last executing test programs: 2m37.246928099s ago: executing program 0 (id=988): socket$kcm(0x2, 0x3, 0x2) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x36500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_config_ext={0x62, 0x2}, 0x7602, 0x5, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff90}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400009"], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000000)) r2 = socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0xa38, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890b, &(0x7f0000000000)={r2}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000040)={'sit0\x00', @local}) 2m36.891090747s ago: executing program 0 (id=991): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000005c0)=r1, 0x12) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb01001800000000000000940000009400000003000000000000000400000d000000000e0000000100000006000000040000000f000000000000000700000005000000070000000800000c05000000080000000000000800000000090000000000000203000000010000000000001103000000ffffffff0d00000000ff010804000000020000000000000e050000000000000000000a010037a433631921994e00100400"/175], &(0x7f0000000240)=""/95, 0xaf, 0x5f, 0x0, 0x800, 0x10000}, 0x28) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000300)={0x0, 0x4, 0x8}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x6, 0x4, 0x8, 0xb, 0x2}, 0x50) r4 = perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0xd, 0x7, 0x80, 0x5, 0x0, 0x100009, 0x10, 0x7, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000140), 0xa}, 0x52, 0xfffffffffffffff8, 0x0, 0x7, 0x400ffff, 0x0, 0x1, 0x0, 0x5}, r1, 0x8, 0xffffffffffffffff, 0x9) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000040000000200000000000091030000000000000000000000000000020100000002000000000000080200000000005f"], 0x0, 0x44}, 0x20) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x9, 0x56, 0x3, 0xbb, 0x0, 0x1, 0x8010, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x1, @perf_config_ext={0x8, 0x9}, 0x3200, 0x8, 0x54, 0x6, 0x3, 0x6, 0x8, 0x0, 0x2, 0x0, 0x2}, r1, 0x10, r4, 0x8) sendmsg$unix(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001180), 0x1, &(0x7f0000000340), 0x2b, 0x4040000}, 0x4000) r5 = openat$cgroup_freezer_state(r2, &(0x7f0000000040), 0x2, 0x0) write$cgroup_freezer_state(r5, &(0x7f0000000400)='FROZEN\x00', 0x7) 2m36.659998792s ago: executing program 0 (id=993): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=r0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00afd5d1000000000000000000000000000000000000000000000000d09e7eb0f7fa85ab499ed57dfb805c10627412cffcb8ee8abd9cad7d7bf16e03b4febe1b0d47f4f310d789377c00807c649cfbb0de368f4794b98e9b1bd1635633d6f1317163d90bb2c2284b648321176e889753c00e75eb5ae1768c0fbd867d0b5fe942662df4be986a373493ce457ae23e2ff4ac56cd9f6bb523f8217374a3ed7b3e55899d3cf9ec2a43b87a2a96072165addd91efe5272cd85d021575d1db30cb6793bea26f94275e3a738bf62fb3814e77c3"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000001c0)=r5, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8b04, &(0x7f0000000080)={'wlan1\x00', @remote}) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x10200) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000008c0)=r8, 0x4) ioctl$TUNSETFILTEREBPF(r8, 0x800454e1, &(0x7f0000000200)=r1) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[], 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x22, 0x2, 0xf0, &(0x7f00000002c0)) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000500)={r7, 0x0, 0x20000000}, 0x20) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7, 0x42225bad}, 0x5004, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xa}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={0x0, 0x0, 0x26}, 0x28) socket$kcm(0xf, 0x3, 0x2) setsockopt$sock_attach_bpf(r9, 0x29, 0x23, &(0x7f0000000040), 0xcf) sendmsg$kcm(r9, &(0x7f0000001240)={&(0x7f0000000940)=@generic={0xa, "8ab77fa26849ff263ef30c98b353011a5990650042e2dacdc165ececece6be1862e2adacd2737d00ad6f9fa9f3d7145e15dd9fb1a7adc211220963ad5def53b911ba5b9da13641f982757012a7496de0b3a36f5849f260c603dbc317f54b901ee80ea6132ca6e88c776553e1833052ca376304313c5637786a36a4b83857"}, 0x80, 0x0}, 0x0) 2m36.235364752s ago: executing program 0 (id=995): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (async, rerun: 64) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x16, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000950000000000000000274cdbbc00"/32], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x8c00, 0x0) close(r1) (async, rerun: 64) r2 = socket$kcm(0x10, 0x3, 0x10) (rerun: 64) sendmsg$kcm(r2, 0x0, 0x0) (async, rerun: 32) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0/file0\x00', 0x116) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) syz_clone(0x8008000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$cgroup_type(r3, &(0x7f0000000140), 0x2, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r5) (async, rerun: 32) r6 = socket$kcm(0xa, 0x2, 0x88) (rerun: 32) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1d, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0xad08}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async, rerun: 32) sendmsg$kcm(r6, &(0x7f0000000340)={&(0x7f00000000c0)=@in6={0xa, 0x4e22, 0xffffffff, @dev={0xfe, 0x80, '\x00', 0xc}, 0x7}, 0x80, 0x0}, 0x200ce0c0) (async, rerun: 32) write$cgroup_subtree(r5, &(0x7f0000000300)=ANY=[], 0xfe33) sendmsg$inet(r6, &(0x7f0000000240)={&(0x7f0000000480)={0x2, 0x4e21, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000240)}, 0x4044884) (async) write$cgroup_pid(r5, 0x0, 0x0) (async) write$cgroup_type(r4, 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000100)) (async, rerun: 64) r8 = socket$kcm(0xa, 0x2, 0x73) sendmsg$kcm(r8, &(0x7f0000000c40)={0x0, 0x0, 0x0}, 0x4048895) (async) socketpair(0x1d, 0x1, 0x6, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8914, &(0x7f0000000080)) (async) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2m34.199549021s ago: executing program 0 (id=1001): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x4, 0x8, 0x8, 0x40}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000018c0)={0xe, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2002, 0x0, 0x0, 0x0, 0x80000}, [@generic={0x71, 0x0, 0x1, 0x65}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x107}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000002c0)=r3, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000fc0)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00010000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca711fcc9cdfa146ec56175037958e271f60d25b7937f02c8695e5a1b2cdf41dc10d1e8bf076d83923dd29c034055b67dafe6c8dc3d5d78c07fa1f7e4d5b318e2ec0e0700897a74a0091ff110026e6d2ef831ab7ea0c34f17e3ad6ef3bb622003b538dfd8e012e79578e51bc53099e90fbdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f93781965f1328d6704902cbe7bc0476619f28d99cd0aa7b73340cc2160a1fe3c184b751c51160fbce841f8a97be6148ba532e6ea09c346dfebd31a08b32808b80200000000009dd27080e71113610e10d859e8327ef03fb6c86adac12233f9a1fb9c2aec61ce63a3462fd50117b89a9ab759b4eeb8cb000067d42b4e54861d0227dbfd2ed8576a3f7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a6ea0180aabc18cae2ed4b4390af9a9ceafd07ed0030000002cab154ad029a119ca3c972780870014605c83d7d11c3c975d5aec84222fff0d7216fdb0d3a0ec4bfae563112f4b391aafe234870072858dc06e7c337642d3e5a815212f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc788bee1b47683db01a46939868d75211bbae0e7313bff5d4c391ddece00fc772dd6b4d4d0a917b239fe12280fc92c88c5b8dcdcc22ee1747790a8992533ac2a9f5a699593f084419cae0b4183fb01c73f99857399537f5dc2acb72c7eae993fc9eb22d130665b6341da114f08cd0509d380578673fffffff7f23877a6b24db0e067345560942fa629fbef2461c96a08707671215c302fae29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415e6adcda2130f5011e42e50adab988dd8e12baf5c768a40538be5f76e9c2977aab37d9a44cfc1c7b4000000000000fa47742f6c5b9c4b11e7d7262a1457c39495c826b956ba859adfe38f77b91bd7d5ca1664fe2f3ced8468911806e8916dc15e21644db60c2499d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aae73835d5a3cda9e90d76c1993e0799d4894ee7f8249dc1e3428d2129369ee1b85afa1a5be5f6eb2eea0d0df414b315f65112412392191fa83ee830548ef8e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b20428d6474a0a91ee90b8de802c6b538622e6bbcb80f87b415263c401e64ed69a2f75409000000000000001d695c4559b82cabac3cccadc1e1c19af4e03020abf5ff0433d660f20898d2a045d009a0ffb20a77c9af2b80c05184a66d30bbea2ca45a4d6d6d1e6e79aef42355a500587b603306a5af8d867d80a07f10d82eafb030621204d3ded6f260af62d91faae95196d5e3ff010000000000000be959096ea948cfa8e7194123e918914a71ad5a8521fb9553bc60f7d9719b55b3abb6bba3d113a680a8d46fe074c83fbe378a3889e8145b2eaceab05ef932c6e4f8ef0ed0d818a7b76d839cf3c63ebb4380b168c38fa32e49563cfee3a7f0fc18bfa32c418cef875fb49e2989177a30280bc586e79a5dd8076c248e7d6e97b3ce267dd4e27b6ef206660090bb2164474cef378f97ca33fc03000000000000001547053453d0c9aec91a24079b21d52fb5516bf0c28ef37aa76442f6083dc99cd61afaf6be45d7b00d3639f2f10ac2d5ffff000000000000c24411d415b6b085fb73a2c7c3852e0e658ffeb4e863428a792bee94f6cd895424360e0464f9d7ea425f2fa6aac029d15af607ad83532ff181c985f54b39370c06e63055b4d6a36fa98a44e379d28307c9912fb097601f3f88a2ca6fd1f9320cfe7fc8e9f7f15f02e177ce23f43a154b42e26f037e8a01377cbd3f509e6e540c9ba9c2a589ac5d8ad67a65e9a44c576dc24452eaa9d819e2b04bdd1c000000070000000000000000000000005333c6199c12dcd926891927a7267c47cf897853d160100b39b613faefe16bed1fc105dddd77ab929b837d54aa17eb9fbdc2bdc0e98ae2c3f23a6131e2879f04ff01000030b92dd493be66c2242f8184733b80ba28e8ffffff7f00000000bb2f89049c5f6d63d56995747639964217aacfe548bc869098aa8e07e51dbc9e2d4db3c5f79fd355222ec2a00cf7f2ccd6dd6d2dc2a815d8314221a5472f1318a9dfbec5a759579caf3262129b14e99040b5d91398e17df85c25ccae973eecc7d187168d5c9cd848d566cc17587641ed01889c927da38d83314480b15e23138c5b877a72bd4cf74a299df4fbfc8e6ea96939f15d254d9033c5a45706bda78ab60200000000000000000000000000000000000000706f78f0a2ea9667fb5b951808545a46830970c2dfae01adbda7d29bf1f7abdaf52e0de6f9d7150808ed086642e64ebf98762b34338b80e41b704c3eefaf0bb5f7d895de17a10b0a0ea15ccc0d7a830b6eb33b6b21675511d693ef5e3c44bbf71cabc5175d879e7499f8baae2a1a09cf38da73297764fbc0e723e1cc3abb12e3076982ed32c94a2ce3e6f37c47e983da4ca5c96187db5a2a2e1742bc93a65d7187126126b3a80f17dd2f7dbbe82d104ede9ba6925afc2ee6cb94f56f1363cad635abf8f983292c49c0ebf5005154c7b58a3a2a2e5a00d2f953a86d2fd92b8661264f781e3fb02d05a28f3f17b64d0258853d45cb5ebde10cd3d82eeed2f1ed925b7cf400304932c5ed0a362b235ce37e1f17700f7d1fecf8be8a2c5d25a9c60657560d05441387ff158a018d19a286c56d0886eb59d509ee89cc2df52881d005b2e5c27563ba54e4153c132d0366a9660000000000000009c1aaec93ec0f925921fb2e9eb202a29bef28224dbabe723de5c584bc398a8792e493048c87f60a51a391e959212181d4bf32ed89c96d421c8171698c49403558fd13c649f90b0911d57eeb298b590581eba1ce383b539ab80fd15445987b1bb4eb512545e1ab65fef310e10b1ee362b51c72f82edf2f502ddf52567775e34a56d1be892f1e62b08950d517fa6fb1b0ef2edf1b67f8644786116b037d4a36fdd30b000063e58c856ec44cbbc2d370553f832af9480215e09aaa3843fe360b1c293a14627f2cfbe278f31d0abc0f5aaa10926dbbfe8a4b131c13a73d4e6d065c2c0fed3ab8442520ce0e0ad7d2d177377ab197ace3ef8b1c24ceb0bdee84bd6e6317633938dd19dc42de7f8f860eca6d9c74525fcd3497526df4c13e3ba5f0d75365a4542ae9440d2fede416d618cdaaf7e038879c5d177b3876fda4121e15a00adb976064a93e8d000000000000903350932d3eef7fdada20c19807066e2c72d0d816eb9fa50be213bf6bbb7ccb9f2e8a153e6ced68f192ebed6e86af0f2cec7335fa8039fd6eb025440bc2a34d071f0a0e6774308a2c5986aa9200a1306ffa5a71ca69e89a6980612b35fc858f37c2c398515a910a35e22ab0573c10b85df4c2972a2fb8b9c080fbb41a753791df727fdeadc5cf218a6eda31312256191c620cce34d1e3bf40a4a207ab1575b399eb8155781bfc7cb5920b49c039935a888d77041814f60fbbcafa487ee96b368e8769da90b44190e569fe8b1d155d0765baaca5c5548b5a78bb43e5d9e47a1d5809bb178184b5672d08e29aecf1f572ac1e6cab7e820751beed5f79de29a67a579150bfb31232d296b9d2977ed027ca90af7088d6466f1501d96a32bfa3cf9ab0dcd626ac9341833e92685af6917ae05473ae4768341426e244159b3c3e002b6f8ee80cbe6e26c816ab92658d956d849cd3a21ebf4b143d338035cd91f087633aa668e0644b05dc5a7937cd5fb62bd08242a858aeeda8c0cbb4fc2478a8155b859e88493f322702277939832bd4a1d8109f98c5a187564c9eb80acc63ac57459593c81ce8998e38ea231b81ebaa6b242ebdf382d70232f1d8e516a8eaf39d09ea40198cf1b72eb5ce5327d3a3861470be47a9a9dbf569e6f6f474fd1448adfd70c4f4a4487edaf193a00a808389a110a4286905ba81309735f6ac5d2ba7ab2be01fa25c11dbb3170258e9d9fed944fd85c03336a49f7016517a1988bc84ee301e167d3cf88c46c4eba6e2bfd099acd2eec5c624679aa7ebab76061a9ca792bffe3d6df4dbe70b5cab6299a51e63826fd0bda4846d06e322ebd745e73da718ba0c93e7567df9ed7ea8d2fdbde44e65a4cd01748b"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0xff6c}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0x56, 0x0, &(0x7f0000000100)="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", 0x0, 0xfb, 0x60006000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000001c40)="beb61ec2ca90080239f2a54e2368fa761313c3a024a98109ba1e2e7b780d03c54b7a83d56fce397842e724674507d531762055fca371ea775f418df7bee236c9b9968146efb3232ae3413b617445e98bb644a892b9337f1a9135d9f30457a8ffb21aef4a95a155fab70a40b086056b0f63331a66b3457c", 0x2}, 0x2c) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008110e00f80ecdb4cb9f207c804a018000000880803fb0a000200250ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 2m33.089880127s ago: executing program 0 (id=1005): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000280)="d8000000140081054e81f782db44b9040a1d08020a000000040000a118000200fe80000000000e1208000f0100a10401a80016eaa4000640feffffffffffffffb94dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c817bd6c496ddffaa2795edb1e61e0100000000000000cb090000001fb791643a5ee4001b14547df36745d6d930dfe1d9d322fe7c9fd68775730d96a4683f5aeb4edbb57a5025ccca9e00158c89ed6cb4d1ac95e7765e04c2360db70100000040fad95667e0060000000000000080bb9ad809d5e1", 0xcf}], 0x1, 0x0, 0x0, 0x7400}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000001, 0x8}, 0x7602, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r5 = openat$cgroup_type(r4, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r5, &(0x7f0000000280), 0x9) r6 = openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(r6, &(0x7f0000000080), 0x12) r8 = openat$cgroup_ro(r7, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000200)=0x1, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_procs(r9, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r10, &(0x7f00000001c0), 0x12) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="12000000040000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r11}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r11}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r0}, 0x20) syz_clone(0xc0126080, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x6d}, @printk={@s, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x10}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={0xffffffffffffffff}, 0x1) 2m18.058095713s ago: executing program 32 (id=1005): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000280)="d8000000140081054e81f782db44b9040a1d08020a000000040000a118000200fe80000000000e1208000f0100a10401a80016eaa4000640feffffffffffffffb94dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c817bd6c496ddffaa2795edb1e61e0100000000000000cb090000001fb791643a5ee4001b14547df36745d6d930dfe1d9d322fe7c9fd68775730d96a4683f5aeb4edbb57a5025ccca9e00158c89ed6cb4d1ac95e7765e04c2360db70100000040fad95667e0060000000000000080bb9ad809d5e1", 0xcf}], 0x1, 0x0, 0x0, 0x7400}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000001, 0x8}, 0x7602, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r5 = openat$cgroup_type(r4, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r5, &(0x7f0000000280), 0x9) r6 = openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(r6, &(0x7f0000000080), 0x12) r8 = openat$cgroup_ro(r7, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000200)=0x1, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_procs(r9, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r10, &(0x7f00000001c0), 0x12) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="12000000040000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r11}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r11}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r0}, 0x20) syz_clone(0xc0126080, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x6d}, @printk={@s, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x10}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={0xffffffffffffffff}, 0x1) 4.142316262s ago: executing program 2 (id=1966): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7f, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x4, 0x0, 0x0, 0x0, 0x200002009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800"/13], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_config_ext={0x0, 0x3fff8002}, 0x5025, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x19d5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) 3.966352566s ago: executing program 2 (id=1970): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7}]}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000005000000000000000100000408000000000000000300000002000000000000000000000200000000030000000000000f040000000000002e"], 0x0, 0x4d}, 0x20) ioctl$TUNGETVNETLE(r0, 0x40107446, &(0x7f0000000180)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x4004743d, 0x110e22fff6) write$cgroup_type(r2, &(0x7f0000000280), 0x9) openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x18, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018030000", @ANYRES32, @ANYBLOB="0000000000000d00b70500000800000085000000060000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x26e1, 0x0) close(r3) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110c23003f) write$cgroup_devices(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="80fd", @ANYRES64=r3], 0xa) 3.78705562s ago: executing program 2 (id=1971): openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5}, 0x50) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x120a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2b8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x2, 0x3, 0x2) socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x7}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x2, 0x3, 0x2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe0}, 0x10022) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_cpus\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) socket$kcm(0x11, 0x200000000000002, 0x300) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x161) sendmsg$inet(r3, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000380)=0x9) socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x10d602, 0xac5d}, 0x0, 0x3, 0xffffffffffffffff, 0x0) 3.669597963s ago: executing program 4 (id=1972): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x10, 0x0, 0x0) getpid() sendmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000680), 0x0, 0x10}, 0x10044001) write$cgroup_pid(r0, &(0x7f0000000400), 0x12) recvmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x80000001, 0x0}, 0x2002) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x2}, 0x1000, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3efd7ab4c41335d9, @perf_config_ext={0x7, 0x4}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB], 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000340)=ANY=[@ANYBLOB="050000000000000063114300000000008510000002000000850000000500000095000000000000009500a50500000000c683f99ba43890fcb9a046a5ce9e40bcf98f899eb454d03e17"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) 3.511830467s ago: executing program 4 (id=1973): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015000200142603600e1208000f", 0x2b}], 0x1}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2688f54c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @multicast2}, 0x10, 0x0}, 0x3000c085) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetlb.1GB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000100)=r2, 0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x42) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x78}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x80) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0xbc}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="54ae1f8219560625baa794a469ce", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000a4b90000000c00000009000000070000000000000800000000000000000000006100"], 0x0, 0x2d}, 0x12) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1, 0x6, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r7, 0x0, 0x4}, 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8914, &(0x7f0000000080)) write$cgroup_devices(r3, &(0x7f0000000740)=ANY=[@ANYBLOB="1e030a004d8c71ef2685634a8270e7123c00000000000000000000000000ac1414cf14"], 0xffdd) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB="050000000000000071114000000000008510000002000000850000007d00000095003300000000009500a5050000000091495768922cad80a69e987aef2aec50f0e03bcc731cb3e845558af048dcb5e064d51f2ef28bad29f3a3f5a67440d72a13567800fbfcb2697e2dab"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES32=r8, @ANYRES16=r8], 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x2, 0x0, r2, 0x61f, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x1}, 0x50) r9 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x29, 0x0, 0x0) write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001a00599c6d0e000091d028ef80"], 0xfe33) 3.509214697s ago: executing program 3 (id=1974): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000008400000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 3.406258689s ago: executing program 3 (id=1975): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x8}, 0x100e64, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x0, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={&(0x7f0000000100), 0x4}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r1}, 0x8) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x2000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x10, 0x0, 0x9, 0x64189, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={&(0x7f00000003c0), 0x8}, 0x11a428, 0x32, 0x43a1bd76, 0x7, 0x9, 0x3, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x2, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0xa, 0x2, 0x73) r4 = socket$kcm(0xa, 0x2, 0x73) close(r4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000100081044e81f782db44b904021d08000b000000e8fe55a1180015000600142603600e1209000d00e803c9", 0x2f}], 0x1}, 0x40001) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfe33) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0xd, 0x7, 0xfe, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0xffffffffffffffff, r0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1a, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000001000850000002200000085"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcf3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xe, &(0x7f0000001980)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x20, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x1}, 0x10}, 0x94) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000580)="d8000000140081044e81f782db44b9040220080207000000040000a118000200e000000100000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843c8802033d0803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x0, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x26e1, 0x0) close(r7) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000b80)="d8000000150081044e81f782db44b9040a87080211000000040000a118000200e000000800000e1208000f0100810401a80016ea1f000940032e5f54c92011148ed08734843cb12b00000803600cfab44dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d1688683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bbfe5a09d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x4000884) socket$kcm(0x10, 0x2, 0x10) ioctl$SIOCSIFHWADDR(r7, 0x8b05, &(0x7f0000000000)={'wlan1\x00', @broadcast}) 3.252591293s ago: executing program 2 (id=1976): r0 = socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x8, 0xfffffffffffffff0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x800, 0x0, 0x80000000}, {0x1000000a, 0x4}], 0x10, 0x40004}, 0x94) close(0x3) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000200000000000000000000437a0280000000000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0xb, &(0x7f0000000080)=""/11, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2a}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) r3 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) close(0x3) socket$kcm(0xa, 0x5, 0x0) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x11}, 0x6, 0x10000}, 0x80, 0x0}, 0xd0a0) setsockopt$sock_attach_bpf(r3, 0x84, 0x64, &(0x7f0000000000)=r6, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x10000002}]}, 0x90) r7 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="020000000400000004000000010000001410"], 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000001c0)={r11, 0xffffffffffffffff, 0x60000000}, 0xc) close(r9) recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xb}, 0x4) setsockopt$sock_attach_bpf(r7, 0x84, 0x75, &(0x7f0000000000)=r12, 0x8) sendmsg$kcm(r0, &(0x7f00000017c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x80fe, 0x7, @dev={0xfe, 0x80, '\x00', 0x33}, 0x12, 0x2}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000004c0)="7f", 0x1}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000084000000070000007f00000000000000b8"], 0xd0}, 0x480c4) 3.027983858s ago: executing program 2 (id=1977): r0 = socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x5, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="110000000400000004"], 0x48) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x5}, 0x110c0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async) socket$kcm(0x10, 0x3, 0x10) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x25, &(0x7f0000000200), 0x4) socket$kcm(0x10, 0x2, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xe8001, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) (async) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) (async) ioctl$TUNSETOFFLOAD(r1, 0x400454c9, 0xba98575a95aeb70d) (async) ioctl$TUNSETLINK(r1, 0x400454cd, 0x301) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0xc000000, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x100904}, 0x0, 0x7, 0xffffffffffffffff, 0x0) (async) socket$kcm(0x10, 0x100000000002, 0x4) (async) sendmsg$kcm(r0, 0x0, 0x0) (async) socket$kcm(0xa, 0x2, 0x0) (async) socket$kcm(0xf, 0x3, 0x2) (async) r3 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r3, 0x0, 0x0) (async) socket$kcm(0xa, 0x2, 0x73) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x3, 0x300a8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffff802, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r4 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetlb.1GB.usage_in_bytes\x00', 0x26e1, 0x0) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x502b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x4, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000015c0)=@ll={0x11, 0xf8, 0x0, 0x1, 0x4, 0x6, @random="77c0b5e26439"}, 0x80, &(0x7f0000001a00)}, 0x4005) 2.812009553s ago: executing program 1 (id=1979): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7f, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x4, 0x0, 0x0, 0x0, 0x200002009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800"/13], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_config_ext={0x0, 0x3fff8002}, 0x5025, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x19d5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) 2.683900957s ago: executing program 1 (id=1980): bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xd, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000e6ffffff0000000000000000850000004100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000008200000095"], &(0x7f0000000280)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x502b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x4, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x1, 0x4, 0x8}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/ipc\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0xb704, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = syz_clone(0x92006100, &(0x7f0000000680)="76da6d660b1d5243e79974b1a95ecd49c10390b890485bfae662364f71d34b8b258d18b96de57d34c1486251471d7cef8d3b6caba6aa94b3364323f0344a36faad2533a4d312918cbc612dd0383ee00c141630f92931b85f7fea112a5141dbc1a01718c46b713e297a401607cd82926e1f5028f0ffa2e617555586a5bbe44a1cab32de888eb0112a51d82bbb2ab6d1b9a38ad3c29aacc70750ea4fd74cd2164cdfd4d9b48096485894c3743a9e0c51f31f366f53351bb05b93cb5569d3f958ffdd4cfd8a46d869cbc10d", 0xca, &(0x7f0000000780), &(0x7f00000007c0), &(0x7f0000000900)="14d3526e39ce4b927be128982d1752a0343248e07df558399611689bc45499bd79b5b1b36638bdc9697e6a6cbc545df6e91bde3df38368957d98046ca00fde2f514839601dda4fea4156b630b49f2a31564e2d86819dc5ea662c1a503d84660b67e975f7395db57b0b8455618259433f7b049ce419aafef1bbd7386230e32b49f0c0") perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8}, r8, 0x7, 0xffffffffffffffff, 0x0) r9 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r9, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x30004001) setsockopt$sock_attach_bpf(r9, 0x1, 0x24, &(0x7f0000000000), 0x4) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d80000001a0081044e81f782db4cb904021d08007b490d4f1e81f8d8150001e0e000000103600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x4000000) socket$kcm(0x10, 0x2, 0x0) close(0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000028c0)={0xffffffffffffffff, 0xe0, &(0x7f00000027c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000002600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, &(0x7f0000002640)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000002680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x29, &(0x7f00000026c0), 0x0, 0x10, &(0x7f0000002700), &(0x7f0000002740), 0x8, 0x30, 0x8, 0x8, &(0x7f0000002780)}}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002980)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000002900), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000002a80)={0x1c, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x80000001, 0x1000, &(0x7f0000001580)=""/4096, 0x40f00, 0x1, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f0000002580)={0x3, 0x2}, 0x8, 0x10, &(0x7f00000025c0)={0x3, 0x4, 0x5, 0xd}, 0x10, r11, 0xffffffffffffffff, 0x0, &(0x7f0000002a00)=[r12, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x7}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000c00)={r4, 0xffffffffffffffff}, 0x4) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=@base={0x1, 0x10, 0xc9, 0x1000, 0x6414, r4, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x2}, 0x50) r15 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d00)=@generic={&(0x7f0000000cc0)='./file0\x00'}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x7, 0x13, &(0x7f00000009c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x588c}, [@btf_id={0x18, 0x4, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x7, 0x0, 0x9, 0xfffffffffffffffc, 0xfffffffffffffff0}, @map_fd={0x18, 0x4, 0x1, 0x0, r0}, @generic={0x8, 0x6, 0x5, 0x5, 0xb7d7}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @exit]}, &(0x7f0000000a80)='syzkaller\x00', 0xa, 0xba, &(0x7f0000000ac0)=""/186, 0x41000, 0x1, '\x00', 0x0, @fallback=0x29, r7, 0x8, &(0x7f0000000b80)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0xb, 0x6, 0x8}, 0x10, r11, r1, 0x4, &(0x7f0000000d40)=[r13, r4, 0xffffffffffffffff, 0x1, r0, r14, r0, r15, r4], &(0x7f0000000d80)=[{0x5, 0x3, 0x9, 0x5}, {0x5, 0x1, 0x7, 0x7}, {0x0, 0x1, 0x5, 0xa}, {0x2, 0x2, 0xf, 0x8}], 0x10, 0x2}, 0x94) 2.603569908s ago: executing program 1 (id=1981): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x20800, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x29, 0x2, 0x0) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x308) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r4 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f00000017c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x80fe, 0x7, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x12, 0x2}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000004c0)="7f", 0x1}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000084000000070000007f00000000000000b8"], 0xd0}, 0x480c4) r5 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r5, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x20, &(0x7f0000000680)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b904021d0802010000001c00f0a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x20004800) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r5, r3}) sendmsg$kcm(r2, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x11) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x90880, 0x0) close(r7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) 1.27544157s ago: executing program 3 (id=1982): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x10, 0x0, 0x0) getpid() sendmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000680), 0x0, 0x10}, 0x10044001) write$cgroup_pid(r0, &(0x7f0000000400), 0x12) recvmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x80000001, 0x0}, 0x2002) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x2}, 0x1000, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3efd7ab4c41335d9, @perf_config_ext={0x7, 0x4}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB], 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000340)=ANY=[@ANYBLOB="050000000000000063114b00000000008510000002000000850000000500000095000000000000009500a50500000000c683f99ba43890fcb9a046a5ce9e40bcf98f899eb454d03e17"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) 1.180234992s ago: executing program 4 (id=1983): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64239, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x3, @perf_config_ext={0x8, 0x7ff}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x4000000000200c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x11, 0xa, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000000000000008100000081"], 0x48) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00', 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r0, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x9, &(0x7f0000000080)=[0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xb2, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0x9a, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000540)=r1) 1.122826063s ago: executing program 3 (id=1984): r0 = socket$kcm(0xa, 0x5, 0x0) (async) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x10c511, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x1) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) (async) setsockopt$sock_attach_bpf(r0, 0x29, 0x4a, 0x0, 0x2000000) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071120d000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 490.561149ms ago: executing program 1 (id=1985): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_config_ext={0x0, 0xffffffffffffff80}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000400)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) (async) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r3 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r2}, 0x8) close(r3) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r4, @ANYBLOB="0100000002"], 0x40) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000001100)={r5, &(0x7f0000000100), &(0x7f0000000000)=""/95, 0x2}, 0x20) r7 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r7, 0x0, 0x0) (async) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) perf_event_open(&(0x7f00000004c0)={0x4, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa06a6, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x100000001}, 0x90, 0xa4, 0x2, 0x9, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x1) (async) syz_open_procfs$namespace(0x0, 0xfffffffffffffffc) (async) r9 = perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0xf}, 0x9020a, 0x2, 0x310c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0xa) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000780)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31, @ANYRES16=r8, @ANYRES8=r6, @ANYBLOB="396636be5be0e71a666e7a90529f09d484bf924b97dcf14e29cfdf8a42424471beeedc689b635ad269a8e577e8aa4cc65be9df20b638f40f2d1fd6e0e821b27f832f93c4fe956ae0c10e00694140a266206c399ee82f5060d12194bc5cbec750acb2824dba712540b347c922368425e5b1a5", @ANYRES8], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup/syz1\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8948, &(0x7f0000000000)='lo:\x96o8\x14d\xa1\xe3\xd7\\b}\x1f\xa1Y\xad4\x00 \'Y\x17]\x15c\xcaR\xdd\x98OGK\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\xf5\a\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'5\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\x06\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf1\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\r\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5\xdcZ\xb9\xd7Z\x88\x9b\xdff[\x90\xfa\x9a{b\xf4Dq') (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b9040a1d080006007c3ee2e4a4a10a0015577a467de3ec95931208001e0000000401040016004000014003000000036010fab94dcf", 0x43}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40800) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000001000004000000ee00000000000094f7", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000400)="d903b97a53794f7750bee06d5133ec41bcefce83250daf2e8200f303aeec9cde3d4d784c872c85867462a5f3d887dcfd37554d5516d8640f54ded212b3336de8b894561761bafed84c5c798dbce628d19addcfdae954c48a1ba0ebb8ae5845dac1c2a89b2b1f8603db286e8decd2b523a4750866af95ec9129b1029c75195a25f0a7709e8d92a9b549ba5a6fcdb3f877a72929b25ceaadd1e477e8598cafe2a6a65b3305b68763e629f4f6ba5cd5a8cd933f704573e81b7eae057506", 0x1003, r9}, 0x38) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000b80)={r11, &(0x7f00000014c0), &(0x7f0000000b40)=""/31}, 0x20) (async) unlink(&(0x7f0000000080)='./cgroup/cgroup.procs\x00') 416.253071ms ago: executing program 2 (id=1986): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), 0x25, 0x0, 0x0, 0x48850}, 0x0) recvmsg(r0, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=""/175, 0xaf}, 0x0) 407.997531ms ago: executing program 3 (id=1987): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="0300fdffff00000000"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x2b, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r1, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040)=0x8000) socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x8000, 0x10000, 0x364, 0x5, 0x4, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x19, 0x4, 0x4, 0x24a3f877, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x9, 0x2, 0xa, 0xc, 0x8}, 0x50) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r3, &(0x7f0000000040)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000000500)=[{&(0x7f00000006c0)="27031c00160014000000002f1eafacf706e105400000655800050003ee0b80558ddbba9b37242d37a518fc9c5be50eaf07c3650596", 0x35}], 0x1}, 0x4) r4 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r4, 0x10d, 0xa, &(0x7f0000000000), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffffc}, 0x50) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={0xffffffffffffffff, 0xffff0000, 0x24, 0x0, &(0x7f0000000040)="a9e9f8a9b96588d7802b9654d89f62a7adfc97a372cd0e648051c253cc135ad850bfa221", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000003700"/24], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) 389.404871ms ago: executing program 4 (id=1988): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7f, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x4, 0x0, 0x0, 0x0, 0x200002009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800"/13], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_config_ext={0x0, 0x3fff8002}, 0x5025, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x19d5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) 282.341723ms ago: executing program 1 (id=1989): bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xd, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000e6ffffff0000000000000000850000004100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000008200000095"], &(0x7f0000000280)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x502b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x4, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x1, 0x4, 0x8}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/ipc\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0xb704, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = syz_clone(0x92006100, &(0x7f0000000680)="76da6d660b1d5243e79974b1a95ecd49c10390b890485bfae662364f71d34b8b258d18b96de57d34c1486251471d7cef8d3b6caba6aa94b3364323f0344a36faad2533a4d312918cbc612dd0383ee00c141630f92931b85f7fea112a5141dbc1a01718c46b713e297a401607cd82926e1f5028f0ffa2e617555586a5bbe44a1cab32de888eb0112a51d82bbb2ab6d1b9a38ad3c29aacc70750ea4fd74cd2164cdfd4d9b48096485894c3743a9e0c51f31f366f53351bb05b93cb5569d3f958ffdd4cfd8a46d869cbc10d", 0xca, &(0x7f0000000780), &(0x7f00000007c0), &(0x7f0000000900)="14d3526e39ce4b927be128982d1752a0343248e07df558399611689bc45499bd79b5b1b36638bdc9697e6a6cbc545df6e91bde3df38368957d98046ca00fde2f514839601dda4fea4156b630b49f2a31564e2d86819dc5ea662c1a503d84660b67e975f7395db57b0b8455618259433f7b049ce419aafef1bbd7386230e32b49f0c0") perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8}, r8, 0x7, 0xffffffffffffffff, 0x0) r9 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r9, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x30004001) setsockopt$sock_attach_bpf(r9, 0x1, 0x24, &(0x7f0000000000), 0x4) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d80000001a0081044e81f782db4cb904021d08007b490d4f1e81f8d8150001e0e000000103600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x4000000) socket$kcm(0x10, 0x2, 0x0) close(0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000028c0)={0xffffffffffffffff, 0xe0, &(0x7f00000027c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000002600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, &(0x7f0000002640)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000002680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x29, &(0x7f00000026c0), 0x0, 0x10, &(0x7f0000002700), &(0x7f0000002740), 0x8, 0x30, 0x8, 0x8, &(0x7f0000002780)}}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002980)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000002900), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000002a80)={0x1c, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x80000001, 0x1000, &(0x7f0000001580)=""/4096, 0x40f00, 0x1, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f0000002580)={0x3, 0x2}, 0x8, 0x10, &(0x7f00000025c0)={0x3, 0x4, 0x5, 0xd}, 0x10, r11, 0xffffffffffffffff, 0x0, &(0x7f0000002a00)=[r12, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x7}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000c00)={r4, 0xffffffffffffffff}, 0x4) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=@base={0x1, 0x10, 0xc9, 0x1000, 0x6414, r4, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x2}, 0x50) r15 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d00)=@generic={&(0x7f0000000cc0)='./file0\x00'}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x7, 0x13, &(0x7f00000009c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x588c}, [@btf_id={0x18, 0x4, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x7, 0x0, 0x9, 0xfffffffffffffffc, 0xfffffffffffffff0}, @map_fd={0x18, 0x4, 0x1, 0x0, r0}, @generic={0x8, 0x6, 0x5, 0x5, 0xb7d7}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @exit]}, &(0x7f0000000a80)='syzkaller\x00', 0xa, 0xba, &(0x7f0000000ac0)=""/186, 0x41000, 0x1, '\x00', 0x0, @fallback=0x29, r7, 0x8, &(0x7f0000000b80)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0xb, 0x6, 0x8}, 0x10, r11, r1, 0x4, &(0x7f0000000d40)=[r13, r4, 0xffffffffffffffff, 0x1, r0, r14, r0, r15, r4], &(0x7f0000000d80)=[{0x5, 0x3, 0x9, 0x5}, {0x5, 0x1, 0x7, 0x7}, {0x0, 0x1, 0x5, 0xa}, {0x2, 0x2, 0xf, 0x8}], 0x10, 0x2}, 0x94) 250.081635ms ago: executing program 4 (id=1990): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x3, &(0x7f0000000000)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x1}, @alu={0x7, 0x1, 0x1, 0x5, 0x9, 0x40}], 0x0, 0x8d8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x27}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64239, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x3, @perf_config_ext={0x8, 0x7ff}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x4000000000200c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x19, &(0x7f0000000000), 0x4) sendmsg$inet(r1, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x8000) recvmsg$unix(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)}, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x46, &(0x7f0000000040), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000540000000000000000000000850000006300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 206.305735ms ago: executing program 3 (id=1991): perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0xfe, 0x1, 0x4, 0x6d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3ffff}, 0x0, 0x4000000000000200, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xf6, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x3}, 0x6000, 0x0, 0x0, 0x6, 0x0, 0x2000000a, 0xfffc, 0x0, 0x5}, 0x0, 0x1, 0xffffffffffffffff, 0xd) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x40086602, 0x14) (async) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f00000001c0)=""/236) r1 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x23, &(0x7f0000000040), 0xcf) 52.040939ms ago: executing program 4 (id=1992): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x10, 0x0, 0x0) getpid() sendmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000680), 0x0, 0x10}, 0x10044001) write$cgroup_pid(r0, &(0x7f0000000400), 0x12) recvmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x80000001, 0x0}, 0x2002) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x2}, 0x1000, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3efd7ab4c41335d9, @perf_config_ext={0x7, 0x4}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB], 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000340)=ANY=[@ANYBLOB="050000000000000063119b00000000008510000002000000850000000500000095000000000000009500a50500000000c683f99ba43890fcb9a046a5ce9e40bcf98f899eb454d03e17"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) 0s ago: executing program 1 (id=1993): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x4, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000600)={r2, r1}) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000011008188040f46ecdb00e3bd6efb4400080000000a000f00000aba8000001201", 0x24}, {&(0x7f0000000200)="cc182c338cba61617516", 0xa}], 0x2}, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa8, 0xa8, 0x6, [@enum64={0x7, 0x2, 0x0, 0x13, 0x0, 0xa, [{0x7, 0x9, 0x4}, {0xc, 0x2, 0xb941}]}, @enum64={0xe, 0x5, 0x0, 0x13, 0x0, 0xa, [{0x1, 0x8, 0x8}, {0x11, 0x0, 0x4}, {0x7, 0x7, 0xfffffffd}, {0x6, 0x8, 0x5}, {0xf, 0x0, 0x1}]}, @union={0x10, 0x3, 0x0, 0x5, 0x1, 0x2, [{0xc, 0x1, 0x3}, {0x2, 0x1, 0x3}, {0x9, 0x1, 0x5}]}, @fwd={0x4}]}, {0x0, [0x2e, 0x0, 0x30, 0x0]}}, &(0x7f0000000400)=""/114, 0xc6, 0x72, 0x0, 0xc90e, 0x10000}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000026c0)={0xffffffffffffffff, 0x20, &(0x7f0000002680)={&(0x7f00000015c0)=""/4096, 0x1000, 0x0, &(0x7f00000025c0)=""/153, 0x99}}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x50}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x42}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) r6 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x200, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5200, 0x8001}, 0x104101, 0x4, 0x1, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0xf, 0x5, &(0x7f0000000a40)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$kcm(0x29, 0xa, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000640)={r8}) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x204800, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000980)=ANY=[@ANYBLOB="18000000000000000000000007000000950000000000000076716163ff2cdeb095fc2a99c42a442bf0e699aa5d24f36db47d9003816ad835d2036b7afbbdc0a9796ae92d942c9b4b5327fb902062d50e7751a15be365bf34f15de2cc7d460e9ce9fdeef032ea19841fac6e6995af3c730430bfd526f66c89d170d695c1d2e88146c8b573f668e196fd2f057e0d1d4a0b765d83bf27d82a010c627f41879b7fc5c6dee89f68665b9800e9f1368d2f04d64456dc04aca1e451"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r11}, 0x94) r12 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000007c0)={0xffffffffffffffff, 0xfffffffe, 0x18}, 0xc) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=ANY=[@ANYRES16=r5, @ANYBLOB="3d7807efb611de9850fc5f505e46d30578945bbc30fda670e919e601c353452141315e66cd246f57168ea9476f520c459eefd4c22b785e036dd3ab62abdc0dfba8937cdd2768ae019c2d99a4fff791aa9ff55dbbea87f0f9fc368062d7e06739ee457404d91b63a8083fdc73c03c4b128079ee71db30a7db788df5caec2f6f1dd55902fb438c2b78c48bc7f4095d92389e11cb669b6c2eaa474407800ee63dd5f809b66a15d5cdd751106904bda497e8f5bf7be238c312f50aaf85539991c8068acbe700629f246c6342984a23bcc390b71f46ffa6413e25b7a7b53cd0", @ANYRES32=r12, @ANYRES32=r4, @ANYRES16=r9, @ANYBLOB="c80a834cc4ff70210900000000000000bc6c4614600229323153c9c1"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="18020000f8ffffff0000000000000000850000003600000018110000", @ANYRES32=r13, @ANYBLOB="000000c64ef70000000000b70200000000000085000000860000009500000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000008c0)=@bpf_lsm={0x1d, 0x5, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0xcc6, 0x0, 0x0, 0x0, 0x8}, [@map_idx={0x18, 0x7, 0x5, 0x0, 0x3}]}, &(0x7f00000006c0)='syzkaller\x00', 0x8, 0x18, &(0x7f0000000700)=""/24, 0x40f00, 0x41, '\x00', r11, 0x1b, r3, 0x8, &(0x7f0000000740)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000780)={0x0, 0x10, 0xe, 0x8}, 0x10, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000800)=[r12, r13], &(0x7f0000000840)=[{0x5, 0x3, 0x4, 0x5}, {0x0, 0x5, 0x4, 0xa}, {0x3, 0x1, 0x9}, {0x2, 0x4, 0x5}, {0x4, 0x1, 0x6, 0xa}, {0x2, 0x1, 0xe, 0x5}, {0x3, 0x1, 0xe, 0xc}], 0x10, 0x4dc}, 0x94) ioctl$TUNSETQUEUE(r10, 0x400454d9, &(0x7f00000005c0)={'batadv0\x00', 0x400}) r14 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000bc0)=ANY=[@ANYRES64=r10], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', r11}, 0x94) r15 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r15, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600073582c137153e37080c18800bac0f000300", 0x33fe0}], 0x1, 0x0, 0x0, 0x8100000}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r16 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r16, 0x29, 0x38, 0x0, 0x1300) socketpair(0x1f, 0x3, 0x0, &(0x7f0000000540)) bpf$PROG_LOAD(0x5, &(0x7f0000002700)={0x7, 0x3, &(0x7f0000000100)=@raw=[@map_idx_val={0x18, 0x6, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x800}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], &(0x7f0000000140)='GPL\x00', 0x8, 0xbc, &(0x7f0000000240)=""/188, 0x41000, 0x54, '\x00', 0x0, @fallback=0x15, r3, 0x8, &(0x7f00000004c0)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000500)={0x4, 0x8, 0x3, 0x8}, 0x10, r4, r1}, 0x94) kernel console output (not intermixed with test programs): 289] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.092191][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.436945][ T7989] validate_nla: 12 callbacks suppressed [ 563.436956][ T7989] netlink: 'syz.3.569': attribute type 21 has an invalid length. [ 563.452056][ T7989] netlink: 164 bytes leftover after parsing attributes in process `syz.3.569'. [ 563.473303][ T7990] netlink: 'syz.3.569': attribute type 1 has an invalid length. [ 563.481944][ T7990] netlink: 145048 bytes leftover after parsing attributes in process `syz.3.569'. [ 564.032368][ T8000] netlink: 14 bytes leftover after parsing attributes in process `syz.2.572'. [ 564.321430][ T8009] __sock_release: fasync list not empty! [ 564.429617][ T8014] netlink: 'syz.0.576': attribute type 39 has an invalid length. [ 564.548482][ T8012] netlink: 14560 bytes leftover after parsing attributes in process `syz.1.575'. [ 564.683263][ T5973] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 565.083394][ T8024] netlink: 'syz.0.579': attribute type 2 has an invalid length. [ 565.100069][ T8024] netlink: 8 bytes leftover after parsing attributes in process `syz.0.579'. [ 565.526652][ T8049] syzkaller0: entered promiscuous mode [ 565.532185][ T8049] syzkaller0: entered allmulticast mode [ 565.682844][ T8056] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.591'. [ 565.830158][ T8059] netlink: 'syz.1.592': attribute type 9 has an invalid length. [ 565.856558][ T8059] netlink: 399 bytes leftover after parsing attributes in process `syz.1.592'. [ 568.525107][ T8062] netlink: 144 bytes leftover after parsing attributes in process `syz.2.587'. [ 568.544263][ T8073] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.596'. [ 568.556738][ T8056] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 568.819834][ T8082] netlink: 128 bytes leftover after parsing attributes in process `syz.1.600'. [ 568.876869][ T8082] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 568.975619][ T8084] sctp: [Deprecated]: syz.3.602 (pid 8084) Use of int in max_burst socket option deprecated. [ 568.975619][ T8084] Use struct sctp_assoc_value instead [ 570.142701][ T8124] netlink: 44 bytes leftover after parsing attributes in process `syz.0.609'. [ 570.156191][ T8124] netlink: 4 bytes leftover after parsing attributes in process `syz.0.609'. [ 570.180197][ T8124] netlink: 4 bytes leftover after parsing attributes in process `syz.0.609'. [ 570.279942][ T8071] Bluetooth: hci0: command 0x0406 tx timeout [ 570.283436][ T5835] Bluetooth: hci1: command 0x0406 tx timeout [ 570.286403][ T8071] Bluetooth: hci2: command 0x0406 tx timeout [ 570.293055][ T5835] Bluetooth: hci3: command 0x0406 tx timeout [ 571.043134][ T8151] netlink: 'syz.0.614': attribute type 21 has an invalid length. [ 571.077676][ T8151] netlink: 'syz.0.614': attribute type 21 has an invalid length. [ 571.351703][ T8162] netlink: 'syz.3.615': attribute type 17 has an invalid length. [ 571.403385][ T8162] netlink: 148 bytes leftover after parsing attributes in process `syz.3.615'. [ 571.476184][ T8161] netlink: 'syz.3.615': attribute type 17 has an invalid length. [ 571.540551][ T8161] netlink: 148 bytes leftover after parsing attributes in process `syz.3.615'. [ 571.993275][ T8179] netlink: 830 bytes leftover after parsing attributes in process `syz.2.621'. [ 578.255939][ T8215] netlink: 'syz.3.629': attribute type 3 has an invalid length. [ 578.318203][ T8215] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.629'. [ 578.344688][ T8218] sit0: entered promiscuous mode [ 578.364289][ T8218] sit0: entered allmulticast mode [ 579.075151][ T5980] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 579.882447][ T8239] netlink: 'syz.0.636': attribute type 2 has an invalid length. [ 579.901721][ T8239] netlink: 'syz.0.636': attribute type 1 has an invalid length. [ 579.922492][ T8239] netlink: 9 bytes leftover after parsing attributes in process `syz.0.636'. [ 579.986652][ T8239] sit0: entered allmulticast mode [ 580.089926][ T8241] sctp: [Deprecated]: syz.1.637 (pid 8241) Use of int in max_burst socket option deprecated. [ 580.089926][ T8241] Use struct sctp_assoc_value instead [ 580.683825][ T8259] netlink: 'syz.2.643': attribute type 10 has an invalid length. [ 580.696546][ T8259] netlink: 55 bytes leftover after parsing attributes in process `syz.2.643'. [ 581.061640][ T8262] netlink: 'syz.2.643': attribute type 10 has an invalid length. [ 581.085315][ T8262] netlink: 55 bytes leftover after parsing attributes in process `syz.2.643'. [ 581.631302][ T8279] netlink: 'syz.2.649': attribute type 10 has an invalid length. [ 581.825715][ T8279] team0 (unregistering): Port device C removed [ 581.905604][ T8279] team0 (unregistering): Port device team_slave_1 removed [ 582.448666][ T8295] netlink: 'syz.2.653': attribute type 10 has an invalid length. [ 582.486099][ T5086] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 582.502285][ T8297] netlink: 'syz.0.654': attribute type 9 has an invalid length. [ 582.571366][ T8297] netlink: 7 bytes leftover after parsing attributes in process `syz.0.654'. [ 583.590276][ T8309] netlink: 'syz.3.658': attribute type 10 has an invalid length. [ 583.618130][ T8309] netlink: 40 bytes leftover after parsing attributes in process `syz.3.658'. [ 583.646956][ T8317] netlink: 'syz.1.659': attribute type 12 has an invalid length. [ 583.655397][ T8309] netlink: 'syz.3.658': attribute type 10 has an invalid length. [ 583.663409][ T8309] netlink: 40 bytes leftover after parsing attributes in process `syz.3.658'. [ 583.687714][ T8317] netlink: 'syz.1.659': attribute type 11 has an invalid length. [ 583.699691][ T8314] netlink: 'syz.3.658': attribute type 10 has an invalid length. [ 583.718860][ T8314] netlink: 40 bytes leftover after parsing attributes in process `syz.3.658'. [ 583.734352][ T8317] netlink: 188816 bytes leftover after parsing attributes in process `syz.1.659'. [ 584.525125][ T5834] Bluetooth: hci3: command 0x0406 tx timeout [ 585.159311][ T8336] netlink: 'syz.2.665': attribute type 3 has an invalid length. [ 585.186722][ T8336] netlink: 'syz.2.665': attribute type 5 has an invalid length. [ 585.194497][ T8336] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.665'. [ 586.928103][ T8355] netlink: 'syz.0.669': attribute type 10 has an invalid length. [ 588.500900][ T8380] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 588.824766][ T8393] netlink: 'syz.2.679': attribute type 21 has an invalid length. [ 588.849494][ T8393] IPv6: NLM_F_CREATE should be specified when creating new route [ 588.876560][ T8393] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 588.883846][ T8393] IPv6: NLM_F_CREATE should be set when creating new route [ 588.891178][ T8393] IPv6: NLM_F_CREATE should be set when creating new route [ 588.898614][ T8393] IPv6: NLM_F_CREATE should be set when creating new route [ 588.922757][ T8396] netlink: 'syz.2.679': attribute type 3 has an invalid length. [ 588.931024][ T8396] netlink: 98920 bytes leftover after parsing attributes in process `syz.2.679'. [ 588.964566][ T8396] netlink: 'syz.2.679': attribute type 3 has an invalid length. [ 588.981370][ T8396] netlink: 98920 bytes leftover after parsing attributes in process `syz.2.679'. [ 589.001065][ T8407] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.680'. [ 589.016597][ T8396] netlink: 'syz.2.679': attribute type 3 has an invalid length. [ 589.024292][ T8396] netlink: 98920 bytes leftover after parsing attributes in process `syz.2.679'. [ 589.033280][ T8407] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.680'. [ 589.069615][ T8396] netlink: 'syz.2.679': attribute type 3 has an invalid length. [ 589.078752][ T8396] netlink: 98920 bytes leftover after parsing attributes in process `syz.2.679'. [ 589.088798][ T8407] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.680'. [ 589.112253][ T8407] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.680'. [ 589.127810][ T8407] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.680'. [ 589.128255][ T8396] netlink: 'syz.2.679': attribute type 3 has an invalid length. [ 589.140927][ T8407] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.680'. [ 589.175470][ T8396] netlink: 'syz.2.679': attribute type 3 has an invalid length. [ 589.198517][ T8396] netlink: 'syz.2.679': attribute type 3 has an invalid length. [ 589.214326][ T8396] netlink: 'syz.2.679': attribute type 3 has an invalid length. [ 589.230667][ T8396] netlink: 'syz.2.679': attribute type 3 has an invalid length. [ 589.366925][ T8415] sit0: entered allmulticast mode [ 590.228635][ T8444] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 593.229812][ T8502] macsec0: entered promiscuous mode [ 593.240936][ T8502] macsec0: entered allmulticast mode [ 593.267740][ T8502] veth1_macvtap: entered allmulticast mode [ 595.793103][ T5973] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 596.208678][ T8520] __nla_validate_parse: 94 callbacks suppressed [ 596.208845][ T8520] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.710'. [ 596.346975][ T8528] validate_nla: 27 callbacks suppressed [ 596.346992][ T8528] netlink: 'syz.2.711': attribute type 13 has an invalid length. [ 596.400778][ T8528] netlink: 172 bytes leftover after parsing attributes in process `syz.2.711'. [ 596.436220][ T8528] erspan0: refused to change device tx_queue_len [ 596.616503][ T8537] netlink: 'syz.3.716': attribute type 1 has an invalid length. [ 596.651616][ T8537] netlink: 5 bytes leftover after parsing attributes in process `syz.3.716'. [ 596.704287][ T8538] netlink: 153060 bytes leftover after parsing attributes in process `syz.3.716'. [ 596.757760][ T8538] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 596.785009][ T8538] CPU: 1 PID: 8538 Comm: syz.3.716 Not tainted syzkaller #0 [ 596.792445][ T8538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 596.802536][ T8538] Call Trace: [ 596.805844][ T8538] [ 596.808801][ T8538] dump_stack_lvl+0x18c/0x250 [ 596.813521][ T8538] ? show_regs_print_info+0x20/0x20 [ 596.818750][ T8538] ? load_image+0x420/0x420 [ 596.823294][ T8538] sysfs_warn_dup+0x8e/0xa0 [ 596.827827][ T8538] sysfs_do_create_link_sd+0xc0/0x110 [ 596.833226][ T8538] device_add_class_symlinks+0x1cf/0x240 [ 596.838891][ T8538] device_add+0x4f9/0xc40 [ 596.843236][ T8538] wiphy_register+0x1d99/0x2ac0 [ 596.848111][ T8538] ? cfg80211_event_work+0x40/0x40 [ 596.853231][ T8538] ? minstrel_ht_alloc+0x88a/0x990 [ 596.858355][ T8538] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 596.864430][ T8538] ieee80211_register_hw+0x2dd8/0x3b30 [ 596.869908][ T8538] ? ieee80211_register_hw+0xf11/0x3b30 [ 596.875470][ T8538] ? ieee80211_tasklet_handler+0x20/0x20 [ 596.881104][ T8538] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 596.887004][ T8538] ? __debug_object_init+0xec/0x450 [ 596.892214][ T8538] ? __asan_memset+0x22/0x40 [ 596.896809][ T8538] ? __hrtimer_init+0x189/0x270 [ 596.901664][ T8538] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 596.907426][ T8538] ? mac80211_hwsim_free+0x220/0x220 [ 596.912711][ T8538] ? rcu_is_watching+0x15/0xb0 [ 596.917481][ T8538] ? kstrndup+0xbd/0x140 [ 596.921737][ T8538] hwsim_new_radio_nl+0xdad/0x1a70 [ 596.926858][ T8538] ? __nla_validate+0x50/0x50 [ 596.931551][ T8538] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 596.937890][ T8538] ? __nla_parse+0x40/0x50 [ 596.942315][ T8538] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 596.948669][ T8538] genl_family_rcv_msg_doit+0x21a/0x310 [ 596.954222][ T8538] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 596.960128][ T8538] ? bpf_lsm_capable+0x9/0x10 [ 596.964811][ T8538] ? security_capable+0x89/0xb0 [ 596.969671][ T8538] genl_rcv_msg+0x611/0x7a0 [ 596.974183][ T8538] ? genl_bind+0x360/0x360 [ 596.978604][ T8538] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 596.984935][ T8538] ? perf_trace_lock+0xfc/0x3b0 [ 596.989789][ T8538] ? __kasan_kmalloc_large+0x8b/0xa0 [ 596.995086][ T8538] netlink_rcv_skb+0x235/0x4c0 [ 596.999853][ T8538] ? genl_bind+0x360/0x360 [ 597.004275][ T8538] ? netlink_ack+0x1160/0x1160 [ 597.009050][ T8538] ? __lock_acquire+0x7d80/0x7d80 [ 597.014088][ T8538] ? down_read+0x1ac/0x2e0 [ 597.018512][ T8538] genl_rcv+0x28/0x40 [ 597.022502][ T8538] netlink_unicast+0x7b1/0x930 [ 597.027277][ T8538] netlink_sendmsg+0x8d0/0xbf0 [ 597.032046][ T8538] ? netlink_getsockopt+0x590/0x590 [ 597.037245][ T8538] ? apparmor_socket_sendmsg+0x8e/0x330 [ 597.042794][ T8538] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 597.048081][ T8538] ? security_socket_sendmsg+0x80/0xa0 [ 597.053537][ T8538] ? netlink_getsockopt+0x590/0x590 [ 597.058738][ T8538] ____sys_sendmsg+0x61b/0x980 [ 597.063512][ T8538] ? __asan_memset+0x22/0x40 [ 597.068106][ T8538] ? __sys_sendmsg_sock+0x30/0x30 [ 597.073129][ T8538] ? __import_iovec+0x5f2/0x850 [ 597.077993][ T8538] ? import_iovec+0x73/0xa0 [ 597.082504][ T8538] ___sys_sendmsg+0x2a6/0x360 [ 597.087185][ T8538] ? __sys_sendmsg+0x2b0/0x2b0 [ 597.091999][ T8538] __se_sys_sendmsg+0x1d0/0x2c0 [ 597.096856][ T8538] ? __x64_sys_sendmsg+0x80/0x80 [ 597.101810][ T8538] ? lockdep_hardirqs_on+0x98/0x150 [ 597.107015][ T8538] do_syscall_64+0x55/0xb0 [ 597.111440][ T8538] ? clear_bhb_loop+0x40/0x90 [ 597.116118][ T8538] ? clear_bhb_loop+0x40/0x90 [ 597.120798][ T8538] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 597.126691][ T8538] RIP: 0033:0x7eff3379e159 [ 597.131107][ T8538] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 597.150711][ T8538] RSP: 002b:00007eff346e6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 597.159127][ T8538] RAX: ffffffffffffffda RBX: 00007eff33a26090 RCX: 00007eff3379e159 [ 597.167101][ T8538] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000012 [ 597.175071][ T8538] RBP: 00007eff33835024 R08: 0000000000000000 R09: 0000000000000000 [ 597.183041][ T8538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 597.191012][ T8538] R13: 00007eff33a26128 R14: 00007eff33a26090 R15: 00007ffcb8e58868 [ 597.198998][ T8538] [ 597.347614][ T8539] netlink: 153060 bytes leftover after parsing attributes in process `syz.3.716'. [ 597.381119][ T8539] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 597.404435][ T8539] CPU: 1 PID: 8539 Comm: syz.3.716 Not tainted syzkaller #0 [ 597.411758][ T8539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 597.421818][ T8539] Call Trace: [ 597.425120][ T8539] [ 597.428065][ T8539] dump_stack_lvl+0x18c/0x250 [ 597.432776][ T8539] ? show_regs_print_info+0x20/0x20 [ 597.438006][ T8539] ? load_image+0x420/0x420 [ 597.442554][ T8539] sysfs_warn_dup+0x8e/0xa0 [ 597.447077][ T8539] sysfs_do_create_link_sd+0xc0/0x110 [ 597.452477][ T8539] device_add_class_symlinks+0x1cf/0x240 [ 597.458135][ T8539] device_add+0x4f9/0xc40 [ 597.462477][ T8539] wiphy_register+0x1d99/0x2ac0 [ 597.467353][ T8539] ? cfg80211_event_work+0x40/0x40 [ 597.472477][ T8539] ? minstrel_ht_alloc+0x88a/0x990 [ 597.477613][ T8539] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 597.483697][ T8539] ieee80211_register_hw+0x2dd8/0x3b30 [ 597.489184][ T8539] ? ieee80211_register_hw+0xf11/0x3b30 [ 597.494749][ T8539] ? ieee80211_tasklet_handler+0x20/0x20 [ 597.500386][ T8539] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 597.506293][ T8539] ? __debug_object_init+0xec/0x450 [ 597.511503][ T8539] ? __asan_memset+0x22/0x40 [ 597.516103][ T8539] ? __hrtimer_init+0x189/0x270 [ 597.520959][ T8539] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 597.526702][ T8539] ? mac80211_hwsim_free+0x220/0x220 [ 597.531987][ T8539] ? rcu_is_watching+0x15/0xb0 [ 597.536758][ T8539] ? kstrndup+0xbd/0x140 [ 597.541013][ T8539] hwsim_new_radio_nl+0xdad/0x1a70 [ 597.546156][ T8539] ? __nla_validate+0x50/0x50 [ 597.550933][ T8539] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 597.557316][ T8539] ? __nla_parse+0x40/0x50 [ 597.561746][ T8539] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 597.568085][ T8539] genl_family_rcv_msg_doit+0x21a/0x310 [ 597.573642][ T8539] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 597.579544][ T8539] ? bpf_lsm_capable+0x9/0x10 [ 597.584223][ T8539] ? security_capable+0x89/0xb0 [ 597.589080][ T8539] genl_rcv_msg+0x611/0x7a0 [ 597.593589][ T8539] ? genl_bind+0x360/0x360 [ 597.598003][ T8539] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 597.604331][ T8539] ? perf_trace_lock+0xfc/0x3b0 [ 597.609176][ T8539] ? __kasan_kmalloc_large+0x8b/0xa0 [ 597.614468][ T8539] netlink_rcv_skb+0x235/0x4c0 [ 597.619235][ T8539] ? genl_bind+0x360/0x360 [ 597.623651][ T8539] ? netlink_ack+0x1160/0x1160 [ 597.628426][ T8539] ? __lock_acquire+0x7d80/0x7d80 [ 597.633456][ T8539] ? down_read+0x1ac/0x2e0 [ 597.637888][ T8539] genl_rcv+0x28/0x40 [ 597.641872][ T8539] netlink_unicast+0x7b1/0x930 [ 597.646658][ T8539] netlink_sendmsg+0x8d0/0xbf0 [ 597.651430][ T8539] ? netlink_getsockopt+0x590/0x590 [ 597.656629][ T8539] ? apparmor_socket_sendmsg+0x8e/0x330 [ 597.662177][ T8539] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 597.667460][ T8539] ? security_socket_sendmsg+0x80/0xa0 [ 597.672915][ T8539] ? netlink_getsockopt+0x590/0x590 [ 597.678114][ T8539] ____sys_sendmsg+0x61b/0x980 [ 597.682888][ T8539] ? __asan_memset+0x22/0x40 [ 597.687479][ T8539] ? __sys_sendmsg_sock+0x30/0x30 [ 597.692500][ T8539] ? __import_iovec+0x5f2/0x850 [ 597.697361][ T8539] ? import_iovec+0x73/0xa0 [ 597.701875][ T8539] ___sys_sendmsg+0x2a6/0x360 [ 597.706557][ T8539] ? __sys_sendmsg+0x2b0/0x2b0 [ 597.711368][ T8539] __se_sys_sendmsg+0x1d0/0x2c0 [ 597.716224][ T8539] ? __x64_sys_sendmsg+0x80/0x80 [ 597.721179][ T8539] ? lockdep_hardirqs_on+0x98/0x150 [ 597.726391][ T8539] do_syscall_64+0x55/0xb0 [ 597.730807][ T8539] ? clear_bhb_loop+0x40/0x90 [ 597.735484][ T8539] ? clear_bhb_loop+0x40/0x90 [ 597.740163][ T8539] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 597.746059][ T8539] RIP: 0033:0x7eff3379e159 [ 597.750488][ T8539] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 597.770094][ T8539] RSP: 002b:00007eff346c5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 597.778509][ T8539] RAX: ffffffffffffffda RBX: 00007eff33a26180 RCX: 00007eff3379e159 [ 597.786478][ T8539] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000012 [ 597.794451][ T8539] RBP: 00007eff33835024 R08: 0000000000000000 R09: 0000000000000000 [ 597.802428][ T8539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 597.810398][ T8539] R13: 00007eff33a26218 R14: 00007eff33a26180 R15: 00007ffcb8e58868 [ 597.818391][ T8539] [ 598.889152][ T8564] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.726'. [ 599.001750][ T8579] netlink: 60 bytes leftover after parsing attributes in process `syz.3.730'. [ 599.304165][ T8569] syzkaller0: entered promiscuous mode [ 599.326249][ T8569] syzkaller0: entered allmulticast mode [ 599.357778][ T8564] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 599.378298][ T8564] CPU: 1 PID: 8564 Comm: syz.0.726 Not tainted syzkaller #0 [ 599.385649][ T8564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 599.395732][ T8564] Call Trace: [ 599.399033][ T8564] [ 599.401966][ T8564] dump_stack_lvl+0x18c/0x250 [ 599.406661][ T8564] ? show_regs_print_info+0x20/0x20 [ 599.411873][ T8564] ? load_image+0x420/0x420 [ 599.416390][ T8564] sysfs_warn_dup+0x8e/0xa0 [ 599.420899][ T8564] sysfs_do_create_link_sd+0xc0/0x110 [ 599.426277][ T8564] device_add_class_symlinks+0x1cf/0x240 [ 599.431914][ T8564] device_add+0x4f9/0xc40 [ 599.436247][ T8564] wiphy_register+0x1d99/0x2ac0 [ 599.441116][ T8564] ? cfg80211_event_work+0x40/0x40 [ 599.446229][ T8564] ? minstrel_ht_alloc+0x88a/0x990 [ 599.451348][ T8564] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 599.457444][ T8564] ieee80211_register_hw+0x2dd8/0x3b30 [ 599.462933][ T8564] ? ieee80211_register_hw+0xf11/0x3b30 [ 599.468499][ T8564] ? ieee80211_tasklet_handler+0x20/0x20 [ 599.474141][ T8564] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 599.480043][ T8564] ? __debug_object_init+0xec/0x450 [ 599.485253][ T8564] ? __asan_memset+0x22/0x40 [ 599.489848][ T8564] ? __hrtimer_init+0x189/0x270 [ 599.494703][ T8564] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 599.500445][ T8564] ? mac80211_hwsim_free+0x220/0x220 [ 599.505756][ T8564] ? rcu_is_watching+0x15/0xb0 [ 599.510523][ T8564] ? kstrndup+0xbd/0x140 [ 599.514773][ T8564] hwsim_new_radio_nl+0xdad/0x1a70 [ 599.519888][ T8564] ? __nla_validate+0x50/0x50 [ 599.524580][ T8564] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 599.530918][ T8564] ? __nla_parse+0x40/0x50 [ 599.535340][ T8564] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 599.541674][ T8564] genl_family_rcv_msg_doit+0x21a/0x310 [ 599.547237][ T8564] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 599.553139][ T8564] ? bpf_lsm_capable+0x9/0x10 [ 599.557819][ T8564] ? security_capable+0x89/0xb0 [ 599.562718][ T8564] genl_rcv_msg+0x611/0x7a0 [ 599.567255][ T8564] ? genl_bind+0x360/0x360 [ 599.571668][ T8564] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 599.577651][ T8564] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 599.583989][ T8564] ? ref_tracker_free+0x686/0x830 [ 599.589029][ T8564] netlink_rcv_skb+0x235/0x4c0 [ 599.593795][ T8564] ? genl_bind+0x360/0x360 [ 599.598223][ T8564] ? netlink_ack+0x1160/0x1160 [ 599.602999][ T8564] ? __lock_acquire+0x7d80/0x7d80 [ 599.608032][ T8564] ? down_read+0x1ac/0x2e0 [ 599.612452][ T8564] genl_rcv+0x28/0x40 [ 599.616433][ T8564] netlink_unicast+0x7b1/0x930 [ 599.621207][ T8564] netlink_sendmsg+0x8d0/0xbf0 [ 599.625973][ T8564] ? lockdep_hardirqs_on+0x98/0x150 [ 599.631176][ T8564] ? netlink_getsockopt+0x590/0x590 [ 599.636375][ T8564] ? netlink_getsockopt+0x590/0x590 [ 599.641574][ T8564] ? netlink_getsockopt+0x590/0x590 [ 599.646771][ T8564] ____sys_sendmsg+0x61b/0x980 [ 599.651538][ T8564] ? __asan_memset+0x22/0x40 [ 599.656130][ T8564] ? __sys_sendmsg_sock+0x30/0x30 [ 599.661164][ T8564] ? __import_iovec+0x5f2/0x850 [ 599.666031][ T8564] ? import_iovec+0x73/0xa0 [ 599.670540][ T8564] ___sys_sendmsg+0x2a6/0x360 [ 599.675227][ T8564] ? __sys_sendmsg+0x2b0/0x2b0 [ 599.680007][ T8564] ? ktime_get+0x7f/0x280 [ 599.684360][ T8564] __se_sys_sendmsg+0x1d0/0x2c0 [ 599.689215][ T8564] ? perf_trace_preemptirq_template+0x269/0x330 [ 599.695462][ T8564] ? __x64_sys_sendmsg+0x80/0x80 [ 599.700414][ T8564] ? lockdep_hardirqs_on+0x98/0x150 [ 599.705623][ T8564] do_syscall_64+0x55/0xb0 [ 599.710037][ T8564] ? clear_bhb_loop+0x40/0x90 [ 599.714714][ T8564] ? clear_bhb_loop+0x40/0x90 [ 599.719391][ T8564] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 599.725284][ T8564] RIP: 0033:0x7f05cff9e159 [ 599.729699][ T8564] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 599.749304][ T8564] RSP: 002b:00007f05d0ea4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 599.757719][ T8564] RAX: ffffffffffffffda RBX: 00007f05d0225fa0 RCX: 00007f05cff9e159 [ 599.765717][ T8564] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 599.773688][ T8564] RBP: 00007f05d0035024 R08: 0000000000000000 R09: 0000000000000000 [ 599.781659][ T8564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 599.789636][ T8564] R13: 00007f05d0226038 R14: 00007f05d0225fa0 R15: 00007fffe7f28d98 [ 599.797622][ T8564] [ 600.161447][ T8594] netlink: 15743 bytes leftover after parsing attributes in process `syz.0.734'. [ 600.193712][ T8594] netlink: 15743 bytes leftover after parsing attributes in process `syz.0.734'. [ 600.591439][ T8603] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.737'. [ 600.619707][ T8603] openvswitch: netlink: Tunnel attr 0 has unexpected len 1788 expected 8 [ 604.232713][ T8616] netlink: 'syz.0.741': attribute type 3 has an invalid length. [ 604.241394][ T8616] netlink: 132 bytes leftover after parsing attributes in process `syz.0.741'. [ 608.298511][ T8627] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.744'. [ 609.060609][ T8627] netlink: 'syz.0.744': attribute type 1 has an invalid length. [ 609.085133][ T8627] netlink: 21820 bytes leftover after parsing attributes in process `syz.0.744'. [ 609.151657][ T8631] netlink: 1057 bytes leftover after parsing attributes in process `syz.2.745'. [ 610.056762][ T8654] netlink: 'syz.3.753': attribute type 10 has an invalid length. [ 610.070283][ T8654] netlink: 55 bytes leftover after parsing attributes in process `syz.3.753'. [ 610.320202][ T8663] netlink: 'syz.2.755': attribute type 7 has an invalid length. [ 610.334233][ T8663] netlink: 148 bytes leftover after parsing attributes in process `syz.2.755'. [ 610.511551][ T8671] netlink: 14 bytes leftover after parsing attributes in process `syz.2.757'. [ 610.701151][ T8677] netlink: 'syz.3.759': attribute type 3 has an invalid length. [ 610.735185][ T8677] netlink: 132 bytes leftover after parsing attributes in process `syz.3.759'. [ 613.312973][ T8692] netlink: 'syz.1.764': attribute type 1 has an invalid length. [ 613.342027][ T8694] netlink: 'syz.1.764': attribute type 10 has an invalid length. [ 613.346224][ T8692] netlink: 'syz.1.764': attribute type 3 has an invalid length. [ 613.359421][ T8692] netlink: 132 bytes leftover after parsing attributes in process `syz.1.764'. [ 613.382210][ T8694] netlink: 168 bytes leftover after parsing attributes in process `syz.1.764'. [ 614.296361][ T8713] netlink: 'syz.1.770': attribute type 3 has an invalid length. [ 614.304250][ T8713] netlink: 132 bytes leftover after parsing attributes in process `syz.1.770'. [ 618.885998][ T8736] sit0: left promiscuous mode [ 619.176095][ T8745] netlink: 'syz.1.777': attribute type 10 has an invalid length. [ 619.667178][ T8758] netlink: 'syz.2.780': attribute type 3 has an invalid length. [ 619.687800][ T8758] netlink: 132 bytes leftover after parsing attributes in process `syz.2.780'. [ 619.709595][ T8761] netlink: 14 bytes leftover after parsing attributes in process `syz.3.781'. [ 619.814714][ T8765] syzkaller0: entered promiscuous mode [ 619.820950][ T8765] syzkaller0: entered allmulticast mode [ 624.539615][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.548626][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.352447][ T8803] netlink: 'syz.0.793': attribute type 3 has an invalid length. [ 625.376931][ T8803] netlink: 132 bytes leftover after parsing attributes in process `syz.0.793'. [ 626.233833][ T8827] netlink: 'syz.3.796': attribute type 39 has an invalid length. [ 626.702864][ T8842] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.801'. [ 626.735060][ T8842] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.801'. [ 626.798796][ T8840] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.801'. [ 626.838929][ T8844] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.801'. [ 627.235920][ T5982] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 628.288477][ T8848] netlink: 'syz.2.803': attribute type 3 has an invalid length. [ 628.325189][ T8848] netlink: 132 bytes leftover after parsing attributes in process `syz.2.803'. [ 628.621004][ T8863] netlink: 44 bytes leftover after parsing attributes in process `syz.2.810'. [ 628.959637][ T8872] delete_channel: no stack [ 629.006638][ T8878] netlink: 'syz.3.812': attribute type 10 has an invalid length. [ 629.014455][ T8878] netlink: 40 bytes leftover after parsing attributes in process `syz.3.812'. [ 629.040120][ T8878] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 629.135731][ T8892] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.815'. [ 629.174378][ T8894] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.815'. [ 630.564426][ T8907] netlink: 'syz.2.817': attribute type 1 has an invalid length. [ 630.583061][ T8907] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.817'. [ 630.665871][ T8908] netlink: 'syz.3.818': attribute type 3 has an invalid length. [ 630.673695][ T8908] netlink: 132 bytes leftover after parsing attributes in process `syz.3.818'. [ 631.319700][ T8924] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.823'. [ 631.662204][ T8931] netlink: 'syz.2.826': attribute type 16 has an invalid length. [ 631.688223][ T8931] netlink: 156 bytes leftover after parsing attributes in process `syz.2.826'. [ 633.509877][ T8949] netlink: 209832 bytes leftover after parsing attributes in process `syz.2.832'. [ 633.520151][ T8947] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 633.542482][ T8947] syzkaller1: linktype set to 769 [ 633.551902][ T8945] netlink: 'syz.3.830': attribute type 3 has an invalid length. [ 633.575471][ T8945] netlink: 132 bytes leftover after parsing attributes in process `syz.3.830'. [ 633.591544][ T8947] netlink: 'syz.0.831': attribute type 3 has an invalid length. [ 633.622294][ T8947] netlink: 201372 bytes leftover after parsing attributes in process `syz.0.831'. [ 635.907769][ T8981] netlink: 140 bytes leftover after parsing attributes in process `syz.1.840'. [ 636.396639][ T8987] netlink: 'syz.0.842': attribute type 3 has an invalid length. [ 636.414153][ T8987] netlink: 132 bytes leftover after parsing attributes in process `syz.0.842'. [ 637.382446][ T9023] syzkaller0: entered promiscuous mode [ 637.388193][ T9023] syzkaller0: entered allmulticast mode [ 637.928485][ T9037] netlink: 'syz.3.855': attribute type 3 has an invalid length. [ 637.936682][ T9037] netlink: 132 bytes leftover after parsing attributes in process `syz.3.855'. [ 640.145808][ T9048] netlink: 'syz.3.859': attribute type 4 has an invalid length. [ 640.510019][ T9065] netlink: 'syz.1.864': attribute type 9 has an invalid length. [ 640.525077][ T9065] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.864'. [ 641.201754][ T9086] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.860'. [ 641.622388][ T9093] netlink: 'syz.2.867': attribute type 3 has an invalid length. [ 641.640745][ T9093] netlink: 132 bytes leftover after parsing attributes in process `syz.2.867'. [ 642.076181][ T9095] netlink: 'syz.2.869': attribute type 3 has an invalid length. [ 642.097362][ T9095] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.869'. [ 642.464516][ T9109] netlink: 'syz.1.871': attribute type 2 has an invalid length. [ 642.483321][ T9109] netlink: 199828 bytes leftover after parsing attributes in process `syz.1.871'. [ 643.900633][ T9136] netlink: 'syz.0.877': attribute type 3 has an invalid length. [ 643.913796][ T9136] netlink: 132 bytes leftover after parsing attributes in process `syz.0.877'. [ 646.008478][ T9188] netlink: 40 bytes leftover after parsing attributes in process `syz.1.892'. [ 646.026421][ T9184] netlink: 'syz.3.890': attribute type 3 has an invalid length. [ 646.047392][ T9184] netlink: 132 bytes leftover after parsing attributes in process `syz.3.890'. [ 647.189347][ T9216] netlink: 188 bytes leftover after parsing attributes in process `syz.0.899'. [ 647.488209][ T9223] netlink: 'syz.3.902': attribute type 3 has an invalid length. [ 647.531654][ T9223] netlink: 132 bytes leftover after parsing attributes in process `syz.3.902'. [ 647.826982][ T9229] netlink: 'syz.1.903': attribute type 9 has an invalid length. [ 647.842429][ T9229] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.903'. [ 648.319961][ T9244] netlink: 'syz.2.909': attribute type 10 has an invalid length. [ 648.349223][ T9244] hsr0: left allmulticast mode [ 648.368545][ T9244] hsr_slave_0: left allmulticast mode [ 648.403256][ T9244] hsr_slave_1: left allmulticast mode [ 648.436965][ T9244] bridge0: port 3(hsr0) entered disabled state [ 648.493908][ T9244] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 648.924377][ T9276] netlink: 'syz.3.914': attribute type 3 has an invalid length. [ 648.952763][ T9276] netlink: 132 bytes leftover after parsing attributes in process `syz.3.914'. [ 650.806664][ T9263] syzkaller0: entered promiscuous mode [ 650.812187][ T9263] syzkaller0: entered allmulticast mode [ 653.831292][ T9311] netlink: 'syz.2.917': attribute type 2 has an invalid length. [ 653.839097][ T9311] netlink: 'syz.2.917': attribute type 11 has an invalid length. [ 653.847194][ T9311] netlink: 132 bytes leftover after parsing attributes in process `syz.2.917'. [ 653.858857][ T9317] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.921'. [ 654.404491][ T9342] netlink: 192 bytes leftover after parsing attributes in process `syz.2.928'. [ 655.145016][ T9354] netlink: 'syz.2.930': attribute type 10 has an invalid length. [ 655.170160][ T9354] netlink: 40 bytes leftover after parsing attributes in process `syz.2.930'. [ 655.344453][ T9368] netlink: 'syz.3.934': attribute type 10 has an invalid length. [ 655.401145][ T9368] team_slave_0: left promiscuous mode [ 655.406950][ T9368] team_slave_0: left allmulticast mode [ 655.414347][ T9368] team0 (unregistering): Port device team_slave_0 removed [ 655.425808][ T9368] team_slave_1: left promiscuous mode [ 655.431487][ T9368] team_slave_1: left allmulticast mode [ 655.452179][ T9368] team0 (unregistering): Port device team_slave_1 removed [ 656.038798][ T9389] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.948'. [ 656.056345][ T9392] team0: entered allmulticast mode [ 656.061994][ T9392] team_slave_0: entered allmulticast mode [ 656.071571][ T9392] team_slave_1: entered allmulticast mode [ 656.078971][ T9392] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 656.671178][ T9411] sock: sock_timestamping_bind_phc: sock not bind to device [ 656.692209][ T9411] netlink: 40 bytes leftover after parsing attributes in process `syz.1.946'. [ 656.882533][ T9417] netlink: 'syz.1.951': attribute type 29 has an invalid length. [ 656.898611][ T9417] netlink: 'syz.1.951': attribute type 29 has an invalid length. [ 656.923538][ T9420] netlink: 'syz.1.951': attribute type 29 has an invalid length. [ 657.841301][ T9451] netlink: 'syz.1.959': attribute type 12 has an invalid length. [ 657.862127][ T9451] netlink: 112 bytes leftover after parsing attributes in process `syz.1.959'. [ 657.963509][ T9452] netlink: 'syz.1.959': attribute type 29 has an invalid length. [ 658.024592][ T9460] syzkaller1: tun_chr_ioctl cmd 1074812117 [ 658.049700][ T9452] netlink: 'syz.1.959': attribute type 29 has an invalid length. [ 658.113572][ T9464] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 658.134880][ T9464] syzkaller1: linktype set to 805 [ 658.162164][ T9466] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.963'. [ 658.180734][ T9467] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.963'. [ 658.259011][ T5967] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 659.928177][ T9513] Ÿë: port 1(gretap0) entered blocking state [ 659.969461][ T9513] Ÿë: port 1(gretap0) entered disabled state [ 660.015160][ T9513] gretap0: entered allmulticast mode [ 660.080678][ T9513] gretap0: entered promiscuous mode [ 660.169866][ T9525] Ÿë: port 2(veth0_to_team) entered blocking state [ 660.185156][ T9525] Ÿë: port 2(veth0_to_team) entered disabled state [ 660.191986][ T9525] veth0_to_team: entered allmulticast mode [ 660.200365][ T9525] veth0_to_team: entered promiscuous mode [ 660.469342][ T9538] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.979'. [ 661.335474][ T9540] netlink: 44 bytes leftover after parsing attributes in process `syz.1.981'. [ 661.346159][ T9540] validate_nla: 24 callbacks suppressed [ 661.346175][ T9540] netlink: 'syz.1.981': attribute type 13 has an invalid length. [ 661.380181][ T9540] netlink: 172 bytes leftover after parsing attributes in process `syz.1.981'. [ 661.412872][ T9540] erspan0: refused to change device tx_queue_len [ 661.783713][ T9555] sit0: entered allmulticast mode [ 661.808805][ T9557] netlink: 'syz.0.986': attribute type 3 has an invalid length. [ 661.830523][ T9557] netlink: 132 bytes leftover after parsing attributes in process `syz.0.986'. [ 661.831840][ T9555] sit0: entered promiscuous mode [ 662.669555][ T9573] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.992'. [ 663.070951][ T9582] netlink: 'syz.2.996': attribute type 3 has an invalid length. [ 663.095230][ T9582] netlink: 132 bytes leftover after parsing attributes in process `syz.2.996'. [ 663.233349][ T9592] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.997'. [ 663.263571][ T9585] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.997'. [ 663.575368][ T9592] mac80211_hwsim hwsim9 ..ãc¤±: renamed from wlan1 (while UP) [ 665.599865][ T9605] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1001'. [ 665.732769][ T9607] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1002'. [ 665.767126][ T9607] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 666.414698][ T9619] netlink: 'syz.1.1013': attribute type 10 has an invalid length. [ 666.458339][ T9619] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1013'. [ 666.507258][ T9619] ipvlan1: entered promiscuous mode [ 666.514924][ T9619] ipvlan1: entered allmulticast mode [ 666.550319][ T9619] veth0_vlan: entered allmulticast mode [ 666.686180][ T9619] bridge0: port 1(ipvlan1) entered blocking state [ 666.705627][ T9619] bridge0: port 1(ipvlan1) entered disabled state [ 666.741123][ T9619] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 667.185732][ T9627] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.1006'. [ 667.243684][ T9630] netlink: 'syz.1.1008': attribute type 10 has an invalid length. [ 667.264812][ T9633] netlink: 'syz.3.1007': attribute type 3 has an invalid length. [ 667.289570][ T9633] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1007'. [ 668.030679][ T9644] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1011'. [ 668.163716][ T9648] netlink: 'syz.2.1012': attribute type 3 has an invalid length. [ 668.171802][ T9648] netlink: 'syz.2.1012': attribute type 1 has an invalid length. [ 668.186106][ T9648] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.1012'. [ 669.037885][ T9664] netlink: 'syz.2.1017': attribute type 39 has an invalid length. [ 669.465724][ T9669] netlink: 'syz.2.1018': attribute type 27 has an invalid length. [ 669.473851][ T9669] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1018'. [ 669.822126][ T9675] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.1019'. [ 669.936843][ T9687] netlink: 'syz.2.1020': attribute type 3 has an invalid length. [ 669.951043][ T9687] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1020'. [ 670.224835][ T9691] netlink: 'syz.1.1022': attribute type 10 has an invalid length. [ 672.615547][ T9718] netlink: 'syz.1.1030': attribute type 1 has an invalid length. [ 672.967024][ T9730] netlink: 'syz.3.1032': attribute type 3 has an invalid length. [ 672.975237][ T9730] __nla_validate_parse: 1 callbacks suppressed [ 672.975282][ T9730] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1032'. [ 673.621929][ T9732] syzkaller0: entered promiscuous mode [ 673.655114][ T9732] syzkaller0: entered allmulticast mode [ 675.100729][ T9741] netlink: 'syz.1.1037': attribute type 39 has an invalid length. [ 675.137901][ T9745] netlink: 'syz.1.1037': attribute type 39 has an invalid length. [ 675.351434][ T9753] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.1040'. [ 675.383169][ T9753] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.1040'. [ 675.400335][ T9753] netlink: 'syz.1.1040': attribute type 2 has an invalid length. [ 675.507748][ T9758] netlink: 'syz.1.1042': attribute type 3 has an invalid length. [ 675.517189][ T9758] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1042'. [ 676.871492][ T9778] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1050'. [ 677.062998][ T9781] netlink: 'syz.2.1051': attribute type 3 has an invalid length. [ 677.071297][ T9781] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1051'. [ 677.086180][ T9784] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1052'. [ 677.125394][ T9784] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 677.339293][ T9791] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1054'. [ 677.348720][ T9791] hsr_slave_0: left promiscuous mode [ 677.355409][ T9791] hsr_slave_1: left promiscuous mode [ 678.228428][ T9802] netlink: 'syz.1.1058': attribute type 10 has an invalid length. [ 678.383187][ T9802] team0: Port device netdevsim0 added [ 678.418727][ T9805] netlink: 'syz.1.1058': attribute type 10 has an invalid length. [ 678.476019][ T9805] team0: Port device netdevsim0 removed [ 678.482922][ T9808] netlink: 'syz.1.1058': attribute type 10 has an invalid length. [ 678.496133][ T9808] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.1058'. [ 678.506910][ T9804] bridge0: port 1(bridge_slave_0) entered forwarding state [ 678.606424][ T9802] syz.1.1058 (9802) used greatest stack depth: 19352 bytes left [ 678.661774][ T9813] netlink: 'syz.3.1061': attribute type 3 has an invalid length. [ 678.673814][ T9813] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1061'. [ 679.064260][ T9821] netlink: 'syz.3.1064': attribute type 10 has an invalid length. [ 679.087846][ T9821] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1064'. [ 679.098205][ T9821] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 679.866932][ T9835] netlink: 1772 bytes leftover after parsing attributes in process `syz.2.1069'. [ 679.889049][ T9837] netlink: 'syz.2.1069': attribute type 3 has an invalid length. [ 679.903452][ T9837] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.1069'. [ 680.080739][ T9846] netlink: 'syz.3.1072': attribute type 3 has an invalid length. [ 680.088935][ T9846] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1072'. [ 680.671197][ T9867] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1079'. [ 680.935725][ T9871] netlink: 'syz.3.1081': attribute type 3 has an invalid length. [ 680.945894][ T9871] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1081'. [ 681.368969][ T9887] sctp: [Deprecated]: syz.3.1088 (pid 9887) Use of int in maxseg socket option. [ 681.368969][ T9887] Use struct sctp_assoc_value instead [ 681.445843][ T5086] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 681.485004][ T5086] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 681.516380][ T5086] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 681.527099][ T5086] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 681.535356][ T5086] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 681.543226][ T5086] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 681.595690][ T9890] netlink: 'syz.3.1088': attribute type 4 has an invalid length. [ 682.003710][ T9888] chnl_net:caif_netlink_parms(): no params data found [ 682.214719][ T9888] bridge0: port 1(bridge_slave_0) entered blocking state [ 682.257059][ T9908] netlink: 'syz.2.1092': attribute type 3 has an invalid length. [ 682.273850][ T9888] bridge0: port 1(bridge_slave_0) entered disabled state [ 682.299213][ T9908] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1092'. [ 682.311792][ T9888] bridge_slave_0: entered allmulticast mode [ 682.340456][ T9888] bridge_slave_0: entered promiscuous mode [ 682.361389][ T9888] bridge0: port 2(bridge_slave_1) entered blocking state [ 682.372391][ T9888] bridge0: port 2(bridge_slave_1) entered disabled state [ 682.419952][ T9888] bridge_slave_1: entered allmulticast mode [ 682.440276][ T9888] bridge_slave_1: entered promiscuous mode [ 682.524223][ T9888] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 682.559312][ T9888] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 682.682974][ T9888] team0: Port device team_slave_0 added [ 682.719930][ T9888] team0: Port device team_slave_1 added [ 682.784352][ T9888] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 682.797401][ T9888] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 682.838291][ T9888] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 682.873050][ T9888] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 682.881233][ T9888] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 682.907425][ T9888] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 683.060359][ T9888] hsr_slave_0: entered promiscuous mode [ 683.101626][ T9888] hsr_slave_1: entered promiscuous mode [ 683.116901][ T9888] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 683.134747][ T9888] Cannot create hsr debugfs directory [ 683.229753][ T9947] netlink: 14585 bytes leftover after parsing attributes in process `syz.2.1100'. [ 683.279613][ T9948] validate_nla: 1 callbacks suppressed [ 683.279629][ T9948] netlink: 'syz.2.1100': attribute type 4 has an invalid length. [ 683.635217][ T5086] Bluetooth: hci4: command tx timeout [ 683.702462][ T9888] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 683.716225][ T9955] netlink: 'syz.3.1103': attribute type 3 has an invalid length. [ 683.724773][ T9955] __nla_validate_parse: 1 callbacks suppressed [ 683.724818][ T9955] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1103'. [ 683.753189][ T9888] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 683.766304][ T9888] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 683.785995][ T9888] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 683.962319][ T9888] 8021q: adding VLAN 0 to HW filter on device bond0 [ 684.023975][ T9888] 8021q: adding VLAN 0 to HW filter on device team0 [ 684.069087][ T5967] bridge0: port 1(bridge_slave_0) entered blocking state [ 684.076313][ T5967] bridge0: port 1(bridge_slave_0) entered forwarding state [ 684.104380][ T3544] bridge0: port 2(bridge_slave_1) entered blocking state [ 684.111556][ T3544] bridge0: port 2(bridge_slave_1) entered forwarding state [ 684.127462][ T9966] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1107'. [ 684.138783][ T9964] netlink: 'syz.3.1106': attribute type 1 has an invalid length. [ 684.142221][ T9966] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 684.147210][ T9964] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.1106'. [ 684.262178][ T9888] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 684.290832][ T9888] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 684.829015][ T9888] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 684.936881][ T9994] netlink: 'syz.3.1113': attribute type 3 has an invalid length. [ 684.948471][ T9994] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1113'. [ 685.177879][ T9999] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1115'. [ 685.238250][ T9999] netlink: 'syz.1.1115': attribute type 10 has an invalid length. [ 685.350287][ T9999] team0: Device vxcan1 is of different type [ 685.499654][ T5086] Bluetooth: hci2: unexpected event 0x34 length: 15 > 6 [ 685.732277][ T5086] Bluetooth: hci4: command tx timeout [ 686.015188][T10013] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1118'. [ 686.033587][T10013] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 686.310832][ T9888] veth0_vlan: entered promiscuous mode [ 686.369537][ T9888] veth1_vlan: entered promiscuous mode [ 686.399442][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.406290][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.517176][ T9888] veth0_macvtap: entered promiscuous mode [ 686.544411][ T9888] veth1_macvtap: entered promiscuous mode [ 686.570817][ T9888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 686.583403][ T9888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 686.597663][ T9888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 686.624356][ T9888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 686.642381][ T9888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 686.673540][ T9888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 686.705319][ T9888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 686.725306][ T9888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 686.742116][ T9888] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 686.790651][ T9888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 686.820897][ T9888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 686.841385][ T9888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 686.873409][ T9888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 686.891395][ T9888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 686.892337][T10024] netlink: 'syz.1.1121': attribute type 3 has an invalid length. [ 686.912526][ T9888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 686.940671][T10024] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1121'. [ 686.946868][ T9888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 686.985734][ T9888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 687.010389][ T9888] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 687.043679][ T9888] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 687.112624][ T9888] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 687.134541][ T9888] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 687.154386][ T9888] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 687.342291][T10031] netlink: 14548 bytes leftover after parsing attributes in process `syz.3.1123'. [ 687.385993][T10029] netlink: 14548 bytes leftover after parsing attributes in process `syz.3.1123'. [ 687.565316][ T5967] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 687.573185][ T5967] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 687.665876][T10037] netlink: 'syz.2.1125': attribute type 2 has an invalid length. [ 687.684777][ T5980] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 687.693100][T10037] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1125'. [ 687.717418][ T5980] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 687.805046][ T5086] Bluetooth: hci4: command tx timeout [ 688.228501][T10051] netlink: 'syz.1.1129': attribute type 1 has an invalid length. [ 688.879380][T10058] netlink: 'syz.2.1131': attribute type 3 has an invalid length. [ 688.930009][T10058] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1131'. [ 689.285701][ T5965] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 689.373255][T10095] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.1141'. [ 689.763237][T10099] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1142'. [ 689.806033][T10110] netlink: 'syz.4.1145': attribute type 10 has an invalid length. [ 689.817871][T10110] hsr0: entered promiscuous mode [ 689.823816][T10110] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 689.837338][T10099] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1142'. [ 689.873468][T10108] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1142'. [ 689.885499][ T5086] Bluetooth: hci4: command tx timeout [ 689.979627][T10112] netlink: 198048 bytes leftover after parsing attributes in process `syz.4.1145'. [ 689.995055][T10112] netlink: 'syz.4.1145': attribute type 2 has an invalid length. [ 690.016623][T10112] netlink: 'syz.4.1145': attribute type 1 has an invalid length. [ 690.294426][T10127] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1150'. [ 690.342909][T10122] netlink: 'syz.4.1148': attribute type 3 has an invalid length. [ 690.365523][T10122] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1148'. [ 690.611756][T10141] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1154'. [ 690.688735][T10145] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.1152'. [ 690.771299][T10133] netlink: 'syz.1.1152': attribute type 6 has an invalid length. [ 690.781772][T10139] netlink: 'syz.1.1152': attribute type 6 has an invalid length. [ 690.812216][T10150] netlink: 'syz.4.1157': attribute type 29 has an invalid length. [ 690.823751][T10150] netlink: 'syz.4.1157': attribute type 29 has an invalid length. [ 690.941305][T10152] netlink: 'syz.1.1158': attribute type 27 has an invalid length. [ 691.529035][T10167] sit0: entered allmulticast mode [ 691.585997][T10167] sit0: entered promiscuous mode [ 692.860512][T10220] sctp: [Deprecated]: syz.1.1184 (pid 10220) Use of struct sctp_assoc_value in delayed_ack socket option. [ 692.860512][T10220] Use struct sctp_sack_info instead [ 694.069839][T10253] validate_nla: 6 callbacks suppressed [ 694.069857][T10253] netlink: 'syz.4.1196': attribute type 10 has an invalid length. [ 694.221161][T10253] team0: Device wg1 is of different type [ 694.910907][T10274] netlink: 'syz.4.1201': attribute type 3 has an invalid length. [ 694.959522][T10274] __nla_validate_parse: 14 callbacks suppressed [ 694.959541][T10274] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1201'. [ 695.048865][T10278] syzkaller0: entered promiscuous mode [ 695.077227][T10278] syzkaller0: entered allmulticast mode [ 695.189294][T10281] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 695.205941][T10281] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 696.115272][T10309] delete_channel: no stack [ 696.477128][T10318] netlink: 'syz.2.1211': attribute type 2 has an invalid length. [ 696.491362][T10318] netlink: 'syz.2.1211': attribute type 1 has an invalid length. [ 696.499861][T10318] netlink: 'syz.2.1211': attribute type 2 has an invalid length. [ 696.508367][T10318] netlink: 198036 bytes leftover after parsing attributes in process `syz.2.1211'. [ 696.567385][T10322] netlink: 'syz.3.1208': attribute type 5 has an invalid length. [ 696.679364][ T5086] Bluetooth: hci4: ISO packet for unknown connection handle 2097 [ 697.356585][T10328] netlink: 'syz.2.1213': attribute type 3 has an invalid length. [ 697.396470][T10328] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1213'. [ 697.584565][T10336] netlink: 'syz.4.1215': attribute type 10 has an invalid length. [ 697.684880][T10336] bridge0: port 2(bridge_slave_1) entered disabled state [ 697.767648][T10336] bridge_slave_1: left allmulticast mode [ 697.773365][T10336] bridge_slave_1: left promiscuous mode [ 697.783735][T10350] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1218'. [ 697.808148][T10350] openvswitch: netlink: Geneve opt len 5 is not a multiple of 4. [ 697.839053][T10336] bridge0: port 2(bridge_slave_1) entered disabled state [ 697.884152][T10336] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 697.961322][T10346] netlink: 3752 bytes leftover after parsing attributes in process `syz.1.1217'. [ 698.601414][T10368] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1222'. [ 698.616348][T10368] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1222'. [ 698.657818][T10363] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1222'. [ 698.730458][T10371] netlink: 209080 bytes leftover after parsing attributes in process `syz.4.1223'. [ 698.751209][T10368] netlink: 'syz.3.1222': attribute type 10 has an invalid length. [ 698.795002][T10368] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1222'. [ 698.840712][T10368] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 698.875196][T10368] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 698.984480][T10368] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 701.989623][T10386] netlink: 'syz.4.1226': attribute type 3 has an invalid length. [ 702.005454][T10386] __nla_validate_parse: 1 callbacks suppressed [ 702.005487][T10386] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1226'. [ 702.424458][T10392] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 702.472067][T10392] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 702.668602][T10392] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 702.710407][T10392] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 702.799058][T10400] netlink: 'syz.2.1230': attribute type 10 has an invalid length. [ 702.924304][T10402] netlink: 1039 bytes leftover after parsing attributes in process `syz.2.1231'. [ 703.532813][T10418] netlink: 'syz.3.1238': attribute type 1 has an invalid length. [ 703.550585][T10418] netlink: 7674 bytes leftover after parsing attributes in process `syz.3.1238'. [ 703.758623][T10429] netlink: 'syz.1.1242': attribute type 15 has an invalid length. [ 703.809322][T10429] netlink: 'syz.1.1242': attribute type 7 has an invalid length. [ 704.533761][T10462] netlink: 'syz.1.1252': attribute type 1 has an invalid length. [ 704.553740][T10462] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.1252'. [ 704.573460][T10463] netlink: 'syz.1.1252': attribute type 16 has an invalid length. [ 704.599002][T10463] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1252'. [ 704.829811][T10472] netlink: 'syz.1.1255': attribute type 6 has an invalid length. [ 704.849971][T10472] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1255'. [ 704.876275][T10470] netlink: 'syz.4.1254': attribute type 3 has an invalid length. [ 704.905251][T10470] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.1254'. [ 705.495468][T10487] netlink: 'syz.4.1260': attribute type 3 has an invalid length. [ 705.513716][T10487] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1260'. [ 705.887724][T10482] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.1258'. [ 705.910662][T10482] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1258'. [ 707.566736][T10523] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 709.101920][T10557] __nla_validate_parse: 3 callbacks suppressed [ 709.101955][T10557] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.1277'. [ 709.197126][T10559] mac80211_hwsim hwsim29 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 709.316008][T10561] netlink: 38831 bytes leftover after parsing attributes in process `syz.1.1279'. [ 709.476433][T10564] validate_nla: 2 callbacks suppressed [ 709.476463][T10564] netlink: 'syz.4.1280': attribute type 3 has an invalid length. [ 709.506322][T10564] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1280'. [ 709.689320][T10568] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1282'. [ 709.779203][T10572] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1282'. [ 710.678276][T10587] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1287'. [ 710.734137][T10587] openvswitch: netlink: Tunnel attr 0 has unexpected len 1788 expected 8 [ 710.896135][T10592] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1288'. [ 711.366366][T10603] netlink: 'syz.4.1290': attribute type 3 has an invalid length. [ 711.377430][T10603] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1290'. [ 712.103680][ T5086] Bluetooth: hci4: Dropping invalid advertising data [ 712.111215][ T5086] Bluetooth: hci4: Malformed LE Event: 0x02 [ 712.596053][T10625] netlink: 'syz.2.1300': attribute type 3 has an invalid length. [ 712.604601][T10625] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1300'. [ 712.839886][T10639] netlink: 'syz.1.1306': attribute type 21 has an invalid length. [ 712.852104][T10639] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1306'. [ 712.909736][T10639] netlink: 'syz.1.1306': attribute type 2 has an invalid length. [ 713.399031][ T5086] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 713.407127][ T5086] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0' [ 713.417677][ T5086] CPU: 0 PID: 5086 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 713.425118][T10658] netlink: 'syz.2.1313': attribute type 3 has an invalid length. [ 713.425255][ T5086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 713.425301][ T5086] Workqueue: hci0 hci_rx_work [ 713.447801][ T5086] Call Trace: [ 713.451104][ T5086] [ 713.454060][ T5086] dump_stack_lvl+0x18c/0x250 [ 713.458786][ T5086] ? show_regs_print_info+0x20/0x20 [ 713.464017][ T5086] ? load_image+0x420/0x420 [ 713.468571][ T5086] sysfs_create_dir_ns+0x26e/0x2a0 [ 713.473719][ T5086] ? __lock_acquire+0x7d80/0x7d80 [ 713.478790][ T5086] ? sysfs_warn_dup+0xa0/0xa0 [ 713.483493][ T5086] ? do_raw_spin_unlock+0x121/0x230 [ 713.488707][ T5086] kobject_add_internal+0x617/0xc90 [ 713.493955][ T5086] kobject_add+0x164/0x240 [ 713.498429][ T5086] ? kobject_init+0x1d0/0x1d0 [ 713.503137][ T5086] ? get_device_parent+0x366/0x390 [ 713.508280][ T5086] device_add+0x3fa/0xc40 [ 713.512642][ T5086] hci_conn_add_sysfs+0xd5/0x1e0 [ 713.517600][ T5086] le_conn_complete_evt+0xe9f/0x1480 [ 713.522902][ T5086] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 713.529151][ T5086] ? bt_info+0x180/0x180 [ 713.533397][ T5086] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 713.539061][ T5086] ? mutex_unlock+0x10/0x10 [ 713.543585][ T5086] ? skb_pull_data+0xf0/0x1f0 [ 713.548283][ T5086] hci_le_conn_complete_evt+0x187/0x440 [ 713.553846][ T5086] ? hci_remote_host_features_evt+0x150/0x150 [ 713.559926][ T5086] hci_event_packet+0x7b4/0x1280 [ 713.564879][ T5086] ? __lock_acquire+0x7d80/0x7d80 [ 713.569914][ T5086] ? lock_chain_count+0x20/0x20 [ 713.574775][ T5086] ? bis_list+0x290/0x290 [ 713.579113][ T5086] ? kcov_remote_start+0x513/0x810 [ 713.584228][ T5086] ? lockdep_hardirqs_on+0x98/0x150 [ 713.589437][ T5086] ? hci_send_to_monitor+0xd7/0x4f0 [ 713.594640][ T5086] hci_rx_work+0x43a/0xd60 [ 713.599066][ T5086] ? process_scheduled_works+0x975/0x1600 [ 713.604794][ T5086] process_scheduled_works+0xa60/0x1600 [ 713.610365][ T5086] ? worker_attach_to_pool+0x370/0x370 [ 713.615832][ T5086] ? assign_work+0x3cc/0x5d0 [ 713.620430][ T5086] worker_thread+0xa5e/0xfe0 [ 713.625042][ T5086] ? _raw_spin_unlock+0x40/0x40 [ 713.629897][ T5086] ? __kthread_parkme+0x71/0x1c0 [ 713.634844][ T5086] kthread+0x2fa/0x390 [ 713.638913][ T5086] ? pr_cont_work+0x550/0x550 [ 713.643594][ T5086] ? kthread_blkcg+0xd0/0xd0 [ 713.648183][ T5086] ret_from_fork+0x48/0x80 [ 713.652599][ T5086] ? kthread_blkcg+0xd0/0xd0 [ 713.657190][ T5086] ret_from_fork_asm+0x11/0x20 [ 713.661971][ T5086] [ 713.674049][ T5086] kobject: kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 713.688251][ T5086] Bluetooth: hci0: failed to register connection device [ 713.968854][T10670] netlink: 'syz.2.1318': attribute type 10 has an invalid length. [ 714.035831][ T5976] wlan1: Trigger new scan to find an IBSS to join [ 714.231012][T10681] netlink: 'syz.4.1323': attribute type 21 has an invalid length. [ 714.418982][T10695] netlink: 'syz.4.1326': attribute type 3 has an invalid length. [ 714.430945][T10695] __nla_validate_parse: 2 callbacks suppressed [ 714.430978][T10695] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1326'. [ 714.621543][T10702] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1328'. [ 714.680719][T10702] bridge0: port 1(bridge_slave_0) entered disabled state [ 714.789982][T10702] bridge_slave_0 (unregistering): left allmulticast mode [ 714.812726][T10702] bridge_slave_0 (unregistering): left promiscuous mode [ 714.821867][T10702] bridge0: port 1(bridge_slave_0) entered disabled state [ 714.855305][T10710] netlink: 'syz.1.1331': attribute type 21 has an invalid length. [ 714.867222][T10710] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1331'. [ 714.886833][T10710] netlink: 'syz.1.1331': attribute type 5 has an invalid length. [ 714.894706][T10710] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1331'. [ 714.915197][T10711] netlink: 'syz.1.1331': attribute type 10 has an invalid length. [ 714.923103][T10711] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1331'. [ 714.949511][T10711] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 714.965054][T10711] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 714.992241][T10711] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 715.133299][T10718] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1334'. [ 715.289085][T10724] netlink: 'syz.1.1336': attribute type 3 has an invalid length. [ 715.315745][T10724] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1336'. [ 715.778944][T10738] netlink: 'syz.2.1338': attribute type 21 has an invalid length. [ 715.875281][T10738] netlink: 'syz.2.1338': attribute type 6 has an invalid length. [ 715.924673][T10744] netlink: 'syz.1.1339': attribute type 3 has an invalid length. [ 716.037080][T10744] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1339'. [ 716.222473][T10750] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1341'. [ 718.039120][ T3544] wlan1: Trigger new scan to find an IBSS to join [ 718.636552][T10813] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1356'. [ 720.499905][T10829] netlink: 'syz.1.1362': attribute type 3 has an invalid length. [ 720.530200][T10829] __nla_validate_parse: 1 callbacks suppressed [ 720.530355][T10829] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1362'. [ 720.681605][T10834] netlink: 'syz.3.1364': attribute type 10 has an invalid length. [ 720.766010][T10834] netlink: 210880 bytes leftover after parsing attributes in process `syz.3.1364'. [ 721.014228][ T5976] wlan1: Trigger new scan to find an IBSS to join [ 723.476449][ T3544] wlan1: Creating new IBSS network, BSSID 6a:ad:f3:a2:d3:86 [ 723.940761][T10846] netlink: 'syz.2.1366': attribute type 2 has an invalid length. [ 723.970586][T10846] netlink: 184 bytes leftover after parsing attributes in process `syz.2.1366'. [ 724.242952][T10861] netlink: 'syz.1.1372': attribute type 1 has an invalid length. [ 724.613979][T10877] netlink: 'syz.3.1374': attribute type 3 has an invalid length. [ 724.634729][T10877] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1374'. [ 724.635575][T10879] netlink: 'syz.1.1382': attribute type 10 has an invalid length. [ 724.746640][T10881] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1375'. [ 724.784269][T10890] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1376'. [ 724.817270][T10881] Dead loop on virtual device ip6_vti0, fix it urgently! [ 725.161794][T10900] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1381'. [ 725.513538][T10912] netlink: 'syz.2.1386': attribute type 3 has an invalid length. [ 725.546699][T10912] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1386'. [ 725.805413][T10919] netlink: 'syz.2.1387': attribute type 10 has an invalid length. [ 726.224496][T10936] netlink: 'syz.1.1391': attribute type 9 has an invalid length. [ 726.234163][T10936] netlink: 143 bytes leftover after parsing attributes in process `syz.1.1391'. [ 726.403557][T10941] netlink: 'syz.3.1392': attribute type 21 has an invalid length. [ 726.421370][T10941] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1392'. [ 726.600136][T10941] sit0: entered promiscuous mode [ 726.867131][T10951] netlink: 'syz.2.1396': attribute type 29 has an invalid length. [ 727.004714][T10959] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1396'. [ 727.324115][T10951] netlink: 'syz.2.1396': attribute type 29 has an invalid length. [ 727.349472][T10960] netlink: 'syz.2.1396': attribute type 29 has an invalid length. [ 728.126553][T10967] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1400'. [ 728.792576][T10996] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1408'. [ 728.802073][T10996] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1408'. [ 728.811870][T10994] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1408'. [ 728.828580][T10996] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1408'. [ 728.840100][T10996] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1408'. [ 728.897261][T10993] netlink: 'syz.3.1408': attribute type 10 has an invalid length. [ 730.021353][T11025] netlink: 'syz.2.1418': attribute type 27 has an invalid length. [ 730.031082][T11025] netlink: 'syz.2.1418': attribute type 25 has an invalid length. [ 730.220394][T11031] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 730.573906][T11053] validate_nla: 67 callbacks suppressed [ 730.573949][T11053] netlink: 'syz.4.1425': attribute type 21 has an invalid length. [ 730.599524][T11053] __nla_validate_parse: 36 callbacks suppressed [ 730.599569][T11053] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1425'. [ 730.714822][T11053] sit0: left promiscuous mode [ 731.602585][T11056] sit0: entered promiscuous mode [ 731.676771][T11061] veth0_vlan: entered allmulticast mode [ 732.169966][T11092] sctp: [Deprecated]: syz.3.1435 (pid 11092) Use of struct sctp_assoc_value in delayed_ack socket option. [ 732.169966][T11092] Use struct sctp_sack_info instead [ 732.218204][T11090] netlink: 'syz.4.1436': attribute type 3 has an invalid length. [ 732.228553][T11090] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1436'. [ 732.546155][T11073] syz.2.1429 (11073) used greatest stack depth: 17128 bytes left [ 732.964426][T11107] netlink: 'syz.2.1439': attribute type 9 has an invalid length. [ 732.982429][T11107] netlink: 'syz.2.1439': attribute type 23 has an invalid length. [ 732.991905][T11107] netlink: 156008 bytes leftover after parsing attributes in process `syz.2.1439'. [ 733.786816][T11130] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 735.994224][T11137] netlink: 'syz.2.1448': attribute type 10 has an invalid length. [ 736.005030][T11137] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.1448'. [ 736.383076][T11178] netlink: 'syz.2.1458': attribute type 10 has an invalid length. [ 736.436462][T11178] netlink: 'syz.2.1458': attribute type 29 has an invalid length. [ 736.469907][T11178] netlink: 'syz.2.1458': attribute type 29 has an invalid length. [ 736.495862][T11167] netlink: 'syz.1.1456': attribute type 10 has an invalid length. [ 736.504671][T11167] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1456'. [ 736.523897][T11167] hsr0: entered promiscuous mode [ 736.587017][T11167] bridge0: port 1(hsr0) entered blocking state [ 736.606558][T11167] bridge0: port 1(hsr0) entered disabled state [ 736.610122][T11180] netlink: 'syz.3.1459': attribute type 2 has an invalid length. [ 736.619401][T11167] hsr0: entered allmulticast mode [ 736.623308][T11180] netlink: 1045 bytes leftover after parsing attributes in process `syz.3.1459'. [ 736.627879][T11167] hsr_slave_0: entered allmulticast mode [ 736.661868][T11167] hsr_slave_1: entered allmulticast mode [ 736.684327][T11180] netlink: 'syz.3.1459': attribute type 1 has an invalid length. [ 736.712864][T11167] bridge0: port 1(hsr0) entered blocking state [ 736.717342][T11180] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.1459'. [ 736.720013][T11167] bridge0: port 1(hsr0) entered forwarding state [ 736.752161][T11178] netlink: 'syz.2.1458': attribute type 29 has an invalid length. [ 736.763480][T11181] netlink: 'syz.2.1458': attribute type 29 has an invalid length. [ 736.963433][T11188] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1462'. [ 737.433389][T11210] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1469'. [ 737.624593][T11217] netlink: 14560 bytes leftover after parsing attributes in process `syz.1.1472'. [ 738.061940][T11223] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 738.073928][T11223] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 738.273353][T11236] FAULT_INJECTION: forcing a failure. [ 738.273353][T11236] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 738.305238][T11236] CPU: 0 PID: 11236 Comm: syz.2.1477 Not tainted syzkaller #0 [ 738.312762][T11236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 738.322858][T11236] Call Trace: [ 738.326166][T11236] [ 738.329121][T11236] dump_stack_lvl+0x18c/0x250 [ 738.333837][T11236] ? show_regs_print_info+0x20/0x20 [ 738.339070][T11236] ? load_image+0x420/0x420 [ 738.343601][T11236] ? __might_fault+0xaa/0x120 [ 738.348301][T11236] ? __lock_acquire+0x7d80/0x7d80 [ 738.353364][T11236] should_fail_ex+0x394/0x4c0 [ 738.358078][T11236] _copy_from_user+0x2f/0xe0 [ 738.362703][T11236] __sys_bpf+0x23e/0x890 [ 738.366984][T11236] ? bpf_link_show_fdinfo+0x390/0x390 [ 738.372398][T11236] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 738.378597][T11236] __x64_sys_bpf+0x7c/0x90 [ 738.383035][T11236] do_syscall_64+0x55/0xb0 [ 738.387477][T11236] ? clear_bhb_loop+0x40/0x90 [ 738.392172][T11236] ? clear_bhb_loop+0x40/0x90 [ 738.396876][T11236] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 738.402794][T11236] RIP: 0033:0x7fbd2f59e159 [ 738.407242][T11236] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 738.426881][T11236] RSP: 002b:00007fbd304af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 738.435329][T11236] RAX: ffffffffffffffda RBX: 00007fbd2f825fa0 RCX: 00007fbd2f59e159 [ 738.441197][T11241] netlink: 'syz.3.1481': attribute type 3 has an invalid length. [ 738.443303][T11236] RDX: 0000000000000070 RSI: 0000200000000440 RDI: 0000000000000005 [ 738.451261][T11241] netlink: 144448 bytes leftover after parsing attributes in process `syz.3.1481'. [ 738.458980][T11236] RBP: 00007fbd304af090 R08: 0000000000000000 R09: 0000000000000000 [ 738.458998][T11236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 738.459009][T11236] R13: 00007fbd2f826038 R14: 00007fbd2f825fa0 R15: 00007fffcded2f78 [ 738.459037][T11236] [ 738.472608][T11242] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1479'. [ 740.304426][T11279] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1490'. [ 740.334773][T11279] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 740.428311][T11287] FAULT_INJECTION: forcing a failure. [ 740.428311][T11287] name failslab, interval 1, probability 0, space 0, times 1 [ 740.485071][T11287] CPU: 1 PID: 11287 Comm: syz.4.1491 Not tainted syzkaller #0 [ 740.492576][T11287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 740.502655][T11287] Call Trace: [ 740.505952][T11287] [ 740.508897][T11287] dump_stack_lvl+0x18c/0x250 [ 740.513605][T11287] ? show_regs_print_info+0x20/0x20 [ 740.518826][T11287] ? load_image+0x420/0x420 [ 740.523352][T11287] ? __might_sleep+0xe0/0xe0 [ 740.527970][T11287] ? __lock_acquire+0x7d80/0x7d80 [ 740.533024][T11287] should_fail_ex+0x394/0x4c0 [ 740.537734][T11287] should_failslab+0x9/0x20 [ 740.542351][T11287] slab_pre_alloc_hook+0x59/0x300 [ 740.547406][T11287] ? __get_vm_area_node+0x125/0x370 [ 740.552642][T11287] __kmem_cache_alloc_node+0x53/0x250 [ 740.558045][T11287] ? __get_vm_area_node+0x125/0x370 [ 740.563275][T11287] kmalloc_node_trace+0x26/0xe0 [ 740.568159][T11287] __get_vm_area_node+0x125/0x370 [ 740.573223][T11287] __vmalloc_node_range+0x36f/0x1320 [ 740.578538][T11287] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 740.584111][T11287] ? mark_lock+0x94/0x320 [ 740.588468][T11287] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 740.594225][T11287] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 740.600240][T11287] ? free_vm_area+0x50/0x50 [ 740.604779][T11287] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 740.610962][T11287] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 740.616531][T11287] __vmalloc+0x7a/0x90 [ 740.620624][T11287] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 740.626194][T11287] bpf_prog_alloc_no_stats+0x46/0x430 [ 740.631596][T11287] bpf_prog_alloc+0x3d/0x1a0 [ 740.636215][T11287] bpf_prog_load+0x6b2/0x1610 [ 740.640926][T11287] ? map_freeze+0x420/0x420 [ 740.645452][T11287] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 740.651629][T11287] ? lockdep_hardirqs_on+0x98/0x150 [ 740.656856][T11287] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 740.663042][T11287] ? _copy_from_user+0x21/0xe0 [ 740.667827][T11287] ? _copy_from_user+0x7a/0xe0 [ 740.672614][T11287] ? kasan_check_range+0x10/0x290 [ 740.677662][T11287] ? bpf_lsm_bpf+0x9/0x10 [ 740.682017][T11287] ? security_bpf+0x7e/0xa0 [ 740.686554][T11287] __sys_bpf+0x5ba/0x890 [ 740.690819][T11287] ? bpf_link_show_fdinfo+0x390/0x390 [ 740.696226][T11287] ? lock_chain_count+0x20/0x20 [ 740.701102][T11287] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 740.707114][T11287] __x64_sys_bpf+0x7c/0x90 [ 740.711553][T11287] do_syscall_64+0x55/0xb0 [ 740.716001][T11287] ? clear_bhb_loop+0x40/0x90 [ 740.720700][T11287] ? clear_bhb_loop+0x40/0x90 [ 740.725407][T11287] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 740.731322][T11287] RIP: 0033:0x7f9d8a39e159 [ 740.735759][T11287] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 740.755392][T11287] RSP: 002b:00007f9d8b24d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 740.763841][T11287] RAX: ffffffffffffffda RBX: 00007f9d8a625fa0 RCX: 00007f9d8a39e159 [ 740.771844][T11287] RDX: 0000000000000070 RSI: 0000200000000440 RDI: 0000000000000005 [ 740.779844][T11287] RBP: 00007f9d8b24d090 R08: 0000000000000000 R09: 0000000000000000 [ 740.787849][T11287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 740.795850][T11287] R13: 00007f9d8a626038 R14: 00007f9d8a625fa0 R15: 00007ffc9d2ff8a8 [ 740.803870][T11287] [ 740.829925][T11287] syz.4.1491: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 740.911741][T11287] CPU: 0 PID: 11287 Comm: syz.4.1491 Not tainted syzkaller #0 [ 740.919265][T11287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 740.929346][T11287] Call Trace: [ 740.932642][T11287] [ 740.935597][T11287] dump_stack_lvl+0x18c/0x250 [ 740.940304][T11287] ? show_regs_print_info+0x20/0x20 [ 740.945530][T11287] ? load_image+0x420/0x420 [ 740.950058][T11287] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 740.956502][T11287] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 740.963038][T11287] warn_alloc+0x246/0x340 [ 740.967402][T11287] ? __get_vm_area_node+0x125/0x370 [ 740.972633][T11287] ? zone_watermark_ok_safe+0x230/0x230 [ 740.978204][T11287] ? rcu_is_watching+0x15/0xb0 [ 740.983000][T11287] ? __get_vm_area_node+0x356/0x370 [ 740.988233][T11287] __vmalloc_node_range+0x394/0x1320 [ 740.993548][T11287] ? mark_lock+0x94/0x320 [ 740.997907][T11287] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 741.003665][T11287] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 741.009677][T11287] ? free_vm_area+0x50/0x50 [ 741.014214][T11287] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 741.020405][T11287] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 741.025974][T11287] __vmalloc+0x7a/0x90 [ 741.030073][T11287] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 741.035647][T11287] bpf_prog_alloc_no_stats+0x46/0x430 [ 741.041057][T11287] bpf_prog_alloc+0x3d/0x1a0 [ 741.045681][T11287] bpf_prog_load+0x6b2/0x1610 [ 741.050396][T11287] ? map_freeze+0x420/0x420 [ 741.054921][T11287] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 741.061103][T11287] ? lockdep_hardirqs_on+0x98/0x150 [ 741.066332][T11287] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 741.072514][T11287] ? _copy_from_user+0x21/0xe0 [ 741.077300][T11287] ? _copy_from_user+0x7a/0xe0 [ 741.082089][T11287] ? kasan_check_range+0x10/0x290 [ 741.087138][T11287] ? bpf_lsm_bpf+0x9/0x10 [ 741.091490][T11287] ? security_bpf+0x7e/0xa0 [ 741.096017][T11287] __sys_bpf+0x5ba/0x890 [ 741.100290][T11287] ? bpf_link_show_fdinfo+0x390/0x390 [ 741.105693][T11287] ? lock_chain_count+0x20/0x20 [ 741.110573][T11287] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 741.116582][T11287] __x64_sys_bpf+0x7c/0x90 [ 741.121025][T11287] do_syscall_64+0x55/0xb0 [ 741.125466][T11287] ? clear_bhb_loop+0x40/0x90 [ 741.130165][T11287] ? clear_bhb_loop+0x40/0x90 [ 741.134868][T11287] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 741.140780][T11287] RIP: 0033:0x7f9d8a39e159 [ 741.145211][T11287] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 741.164843][T11287] RSP: 002b:00007f9d8b24d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 741.173283][T11287] RAX: ffffffffffffffda RBX: 00007f9d8a625fa0 RCX: 00007f9d8a39e159 [ 741.181277][T11287] RDX: 0000000000000070 RSI: 0000200000000440 RDI: 0000000000000005 [ 741.189268][T11287] RBP: 00007f9d8b24d090 R08: 0000000000000000 R09: 0000000000000000 [ 741.197259][T11287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 741.205248][T11287] R13: 00007f9d8a626038 R14: 00007f9d8a625fa0 R15: 00007ffc9d2ff8a8 [ 741.213247][T11287] [ 741.259810][T11287] Mem-Info: [ 741.265884][T11287] active_anon:13078 inactive_anon:0 isolated_anon:0 [ 741.265884][T11287] active_file:17617 inactive_file:40072 isolated_file:0 [ 741.265884][T11287] unevictable:768 dirty:69 writeback:0 [ 741.265884][T11287] slab_reclaimable:10962 slab_unreclaimable:98983 [ 741.265884][T11287] mapped:36166 shmem:8556 pagetables:650 [ 741.265884][T11287] sec_pagetables:0 bounce:0 [ 741.265884][T11287] kernel_misc_reclaimable:0 [ 741.265884][T11287] free:1322354 free_pcp:11012 free_cma:0 [ 741.322767][T11287] Node 0 active_anon:52612kB inactive_anon:0kB active_file:70468kB inactive_file:160088kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:144864kB dirty:276kB writeback:0kB shmem:32988kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11872kB pagetables:2600kB sec_pagetables:0kB all_unreclaimable? no [ 741.393125][T11293] validate_nla: 5 callbacks suppressed [ 741.393142][T11293] netlink: 'syz.1.1492': attribute type 13 has an invalid length. [ 741.445119][T11287] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 741.545121][T11287] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 741.602421][T11287] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 741.620107][T11287] Node 0 DMA32 free:1378612kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:57972kB inactive_anon:0kB active_file:70468kB inactive_file:159264kB unevictable:1536kB writepending:276kB present:3129332kB managed:2586824kB mlocked:0kB bounce:0kB free_pcp:22932kB local_pcp:10716kB free_cma:0kB [ 741.741519][T11287] lowmem_reserve[]: 0 0 0 0 0 [ 741.752984][T11287] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 741.845024][T11287] lowmem_reserve[]: 0 0 0 0 0 [ 741.854143][T11287] Node 1 Normal free:3889000kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:21148kB local_pcp:7620kB free_cma:0kB [ 741.917132][T11287] lowmem_reserve[]: 0 0 0 0 0 [ 741.932649][T11287] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 741.970533][T11287] Node 0 DMA32: 1072*4kB (UE) 285*8kB (UME) 121*16kB (UM) 1*32kB (M) 280*64kB (UM) 141*128kB (UME) 73*256kB (UM) 24*512kB (UME) 10*1024kB (UME) 12*2048kB (UME) 308*4096kB (UM) = 1371864kB [ 742.028764][T11287] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 742.070601][T11287] Node 1 Normal: 168*4kB (UME) 63*8kB (UME) 43*16kB (UME) 59*32kB (UME) 15*64kB (UME) 2*128kB (U) 0*256kB 2*512kB (ME) 2*1024kB (UE) 1*2048kB (E) 947*4096kB (M) = 3889000kB [ 742.155364][T11287] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 742.171388][T11301] netlink: 'syz.1.1494': attribute type 10 has an invalid length. [ 742.185105][T11287] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 742.194491][T11287] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 742.225073][T11301] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1494'. [ 742.246158][T11287] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 742.265007][T11287] 69574 total pagecache pages [ 742.273151][T11287] 0 pages in swap cache [ 742.295006][T11287] Free swap = 124996kB [ 742.299897][T11287] Total swap = 124996kB [ 742.304081][T11287] 2097051 pages RAM [ 742.317689][T11306] netlink: 668 bytes leftover after parsing attributes in process `syz.3.1495'. [ 742.325021][T11301] bridge0: port 3(ipvlan1) entered blocking state [ 742.335203][T11287] 0 pages HighMem/MovableOnly [ 742.337548][T11306] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 742.339880][T11287] 416959 pages reserved [ 742.339890][T11287] 0 pages cma reserved [ 742.382530][T11301] bridge0: port 3(ipvlan1) entered disabled state [ 742.429141][T11306] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 742.442738][T11301] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 742.597197][T11303] netlink: 'syz.1.1494': attribute type 10 has an invalid length. [ 742.640165][T11303] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1494'. [ 742.697870][T11303] bridge0: port 3(ipvlan1) entered blocking state [ 742.704444][T11303] bridge0: port 3(ipvlan1) entered disabled state [ 742.756985][T11303] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 742.957310][T11317] netlink: 'syz.3.1498': attribute type 27 has an invalid length. [ 743.677815][T11337] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1504'. [ 743.693432][T11335] netlink: 'syz.2.1503': attribute type 3 has an invalid length. [ 743.708966][T11335] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1503'. [ 744.023450][T11350] netlink: 'syz.2.1506': attribute type 21 has an invalid length. [ 744.042571][T11350] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1506'. [ 744.075788][T11353] netlink: 'syz.1.1507': attribute type 13 has an invalid length. [ 744.105418][T11353] netlink: 172 bytes leftover after parsing attributes in process `syz.1.1507'. [ 744.126869][T11353] erspan0: refused to change device tx_queue_len [ 746.522366][T11408] netlink: 'syz.1.1521': attribute type 39 has an invalid length. [ 746.563584][T11407] netlink: 'syz.4.1522': attribute type 3 has an invalid length. [ 746.601913][T11407] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1522'. [ 746.721453][T11416] netlink: 'syz.2.1523': attribute type 10 has an invalid length. [ 746.770103][T11408] netlink: 'syz.1.1521': attribute type 39 has an invalid length. [ 746.812521][T11408] netlink: 'syz.1.1521': attribute type 39 has an invalid length. [ 746.821140][T11408] netlink: 'syz.1.1521': attribute type 39 has an invalid length. [ 746.837608][T11408] netlink: 'syz.1.1521': attribute type 39 has an invalid length. [ 746.858836][T11408] netlink: 'syz.1.1521': attribute type 39 has an invalid length. [ 746.881696][T11408] netlink: 'syz.1.1521': attribute type 39 has an invalid length. [ 746.916962][T11408] netlink: 'syz.1.1521': attribute type 39 has an invalid length. [ 747.422527][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.429293][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.389635][T11459] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1533'. [ 748.634026][T11437] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 748.934220][T11477] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1538'. [ 749.381475][T11496] raw_sendmsg: syz.4.1543 forgot to set AF_INET. Fix it! [ 749.409168][T11499] netlink: 198100 bytes leftover after parsing attributes in process `syz.2.1544'. [ 750.306276][T11542] netlink: 16054 bytes leftover after parsing attributes in process `syz.3.1549'. [ 750.629983][T11550] netlink: 22407 bytes leftover after parsing attributes in process `syz.3.1550'. [ 753.752639][T11628] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.1577'. [ 754.204429][T11637] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1581'. [ 754.670848][T11655] validate_nla: 35 callbacks suppressed [ 754.670899][T11655] netlink: 'syz.2.1587': attribute type 3 has an invalid length. [ 754.685409][T11655] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1587'. [ 754.840971][T11657] syzkaller0: entered promiscuous mode [ 754.856068][T11657] syzkaller0: entered allmulticast mode [ 754.933800][T11664] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1590'. [ 755.015595][T11667] netlink: 'syz.2.1592': attribute type 63 has an invalid length. [ 756.539583][T11664] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1590'. [ 756.561369][T11667] netlink: 'syz.2.1592': attribute type 63 has an invalid length. [ 757.160870][T11689] netlink: 'syz.1.1600': attribute type 3 has an invalid length. [ 757.183094][T11689] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1600'. [ 758.314089][T11693] syzkaller0: entered promiscuous mode [ 758.320796][T11693] syzkaller0: entered allmulticast mode [ 758.353907][T11697] netlink: 'syz.1.1603': attribute type 10 has an invalid length. [ 764.831389][T11730] netlink: 'syz.2.1611': attribute type 3 has an invalid length. [ 764.845339][T11730] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1611'. [ 765.221817][T11742] netlink: 'syz.2.1615': attribute type 4 has an invalid length. [ 766.249656][T11768] netlink: 'syz.4.1623': attribute type 19 has an invalid length. [ 766.305016][T11768] netlink: 172 bytes leftover after parsing attributes in process `syz.4.1623'. [ 766.338354][T11767] netlink: 'syz.1.1622': attribute type 7 has an invalid length. [ 766.903484][T11781] netlink: 'syz.3.1628': attribute type 10 has an invalid length. [ 766.982472][T11785] netlink: 'syz.1.1629': attribute type 3 has an invalid length. [ 766.996445][T11785] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1629'. [ 767.142244][T11790] netlink: 'syz.4.1630': attribute type 3 has an invalid length. [ 767.186790][T11790] netlink: 'syz.4.1630': attribute type 1 has an invalid length. [ 767.194879][T11790] netlink: 'syz.4.1630': attribute type 1 has an invalid length. [ 767.214900][T11790] netlink: 'syz.4.1630': attribute type 2 has an invalid length. [ 767.233856][T11790] netlink: 198100 bytes leftover after parsing attributes in process `syz.4.1630'. [ 767.583526][T11793] netlink: 192436 bytes leftover after parsing attributes in process `syz.4.1631'. [ 767.592950][T11793] openvswitch: netlink: Message has 20476 unknown bytes. [ 767.827136][T11797] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.1633'. [ 767.959899][T11799] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.1634'. [ 768.105486][T11802] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1635'. [ 768.442392][T11816] netlink: 198100 bytes leftover after parsing attributes in process `syz.3.1640'. [ 770.856215][T11873] validate_nla: 6 callbacks suppressed [ 770.856232][T11873] netlink: 'syz.1.1656': attribute type 3 has an invalid length. [ 770.878726][T11876] delete_channel: no stack [ 770.895308][T11873] netlink: 'syz.1.1656': attribute type 1 has an invalid length. [ 770.903454][T11873] netlink: 'syz.1.1656': attribute type 1 has an invalid length. [ 770.942623][T11873] netlink: 'syz.1.1656': attribute type 2 has an invalid length. [ 770.955491][T11873] netlink: 198100 bytes leftover after parsing attributes in process `syz.1.1656'. [ 771.190435][T11898] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.1665'. [ 771.520769][T11909] netlink: 'syz.4.1670': attribute type 25 has an invalid length. [ 771.528984][T11909] netlink: 'syz.4.1670': attribute type 3 has an invalid length. [ 771.537364][T11909] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1670'. [ 771.944012][T11925] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1674'. [ 771.967402][T11925] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1674'. [ 772.204081][T11937] netlink: 'syz.4.1677': attribute type 39 has an invalid length. [ 772.592698][T11940] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1677'. [ 772.785774][T11947] sock: sock_set_timeout: `syz.1.1680' (pid 11947) tries to set negative timeout [ 772.898730][T11953] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.1683'. [ 773.294536][T11969] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.1688'. [ 773.564262][T11978] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1690'. [ 775.294409][T12014] netlink: 'syz.2.1701': attribute type 2 has an invalid length. [ 775.327173][T12014] netlink: 'syz.2.1701': attribute type 21 has an invalid length. [ 775.355112][T12014] netlink: 14548 bytes leftover after parsing attributes in process `syz.2.1701'. [ 776.306224][T12029] netlink: 'syz.2.1701': attribute type 2 has an invalid length. [ 776.320479][T12030] netlink: 'syz.2.1701': attribute type 21 has an invalid length. [ 776.345056][T12030] netlink: 14548 bytes leftover after parsing attributes in process `syz.2.1701'. [ 776.418299][T12046] sit0: left promiscuous mode [ 776.663015][T12044] sit0: entered promiscuous mode [ 776.850663][T12055] netlink: 'syz.2.1713': attribute type 29 has an invalid length. [ 776.885386][T12055] netlink: 'syz.2.1713': attribute type 29 has an invalid length. [ 776.984605][T12055] netlink: 'syz.2.1713': attribute type 29 has an invalid length. [ 777.110260][T12058] netlink: 'syz.2.1713': attribute type 29 has an invalid length. [ 777.464222][T12071] netlink: 'syz.2.1717': attribute type 21 has an invalid length. [ 778.015627][T12084] netlink: 'syz.2.1722': attribute type 10 has an invalid length. [ 778.023514][T12084] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1722'. [ 778.065309][T12084] ipvlan1: entered promiscuous mode [ 778.083537][T12084] ipvlan1: entered allmulticast mode [ 778.099323][T12084] veth0_vlan: entered allmulticast mode [ 778.127605][T12084] bridge0: port 3(ipvlan1) entered blocking state [ 778.135157][T12084] bridge0: port 3(ipvlan1) entered disabled state [ 778.143999][T12084] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 778.513823][T12102] netlink: 65023 bytes leftover after parsing attributes in process `syz.2.1729'. [ 778.572698][T12104] netlink: 'syz.4.1730': attribute type 29 has an invalid length. [ 778.575167][T12102] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1729'. [ 778.584204][T12104] netlink: 'syz.4.1730': attribute type 29 has an invalid length. [ 778.638214][T12102] debugfs: Directory '!!ô!' with parent 'ieee80211' already present! [ 778.877628][T12110] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1732'. [ 778.996948][T12114] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1734'. [ 779.692924][T12120] delete_channel: no stack [ 780.493320][T12155] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.1744'. [ 780.533094][T12155] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.1744'. [ 780.557780][T12155] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.1744'. [ 780.586526][T12155] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.1744'. [ 781.425270][ T5834] Bluetooth: hci2: unexpected event 0x35 length: 15 > 6 [ 781.859661][T12184] validate_nla: 69 callbacks suppressed [ 781.859678][T12184] netlink: 'syz.4.1764': attribute type 29 has an invalid length. [ 781.937181][T12190] __nla_validate_parse: 63 callbacks suppressed [ 781.937198][T12190] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1758'. [ 781.991554][T12184] netlink: 'syz.4.1764': attribute type 29 has an invalid length. [ 782.298592][T12205] FAULT_INJECTION: forcing a failure. [ 782.298592][T12205] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 782.354100][T12205] CPU: 0 PID: 12205 Comm: syz.3.1763 Not tainted syzkaller #0 [ 782.361634][T12205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 782.371709][T12205] Call Trace: [ 782.375003][T12205] [ 782.377947][T12205] dump_stack_lvl+0x18c/0x250 [ 782.382663][T12205] ? show_regs_print_info+0x20/0x20 [ 782.387881][T12205] ? load_image+0x420/0x420 [ 782.392405][T12205] ? __might_fault+0xaa/0x120 [ 782.397113][T12205] ? __lock_acquire+0x7d80/0x7d80 [ 782.402184][T12205] should_fail_ex+0x394/0x4c0 [ 782.406899][T12205] _copy_from_user+0x2f/0xe0 [ 782.411524][T12205] __sys_bpf+0x23e/0x890 [ 782.415804][T12205] ? bpf_link_show_fdinfo+0x390/0x390 [ 782.421223][T12205] ? lock_chain_count+0x20/0x20 [ 782.426120][T12205] __x64_sys_bpf+0x7c/0x90 [ 782.430584][T12205] do_syscall_64+0x55/0xb0 [ 782.435029][T12205] ? clear_bhb_loop+0x40/0x90 [ 782.439738][T12205] ? clear_bhb_loop+0x40/0x90 [ 782.444443][T12205] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 782.450367][T12205] RIP: 0033:0x7eff3379e159 [ 782.454805][T12205] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 782.474440][T12205] RSP: 002b:00007eff34707028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 782.482891][T12205] RAX: ffffffffffffffda RBX: 00007eff33a25fa0 RCX: 00007eff3379e159 [ 782.490890][T12205] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 000000000000000a [ 782.498891][T12205] RBP: 00007eff34707090 R08: 0000000000000000 R09: 0000000000000000 [ 782.506886][T12205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 782.514882][T12205] R13: 00007eff33a26038 R14: 00007eff33a25fa0 R15: 00007ffcb8e58868 [ 782.522949][T12205] [ 783.283563][T12226] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 783.295638][T12226] syzkaller1: linktype set to 769 [ 783.305388][T12230] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 783.348449][T12230] netlink: 'syz.2.1772': attribute type 9 has an invalid length. [ 783.357819][T12230] netlink: 164476 bytes leftover after parsing attributes in process `syz.2.1772'. [ 783.361001][T12226] netlink: 'syz.1.1770': attribute type 3 has an invalid length. [ 783.386911][T12226] netlink: 201372 bytes leftover after parsing attributes in process `syz.1.1770'. [ 783.631999][T12232] netlink: 'syz.2.1772': attribute type 9 has an invalid length. [ 783.710493][T12232] netlink: 187516 bytes leftover after parsing attributes in process `syz.2.1772'. [ 783.839347][T12240] FAULT_INJECTION: forcing a failure. [ 783.839347][T12240] name failslab, interval 1, probability 0, space 0, times 0 [ 783.899387][T12240] CPU: 0 PID: 12240 Comm: syz.4.1775 Not tainted syzkaller #0 [ 783.906915][T12240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 783.916996][T12240] Call Trace: [ 783.920304][T12240] [ 783.923256][T12240] dump_stack_lvl+0x18c/0x250 [ 783.927967][T12240] ? show_regs_print_info+0x20/0x20 [ 783.933194][T12240] ? load_image+0x420/0x420 [ 783.937724][T12240] ? __lock_acquire+0x7d80/0x7d80 [ 783.942784][T12240] should_fail_ex+0x394/0x4c0 [ 783.947497][T12240] should_failslab+0x9/0x20 [ 783.952029][T12240] slab_pre_alloc_hook+0x59/0x300 [ 783.957089][T12240] ? bpf_test_init+0x9f/0x140 [ 783.961786][T12240] ? bpf_test_init+0x9f/0x140 [ 783.966567][T12240] __kmem_cache_alloc_node+0x53/0x250 [ 783.971973][T12240] ? bpf_test_init+0x9f/0x140 [ 783.976678][T12240] __kmalloc+0xa7/0x240 [ 783.980866][T12240] bpf_test_init+0x9f/0x140 [ 783.985392][T12240] bpf_prog_test_run_xdp+0x4cd/0x1140 [ 783.990766][T12240] ? __lock_acquire+0x7d80/0x7d80 [ 783.995801][T12240] ? dev_put+0x80/0x80 [ 783.999868][T12240] ? dev_put+0x80/0x80 [ 784.003933][T12240] bpf_prog_test_run+0x31f/0x390 [ 784.008902][T12240] __sys_bpf+0x49d/0x890 [ 784.013166][T12240] ? bpf_link_show_fdinfo+0x390/0x390 [ 784.018581][T12240] ? lock_chain_count+0x20/0x20 [ 784.023459][T12240] __x64_sys_bpf+0x7c/0x90 [ 784.027895][T12240] do_syscall_64+0x55/0xb0 [ 784.032331][T12240] ? clear_bhb_loop+0x40/0x90 [ 784.037026][T12240] ? clear_bhb_loop+0x40/0x90 [ 784.041730][T12240] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 784.047649][T12240] RIP: 0033:0x7f9d8a39e159 [ 784.052085][T12240] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 784.071707][T12240] RSP: 002b:00007f9d8b24d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 784.080122][T12240] RAX: ffffffffffffffda RBX: 00007f9d8a625fa0 RCX: 00007f9d8a39e159 [ 784.088089][T12240] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 000000000000000a [ 784.096053][T12240] RBP: 00007f9d8b24d090 R08: 0000000000000000 R09: 0000000000000000 [ 784.104024][T12240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 784.111990][T12240] R13: 00007f9d8a626038 R14: 00007f9d8a625fa0 R15: 00007ffc9d2ff8a8 [ 784.119975][T12240] [ 784.238256][T12254] netlink: 'syz.3.1781': attribute type 63 has an invalid length. [ 784.275564][T12254] netlink: 'syz.3.1781': attribute type 63 has an invalid length. [ 784.527809][T12252] netlink: 'syz.1.1779': attribute type 9 has an invalid length. [ 784.551057][T12252] netlink: 379 bytes leftover after parsing attributes in process `syz.1.1779'. [ 784.736722][T12252] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1779'. [ 785.193172][T12274] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1786'. [ 785.237200][T12270] netlink: 'syz.4.1785': attribute type 2 has an invalid length. [ 785.255651][T12270] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1785'. [ 785.552186][T12291] netlink: 'syz.1.1792': attribute type 21 has an invalid length. [ 785.571515][T12291] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1792'. [ 785.942446][T12309] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1796'. [ 786.582686][T12332] sit0: left promiscuous mode [ 787.052843][T12349] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1808'. [ 787.076044][T12351] netlink: 'syz.3.1809': attribute type 10 has an invalid length. [ 787.096801][T12351] netlink: 15743 bytes leftover after parsing attributes in process `syz.3.1809'. [ 787.124585][T12349] netlink: 'syz.1.1808': attribute type 10 has an invalid length. [ 787.284652][T12349] team0: Port device ..ãc¤± removed [ 787.359009][T12359] netlink: 'syz.3.1812': attribute type 3 has an invalid length. [ 787.395092][T12359] netlink: 117892 bytes leftover after parsing attributes in process `syz.3.1812'. [ 788.967709][T12390] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.1821'. [ 789.005535][T12390] netlink: 'syz.2.1821': attribute type 2 has an invalid length. [ 789.131410][T12398] netlink: 127924 bytes leftover after parsing attributes in process `syz.3.1824'. [ 789.154098][T12398] netlink: 16384 bytes leftover after parsing attributes in process `syz.3.1824'. [ 789.182533][T12400] netlink: 'syz.2.1825': attribute type 10 has an invalid length. [ 789.377852][T12406] netlink: 'syz.2.1826': attribute type 10 has an invalid length. [ 789.504881][T12406] batman_adv: batadv0: Interface deactivated: vlan1 [ 789.740840][T12409] netlink: 'syz.3.1827': attribute type 10 has an invalid length. [ 789.791086][T12412] veth0_vlan: left promiscuous mode [ 789.827141][T12412] veth0_vlan: entered promiscuous mode [ 789.834316][T12412] batman_adv: batadv0: Interface activated: vlan1 [ 790.367757][T12445] netlink: 209336 bytes leftover after parsing attributes in process `syz.2.1834'. [ 790.405220][T12445] netlink: 252 bytes leftover after parsing attributes in process `syz.2.1834'. [ 790.484024][T12445] netlink: 'syz.2.1834': attribute type 10 has an invalid length. [ 790.501607][T12445] bond0: (slave batadv0): Error -22 calling dev_set_mtu [ 790.526472][T12447] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1837'. [ 791.130538][T12453] FAULT_INJECTION: forcing a failure. [ 791.130538][T12453] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 791.148633][T12453] CPU: 0 PID: 12453 Comm: syz.4.1839 Not tainted syzkaller #0 [ 791.156141][T12453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 791.166212][T12453] Call Trace: [ 791.169506][T12453] [ 791.172454][T12453] dump_stack_lvl+0x18c/0x250 [ 791.177161][T12453] ? show_regs_print_info+0x20/0x20 [ 791.182379][T12453] ? load_image+0x420/0x420 [ 791.186918][T12453] ? __might_fault+0xaa/0x120 [ 791.191617][T12453] ? __lock_acquire+0x7d80/0x7d80 [ 791.196669][T12453] should_fail_ex+0x394/0x4c0 [ 791.201378][T12453] _copy_to_user+0x2f/0xa0 [ 791.205819][T12453] bpf_test_finish+0x25a/0x650 [ 791.210610][T12453] ? dst_hold+0x70/0x70 [ 791.214784][T12453] ? convert_skb_to___skb+0x420/0x420 [ 791.220181][T12453] ? bpf_test_init+0x119/0x140 [ 791.224966][T12453] bpf_prog_test_run_xdp+0x8b4/0x1140 [ 791.230362][T12453] ? __lock_acquire+0x7d80/0x7d80 [ 791.235430][T12453] ? dev_put+0x80/0x80 [ 791.239507][T12453] ? dev_put+0x80/0x80 [ 791.243583][T12453] bpf_prog_test_run+0x31f/0x390 [ 791.248521][T12453] __sys_bpf+0x49d/0x890 [ 791.252761][T12453] ? bpf_link_show_fdinfo+0x390/0x390 [ 791.258144][T12453] ? lock_chain_count+0x20/0x20 [ 791.263000][T12453] __x64_sys_bpf+0x7c/0x90 [ 791.267411][T12453] do_syscall_64+0x55/0xb0 [ 791.271824][T12453] ? clear_bhb_loop+0x40/0x90 [ 791.276497][T12453] ? clear_bhb_loop+0x40/0x90 [ 791.281177][T12453] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 791.287113][T12453] RIP: 0033:0x7f9d8a39e159 [ 791.291533][T12453] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 791.311144][T12453] RSP: 002b:00007f9d8b24d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 791.319553][T12453] RAX: ffffffffffffffda RBX: 00007f9d8a625fa0 RCX: 00007f9d8a39e159 [ 791.327523][T12453] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 000000000000000a [ 791.335487][T12453] RBP: 00007f9d8b24d090 R08: 0000000000000000 R09: 0000000000000000 [ 791.343450][T12453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 791.351413][T12453] R13: 00007f9d8a626038 R14: 00007f9d8a625fa0 R15: 00007ffc9d2ff8a8 [ 791.359396][T12453] [ 791.376413][T12457] syzkaller0: entered promiscuous mode [ 791.390848][T12457] syzkaller0: entered allmulticast mode [ 792.201427][T12472] netlink: 'syz.2.1845': attribute type 63 has an invalid length. [ 794.390931][T12492] netlink: 'syz.1.1850': attribute type 153 has an invalid length. [ 794.413792][T12492] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.1850'. [ 794.465162][T12472] netlink: 'syz.2.1845': attribute type 63 has an invalid length. [ 794.646369][T12497] FAULT_INJECTION: forcing a failure. [ 794.646369][T12497] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 794.676764][T12497] CPU: 0 PID: 12497 Comm: syz.2.1852 Not tainted syzkaller #0 [ 794.684290][T12497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 794.694370][T12497] Call Trace: [ 794.697666][T12497] [ 794.700597][T12497] dump_stack_lvl+0x18c/0x250 [ 794.705296][T12497] ? show_regs_print_info+0x20/0x20 [ 794.710501][T12497] ? load_image+0x420/0x420 [ 794.715010][T12497] ? __might_fault+0xaa/0x120 [ 794.719695][T12497] ? __lock_acquire+0x7d80/0x7d80 [ 794.724721][T12497] should_fail_ex+0x394/0x4c0 [ 794.729400][T12497] _copy_to_user+0x2f/0xa0 [ 794.733812][T12497] bpf_test_finish+0x4e7/0x650 [ 794.738605][T12497] ? dst_hold+0x70/0x70 [ 794.742759][T12497] ? convert_skb_to___skb+0x420/0x420 [ 794.748130][T12497] ? bpf_test_init+0x119/0x140 [ 794.752897][T12497] bpf_prog_test_run_xdp+0x8b4/0x1140 [ 794.758269][T12497] ? __lock_acquire+0x7d80/0x7d80 [ 794.763300][T12497] ? dev_put+0x80/0x80 [ 794.767379][T12497] ? dev_put+0x80/0x80 [ 794.771446][T12497] bpf_prog_test_run+0x31f/0x390 [ 794.776382][T12497] __sys_bpf+0x49d/0x890 [ 794.780627][T12497] ? bpf_link_show_fdinfo+0x390/0x390 [ 794.786009][T12497] ? lock_chain_count+0x20/0x20 [ 794.790863][T12497] __x64_sys_bpf+0x7c/0x90 [ 794.795274][T12497] do_syscall_64+0x55/0xb0 [ 794.799688][T12497] ? clear_bhb_loop+0x40/0x90 [ 794.804363][T12497] ? clear_bhb_loop+0x40/0x90 [ 794.809038][T12497] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 794.814932][T12497] RIP: 0033:0x7fbd2f59e159 [ 794.819351][T12497] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 794.838955][T12497] RSP: 002b:00007fbd304af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 794.847371][T12497] RAX: ffffffffffffffda RBX: 00007fbd2f825fa0 RCX: 00007fbd2f59e159 [ 794.855338][T12497] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 000000000000000a [ 794.863305][T12497] RBP: 00007fbd304af090 R08: 0000000000000000 R09: 0000000000000000 [ 794.871273][T12497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 794.879241][T12497] R13: 00007fbd2f826038 R14: 00007fbd2f825fa0 R15: 00007fffcded2f78 [ 794.887225][T12497] [ 794.998453][T12496] €Â0: renamed from pim6reg1 [ 795.344151][T12511] netlink: 'syz.1.1855': attribute type 2 has an invalid length. [ 795.375119][T12511] netlink: 'syz.1.1855': attribute type 8 has an invalid length. [ 795.394392][T12511] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1855'. [ 795.434104][T12523] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1855'. [ 796.372346][T12540] netlink: 61967 bytes leftover after parsing attributes in process `syz.4.1859'. [ 797.216501][T12565] FAULT_INJECTION: forcing a failure. [ 797.216501][T12565] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 797.255299][T12565] CPU: 0 PID: 12565 Comm: syz.4.1864 Not tainted syzkaller #0 [ 797.262828][T12565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 797.272905][T12565] Call Trace: [ 797.276200][T12565] [ 797.279145][T12565] dump_stack_lvl+0x18c/0x250 [ 797.283854][T12565] ? show_regs_print_info+0x20/0x20 [ 797.289075][T12565] ? load_image+0x420/0x420 [ 797.293602][T12565] ? __might_fault+0xaa/0x120 [ 797.298304][T12565] ? __lock_acquire+0x7d80/0x7d80 [ 797.303370][T12565] should_fail_ex+0x394/0x4c0 [ 797.308078][T12565] _copy_to_user+0x2f/0xa0 [ 797.312514][T12565] bpf_test_finish+0x4e7/0x650 [ 797.317309][T12565] ? dst_hold+0x70/0x70 [ 797.321495][T12565] ? convert_skb_to___skb+0x420/0x420 [ 797.326922][T12565] ? bpf_test_init+0x119/0x140 [ 797.331716][T12565] bpf_prog_test_run_xdp+0x8b4/0x1140 [ 797.337117][T12565] ? __lock_acquire+0x7d80/0x7d80 [ 797.342197][T12565] ? dev_put+0x80/0x80 [ 797.346312][T12565] ? dev_put+0x80/0x80 [ 797.350432][T12565] bpf_prog_test_run+0x31f/0x390 [ 797.355398][T12565] __sys_bpf+0x49d/0x890 [ 797.359671][T12565] ? bpf_link_show_fdinfo+0x390/0x390 [ 797.365083][T12565] ? lock_chain_count+0x20/0x20 [ 797.369971][T12565] __x64_sys_bpf+0x7c/0x90 [ 797.374413][T12565] do_syscall_64+0x55/0xb0 [ 797.378852][T12565] ? clear_bhb_loop+0x40/0x90 [ 797.383550][T12565] ? clear_bhb_loop+0x40/0x90 [ 797.388253][T12565] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 797.394163][T12565] RIP: 0033:0x7f9d8a39e159 [ 797.398597][T12565] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 797.418226][T12565] RSP: 002b:00007f9d8b22c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 797.426667][T12565] RAX: ffffffffffffffda RBX: 00007f9d8a626090 RCX: 00007f9d8a39e159 [ 797.434659][T12565] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 000000000000000a [ 797.442650][T12565] RBP: 00007f9d8b22c090 R08: 0000000000000000 R09: 0000000000000000 [ 797.450640][T12565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 797.458637][T12565] R13: 00007f9d8a626128 R14: 00007f9d8a626090 R15: 00007ffc9d2ff8a8 [ 797.466647][T12565] [ 797.524870][T12571] netlink: 'syz.3.1866': attribute type 3 has an invalid length. [ 797.580451][T12571] netlink: 'syz.3.1866': attribute type 4 has an invalid length. [ 797.596884][T12571] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1866'. [ 798.128199][T12581] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.1868'. [ 798.159967][T12586] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1869'. [ 798.228525][T12587] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1869'. [ 799.761563][T12615] FAULT_INJECTION: forcing a failure. [ 799.761563][T12615] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 799.783288][T12615] CPU: 0 PID: 12615 Comm: syz.4.1876 Not tainted syzkaller #0 [ 799.790816][T12615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 799.800899][T12615] Call Trace: [ 799.804197][T12615] [ 799.807144][T12615] dump_stack_lvl+0x18c/0x250 [ 799.811849][T12615] ? show_regs_print_info+0x20/0x20 [ 799.817072][T12615] ? load_image+0x420/0x420 [ 799.821627][T12615] ? __might_fault+0xaa/0x120 [ 799.826327][T12615] ? __lock_acquire+0x7d80/0x7d80 [ 799.831378][T12615] should_fail_ex+0x394/0x4c0 [ 799.836083][T12615] _copy_from_user+0x2f/0xe0 [ 799.840691][T12615] kstrtouint_from_user+0xde/0x170 [ 799.845828][T12615] ? kstrtol_from_user+0x190/0x190 [ 799.850976][T12615] proc_fail_nth_write+0x8f/0x250 [ 799.856036][T12615] ? proc_fail_nth_read+0x260/0x260 [ 799.861271][T12615] ? proc_fail_nth_read+0x260/0x260 [ 799.866495][T12615] vfs_write+0x299/0x9a0 [ 799.870770][T12615] ? file_end_write+0x250/0x250 [ 799.875648][T12615] ? __fget_files+0x28/0x460 [ 799.880261][T12615] ? __fget_files+0x3fc/0x460 [ 799.884964][T12615] ? __fdget_pos+0x2a3/0x330 [ 799.889568][T12615] ? ksys_write+0x74/0x260 [ 799.893979][T12615] ksys_write+0x151/0x260 [ 799.898304][T12615] ? __ia32_sys_read+0x90/0x90 [ 799.903065][T12615] ? lockdep_hardirqs_on+0x98/0x150 [ 799.908295][T12615] do_syscall_64+0x55/0xb0 [ 799.912705][T12615] ? clear_bhb_loop+0x40/0x90 [ 799.917372][T12615] ? clear_bhb_loop+0x40/0x90 [ 799.922038][T12615] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 799.927922][T12615] RIP: 0033:0x7f9d8a35e98e [ 799.932322][T12615] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 799.951931][T12615] RSP: 002b:00007f9d8b22bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 799.960370][T12615] RAX: ffffffffffffffda RBX: 00007f9d8b22c6c0 RCX: 00007f9d8a35e98e [ 799.968337][T12615] RDX: 0000000000000001 RSI: 00007f9d8b22c0a0 RDI: 0000000000000004 [ 799.976304][T12615] RBP: 00007f9d8b22c090 R08: 0000000000000000 R09: 0000000000000000 [ 799.984267][T12615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 799.992234][T12615] R13: 00007f9d8a626128 R14: 00007f9d8a626090 R15: 00007ffc9d2ff8a8 [ 800.000207][T12615] [ 800.065257][T12614] netlink: 'syz.1.1875': attribute type 19 has an invalid length. [ 800.103972][T12614] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi [ 800.662330][T12642] sit0: left promiscuous mode [ 801.029905][T12647] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1884'. [ 801.061847][T12647] netlink: 'syz.2.1884': attribute type 10 has an invalid length. [ 801.263927][T12650] sit0: entered promiscuous mode [ 801.574704][T12654] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.1887'. [ 801.949769][T12660] netlink: 192 bytes leftover after parsing attributes in process `syz.3.1888'. [ 801.981103][T12666] netlink: 'syz.1.1890': attribute type 1 has an invalid length. [ 802.004689][T12666] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.1890'. [ 802.045921][T12666] netlink: 'syz.1.1890': attribute type 1 has an invalid length. [ 802.171385][T12669] netlink: 147988 bytes leftover after parsing attributes in process `syz.4.1891'. [ 802.297526][ T5834] Bluetooth: hci2: unexpected subevent 0x0e length: 150 > 15 [ 802.323581][T12676] netlink: 'syz.1.1894': attribute type 3 has an invalid length. [ 802.345162][T12676] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1894'. [ 802.553775][T12681] netlink: 'syz.2.1895': attribute type 3 has an invalid length. [ 802.566848][T12683] syzkaller0: entered promiscuous mode [ 802.572677][T12681] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1895'. [ 802.575159][T12683] syzkaller0: entered allmulticast mode [ 802.752378][T12687] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1898'. [ 802.776614][T12687] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1898'. [ 802.790287][T12687] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1898'. [ 802.941736][T12692] netlink: zone id is out of range [ 803.370877][T12710] netlink: 'syz.2.1905': attribute type 3 has an invalid length. [ 803.394321][T12712] netlink: 'syz.4.1906': attribute type 3 has an invalid length. [ 803.600736][T12717] netlink: 'syz.4.1908': attribute type 10 has an invalid length. [ 803.625857][T12717] team0: Port device dummy0 added [ 803.852520][T12724] syzkaller0: entered promiscuous mode [ 803.861452][T12724] syzkaller0: entered allmulticast mode [ 805.466587][T12734] sit0: entered promiscuous mode [ 805.622872][T12743] netlink: 'syz.1.1915': attribute type 3 has an invalid length. [ 805.686388][T12738] syzkaller0: entered promiscuous mode [ 805.695018][T12738] syzkaller0: entered allmulticast mode [ 805.797715][ T5086] Bluetooth: hci4: command 0x0406 tx timeout [ 805.891247][T12748] netlink: 'syz.4.1925': attribute type 3 has an invalid length. [ 806.028178][T12750] netlink: 'syz.1.1917': attribute type 3 has an invalid length. [ 806.049510][T12750] __nla_validate_parse: 10 callbacks suppressed [ 806.049546][T12750] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1917'. [ 808.200148][T12777] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1926'. [ 808.234533][T12781] netlink: 'syz.2.1927': attribute type 3 has an invalid length. [ 808.265844][T12781] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1927'. [ 808.853705][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.861307][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.137785][T12808] netlink: 'syz.3.1934': attribute type 6 has an invalid length. [ 810.152476][T12808] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1934'. [ 810.387552][T12816] netlink: 'syz.1.1936': attribute type 3 has an invalid length. [ 810.413281][T12816] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1936'. [ 810.688317][T12808] syzkaller0: entered promiscuous mode [ 810.694220][T12808] syzkaller0: entered allmulticast mode [ 810.723968][T12824] netlink: 64535 bytes leftover after parsing attributes in process `syz.4.1938'. [ 812.723401][T12835] netlink: 'syz.4.1943': attribute type 19 has an invalid length. [ 812.735059][T12835] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1943'. [ 812.926646][T12842] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1946'. [ 813.131589][T12850] netlink: 'syz.4.1948': attribute type 3 has an invalid length. [ 813.137640][ T5834] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 813.152788][T12850] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1948'. [ 813.477738][T12866] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1953'. [ 813.515640][T12866] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 813.553416][T12866] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 814.577591][T12891] netlink: 'syz.4.1959': attribute type 3 has an invalid length. [ 814.596865][T12891] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1959'. [ 814.617090][T12893] veth0_vlan: left promiscuous mode [ 814.623414][T12893] veth0_vlan: entered promiscuous mode [ 814.864852][T12901] netlink: 'syz.3.1963': attribute type 28 has an invalid length. [ 815.165069][ T5834] Bluetooth: hci2: command 0x0406 tx timeout [ 815.206655][T12919] netlink: 'syz.4.1969': attribute type 3 has an invalid length. [ 815.234531][T12919] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1969'. [ 815.944709][T12937] syzkaller0: entered promiscuous mode [ 815.960160][T12937] syzkaller0: entered allmulticast mode [ 815.977465][T12936] netlink: 'syz.3.1975': attribute type 2 has an invalid length. [ 815.993016][T12936] netlink: 'syz.3.1975': attribute type 8 has an invalid length. [ 816.007917][T12936] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1975'. [ 816.021102][T12933] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.1973'. [ 816.457484][T12958] netlink: 'syz.1.1980': attribute type 3 has an invalid length. [ 816.466245][T12958] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1980'. [ 817.804867][T12939] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1975'. [ 817.933628][T12963] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1981'. [ 818.973604][T12988] netlink: 'syz.1.1989': attribute type 3 has an invalid length. [ 818.993483][T12988] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1989'. [ 819.075640][ T29] INFO: task syz.0.1005:9615 blocked for more than 143 seconds. [ 819.084565][ T29] Not tainted syzkaller #0 [ 819.107147][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 819.126155][ T29] task:syz.0.1005 state:D stack:22184 pid:9615 ppid:5832 flags:0x00004006 [ 819.158566][ T29] Call Trace: [ 819.161904][ T29] [ 819.164850][ T29] __schedule+0x15ae/0x4660 [ 819.189042][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 819.204305][ T29] ? asan.module_dtor+0x20/0x20 [ 819.214668][ T29] ? trace_contention_end+0x39/0xe0 [ 819.227699][ T29] ? perf_event_ctx_lock_nested+0x490/0x490 [ 819.233907][ T29] ? task_work_cancel+0xa5/0x220 [ 819.254306][ T29] ? task_work_cancel_func+0x210/0x210 [ 819.267990][ T29] schedule+0xbd/0x170 [ 819.277788][ T29] ? _free_event+0x10d/0xfb0 [ 819.282440][ T29] _free_event+0x176/0xfb0 [ 819.282683][T12998] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1993'. [ 819.304443][ T29] perf_event_release_kernel+0x7c8/0x850 [ 819.315220][ T29] ? __might_sleep+0xe0/0xe0 [ 819.319905][ T29] ? calc_timer_values+0x400/0x400 [ 819.329591][ T29] ? perf_mmap+0x15e0/0x15e0 [ 819.334497][ T29] perf_release+0x3b/0x40 [ 819.341034][T12998] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1993'. [ 819.346129][ T29] __fput+0x221/0x940 [ 819.354491][ T29] task_work_run+0x1d4/0x260 [ 819.375689][T12998] ieee80211 phy39: Selected rate control algorithm 'minstrel_ht' [ 819.377639][ T29] ? task_work_cancel+0x220/0x220 [ 819.399482][ T29] get_signal+0x11da/0x1390 [ 819.404063][ T29] ? create_io_thread+0x190/0x190 [ 819.424269][ T29] arch_do_signal_or_restart+0xc2/0x7b0 [ 819.437701][ T29] ? __x64_sys_clone+0x1b7/0x230 [ 819.442706][ T29] ? get_sigframe_size+0x20/0x20 [ 819.460483][ T29] ? exit_to_user_mode_loop+0x3b/0x110 [ 819.468635][ T29] exit_to_user_mode_loop+0x70/0x110 [ 819.473987][ T29] exit_to_user_mode_prepare+0xee/0x180 [ 819.492245][ T29] syscall_exit_to_user_mode+0x1a/0x50 [ 819.503050][ T29] do_syscall_64+0x61/0xb0 [ 819.514960][ T29] ? clear_bhb_loop+0x40/0x90 [ 819.519713][ T29] ? clear_bhb_loop+0x40/0x90 [ 819.524423][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 819.545112][ T29] RIP: 0033:0x7f05cff9e159 [ 819.549601][ T29] RSP: 002b:00007f05d0ea3fd8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 819.568546][ T29] RAX: fffffffffffffffc RBX: 00007f05d0225fa0 RCX: 00007f05cff9e159 [ 819.585208][ T29] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000c0126080 [ 819.593233][ T29] RBP: 00007f05d0035024 R08: 0000000000000000 R09: 0000000000000000 [ 819.616111][ T29] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 819.624170][ T29] R13: 00007f05d0226038 R14: 00007f05d0225fa0 R15: 00007fffe7f28d98 [ 819.655037][ T29] [ 819.659344][ T29] [ 819.659344][ T29] Showing all locks held in the system: [ 819.679127][ T29] 1 lock held by khungtaskd/29: [ 819.684029][ T29] #0: ffffffff8d131da0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 819.725046][ T29] 3 locks held by kworker/0:2/173: [ 819.730254][ T29] 2 locks held by getty/5533: [ 819.752121][ T29] #0: ffff8880315f80a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 819.774981][ T29] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x428/0x1370 [ 819.794982][ T29] 2 locks held by kworker/0:3/5869: [ 819.800244][ T29] #0: ffff888017c72d38 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 819.825196][ T29] #1: ffffc90004b3fd00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 819.841456][ T29] 2 locks held by syz.1.1993/12996: [ 819.847216][ T29] #0: ffffffff8d188088 (event_mutex){+.+.}-{3:3}, at: perf_trace_destroy+0x2e/0x140 [ 819.857075][ T29] #1: ffffffff8d137778 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x306/0x880 [ 819.868334][ T29] [ 819.870687][ T29] ============================================= [ 819.870687][ T29] [ 819.879951][ T29] NMI backtrace for cpu 1 [ 819.884379][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 819.891593][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 819.901671][ T29] Call Trace: [ 819.904964][ T29] [ 819.907913][ T29] dump_stack_lvl+0x18c/0x250 [ 819.912610][ T29] ? __wake_up_klogd+0xd9/0x100 [ 819.917498][ T29] ? show_regs_print_info+0x20/0x20 [ 819.922729][ T29] ? load_image+0x420/0x420 [ 819.927270][ T29] nmi_cpu_backtrace+0x3a6/0x3e0 [ 819.932238][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 819.938510][ T29] ? load_image+0x420/0x420 [ 819.943201][ T29] ? wq_watchdog_touch+0xef/0x170 [ 819.948244][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 819.954330][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 819.960329][ T29] watchdog+0xf59/0xfa0 [ 819.964504][ T29] ? watchdog+0x1e1/0xfa0 [ 819.968854][ T29] kthread+0x2fa/0x390 [ 819.972931][ T29] ? hungtask_pm_notify+0x50/0x50 [ 819.977967][ T29] ? kthread_blkcg+0xd0/0xd0 [ 819.982557][ T29] ret_from_fork+0x48/0x80 [ 819.986992][ T29] ? kthread_blkcg+0xd0/0xd0 [ 819.991582][ T29] ret_from_fork_asm+0x11/0x20 [ 819.996352][ T29] [ 820.000050][ T29] Sending NMI from CPU 1 to CPUs 0: [ 820.005768][ C0] NMI backtrace for cpu 0 [ 820.005778][ C0] CPU: 0 PID: 3544 Comm: kworker/u4:13 Not tainted syzkaller #0 [ 820.005794][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 820.005802][ C0] Workqueue: bat_events batadv_nc_worker [ 820.005825][ C0] RIP: 0010:__lock_acquire+0x882/0x7d80 [ 820.005845][ C0] Code: ca ca 8a 48 c7 c6 20 cd ca 8a e8 39 ac e8 ff 49 b8 00 00 00 00 00 fc ff df 0f 0b e9 f6 fd ff ff 45 89 e6 65 8b 05 ea f3 99 7e <41> b7 02 85 c0 48 8b 5c 24 48 75 2b 48 8b 84 24 d0 00 00 00 42 0f [ 820.005856][ C0] RSP: 0018:ffffc9000cb17700 EFLAGS: 00000086 [ 820.005868][ C0] RAX: 0000000000000000 RBX: 000000000000000e RCX: 0000000000000002 [ 820.005877][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff911ef5d8 [ 820.005887][ C0] RBP: ffffc9000cb17948 R08: dffffc0000000000 R09: 1ffffffff223debb [ 820.005897][ C0] R10: dffffc0000000000 R11: fffffbfff223debc R12: 0000000000000000 [ 820.005907][ C0] R13: ffff88802e01da00 R14: 0000000000000000 R15: ffffffffffffffff [ 820.005917][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 820.005930][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 820.005940][ C0] CR2: 00007f52cddef2f8 CR3: 000000002fd0d000 CR4: 00000000003506f0 [ 820.005953][ C0] DR0: 0000200000000300 DR1: 0000200000000300 DR2: 0000000000000000 [ 820.005963][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 820.005972][ C0] Call Trace: [ 820.005977][ C0] [ 820.005994][ C0] ? verify_lock_unused+0x140/0x140 [ 820.006016][ C0] ? rcu_preempt_deferred_qs_irqrestore+0x83b/0xc30 [ 820.006031][ C0] ? verify_lock_unused+0x140/0x140 [ 820.006049][ C0] lock_acquire+0x19e/0x420 [ 820.006065][ C0] ? batadv_nc_purge_paths+0xe2/0x3a0 [ 820.006085][ C0] ? read_lock_is_recursive+0x20/0x20 [ 820.006101][ C0] ? __local_bh_disable_ip+0x115/0x1a0 [ 820.006118][ C0] ? __bpf_trace_tasklet+0x160/0x160 [ 820.006133][ C0] ? __local_bh_enable_ip+0x13a/0x1c0 [ 820.006147][ C0] ? _local_bh_enable+0xa0/0xa0 [ 820.006169][ C0] ? batadv_nc_purge_paths+0xe2/0x3a0 [ 820.006186][ C0] _raw_spin_lock_bh+0x36/0x50 [ 820.006200][ C0] ? batadv_nc_purge_paths+0xe2/0x3a0 [ 820.006217][ C0] ? batadv_nc_purge_paths+0x3a0/0x3a0 [ 820.006233][ C0] batadv_nc_purge_paths+0xe2/0x3a0 [ 820.006251][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 820.006270][ C0] batadv_nc_worker+0x322/0x600 [ 820.006287][ C0] ? process_scheduled_works+0x975/0x1600 [ 820.006305][ C0] process_scheduled_works+0xa60/0x1600 [ 820.006333][ C0] ? worker_attach_to_pool+0x370/0x370 [ 820.006352][ C0] ? assign_work+0x3cc/0x5d0 [ 820.006371][ C0] worker_thread+0xa5e/0xfe0 [ 820.006397][ C0] kthread+0x2fa/0x390 [ 820.006411][ C0] ? pr_cont_work+0x550/0x550 [ 820.006427][ C0] ? kthread_blkcg+0xd0/0xd0 [ 820.006441][ C0] ret_from_fork+0x48/0x80 [ 820.006458][ C0] ? kthread_blkcg+0xd0/0xd0 [ 820.006472][ C0] ret_from_fork_asm+0x11/0x20 [ 820.006495][ C0] [ 820.021302][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 820.021316][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 820.021341][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 820.021351][ T29] Call Trace: [ 820.021359][ T29] [ 820.021365][ T29] dump_stack_lvl+0x18c/0x250 [ 820.021394][ T29] ? show_regs_print_info+0x20/0x20 [ 820.021413][ T29] ? load_image+0x420/0x420 [ 820.021441][ T29] panic+0x2ca/0x720 [ 820.021467][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 820.021489][ T29] ? __irq_work_queue_local+0x13a/0x3b0 [ 820.021511][ T29] ? preempt_schedule_thunk+0x1a/0x30 [ 820.021535][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 820.021561][ T29] watchdog+0xf98/0xfa0 [ 820.021584][ T29] ? watchdog+0x1e1/0xfa0 [ 820.021610][ T29] kthread+0x2fa/0x390 [ 820.021626][ T29] ? hungtask_pm_notify+0x50/0x50 [ 820.021647][ T29] ? kthread_blkcg+0xd0/0xd0 [ 820.021671][ T29] ret_from_fork+0x48/0x80 [ 820.021690][ T29] ? kthread_blkcg+0xd0/0xd0 [ 820.021707][ T29] ret_from_fork_asm+0x11/0x20 [ 820.021739][ T29] [ 820.027221][ T29] Kernel Offset: disabled [ 820.416626][ T29] Rebooting in 86400 seconds..