7710] ipvlan1: entered allmulticast mode [ 207.852688][ T7710] veth0_vlan: entered allmulticast mode [ 207.894583][ T7710] bridge0: port 2(ipvlan1) entered blocking state [ 207.926403][ T7710] bridge0: port 2(ipvlan1) entered disabled state [ 207.967335][ T7710] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 207.995928][ T7720] netlink: 'syz.1.563': attribute type 11 has an invalid length. [ 208.016930][ T7720] netlink: 'syz.1.563': attribute type 1 has an invalid length. [ 208.024674][ T7720] netlink: 'syz.1.563': attribute type 2 has an invalid length. [ 208.038045][ T7710] syz.3.560 (7710) used greatest stack depth: 18856 bytes left [ 208.046584][ T7720] netlink: 198048 bytes leftover after parsing attributes in process `syz.1.563'. [ 208.244654][ T7725] netlink: 'syz.3.564': attribute type 3 has an invalid length. [ 208.400267][ T7732] netlink: 'syz.2.567': attribute type 10 has an invalid length. [ 208.559373][ T7732] macvlan0: entered promiscuous mode [ 208.565216][ T7732] macvlan0: entered allmulticast mode [ 208.596615][ T7732] veth1_vlan: entered allmulticast mode [ 208.608598][ T7732] team0: Port device macvlan0 added [ 208.621063][ T7727] netlink: 'syz.0.565': attribute type 10 has an invalid length. [ 209.264619][ T7751] netlink: 'syz.1.573': attribute type 6 has an invalid length. [ 209.282990][ T7751] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.573'. [ 209.349093][ T7751] netlink: 'syz.1.573': attribute type 10 has an invalid length. [ 209.387016][ T7751] netlink: 55 bytes leftover after parsing attributes in process `syz.1.573'. [ 210.491538][ T7761] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.576'. [ 210.526504][ T7767] IPv6: Can't replace route, no match found [ 210.541031][ T7767] net veth1_virt_wifi ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 210.872232][ T7769] netlink: 'syz.1.578': attribute type 10 has an invalid length. [ 211.604203][ T7782] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 212.079956][ T5778] Bluetooth: hci3: command 0x0406 tx timeout [ 212.086239][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 212.092399][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 212.098742][ T5780] Bluetooth: hci2: command 0x0406 tx timeout [ 212.110278][ T7808] netlink: 399 bytes leftover after parsing attributes in process `syz.1.589'. [ 212.861116][ T7801] validate_nla: 3 callbacks suppressed [ 212.861133][ T7801] netlink: 'syz.0.587': attribute type 10 has an invalid length. [ 212.915648][ T7801] bond0: (slave bond_slave_0): Releasing backup interface [ 212.936302][ T7794] delete_channel: no stack [ 212.944863][ T7811] netlink: 'syz.3.591': attribute type 10 has an invalid length. [ 212.982872][ T7814] netlink: 132 bytes leftover after parsing attributes in process `syz.2.592'. [ 213.204624][ T7818] netlink: 14 bytes leftover after parsing attributes in process `syz.1.593'. [ 213.230800][ T7818] netlink: 196 bytes leftover after parsing attributes in process `syz.1.593'. [ 213.299806][ T7818] netlink: 'syz.1.593': attribute type 29 has an invalid length. [ 213.313783][ T7818] netlink: 'syz.1.593': attribute type 29 has an invalid length. [ 213.338279][ T7826] netlink: 'syz.1.593': attribute type 29 has an invalid length. [ 213.509166][ T7828] netlink: 'syz.0.598': attribute type 13 has an invalid length. [ 213.541254][ T7828] netlink: 24859 bytes leftover after parsing attributes in process `syz.0.598'. [ 213.566061][ T7836] netlink: 'syz.2.599': attribute type 10 has an invalid length. [ 213.604730][ T7836] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 213.622575][ T7836] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 213.644676][ T7836] team0: Port device wlan1 added [ 215.610151][ T5081] Bluetooth: hci1: Malformed Event: 0x13 [ 217.019182][ T7847] netlink: 'syz.0.603': attribute type 10 has an invalid length. [ 217.656092][ T7877] netlink: 'syz.1.612': attribute type 19 has an invalid length. [ 217.826392][ T7884] netlink: 'syz.0.615': attribute type 23 has an invalid length. [ 217.864941][ T7884] netlink: 168 bytes leftover after parsing attributes in process `syz.0.615'. [ 217.881839][ T7881] netlink: 'syz.2.614': attribute type 10 has an invalid length. [ 217.953190][ T7891] netlink: 'syz.1.617': attribute type 13 has an invalid length. [ 217.962576][ T7891] netlink: 160 bytes leftover after parsing attributes in process `syz.1.617'. [ 217.983694][ T7891] erspan0: refused to change device tx_queue_len [ 217.990848][ T7891] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 218.239689][ T7897] netlink: 208064 bytes leftover after parsing attributes in process `syz.1.620'. [ 219.506571][ T7930] netlink: 'syz.1.630': attribute type 10 has an invalid length. [ 219.602669][ T7930] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 219.973135][ T7946] netlink: 144 bytes leftover after parsing attributes in process `syz.2.634'. [ 220.009699][ T7946] team_slave_0: left promiscuous mode [ 220.015399][ T7946] team_slave_0: left allmulticast mode [ 220.055993][ T7946] team0: Port device team_slave_0 removed [ 220.062639][ T7946] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 220.790114][ T7984] netlink: 'syz.0.645': attribute type 21 has an invalid length. [ 220.815883][ T7984] netlink: 'syz.0.645': attribute type 4 has an invalid length. [ 220.832571][ T7984] netlink: 152 bytes leftover after parsing attributes in process `syz.0.645'. [ 220.921585][ T7975] netlink: 8063 bytes leftover after parsing attributes in process `syz.1.642'. [ 221.045418][ T7989] netlink: 48 bytes leftover after parsing attributes in process `syz.2.646'. [ 221.151093][ T7989] netlink: 48 bytes leftover after parsing attributes in process `syz.2.646'. [ 221.813046][ T8004] netlink: 'syz.1.651': attribute type 10 has an invalid length. [ 221.834702][ T8004] netlink: 40 bytes leftover after parsing attributes in process `syz.1.651'. [ 221.902874][ T8004] ipvlan1: entered promiscuous mode [ 221.935260][ T8004] ipvlan1: entered allmulticast mode [ 221.972670][ T8004] veth0_vlan: entered allmulticast mode [ 222.270835][ T8004] bridge0: port 4(ipvlan1) entered blocking state [ 222.297480][ T8004] bridge0: port 4(ipvlan1) entered disabled state [ 222.461477][ T8004] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 222.666233][ T8004] syz.1.651 (8004) used greatest stack depth: 18440 bytes left [ 222.706530][ T8019] netlink: 'syz.0.655': attribute type 10 has an invalid length. [ 222.751488][ T8021] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.656'. [ 224.169055][ T8053] netlink: 156 bytes leftover after parsing attributes in process `syz.1.668'. [ 224.989114][ T8073] netlink: 'syz.3.670': attribute type 10 has an invalid length. [ 225.026099][ T8073] netlink: 55 bytes leftover after parsing attributes in process `syz.3.670'. [ 226.459349][ T8083] netlink: 132 bytes leftover after parsing attributes in process `syz.2.673'. [ 226.565894][ T8091] netlink: 'syz.0.676': attribute type 10 has an invalid length. [ 226.597385][ T8091] netlink: 40 bytes leftover after parsing attributes in process `syz.0.676'. [ 226.736825][ T8091] ipvlan1: entered promiscuous mode [ 226.757367][ T8091] ipvlan1: entered allmulticast mode [ 226.777130][ T8091] veth0_vlan: entered allmulticast mode [ 227.280086][ T8091] bridge0: port 2(ipvlan1) entered blocking state [ 227.300382][ T8091] bridge0: port 2(ipvlan1) entered disabled state [ 227.312760][ T8091] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 228.233965][ T8091] syz.0.676 (8091) used greatest stack depth: 18376 bytes left [ 228.926597][ T8128] netlink: 'syz.3.687': attribute type 10 has an invalid length. [ 229.522122][ T8146] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 229.999186][ T8157] netlink: 'syz.2.697': attribute type 10 has an invalid length. [ 230.213939][ T8157] veth0_vlan: left promiscuous mode [ 230.300405][ T8157] veth0_vlan: entered promiscuous mode [ 230.323345][ T8157] team0: Device veth0_vlan failed to register rx_handler [ 231.342278][ T8171] netlink: 'syz.0.701': attribute type 10 has an invalid length. [ 231.381036][ T8175] netlink: 'syz.1.703': attribute type 39 has an invalid length. [ 231.563271][ T8182] veth1_macvtap: left promiscuous mode [ 231.596184][ T8182] veth1_macvtap: entered promiscuous mode [ 231.612537][ T8182] macsec0: entered promiscuous mode [ 231.626780][ T8182] macsec0: entered allmulticast mode [ 231.632171][ T8182] veth1_macvtap: entered allmulticast mode [ 232.789982][ T8192] veth1_macvtap: left promiscuous mode [ 232.831065][ T8192] macsec0: entered allmulticast mode [ 232.907998][ T8193] veth1_macvtap: entered promiscuous mode [ 232.913821][ T8193] veth1_macvtap: entered allmulticast mode [ 232.949995][ T8193] macsec0: entered promiscuous mode [ 233.581998][ T8213] netlink: 'syz.0.713': attribute type 10 has an invalid length. [ 234.455399][ T8227] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 234.463766][ T8227] syzkaller1: Linktype set failed because interface is up [ 234.775035][ T8239] sock: sock_set_timeout: `syz.2.723' (pid 8239) tries to set negative timeout [ 234.840246][ T8238] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.721'. [ 234.860625][ T8238] openvswitch: netlink: Tunnel attr 0 has unexpected len 1 expected 8 [ 234.899707][ T8243] pim6reg1: entered promiscuous mode [ 234.924624][ T8243] pim6reg1: entered allmulticast mode [ 235.421266][ T8257] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.726'. [ 235.452076][ T8257] openvswitch: netlink: Key type 29 is not supported [ 236.847136][ T8267] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.728'. [ 237.116575][ T8274] netlink: 'syz.1.730': attribute type 9 has an invalid length. [ 237.125365][ T8274] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.730'. [ 237.161296][ T8278] netlink: 14 bytes leftover after parsing attributes in process `syz.3.732'. [ 237.391701][ T8278] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 237.466177][ T8278] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 237.559543][ T8278] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 237.608731][ T8278] bond0 (unregistering): Released all slaves [ 237.703602][ T8287] netlink: 'syz.1.734': attribute type 10 has an invalid length. [ 237.945526][ T8275] delete_channel: no stack [ 238.198515][ T8306] netlink: 'syz.3.739': attribute type 7 has an invalid length. [ 239.383516][ T8325] netlink: 'syz.0.744': attribute type 10 has an invalid length. [ 240.365438][ T8329] netlink: 135856 bytes leftover after parsing attributes in process `syz.0.745'. [ 240.412310][ T8329] netlink: 8442 bytes leftover after parsing attributes in process `syz.0.745'. [ 240.641407][ T8339] netlink: 'syz.3.748': attribute type 3 has an invalid length. [ 240.666236][ T8339] netlink: 'syz.3.748': attribute type 1 has an invalid length. [ 240.685479][ T8339] netlink: 193404 bytes leftover after parsing attributes in process `syz.3.748'. [ 242.053679][ T8364] netlink: 'syz.3.753': attribute type 10 has an invalid length. [ 242.360301][ T8371] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.755'. [ 242.416061][ T8371] openvswitch: netlink: Tunnel attr 0 has unexpected len 1 expected 8 [ 242.428282][ T8369] netlink: 'syz.1.756': attribute type 10 has an invalid length. [ 242.949082][ T8369] bridge0: port 3(team0) entered disabled state [ 242.959554][ T8369] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.969539][ T8369] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.046205][ T8372] netlink: 'syz.1.756': attribute type 10 has an invalid length. [ 243.592056][ T8391] netlink: 'syz.3.760': attribute type 3 has an invalid length. [ 243.593374][ T8392] netlink: 'syz.3.760': attribute type 3 has an invalid length. [ 243.600979][ T8391] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.760'. [ 243.614844][ T8392] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.760'. [ 243.794508][ T8395] bridge0: port 3(team0) entered disabled state [ 243.861977][ T8398] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 243.965315][ T8395] bridge_slave_1: left allmulticast mode [ 243.980787][ T8395] bridge_slave_1: left promiscuous mode [ 244.018747][ T8395] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.220014][ T8395] bridge_slave_0: left promiscuous mode [ 244.256315][ T8395] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.930067][ T8398] netlink: 12 bytes leftover after parsing attributes in process `syz.2.769'. [ 244.940067][ T8404] netlink: 188 bytes leftover after parsing attributes in process `syz.1.762'. [ 245.888462][ T8418] netlink: 'syz.0.766': attribute type 10 has an invalid length. [ 246.843220][ T8449] netlink: 'syz.2.776': attribute type 2 has an invalid length. [ 246.861503][ T8449] netlink: 164 bytes leftover after parsing attributes in process `syz.2.776'. [ 247.213036][ T8443] delete_channel: no stack [ 247.305255][ T8453] netlink: 'syz.0.778': attribute type 9 has an invalid length. [ 247.319501][ T8453] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.778'. [ 247.445193][ T8460] netlink: 'syz.1.780': attribute type 10 has an invalid length. [ 248.096401][ T8467] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.421154][ T8474] netlink: 60 bytes leftover after parsing attributes in process `syz.1.785'. [ 248.584299][ T8474] netlink: 'syz.1.785': attribute type 1 has an invalid length. [ 248.614621][ T8474] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.785'. [ 248.832558][ T8489] netlink: 'syz.3.790': attribute type 28 has an invalid length. [ 248.875492][ T8487] netlink: 'syz.0.789': attribute type 10 has an invalid length. [ 249.297097][ T8490] netlink: 'syz.2.788': attribute type 10 has an invalid length. [ 249.387266][ T8490] veth1_vlan: left allmulticast mode [ 249.593706][ T8508] netlink: 'syz.1.795': attribute type 3 has an invalid length. [ 249.627084][ T8508] netlink: 16066 bytes leftover after parsing attributes in process `syz.1.795'. [ 249.637257][ T8506] netlink: 'syz.1.795': attribute type 3 has an invalid length. [ 249.649562][ T8506] netlink: 16066 bytes leftover after parsing attributes in process `syz.1.795'. [ 249.687138][ T8510] netlink: 40 bytes leftover after parsing attributes in process `syz.0.796'. [ 249.718037][ T8510] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.929537][ T8510] bridge_slave_0 (unregistering): left promiscuous mode [ 249.942233][ T8510] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.656071][ T8524] batman_adv: batadv0: Interface deactivated: wlan0 [ 250.997420][ T8541] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.804'. [ 251.449199][ T8556] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.808'. [ 251.517199][ T8556] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 251.530606][ T8558] bridge0: port 3(team0) entered disabled state [ 251.964896][ T8558] bridge_slave_0: left promiscuous mode [ 251.996631][ T8558] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.833940][ T8559] netlink: 12 bytes leftover after parsing attributes in process `syz.3.809'. [ 253.262000][ T8581] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.816'. [ 253.303471][ T8581] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 254.222751][ T8598] netlink: 'syz.1.819': attribute type 10 has an invalid length. [ 254.575164][ T8598] macvlan0: entered promiscuous mode [ 254.600863][ T8598] macvlan0: entered allmulticast mode [ 254.631598][ T8598] veth1_vlan: entered allmulticast mode [ 254.863738][ T8598] team0: Port device macvlan0 added [ 254.916638][ T8610] netlink: 'syz.0.823': attribute type 10 has an invalid length. [ 255.130272][ T8598] syz.1.819 (8598) used greatest stack depth: 17712 bytes left [ 255.648481][ T8626] netlink: 'syz.0.828': attribute type 10 has an invalid length. [ 255.927125][ T8633] netlink: 'syz.3.830': attribute type 21 has an invalid length. [ 255.970928][ T8633] netlink: 16166 bytes leftover after parsing attributes in process `syz.3.830'. [ 256.082804][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.089428][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.339483][ T8646] netlink: 60 bytes leftover after parsing attributes in process `syz.3.832'. [ 256.351168][ T8646] netlink: 60 bytes leftover after parsing attributes in process `syz.3.832'. [ 256.375580][ T8645] netlink: 60 bytes leftover after parsing attributes in process `syz.3.832'. [ 256.412216][ T8646] netlink: 60 bytes leftover after parsing attributes in process `syz.3.832'. [ 256.626446][ T8648] netlink: 'syz.0.833': attribute type 10 has an invalid length. [ 258.989102][ T8691] netlink: 'syz.1.842': attribute type 10 has an invalid length. [ 259.396795][ T8690] netlink: 134780 bytes leftover after parsing attributes in process `syz.2.843'. [ 260.300890][ T8726] netlink: 'syz.0.854': attribute type 10 has an invalid length. [ 260.768171][ T8743] netlink: 44 bytes leftover after parsing attributes in process `syz.1.859'. [ 260.962821][ T8746] netlink: 'syz.0.860': attribute type 3 has an invalid length. [ 261.034330][ T8746] netlink: 132 bytes leftover after parsing attributes in process `syz.0.860'. [ 261.496402][ T8748] delete_channel: no stack [ 262.076107][ T8741] netlink: 156 bytes leftover after parsing attributes in process `syz.3.856'. [ 262.259960][ T8766] netlink: 'syz.1.867': attribute type 10 has an invalid length. [ 264.488605][ T8781] netlink: 'syz.3.870': attribute type 10 has an invalid length. [ 264.888817][ T8790] tap0: tun_chr_ioctl cmd 1074025677 [ 264.904723][ T8790] tap0: linktype set to 768 [ 265.083942][ T8800] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.875'. [ 265.405424][ T8804] netlink: 'syz.3.877': attribute type 10 has an invalid length. [ 266.132614][ T8824] netlink: 'syz.2.885': attribute type 10 has an invalid length. [ 266.463207][ T8840] netlink: 'syz.0.890': attribute type 27 has an invalid length. [ 266.486543][ T8840] netlink: 152 bytes leftover after parsing attributes in process `syz.0.890'. [ 266.520735][ T8840] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 266.728369][ T8845] netlink: 'syz.1.891': attribute type 10 has an invalid length. [ 267.123764][ T8852] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.897'. [ 267.175094][ T8849] netlink: 9087 bytes leftover after parsing attributes in process `syz.1.896'. [ 267.186011][ T8852] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 267.883753][ T8878] netlink: 'syz.2.905': attribute type 10 has an invalid length. [ 268.116621][ T8889] netlink: 'syz.3.907': attribute type 3 has an invalid length. [ 268.166674][ T8889] netlink: 'syz.3.907': attribute type 1 has an invalid length. [ 268.175812][ T8889] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.907'. [ 268.286955][ T8894] netlink: 14 bytes leftover after parsing attributes in process `syz.3.907'. [ 268.710677][ T8903] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.912'. [ 269.095272][ T8913] netlink: 132 bytes leftover after parsing attributes in process `syz.1.917'. [ 269.278588][ T8915] netlink: 'syz.3.918': attribute type 10 has an invalid length. [ 269.480789][ T8924] delete_channel: no stack [ 269.498576][ T8921] netlink: 'syz.2.920': attribute type 3 has an invalid length. [ 269.519762][ T8924] delete_channel: no stack [ 269.527615][ T8921] netlink: 132 bytes leftover after parsing attributes in process `syz.2.920'. [ 270.001923][ T8945] netlink: 15842 bytes leftover after parsing attributes in process `syz.3.928'. [ 270.098025][ T8951] netlink: 'syz.0.931': attribute type 10 has an invalid length. [ 270.695206][ T8972] netlink: 'syz.0.938': attribute type 19 has an invalid length. [ 270.714804][ T8972] netlink: 14552 bytes leftover after parsing attributes in process `syz.0.938'. [ 270.854594][ T8975] netlink: 'syz.1.939': attribute type 2 has an invalid length. [ 270.880157][ T8975] netlink: 132 bytes leftover after parsing attributes in process `syz.1.939'. [ 271.186741][ T8987] netlink: 'syz.3.942': attribute type 51 has an invalid length. [ 272.404723][ T9002] netlink: 'syz.2.946': attribute type 10 has an invalid length. [ 272.508219][ T5081] Bluetooth: hci0: unexpected event 0x05 length: 151 > 4 [ 274.603000][ T9030] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.955'. [ 274.782622][ T9035] netlink: 202920 bytes leftover after parsing attributes in process `syz.1.957'. [ 275.025775][ T9040] netlink: 2 bytes leftover after parsing attributes in process `syz.2.960'. [ 275.090669][ T9040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.126781][ T9040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.171167][ T9040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.220967][ T9040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.264337][ T9040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.306437][ T9040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.340751][ T9040] batadv_slave_1: entered promiscuous mode [ 276.215803][ T9068] netlink: 'syz.1.969': attribute type 2 has an invalid length. [ 276.309951][ T9068] netlink: 132 bytes leftover after parsing attributes in process `syz.1.969'. [ 276.388734][ T9071] netlink: 'syz.1.969': attribute type 2 has an invalid length. [ 276.398467][ T9071] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.969'. [ 277.274303][ T9096] netlink: 40 bytes leftover after parsing attributes in process `syz.3.975'. [ 277.287766][ T9096] netlink: 40 bytes leftover after parsing attributes in process `syz.3.975'. [ 277.299280][ T9096] netlink: 13 bytes leftover after parsing attributes in process `syz.3.975'. [ 278.134989][ T9118] netlink: 'syz.0.982': attribute type 29 has an invalid length. [ 278.164677][ T9118] netlink: 'syz.0.982': attribute type 3 has an invalid length. [ 278.184309][ T9118] netlink: 132 bytes leftover after parsing attributes in process `syz.0.982'. [ 278.554367][ T9123] netlink: 'syz.2.984': attribute type 10 has an invalid length. [ 278.666224][ T9128] netlink: 132 bytes leftover after parsing attributes in process `syz.0.986'. [ 279.301840][ T9131] netlink: 49819 bytes leftover after parsing attributes in process `syz.0.987'. [ 279.554027][ T9143] netlink: 'syz.0.991': attribute type 21 has an invalid length. [ 279.576151][ T9143] netlink: 'syz.0.991': attribute type 20 has an invalid length. [ 279.918939][ T9160] bridge0: entered allmulticast mode [ 281.439279][ T9182] netlink: 142528 bytes leftover after parsing attributes in process `syz.0.1002'. [ 281.453641][ T9182] netlink: 'syz.0.1002': attribute type 1 has an invalid length. [ 281.722806][ T9189] delete_channel: no stack [ 281.739012][ T9193] IPv6: Can't replace route, no match found [ 282.822560][ T9229] netlink: 'syz.2.1018': attribute type 2 has an invalid length. [ 282.846793][ T9229] netlink: 51 bytes leftover after parsing attributes in process `syz.2.1018'. [ 285.453378][ T9285] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.1034'. [ 286.491910][ T9300] netlink: 'syz.2.1039': attribute type 4 has an invalid length. [ 286.525736][ T9300] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1039'. [ 287.563486][ T9315] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.1044'. [ 287.762992][ T9327] netlink: 'syz.3.1047': attribute type 2 has an invalid length. [ 287.786854][ T9327] netlink: 'syz.3.1047': attribute type 8 has an invalid length. [ 287.834800][ T9327] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1047'. [ 289.248169][ T9370] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1060'. [ 290.458541][ T9384] netlink: 'syz.0.1063': attribute type 11 has an invalid length. [ 290.475764][ T9384] netlink: 184116 bytes leftover after parsing attributes in process `syz.0.1063'. [ 290.585583][ T9384] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 292.338404][ T9407] netlink: 'syz.2.1070': attribute type 10 has an invalid length. [ 292.771387][ T9423] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.1075'. [ 293.159820][ T9425] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1076'. [ 293.397836][ T9425] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 293.415886][ T9425] CPU: 0 PID: 9425 Comm: syz.2.1076 Not tainted syzkaller #0 [ 293.423373][ T9425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 293.433493][ T9425] Call Trace: [ 293.436829][ T9425] [ 293.439813][ T9425] dump_stack_lvl+0x18c/0x250 [ 293.444567][ T9425] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 293.450790][ T9425] ? show_regs_print_info+0x20/0x20 [ 293.456059][ T9425] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 293.462299][ T9425] sysfs_warn_dup+0x8e/0xa0 [ 293.466885][ T9425] sysfs_do_create_link_sd+0xc0/0x110 [ 293.472326][ T9425] device_add_class_symlinks+0x1cf/0x240 [ 293.478038][ T9425] device_add+0x507/0xc20 [ 293.482517][ T9425] wiphy_register+0x1dad/0x2ae0 [ 293.487467][ T9425] ? cfg80211_event_work+0x40/0x40 [ 293.492631][ T9425] ? minstrel_ht_alloc+0x88a/0x990 [ 293.497837][ T9425] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 293.503977][ T9425] ieee80211_register_hw+0x3464/0x4250 [ 293.509622][ T9425] ? ieee80211_tasklet_handler+0x20/0x20 [ 293.515323][ T9425] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 293.521285][ T9425] ? __debug_object_init+0xec/0x450 [ 293.526555][ T9425] ? __asan_memset+0x22/0x40 [ 293.531202][ T9425] ? __hrtimer_init+0x186/0x270 [ 293.536112][ T9425] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 293.542099][ T9425] ? mac80211_hwsim_free+0x220/0x220 [ 293.547432][ T9425] ? rcu_is_watching+0x15/0xb0 [ 293.552242][ T9425] ? kstrndup+0xbd/0x140 [ 293.556532][ T9425] hwsim_new_radio_nl+0xdc9/0x1a90 [ 293.561689][ T9425] ? __nla_validate+0x50/0x50 [ 293.566429][ T9425] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 293.572818][ T9425] ? __nla_parse+0x40/0x50 [ 293.577284][ T9425] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 293.583649][ T9425] genl_family_rcv_msg_doit+0x211/0x310 [ 293.589235][ T9425] ? end_current_label_crit_section+0x170/0x170 [ 293.595537][ T9425] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 293.601494][ T9425] ? bpf_lsm_capable+0x9/0x10 [ 293.606220][ T9425] ? security_capable+0x89/0xb0 [ 293.611163][ T9425] genl_rcv_msg+0x619/0x7a0 [ 293.615732][ T9425] ? genl_bind+0x360/0x360 [ 293.620195][ T9425] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 293.626604][ T9425] ? mark_lock+0x94/0x320 [ 293.630975][ T9425] netlink_rcv_skb+0x241/0x4d0 [ 293.635818][ T9425] ? genl_bind+0x360/0x360 [ 293.640276][ T9425] ? netlink_ack+0x1180/0x1180 [ 293.645089][ T9425] ? preempt_count_add+0x147/0x1a0 [ 293.650239][ T9425] ? down_read+0x1ac/0x2e0 [ 293.654695][ T9425] genl_rcv+0x28/0x40 [ 293.658714][ T9425] netlink_unicast+0x751/0x8d0 [ 293.663520][ T9425] netlink_sendmsg+0x8d0/0xbf0 [ 293.668346][ T9425] ? netlink_getsockopt+0x590/0x590 [ 293.673780][ T9425] ? aa_sock_msg_perm+0x94/0x150 [ 293.678793][ T9425] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 293.684117][ T9425] ? security_socket_sendmsg+0x80/0xa0 [ 293.689630][ T9425] ? netlink_getsockopt+0x590/0x590 [ 293.694907][ T9425] ____sys_sendmsg+0x5ba/0x960 [ 293.699731][ T9425] ? __asan_memset+0x22/0x40 [ 293.704451][ T9425] ? __sys_sendmsg_sock+0x30/0x30 [ 293.709534][ T9425] ? __import_iovec+0x5f2/0x850 [ 293.714440][ T9425] ? import_iovec+0x73/0xa0 [ 293.718990][ T9425] ___sys_sendmsg+0x2a6/0x360 [ 293.723792][ T9425] ? __sys_sendmsg+0x2a0/0x2a0 [ 293.728639][ T9425] __se_sys_sendmsg+0x1c2/0x2b0 [ 293.733519][ T9425] ? __x64_sys_sendmsg+0x80/0x80 [ 293.738498][ T9425] ? lockdep_hardirqs_on+0x98/0x150 [ 293.743757][ T9425] do_syscall_64+0x55/0xa0 [ 293.748214][ T9425] ? clear_bhb_loop+0x40/0x90 [ 293.752952][ T9425] ? clear_bhb_loop+0x40/0x90 [ 293.757748][ T9425] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 293.763776][ T9425] RIP: 0033:0x7fa08159aeb9 [ 293.768227][ T9425] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 293.787891][ T9425] RSP: 002b:00007fa07f7f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 293.796536][ T9425] RAX: ffffffffffffffda RBX: 00007fa081815fa0 RCX: 00007fa08159aeb9 [ 293.804650][ T9425] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 293.812673][ T9425] RBP: 00007fa081608c1f R08: 0000000000000000 R09: 0000000000000000 [ 293.820685][ T9425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 293.828704][ T9425] R13: 00007fa081816038 R14: 00007fa081815fa0 R15: 00007fff35e28b98 [ 293.836752][ T9425] [ 294.585152][ T9442] netlink: 'syz.1.1081': attribute type 2 has an invalid length. [ 294.624765][ T9442] netlink: 51 bytes leftover after parsing attributes in process `syz.1.1081'. [ 294.894748][ T9452] netlink: 'syz.0.1085': attribute type 29 has an invalid length. [ 294.968565][ T9452] netlink: 'syz.0.1085': attribute type 29 has an invalid length. [ 295.339705][ T9463] netlink: 'syz.1.1090': attribute type 21 has an invalid length. [ 295.803087][ T9480] netlink: 'syz.0.1093': attribute type 10 has an invalid length. [ 295.881206][ T9487] netlink: 'syz.1.1095': attribute type 29 has an invalid length. [ 295.925515][ T9487] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1095'. [ 295.945882][ T9487] netlink: 'syz.1.1095': attribute type 29 has an invalid length. [ 295.953788][ T9487] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1095'. [ 296.153589][ T9494] netlink: 'syz.0.1098': attribute type 27 has an invalid length. [ 296.178987][ T9494] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1098'. [ 296.258860][ T9498] netlink: 'syz.1.1099': attribute type 7 has an invalid length. [ 296.504847][ T9510] FAULT_INJECTION: forcing a failure. [ 296.504847][ T9510] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 296.518775][ T9510] CPU: 0 PID: 9510 Comm: syz.0.1105 Not tainted syzkaller #0 [ 296.526208][ T9510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 296.536307][ T9510] Call Trace: [ 296.539719][ T9510] [ 296.542722][ T9510] dump_stack_lvl+0x18c/0x250 [ 296.547484][ T9510] ? show_regs_print_info+0x20/0x20 [ 296.552719][ T9510] ? load_image+0x400/0x400 [ 296.557253][ T9510] ? __might_fault+0xaa/0x120 [ 296.561959][ T9510] ? __lock_acquire+0x7d40/0x7d40 [ 296.567019][ T9510] should_fail_ex+0x39d/0x4d0 [ 296.571735][ T9510] _copy_from_user+0x2f/0xe0 [ 296.576353][ T9510] ___sys_sendmsg+0x1c7/0x360 [ 296.581075][ T9510] ? __sys_sendmsg+0x2a0/0x2a0 [ 296.585878][ T9510] ? seqcount_lockdep_reader_access+0x17b/0x1d0 [ 296.592171][ T9510] __se_sys_sendmsg+0x1c2/0x2b0 [ 296.597057][ T9510] ? __x64_sys_sendmsg+0x80/0x80 [ 296.602048][ T9510] ? lockdep_hardirqs_on+0x98/0x150 [ 296.607299][ T9510] do_syscall_64+0x55/0xa0 [ 296.611754][ T9510] ? clear_bhb_loop+0x40/0x90 [ 296.616463][ T9510] ? clear_bhb_loop+0x40/0x90 [ 296.621173][ T9510] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 296.627105][ T9510] RIP: 0033:0x7fee3919aeb9 [ 296.631563][ T9510] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 296.651229][ T9510] RSP: 002b:00007fee3a135028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 296.659709][ T9510] RAX: ffffffffffffffda RBX: 00007fee39415fa0 RCX: 00007fee3919aeb9 [ 296.667728][ T9510] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 296.675736][ T9510] RBP: 00007fee3a135090 R08: 0000000000000000 R09: 0000000000000000 [ 296.683755][ T9510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 296.691752][ T9510] R13: 00007fee39416038 R14: 00007fee39415fa0 R15: 00007ffe35ef4a58 [ 296.699762][ T9510] [ 297.397419][ T9534] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1112'. [ 297.659454][ T9545] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.1115'. [ 297.940547][ T9534] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 297.955302][ T9552] FAULT_INJECTION: forcing a failure. [ 297.955302][ T9552] name failslab, interval 1, probability 0, space 0, times 0 [ 297.970136][ T9552] CPU: 0 PID: 9552 Comm: syz.3.1117 Not tainted syzkaller #0 [ 297.977578][ T9552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 297.987680][ T9552] Call Trace: [ 297.990999][ T9552] [ 297.993968][ T9552] dump_stack_lvl+0x18c/0x250 [ 297.998708][ T9552] ? show_regs_print_info+0x20/0x20 [ 298.003967][ T9552] ? load_image+0x400/0x400 [ 298.008535][ T9552] ? __might_sleep+0xe0/0xe0 [ 298.013193][ T9552] ? __lock_acquire+0x7d40/0x7d40 [ 298.018283][ T9552] should_fail_ex+0x39d/0x4d0 [ 298.023032][ T9552] should_failslab+0x9/0x20 [ 298.027613][ T9552] slab_pre_alloc_hook+0x59/0x310 [ 298.032697][ T9552] ? __lock_acquire+0x7d40/0x7d40 [ 298.037776][ T9552] kmem_cache_alloc_node+0x60/0x320 [ 298.043039][ T9552] ? __alloc_skb+0x103/0x2c0 [ 298.047693][ T9552] __alloc_skb+0x103/0x2c0 [ 298.052182][ T9552] netlink_sendmsg+0x66a/0xbf0 [ 298.057019][ T9552] ? netlink_getsockopt+0x590/0x590 [ 298.062285][ T9552] ? aa_sock_msg_perm+0x94/0x150 [ 298.067288][ T9552] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 298.072644][ T9552] ? security_socket_sendmsg+0x80/0xa0 [ 298.078165][ T9552] ? netlink_getsockopt+0x590/0x590 [ 298.083427][ T9552] ____sys_sendmsg+0x5ba/0x960 [ 298.088263][ T9552] ? __asan_memset+0x22/0x40 [ 298.092909][ T9552] ? __sys_sendmsg_sock+0x30/0x30 [ 298.098000][ T9552] ? __import_iovec+0x5f2/0x850 [ 298.102930][ T9552] ? import_iovec+0x73/0xa0 [ 298.107491][ T9552] ___sys_sendmsg+0x2a6/0x360 [ 298.112229][ T9552] ? __sys_sendmsg+0x2a0/0x2a0 [ 298.117059][ T9552] ? seqcount_lockdep_reader_access+0x17b/0x1d0 [ 298.123381][ T9552] __se_sys_sendmsg+0x1c2/0x2b0 [ 298.128286][ T9552] ? __x64_sys_sendmsg+0x80/0x80 [ 298.133288][ T9552] ? lockdep_hardirqs_on+0x98/0x150 [ 298.138564][ T9552] do_syscall_64+0x55/0xa0 [ 298.143032][ T9552] ? clear_bhb_loop+0x40/0x90 [ 298.147760][ T9552] ? clear_bhb_loop+0x40/0x90 [ 298.152496][ T9552] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 298.158439][ T9552] RIP: 0033:0x7f41d999aeb9 [ 298.162897][ T9552] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 298.182594][ T9552] RSP: 002b:00007f41da7c9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 298.191068][ T9552] RAX: ffffffffffffffda RBX: 00007f41d9c15fa0 RCX: 00007f41d999aeb9 [ 298.199093][ T9552] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 298.207107][ T9552] RBP: 00007f41da7c9090 R08: 0000000000000000 R09: 0000000000000000 [ 298.215126][ T9552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 298.223140][ T9552] R13: 00007f41d9c16038 R14: 00007f41d9c15fa0 R15: 00007ffe13042cf8 [ 298.231180][ T9552] [ 298.283147][ T9534] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 298.342891][ T9534] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 298.415039][ T9534] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 298.464368][ T9534] bond0 (unregistering): Released all slaves [ 300.076597][ T9583] netlink: 'syz.1.1127': attribute type 39 has an invalid length. [ 300.230072][ T9576] netlink: 'syz.3.1125': attribute type 11 has an invalid length. [ 300.247704][ T9576] netlink: 147276 bytes leftover after parsing attributes in process `syz.3.1125'. [ 300.733409][ T9604] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.1133'. [ 301.677738][ T9615] netlink: 'syz.2.1137': attribute type 9 has an invalid length. [ 301.686189][ T9615] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.1137'. [ 303.287475][ T9644] syzkaller0: entered promiscuous mode [ 303.326632][ T9644] syzkaller0: entered allmulticast mode [ 307.421983][ T9653] netlink: 'syz.1.1148': attribute type 39 has an invalid length. [ 307.807314][ T9684] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.1156'. [ 309.973453][ T9706] netlink: 'syz.1.1162': attribute type 39 has an invalid length. [ 310.229767][ T9708] batman_adv: batadv0: Interface deactivated: wlan0 [ 310.313339][ T9708] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 310.350352][ T9715] netlink: 'syz.2.1163': attribute type 9 has an invalid length. [ 310.376522][ T9715] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1163'. [ 310.592733][ T9712] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 310.602464][ T9712] batman_adv: batadv0: Interface activated: wlan0 [ 310.614988][ T9714] netlink: 'syz.3.1164': attribute type 21 has an invalid length. [ 310.627048][ T9714] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1164'. [ 310.735360][ T9718] netlink: 'syz.1.1166': attribute type 29 has an invalid length. [ 310.771685][ T9718] netlink: 'syz.1.1166': attribute type 29 has an invalid length. [ 311.222127][ T9723] netlink: 'syz.1.1166': attribute type 10 has an invalid length. [ 311.266188][ T9723] netlink: 'syz.1.1166': attribute type 11 has an invalid length. [ 311.274124][ T9723] netlink: 'syz.1.1166': attribute type 11 has an invalid length. [ 311.315881][ T9723] netlink: 'syz.1.1166': attribute type 11 has an invalid length. [ 311.323814][ T9723] netlink: 'syz.1.1166': attribute type 11 has an invalid length. [ 311.357421][ T9723] netlink: 'syz.1.1166': attribute type 11 has an invalid length. [ 311.392935][ T9723] netlink: 'syz.1.1166': attribute type 11 has an invalid length. [ 311.426660][ T9723] netlink: 'syz.1.1166': attribute type 11 has an invalid length. [ 311.446258][ T9723] netlink: 'syz.1.1166': attribute type 11 has an invalid length. [ 311.463613][ T9723] netlink: 'syz.1.1166': attribute type 11 has an invalid length. [ 311.480314][ T9723] netlink: 'syz.1.1166': attribute type 11 has an invalid length. [ 311.500419][ T9723] netlink: 'syz.1.1166': attribute type 4 has an invalid length. [ 311.529047][ T9723] netlink: 'syz.1.1166': attribute type 5 has an invalid length. [ 311.558478][ T9723] netlink: 208556 bytes leftover after parsing attributes in process `syz.1.1166'. [ 311.568946][ T9728] syzkaller0: entered promiscuous mode [ 311.574497][ T9728] syzkaller0: entered allmulticast mode [ 312.434386][ T9749] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1174'. [ 312.445407][ T9750] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1174'. [ 312.592459][ T9754] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.1176'. [ 312.625873][ T9752] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.1175'. [ 312.656433][ T9752] netlink: 6324 bytes leftover after parsing attributes in process `syz.1.1175'. [ 312.674836][ T9752] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1175'. [ 312.817610][ T9760] __nla_validate_parse: 4 callbacks suppressed [ 312.817649][ T9760] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.1178'. [ 312.865724][ T9764] netlink: 'syz.1.1180': attribute type 11 has an invalid length. [ 312.873872][ T9764] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1180'. [ 312.957855][ T9765] netlink: 'syz.2.1179': attribute type 9 has an invalid length. [ 312.979606][ T9765] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1179'. [ 313.753491][ T9775] netlink: 'syz.0.1184': attribute type 39 has an invalid length. [ 313.872234][ T9777] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1185'. [ 314.056664][ T9786] netlink: 'syz.0.1189': attribute type 13 has an invalid length. [ 314.064725][ T9786] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1189'. [ 314.087524][ T9786] erspan0: refused to change device tx_queue_len [ 314.093947][ T9786] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 314.281038][ T9792] FAULT_INJECTION: forcing a failure. [ 314.281038][ T9792] name failslab, interval 1, probability 0, space 0, times 0 [ 314.319984][ T9792] CPU: 1 PID: 9792 Comm: syz.0.1191 Not tainted syzkaller #0 [ 314.327458][ T9792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 314.337583][ T9792] Call Trace: [ 314.340914][ T9792] [ 314.343888][ T9792] dump_stack_lvl+0x18c/0x250 [ 314.348627][ T9792] ? show_regs_print_info+0x20/0x20 [ 314.353881][ T9792] ? load_image+0x400/0x400 [ 314.358441][ T9792] ? verify_lock_unused+0x140/0x140 [ 314.363786][ T9792] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 314.370001][ T9792] should_fail_ex+0x39d/0x4d0 [ 314.374746][ T9792] should_failslab+0x9/0x20 [ 314.379318][ T9792] slab_pre_alloc_hook+0x59/0x310 [ 314.384418][ T9792] kmem_cache_alloc+0x5a/0x2d0 [ 314.389240][ T9792] ? skb_clone+0x1eb/0x370 [ 314.393722][ T9792] skb_clone+0x1eb/0x370 [ 314.398024][ T9792] __netlink_deliver_tap+0x41c/0x830 [ 314.403383][ T9792] ? netlink_deliver_tap+0x2e/0x1b0 [ 314.408651][ T9792] netlink_deliver_tap+0x19c/0x1b0 [ 314.413826][ T9792] netlink_sendskb+0x68/0x130 [ 314.418567][ T9792] netlink_ack+0xce1/0x1180 [ 314.423185][ T9792] ? genl_bind+0x360/0x360 [ 314.427676][ T9792] ? netlink_dump+0xe50/0xe50 [ 314.432425][ T9792] ? lockdep_hardirqs_on+0x98/0x150 [ 314.437675][ T9792] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 314.443884][ T9792] netlink_rcv_skb+0x2c5/0x4d0 [ 314.448708][ T9792] ? genl_bind+0x360/0x360 [ 314.453187][ T9792] ? netlink_ack+0x1180/0x1180 [ 314.458033][ T9792] ? __lock_acquire+0x7d40/0x7d40 [ 314.463129][ T9792] ? down_read+0x1ac/0x2e0 [ 314.467608][ T9792] genl_rcv+0x28/0x40 [ 314.471654][ T9792] netlink_unicast+0x751/0x8d0 [ 314.476586][ T9792] netlink_sendmsg+0x8d0/0xbf0 [ 314.481419][ T9792] ? netlink_getsockopt+0x590/0x590 [ 314.486675][ T9792] ? __sanitizer_cov_trace_pc+0x36/0x60 [ 314.492287][ T9792] ? aa_sock_msg_perm+0x94/0x150 [ 314.497292][ T9792] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 314.502636][ T9792] ? security_socket_sendmsg+0x80/0xa0 [ 314.508160][ T9792] ? netlink_getsockopt+0x590/0x590 [ 314.513427][ T9792] ____sys_sendmsg+0x5ba/0x960 [ 314.518267][ T9792] ? lockdep_hardirqs_on+0x98/0x150 [ 314.523518][ T9792] ? __sys_sendmsg_sock+0x30/0x30 [ 314.528609][ T9792] ? ___sys_sendmsg+0x28b/0x360 [ 314.533509][ T9792] ___sys_sendmsg+0x2a6/0x360 [ 314.538243][ T9792] ? __sys_sendmsg+0x2a0/0x2a0 [ 314.543091][ T9792] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 314.549153][ T9792] __se_sys_sendmsg+0x1c2/0x2b0 [ 314.554154][ T9792] ? __x64_sys_sendmsg+0x80/0x80 [ 314.559166][ T9792] ? lockdep_hardirqs_on+0x98/0x150 [ 314.564435][ T9792] do_syscall_64+0x55/0xa0 [ 314.568908][ T9792] ? clear_bhb_loop+0x40/0x90 [ 314.573641][ T9792] ? clear_bhb_loop+0x40/0x90 [ 314.578371][ T9792] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 314.584318][ T9792] RIP: 0033:0x7fee3919aeb9 [ 314.588787][ T9792] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 314.608457][ T9792] RSP: 002b:00007fee3a135028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 314.616934][ T9792] RAX: ffffffffffffffda RBX: 00007fee39415fa0 RCX: 00007fee3919aeb9 [ 314.624948][ T9792] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 314.632943][ T9792] RBP: 00007fee3a135090 R08: 0000000000000000 R09: 0000000000000000 [ 314.641482][ T9792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 314.649526][ T9792] R13: 00007fee39416038 R14: 00007fee39415fa0 R15: 00007ffe35ef4a58 [ 314.657579][ T9792] [ 315.294255][ T9819] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1197'. [ 315.303932][ T9819] veth0_to_bond: entered promiscuous mode [ 315.581637][ T9829] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1200'. [ 315.829889][ T9833] FAULT_INJECTION: forcing a failure. [ 315.829889][ T9833] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 315.877603][ T9833] CPU: 1 PID: 9833 Comm: syz.0.1201 Not tainted syzkaller #0 [ 315.885086][ T9833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 315.895225][ T9833] Call Trace: [ 315.898553][ T9833] [ 315.901535][ T9833] dump_stack_lvl+0x18c/0x250 [ 315.906275][ T9833] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 315.912486][ T9833] ? show_regs_print_info+0x20/0x20 [ 315.917745][ T9833] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 315.923964][ T9833] ? dump_stack+0x9/0x20 [ 315.928287][ T9833] should_fail_ex+0x39d/0x4d0 [ 315.933045][ T9833] _copy_from_user+0x2f/0xe0 [ 315.937695][ T9833] kstrtouint_from_user+0xde/0x170 [ 315.942867][ T9833] ? kstrtol_from_user+0x190/0x190 [ 315.948057][ T9833] proc_fail_nth_write+0x8f/0x250 [ 315.953214][ T9833] ? proc_fail_nth_read+0x260/0x260 [ 315.958500][ T9833] ? proc_fail_nth_read+0x260/0x260 [ 315.963754][ T9833] vfs_write+0x296/0x990 [ 315.968050][ T9833] ? file_end_write+0x250/0x250 [ 315.972957][ T9833] ? __fget_files+0x28/0x4b0 [ 315.977581][ T9833] ? __fget_files+0x28/0x4b0 [ 315.982209][ T9833] ? __fget_files+0x43d/0x4b0 [ 315.986934][ T9833] ? __fdget_pos+0x2a3/0x330 [ 315.991555][ T9833] ? ksys_write+0x75/0x260 [ 315.996035][ T9833] ksys_write+0x150/0x260 [ 316.000407][ T9833] ? __ia32_sys_read+0x90/0x90 [ 316.005210][ T9833] ? syscall_enter_from_user_mode+0x2e/0x80 [ 316.011141][ T9833] do_syscall_64+0x55/0xa0 [ 316.015607][ T9833] ? clear_bhb_loop+0x40/0x90 [ 316.020319][ T9833] ? clear_bhb_loop+0x40/0x90 [ 316.025027][ T9833] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 316.030953][ T9833] RIP: 0033:0x7fee3915b78e [ 316.035406][ T9833] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 316.055041][ T9833] RSP: 002b:00007fee3a134fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 316.063488][ T9833] RAX: ffffffffffffffda RBX: 00007fee3a1356c0 RCX: 00007fee3915b78e [ 316.071488][ T9833] RDX: 0000000000000001 RSI: 00007fee3a1350a0 RDI: 0000000000000008 [ 316.079492][ T9833] RBP: 00007fee3a135090 R08: 0000000000000000 R09: 0000000000000000 [ 316.087496][ T9833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 316.095503][ T9833] R13: 00007fee39416038 R14: 00007fee39415fa0 R15: 00007ffe35ef4a58 [ 316.103524][ T9833] [ 317.420042][ T9847] netlink: 'syz.0.1207': attribute type 10 has an invalid length. [ 317.510747][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.517850][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.776154][ T9856] netlink: 'syz.2.1210': attribute type 13 has an invalid length. [ 317.814336][ T9856] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1210'. [ 317.875615][ T9859] netlink: 16222 bytes leftover after parsing attributes in process `syz.0.1211'. [ 320.571215][ T9856] erspan0: refused to change device tx_queue_len [ 320.592164][ T9856] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 321.418595][ T9890] netlink: 'syz.3.1219': attribute type 10 has an invalid length. [ 322.797596][ T9920] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1228'. [ 322.879466][ T9916] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 322.920373][ T9916] netlink: 'syz.1.1229': attribute type 10 has an invalid length. [ 323.032653][ T9918] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.1227'. [ 323.455446][ T9916] geneve1: entered promiscuous mode [ 323.469703][ T9916] geneve1: entered allmulticast mode [ 323.486852][ T9916] team0: Port device geneve1 added [ 323.539748][ T9918] netlink: 8454 bytes leftover after parsing attributes in process `syz.0.1227'. [ 323.619368][ T9931] Â: renamed from gretap0 (while UP) [ 323.810686][ T9941] netlink: 'syz.1.1232': attribute type 33 has an invalid length. [ 324.023187][ T9948] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1236'. [ 324.053056][ T9948] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1236'. [ 324.083412][ T9944] netlink: 'syz.3.1234': attribute type 10 has an invalid length. [ 324.094275][ T9946] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.1235'. [ 324.120597][ T9946] netlink: 'syz.0.1235': attribute type 10 has an invalid length. [ 324.306564][ T9952] netlink: 'syz.2.1237': attribute type 10 has an invalid length. [ 324.419447][ T9961] netlink: 'syz.3.1239': attribute type 19 has an invalid length. [ 325.736020][ T9974] netlink: 'syz.3.1242': attribute type 7 has an invalid length. [ 325.806877][ T11] tipc: Subscription rejected, illegal request [ 326.441715][ T9990] netlink: 'syz.1.1247': attribute type 10 has an invalid length. [ 326.847169][T10008] netlink: 64535 bytes leftover after parsing attributes in process `syz.0.1251'. [ 327.006413][T10014] netlink: 4079 bytes leftover after parsing attributes in process `syz.1.1255'. [ 327.167529][T10018] netlink: 'syz.2.1256': attribute type 5 has an invalid length. [ 327.383871][T10023] bridge_slave_1: entered promiscuous mode [ 327.818376][T10028] netlink: 'syz.0.1260': attribute type 10 has an invalid length. [ 328.584656][T10053] netlink: 'syz.2.1270': attribute type 10 has an invalid length. [ 328.651390][T10049] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.1268'. [ 328.803827][T10063] netlink: 'syz.3.1272': attribute type 10 has an invalid length. [ 328.877078][T10070] syz.0.1273[10070] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 328.877222][T10070] syz.0.1273[10070] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 328.891507][T10068] netlink: 65051 bytes leftover after parsing attributes in process `syz.0.1273'. [ 331.233326][T10091] netlink: 'syz.0.1279': attribute type 10 has an invalid length. [ 332.967345][T10109] netlink: 'syz.2.1284': attribute type 3 has an invalid length. [ 332.975238][T10109] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.1284'. [ 334.202168][T10127] netlink: 'syz.3.1290': attribute type 10 has an invalid length. [ 334.671357][T10132] netlink: 56537 bytes leftover after parsing attributes in process `syz.2.1292'. [ 334.742142][T10134] netlink: 196 bytes leftover after parsing attributes in process `syz.0.1293'. [ 334.874523][T10140] netlink: 'syz.0.1295': attribute type 29 has an invalid length. [ 334.883912][T10140] netlink: 'syz.0.1295': attribute type 29 has an invalid length. [ 334.892251][T10141] netlink: 'syz.0.1295': attribute type 29 has an invalid length. [ 335.243716][T10148] netlink: 'syz.0.1298': attribute type 10 has an invalid length. [ 335.383259][T10150] netlink: 'syz.3.1299': attribute type 10 has an invalid length. [ 335.681552][T10154] netlink: 'syz.3.1301': attribute type 10 has an invalid length. [ 336.377320][T10159] netlink: 'syz.3.1303': attribute type 2 has an invalid length. [ 336.751119][T10177] netlink: 'syz.2.1307': attribute type 2 has an invalid length. [ 336.790735][T10177] netlink: 51 bytes leftover after parsing attributes in process `syz.2.1307'. [ 337.087618][T10182] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1310'. [ 337.603445][T10191] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1314'. [ 338.509700][T10207] validate_nla: 1 callbacks suppressed [ 338.509727][T10207] netlink: 'syz.0.1318': attribute type 10 has an invalid length. [ 338.658022][T10213] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1320'. [ 338.752499][T10211] netlink: 'syz.3.1319': attribute type 3 has an invalid length. [ 338.779660][T10211] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.1319'. [ 339.682388][T10282] netlink: 14548 bytes leftover after parsing attributes in process `syz.0.1331'. [ 339.697769][T10280] netlink: 'syz.2.1330': attribute type 10 has an invalid length. [ 340.181520][T10304] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1338'. [ 340.190861][T10304] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1338'. [ 340.202294][T10304] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1338'. [ 340.211790][T10301] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1338'. [ 340.240230][T10305] netlink: 212940 bytes leftover after parsing attributes in process `syz.2.1340'. [ 340.503894][T10307] delete_channel: no stack [ 340.570449][T10310] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.1342'. [ 340.580579][T10310] netlink: zone id is out of range [ 340.590605][T10310] netlink: zone id is out of range [ 340.597318][T10310] netlink: zone id is out of range [ 340.895259][T10320] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1345'. [ 341.113340][T10327] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1349'. [ 342.416784][ T5777] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 342.431165][ T5777] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 342.439512][ T5777] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 342.449766][ T5777] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 342.463105][ T5777] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 342.481518][ T5777] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 342.848133][T10361] chnl_net:caif_netlink_parms(): no params data found [ 342.978113][T10361] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.985492][T10361] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.993189][T10361] bridge_slave_0: entered allmulticast mode [ 343.012592][T10361] bridge_slave_0: entered promiscuous mode [ 343.057657][T10361] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.065263][T10361] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.101612][T10361] bridge_slave_1: entered allmulticast mode [ 343.117401][T10361] bridge_slave_1: entered promiscuous mode [ 343.193328][T10361] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 343.219255][T10361] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 343.280696][T10361] team0: Port device team_slave_0 added [ 343.292530][T10361] team0: Port device team_slave_1 added [ 344.546150][ T5081] Bluetooth: hci4: command tx timeout [ 346.397228][T10361] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 346.419447][T10361] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 346.492742][T10361] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 346.591147][T10361] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 346.623941][T10361] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 346.650199][ T5081] Bluetooth: hci4: command tx timeout [ 346.694178][T10361] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 346.923307][T10401] netlink: 'syz.0.1370': attribute type 1 has an invalid length. [ 346.944835][T10404] netlink: 'syz.2.1371': attribute type 3 has an invalid length. [ 346.961737][T10404] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.1371'. [ 347.154495][T10361] hsr_slave_0: entered promiscuous mode [ 347.168673][T10361] hsr_slave_1: entered promiscuous mode [ 348.705809][ T5081] Bluetooth: hci4: command tx timeout [ 349.580433][T10361] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 349.631048][T10361] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 349.666791][T10361] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 349.791981][T10361] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 349.818418][T10431] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1379'. [ 350.199261][T10361] 8021q: adding VLAN 0 to HW filter on device bond0 [ 350.254250][T10361] 8021q: adding VLAN 0 to HW filter on device team0 [ 350.278046][ T2108] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.285390][ T2108] bridge0: port 1(bridge_slave_0) entered forwarding state [ 350.335095][ T2108] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.342363][ T2108] bridge0: port 2(bridge_slave_1) entered forwarding state [ 350.502939][T10446] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.1383'. [ 350.788676][ T5081] Bluetooth: hci4: command tx timeout [ 350.939943][T10361] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 351.261284][T10453] syzkaller0: entered promiscuous mode [ 351.267910][T10453] syzkaller0: entered allmulticast mode [ 351.275167][T10458] netlink: 'syz.2.1385': attribute type 10 has an invalid length. [ 355.225270][T10470] netlink: 'syz.2.1387': attribute type 9 has an invalid length. [ 355.473724][T10483] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1390'. [ 355.503576][T10483] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 355.657762][T10361] veth0_vlan: entered promiscuous mode [ 355.700327][T10361] veth1_vlan: entered promiscuous mode [ 355.890537][T10361] veth0_macvtap: entered promiscuous mode [ 355.913133][T10361] veth1_macvtap: entered promiscuous mode [ 356.002430][T10361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 356.052550][T10361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.086492][T10361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 356.114614][T10361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.127190][T10361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 356.143466][T10361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.171485][T10361] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 356.203293][T10361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 356.215512][T10361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.236157][T10361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 356.253312][T10361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.283071][T10361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 356.301065][T10361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.313353][T10361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 356.330541][T10361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.365184][T10361] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 356.416589][T10496] netlink: 'syz.0.1394': attribute type 10 has an invalid length. [ 356.490017][T10361] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.505872][T10361] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.514814][T10361] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.523652][T10361] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.646982][T10502] syz.3.1396[10502] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 356.647116][T10502] syz.3.1396[10502] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 356.788103][T10361] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 356.805492][T10361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.815590][T10361] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 356.825321][T10361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.835426][T10361] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 356.845165][T10361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.911770][ T2108] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.924460][ T2108] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.998096][T10259] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 357.011136][T10259] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.131861][T10514] netlink: 'syz.0.1399': attribute type 10 has an invalid length. [ 357.199241][T10514] team0: Port device macvlan0 added [ 357.350461][T10522] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1358'. [ 357.579373][T10524] netlink: 'syz.0.1401': attribute type 11 has an invalid length. [ 357.597259][T10524] netlink: 'syz.0.1401': attribute type 1 has an invalid length. [ 357.626162][T10524] netlink: 'syz.0.1401': attribute type 2 has an invalid length. [ 357.676277][T10524] netlink: 198048 bytes leftover after parsing attributes in process `syz.0.1401'. [ 358.512220][T10539] netlink: 'syz.4.1407': attribute type 10 has an invalid length. [ 358.539735][T10539] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1407'. [ 358.576480][T10539] team0: entered promiscuous mode [ 358.586633][T10539] team_slave_0: entered promiscuous mode [ 358.616666][T10539] team_slave_1: entered promiscuous mode [ 358.622930][T10539] team0: entered allmulticast mode [ 358.665866][T10539] team_slave_0: entered allmulticast mode [ 358.671800][T10539] team_slave_1: entered allmulticast mode [ 358.747445][T10539] bridge0: port 3(team0) entered blocking state [ 358.754032][T10539] bridge0: port 3(team0) entered disabled state [ 358.822448][T10539] bridge0: port 3(team0) entered blocking state [ 358.829284][T10539] bridge0: port 3(team0) entered forwarding state [ 358.914934][T10541] netdevsim netdevsim2 »»»»»»: renamed from netdevsim0 (while UP) [ 359.369260][T10546] netlink: 'syz.3.1408': attribute type 5 has an invalid length. [ 359.395307][T10546] netlink: 176 bytes leftover after parsing attributes in process `syz.3.1408'. [ 360.346262][T10570] netlink: 'syz.4.1416': attribute type 10 has an invalid length. [ 360.379386][T10570] batman_adv: batadv0: Adding interface: wlan0 [ 360.417168][T10570] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 360.446166][T10570] batman_adv: batadv0: Interface activated: wlan0 [ 360.504174][T10574] netlink: 'syz.0.1417': attribute type 10 has an invalid length. [ 361.110222][T10582] netlink: 'syz.2.1420': attribute type 10 has an invalid length. [ 361.730228][T10606] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1426'. [ 361.760201][T10606] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1426'. [ 361.959056][T10610] netlink: 'syz.2.1428': attribute type 10 has an invalid length. [ 362.714778][T10621] netlink: 'syz.2.1432': attribute type 10 has an invalid length. [ 362.818603][T10625] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.1434'. [ 362.939161][T10632] netlink: 'syz.2.1437': attribute type 23 has an invalid length. [ 362.965209][T10632] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1437'. [ 363.871142][T10645] netlink: 'syz.0.1441': attribute type 10 has an invalid length. [ 364.236887][T10654] netlink: 'syz.0.1445': attribute type 10 has an invalid length. [ 364.473019][T10659] netlink: 194488 bytes leftover after parsing attributes in process `syz.4.1447'. [ 365.049571][T10671] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.1451'. [ 365.066616][T10668] netlink: 'syz.0.1450': attribute type 10 has an invalid length. [ 365.083485][T10668] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.1450'. [ 365.147059][T10671] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.1451'. [ 365.225861][T10671] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.1451'. [ 365.411761][T10682] netlink: 'syz.3.1455': attribute type 1 has an invalid length. [ 365.440070][T10682] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.1455'. [ 365.444607][T10677] nla_validate_range_unsigned: 25 callbacks suppressed [ 365.444651][T10677] netlink: 'syz.4.1453': attribute type 11 has an invalid length. [ 365.637625][T10679] sysfs: cannot create duplicate filename '/class/ieee80211/ô!ô' [ 365.647140][T10679] CPU: 1 PID: 10679 Comm: syz.0.1454 Not tainted syzkaller #0 [ 365.654676][T10679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 365.664781][T10679] Call Trace: [ 365.668110][T10679] [ 365.671094][T10679] dump_stack_lvl+0x18c/0x250 [ 365.675854][T10679] ? show_regs_print_info+0x20/0x20 [ 365.681141][T10679] ? load_image+0x400/0x400 [ 365.685722][T10679] sysfs_warn_dup+0x8e/0xa0 [ 365.690272][T10679] sysfs_do_create_link_sd+0xc0/0x110 [ 365.695789][T10679] device_add_class_symlinks+0x1cf/0x240 [ 365.701487][T10679] device_add+0x507/0xc20 [ 365.705882][T10679] wiphy_register+0x1dad/0x2ae0 [ 365.710815][T10679] ? cfg80211_event_work+0x40/0x40 [ 365.715968][T10679] ? minstrel_ht_alloc+0x88a/0x990 [ 365.721150][T10679] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 365.727256][T10679] ieee80211_register_hw+0x3464/0x4250 [ 365.732772][T10679] ? ieee80211_tasklet_handler+0x20/0x20 [ 365.738460][T10679] ? memset_orig+0x36/0xac [ 365.742906][T10679] ? __hrtimer_init+0x186/0x270 [ 365.747788][T10679] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 365.753565][T10679] ? mac80211_hwsim_free+0x220/0x220 [ 365.758885][T10679] ? rcu_is_watching+0x15/0xb0 [ 365.763721][T10679] ? kstrndup+0xbd/0x140 [ 365.768021][T10679] hwsim_new_radio_nl+0xdc9/0x1a90 [ 365.773173][T10679] ? __nla_validate+0x50/0x50 [ 365.777913][T10679] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 365.784335][T10679] ? __nla_parse+0x40/0x50 [ 365.788800][T10679] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 365.795175][T10679] genl_family_rcv_msg_doit+0x211/0x310 [ 365.800766][T10679] ? end_current_label_crit_section+0x170/0x170 [ 365.807045][T10679] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 365.813004][T10679] ? bpf_lsm_capable+0x9/0x10 [ 365.817719][T10679] ? security_capable+0x89/0xb0 [ 365.822610][T10679] genl_rcv_msg+0x619/0x7a0 [ 365.827160][T10679] ? genl_bind+0x360/0x360 [ 365.831617][T10679] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 365.837981][T10679] ? ref_tracker_free+0x690/0x840 [ 365.843208][T10679] netlink_rcv_skb+0x241/0x4d0 [ 365.848018][T10679] ? genl_bind+0x360/0x360 [ 365.852477][T10679] ? netlink_ack+0x1180/0x1180 [ 365.857290][T10679] ? __lock_acquire+0x7d40/0x7d40 [ 365.862361][T10679] ? down_read+0x1ac/0x2e0 [ 365.866814][T10679] genl_rcv+0x28/0x40 [ 365.870832][T10679] netlink_unicast+0x751/0x8d0 [ 365.875643][T10679] netlink_sendmsg+0x8d0/0xbf0 [ 365.880462][T10679] ? netlink_getsockopt+0x590/0x590 [ 365.885699][T10679] ? aa_sock_msg_perm+0x94/0x150 [ 365.890670][T10679] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 365.895989][T10679] ? security_socket_sendmsg+0x80/0xa0 [ 365.901489][T10679] ? netlink_getsockopt+0x590/0x590 [ 365.906729][T10679] ____sys_sendmsg+0x5ba/0x960 [ 365.911542][T10679] ? __asan_memset+0x22/0x40 [ 365.916174][T10679] ? __sys_sendmsg_sock+0x30/0x30 [ 365.921232][T10679] ? __import_iovec+0x5f2/0x850 [ 365.926134][T10679] ? import_iovec+0x73/0xa0 [ 365.930679][T10679] ___sys_sendmsg+0x2a6/0x360 [ 365.935398][T10679] ? __sys_sendmsg+0x2a0/0x2a0 [ 365.940206][T10679] ? seqcount_lockdep_reader_access+0x17b/0x1d0 [ 365.946499][T10679] __se_sys_sendmsg+0x1c2/0x2b0 [ 365.951379][T10679] ? __x64_sys_sendmsg+0x80/0x80 [ 365.956356][T10679] ? lockdep_hardirqs_on+0x98/0x150 [ 365.961589][T10679] do_syscall_64+0x55/0xa0 [ 365.966054][T10679] ? clear_bhb_loop+0x40/0x90 [ 365.970770][T10679] ? clear_bhb_loop+0x40/0x90 [ 365.975493][T10679] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 365.981426][T10679] RIP: 0033:0x7fee3919aeb9 [ 365.985877][T10679] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 366.005524][T10679] RSP: 002b:00007fee3a135028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 366.013969][T10679] RAX: ffffffffffffffda RBX: 00007fee39415fa0 RCX: 00007fee3919aeb9 [ 366.021985][T10679] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000015 [ 366.030005][T10679] RBP: 00007fee39208c1f R08: 0000000000000000 R09: 0000000000000000 [ 366.038007][T10679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 366.046000][T10679] R13: 00007fee39416038 R14: 00007fee39415fa0 R15: 00007ffe35ef4a58 [ 366.054016][T10679] [ 366.571236][T10692] batadv0: entered promiscuous mode [ 367.036721][T10716] __nla_validate_parse: 3 callbacks suppressed [ 367.036742][T10716] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1466'. [ 367.074900][T10716] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 367.105031][T10718] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1466'. [ 367.145490][T10716] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 367.411067][T10724] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1468'. [ 367.969265][T10738] netlink: 'syz.4.1472': attribute type 2 has an invalid length. [ 367.977490][T10738] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1472'. [ 368.871553][T10754] tap0: tun_chr_ioctl cmd 1074025675 [ 368.878644][T10754] tap0: persist enabled [ 368.912276][T10756] netlink: 'syz.0.1478': attribute type 3 has an invalid length. [ 368.925971][T10754] tap1: tun_chr_ioctl cmd 1074025677 [ 368.943552][T10754] tap1: linktype set to 778 [ 368.949202][T10756] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1478'. [ 368.960123][T10754] tap0: tun_chr_ioctl cmd 1074025675 [ 368.965483][T10754] tap0: persist enabled [ 369.004300][T10754] tap0: tun_chr_ioctl cmd 1074025692 [ 369.675404][T10781] netlink: 'syz.4.1484': attribute type 2 has an invalid length. [ 370.673705][T10838] netlink: 'syz.3.1488': attribute type 1 has an invalid length. [ 370.689546][T10838] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.1488'. [ 370.700526][T10838] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1488'. [ 370.984320][ T5081] Bluetooth: hci4: ISO packet for unknown connection handle 2366 [ 371.152156][T10846] netlink: 'syz.0.1493': attribute type 29 has an invalid length. [ 371.196280][T10846] netlink: 'syz.0.1493': attribute type 29 has an invalid length. [ 371.215850][T10852] netlink: 'syz.0.1493': attribute type 29 has an invalid length. [ 371.285300][T10846] netlink: 'syz.0.1493': attribute type 29 has an invalid length. [ 371.341997][T10846] netlink: 'syz.0.1493': attribute type 29 has an invalid length. [ 371.376174][T10846] netlink: 'syz.0.1493': attribute type 29 has an invalid length. [ 371.449091][T10856] C: renamed from team_slave_0 (while UP) [ 371.466106][T10856] netlink: 'syz.3.1496': attribute type 1 has an invalid length. [ 371.482850][T10856] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1496'. [ 371.492749][T10856] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 371.516959][T10861] netlink: 'syz.3.1496': attribute type 22 has an invalid length. [ 371.556425][T10861] netlink: 14380 bytes leftover after parsing attributes in process `syz.3.1496'. [ 371.622945][T10860] netlink: 'syz.2.1498': attribute type 10 has an invalid length. [ 372.049890][T10872] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1499'. [ 372.851612][T10883] syzkaller0: entered allmulticast mode [ 375.704399][T10959] netlink: 196 bytes leftover after parsing attributes in process `syz.2.1526'. [ 375.782601][T10965] validate_nla: 4 callbacks suppressed [ 375.782620][T10965] netlink: 'syz.2.1526': attribute type 29 has an invalid length. [ 375.893191][T10965] netlink: 'syz.2.1526': attribute type 29 has an invalid length. [ 375.940010][T10959] netlink: 'syz.2.1526': attribute type 29 has an invalid length. [ 375.982149][T10965] netlink: 'syz.2.1526': attribute type 29 has an invalid length. [ 376.081091][T10959] netlink: 'syz.2.1526': attribute type 29 has an invalid length. [ 377.017574][T10988] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1532'. [ 377.206021][T10988] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1532'. [ 378.033679][T11003] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1538'. [ 378.474635][T11014] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1542'. [ 378.517392][T11014] netlink: 'syz.4.1542': attribute type 21 has an invalid length. [ 378.525445][T11014] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1542'. [ 378.967782][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.984434][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.151521][T11054] netlink: 'syz.2.1552': attribute type 1 has an invalid length. [ 380.314737][T11060] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1553'. [ 384.174871][T11102] netlink: 'syz.2.1564': attribute type 27 has an invalid length. [ 384.190069][T11102] netlink: 2418 bytes leftover after parsing attributes in process `syz.2.1564'. [ 384.320240][T11108] netlink: 'syz.2.1566': attribute type 9 has an invalid length. [ 384.334462][T11108] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1566'. [ 384.647336][T11112] netlink: 'syz.4.1568': attribute type 9 has an invalid length. [ 384.655163][T11112] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.1568'. [ 384.793517][T11116] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.1568'. [ 384.825513][T11116] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.1568'. [ 384.934909][T11112] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.1568'. [ 385.087013][T11112] netlink: 'syz.4.1568': attribute type 9 has an invalid length. [ 385.094846][T11112] netlink: 201948 bytes leftover after parsing attributes in process `syz.4.1568'. [ 385.700245][T11151] !1ÿ: renamed from bond_slave_0 (while UP) [ 386.098625][T11159] netlink: 'syz.3.1581': attribute type 20 has an invalid length. [ 387.226196][T11191] netlink: 'syz.3.1591': attribute type 33 has an invalid length. [ 387.234120][T11191] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1591'. [ 387.530537][T11201] netlink: 'syz.0.1595': attribute type 21 has an invalid length. [ 387.558160][T11201] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1595'. [ 387.626266][T11201] netlink: 'syz.0.1595': attribute type 21 has an invalid length. [ 387.651546][T11201] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1595'. [ 387.851718][T11212] netlink: 'syz.3.1597': attribute type 10 has an invalid length. [ 388.630958][T11231] netlink: 'syz.0.1604': attribute type 9 has an invalid length. [ 389.262475][T11246] sit0: entered allmulticast mode [ 389.540317][T11253] __nla_validate_parse: 2 callbacks suppressed [ 389.540335][T11253] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1611'. [ 389.618801][T11253] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1611'. [ 389.677300][T11252] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1611'. [ 389.716511][T11261] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1614'. [ 390.317736][T11275] validate_nla: 3 callbacks suppressed [ 390.317801][T11275] netlink: 'syz.4.1619': attribute type 10 has an invalid length. [ 390.638493][T11285] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1624'. [ 392.373619][T11311] netlink: 'syz.0.1633': attribute type 10 has an invalid length. [ 392.705335][T11321] netlink: 'syz.2.1638': attribute type 10 has an invalid length. [ 392.758034][T11321] veth1_vlan: entered allmulticast mode [ 392.884821][T11321] team0: Device veth1_vlan is already a lower device of the team interface [ 392.984532][T11331] netlink: 17279 bytes leftover after parsing attributes in process `syz.3.1641'. [ 393.794724][T11355] netlink: 'syz.3.1646': attribute type 10 has an invalid length. [ 394.037351][T11360] syzkaller0: entered promiscuous mode [ 394.042938][T11360] syzkaller0: entered allmulticast mode [ 395.460116][T11380] netlink: 153172 bytes leftover after parsing attributes in process `syz.3.1654'. [ 395.846414][T11391] sock: sock_set_timeout: `syz.2.1657' (pid 11391) tries to set negative timeout [ 395.887020][T11391] netlink: 'syz.2.1657': attribute type 1 has an invalid length. [ 396.342606][T11406] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.1662'. [ 396.386998][T11398] netlink: 'syz.0.1660': attribute type 10 has an invalid length. [ 396.461477][T11411] netlink: 'syz.3.1663': attribute type 1 has an invalid length. [ 396.477145][T11411] netlink: 'syz.3.1663': attribute type 4 has an invalid length. [ 396.485047][T11411] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.1663'. [ 396.711044][T11416] netlink: 'syz.0.1666': attribute type 10 has an invalid length. [ 397.082098][T11432] pimreg1: tun_chr_ioctl cmd 1074025677 [ 397.088454][T11432] pimreg1: linktype set to 769 [ 398.392701][T11456] netlink: 'syz.4.1675': attribute type 10 has an invalid length. [ 398.446614][T11467] netlink: 'syz.3.1678': attribute type 9 has an invalid length. [ 398.473088][T11467] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1678'. [ 398.494898][T11465] netlink: 'syz.0.1677': attribute type 1 has an invalid length. [ 398.543502][T11465] netlink: 'syz.0.1677': attribute type 3 has an invalid length. [ 398.555829][T11465] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1677'. [ 398.578432][T11467] netlink: 'syz.3.1678': attribute type 9 has an invalid length. [ 398.587079][T11467] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1678'. [ 400.415074][T11509] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1687'. [ 400.441150][T11511] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1690'. [ 402.080116][T11527] validate_nla: 2 callbacks suppressed [ 402.080153][T11527] netlink: 'syz.4.1695': attribute type 10 has an invalid length. [ 403.886322][T11553] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 403.933373][T11558] netlink: 'syz.0.1704': attribute type 33 has an invalid length. [ 403.953199][T11558] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1704'. [ 404.383803][T11566] netlink: 'syz.3.1705': attribute type 9 has an invalid length. [ 404.393634][T11566] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1705'. [ 406.633852][T11564] @0Ù: renamed from bond_slave_1 [ 407.524226][T11589] mac80211_hwsim hwsim23 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 407.551298][T11595] netlink: 'syz.2.1714': attribute type 33 has an invalid length. [ 407.569475][T11595] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1714'. [ 408.047381][T11603] netlink: 'syz.4.1717': attribute type 16 has an invalid length. [ 408.069272][T11603] netlink: 'syz.4.1717': attribute type 3 has an invalid length. [ 408.086335][T11603] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1717'. [ 408.572429][T11610] netlink: 'syz.3.1719': attribute type 21 has an invalid length. [ 408.794055][T11616] netlink: 'syz.0.1722': attribute type 10 has an invalid length. [ 408.807226][T11620] netlink: 'syz.4.1720': attribute type 29 has an invalid length. [ 408.817288][T11616] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1722'. [ 408.843689][T11616] vcan0: entered promiscuous mode [ 408.869781][T11616] A link change request failed with some changes committed already. Interface vcan0 may have been left with an inconsistent configuration, please check. [ 408.931878][T11620] netlink: 'syz.4.1720': attribute type 29 has an invalid length. [ 408.957710][T11612] netlink: 'syz.4.1720': attribute type 29 has an invalid length. [ 409.368367][T11625] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1724'. [ 409.928005][T11642] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1728'. [ 410.973703][T11661] netlink: 209820 bytes leftover after parsing attributes in process `syz.3.1735'. [ 412.791823][T11671] netlink: 'syz.2.1738': attribute type 10 has an invalid length. [ 412.875200][T11671] netlink: 210880 bytes leftover after parsing attributes in process `syz.2.1738'. [ 414.169728][T11677] netlink: 'syz.2.1740': attribute type 8 has an invalid length. [ 414.197172][T11677] netlink: 199848 bytes leftover after parsing attributes in process `syz.2.1740'. [ 414.745236][T11690] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1745'. [ 414.789550][T11689] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1745'. [ 415.494448][T11699] netlink: 'syz.3.1747': attribute type 10 has an invalid length. [ 416.631106][T11725] netlink: 'syz.4.1754': attribute type 10 has an invalid length. [ 416.687376][T11725] netlink: 205312 bytes leftover after parsing attributes in process `syz.4.1754'. [ 416.726972][T11725] openvswitch: netlink: Flow key attr not present in new flow. [ 416.766907][T11728] netlink: 'syz.3.1756': attribute type 10 has an invalid length. [ 416.796517][T11728] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1756'. [ 416.957291][T11728] batman_adv: batadv0: Adding interface: ÿÿÿÿÿÿ [ 416.974147][T11728] batman_adv: batadv0: The MTU of interface ÿÿÿÿÿÿ is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 417.003029][T11728] batman_adv: batadv0: Interface activated: ÿÿÿÿÿÿ [ 417.432299][T11736] netlink: 'syz.4.1759': attribute type 2 has an invalid length. [ 417.530437][T11736] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.1759'. [ 417.853577][T11743] netlink: 'syz.0.1760': attribute type 10 has an invalid length. [ 418.782864][T11766] netlink: 'syz.2.1769': attribute type 3 has an invalid length. [ 418.808023][T11766] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.1769'. [ 419.699620][T11775] netlink: 'syz.2.1773': attribute type 9 has an invalid length. [ 419.712675][T11775] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1773'. [ 419.738069][T11777] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1774'. [ 419.748198][T11777] openvswitch: netlink: Key type 4112 is out of range max 32 [ 419.973355][T11775] netlink: 'syz.2.1773': attribute type 9 has an invalid length. [ 419.987060][T11775] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1773'. [ 420.025483][T11782] netlink: 'syz.3.1776': attribute type 10 has an invalid length. [ 420.067954][T11774] delete_channel: no stack [ 420.195338][T11784] IPv6: Can't replace route, no match found [ 421.336579][T11809] netlink: 'syz.3.1784': attribute type 21 has an invalid length. [ 421.667093][T11818] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1786'. [ 421.678805][T11818] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1786'. [ 421.689304][T11818] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1786'. [ 421.933650][T11824] netlink: 'syz.0.1788': attribute type 10 has an invalid length. [ 422.226958][T11828] netlink: 'syz.3.1791': attribute type 10 has an invalid length. [ 422.448998][T11828] bridge_slave_1: left promiscuous mode [ 423.372215][T11845] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.1797'. [ 423.766727][T11849] netlink: 'syz.4.1799': attribute type 21 has an invalid length. [ 423.878590][T11851] netlink: 'syz.2.1800': attribute type 10 has an invalid length. [ 425.219878][T11875] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1806'. [ 425.251978][T11877] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1806'. [ 426.100419][T11890] netlink: 'syz.4.1810': attribute type 10 has an invalid length. [ 426.222252][T11899] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1819'. [ 426.266819][T11892] delete_channel: no stack [ 426.297054][T11899] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 426.424248][T11902] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1813'. [ 426.509165][T11902] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 427.120709][T11902] netlink: 'syz.4.1813': attribute type 10 has an invalid length. [ 427.173219][T11912] netlink: 'syz.0.1815': attribute type 3 has an invalid length. [ 427.254808][T11902] dummy0: entered promiscuous mode [ 427.270373][T11912] netlink: 'syz.0.1815': attribute type 1 has an invalid length. [ 427.326094][T11902] dummy0: entered allmulticast mode [ 427.332646][T11902] team0: Port device dummy0 added [ 427.396726][T11912] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.1815'. [ 427.407929][T11905] netlink: 'syz.4.1813': attribute type 10 has an invalid length. [ 427.651512][T11905] dummy0: left promiscuous mode [ 427.657793][T11905] dummy0: left allmulticast mode [ 427.708104][T11905] team0: Port device dummy0 removed [ 427.744454][T11905] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 427.778674][T11915] netlink: 'syz.3.1816': attribute type 2 has an invalid length. [ 427.802700][T11915] netlink: 51 bytes leftover after parsing attributes in process `syz.3.1816'. [ 428.004360][T11918] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1817'. [ 428.571757][T11933] netlink: 'syz.4.1822': attribute type 10 has an invalid length. [ 429.061380][T11947] netlink: 'syz.0.1827': attribute type 28 has an invalid length. [ 429.109925][T11947] netlink: 'syz.0.1827': attribute type 29 has an invalid length. [ 429.175844][T11947] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1827'. [ 430.099213][T11962] syzkaller0: tun_chr_ioctl cmd 2147767517 [ 430.735283][T11966] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1832'. [ 430.835798][T11972] netlink: 'syz.4.1833': attribute type 10 has an invalid length. [ 430.865087][T11972] netlink: 55 bytes leftover after parsing attributes in process `syz.4.1833'. [ 435.709313][T11988] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1837'. [ 440.567058][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.573765][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.460741][T12009] netlink: 'syz.3.1841': attribute type 21 has an invalid length. [ 445.687657][T12033] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1846'. [ 446.430744][T12040] netlink: 'syz.0.1848': attribute type 10 has an invalid length. [ 446.938031][T12047] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.1851'. [ 447.501841][T12053] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1853'. [ 447.569668][T12053] hsr_slave_1: left promiscuous mode [ 448.825682][T12058] syzkaller0: entered promiscuous mode [ 448.863284][T12058] syzkaller0: entered allmulticast mode [ 449.671921][T12061] C: left promiscuous mode [ 449.688521][T12061] C: left allmulticast mode [ 450.403767][T12061] team0: Port device C removed [ 450.449182][T12061] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 450.815168][T12078] netlink: 'syz.0.1860': attribute type 21 has an invalid length. [ 451.158407][T12081] netlink: 'syz.3.1861': attribute type 21 has an invalid length. [ 451.204307][T12081] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1861'. [ 451.559071][T12085] netlink: 'syz.4.1862': attribute type 10 has an invalid length. [ 452.092153][T12102] netlink: 'syz.2.1868': attribute type 10 has an invalid length. [ 452.100153][T12102] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1868'. [ 452.143781][T12102] netlink: 'syz.2.1868': attribute type 10 has an invalid length. [ 452.192125][T12102] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1868'. [ 452.248250][T12104] syzkaller0: entered promiscuous mode [ 452.260361][T12104] syzkaller0: entered allmulticast mode [ 452.965566][T12106] netlink: 'syz.3.1869': attribute type 33 has an invalid length. [ 452.989114][T12106] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1869'. [ 453.824271][T12123] netlink: 'syz.0.1874': attribute type 10 has an invalid length. [ 454.579307][T12133] netlink: 'syz.4.1878': attribute type 2 has an invalid length. [ 454.610741][T12133] netlink: 51 bytes leftover after parsing attributes in process `syz.4.1878'. [ 455.272698][T12149] netlink: 'syz.0.1881': attribute type 33 has an invalid length. [ 455.327976][T12149] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1881'. [ 455.521169][T12156] netlink: 'syz.2.1885': attribute type 10 has an invalid length. [ 455.919482][T12164] FAULT_INJECTION: forcing a failure. [ 455.919482][T12164] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 455.965829][T12164] CPU: 1 PID: 12164 Comm: syz.2.1888 Not tainted syzkaller #0 [ 455.973390][T12164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 455.983576][T12164] Call Trace: [ 455.986893][T12164] [ 455.989856][T12164] dump_stack_lvl+0x18c/0x250 [ 455.994630][T12164] ? show_regs_print_info+0x20/0x20 [ 455.999884][T12164] ? load_image+0x400/0x400 [ 456.004456][T12164] ? __might_fault+0xaa/0x120 [ 456.009179][T12164] ? __lock_acquire+0x7d40/0x7d40 [ 456.014277][T12164] should_fail_ex+0x39d/0x4d0 [ 456.019014][T12164] _copy_from_user+0x2f/0xe0 [ 456.023662][T12164] __sys_bpf+0x23e/0x890 [ 456.027966][T12164] ? bpf_link_show_fdinfo+0x390/0x390 [ 456.033386][T12164] ? lock_chain_count+0x20/0x20 [ 456.038280][T12164] __x64_sys_bpf+0x7c/0x90 [ 456.042748][T12164] do_syscall_64+0x55/0xa0 [ 456.047199][T12164] ? clear_bhb_loop+0x40/0x90 [ 456.051914][T12164] ? clear_bhb_loop+0x40/0x90 [ 456.056623][T12164] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 456.062540][T12164] RIP: 0033:0x7fa08159aeb9 [ 456.066987][T12164] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 456.086617][T12164] RSP: 002b:00007fa07f7f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 456.095052][T12164] RAX: ffffffffffffffda RBX: 00007fa081815fa0 RCX: 00007fa08159aeb9 [ 456.103045][T12164] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 456.111043][T12164] RBP: 00007fa07f7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 456.119035][T12164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 456.127029][T12164] R13: 00007fa081816038 R14: 00007fa081815fa0 R15: 00007fff35e28b98 [ 456.135043][T12164] [ 457.653773][T12184] netlink: 'syz.2.1893': attribute type 39 has an invalid length. [ 457.862652][T12190] netlink: 'syz.0.1894': attribute type 27 has an invalid length. [ 457.874363][T12190] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1894'. [ 460.746277][T12194] netlink: 'syz.0.1896': attribute type 33 has an invalid length. [ 460.762729][T12194] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1896'. [ 462.414606][T12239] netlink: 'syz.2.1907': attribute type 29 has an invalid length. [ 462.499182][T12239] netlink: 'syz.2.1907': attribute type 29 has an invalid length. [ 462.546159][T12245] netlink: 'syz.0.1908': attribute type 33 has an invalid length. [ 462.554135][T12245] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1908'. [ 462.655041][T12250] netlink: 'syz.3.1909': attribute type 9 has an invalid length. [ 462.695884][T12250] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1909'. [ 462.870192][T12249] netlink: 'syz.3.1909': attribute type 9 has an invalid length. [ 462.893233][T12249] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1909'. [ 462.981921][T12254] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1910'. [ 463.005967][T12254] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1910'. [ 463.030062][T12254] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1910'. [ 463.076100][T12254] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1910'. [ 463.404678][T12260] netlink: 'syz.3.1913': attribute type 29 has an invalid length. [ 463.463327][T12260] netlink: 'syz.3.1913': attribute type 29 has an invalid length. [ 463.518467][T12265] netlink: 'syz.3.1913': attribute type 29 has an invalid length. [ 463.567288][T12260] netlink: 'syz.3.1913': attribute type 29 has an invalid length. [ 463.750185][T12272] netlink: 'syz.0.1916': attribute type 13 has an invalid length. [ 463.780744][T12272] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1916'. [ 463.810632][T12272] erspan0: refused to change device tx_queue_len [ 463.935308][T12272] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 464.049322][T12272] netlink: 'syz.0.1916': attribute type 10 has an invalid length. [ 464.201893][T12277] netlink: 'syz.2.1917': attribute type 10 has an invalid length. [ 464.582167][T12283] netlink: 'syz.3.1913': attribute type 29 has an invalid length. [ 464.658997][T12274] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1917'. [ 468.066008][ T5777] Bluetooth: hci4: command 0x0406 tx timeout [ 472.756982][T12369] netlink: 'syz.0.1949': attribute type 10 has an invalid length. [ 472.792403][T12369] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1949'. [ 472.884934][T12366] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 472.915668][ T5081] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 473.433230][T12382] wg2: entered allmulticast mode [ 473.500518][T12384] wg2: entered promiscuous mode [ 476.018470][T12423] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1964'. [ 476.388716][T12430] netlink: 'syz.4.1965': attribute type 9 has an invalid length. [ 476.426634][T12430] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.1965'. [ 478.544138][T12434] netlink: 'syz.2.1967': attribute type 49 has an invalid length. [ 478.586766][T12434] netlink: 'syz.2.1967': attribute type 49 has an invalid length. [ 479.061922][T12450] netlink: 'syz.4.1971': attribute type 10 has an invalid length. [ 479.907401][T12457] netlink: 65055 bytes leftover after parsing attributes in process `syz.4.1973'. [ 482.032077][T12482] netlink: 'syz.0.1986': attribute type 11 has an invalid length. [ 485.035069][T12496] netlink: 'syz.0.1981': attribute type 10 has an invalid length. [ 486.752498][T12527] netlink: 'syz.2.1993': attribute type 10 has an invalid length. [ 487.544707][T12539] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1997'. [ 487.649308][T12539] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 487.676354][T12539] CPU: 0 PID: 12539 Comm: syz.0.1997 Not tainted syzkaller #0 [ 487.683910][T12539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 487.694022][T12539] Call Trace: [ 487.697350][T12539] [ 487.700344][T12539] dump_stack_lvl+0x18c/0x250 [ 487.705106][T12539] ? show_regs_print_info+0x20/0x20 [ 487.710372][T12539] ? load_image+0x400/0x400 [ 487.714954][T12539] sysfs_warn_dup+0x8e/0xa0 [ 487.719520][T12539] sysfs_do_create_link_sd+0xc0/0x110 [ 487.724949][T12539] device_add_class_symlinks+0x1cf/0x240 [ 487.730645][T12539] device_add+0x507/0xc20 [ 487.735051][T12539] wiphy_register+0x1dad/0x2ae0 [ 487.739982][T12539] ? cfg80211_event_work+0x40/0x40 [ 487.745227][T12539] ? minstrel_ht_alloc+0x88a/0x990 [ 487.750416][T12539] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 487.756568][T12539] ieee80211_register_hw+0x3464/0x4250 [ 487.762123][T12539] ? ieee80211_tasklet_handler+0x20/0x20 [ 487.767909][T12539] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 487.773875][T12539] ? __debug_object_init+0xec/0x450 [ 487.779172][T12539] ? __asan_memset+0x22/0x40 [ 487.783846][T12539] ? __hrtimer_init+0x186/0x270 [ 487.788763][T12539] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 487.794584][T12539] ? mac80211_hwsim_free+0x220/0x220 [ 487.799947][T12539] ? rcu_is_watching+0x15/0xb0 [ 487.804774][T12539] ? kstrndup+0xbd/0x140 [ 487.809101][T12539] hwsim_new_radio_nl+0xdc9/0x1a90 [ 487.814294][T12539] ? __nla_validate+0x50/0x50 [ 487.819067][T12539] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 487.825653][T12539] ? __nla_parse+0x40/0x50 [ 487.830142][T12539] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 487.836538][T12539] genl_family_rcv_msg_doit+0x211/0x310 [ 487.842157][T12539] ? end_current_label_crit_section+0x170/0x170 [ 487.848467][T12539] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 487.854439][T12539] ? bpf_lsm_capable+0x9/0x10 [ 487.859177][T12539] ? security_capable+0x89/0xb0 [ 487.864103][T12539] genl_rcv_msg+0x619/0x7a0 [ 487.868689][T12539] ? genl_bind+0x360/0x360 [ 487.873169][T12539] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 487.879584][T12539] ? mark_lock+0x94/0x320 [ 487.883981][T12539] netlink_rcv_skb+0x241/0x4d0 [ 487.884505][T12544] netlink: 'syz.2.1999': attribute type 3 has an invalid length. [ 487.888793][T12539] ? genl_bind+0x360/0x360 [ 487.888899][T12539] ? netlink_ack+0x1180/0x1180 [ 487.888928][T12539] ? preempt_schedule_common+0x82/0xc0 [ 487.888979][T12539] ? preempt_schedule_thunk+0x1a/0x30 [ 487.889017][T12539] ? down_read+0x1dc/0x2e0 [ 487.921297][T12539] genl_rcv+0x28/0x40 [ 487.925367][T12539] netlink_unicast+0x751/0x8d0 [ 487.930230][T12539] netlink_sendmsg+0x8d0/0xbf0 [ 487.935074][T12539] ? netlink_getsockopt+0x590/0x590 [ 487.940343][T12539] ? aa_sock_msg_perm+0x94/0x150 [ 487.945348][T12539] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 487.950776][T12539] ? security_socket_sendmsg+0x80/0xa0 [ 487.956295][T12539] ? netlink_getsockopt+0x590/0x590 [ 487.961582][T12539] ____sys_sendmsg+0x5ba/0x960 [ 487.966422][T12539] ? __asan_memset+0x22/0x40 [ 487.971074][T12544] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1999'. [ 487.971079][T12539] ? __sys_sendmsg_sock+0x30/0x30 [ 487.985203][T12539] ? __import_iovec+0x5f2/0x850 [ 487.990135][T12539] ? import_iovec+0x73/0xa0 [ 487.994731][T12539] ___sys_sendmsg+0x2a6/0x360 [ 487.999464][T12539] ? __sys_sendmsg+0x2a0/0x2a0 [ 488.004308][T12539] ? seqcount_lockdep_reader_access+0x17b/0x1d0 [ 488.010668][T12539] __se_sys_sendmsg+0x1c2/0x2b0 [ 488.015572][T12539] ? __x64_sys_sendmsg+0x80/0x80 [ 488.020595][T12539] ? lockdep_hardirqs_on+0x98/0x150 [ 488.025854][T12539] do_syscall_64+0x55/0xa0 [ 488.030340][T12539] ? clear_bhb_loop+0x40/0x90 [ 488.035087][T12539] ? clear_bhb_loop+0x40/0x90 [ 488.039828][T12539] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 488.045946][T12539] RIP: 0033:0x7fee3919aeb9 [ 488.050416][T12539] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 488.070094][T12539] RSP: 002b:00007fee3a135028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 488.078584][T12539] RAX: ffffffffffffffda RBX: 00007fee39415fa0 RCX: 00007fee3919aeb9 [ 488.086619][T12539] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 488.094642][T12539] RBP: 00007fee39208c1f R08: 0000000000000000 R09: 0000000000000000 [ 488.102661][T12539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 488.110680][T12539] R13: 00007fee39416038 R14: 00007fee39415fa0 R15: 00007ffe35ef4a58 [ 488.118735][T12539] [ 488.870948][T12561] netlink: 'syz.0.2005': attribute type 39 has an invalid length. [ 488.991975][T12558] netlink: 'syz.2.2004': attribute type 10 has an invalid length. [ 489.967364][T12575] netlink: 'syz.2.2009': attribute type 19 has an invalid length. [ 489.975274][T12575] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2009'. [ 490.264855][T12587] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.2013'. [ 490.567712][T12598] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.2016'. [ 490.602432][T12598] netlink: zone id is out of range [ 490.617009][T12598] netlink: zone id is out of range [ 490.637161][T12598] netlink: zone id is out of range [ 490.708626][T12597] netlink: 'syz.3.2017': attribute type 10 has an invalid length. [ 490.945933][ T29] INFO: task syz.1.1255:10012 blocked for more than 143 seconds. [ 490.964934][ T29] Not tainted syzkaller #0 [ 490.991057][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 491.044627][ T29] task:syz.1.1255 state:D stack:26664 pid:10012 ppid:5764 flags:0x00004004 [ 491.065972][ T29] Call Trace: [ 491.069329][ T29] [ 491.072323][ T29] __schedule+0x1553/0x45a0 [ 491.101689][ T29] ? rcu_is_watching+0x15/0xb0 [ 491.108164][ T29] ? asan.module_dtor+0x20/0x20 [ 491.118164][ T29] ? trace_contention_end+0x39/0xe0 [ 491.123615][ T29] ? perf_event_ctx_lock_nested+0x490/0x490 [ 491.133969][ T29] ? task_work_cancel+0xa5/0x220 [ 491.141961][ T29] ? task_work_cancel_func+0x210/0x210 [ 491.152090][ T29] schedule+0xbd/0x170 [ 491.156536][ T29] ? _free_event+0xfe/0xf30 [ 491.161439][ T29] _free_event+0x174/0xf30 [ 491.166463][ T29] perf_event_release_kernel+0x842/0x8d0 [ 491.172510][ T29] ? __might_sleep+0xe0/0xe0 [ 491.177398][ T29] ? calc_timer_values+0x400/0x400 [ 491.182927][ T29] ? perf_mmap+0x15c0/0x15c0 [ 491.189516][ T29] perf_release+0x3b/0x40 [ 491.194271][ T29] __fput+0x234/0x970 [ 491.199042][ T29] task_work_run+0x1d4/0x260 [ 491.203903][ T29] ? task_work_cancel+0x220/0x220 [ 491.209777][ T29] ? exit_to_user_mode_loop+0x3b/0x110 [ 491.215506][ T29] exit_to_user_mode_loop+0xe6/0x110 [ 491.221595][ T29] exit_to_user_mode_prepare+0xee/0x180 [ 491.227726][ T29] syscall_exit_to_user_mode+0x1a/0x50 [ 491.233581][ T29] do_syscall_64+0x61/0xa0 [ 491.238884][ T29] ? clear_bhb_loop+0x40/0x90 [ 491.243944][ T29] ? clear_bhb_loop+0x40/0x90 [ 491.249302][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 491.255663][ T29] RIP: 0033:0x7fe1c019aeb9 [ 491.260974][ T29] RSP: 002b:00007fe1c1029028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 491.276045][ T29] RAX: ffffffffffffffea RBX: 00007fe1c0415fa0 RCX: 00007fe1c019aeb9 [ 491.294585][ T29] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000040 [ 491.321100][ T29] RBP: 00007fe1c0208c1f R08: 0000000000000000 R09: 0000000000000000 [ 491.338307][ T29] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 491.355058][ T29] R13: 00007fe1c0416038 R14: 00007fe1c0415fa0 R15: 00007ffcae3dce78 [ 491.365781][ T29] [ 491.369118][ T29] [ 491.369118][ T29] Showing all locks held in the system: [ 491.378020][ T29] 1 lock held by khungtaskd/29: [ 491.383113][ T29] #0: ffffffff8d131fe0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 491.393274][ T29] 1 lock held by syslogd/5118: [ 491.398379][ T29] #0: ffff8880b8f3c018 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 491.449684][ T29] 2 locks held by getty/5524: [ 491.471750][ T29] #0: ffff88803134a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 491.502230][ T29] #1: ffffc9000326e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x433/0x1390 [ 491.527099][ T29] 1 lock held by syz.0.2018/12602: [ 491.541708][ T29] 1 lock held by syz.3.2020/12610: [ 491.561613][ T29] [ 491.564088][ T29] ============================================= [ 491.564088][ T29] [ 491.585274][ T29] NMI backtrace for cpu 1 [ 491.589769][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 491.597003][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 491.607139][ T29] Call Trace: [ 491.610462][ T29] [ 491.613428][ T29] dump_stack_lvl+0x18c/0x250 [ 491.618159][ T29] ? nmi_cpu_backtrace+0x1b6/0x3e0 [ 491.623319][ T29] ? show_regs_print_info+0x20/0x20 [ 491.628569][ T29] ? load_image+0x400/0x400 [ 491.633130][ T29] nmi_cpu_backtrace+0x3a6/0x3e0 [ 491.638128][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 491.644327][ T29] ? _printk+0xde/0x130 [ 491.648523][ T29] ? load_image+0x400/0x400 [ 491.653083][ T29] ? load_image+0x400/0x400 [ 491.657649][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 491.663793][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 491.669867][ T29] watchdog+0xf3d/0xf80 [ 491.674085][ T29] ? watchdog+0x1e1/0xf80 [ 491.678486][ T29] kthread+0x2fa/0x390 [ 491.682604][ T29] ? hungtask_pm_notify+0x90/0x90 [ 491.687678][ T29] ? kthread_blkcg+0xd0/0xd0 [ 491.692325][ T29] ret_from_fork+0x48/0x80 [ 491.696795][ T29] ? kthread_blkcg+0xd0/0xd0 [ 491.701431][ T29] ret_from_fork_asm+0x11/0x20 [ 491.706257][ T29] [ 491.710894][ T29] Sending NMI from CPU 1 to CPUs 0: [ 491.716642][ C0] NMI backtrace for cpu 0 [ 491.716652][ C0] CPU: 0 PID: 12610 Comm: syz.3.2020 Not tainted syzkaller #0 [ 491.716668][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 491.716677][ C0] RIP: 0010:native_apic_msr_write+0x39/0x50 [ 491.716699][ C0] Code: 74 2a 83 ff 30 74 25 eb 10 81 ff d0 00 00 00 74 1b 81 ff e0 00 00 00 74 13 c1 ef 04 81 c7 00 08 00 00 89 f9 89 f0 31 d2 0f 30 <66> 90 c3 89 f6 31 d2 e9 8b 2f 23 03 66 2e 0f 1f 84 00 00 00 00 00 [ 491.716712][ C0] RSP: 0018:ffffc90000007560 EFLAGS: 00000046 [ 491.716726][ C0] RAX: 000000000000018c RBX: ffff8880b8e28280 RCX: 0000000000000838 [ 491.716737][ C0] RDX: 0000000000000000 RSI: 000000000000018c RDI: 0000000000000838 [ 491.716747][ C0] RBP: 0000000000000000 R08: ffffffff8e8adfaf R09: 1ffffffff1d15bf5 [ 491.716757][ C0] R10: dffffc0000000000 R11: fffffbfff1d15bf6 R12: dffffc0000000000 [ 491.716769][ C0] R13: 000000001000573d R14: 000000000000018c R15: 0000000000000020 [ 491.716779][ C0] FS: 00007f41da7c96c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 491.716793][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 491.716803][ C0] CR2: 0000555570311a28 CR3: 000000007bb55000 CR4: 00000000003506f0 [ 491.716817][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 491.716826][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 491.716835][ C0] Call Trace: [ 491.716841][ C0] [ 491.716845][ C0] lapic_next_event+0x11/0x20 [ 491.716865][ C0] clockevents_program_event+0x1c0/0x310 [ 491.716889][ C0] hrtimer_interrupt+0x5a1/0x9c0 [ 491.716921][ C0] __sysvec_apic_timer_interrupt+0xfb/0x3b0 [ 491.716942][ C0] sysvec_apic_timer_interrupt+0x51/0xc0 [ 491.716960][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 491.716978][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xc0/0x120 [ 491.716997][ C0] Code: c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 41 c6 04 07 f8 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 cb 99 ce f6 65 8b 05 9c d0 75 75 85 c0 74 3c 48 c7 04 24 0e 36 [ 491.717010][ C0] RSP: 0018:ffffc900000077c0 EFLAGS: 00000206 [ 491.717022][ C0] RAX: dffffc0000000004 RBX: 0000000000000a02 RCX: 76fdc4122b673000 [ 491.717033][ C0] RDX: dffffc0000000000 RSI: ffffffff8acac900 RDI: 0000000000000001 [ 491.717043][ C0] RBP: ffffc90000007858 R08: ffffffff911bf5c7 R09: 1ffffffff2237eb8 [ 491.717055][ C0] R10: dffffc0000000000 R11: fffffbfff2237eb9 R12: dffffc0000000000 [ 491.717067][ C0] R13: ffff888034f20000 R14: ffffffff974d8438 R15: 1ffff92000000ef8 [ 491.717095][ C0] ? _raw_spin_unlock+0x40/0x40 [ 491.717117][ C0] debug_check_no_obj_freed+0x51f/0x540 [ 491.717148][ C0] free_unref_page_prepare+0x1da/0x8c0 [ 491.717181][ C0] free_unref_page+0x32/0x2e0 [ 491.717204][ C0] ? destroy_large_folio+0x170/0x2f0 [ 491.717246][ C0] skb_release_data+0x49a/0x800 [ 491.717280][ C0] __kfree_skb+0x57/0x70 [ 491.717305][ C0] tcp_write_queue_purge+0x143/0x2f0 [ 491.717332][ C0] tcp_done_with_error+0x43/0xc0 [ 491.717359][ C0] tcp_retransmit_timer+0x1728/0x3020 [ 491.717386][ C0] ? tcp_delack_timer_handler+0x440/0x440 [ 491.717409][ C0] ? read_tsc+0x9/0x20 [ 491.717426][ C0] ? ktime_get+0x24b/0x280 [ 491.717448][ C0] ? tcp_write_timer_handler+0x2f7/0x920 [ 491.717472][ C0] tcp_write_timer+0x12a/0x280 [ 491.717494][ C0] call_timer_fn+0x189/0x540 [ 491.717509][ C0] ? tcp_init_xmit_timers+0xb0/0xb0 [ 491.717529][ C0] ? call_timer_fn+0xd2/0x540 [ 491.717545][ C0] ? __run_timers+0x800/0x800 [ 491.717565][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 491.717582][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 491.717598][ C0] ? tcp_init_xmit_timers+0xb0/0xb0 [ 491.717620][ C0] __run_timers+0x542/0x800 [ 491.717642][ C0] ? detach_timer+0x2b0/0x2b0 [ 491.717661][ C0] ? lock_chain_count+0x20/0x20 [ 491.717678][ C0] ? lapic_next_event+0x11/0x20 [ 491.717701][ C0] run_timer_softirq+0x67/0xf0 [ 491.717716][ C0] handle_softirqs+0x280/0x820 [ 491.717735][ C0] ? do_softirq+0xfa/0x1a0 [ 491.717753][ C0] ? do_softirq+0x1a0/0x1a0 [ 491.717771][ C0] ? bpf_test_run_xdp_live+0x4d6/0x1b20 [ 491.717790][ C0] do_softirq+0xfa/0x1a0 [ 491.717805][ C0] [ 491.717809][ C0] [ 491.717815][ C0] ? __local_bh_enable_ip+0x1c0/0x1c0 [ 491.717831][ C0] ? lockdep_hardirqs_on_prepare+0x770/0x770 [ 491.717851][ C0] ? netif_receive_skb_core+0x230/0x230 [ 491.717873][ C0] ? rcu_is_watching+0x15/0xb0 [ 491.717896][ C0] __local_bh_enable_ip+0x184/0x1c0 [ 491.717912][ C0] ? _local_bh_enable+0xa0/0xa0 [ 491.717929][ C0] ? rcu_is_watching+0x15/0xb0 [ 491.717951][ C0] ? netif_receive_skb_list+0xc0/0x3f0 [ 491.717973][ C0] bpf_test_run_xdp_live+0x18bc/0x1b20 [ 491.718001][ C0] ? bpf_test_run_xdp_live+0x4d6/0x1b20 [ 491.718020][ C0] ? xdp_convert_md_to_buff+0x330/0x330 [ 491.718056][ C0] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 491.718085][ C0] ? xdp_convert_md_to_buff+0x5b/0x330 [ 491.718104][ C0] bpf_prog_test_run_xdp+0x7ca/0x10e0 [ 491.718130][ C0] ? dev_put+0x80/0x80 [ 491.718152][ C0] ? dev_put+0x80/0x80 [ 491.718168][ C0] bpf_prog_test_run+0x321/0x390 [ 491.718188][ C0] __sys_bpf+0x49d/0x890 [ 491.718206][ C0] ? bpf_link_show_fdinfo+0x390/0x390 [ 491.718230][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 491.718255][ C0] __x64_sys_bpf+0x7c/0x90 [ 491.718272][ C0] do_syscall_64+0x55/0xa0 [ 491.718294][ C0] ? clear_bhb_loop+0x40/0x90 [ 491.718311][ C0] ? clear_bhb_loop+0x40/0x90 [ 491.718330][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 491.718347][ C0] RIP: 0033:0x7f41d999aeb9 [ 491.718361][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 491.718373][ C0] RSP: 002b:00007f41da7c9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 491.718390][ C0] RAX: ffffffffffffffda RBX: 00007f41d9c15fa0 RCX: 00007f41d999aeb9 [ 491.718401][ C0] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 491.718411][ C0] RBP: 00007f41d9a08c1f R08: 0000000000000000 R09: 0000000000000000 [ 491.718421][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 491.718430][ C0] R13: 00007f41d9c16038 R14: 00007f41d9c15fa0 R15: 00007ffe13042cf8 [ 491.718450][ C0] [ 492.361773][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 492.368710][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 492.375946][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 492.386040][ T29] Call Trace: [ 492.389354][ T29] [ 492.392360][ T29] dump_stack_lvl+0x18c/0x250 [ 492.397102][ T29] ? show_regs_print_info+0x20/0x20 [ 492.402344][ T29] ? load_image+0x400/0x400 [ 492.406903][ T29] panic+0x2dc/0x730 [ 492.410858][ T29] ? schedule_preempt_disabled+0x20/0x20 [ 492.416543][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 492.421095][ T29] ? __irq_work_queue_local+0x13a/0x3b0 [ 492.426692][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 492.432904][ T29] watchdog+0xf7c/0xf80 [ 492.437109][ T29] ? watchdog+0x1e1/0xf80 [ 492.441490][ T29] kthread+0x2fa/0x390 [ 492.445598][ T29] ? hungtask_pm_notify+0x90/0x90 [ 492.450666][ T29] ? kthread_blkcg+0xd0/0xd0 [ 492.455297][ T29] ret_from_fork+0x48/0x80 [ 492.459760][ T29] ? kthread_blkcg+0xd0/0xd0 [ 492.464565][ T29] ret_from_fork_asm+0x11/0x20 [ 492.469398][ T29] [ 492.473033][ T29] Kernel Offset: disabled [ 492.477385][ T29] Rebooting in 86400 seconds..