last executing test programs: 8m24.719421182s ago: executing program 4 (id=1794): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000380)=0xffffffffffffffff, 0x12) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x2a}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000009"], 0x48) socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x25, 0x1, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x4, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r3, &(0x7f0000000700)={&(0x7f0000000000)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)="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", 0x154}, {&(0x7f0000000740)="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", 0x41b}], 0x2, &(0x7f0000000040)=ANY=[@ANYBLOB="280000000000000000000000070000000717a87f000001ac141400e0000001ac1e0001ac1414bb011c000000000000000000000008000000", @ANYRES64=r3], 0x48}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$SIOCSIFHWADDR(r2, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) 8m24.290747231s ago: executing program 4 (id=1797): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r0) r1 = socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a90f16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(r3, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) setsockopt$sock_attach_bpf(r3, 0x1, 0x10, &(0x7f0000000040), 0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000001080)=ANY=[@ANYRES64=r1, @ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x72, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000bac65070"], 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000340)=@generic={&(0x7f0000000200)='./file0\x00'}, 0x18) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000380)=r6, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[], 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB="0f009999ba0400000000000000fffb0000080000000005030000000000000065f72590d85c6dee0bf263000000", @ANYRES64=r5, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdirat$cgroup(r8, &(0x7f0000000080)='syz1\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r10 = openat$cgroup_subtree(r9, 0x0, 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x6) 8m23.262107941s ago: executing program 4 (id=1798): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000bc0)=ANY=[], 0x50) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r1}, 0x8) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r1}, 0x8) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000001000000000000010000000000000000000000000000000105000000100000000000000000000003000000000100000002"], 0x0, 0x53}, 0x28) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) close(0xffffffffffffffff) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x40003000) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = socket$kcm(0xa, 0x5, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000002e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="b9ff0b078059268cb89e14f088a8", 0x0, 0x10004, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x8, 0x21, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xb2b, 0x0, 0x0, 0x0, 0xec60}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffd}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7}, @map_idx={0x18, 0x4, 0x5, 0x0, 0xc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x101}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000300)='syzkaller\x00', 0xffffffff, 0xdd, &(0x7f0000000340)=""/221, 0x40f00, 0x4f, '\x00', 0x0, @fallback=0x6, r2, 0x8, &(0x7f0000000440)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000480)={0x2, 0x1, 0x2, 0xf}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x9, &(0x7f00000004c0)=[0xffffffffffffffff], &(0x7f0000000500)=[{0x3, 0x1, 0xd}, {0x3, 0x2, 0x1, 0xd}, {0x1, 0x2, 0xd, 0x2}, {0x1, 0x2, 0xd, 0x5}, {0x0, 0x5, 0x10, 0xb}, {0x2, 0x1, 0x10, 0x5}, {0x0, 0x4, 0x6}, {0x3, 0x3, 0xc, 0x3}, {0x0, 0x3, 0x7, 0x2}], 0x10, 0x2}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000680)={0xffffffffffffffff, r5, 0x0, r6}, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x890b, &(0x7f0000000000)) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x400a00, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xe, 0x0, 0x0) 8m22.366799846s ago: executing program 4 (id=1800): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x50, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x4, @perf_bp={0x0}, 0x8061, 0x3, 0x80, 0x3, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x21, 0x2, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x21, &(0x7f0000000300)=ANY=[@ANYBLOB="620af0ff7f000001620af4ff7f000001620af8ff30394e20bfa200000000000007020000f0ffffffb70300000c000000b7040000ffffffffb70500000000000085000000630000001500150000000000bf06000000000000620ad8ff45002800620adcff00000000620ae0ff40060000620ae4ff7f000001620ae8ff7f000001620ac0ff30394e20620ac4ff01000000620ac8ff00000000620accff50020010620ad0ff00000000bf61000000000000bfa200000000000007020000d8ffffffb703000014000000bfa400000000000007040000c0ffffffb705000014000000850000006e000000bf610000000000008500000056000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r0, 0x0, 0x22, 0x0, &(0x7f0000000800)="00000000000000000000000008004500002800000000400600007f0000017f000001", 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 8m21.336278387s ago: executing program 4 (id=1803): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000009, 0x0, @perf_config_ext={0xf6}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x600, 0x4000000}, 0x28) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 8m20.958623627s ago: executing program 4 (id=1804): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x6c}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0xfeffffffffffffff) ioctl$SIOCSIFHWADDR(r1, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0xc, &(0x7f0000000000)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x34}, 0x94) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x101ea8, 0x2f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x3, 0x10) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002280)={0x1b, 0x17, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc7, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xd}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000003c0)='syzkaller\x00', 0x3, 0x1000, &(0x7f0000001040)=""/4096, 0x40f00, 0x63, '\x00', 0x0, @fallback=0x6bae8aaf2628034c, 0xffffffffffffffff, 0x8, &(0x7f0000002100)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000002140)={0x2, 0x6, 0xfffffffb, 0x3}, 0x10, 0x0, r0, 0x7, &(0x7f00000021c0)=[r1, r1, 0xffffffffffffffff, r1, r1], &(0x7f0000002200)=[{0x3, 0x1, 0xe, 0x8}, {0x4, 0x5, 0x3, 0x1}, {0x1, 0x3, 0xe, 0x4}, {0x4, 0x2, 0x2, 0x8}, {0x4, 0x5, 0x2, 0x7}, {0x3, 0x1, 0xc, 0x5}, {0x4, 0x4, 0x9, 0x3}], 0x10, 0x40}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[], 0x0, 0x51}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c25b3aa450ffc60", 0x14}], 0x1}, 0x0) r5 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(r5, 0x88, 0x67, 0x0, 0x0) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8947, &(0x7f00000002c0)={'bond0\x00', @random="d8b301000100"}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x6) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r7) syz_clone(0x40100000, 0x0, 0x0, 0x0, 0x0, 0x0) 8m4.996074956s ago: executing program 32 (id=1804): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x6c}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0xfeffffffffffffff) ioctl$SIOCSIFHWADDR(r1, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0xc, &(0x7f0000000000)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x34}, 0x94) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x101ea8, 0x2f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x3, 0x10) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002280)={0x1b, 0x17, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc7, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xd}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000003c0)='syzkaller\x00', 0x3, 0x1000, &(0x7f0000001040)=""/4096, 0x40f00, 0x63, '\x00', 0x0, @fallback=0x6bae8aaf2628034c, 0xffffffffffffffff, 0x8, &(0x7f0000002100)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000002140)={0x2, 0x6, 0xfffffffb, 0x3}, 0x10, 0x0, r0, 0x7, &(0x7f00000021c0)=[r1, r1, 0xffffffffffffffff, r1, r1], &(0x7f0000002200)=[{0x3, 0x1, 0xe, 0x8}, {0x4, 0x5, 0x3, 0x1}, {0x1, 0x3, 0xe, 0x4}, {0x4, 0x2, 0x2, 0x8}, {0x4, 0x5, 0x2, 0x7}, {0x3, 0x1, 0xc, 0x5}, {0x4, 0x4, 0x9, 0x3}], 0x10, 0x40}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[], 0x0, 0x51}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c25b3aa450ffc60", 0x14}], 0x1}, 0x0) r5 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(r5, 0x88, 0x67, 0x0, 0x0) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8947, &(0x7f00000002c0)={'bond0\x00', @random="d8b301000100"}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x6) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r7) syz_clone(0x40100000, 0x0, 0x0, 0x0, 0x0, 0x0) 23.32477553s ago: executing program 5 (id=3367): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x200000007ff}, 0x10022, 0xac5f, 0x0, 0x0, 0x0, 0x67af}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x80218, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x2, 0x0, 0x4, 0x0, 0x0, 0x2, 0x0, 0x40000000000}, 0x0, 0x3, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000200), 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r4, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000000cc0)="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", 0x1000}, {&(0x7f0000001cc0)="87aeead01d3b99f7305fcee0d57acbbbde16a7b815c7fb7185171d799451f778b634e9f7696531aa2dbe49f7bb3068f94fd0c9e106c6946eb04d2ad5cb8a9e99729d0fe873dc36793363004895895c1e", 0x50}, {&(0x7f0000001d40)="39da2ac5ce2fe76e00b7638e", 0xc}, {&(0x7f0000001d80)="ea7449379a794277093b910327c472d2aeb802d7d037dfc1f76cf57b81ccf98f87ff83f8e9b412965f7cded1e79ca23494e645154fb3a2ac6635547da8d11b7af9a69c0c2ad2358994d1add38c62db51a26e97e4912d58b163a256f432e7a3f5b3dce6fb9e84d88c9709902a6025366940c4f5c1e76e9fd42e87603b14e8237f5a701ae311e79404f2e11dc33500d251d431593945e53adab2c047e105de68f1f648b7bdfd0407ebe414b1f135dbd9106b8faf928c25a98f4fa043128449f0a0ea309d8e84de18ba030813", 0xcb}], 0x4, &(0x7f0000001ec0)="344def183777181356", 0x9, 0x8000}, 0x10) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x4, 0x0, 0xffffffffffffff58) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[], &(0x7f00000001c0)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r6, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7}, 0x94) r8 = openat$cgroup_ro(r2, &(0x7f0000000300)='net_prio.prioidx\x00', 0x0, 0x0) r9 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000400)={0x0, r0}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1e0000007f000000050000000100008011a00100", @ANYRES32=r5, @ANYBLOB="b600"/20, @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="01000000000000000500000004000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=r9, @ANYBLOB="44d567d3ce50c18c09d2e82976cdc2f5ce95b57684a4a41c"], 0x50) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='memory.high\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f00000001c0)=ANY=[], 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r10 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$ITER_CREATE(0x21, &(0x7f00000001c0)={r10}, 0x8) close(r1) r11 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r11, 0x29, 0x37, &(0x7f0000000100), 0x120) r12 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r12, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000007c0)="2e00000010008188e6b62aa73772cc9f1ba1f848310000005e144658b7d300000e000a001000000002800000128ce06922386a24edcd075d703d89c992f6", 0x3e}], 0x1}, 0x4005040) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r13, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000040)="b90103606989068c3c270040f0832f", 0x0, 0x104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 23.26857757s ago: executing program 1 (id=3368): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x51, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000000000008500000058"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x28}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) socket$kcm(0x2, 0x200000000000001, 0x106) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$kcm(r2, 0x0, 0x40050) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1, 0x0, 0x20}, 0x1f00) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r5 = socket$kcm(0xa, 0x5, 0x0) socket$kcm(0x10, 0x3, 0x10) recvmsg$kcm(r5, &(0x7f0000001500)={0x0, 0x40, 0x0}, 0x40012020) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r6 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r6, 0x1, 0x3e, 0x0, 0x0) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) socket$kcm(0x11, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41000, 0xc}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 23.260636642s ago: executing program 3 (id=3369): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)}], 0x1}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x5, &(0x7f00000000c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffff8}, [@call={0x85, 0x0, 0x0, 0x36}, @call={0x85, 0x0, 0x0, 0xd0}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x4, 0xe, &(0x7f0000001cc0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x14}, 0x94) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x100600, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f3, &(0x7f0000000080)) perf_event_open(0x0, 0x0, 0xfffffffffffffff9, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0x10, 0x400000002, 0x0) r4 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000004c0), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000440)=ANY=[@ANYRESDEC=r0], 0xfe33) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x2, 0x1, 0xd, 0x82, 0x0, 0x58, 0x91, 0x6, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x57, 0x2, @perf_config_ext={0x401, 0xde}, 0x1e0a, 0x6b7, 0x20e7, 0x9, 0x2, 0x3ff, 0x5, 0x0, 0x3ff, 0x0, 0xad}, 0x0, 0x2, 0xffffffffffffffff, 0x1) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000100)=r1, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x60c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0xffffffff, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r5, &(0x7f00000031c0)={&(0x7f00000006c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB='8\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x00>'], 0x38}, 0x0) 22.360827018s ago: executing program 5 (id=3371): bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000900)={0x1, 0x58, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x5c7e8fcd467c42ae, 0x0, '\x00', r0}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x109080, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000080)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) ioctl$TUNSETLINK(r4, 0x400454cd, 0x337) ioctl$TUNSETFILTEREBPF(r4, 0x800454e1, &(0x7f00000000c0)=r6) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x1) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x3, 0x16, &(0x7f0000000b80)=ANY=[@ANYRES8=r6], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) ioctl$TUNATTACHFILTER(r7, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x4000}]}) ioctl$TUNSETSTEERINGEBPF(r7, 0x800454e0, &(0x7f0000000940)=r1) write$cgroup_devices(r5, &(0x7f0000000840)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYBLOB="b26137edeb92e9d2b4"], 0xffdd) 22.249311849s ago: executing program 0 (id=3372): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) write$cgroup_subtree(r0, 0x0, 0x66) r1 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000085070000750000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffee4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c0000000900000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0080000700000000000000000010000001000000"], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="1867d655543fc21243c24de25deb39267209ca0e15589e4b3ec128933671c5041258322ab98207f13b73a9acc3a2c6f35cafc92f5da2549611655cedd0b60badf59f2b47299bb49b4f18f555401932b95ab417d3f7b30593b42c64763aafa16c4347dff732a31e531b8b6a12fa64c1612b5767416023bc70718476aa44aad03eb1312227875883ecfdcb37adadaa518cc06ef9202a7b5abe7614f135dc688df5a5648e02000000000000003245e130a982b854f9c64d713924e55ad26074a8ff975f78c2b0caaeb4", 0xc8}], 0x1}, 0x80054) 22.009943063s ago: executing program 3 (id=3373): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000001e00000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = socket$kcm(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r3, @ANYRESHEX=r4, @ANYBLOB="05"], 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r3, 0xffffffffffffffff, 0x7}, 0x20) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x31306, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x6, 0xa5}, 0x0, 0xf, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89a0, &(0x7f0000000080)) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r9 = socket$kcm(0x2, 0x2, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000a00)=ANY=[@ANYRES64=r6, @ANYRESHEX=r8, @ANYRESHEX=r1, @ANYRESHEX=r6, @ANYRESOCT=r5, @ANYRES16=r5, @ANYRESDEC=r4, @ANYBLOB="fa7ae8542ae9fcb9a2d69af75a507b597c39b60d355ea60d418151020f474730d2c85fa4667276c30de06b2f6fa116e67715f2f194f36126df5748cf4007921865da9e"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000001ac0)={r10, 0x0, 0x0}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{}, 0x0, &(0x7f00000002c0)=r10}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d40)={0xffffffffffffffff, 0xe0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000b00)=[0x0, 0x0, 0x0], 0x0, 0x76, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x8, 0x4c, 0x8, 0x0, 0x0}}, 0x10) r13 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)={0x1b, 0x0, 0x0, 0x9, 0x0, r3, 0x2, '\x00', 0x0, r8, 0x2, 0x1, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES16=r11], &(0x7f0000000540)='GPL\x00', 0x6, 0x26, &(0x7f0000000580)=""/38, 0x40f00, 0x8, '\x00', r12, 0x0, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000600)={0x2, 0x5, 0x0, 0x69acc8ae}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000700)=[r8, r8, r13, r0], &(0x7f0000000840)=[{0x0, 0x40000001, 0x7, 0xc}, {0x4, 0x3, 0x1000000b, 0x2}], 0x10, 0x1000}, 0x94) setsockopt$sock_attach_bpf(r9, 0x1, 0x2e, &(0x7f0000000640)=r8, 0x4) recvmsg(r9, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xff79}, 0x60) ioctl$PERF_EVENT_IOC_RESET(r5, 0x2403, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89a2, &(0x7f0000000080)) 21.846987563s ago: executing program 0 (id=3375): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$kcm(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000e200000000611118"], 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1}) sendmsg$inet(r0, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f00000001c0)='%-010d \x00'}, 0x20) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x541b, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2, r1}, 0x4) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f00000005c0), 0x4) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000180)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000580)="02044a00ea0e0000000000001eafbcea06e105000000000000001104ee1606d4b8bf4a8207", 0x25}, {&(0x7f0000000340)="126873159fca3fa38fb198e9a6b363ceb3e6d803ab766b7a38e451d14e0b3457474fe6a51671e4124fcea96a873b10996816e100ed8a93b0a9053db57d60973369f525c24533658551c3091cb88d3b", 0x4f}, {&(0x7f0000000200)="088d85d1f409000a3164ae439862807a158983661a6d2341f7", 0x19}, {&(0x7f0000000040)="df3b46a133000000000000000000", 0xe}, {&(0x7f0000001480)="b72abab9439ca41f5cf14d643508a15668ec280cfe4ea416cf769dbf978a8191bbe006e0da50029176c0f24e3ff4d3e895a2afbf52cef2fe1ca31edd842b126ec4be67e6e3624b9ddf806fc146c645ec1d37fe7e3b025c156d5d520104b53f7fb2af436201cfd5dca170edea5a190e4786bfaac544b60f514d7ef420526c467f14790dcfa5ab915d7dbcdf2765bbcad014c991f8b829c79f53586de79f0b987ad796f9de4a6e53136a07a39ab1f5a2ce30aded70a9b72d1beff7e8b6405fd6331e5635ee71e809be2d58f412dcd7b2e856d692dbfed19045ff13244acce351b6e450395568063569c71ea80a04f83fbe6ad1d0862fb97f816576c4844da65d751ee1fdc522ae1158670de297cdb2117bc0adc1486e016a6bcc922a162fce6a9ecc8c42b0c44c566004eda037864e5f339bbb0998cdaf2b8e49ae003659bc033668f7c8e550197ed95c420461254ba1883dbd9403672d579cee85c37f103ee9a350a768286017158784baeb063c8c684b91b022b0db2238b679092a1f6909f0cd9228500e088f5cc7bac4c0dc56e80fedac93554aec79715ce02e8bf3fcbd70382f619bfe3dcf06890d8542022ee58bdfb075d319c9fc8474cadc8de5c3dd3f682d3f68324d0af7a727064053ad84c94643eef190783c616467628f84620044c084b80e3e57bfcdf293c9c36b4474a52398b35e49e2ad4a4ac090bffc5cd27d3c69b4ae5f841d5b0766ccd36d25eb58d8f01621a05744b79ede39019ab9d7a1946353d8f3b7f833ce1a102a8c97a9e3f32138ffafd305448f2518ccdb7eef594a890eaeaff3f876f742fec22669a97085ed93b18228ecbe9e354e8f69967ca749fd2b1cf026665ca912e3fc0188b294519078b46676052de4fe22798290bd1e232c9791fc01ddb4ae776b5769143df2867042e8a3ddfa8e786bd8a244076956d4ab137939ad381650dd4fefd2b942a98d6f2edfd7019ae473e7608647b86d643e8ff3d7d4e89ed826e4b8c6e8fed224c528d805ade85c5b45261b2692c0f403dec050bd973b0999df214689f4402dd1598a16b0c7671e5e204a00b06376ddee7cb99292a8b835c0b451642b71f2ffa1aeea56255817b2384bfe4f8213ccfc1f762f250592896102e5f6d34cdd726bc0f86af52fd7c4483d32e23e5af770e960c7445b8e67a6086f0cadcd22d0d4bdadc31b5a94dd687379dc6e078210ccc71f8e67eb58d330394425ab17e55d1ca8f868f6bf738af291d2293c3dfa2ccff25061ded22878b3cc6532d19e5a00d1f0f1b9de35305fac2c6cfd5d77a2b02618735b7d392738bd5cd3eabb7039c790a9f193913f16e06605d405d6a0cf0011a2e5f935d8563fef1722692dd266c3d320b9f5eeb2a4b2f72155522f0ed72ff1efa0b6ee78e70d3d45241609e7f83fd548e872bc197d7bcfe1af71159baa11ad667a0ead3986b2b06500ba2615ee966ea86ca68d02de4802bd9ef18dac5ba53ca98b90df49ef4e3268ceee538973620e5a60513ea330989642626420b67dceeb2c45b079348796923ad1fba5a99e6b150cf97ba2a570150053309c6dca7fa352fa1678c9b919fbc47ae0a84175a7fc25a00fa5888cb017e8d8225fadb29e34bd3c5bbccfb22a83255fec3967c991d5b3e6719ade82fb7ef85c8a4b9e7ad8ef2a3a7bc78de424572224affb1f9e0c5a969e61ee2ebb4f247bfa09384bdad04438f2efbfae303d47c3afe7e8d3a157b2a6f37572ea3ecc441dfb208ba755f781f144e58d80aea590abcfccbe8678ec6de47511f9d61cc408cbbe90eeab2cffe6d1a48dc3eb4e48e228fd43cafd7ff2c85c3ed52e99fe16887be28fcd2cd4ba4cac414c92c96294fa7d628e4356c748c173f790a7f30071d0bd53817c78d163249c7402b222b8f28668cae7afd17b97dbaf10b75b61409ca6f5b285d1ab09207c5a91c68b0d4b5da6d6b5a495c8debd7f4400e56d9e22d1cc330f782f2b5441a31b9ccf35aa1a151219cdcff5ab8b240af5b5a751eca67773c057412a935e3a7a367b2bcd28463904ee040a586d6f4f969cee56d55b6b4d97d1fe93b67e2f6bd47925054c4702ec8969a1a6211ea8f6783ca0e8ae333922ce19eceb24e2ff714a0208d2489a62f299aa50cdbfe5a826e872ab231bbddf5bd2fca92d4460379e05e13ff34a200fd921dcb67a002873bda8d86536cddaccb54eb72dd4e399fe9195ad5574ad85d9ed2eaae4106234f0a8db05a230ff377b59b54fd0919d1b86b938622ae6098f003db7f4d45d6874f54c33064ce6184dccc99fece2d994e9572d4840b0cbdd704fd70b4f625912d48a512339f883533768f09a4f614583dfb72defe713ee38f61184df279461b7d35becd8e67d01f0ec27e901d88215554d5a69db373a662085733d09ad9153e7d432c94f872ff7cd72995b3a581ea17722ed13a191b366208f75661112b1a7d42c252c907488ca8dd8f819d4618b0053d4bcddb3b5975cb8615ebc472e052552ee74d5253174a2b0cb96e1eaf6349b6c39be975123ee72b0ffe1367df7aba54de26c9135a3422d21067034551be5efc5daf8b8f59bc725e4fd171378fd9f16a785f1b0378823c85eec521e0b2aca70b7b72b719a20eb2fb0addc0b05851c8e181607f49dad7323bc255309097584c2099574db1ed7940fd16796aef19d30acd714dc1f898716df64db87d852eddf2f86e78fd7fd64868b4cb6cc626efcdea49c4a2779a0e777bbe23968e14233a810d9883680894de93023a8deae51ccbf32e6d1e53618ebee95c761221a33bc3263fff0f5ae23e14dba0418cf3f31effcb36956e06c57a17620044260419a208ae1d2296ec9472d44be74a8ed0a33a23181acdef8c7d2695ce9485ed8d17d9f6f30b9b128ee0ba15c42cbf6059bcfef008c09db8855343f79c3ce1c4d79077c8a62237d4e400a5aa88e7424f2f99df6c2070d6ed071f4968376581e20e52d64e9c4f8a6f73bb33f5b6b62c1deecc85bf789565fde14e4454306ed8f09af08afb360ee4fb40dd5dca0be43ccff75e5c0ef85ea7c521cb4840d61e99e1ce4661e721446d5a571cddffbc3643ec9b58237fd416376906bdca09485c2c80f82b23e8e7bbf22035fdbcacd804ae3771fd616901184ced46987d533017eef717e9b34a5531c3efe2d77c9b6cb0617382d69951545378a4118e71c64a1f16d096a8f933580922083d0536b90ae1715c63f682e8241b42e1646b0c52e34aa9c91efe2b6b787ce0747d4ff0dd07d6ebc9ce27e0ef35705eb7b78763a9829b464523ff3ed9078aff6ee29e6e7a59a5243825e8bb9235f8e49a9dfb5932536666c3dc75b29e515dbca4c84268cf23cd7b6da6814328a3cb26d7b1d6c28e20b36f9a2c9e2fcf663c314f72f37d2b8f405cfc686a6b35400435be0eab01709c2c4b3005491cbb0b560e33547b77ba9f25f01b194e20534199a3786ddfaf0a75aafb65cd4df4da7b5f98fe72a8bc7d045339fd41508cecca791c717a10d4fed8aa69eec80955bd899a6f8aaf3411be40568149e631ccbe17c68f85e87b58da81ba78def8b1a48c49b2dc7613f7d6ea8b158bed077666d37d1caba9a23b7cb2772e780f70872113e5bcaebaf9f9499f651dc894be3bba1e99d58b33d60c0eda397df91d7cf9fb072f247fa9a9f59c4f59c4284a3832ff0a1f9ce8f6346cb5c08a9dcb2851c7f169af688fc13f00cf9519ade547671698caaa3f4d4921fee83753b9ab0875707836343eddb5b87beca6aae023c9571b8e389ff3f4c692b6fb19686105249ce033116777d919ceb4559a67ee6b6ad9d4b53d2be24315429de3bf201107fe7dff9cbc92dbf9173391d555b0a1b8ea3252fd7d7fd15d8a3cc70cecdbdd43c4edcc4bb2fbbf646d5ec7dad0d3156a513d14184e0c316f8155e774f7dcea485f904828edf28510d692b66b1500c5a704371c2188a2812bd323de012f36a79674082b5f5e9f7f4ce1a75ed854b71555e9fcd1f0322c22a9e543674c79a74404e08e61860f505dc56e1b52977b9a9af18be4064b5f6aa7c891382bbbe65e70a4cee33176570341a525fb6b25c0b20bfa3f2ee4a01584f259f43c3b63a2dfc376f435827211379ab3ca8912cbe01e4f837920666fbda682f6954d1c156f21e12547b885f485c38f62e765013144be8ca92b1d4872790a5c02671517f6a8f0ceb247e08c64268ad8970b57bb6d077c9b8ebe7fb1183087c9a3baee06100609204be588621253b9b120c08db9f28c2d38c9bc3f59018bb7216d73186048770d1e556faa49df23a40a64b40cdda2041dccf5619db09b7a7795fd7eb631c0e0bffc3b64422bf6acd84b7fae8bd05b057260a4d7c4851829c7bbf0b6f27c5db0ff10f42df3528f79dc9bbd591965259cd0389deb124b1fadc5dfd3ade9742d29261379ea3d98929512371dec991f0636fbda5dac355a04e363beeb4751781d9cef3a0b6ac6500895d223ad43ed75cac8b0a868253fffa10bf6c2de99c687fd056e075cf0632b6d8ed2263ca08ad95b6f335a3b6d8ab7801422ac8597441ac1bbe289b50af31eb221d19a2d3177d4ad1056d616295e89471e65d811b8fa4fe2c0c12793f43ef7e75c7f657f6c26ca9cbae63ce99301069ab257ae77c38778d35afd326d569c626a68f3904b2c376dfaa05568892f346f86fb05e71fb751e09cd22525cb63512a7d2e4670bd31109b87818278e66dc73fa9667e35c5bc6588cd36d2b62592a4103803d93c194f8edd5d20c6597231321b909bbb3c1d13408e5cf27728883e33305000000000000004892dfedd17a1066f1145163e1a31ba9a3e3cee925e55d794b89462a0a092a639ccd4a24514083cb68224c87c18f0bb39ff721cc598e686b5fef169bc30f9ec6df397905f8340f6ae7ad826aac774cc46bfb9dfe8192e9ef10e8355d7c2810269eb73c7ecb8d3ffa33437142b8e596cdb778cd3cdda5bbbd09a8ea919929adbc63ff1004490c45a9ea59def65fabc884c39beac1b74a218f59c5e31ba85dcc4b8bd81d7a66d8aaf0edb64b505f760442e16fb7f07a069aba88601c3ace27762cef8196da3d44b14796b04e7fa3bab37209190a1de6e6ecfd99353279ef643766814fa7fac7254eba59bff3546bf21afc7445a4f1bc92c7b013f34962ff029e0f2926acf6c8a25fecea5b0b810656c981535492a2a4159dcfd0bf98085dc9612159fa0ad837a22eaffce80405367931ef3eacbf5a663175acc306eb075c52265d0c6dfaab30bb997fd7b71c2e0bf02b408c3b0b85f8ca7cec337655e1c2db77c306f9283b632ae95667", 0xea4}], 0x5}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x16, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000341218007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x0, 0x18}, 0x1}, 0x6d) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r1, &(0x7f0000000000)="ad570aea8b8d2d135b5219b04701b194c2f786a7ecb0c35cc70e172c4b3903b9df0345959082206e78dd0c8ba7d1ea7e15c3b1711fc0065bb8c113af4bfd776fb6d2cb675cb1776622597aa217ebbf15586db7b13b6f9ebcdaf3589d22762fdff3b1594dc2262bb585992f6b8c03cf3d3e03f6cacf081fee409dd2293f8fd8ad17d594eaac57bd7f49892740fce2233b8682c25a8d71c7c3ded67b82dd443360f85f5c2f93a37200bfb084af72aa9ba4fbd3d85a526e0dd0f03fe004773c0a20019f8a248ba569fde6a6301965231f71849a6c00592a899710a13cbbaac1cfbfaf84a883995e61dd77168889cb26ef352e2f", &(0x7f0000000140)=""/133}, 0x20) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x13, &(0x7f0000000100), 0x120) 21.845560923s ago: executing program 1 (id=3376): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000001e00000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = socket$kcm(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r3, @ANYRESHEX=r4, @ANYBLOB="05"], 0x10) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x31306, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x6, 0xa5}, 0x0, 0xf, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89a0, &(0x7f0000000080)) r8 = socket$kcm(0x2, 0x2, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000a00)=ANY=[@ANYRES64=r6, @ANYRESHEX, @ANYRESHEX=r1, @ANYRESOCT=r5, @ANYRES16=r5, @ANYRESDEC=r4, @ANYBLOB="fa7ae8542ae9fcb9a2d69af75a507b597c39b60d355ea60d418151020f474730d2c85fa4667276c30de06b2f6fa116e67715f2f194f36126df5748cf4007921865da9e"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000001ac0)={r9, 0x0, 0x0}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{}, 0x0, &(0x7f00000002c0)=r9}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d40)={0xffffffffffffffff, 0xe0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000b00)=[0x0, 0x0, 0x0], 0x0, 0x76, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x8, 0x4c, 0x8, 0x0, 0x0}}, 0x10) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)={0x1b, 0x0, 0x0, 0x9, 0x0, r3, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES16=r10], &(0x7f0000000540)='GPL\x00', 0x6, 0x26, &(0x7f0000000580)=""/38, 0x40f00, 0x8, '\x00', r11, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x5, 0x0, 0x69acc8ae}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000700)=[0xffffffffffffffff, 0xffffffffffffffff, r12, r0], &(0x7f0000000840)=[{0x0, 0x40000001, 0x7, 0xc}, {0x4, 0x3, 0x1000000b, 0x2}], 0x10, 0x1000}, 0x94) setsockopt$sock_attach_bpf(r8, 0x1, 0x2e, &(0x7f0000000640), 0x4) recvmsg(r8, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xff79}, 0x60) ioctl$PERF_EVENT_IOC_RESET(r5, 0x2403, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89a2, &(0x7f0000000080)) 21.731156784s ago: executing program 3 (id=3378): bpf$PROG_LOAD(0x5, &(0x7f00000016c0)={0x5, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x7, 0x0, 0x1ff, 0x0, 0xa8}, 0x0, 0x0, 0xffffffffffffffff, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xe, &(0x7f0000001440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000018000000000000000000000000000000950000002304f866"], &(0x7f0000000200)='syzkaller\x00', 0x6, 0xfd2f, &(0x7f0000000240)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe66}, 0x37) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0xa}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/time_for_children\x00') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000003c0)='cpuset.cpu_exclusive\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000002c0)=0x3, 0x12) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[], 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f0000000180)=r2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x29, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d08007b490d4f1e81f8d815000100fe80000000000000080005007a010401a80016002000104004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0xfeff, &(0x7f0000000040)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73f72cc9f0ba1f848390000005e100602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x20004804) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000001680)={'team0\x00', 0x200}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="1b00000000000000000000000100000000000000", @ANYRES32, @ANYBLOB="ebc800219b35e1d1ab4c1ab7b73a840300e1ffffc15f62eeae16d2", @ANYRES32=r6, @ANYBLOB="04000000000000000400"/28], 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_bp={0x0, 0xa}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x22, 0x2, 0x21) 19.782670495s ago: executing program 0 (id=3379): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9febbb001800000000b0000024000000240000000200000000eee70000000004000000030000000000f7ff0504000000000000000000000d02000000f600"], 0xffffffffffffffff, 0x3e, 0xb1, 0x2}, 0x20) 19.729728424s ago: executing program 5 (id=3380): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r3}, &(0x7f00000003c0), &(0x7f0000000400)=r2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="bf16000000000000b70100003b0204007b1ae0ff00000000b7010000000000007b1ae8ff000000007b1af0ff00000000bf61000000000000b702000001000000bfa300000000000007030000e0ffffffb7040000180000008500000049000000b70000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)=@o_path={&(0x7f00000002c0)='./cgroup\x00', 0x0, 0x8, r0}, 0x18) unlink(&(0x7f0000000200)='./cgroup\x00') bpf$ITER_CREATE(0x21, &(0x7f0000000300), 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES16=r2, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x11200, 0x2000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000000000)="1400000016001963d25a80648c56915a4eaa2bfe", 0x14}], 0x1}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) ioctl$TUNSETOFFLOAD(r9, 0xc004743e, 0x110c230000) ioctl$TUNSETOFFLOAD(r9, 0x40047440, 0xf0ff1f00000000) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r10) sendmsg$kcm(r8, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="d80000001c0081064e81f782db44b9040a1d08040e00000000000aa1180002000600142603600e1208000f0000810401a8001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 19.672119915s ago: executing program 2 (id=3381): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x200000007ff}, 0x10022, 0xac5f, 0x0, 0x0, 0x0, 0x67af}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x80218, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x2, 0x0, 0x4, 0x0, 0x0, 0x2, 0x0, 0x40000000000}, 0x0, 0x3, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000200), 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r4, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000000cc0)="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", 0x1000}, {&(0x7f0000001cc0)="87aeead01d3b99f7305fcee0d57acbbbde16a7b815c7fb7185171d799451f778b634e9f7696531aa2dbe49f7bb3068f94fd0c9e106c6946eb04d2ad5cb8a9e99729d0fe873dc36793363004895895c1e", 0x50}, {&(0x7f0000001d40)="39da2ac5ce2fe76e00b7638e", 0xc}, {&(0x7f0000001d80)="ea7449379a794277093b910327c472d2aeb802d7d037dfc1f76cf57b81ccf98f87ff83f8e9b412965f7cded1e79ca23494e645154fb3a2ac6635547da8d11b7af9a69c0c2ad2358994d1add38c62db51a26e97e4912d58b163a256f432e7a3f5b3dce6fb9e84d88c9709902a6025366940c4f5c1e76e9fd42e87603b14e8237f5a701ae311e79404f2e11dc33500d251d431593945e53adab2c047e105de68f1f648b7bdfd0407ebe414b1f135dbd9106b8faf928c25a98f4fa043128449f0a0ea309d8e84de18ba030813", 0xcb}], 0x4, &(0x7f0000001ec0)="344def183777181356", 0x9, 0x8000}, 0x10) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x4, 0x0, 0xffffffffffffff58) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[], &(0x7f00000001c0)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r6, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7}, 0x94) r8 = openat$cgroup_ro(r2, &(0x7f0000000300)='net_prio.prioidx\x00', 0x0, 0x0) r9 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000400)={0x0, r0}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1e0000007f000000050000000100008011a00100", @ANYRES32=r5, @ANYBLOB="b600"/20, @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="01000000000000000500000004000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=r9, @ANYBLOB="44d567d3ce50c18c09d2e82976cdc2f5ce95b57684a4a41c"], 0x50) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='memory.high\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f00000001c0)=ANY=[], 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r10 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$ITER_CREATE(0x21, &(0x7f00000001c0)={r10}, 0x8) close(r1) r11 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r11, 0x29, 0x37, &(0x7f0000000100), 0x120) r12 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r12, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000007c0)="2e00000010008188e6b62aa73772cc9f1ba1f848310000005e144658b7d300000e000a001000000002800000128ce06922386a24edcd075d703d89c992f6", 0x3e}], 0x1}, 0x4005040) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r13, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000040)="b90103606989068c3c270040f0832f", 0x0, 0x104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 19.671541925s ago: executing program 1 (id=3382): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x5, 0x4, 0x0, 0x0, 0x0, 0x810, 0x4a4, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0xfffffffffffffffe}, 0x100, 0x0, 0xc2ba, 0x1, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffd}, 0x0, 0x3, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000380)="1400000036000b63d25a595c779f10ce0630fc60", 0x14}], 0x1}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000004800000048000000080000000f00000000000008020000000900000004000085000200000800000000000000001000000800000004000000400000000c0000000300000009000000050000000300000000000000002e3e3000305f00"], &(0x7f0000000300)=""/180, 0x68, 0xb4, 0x1, 0xfffffffc}, 0x28) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x104046, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x1, 0x0, 0x100000, 0x6, 0x400000, 0x0, 0x0, 0x0, 0xfffffff7}, 0x0, 0xffffffffffffffff, r1, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x3) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000001340)=@hci={0x1f, 0x8e88, 0x47}, 0x80, 0x0}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x200, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x4000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="0600"}) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x15, 0x5, 0x0, &(0x7f0000000500)) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004025a9fff0000002e0000001126078f39b52d89f6fa0b83ff40c17ef57cec2d0f76a8c1829bec8355c379c44c32e54f8fe7ca6b82e3c3d34cd6daa3ebed0779fcb90acbb4199889ae9cda14dee23f5a698d09f0aa3a0d9a5e2423e77138f4b3bdd1c24d0cee4cdb9cbb6df138362de9f4774c461afb8f5a973af29f1d822f86bab67762e8dc6229971f9fd9627bb26a0f0d8a10850b0830b8fb2dcc009f476718ec977a2d4ba13e26370397", @ANYRES32, @ANYBLOB="8700"/20, @ANYRES32=0x0, @ANYRES32], 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x2100, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x10004000) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89ed, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r4, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000380), 0x12) socket$kcm(0x10, 0x3, 0x10) 19.596213949s ago: executing program 3 (id=3383): r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f00000031c0)={&(0x7f00000006c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB='8\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x00>'], 0x38}, 0x0) 19.485518609s ago: executing program 0 (id=3384): perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x3, 0x0, 0x10, 0xfc, 0x0, 0x1, 0x20225, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200003, 0x1, @perf_bp={0x0, 0x3}, 0x4048, 0xc8, 0x9, 0x7, 0x2, 0xdc4, 0x0, 0x0, 0x8, 0x0, 0x5}, 0x0, 0xa, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB="8f0303e8000000fc007538e486dd630ace2212102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa12006558", @ANYBLOB="ece75cc204d34130c4a31f31ba2ec1b7c0"], 0xcfa4) 18.83037958s ago: executing program 0 (id=3385): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x105880, 0x0, 0x0, 0x7, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x6, 0x13, &(0x7f0000000200)=r5, 0x4) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xd, &(0x7f00000001c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x73, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x5, &(0x7f0000000040)=@framed={{}, [@btf_id={0x18, 0x7, 0x3, 0x0, 0x2}]}, &(0x7f0000000380)='GPL\x00', 0x7, 0x9c, &(0x7f00000003c0)=""/156, 0x0, 0x0, '\x00', r6}, 0x94) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$kcm(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0}, 0x20000000) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="00001407ec7500000200"/20, @ANYRES32, @ANYBLOB="0200000000000003"], 0x48) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000bc0)="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", 0x2cb}, {&(0x7f0000000200)="b0fef28adda62f55a0000000000000001abe0a88f6", 0x15}], 0x2}, 0x8000) recvmsg(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/233, 0xe9}], 0x1, &(0x7f0000002d00)=""/4080, 0xff0}, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) close(r9) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x890b, &(0x7f0000000100)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r12 = openat$cgroup_procs(r11, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r12, &(0x7f00000000c0), 0x12) unlink(&(0x7f0000000000)='./file0\x00') r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r13}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x1d, &(0x7f0000000800)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3ff}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@generic={0x1c, 0x7, 0x7, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffff8}, @call={0x85, 0x0, 0x0, 0x28}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xdcbd}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x6c, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 18.77545273s ago: executing program 3 (id=3386): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x17, 0x0, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) write$cgroup_subtree(r1, &(0x7f0000000780)=ANY=[@ANYBLOB="8fedcb790700117df37538e486dd6317ce22e0ee00000000000000000000000000007fc5f603ff65ec5deb004298f479a79d93014b8e7781c2"], 0xfdef) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000040)={'bridge0\x00', @multicast}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @tracing=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) 18.682627938s ago: executing program 1 (id=3387): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x51, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000000000008500000058"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x28}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) socket$kcm(0x2, 0x200000000000001, 0x106) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$kcm(r2, 0x0, 0x40050) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1, 0x0, 0x20}, 0x1f00) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r5 = socket$kcm(0xa, 0x5, 0x0) socket$kcm(0x10, 0x3, 0x10) recvmsg$kcm(r5, &(0x7f0000001500)={0x0, 0x40, 0x0}, 0x40012020) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r6 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r6, 0x1, 0x3e, 0x0, 0x0) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) socket$kcm(0x11, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41000, 0xc}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 18.681388408s ago: executing program 5 (id=3388): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000001e00000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = socket$kcm(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r3, @ANYRESHEX=r4, @ANYBLOB="05"], 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r3, 0xffffffffffffffff, 0x7}, 0x20) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x31306, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x6, 0xa5}, 0x0, 0xf, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89a0, &(0x7f0000000080)) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r9 = socket$kcm(0x2, 0x2, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000a00)=ANY=[@ANYRES64=r6, @ANYRESHEX=r8, @ANYRESHEX=r1, @ANYRESHEX=r6, @ANYRESOCT=r5, @ANYRES16=r5, @ANYRESDEC=r4, @ANYBLOB="fa7ae8542ae9fcb9a2d69af75a507b597c39b60d355ea60d418151020f474730d2c85fa4667276c30de06b2f6fa116e67715f2f194f36126df5748cf4007921865da9e"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000001ac0)={r10, 0x0, 0x0}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{}, 0x0, &(0x7f00000002c0)=r10}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d40)={0xffffffffffffffff, 0xe0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000b00)=[0x0, 0x0, 0x0], 0x0, 0x76, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x8, 0x4c, 0x8, 0x0, 0x0}}, 0x10) r13 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)={0x1b, 0x0, 0x0, 0x9, 0x0, r3, 0x2, '\x00', 0x0, r8, 0x2, 0x1, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES16=r11], &(0x7f0000000540)='GPL\x00', 0x6, 0x26, &(0x7f0000000580)=""/38, 0x40f00, 0x8, '\x00', r12, 0x0, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000600)={0x2, 0x5, 0x0, 0x69acc8ae}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000700)=[r8, r8, r13, r0], &(0x7f0000000840)=[{0x0, 0x40000001, 0x7, 0xc}, {0x4, 0x3, 0x1000000b, 0x2}], 0x10, 0x1000}, 0x94) setsockopt$sock_attach_bpf(r9, 0x1, 0x2e, &(0x7f0000000640)=r8, 0x4) recvmsg(r9, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xff79}, 0x60) ioctl$PERF_EVENT_IOC_RESET(r5, 0x2403, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89a2, &(0x7f0000000080)) 18.663197371s ago: executing program 2 (id=3389): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x10000000000, 0x40, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0, 0x6}, 0x0, 0x1000, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.numa_stat\x00', 0x26e1, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000, 0x1000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x10, &(0x7f0000001280), 0x4) r3 = getpid() sendmsg$unix(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000004c0)="e60d", 0x2}], 0x1, &(0x7f0000000680)=[@cred={{0x1c, 0x1, 0x2, {r3, 0xee01, 0xee00}}}], 0x20, 0x10}, 0x10044001) write$cgroup_pid(r1, &(0x7f0000000400), 0x12) recvmsg(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ee0000}, 0x2002) 18.425434295s ago: executing program 0 (id=3390): bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000900)={0x1, 0x58, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x5c7e8fcd467c42ae, 0x0, '\x00', r0}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x109080, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000080)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) ioctl$TUNSETLINK(r4, 0x400454cd, 0x337) ioctl$TUNSETFILTEREBPF(r4, 0x800454e1, &(0x7f00000000c0)=r6) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x1) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x3, 0x16, &(0x7f0000000b80)=ANY=[@ANYRES8=r6], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) ioctl$TUNATTACHFILTER(r7, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x4000}]}) ioctl$TUNSETSTEERINGEBPF(r7, 0x800454e0, &(0x7f0000000940)=r1) write$cgroup_devices(r5, &(0x7f0000000840)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYBLOB="b26137edeb92e9d2b4"], 0xffdd) 18.423238006s ago: executing program 5 (id=3391): r0 = socket$kcm(0xa, 0x2, 0x0) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r2 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r2, 0x6, 0xa, &(0x7f0000000500)=r1, 0x4) sendmsg$kcm(r0, &(0x7f00000001c0)={&(0x7f0000000000)=@in6={0xa, 0x4e25, 0x7fff, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x10, 0x29, 0x43}], 0x10}, 0x97) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff4, 0x0, @perf_config_ext={0x0, 0xff}, 0x4140, 0x0, 0x8, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100080, 0x0, 0x0, 0x1}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) perf_event_open(0x0, 0x0, 0xf, r3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r4) r5 = socket$kcm(0x2, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20008000) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20) 18.422837246s ago: executing program 2 (id=3400): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x200000007ff}, 0x10022, 0xac5f, 0x0, 0x0, 0x0, 0x67af}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x80218, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x2, 0x0, 0x4, 0x0, 0x0, 0x2, 0x0, 0x40000000000}, 0x0, 0x3, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000200), 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r4, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000000cc0)="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", 0x1000}, {&(0x7f0000001cc0)="87aeead01d3b99f7305fcee0d57acbbbde16a7b815c7fb7185171d799451f778b634e9f7696531aa2dbe49f7bb3068f94fd0c9e106c6946eb04d2ad5cb8a9e99729d0fe873dc36793363004895895c1e", 0x50}, {&(0x7f0000001d40)="39da2ac5ce2fe76e00b7638e", 0xc}, {&(0x7f0000001d80)="ea7449379a794277093b910327c472d2aeb802d7d037dfc1f76cf57b81ccf98f87ff83f8e9b412965f7cded1e79ca23494e645154fb3a2ac6635547da8d11b7af9a69c0c2ad2358994d1add38c62db51a26e97e4912d58b163a256f432e7a3f5b3dce6fb9e84d88c9709902a6025366940c4f5c1e76e9fd42e87603b14e8237f5a701ae311e79404f2e11dc33500d251d431593945e53adab2c047e105de68f1f648b7bdfd0407ebe414b1f135dbd9106b8faf928c25a98f4fa043128449f0a0ea309d8e84de18ba030813", 0xcb}], 0x4, &(0x7f0000001ec0)="344def183777181356", 0x9, 0x8000}, 0x10) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x4, 0x0, 0xffffffffffffff58) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[], &(0x7f00000001c0)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r6, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7}, 0x94) openat$cgroup_ro(r2, &(0x7f0000000300)='net_prio.prioidx\x00', 0x0, 0x0) r8 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000400)={0x0, r0}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1e0000007f000000050000000100008011a00100", @ANYRES32=r5, @ANYBLOB="b600"/20, @ANYRES32=r7, @ANYBLOB="0100000000000000050000000400000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=r8, @ANYBLOB="44d567d3ce50c18c09d2e82976cdc2f5ce95b57684a4a41c"], 0x50) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='memory.high\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f00000001c0)=ANY=[], 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r9 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$ITER_CREATE(0x21, &(0x7f00000001c0)={r9}, 0x8) close(r1) r10 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r10, 0x29, 0x37, &(0x7f0000000100), 0x120) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000007c0)="2e00000010008188e6b62aa73772cc9f1ba1f848310000005e144658b7d300000e000a001000000002800000128ce06922386a24edcd075d703d89c992f6", 0x3e}], 0x1}, 0x4005040) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r12, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000040)="b90103606989068c3c270040f0832f", 0x0, 0x104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 17.941188655s ago: executing program 2 (id=3392): bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x8032, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x78d2, 0x1}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r0, &(0x7f00000010c0)={&(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000480)='\\', 0x1}], 0xfd}, 0x4000040) 17.940762115s ago: executing program 5 (id=3393): bpf$PROG_LOAD(0x5, &(0x7f00000016c0)={0x5, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x7, 0x0, 0x1ff, 0x0, 0xa8}, 0x0, 0x0, 0xffffffffffffffff, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xe, &(0x7f0000001440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000018000000000000000000000000000000950000002304f866"], &(0x7f0000000200)='syzkaller\x00', 0x6, 0xfd2f, &(0x7f0000000240)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe66}, 0x37) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0xa}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/time_for_children\x00') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000003c0)='cpuset.cpu_exclusive\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000002c0)=0x3, 0x12) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[], 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f0000000180)=r2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x29, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d08007b490d4f1e81f8d815000100fe80000000000000080005007a010401a80016002000104004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0xfeff, &(0x7f0000000040)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73f72cc9f0ba1f848390000005e100602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x20004804) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000001680)={'team0\x00', 0x200}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="1b00000000000000000000000100000000000000", @ANYRES32, @ANYBLOB="ebc800219b35e1d1ab4c1ab7b73a840300e1ffffc15f62eeae16d2", @ANYRES32=r6, @ANYBLOB="04000000000000000400"/28], 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_bp={0x0, 0xa}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x22, 0x2, 0x21) 17.706288578s ago: executing program 3 (id=3394): socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x2000009, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x0, 0x6}, 0x100080, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x49, 0x0, 0x0) socket$kcm(0x22, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7}, [@generic={0x6b, 0x1, 0x1, 0x34}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000fcffffff850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{}, &(0x7f0000000080), &(0x7f00000000c0)=r2}, 0x20) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="5c00000012006b8c373be35c6e17aa31046a876c1d0000007ea60864160af2a26508001dc0c3000200340031009ee517d24460bc24eab556a705251e618294ff0051f60a84c9f47273b5e1c5e73bb9e5c446fa30be62cbd4938037e7", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20040804) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r4 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r4, &(0x7f0000000b40)={&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000800)="e9", 0x9500}, {&(0x7f00000017c0)="ea0189bdebb0c16d420ee9b95082abd6431cc7afc22c4a6b8adecef68f76bd81a86e89f9c80e5c868a12b09e80ba8c01eb3f4b7be71f9fc2355c336cedc15eb778e3a3b35c3f72629ea4d9ae42cf4c17255815fb8a47aafd8b8ff0c202b4e09f7c42811261b5e113fcce27b4329ccb792df14b7d6dcfaf2cf8dbb51946e89c862e9252731f680ec50326fc16386aeefe654bac24", 0x94}], 0x2, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xd}, @loopback}}}], 0x20}, 0xe900) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x50028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x7}, 0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x6, 0xc07, 0xfffd, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0x0, 0xffffffffffffffff, 0xc) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff003, 0x66, 0x7f, 0x1}, 0x48) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x40, r5}, 0x38) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) 17.500298616s ago: executing program 2 (id=3395): r0 = socket$kcm(0x10, 0x5, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0xcd, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0x3}, 0x0, 0x400, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x8000000}, 0x0, 0xffffffffffffdfff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') close(r2) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080307000000e8fea4a1180015000600142603600e120800110000810401040016fc0a00104004000000036010fab94dcf5c0461c1d67f6f94067134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 17.381972618s ago: executing program 1 (id=3396): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000031c0)={&(0x7f00000006c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB='8\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x00>'], 0x38}, 0x0) 17.297389644s ago: executing program 2 (id=3397): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x10, &(0x7f0000000040), 0x4) sendmsg$unix(r2, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x24004044) socket$kcm(0x29, 0x5, 0x0) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) sendmsg$inet(r5, 0x0, 0x20000000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x16, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x26e1, 0x0) close(r6) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, 0x0, 0x0) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x4001}, 0x80, &(0x7f0000002800)}, 0x4801) ioctl$SIOCSIFHWADDR(r6, 0x8b15, &(0x7f0000000000)={'wlan1\x00', @random="e51d0f00"}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x6, 0xff800000, 0x8, 0x8002, 0x1, 0xd, '\x00', 0x0, r1, 0x4, 0x3, 0x3}, 0x50) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000180)=@generic={&(0x7f0000000000)='./file0\x00', r8}, 0x18) 16.947730748s ago: executing program 1 (id=3398): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x10, &(0x7f0000000040), 0x4) sendmsg$unix(r2, &(0x7f0000000640)={0x0, 0xc03e, 0x0}, 0x24004044) 2.863717911s ago: executing program 33 (id=3390): bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000900)={0x1, 0x58, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x5c7e8fcd467c42ae, 0x0, '\x00', r0}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x109080, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000080)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b7020000b96871dfbfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe0000004f850000001a000000b7000000000000009500010000000000455781a5feee5e1ce784909b849d5550adf200000000000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d62de53a9a53608c10556e5734eb84049761451ce2e2d9f8004e26f7fcc059c06220002595f6dba87b81d1106fb026cce67a66afd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd6fee53f5b2e7b91c61ced1ebad000000000000e8122a793c080a882add4e1179bd4a44f2fcb6d753a78845d8363e0401861abebe428ba953df4aece69311687f4122073a236c3ad198e3f3a532efa04137d452ff47d2638da3261c8362bb7c7824be6195a66d2e17e122040e11e3bd4a69fc6e8d9f7043e09b9e10dc7777bfae58e99e30810400000000000000d63d716c0975e1ce4a655362e7062ff6ab3934555c01840219829472ad529cefa06d3482c7b2711b98eabdca89b77efd13e6dba4a431ce47911834118093b6cabaa17a57727474e17c5ee234835088445aa4a9b677d3d342640e328504aea02a2d727e62b7f097a02dbf8fe1d704765de7482040b2fc3000000000000000008947baeaaf954aff687deaa2f804924600273ee26d8115cbca081a14cba24788779291745083fccdddc979ddca066da478c197d4a550470557bc99cca336bd88cd28a5ee651627e3a6fbf6ea53b95ddb64c69c7d8d2f4baddc239828760459564124bad68209d2a1d16ad085886c017679cfcda8b10700ac1e2bcc5ede5b5687aa418abfa09acd7339e73b2cd185c9eb5fb34fccd20ffa155b16c0c309ed6f6663677df37de0ec0d0f548b183940be5d1fe0bae14d1a76bf741330dacd9cc19c0163bcc93059e8d2d1bfa928e2ba458ecd989cb3581a3f270ad48255ac0dad4923e3e357e4e90583ce8d43ec65ed491d87a51d7c13f665dcf772e3ead71112008b16b0ea821f70aee1ccbd71c5a1c21e87d5b7b73d356337d15b9dcae4d0d750ffa07909c955e718585b2456308beda2fa03bb9bcf03cdff31ee4b1665b987829c0f0872c006c6e4ed666fe23b343aae943923eedbdb0e7abee90e3da7b98b7d07d2d481"], &(0x7f0000000800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) ioctl$TUNSETLINK(r4, 0x400454cd, 0x337) ioctl$TUNSETFILTEREBPF(r4, 0x800454e1, &(0x7f00000000c0)=r6) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x1) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x3, 0x16, &(0x7f0000000b80)=ANY=[@ANYRES8=r6], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) ioctl$TUNATTACHFILTER(r7, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x4000}]}) ioctl$TUNSETSTEERINGEBPF(r7, 0x800454e0, &(0x7f0000000940)=r1) write$cgroup_devices(r5, &(0x7f0000000840)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYBLOB="b26137edeb92e9d2b4"], 0xffdd) 2.293191076s ago: executing program 34 (id=3394): socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x2000009, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x0, 0x6}, 0x100080, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x49, 0x0, 0x0) socket$kcm(0x22, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7}, [@generic={0x6b, 0x1, 0x1, 0x34}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000fcffffff850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{}, &(0x7f0000000080), &(0x7f00000000c0)=r2}, 0x20) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="5c00000012006b8c373be35c6e17aa31046a876c1d0000007ea60864160af2a26508001dc0c3000200340031009ee517d24460bc24eab556a705251e618294ff0051f60a84c9f47273b5e1c5e73bb9e5c446fa30be62cbd4938037e7", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20040804) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r4 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r4, &(0x7f0000000b40)={&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000800)="e9", 0x9500}, {&(0x7f00000017c0)="ea0189bdebb0c16d420ee9b95082abd6431cc7afc22c4a6b8adecef68f76bd81a86e89f9c80e5c868a12b09e80ba8c01eb3f4b7be71f9fc2355c336cedc15eb778e3a3b35c3f72629ea4d9ae42cf4c17255815fb8a47aafd8b8ff0c202b4e09f7c42811261b5e113fcce27b4329ccb792df14b7d6dcfaf2cf8dbb51946e89c862e9252731f680ec50326fc16386aeefe654bac24", 0x94}], 0x2, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xd}, @loopback}}}], 0x20}, 0xe900) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x50028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x7}, 0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x6, 0xc07, 0xfffd, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0x0, 0xffffffffffffffff, 0xc) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff003, 0x66, 0x7f, 0x1}, 0x48) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x40, r5}, 0x38) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) 1.726480031s ago: executing program 35 (id=3393): bpf$PROG_LOAD(0x5, &(0x7f00000016c0)={0x5, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x7, 0x0, 0x1ff, 0x0, 0xa8}, 0x0, 0x0, 0xffffffffffffffff, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xe, &(0x7f0000001440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000018000000000000000000000000000000950000002304f866"], &(0x7f0000000200)='syzkaller\x00', 0x6, 0xfd2f, &(0x7f0000000240)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe66}, 0x37) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0xa}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/time_for_children\x00') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000003c0)='cpuset.cpu_exclusive\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000002c0)=0x3, 0x12) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[], 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f0000000180)=r2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x29, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d08007b490d4f1e81f8d815000100fe80000000000000080005007a010401a80016002000104004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0xfeff, &(0x7f0000000040)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73f72cc9f0ba1f848390000005e100602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x20004804) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000001680)={'team0\x00', 0x200}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="1b00000000000000000000000100000000000000", @ANYRES32, @ANYBLOB="ebc800219b35e1d1ab4c1ab7b73a840300e1ffffc15f62eeae16d2", @ANYRES32=r6, @ANYBLOB="04000000000000000400"/28], 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_bp={0x0, 0xa}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x22, 0x2, 0x21) 248.713774ms ago: executing program 36 (id=3398): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x10, &(0x7f0000000040), 0x4) sendmsg$unix(r2, &(0x7f0000000640)={0x0, 0xc03e, 0x0}, 0x24004044) 0s ago: executing program 37 (id=3397): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x10, &(0x7f0000000040), 0x4) sendmsg$unix(r2, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x24004044) socket$kcm(0x29, 0x5, 0x0) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) sendmsg$inet(r5, 0x0, 0x20000000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x16, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x26e1, 0x0) close(r6) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, 0x0, 0x0) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x4001}, 0x80, &(0x7f0000002800)}, 0x4801) ioctl$SIOCSIFHWADDR(r6, 0x8b15, &(0x7f0000000000)={'wlan1\x00', @random="e51d0f00"}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x6, 0xff800000, 0x8, 0x8002, 0x1, 0xd, '\x00', 0x0, r1, 0x4, 0x3, 0x3}, 0x50) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000180)=@generic={&(0x7f0000000000)='./file0\x00', r8}, 0x18) kernel console output (not intermixed with test programs): 80 00 00 00 00 48 83 ec 08 [ 715.187836][T12937] RSP: 002b:00007fed483acfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 715.196305][T12937] RAX: ffffffffffffffda RBX: 00007fed483ad6c0 RCX: 00007fed4755e98e [ 715.204319][T12937] RDX: 0000000000000001 RSI: 00007fed483ad0a0 RDI: 0000000000000007 [ 715.212336][T12937] RBP: 00007fed483ad090 R08: 0000000000000000 R09: 0000000000000000 [ 715.220353][T12937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 715.228370][T12937] R13: 00007fed47826128 R14: 00007fed47826090 R15: 00007ffe4eeb5658 [ 715.236414][T12937] [ 715.370644][T12940] netlink: 'syz.2.2571': attribute type 10 has an invalid length. [ 715.993544][T12968] netlink: 'syz.2.2580': attribute type 10 has an invalid length. [ 716.504228][T12990] netlink: 'syz.2.2584': attribute type 10 has an invalid length. [ 717.050640][T13012] netlink: 'syz.0.2594': attribute type 10 has an invalid length. [ 717.784096][T13029] netlink: 'syz.5.2601': attribute type 10 has an invalid length. [ 717.830417][T13029] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 718.040165][T13033] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2603'. [ 718.058098][T13035] netlink: 'syz.1.2604': attribute type 10 has an invalid length. [ 718.066809][T13035] netlink: 'syz.1.2604': attribute type 11 has an invalid length. [ 718.074883][T13035] netlink: 5145 bytes leftover after parsing attributes in process `syz.1.2604'. [ 718.126226][T13039] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2605'. [ 718.503743][T13046] netlink: 'syz.1.2608': attribute type 10 has an invalid length. [ 718.822207][T13054] FAULT_INJECTION: forcing a failure. [ 718.822207][T13054] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 718.877736][T13054] CPU: 0 PID: 13054 Comm: syz.0.2611 Not tainted syzkaller #0 [ 718.885382][T13054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 718.895501][T13054] Call Trace: [ 718.898830][T13054] [ 718.901799][T13054] dump_stack_lvl+0x188/0x24e [ 718.906565][T13054] ? show_regs_print_info+0x12/0x12 [ 718.911813][T13054] ? load_image+0x410/0x410 [ 718.916371][T13054] ? __lock_acquire+0x7c40/0x7c40 [ 718.921452][T13054] ? snprintf+0xe5/0x140 [ 718.925749][T13054] should_fail_ex+0x390/0x4c0 [ 718.930500][T13054] _copy_to_user+0x2c/0x130 [ 718.935063][T13054] simple_read_from_buffer+0xe3/0x150 [ 718.940488][T13054] proc_fail_nth_read+0x1a6/0x220 [ 718.945566][T13054] ? proc_fault_inject_write+0x310/0x310 [ 718.951279][T13054] ? fsnotify_perm+0x248/0x550 [ 718.956095][T13054] ? proc_fault_inject_write+0x310/0x310 [ 718.961779][T13054] vfs_read+0x2db/0x960 [ 718.966003][T13054] ? kernel_read+0x1e0/0x1e0 [ 718.970663][T13054] ? __fget_files+0x28/0x460 [ 718.975310][T13054] ? __fget_files+0x3fc/0x460 [ 718.980062][T13054] ? __fdget_pos+0x2ae/0x360 [ 718.984713][T13054] ? ksys_read+0x70/0x260 [ 718.989110][T13054] ksys_read+0x14d/0x260 [ 718.993414][T13054] ? vfs_write+0x9a0/0x9a0 [ 718.997891][T13054] ? lockdep_hardirqs_on+0x94/0x140 [ 719.003145][T13054] do_syscall_64+0x4c/0xa0 [ 719.007609][T13054] ? clear_bhb_loop+0x60/0xb0 [ 719.012346][T13054] ? clear_bhb_loop+0x60/0xb0 [ 719.017079][T13054] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 719.023038][T13054] RIP: 0033:0x7fed4755e98e [ 719.027507][T13054] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 719.047170][T13054] RSP: 002b:00007fed483cdfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 719.055642][T13054] RAX: ffffffffffffffda RBX: 00007fed483ce6c0 RCX: 00007fed4755e98e [ 719.063655][T13054] RDX: 000000000000000f RSI: 00007fed483ce0a0 RDI: 0000000000000004 [ 719.071681][T13054] RBP: 00007fed483ce090 R08: 0000000000000000 R09: 0000000000000000 [ 719.079787][T13054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 719.087811][T13054] R13: 00007fed47826038 R14: 00007fed47825fa0 R15: 00007ffe4eeb5658 [ 719.095851][T13054] [ 719.528981][T13066] netlink: 'syz.0.2616': attribute type 10 has an invalid length. [ 722.905231][T13085] netlink: 'syz.1.2622': attribute type 10 has an invalid length. [ 723.900450][T13115] netlink: 'syz.0.2631': attribute type 10 has an invalid length. [ 724.119208][T13119] netlink: 'syz.5.2633': attribute type 11 has an invalid length. [ 724.139737][T13119] netlink: 'syz.5.2633': attribute type 2 has an invalid length. [ 724.196013][T13119] netlink: 126196 bytes leftover after parsing attributes in process `syz.5.2633'. [ 724.418952][T13127] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2634'. [ 724.603276][T13131] netlink: 'syz.0.2636': attribute type 10 has an invalid length. [ 724.640375][T13130] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2635'. [ 725.651566][T13154] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2645'. [ 725.788894][T13153] netlink: 'syz.1.2646': attribute type 10 has an invalid length. [ 726.541384][T13159] netlink: 'syz.5.2648': attribute type 10 has an invalid length. [ 726.550822][T13159] team0: Device hsr_slave_0 failed to register rx_handler [ 727.098653][T13177] netlink: 11774 bytes leftover after parsing attributes in process `syz.1.2649'. [ 727.540813][T13178] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2651'. [ 728.411694][T13194] device syzkaller0 entered promiscuous mode [ 728.556263][T13198] netlink: 'syz.3.2659': attribute type 10 has an invalid length. [ 728.659554][T13212] netlink: 'syz.2.2662': attribute type 10 has an invalid length. [ 733.257726][T13224] netlink: 'syz.3.2675': attribute type 10 has an invalid length. [ 733.571003][T13241] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2669'. [ 736.559161][T13240] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2668'. [ 736.570449][T13253] netlink: 763 bytes leftover after parsing attributes in process `syz.5.2673'. [ 736.836931][T13257] netlink: 'syz.5.2674': attribute type 10 has an invalid length. [ 736.876581][T13257] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 737.277093][T13277] netlink: 'syz.1.2682': attribute type 10 has an invalid length. [ 737.609428][T13271] device syzkaller0 entered promiscuous mode [ 738.044470][T13289] netlink: 'syz.1.2686': attribute type 2 has an invalid length. [ 738.074645][T13289] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2686'. [ 740.194374][T13288] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 740.208125][T13288] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 740.218389][T13288] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 743.432015][T13310] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2691'. [ 743.454398][T13320] netlink: 'syz.5.2693': attribute type 13 has an invalid length. [ 743.464432][T13306] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2690'. [ 743.927927][T13330] netlink: 'syz.3.2696': attribute type 10 has an invalid length. [ 744.061918][T13328] netlink: 'syz.0.2694': attribute type 10 has an invalid length. [ 744.215795][T13333] device syzkaller0 entered promiscuous mode [ 744.368747][T13338] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2699'. [ 745.018786][T13350] netlink: 'syz.2.2702': attribute type 1 has an invalid length. [ 745.038938][T13350] netlink: 83992 bytes leftover after parsing attributes in process `syz.2.2702'. [ 747.078698][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.085480][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 749.773658][T13373] netlink: 'syz.3.2709': attribute type 10 has an invalid length. [ 750.160076][T13382] netlink: 'syz.0.2710': attribute type 10 has an invalid length. [ 750.489441][T13389] device syzkaller0 entered promiscuous mode [ 757.084764][T13423] netlink: 'syz.2.2724': attribute type 10 has an invalid length. [ 757.394789][T13428] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.2725'. [ 757.441626][T13427] netlink: 'syz.3.2726': attribute type 10 has an invalid length. [ 757.743503][T13446] netlink: 'syz.0.2729': attribute type 2 has an invalid length. [ 757.936992][T13446] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2729'. [ 758.217147][T13450] device batadv0 entered promiscuous mode [ 759.050471][T13453] delete_channel: no stack [ 759.163773][T13465] netlink: 'syz.3.2735': attribute type 2 has an invalid length. [ 759.174880][T13465] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2735'. [ 760.567321][T13471] device syzkaller0 entered promiscuous mode [ 760.619695][T13473] netlink: 'syz.1.2737': attribute type 41 has an invalid length. [ 761.264929][T13482] netlink: 'syz.5.2739': attribute type 10 has an invalid length. [ 761.295649][T13482] team0: Device hsr_slave_0 failed to register rx_handler [ 762.171304][T13500] netlink: 'syz.1.2745': attribute type 2 has an invalid length. [ 762.188630][T13500] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2745'. [ 764.004204][T13489] netlink: 'syz.5.2742': attribute type 10 has an invalid length. [ 764.012529][T13489] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 764.027281][T13498] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 764.058195][T13498] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 764.082593][T13498] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 765.122236][T13532] netlink: 'syz.0.2752': attribute type 10 has an invalid length. [ 765.199756][T13511] netlink: 'syz.2.2761': attribute type 2 has an invalid length. [ 765.220558][T13511] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2761'. [ 766.388051][T13542] netlink: 'syz.2.2756': attribute type 10 has an invalid length. [ 766.441324][T13542] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.2756'. [ 766.734169][T13558] netlink: 'syz.1.2757': attribute type 2 has an invalid length. [ 766.990763][T13558] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2757'. [ 767.382237][T13550] device aaaaaaaaaaaaaaa entered promiscuous mode [ 767.711968][T13572] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.2764'. [ 768.531203][T13579] netlink: 'syz.5.2765': attribute type 10 has an invalid length. [ 768.549171][T13579] team0: Device hsr_slave_0 failed to register rx_handler [ 769.024670][T13593] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.2778'. [ 769.177358][T13593] device bridge_slave_1 entered promiscuous mode [ 769.321897][T13600] netlink: 'syz.5.2768': attribute type 2 has an invalid length. [ 769.597318][T13600] netlink: 10 bytes leftover after parsing attributes in process `syz.5.2768'. [ 770.376248][T13616] netlink: 'syz.5.2774': attribute type 10 has an invalid length. [ 770.467778][T13616] netlink: 65015 bytes leftover after parsing attributes in process `syz.5.2774'. [ 770.571451][T13618] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.2776'. [ 770.652910][T13621] device syzkaller0 entered promiscuous mode [ 770.670632][T13616] device aaaaaaaaaaaaaaa entered promiscuous mode [ 770.742771][T13618] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 770.842506][T13623] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2776'. [ 771.326790][T13635] netlink: 'syz.5.2781': attribute type 2 has an invalid length. [ 771.343481][T13635] netlink: 10 bytes leftover after parsing attributes in process `syz.5.2781'. [ 773.736533][T13634] netlink: 'syz.2.2780': attribute type 10 has an invalid length. [ 774.049538][T13648] netlink: 'syz.3.2787': attribute type 10 has an invalid length. [ 774.085649][T13647] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.2786'. [ 774.643757][T13664] FAULT_INJECTION: forcing a failure. [ 774.643757][T13664] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 774.677636][T13664] CPU: 0 PID: 13664 Comm: syz.2.2791 Not tainted syzkaller #0 [ 774.685181][T13664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 774.695288][T13664] Call Trace: [ 774.698626][T13664] [ 774.701608][T13664] dump_stack_lvl+0x188/0x24e [ 774.706344][T13664] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 774.712560][T13664] ? show_regs_print_info+0x12/0x12 [ 774.717816][T13664] ? load_image+0x410/0x410 [ 774.722403][T13664] should_fail_ex+0x390/0x4c0 [ 774.727159][T13664] _copy_to_user+0x2c/0x130 [ 774.731730][T13664] simple_read_from_buffer+0xe3/0x150 [ 774.737166][T13664] proc_fail_nth_read+0x1a6/0x220 [ 774.742244][T13664] ? proc_fault_inject_write+0x310/0x310 [ 774.747939][T13664] ? fsnotify_perm+0x248/0x550 [ 774.752823][T13664] ? proc_fault_inject_write+0x310/0x310 [ 774.758545][T13664] vfs_read+0x2db/0x960 [ 774.762773][T13664] ? kernel_read+0x1e0/0x1e0 [ 774.767430][T13664] ? __fget_files+0x28/0x460 [ 774.772092][T13664] ? __fget_files+0x3fc/0x460 [ 774.776849][T13664] ? __fdget_pos+0x2ae/0x360 [ 774.781497][T13664] ? ksys_read+0x70/0x260 [ 774.785905][T13664] ksys_read+0x14d/0x260 [ 774.790224][T13664] ? vfs_write+0x9a0/0x9a0 [ 774.794702][T13664] ? lockdep_hardirqs_on+0x94/0x140 [ 774.799967][T13664] do_syscall_64+0x4c/0xa0 [ 774.804418][T13664] ? clear_bhb_loop+0x60/0xb0 [ 774.809124][T13664] ? clear_bhb_loop+0x60/0xb0 [ 774.813837][T13664] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 774.819768][T13664] RIP: 0033:0x7feb1d15e98e [ 774.824211][T13664] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 774.843871][T13664] RSP: 002b:00007feb1e083fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 774.852316][T13664] RAX: ffffffffffffffda RBX: 00007feb1e0846c0 RCX: 00007feb1d15e98e [ 774.860316][T13664] RDX: 000000000000000f RSI: 00007feb1e0840a0 RDI: 0000000000000007 [ 774.868312][T13664] RBP: 00007feb1e084090 R08: 0000000000000000 R09: 0000000000000000 [ 774.876318][T13664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 774.884312][T13664] R13: 00007feb1d426038 R14: 00007feb1d425fa0 R15: 00007ffcdbbef968 [ 774.892339][T13664] [ 774.969042][T13668] netlink: 'syz.1.2792': attribute type 10 has an invalid length. [ 774.985620][T13668] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.2792'. [ 775.211840][T13674] device aaaaaaaaaaaaaaa entered promiscuous mode [ 775.923789][T13688] device syzkaller0 entered promiscuous mode [ 776.307006][T13686] netlink: 'syz.3.2797': attribute type 2 has an invalid length. [ 776.376110][T13686] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2797'. [ 776.420225][T13702] netlink: 'syz.1.2800': attribute type 10 has an invalid length. [ 778.453764][T13723] netlink: 'syz.5.2805': attribute type 2 has an invalid length. [ 778.462817][T13723] netlink: 10 bytes leftover after parsing attributes in process `syz.5.2805'. [ 780.624680][T13721] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 780.675733][T13721] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 780.696610][T13721] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 781.683119][T13750] netlink: 'syz.5.2816': attribute type 10 has an invalid length. [ 782.014394][T13750] team0: Device veth0_vlan failed to register rx_handler [ 782.492976][T13783] netlink: 'syz.1.2822': attribute type 2 has an invalid length. [ 782.527870][T13783] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2822'. [ 782.582880][T13770] device syzkaller0 entered promiscuous mode [ 782.763835][T13786] netlink: 'syz.0.2823': attribute type 10 has an invalid length. [ 784.540645][T13812] delete_channel: no stack [ 784.679457][T13824] netlink: 'syz.1.2834': attribute type 1 has an invalid length. [ 784.688352][T13824] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.2834'. [ 785.140926][T13830] netlink: 'syz.1.2835': attribute type 2 has an invalid length. [ 785.149803][T13830] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2835'. [ 785.758543][T13817] netlink: 'syz.3.2833': attribute type 21 has an invalid length. [ 786.097397][T13838] netlink: 'syz.5.2837': attribute type 10 has an invalid length. [ 786.137014][T13838] team0: Device hsr_slave_0 failed to register rx_handler [ 786.702215][T13855] netlink: 'syz.0.2848': attribute type 16 has an invalid length. [ 786.732478][T13855] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2848'. [ 786.810029][T13854] delete_channel: no stack [ 786.897791][T13863] netlink: 'syz.5.2850': attribute type 10 has an invalid length. [ 786.931650][T13863] netlink: 65015 bytes leftover after parsing attributes in process `syz.5.2850'. [ 787.074123][T13867] device syzkaller0 entered promiscuous mode [ 787.165143][T13881] netlink: 'syz.2.2853': attribute type 2 has an invalid length. [ 787.228928][T13881] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2853'. [ 787.711862][T13889] netlink: 'syz.0.2856': attribute type 10 has an invalid length. [ 789.062080][T13900] FAULT_INJECTION: forcing a failure. [ 789.062080][T13900] name failslab, interval 1, probability 0, space 0, times 0 [ 789.096057][T13900] CPU: 1 PID: 13900 Comm: syz.5.2860 Not tainted syzkaller #0 [ 789.103641][T13900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 789.113865][T13900] Call Trace: [ 789.117211][T13900] [ 789.120315][T13900] dump_stack_lvl+0x188/0x24e [ 789.125087][T13900] ? show_regs_print_info+0x12/0x12 [ 789.130381][T13900] ? load_image+0x410/0x410 [ 789.134978][T13900] ? perf_trace_lock_acquire+0x342/0x3f0 [ 789.140731][T13900] should_fail_ex+0x390/0x4c0 [ 789.145511][T13900] should_failslab+0x5/0x20 [ 789.150111][T13900] slab_pre_alloc_hook+0x59/0x300 [ 789.155209][T13900] kmem_cache_alloc+0x56/0x2f0 [ 789.160016][T13900] ? skb_clone+0x1e7/0x370 [ 789.164504][T13900] skb_clone+0x1e7/0x370 [ 789.168808][T13900] __netlink_deliver_tap+0x3e4/0x7e0 [ 789.174173][T13900] ? netlink_deliver_tap+0x2e/0x1b0 [ 789.179449][T13900] netlink_deliver_tap+0x19c/0x1b0 [ 789.184621][T13900] netlink_dump+0x80f/0xcd0 [ 789.189208][T13900] ? netlink_lookup+0x200/0x200 [ 789.194126][T13900] ? __inet_diag_dump_start+0x805/0x970 [ 789.199856][T13900] __netlink_dump_start+0x52c/0x6f0 [ 789.205215][T13900] inet_diag_handler_cmd+0x1d2/0x2b0 [ 789.210563][T13900] ? inet_diag_unregister+0xb0/0xb0 [ 789.215815][T13900] ? __mutex_trylock_common+0x15c/0x260 [ 789.221406][T13900] ? inet_diag_handler_get_info+0xb90/0xb90 [ 789.227351][T13900] ? inet_diag_dump_start+0x20/0x20 [ 789.232695][T13900] ? inet_diag_dump+0x50/0x50 [ 789.237457][T13900] ? sock_diag_lock_handler+0x19/0x280 [ 789.243046][T13900] ? inet_diag_unregister+0xb0/0xb0 [ 789.248310][T13900] sock_diag_rcv_msg+0x3c7/0x5e0 [ 789.253325][T13900] netlink_rcv_skb+0x1ef/0x440 [ 789.258237][T13900] ? sock_diag_bind+0xa0/0xa0 [ 789.262976][T13900] ? netlink_ack+0x1160/0x1160 [ 789.267818][T13900] ? netlink_deliver_tap+0x177/0x1b0 [ 789.273164][T13900] sock_diag_rcv+0x26/0x40 [ 789.277630][T13900] netlink_unicast+0x7ad/0x920 [ 789.282475][T13900] netlink_sendmsg+0x8ad/0xbd0 [ 789.287326][T13900] ? netlink_getsockopt+0x550/0x550 [ 789.292579][T13900] ? apparmor_socket_sendmsg+0x8a/0x330 [ 789.298194][T13900] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 789.303531][T13900] ? security_socket_sendmsg+0x7c/0xa0 [ 789.309043][T13900] ? netlink_getsockopt+0x550/0x550 [ 789.314302][T13900] ____sys_sendmsg+0x5ed/0x9a0 [ 789.319142][T13900] ? __sys_sendmsg_sock+0x30/0x30 [ 789.324207][T13900] ? __import_iovec+0x306/0x510 [ 789.329143][T13900] ? import_iovec+0x6f/0xa0 [ 789.333722][T13900] ___sys_sendmsg+0x2a2/0x360 [ 789.338463][T13900] ? __sys_sendmsg+0x2a0/0x2a0 [ 789.343383][T13900] ? __lock_acquire+0x7c40/0x7c40 [ 789.348562][T13900] __se_sys_sendmsg+0x1c3/0x2b0 [ 789.353463][T13900] ? perf_trace_preemptirq_template+0x268/0x320 [ 789.359853][T13900] ? __x64_sys_sendmsg+0x80/0x80 [ 789.364892][T13900] ? lockdep_hardirqs_on+0x94/0x140 [ 789.370169][T13900] do_syscall_64+0x4c/0xa0 [ 789.374634][T13900] ? clear_bhb_loop+0x60/0xb0 [ 789.379357][T13900] ? clear_bhb_loop+0x60/0xb0 [ 789.384090][T13900] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 789.390042][T13900] RIP: 0033:0x7f6b4039e159 [ 789.394503][T13900] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 789.414209][T13900] RSP: 002b:00007f6b41269028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 789.422683][T13900] RAX: ffffffffffffffda RBX: 00007f6b40626090 RCX: 00007f6b4039e159 [ 789.430787][T13900] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 789.438805][T13900] RBP: 00007f6b41269090 R08: 0000000000000000 R09: 0000000000000000 [ 789.446820][T13900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 789.455008][T13900] R13: 00007f6b40626128 R14: 00007f6b40626090 R15: 00007ffeae8f7148 [ 789.463077][T13900] [ 790.012877][T13906] netlink: 'syz.2.2864': attribute type 16 has an invalid length. [ 790.023832][T13906] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2864'. [ 790.135664][T13905] delete_channel: no stack [ 791.933505][T13909] netlink: 'syz.2.2865': attribute type 5 has an invalid length. [ 792.207236][T13913] netlink: 'syz.5.2867': attribute type 10 has an invalid length. [ 792.235517][T13913] netlink: 65015 bytes leftover after parsing attributes in process `syz.5.2867'. [ 792.543343][T13921] netlink: 'syz.2.2869': attribute type 2 has an invalid length. [ 792.556925][T13921] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2869'. [ 793.108519][T13940] netlink: 'syz.2.2875': attribute type 16 has an invalid length. [ 793.142603][T13940] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2875'. [ 793.277623][T13938] delete_channel: no stack [ 793.486686][T13943] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2877'. [ 793.503441][T13943] : renamed from virt_wifi0 [ 793.687320][T13945] device syzkaller0 entered promiscuous mode [ 793.824573][T13947] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2879'. [ 793.910022][T13954] netlink: 'syz.0.2880': attribute type 10 has an invalid length. [ 794.597186][T13969] netlink: 'syz.5.2885': attribute type 2 has an invalid length. [ 794.606542][T13969] netlink: 10 bytes leftover after parsing attributes in process `syz.5.2885'. [ 796.258470][T13968] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 796.269115][T13968] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 796.281680][T13968] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 796.615828][T13978] netlink: 'syz.3.2889': attribute type 16 has an invalid length. [ 796.624005][T13978] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2889'. [ 796.656578][T13984] netlink: 65055 bytes leftover after parsing attributes in process `syz.5.2888'. [ 796.726791][T13974] delete_channel: no stack [ 798.040267][T14009] netlink: 'syz.3.2898': attribute type 2 has an invalid length. [ 798.065032][T14009] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2898'. [ 798.081754][T14010] device syzkaller0 entered promiscuous mode [ 798.613962][T14022] netlink: 'syz.3.2902': attribute type 10 has an invalid length. [ 798.757966][T14026] netlink: 'syz.5.2903': attribute type 16 has an invalid length. [ 798.805611][T14026] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2903'. [ 798.859368][T14025] delete_channel: no stack [ 799.311241][ T4287] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 799.321708][ T4287] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 799.331454][ T4287] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 799.340381][ T4287] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 799.371525][ T4287] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 799.381309][ T4287] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 801.475962][ T4287] Bluetooth: hci3: command 0x0409 tx timeout [ 801.527978][T14039] netlink: 'syz.5.2906': attribute type 10 has an invalid length. [ 801.538152][T14039] team0: Device hsr_slave_0 failed to register rx_handler [ 801.961739][ T7904] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 802.317294][ T7904] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 802.349959][T14059] netlink: 'syz.0.2911': attribute type 2 has an invalid length. [ 802.394912][T14058] netlink: 'syz.3.2913': attribute type 10 has an invalid length. [ 802.433025][T14059] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2911'. [ 802.529168][ T7904] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 802.731128][ T7904] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 802.874462][T14067] netlink: 'syz.5.2915': attribute type 16 has an invalid length. [ 802.895780][T14067] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2915'. [ 802.927089][T14070] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2916'. [ 802.965452][T14066] delete_channel: no stack [ 803.040706][T14038] chnl_net:caif_netlink_parms(): no params data found [ 803.304257][ T7904] tipc: Left network mode [ 803.555920][ T4287] Bluetooth: hci3: command 0x041b tx timeout [ 803.754953][T14087] netlink: 'syz.1.2919': attribute type 10 has an invalid length. [ 803.959978][T14038] bridge0: port 1(bridge_slave_0) entered blocking state [ 803.975563][T14038] bridge0: port 1(bridge_slave_0) entered disabled state [ 804.004130][T14038] device bridge_slave_0 entered promiscuous mode [ 804.149849][T14038] bridge0: port 2(bridge_slave_1) entered blocking state [ 804.165782][T14038] bridge0: port 2(bridge_slave_1) entered disabled state [ 804.193841][T14038] device bridge_slave_1 entered promiscuous mode [ 804.488504][T14088] device syzkaller0 entered promiscuous mode [ 804.512052][T14038] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 804.548377][T14038] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 804.635024][T14105] netlink: 'syz.0.2923': attribute type 10 has an invalid length. [ 804.955677][T14116] netlink: 'syz.3.2925': attribute type 2 has an invalid length. [ 804.974546][T14116] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2925'. [ 805.052261][T14122] netlink: 'syz.0.2926': attribute type 16 has an invalid length. [ 805.073944][T14122] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2926'. [ 805.126087][T14120] delete_channel: no stack [ 805.635795][ T4287] Bluetooth: hci3: command 0x040f tx timeout [ 807.609249][T14038] team0: Port device team_slave_0 added [ 807.635594][T14136] netlink: 'syz.0.2930': attribute type 10 has an invalid length. [ 807.665598][T14136] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.2930'. [ 807.715468][ T4287] Bluetooth: hci3: command 0x0419 tx timeout [ 807.739087][T14038] team0: Port device team_slave_1 added [ 807.908150][T14038] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 807.915199][T14038] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 808.054087][T14038] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 808.270300][T14150] netlink: 'syz.3.2931': attribute type 10 has an invalid length. [ 808.300936][T14038] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 808.345385][T14038] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 808.479653][T14038] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 808.532003][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.538526][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.631046][T14157] netlink: 'syz.1.2936': attribute type 29 has an invalid length. [ 808.673987][T14157] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2936'. [ 808.986354][T14155] netlink: 'syz.5.2935': attribute type 10 has an invalid length. [ 809.006866][T14155] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 809.064109][T14169] FAULT_INJECTION: forcing a failure. [ 809.064109][T14169] name failslab, interval 1, probability 0, space 0, times 0 [ 809.102748][T14038] device hsr_slave_0 entered promiscuous mode [ 809.115737][T14169] CPU: 1 PID: 14169 Comm: syz.3.2938 Not tainted syzkaller #0 [ 809.123275][T14169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 809.133376][T14169] Call Trace: [ 809.136733][T14169] [ 809.139707][T14169] dump_stack_lvl+0x188/0x24e [ 809.144446][T14169] ? show_regs_print_info+0x12/0x12 [ 809.149697][T14169] ? load_image+0x410/0x410 [ 809.154362][T14169] ? __might_sleep+0xd0/0xd0 [ 809.159015][T14169] ? __lock_acquire+0x7c40/0x7c40 [ 809.164093][T14169] should_fail_ex+0x390/0x4c0 [ 809.168833][T14169] should_failslab+0x5/0x20 [ 809.173744][T14169] slab_pre_alloc_hook+0x59/0x300 [ 809.178858][T14169] kmem_cache_alloc+0x56/0x2f0 [ 809.183651][T14169] ? __pmd_alloc+0x116/0x760 [ 809.188271][T14169] __pmd_alloc+0x116/0x760 [ 809.192713][T14169] ? __lock_acquire+0x7c40/0x7c40 [ 809.197776][T14169] ? do_raw_spin_lock+0x128/0x2f0 [ 809.202828][T14169] ? __pud_alloc+0x150/0x150 [ 809.207455][T14169] ? __rwlock_init+0x140/0x140 [ 809.212249][T14169] ? do_raw_spin_unlock+0x11d/0x230 [ 809.217474][T14169] ? _raw_spin_unlock+0x24/0x40 [ 809.222382][T14169] ? __pud_alloc+0x12b/0x150 [ 809.227004][T14169] copy_page_range+0x35a6/0x3a60 [ 809.231977][T14169] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 809.238114][T14169] ? mas_store+0x566/0x680 [ 809.242602][T14169] ? pfn_valid+0x450/0x450 [ 809.247064][T14169] ? anon_vma_fork+0x4bc/0x520 [ 809.251876][T14169] copy_mm+0xeb0/0x1680 [ 809.256077][T14169] ? copy_signal+0x640/0x640 [ 809.260694][T14169] ? lockdep_init_map_type+0x98/0x8d0 [ 809.266137][T14169] ? __init_rwsem+0x11e/0x160 [ 809.270848][T14169] ? copy_signal+0x51f/0x640 [ 809.275473][T14169] copy_process+0x1952/0x4070 [ 809.280207][T14169] ? copy_process+0x974/0x4070 [ 809.285005][T14169] ? idle_dummy+0x10/0x10 [ 809.289446][T14169] kernel_clone+0x24b/0x900 [ 809.294105][T14169] ? create_io_thread+0x170/0x170 [ 809.299193][T14169] __x64_sys_clone+0x1a7/0x220 [ 809.303994][T14169] ? __ia32_sys_vfork+0x140/0x140 [ 809.309062][T14169] ? lock_chain_count+0x20/0x20 [ 809.313954][T14169] ? lockdep_hardirqs_on+0x94/0x140 [ 809.319218][T14169] do_syscall_64+0x4c/0xa0 [ 809.323669][T14169] ? clear_bhb_loop+0x60/0xb0 [ 809.328378][T14169] ? clear_bhb_loop+0x60/0xb0 [ 809.333093][T14169] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 809.339024][T14169] RIP: 0033:0x7f72a9f9e159 [ 809.343470][T14169] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 809.363100][T14169] RSP: 002b:00007f72aaecffd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 809.371543][T14169] RAX: ffffffffffffffda RBX: 00007f72aa225fa0 RCX: 00007f72a9f9e159 [ 809.379538][T14169] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000002000 [ 809.387534][T14169] RBP: 00007f72aaed0090 R08: 0000000000000000 R09: 0000000000000000 [ 809.395540][T14169] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 809.403539][T14169] R13: 00007f72aa226038 R14: 00007f72aa225fa0 R15: 00007ffdc3dd0e58 [ 809.411584][T14169] [ 809.415624][T14038] device hsr_slave_1 entered promiscuous mode [ 809.422537][T14038] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 809.465702][T14038] Cannot create hsr debugfs directory [ 809.471491][T14157] netlink: 'syz.1.2936': attribute type 29 has an invalid length. [ 809.491631][T14157] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2936'. [ 809.516693][T14165] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2936'. [ 810.211851][T14189] netlink: 'syz.1.2940': attribute type 2 has an invalid length. [ 810.256339][T14189] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2940'. [ 811.261920][T14188] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 811.275496][T14188] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 811.285139][T14188] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 811.424299][T14195] device syzkaller0 entered promiscuous mode [ 811.441976][T14207] netlink: 'syz.5.2943': attribute type 10 has an invalid length. [ 811.455705][T14207] netlink: 65015 bytes leftover after parsing attributes in process `syz.5.2943'. [ 811.993106][T14226] netlink: 'syz.1.2947': attribute type 10 has an invalid length. [ 815.067581][T14224] netlink: 'syz.5.2948': attribute type 10 has an invalid length. [ 815.086161][T14224] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 815.125830][T14231] netlink: 'syz.3.2949': attribute type 10 has an invalid length. [ 816.167475][T14265] netlink: 'syz.0.2950': attribute type 1 has an invalid length. [ 816.267349][T14265] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.2950'. [ 817.223120][T14038] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 817.250924][T14274] netlink: 'syz.1.2954': attribute type 2 has an invalid length. [ 817.337206][T14274] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2954'. [ 817.371458][T14282] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2955'. [ 817.436888][T14038] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 817.464178][T14038] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 817.513311][T14038] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 817.700814][T14289] device syzkaller0 entered promiscuous mode [ 817.739957][T14295] netlink: 'syz.3.2961': attribute type 10 has an invalid length. [ 817.775972][T14292] netlink: 'syz.0.2960': attribute type 10 has an invalid length. [ 818.097253][T14312] netlink: 212940 bytes leftover after parsing attributes in process `syz.0.2963'. [ 818.648776][T14038] 8021q: adding VLAN 0 to HW filter on device bond0 [ 818.677512][ T9353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 818.698396][ T9353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 818.728104][T14038] 8021q: adding VLAN 0 to HW filter on device team0 [ 818.768856][ T7904] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 818.790705][ T7904] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 818.819948][ T7904] bridge0: port 1(bridge_slave_0) entered blocking state [ 818.827190][ T7904] bridge0: port 1(bridge_slave_0) entered forwarding state [ 818.865793][ T7904] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 818.890165][ T7888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 818.926018][ T7888] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 818.945049][ T7888] bridge0: port 2(bridge_slave_1) entered blocking state [ 818.952389][ T7888] bridge0: port 2(bridge_slave_1) entered forwarding state [ 819.031321][ T7889] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 819.099640][ T7889] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 819.120665][ T7889] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 819.151403][ T7889] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 819.166857][ T7889] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 819.189180][ T7904] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 819.218749][ T7904] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 819.344037][ T7904] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 819.364622][ T7904] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 820.538256][T14355] netlink: 'syz.0.2971': attribute type 2 has an invalid length. [ 820.613570][T14355] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2971'. [ 822.020773][T14038] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 822.034196][T14038] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 822.044571][ T7889] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 822.053457][ T7889] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 822.069338][T14347] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 822.080050][T14347] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 822.082268][T14354] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2970'. [ 822.092088][T14347] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 822.130689][T14353] netlink: 'syz.1.2972': attribute type 10 has an invalid length. [ 822.610543][T14367] netlink: 'syz.0.2974': attribute type 10 has an invalid length. [ 822.639133][T14366] netlink: 212940 bytes leftover after parsing attributes in process `syz.3.2975'. [ 823.656392][ T7904] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 823.663978][ T7904] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 823.736556][T14038] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 823.820869][T12702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 823.844511][T12702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 823.965560][ T7904] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 824.026745][ T7904] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 824.075131][T14038] device veth0_vlan entered promiscuous mode [ 824.095530][ T7904] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 824.157951][ T7904] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 824.202814][T14038] device veth1_vlan entered promiscuous mode [ 824.356487][T12702] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 824.366576][T12702] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 824.406222][T12702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 824.439538][T12702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 824.472340][T14038] device veth0_macvtap entered promiscuous mode [ 824.535010][T14038] device veth1_macvtap entered promiscuous mode [ 824.815674][T14407] netlink: 'syz.5.2984': attribute type 2 has an invalid length. [ 824.823519][T14407] netlink: 10 bytes leftover after parsing attributes in process `syz.5.2984'. [ 824.839596][T12702] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 824.873316][T12702] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 824.941464][T14413] netlink: 'syz.3.2985': attribute type 10 has an invalid length. [ 825.110995][T14038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 825.185355][T14038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 825.221699][T14038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 825.262604][T14038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 825.338836][T14038] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 825.411806][ T7889] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 825.468683][ T7889] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 825.513681][T14038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 825.559839][T14038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 825.602645][T14038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 825.649368][T14038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 825.682049][T14038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 825.717124][T14038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 825.755122][T14038] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 826.884043][T14421] netlink: 'syz.5.2986': attribute type 10 has an invalid length. [ 826.896514][T14421] team0: Device hsr_slave_0 failed to register rx_handler [ 827.107349][T14408] device syzkaller0 entered promiscuous mode [ 831.754402][ T7889] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 831.776879][ T7889] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 831.804950][T14038] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 831.833254][T14038] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 831.855611][T14038] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 831.864419][T14038] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 832.045853][ T7889] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 832.053755][ T7889] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 832.281872][ T7889] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 832.982364][T14453] netlink: 'syz.3.2997': attribute type 10 has an invalid length. [ 833.012623][ T9353] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 833.029812][ T9353] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 833.112320][T12702] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 833.456198][T14463] ¥: port 1(bond0) entered blocking state [ 833.465690][T14463] ¥: port 1(bond0) entered disabled state [ 833.481644][T14463] device bond0 entered promiscuous mode [ 833.495885][T14463] device bond_slave_0 entered promiscuous mode [ 833.502389][T14463] device bond_slave_1 entered promiscuous mode [ 834.726355][ T4283] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 834.745606][ T4283] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 834.754384][ T4283] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 834.769223][ T4283] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 834.777164][ T4283] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 834.784532][ T4283] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 835.756711][T14482] netlink: 'syz.2.2996': attribute type 10 has an invalid length. [ 835.796092][T14482] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 836.069970][ T7888] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.340450][T14494] device syzkaller0 entered promiscuous mode [ 836.380443][T14506] netlink: 'syz.2.3000': attribute type 2 has an invalid length. [ 836.412243][T14506] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3000'. [ 836.460881][ T7888] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.642473][ T7888] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.798491][ T7888] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.835446][ T4287] Bluetooth: hci2: command 0x0409 tx timeout [ 837.306876][T14537] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.3008'. [ 838.925425][ T4287] Bluetooth: hci2: command 0x041b tx timeout [ 839.448973][T14534] netlink: 'syz.0.3009': attribute type 10 has an invalid length. [ 839.460807][T14546] netlink: 'syz.5.3011': attribute type 13 has an invalid length. [ 839.515978][T14537] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 839.771968][T14483] chnl_net:caif_netlink_parms(): no params data found [ 839.982853][T14555] netlink: 'syz.0.3021': attribute type 10 has an invalid length. [ 840.869908][T14581] netlink: 'syz.1.3018': attribute type 2 has an invalid length. [ 840.995675][ T4287] Bluetooth: hci2: command 0x040f tx timeout [ 841.005702][T14581] netlink: 10 bytes leftover after parsing attributes in process `syz.1.3018'. [ 841.099934][T14483] bridge0: port 1(bridge_slave_0) entered blocking state [ 841.120426][T14483] bridge0: port 1(bridge_slave_0) entered disabled state [ 841.217166][T14483] device bridge_slave_0 entered promiscuous mode [ 841.466788][T14483] bridge0: port 2(bridge_slave_1) entered blocking state [ 841.473974][T14483] bridge0: port 2(bridge_slave_1) entered disabled state [ 841.586043][T14483] device bridge_slave_1 entered promiscuous mode [ 841.848365][T14483] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 841.874007][T14483] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 842.163845][T14606] netlink: 'syz.1.3023': attribute type 2 has an invalid length. [ 842.298814][T14483] team0: Port device team_slave_0 added [ 842.315478][T14606] netlink: 10 bytes leftover after parsing attributes in process `syz.1.3023'. [ 842.390502][T14483] team0: Port device team_slave_1 added [ 842.616747][T14596] device syzkaller0 entered promiscuous mode [ 842.703368][T14483] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 842.716495][T14483] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 842.744462][T14483] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 842.922891][T14613] netlink: 'syz.2.3026': attribute type 10 has an invalid length. [ 842.956843][T14621] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.3025'. [ 842.969993][T14613] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 842.987619][T14483] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 842.994669][T14483] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 843.023426][T14483] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 843.075439][ T4287] Bluetooth: hci2: command 0x0419 tx timeout [ 844.991567][T14621] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 845.005200][T14621] CPU: 1 PID: 14621 Comm: syz.1.3025 Not tainted syzkaller #0 [ 845.012701][T14621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 845.022881][T14621] Call Trace: [ 845.026204][T14621] [ 845.029175][T14621] dump_stack_lvl+0x188/0x24e [ 845.033895][T14621] ? show_regs_print_info+0x12/0x12 [ 845.039125][T14621] ? load_image+0x410/0x410 [ 845.043727][T14621] sysfs_warn_dup+0x8a/0xa0 [ 845.048336][T14621] sysfs_do_create_link_sd+0xc0/0x110 [ 845.053766][T14621] device_add+0x83b/0x1050 [ 845.058244][T14621] wiphy_register+0x1d8b/0x2aa0 [ 845.063175][T14621] ? cfg80211_event_work+0x40/0x40 [ 845.068334][T14621] ? minstrel_ht_alloc+0x894/0xa20 [ 845.073509][T14621] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 845.079666][T14621] ieee80211_register_hw+0x2d48/0x39f0 [ 845.085209][T14621] ? ieee80211_register_hw+0xf41/0x39f0 [ 845.090784][T14621] ? ieee80211_register_hw+0xf41/0x39f0 [ 845.096398][T14621] ? ieee80211_tasklet_handler+0x20/0x20 [ 845.102092][T14621] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 845.108046][T14621] ? __debug_object_init+0xed/0x440 [ 845.113303][T14621] ? memset+0x1e/0x40 [ 845.117376][T14621] ? __hrtimer_init+0x189/0x270 [ 845.122284][T14621] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 845.128069][T14621] ? memcpy+0x3c/0x60 [ 845.132109][T14621] hwsim_new_radio_nl+0xab7/0xc90 [ 845.137215][T14621] genl_family_rcv_msg_doit+0x22f/0x350 [ 845.142826][T14621] ? end_current_label_crit_section+0x170/0x170 [ 845.149129][T14621] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 845.155095][T14621] ? bpf_lsm_capable+0x5/0x10 [ 845.159825][T14621] ? security_capable+0x85/0xb0 [ 845.164725][T14621] genl_rcv_msg+0x601/0x790 [ 845.169272][T14621] ? genl_bind+0x360/0x360 [ 845.173744][T14621] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 845.180168][T14621] netlink_rcv_skb+0x1ef/0x440 [ 845.184986][T14621] ? genl_bind+0x360/0x360 [ 845.189459][T14621] ? netlink_ack+0x1160/0x1160 [ 845.194302][T14621] ? down_read+0x1a8/0x2d0 [ 845.198762][T14621] genl_rcv+0x24/0x40 [ 845.202779][T14621] netlink_unicast+0x7ad/0x920 [ 845.207633][T14621] netlink_sendmsg+0x8ad/0xbd0 [ 845.212466][T14621] ? netlink_getsockopt+0x550/0x550 [ 845.217722][T14621] ? apparmor_socket_sendmsg+0x8a/0x330 [ 845.223315][T14621] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 845.228630][T14621] ? security_socket_sendmsg+0x7c/0xa0 [ 845.234139][T14621] ? netlink_getsockopt+0x550/0x550 [ 845.239394][T14621] ____sys_sendmsg+0x5ed/0x9a0 [ 845.244206][T14621] ? __sys_sendmsg_sock+0x30/0x30 [ 845.249261][T14621] ? __import_iovec+0x306/0x510 [ 845.254188][T14621] ? import_iovec+0x6f/0xa0 [ 845.258779][T14621] ___sys_sendmsg+0x2a2/0x360 [ 845.263499][T14621] ? __sys_sendmsg+0x2a0/0x2a0 [ 845.268345][T14621] __se_sys_sendmsg+0x1c3/0x2b0 [ 845.273249][T14621] ? __x64_sys_sendmsg+0x80/0x80 [ 845.278256][T14621] ? syscall_enter_from_user_mode+0x2a/0x80 [ 845.284216][T14621] do_syscall_64+0x4c/0xa0 [ 845.288688][T14621] ? clear_bhb_loop+0x60/0xb0 [ 845.293419][T14621] ? clear_bhb_loop+0x60/0xb0 [ 845.298140][T14621] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 845.304105][T14621] RIP: 0033:0x7f027039e159 [ 845.308549][T14621] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 845.328215][T14621] RSP: 002b:00007f026e5b4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 845.336688][T14621] RAX: ffffffffffffffda RBX: 00007f0270626180 RCX: 00007f027039e159 [ 845.344693][T14621] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 845.352693][T14621] RBP: 00007f027043506b R08: 0000000000000000 R09: 0000000000000000 [ 845.360714][T14621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 845.368739][T14621] R13: 00007f0270626218 R14: 00007f0270626180 R15: 00007fff3fc04688 [ 845.376782][T14621] [ 845.461647][T14483] device hsr_slave_0 entered promiscuous mode [ 845.483653][T14483] device hsr_slave_1 entered promiscuous mode [ 845.526134][T14483] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 845.533775][T14483] Cannot create hsr debugfs directory [ 846.220160][ T7888] device team0 left promiscuous mode [ 846.247940][ T7888] device team_slave_0 left promiscuous mode [ 846.254047][ T7888] device team_slave_1 left promiscuous mode [ 846.321402][ T7888] device hsr_slave_0 left promiscuous mode [ 846.346098][ T7888] ¥: port 1(team0) entered disabled state [ 846.393301][ T7888] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 846.433754][ T7888] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 846.479588][ T7888] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 846.539281][ T7888] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 846.585856][ T7888] device bridge_slave_1 left promiscuous mode [ 846.617666][ T7888] bridge0: port 2(bridge_slave_1) entered disabled state [ 846.695431][ T7888] device bridge_slave_0 left promiscuous mode [ 846.705712][ T7888] bridge0: port 1(bridge_slave_0) entered disabled state [ 847.425026][ T7888] team0 (unregistering): Port device hsr_slave_0 removed [ 847.600409][ T7888] team0 (unregistering): Port device team_slave_1 removed [ 847.677819][ T7888] team0 (unregistering): Port device team_slave_0 removed [ 848.092886][T14643] netlink: 'syz.1.3034': attribute type 39 has an invalid length. [ 848.166994][T14659] netlink: 'syz.5.3036': attribute type 10 has an invalid length. [ 848.175001][T14659] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 848.233945][T14648] device syzkaller0 entered promiscuous mode [ 850.361442][T14679] device syzkaller0 entered promiscuous mode [ 850.646340][T14698] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.3042'. [ 850.925031][T14701] netlink: 'syz.2.3045': attribute type 5 has an invalid length. [ 853.552215][T14698] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 853.643703][T14718] netlink: 'syz.2.3048': attribute type 10 has an invalid length. [ 853.655736][T14718] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 854.000662][T14483] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 854.071935][T14483] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 854.112196][T14483] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 854.190729][T14483] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 854.340854][T14738] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3053'. [ 854.483655][T14483] 8021q: adding VLAN 0 to HW filter on device bond0 [ 854.501448][T14744] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3056'. [ 854.585802][T12703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 854.603848][T12703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 854.669591][T14483] 8021q: adding VLAN 0 to HW filter on device team0 [ 854.706388][T12703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 854.726962][T12703] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 854.737544][T12703] bridge0: port 1(bridge_slave_0) entered blocking state [ 854.745860][T12703] bridge0: port 1(bridge_slave_0) entered forwarding state [ 854.809859][T12703] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 854.836564][T12703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 854.854355][T12703] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 854.888720][T12703] bridge0: port 2(bridge_slave_1) entered blocking state [ 854.895952][T12703] bridge0: port 2(bridge_slave_1) entered forwarding state [ 854.911138][T12703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 855.173403][T14750] device syzkaller0 entered promiscuous mode [ 855.291264][ T7902] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 855.342801][ T7902] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 855.389292][ T7902] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 855.437340][ T7902] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 855.514284][ T7902] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 855.564599][T14483] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 855.595552][T14483] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 855.651890][ T7902] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 855.668605][ T7902] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 855.715819][ T7902] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 855.767197][ T7902] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 855.794106][ T7902] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 856.199037][ T7902] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 856.229776][T14777] netlink: 'syz.5.3064': attribute type 10 has an invalid length. [ 856.326674][T14777] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 861.336616][T14805] netlink: 'syz.1.3071': attribute type 10 has an invalid length. [ 861.763571][T14825] netlink: 'syz.5.3076': attribute type 10 has an invalid length. [ 861.793955][T14825] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 861.836992][T14835] FAULT_INJECTION: forcing a failure. [ 861.836992][T14835] name failslab, interval 1, probability 0, space 0, times 0 [ 861.891339][T14835] CPU: 0 PID: 14835 Comm: syz.0.3078 Not tainted syzkaller #0 [ 861.899526][T14835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 861.909657][T14835] Call Trace: [ 861.912999][T14835] [ 861.916008][T14835] dump_stack_lvl+0x188/0x24e [ 861.920789][T14835] ? show_regs_print_info+0x12/0x12 [ 861.926077][T14835] ? load_image+0x410/0x410 [ 861.930678][T14835] ? __might_sleep+0xd0/0xd0 [ 861.935347][T14835] ? __lock_acquire+0x7c40/0x7c40 [ 861.940482][T14835] should_fail_ex+0x390/0x4c0 [ 861.945274][T14835] should_failslab+0x5/0x20 [ 861.949852][T14835] slab_pre_alloc_hook+0x59/0x300 [ 861.954982][T14835] ? tomoyo_encode+0x28a/0x550 [ 861.959833][T14835] __kmem_cache_alloc_node+0x4f/0x270 [ 861.965302][T14835] ? tomoyo_encode+0x28a/0x550 [ 861.970149][T14835] __kmalloc+0xa3/0x240 [ 861.974404][T14835] tomoyo_encode+0x28a/0x550 [ 861.979100][T14835] tomoyo_realpath_from_path+0x578/0x5c0 [ 861.984829][T14835] ? tomoyo_domain+0xd2/0x120 [ 861.989712][T14835] ? tomoyo_path_number_perm+0x205/0x650 [ 861.995425][T14835] tomoyo_path_number_perm+0x22f/0x650 [ 862.000991][T14835] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 862.006532][T14835] ? ksys_write+0x1ce/0x260 [ 862.011115][T14835] ? common_file_perm+0x171/0x1c0 [ 862.016338][T14835] ? __fget_files+0x28/0x460 [ 862.021056][T14835] security_file_ioctl+0x6c/0xa0 [ 862.026166][T14835] __se_sys_ioctl+0x48/0x170 [ 862.030852][T14835] do_syscall_64+0x4c/0xa0 [ 862.035345][T14835] ? clear_bhb_loop+0x60/0xb0 [ 862.040091][T14835] ? clear_bhb_loop+0x60/0xb0 [ 862.044854][T14835] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 862.050843][T14835] RIP: 0033:0x7fed4759e159 [ 862.055331][T14835] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 862.075152][T14835] RSP: 002b:00007fed483ad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 862.083661][T14835] RAX: ffffffffffffffda RBX: 00007fed47826090 RCX: 00007fed4759e159 [ 862.091713][T14835] RDX: 0000200000000080 RSI: 00000000000089a2 RDI: 0000000000000008 [ 862.099762][T14835] RBP: 00007fed483ad090 R08: 0000000000000000 R09: 0000000000000000 [ 862.107814][T14835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 862.115853][T14835] R13: 00007fed47826128 R14: 00007fed47826090 R15: 00007ffe4eeb5658 [ 862.123952][T14835] [ 862.309892][ T7889] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 862.348588][ T7889] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 862.498028][T14483] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 862.522318][T14835] ERROR: Out of memory at tomoyo_realpath_from_path. [ 862.646512][ T7889] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 862.682528][ T7889] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 862.766350][ T7889] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 862.795093][ T7889] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 862.823897][ T7889] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 862.844272][ T7889] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 862.867089][T14483] device veth0_vlan entered promiscuous mode [ 862.923933][T14483] device veth1_vlan entered promiscuous mode [ 863.032941][ T7904] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 863.064703][ T7904] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 863.107540][ T7904] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 863.163501][ T7904] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 863.247675][T14483] device veth0_macvtap entered promiscuous mode [ 863.292843][T14483] device veth1_macvtap entered promiscuous mode [ 863.406850][T14483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 863.482598][T14483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 863.515350][T14483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 863.589789][T14483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 863.663288][T14483] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 863.705040][ T7902] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 863.748591][ T7902] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 863.799556][ T7902] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 863.856500][ T7902] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 863.897161][T14483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 863.916236][T14483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 863.939928][T14483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 863.975758][T14483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 864.022213][T14483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 864.057490][T14483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 864.113388][T14483] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 864.171091][T14483] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 864.255666][T14483] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 864.264493][T14483] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 864.302870][T14483] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 864.354220][T14866] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3084'. [ 864.372661][ T7902] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 864.393395][ T7902] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 864.438054][T14873] netlink: 'syz.0.3086': attribute type 10 has an invalid length. [ 864.648458][T12703] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 864.705470][T12703] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 864.753929][ T7902] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 864.791455][ T7902] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 864.801931][ T7902] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 864.939019][T14878] device syzkaller0 entered promiscuous mode [ 864.957153][ T9353] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 864.972243][T14883] netlink: 'syz.0.3090': attribute type 10 has an invalid length. [ 865.591589][T14898] netlink: 'syz.3.2991': attribute type 2 has an invalid length. [ 865.667225][T14898] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2991'. [ 866.299158][T14040] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 866.313133][T14040] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 866.332013][T14040] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 866.342117][ T4283] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 866.350000][T14040] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 866.358547][T14040] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 868.346477][T14907] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3096'. [ 868.435569][T14040] Bluetooth: hci1: command 0x0409 tx timeout [ 868.555213][T14919] netlink: 'syz.1.3097': attribute type 10 has an invalid length. [ 868.585828][T14919] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.3097'. [ 868.922595][ T7889] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 869.261596][T14929] netlink: 'syz.2.3100': attribute type 10 has an invalid length. [ 869.347918][T14929] team0: Device hsr_slave_0 failed to register rx_handler [ 869.687428][ T7889] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 869.721205][T14936] raw_sendmsg: syz.3.3101 forgot to set AF_INET. Fix it! [ 869.839646][ T7889] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 869.960083][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.966552][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.050453][ T7889] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 870.171529][T14951] netlink: 'syz.2.3104': attribute type 16 has an invalid length. [ 870.192183][T14947] netlink: 152 bytes leftover after parsing attributes in process `syz.5.3103'. [ 870.225584][T14951] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3104'. [ 870.253413][T14952] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 870.333357][T14944] netlink: 'syz.2.3104': attribute type 10 has an invalid length. [ 870.516983][T14040] Bluetooth: hci1: command 0x041b tx timeout [ 870.527281][T14944] team0: Port device macvlan0 added [ 870.540597][T14943] delete_channel: no stack [ 870.563084][T14913] chnl_net:caif_netlink_parms(): no params data found [ 871.109282][T14974] FAULT_INJECTION: forcing a failure. [ 871.109282][T14974] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 871.125849][T14971] netlink: 'syz.2.3109': attribute type 2 has an invalid length. [ 871.133656][T14971] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3109'. [ 871.175156][T14974] CPU: 1 PID: 14974 Comm: syz.1.3110 Not tainted syzkaller #0 [ 871.182725][T14974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 871.192850][T14974] Call Trace: [ 871.196181][T14974] [ 871.199182][T14974] dump_stack_lvl+0x188/0x24e [ 871.203928][T14974] ? show_regs_print_info+0x12/0x12 [ 871.209183][T14974] ? load_image+0x410/0x410 [ 871.213762][T14974] ? perf_trace_lock+0x301/0x390 [ 871.218770][T14974] ? __lock_acquire+0x7c40/0x7c40 [ 871.223881][T14974] should_fail_ex+0x390/0x4c0 [ 871.228633][T14974] _copy_from_iter+0x1c0/0x1130 [ 871.233548][T14974] ? copyout_mc+0x110/0x110 [ 871.238095][T14974] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 871.244127][T14974] ? __lock_acquire+0x7c40/0x7c40 [ 871.249195][T14974] ? lock_chain_count+0x20/0x20 [ 871.254084][T14974] ? _raw_spin_lock_irq+0xb7/0xf0 [ 871.259187][T14974] ? _raw_spin_lock_irqsave+0x100/0x100 [ 871.264779][T14974] ? page_copy_sane+0x4e/0x390 [ 871.269597][T14974] copy_page_from_iter+0x77/0x100 [ 871.274675][T14974] pipe_write+0x859/0x1ae0 [ 871.279184][T14974] ? pipe_read+0x12d0/0x12d0 [ 871.283823][T14974] ? end_current_label_crit_section+0x14b/0x170 [ 871.290122][T14974] ? common_file_perm+0x171/0x1c0 [ 871.295203][T14974] vfs_write+0x482/0x9a0 [ 871.299512][T14974] ? file_end_write+0x250/0x250 [ 871.304417][T14974] ? __fget_files+0x3fc/0x460 [ 871.309160][T14974] ? __fdget_pos+0x1d4/0x360 [ 871.313793][T14974] ? ksys_write+0x70/0x260 [ 871.318257][T14974] ksys_write+0x14d/0x260 [ 871.322639][T14974] ? __ia32_sys_read+0x80/0x80 [ 871.327456][T14974] ? lockdep_hardirqs_on+0x94/0x140 [ 871.332736][T14974] do_syscall_64+0x4c/0xa0 [ 871.337192][T14974] ? clear_bhb_loop+0x60/0xb0 [ 871.341905][T14974] ? clear_bhb_loop+0x60/0xb0 [ 871.346619][T14974] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 871.352558][T14974] RIP: 0033:0x7f027039e159 [ 871.357018][T14974] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 871.376666][T14974] RSP: 002b:00007f026e5f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 871.385118][T14974] RAX: ffffffffffffffda RBX: 00007f0270625fa0 RCX: 00007f027039e159 [ 871.393143][T14974] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 0000000000000000 [ 871.401236][T14974] RBP: 00007f026e5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 871.409242][T14974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 871.417245][T14974] R13: 00007f0270626038 R14: 00007f0270625fa0 R15: 00007fff3fc04688 [ 871.425284][T14974] [ 871.679354][T14973] netlink: 'syz.5.3111': attribute type 10 has an invalid length. [ 871.695255][T14973] netlink: 65015 bytes leftover after parsing attributes in process `syz.5.3111'. [ 872.268430][T14913] bridge0: port 1(bridge_slave_0) entered blocking state [ 872.283716][T14913] bridge0: port 1(bridge_slave_0) entered disabled state [ 872.326770][T14913] device bridge_slave_0 entered promiscuous mode [ 872.383399][T14994] netlink: 'syz.5.3114': attribute type 10 has an invalid length. [ 872.413335][T14994] team0: Device hsr_slave_0 failed to register rx_handler [ 872.605976][T14040] Bluetooth: hci1: command 0x040f tx timeout [ 872.666557][T14913] bridge0: port 2(bridge_slave_1) entered blocking state [ 872.673824][T14913] bridge0: port 2(bridge_slave_1) entered disabled state [ 872.746346][T14913] device bridge_slave_1 entered promiscuous mode [ 873.022396][T14913] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 873.139083][T14913] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 873.336741][T14913] team0: Port device team_slave_0 added [ 873.378097][T15009] netlink: 'syz.5.3118': attribute type 16 has an invalid length. [ 873.433111][T15009] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3118'. [ 873.475781][T14913] team0: Port device team_slave_1 added [ 873.481835][T15017] netlink: 'syz.5.3118': attribute type 10 has an invalid length. [ 873.533269][T15008] delete_channel: no stack [ 873.688407][T14913] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 873.710530][T14913] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 873.858568][T14913] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 873.922280][T15019] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3119'. [ 874.057742][T15025] netlink: 'syz.1.3123': attribute type 10 has an invalid length. [ 874.099295][T15025] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.3123'. [ 874.142453][T14913] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 874.166803][T14913] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 874.269600][T14913] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 874.467743][T14913] device hsr_slave_0 entered promiscuous mode [ 874.485670][T14913] device hsr_slave_1 entered promiscuous mode [ 874.496594][T14913] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 874.516142][T14913] Cannot create hsr debugfs directory [ 874.604016][T15037] netlink: 'syz.2.3125': attribute type 25 has an invalid length. [ 874.617206][T15037] netlink: 'syz.2.3125': attribute type 29 has an invalid length. [ 874.675430][T14040] Bluetooth: hci1: command 0x0419 tx timeout [ 874.689608][T15040] netlink: 'syz.1.3126': attribute type 10 has an invalid length. [ 875.414876][T15047] netlink: 'syz.3.3127': attribute type 10 has an invalid length. [ 875.713632][T15047] team0: Device hsr_slave_0 failed to register rx_handler [ 875.959985][T15051] netlink: 'syz.2.3129': attribute type 12 has an invalid length. [ 875.995970][T15051] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3129'. [ 876.670488][ T7889] device hsr_slave_0 left promiscuous mode [ 876.691544][ T7889] device hsr_slave_1 left promiscuous mode [ 876.771198][ T7889] bridge0: port 2(bridge_slave_1) entered disabled state [ 876.815218][ T7889] device bridge_slave_0 left promiscuous mode [ 876.831419][ T7889] bridge0: port 1(bridge_slave_0) entered disabled state [ 877.056048][ T7889] device veth0_macvtap left promiscuous mode [ 879.313783][T15076] netlink: 'syz.2.3135': attribute type 10 has an invalid length. [ 879.322128][T15076] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.3135'. [ 879.336108][T15079] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3137'. [ 879.623920][T15100] netlink: 'syz.5.3140': attribute type 10 has an invalid length. [ 879.650695][T15100] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 879.713871][T15102] netlink: 'syz.3.3139': attribute type 25 has an invalid length. [ 879.762239][T15102] netlink: 'syz.3.3139': attribute type 29 has an invalid length. [ 880.751120][T14913] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 880.827344][T14913] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 880.870742][T14913] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 880.924314][T14913] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 880.973645][T15127] netlink: 'syz.2.3145': attribute type 10 has an invalid length. [ 880.988132][T15127] team0: Device hsr_slave_0 failed to register rx_handler [ 881.424687][T14913] 8021q: adding VLAN 0 to HW filter on device bond0 [ 881.610150][T15142] nr0: port 1(hsr0) entered blocking state [ 881.663731][T15142] nr0: port 1(hsr0) entered disabled state [ 881.716974][T15142] device hsr0 entered promiscuous mode [ 881.754204][T15141] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3148'. [ 881.826919][T15134] nr0: port 1(hsr0) entered blocking state [ 881.835091][T15134] nr0: port 1(hsr0) entered forwarding state [ 881.922420][ T7904] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 881.939370][ T7904] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 881.983502][T14913] 8021q: adding VLAN 0 to HW filter on device team0 [ 882.019355][ T7904] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 882.060816][ T7904] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 882.101729][ T7904] bridge0: port 1(bridge_slave_0) entered blocking state [ 882.109024][ T7904] bridge0: port 1(bridge_slave_0) entered forwarding state [ 882.179732][ T7904] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 882.223080][ T7904] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 882.277195][ T7904] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 882.325678][ T7904] bridge0: port 2(bridge_slave_1) entered blocking state [ 882.332897][ T7904] bridge0: port 2(bridge_slave_1) entered forwarding state [ 882.497732][T15151] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3150'. [ 882.621475][ T7904] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 882.763299][ T7904] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 882.799274][ T7904] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 882.822307][ T7904] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 882.877163][T14913] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 882.893551][T14913] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 882.973276][ T7904] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 883.005959][ T7904] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 883.064028][ T7904] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 883.083837][ T7904] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 883.092957][ T7904] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 883.108183][ T7904] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 883.121809][ T7904] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 883.176752][T15158] netlink: 'syz.5.3153': attribute type 25 has an invalid length. [ 883.219951][T15158] netlink: 'syz.5.3153': attribute type 29 has an invalid length. [ 883.262308][ T7904] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 883.283613][T15166] netlink: 'syz.1.3156': attribute type 16 has an invalid length. [ 883.299698][T15167] netlink: 'syz.2.3155': attribute type 41 has an invalid length. [ 883.336536][T15166] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3156'. [ 883.534083][T15169] netlink: 'syz.1.3156': attribute type 10 has an invalid length. [ 883.635218][T15165] delete_channel: no stack [ 883.653157][T15162] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.3154'. [ 883.742914][T15174] team0: Device hsr_slave_0 failed to register rx_handler [ 884.646475][T12706] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 884.727281][T12706] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 884.740293][T14913] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 884.873969][ T7902] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 884.886336][ T7902] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 885.007117][ T7889] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 885.064777][ T7889] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 885.107972][ T7889] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 885.163097][ T7889] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 885.201428][T14913] device veth0_vlan entered promiscuous mode [ 885.247871][T14913] device veth1_vlan entered promiscuous mode [ 885.281067][T12702] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 885.397431][T12702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 885.406972][T12702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 885.456660][T14913] device veth0_macvtap entered promiscuous mode [ 885.517818][T14913] device veth1_macvtap entered promiscuous mode [ 885.756140][T15212] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3166'. [ 885.793434][T14913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 885.833875][T14913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 885.865995][T14913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 885.909750][T14913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 885.959256][T14913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 886.007999][T14913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 886.088667][T14913] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 886.182632][T15221] validate_nla: 1 callbacks suppressed [ 886.182656][T15221] netlink: 'syz.3.3169': attribute type 16 has an invalid length. [ 886.225155][T15221] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3169'. [ 886.821727][T15219] delete_channel: no stack [ 886.870019][ T7889] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 886.887060][ T7889] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 886.906957][ T7889] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 886.948939][ T7889] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 886.987918][T15221] netlink: 'syz.3.3169': attribute type 10 has an invalid length. [ 887.156353][T15221] team0: Port device macvlan0 added [ 887.165160][T14913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 887.197670][T14913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 887.225436][T14913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 887.265400][T14913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 887.296509][T14913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 887.325343][T14913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 887.345367][T14913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 887.445454][T14913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 887.467347][T14913] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 887.512396][T15231] netlink: 'syz.5.3170': attribute type 10 has an invalid length. [ 887.543681][T15231] team0: Device hsr_slave_0 failed to register rx_handler [ 887.630330][T12702] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 887.672754][T12702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 887.767975][T14913] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 887.807324][T14913] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 887.845517][T14913] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 887.854342][T14913] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 887.933734][T15236] FAULT_INJECTION: forcing a failure. [ 887.933734][T15236] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 888.045737][T15236] CPU: 0 PID: 15236 Comm: syz.1.3172 Not tainted syzkaller #0 [ 888.053308][T15236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 888.063432][T15236] Call Trace: [ 888.066767][T15236] [ 888.069758][T15236] dump_stack_lvl+0x188/0x24e [ 888.074527][T15236] ? show_regs_print_info+0x12/0x12 [ 888.079805][T15236] ? load_image+0x410/0x410 [ 888.084405][T15236] ? __lock_acquire+0x7c40/0x7c40 [ 888.089515][T15236] ? snprintf+0xe5/0x140 [ 888.093860][T15236] should_fail_ex+0x390/0x4c0 [ 888.098638][T15236] _copy_to_user+0x2c/0x130 [ 888.103238][T15236] simple_read_from_buffer+0xe3/0x150 [ 888.108708][T15236] proc_fail_nth_read+0x1a6/0x220 [ 888.113851][T15236] ? proc_fault_inject_write+0x310/0x310 [ 888.119669][T15236] ? fsnotify_perm+0x248/0x550 [ 888.124526][T15236] ? proc_fault_inject_write+0x310/0x310 [ 888.130251][T15236] vfs_read+0x2db/0x960 [ 888.134514][T15236] ? kernel_read+0x1e0/0x1e0 [ 888.139204][T15236] ? __fget_files+0x28/0x460 [ 888.143870][T15236] ? __fget_files+0x3fc/0x460 [ 888.148654][T15236] ? __fdget_pos+0x2ae/0x360 [ 888.153339][T15236] ? ksys_read+0x70/0x260 [ 888.157765][T15236] ksys_read+0x14d/0x260 [ 888.162100][T15236] ? vfs_write+0x9a0/0x9a0 [ 888.166627][T15236] ? lockdep_hardirqs_on+0x94/0x140 [ 888.171922][T15236] do_syscall_64+0x4c/0xa0 [ 888.176403][T15236] ? clear_bhb_loop+0x60/0xb0 [ 888.181153][T15236] ? clear_bhb_loop+0x60/0xb0 [ 888.185902][T15236] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 888.191878][T15236] RIP: 0033:0x7f027035e98e [ 888.196359][T15236] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 888.216047][T15236] RSP: 002b:00007f026e5f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 888.224535][T15236] RAX: ffffffffffffffda RBX: 00007f026e5f66c0 RCX: 00007f027035e98e [ 888.232616][T15236] RDX: 000000000000000f RSI: 00007f026e5f60a0 RDI: 0000000000000005 [ 888.240687][T15236] RBP: 00007f026e5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 888.248730][T15236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 888.256767][T15236] R13: 00007f0270626038 R14: 00007f0270625fa0 R15: 00007fff3fc04688 [ 888.264870][T15236] [ 888.409000][T15243] ¥: port 1(bond0) entered blocking state [ 888.446000][T15243] ¥: port 1(bond0) entered disabled state [ 888.469061][T15243] device bond0 entered promiscuous mode [ 888.487025][T15243] device bond_slave_0 entered promiscuous mode [ 888.524820][T15243] device bond_slave_1 entered promiscuous mode [ 888.691902][ T7889] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 888.710510][ T7889] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 888.781322][T12702] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 888.852599][ T7904] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 888.902234][ T7904] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 888.920681][ T7902] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 889.065128][T15262] netlink: 763 bytes leftover after parsing attributes in process `syz.2.3178'. [ 889.744475][T15274] netlink: 'syz.0.3180': attribute type 16 has an invalid length. [ 889.815523][T15274] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3180'. [ 889.839656][T15277] netlink: 'syz.0.3180': attribute type 10 has an invalid length. [ 890.029955][T15277] team0: Port device macvlan0 added [ 890.169156][T15273] delete_channel: no stack [ 890.209867][T15281] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3182'. [ 890.766192][T15290] netlink: 'syz.3.3185': attribute type 10 has an invalid length. [ 890.775191][T15290] team0: Device hsr_slave_0 failed to register rx_handler [ 891.072854][T15293] ¥: port 1(bond0) entered blocking state [ 891.109631][T15293] ¥: port 1(bond0) entered disabled state [ 891.141077][T15297] FAULT_INJECTION: forcing a failure. [ 891.141077][T15297] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 891.143087][T15293] device bond0 entered promiscuous mode [ 891.215669][T15297] CPU: 0 PID: 15297 Comm: syz.2.3187 Not tainted syzkaller #0 [ 891.223211][T15297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 891.233324][T15297] Call Trace: [ 891.236649][T15297] [ 891.239650][T15297] dump_stack_lvl+0x188/0x24e [ 891.244408][T15297] ? show_regs_print_info+0x12/0x12 [ 891.245955][T15293] device bond_slave_0 entered promiscuous mode [ 891.249634][T15297] ? load_image+0x410/0x410 [ 891.249673][T15297] ? __lock_acquire+0x7c40/0x7c40 [ 891.265430][T15297] should_fail_ex+0x390/0x4c0 [ 891.270167][T15297] prepare_alloc_pages+0x1e1/0x5b0 [ 891.275341][T15297] __alloc_pages+0x130/0x4f0 [ 891.279990][T15297] ? kasan_populate_vmalloc_pte+0xa4/0xf0 [ 891.285769][T15297] ? zone_statistics+0x170/0x170 [ 891.290776][T15297] ? __rwlock_init+0x140/0x140 [ 891.295583][T15297] ? do_raw_spin_unlock+0x11d/0x230 [ 891.300832][T15297] __get_free_pages+0x8/0x30 [ 891.305478][T15297] kasan_populate_vmalloc_pte+0x31/0xf0 [ 891.311072][T15297] ? __apply_to_page_range+0x97b/0xd10 [ 891.316587][T15297] __apply_to_page_range+0x98d/0xd10 [ 891.321933][T15297] ? kasan_populate_vmalloc+0x70/0x70 [ 891.326693][T15293] device bond_slave_1 entered promiscuous mode [ 891.327363][T15297] alloc_vmap_area+0x179f/0x18d0 [ 891.338554][T15297] ? vm_map_ram+0xab0/0xab0 [ 891.343205][T15297] ? rcu_is_watching+0x11/0xa0 [ 891.348036][T15297] __get_vm_area_node+0x158/0x330 [ 891.353239][T15297] ? map_create+0x524/0xff0 [ 891.357793][T15297] ? __x64_sys_bpf+0x78/0x90 [ 891.362435][T15297] __vmalloc_node_range+0x357/0x1380 [ 891.367774][T15297] ? array_map_alloc+0x286/0x6f0 [ 891.372785][T15297] ? end_current_label_crit_section+0x170/0x170 [ 891.379095][T15297] ? free_vm_area+0x50/0x50 [ 891.383659][T15297] ? bpf_lsm_capable+0x5/0x10 [ 891.388380][T15297] ? security_capable+0x85/0xb0 [ 891.393278][T15297] bpf_map_area_alloc+0xd4/0xe0 [ 891.398193][T15297] ? array_map_alloc+0x286/0x6f0 [ 891.403236][T15297] array_map_alloc+0x286/0x6f0 [ 891.408151][T15297] array_of_map_alloc+0x51/0xc0 [ 891.413062][T15297] map_create+0x524/0xff0 [ 891.417453][T15297] ? security_bpf+0x7a/0xa0 [ 891.422017][T15297] __sys_bpf+0x38b/0x780 [ 891.426314][T15297] ? bpf_link_show_fdinfo+0x380/0x380 [ 891.431761][T15297] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 891.437979][T15297] __x64_sys_bpf+0x78/0x90 [ 891.442459][T15297] do_syscall_64+0x4c/0xa0 [ 891.446923][T15297] ? clear_bhb_loop+0x60/0xb0 [ 891.451641][T15297] ? clear_bhb_loop+0x60/0xb0 [ 891.456361][T15297] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 891.462315][T15297] RIP: 0033:0x7f51d1d9e159 [ 891.466777][T15297] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 891.486520][T15297] RSP: 002b:00007f51d2c05028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 891.494977][T15297] RAX: ffffffffffffffda RBX: 00007f51d2025fa0 RCX: 00007f51d1d9e159 [ 891.503007][T15297] RDX: 0000000000000048 RSI: 0000200000000040 RDI: 0000000000000000 [ 891.511026][T15297] RBP: 00007f51d2c05090 R08: 0000000000000000 R09: 0000000000000000 [ 891.519048][T15297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 891.527064][T15297] R13: 00007f51d2026038 R14: 00007f51d2025fa0 R15: 00007fff9dd57c08 [ 891.535097][T15297] [ 891.815886][T15307] FAULT_INJECTION: forcing a failure. [ 891.815886][T15307] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 891.849476][T15307] CPU: 1 PID: 15307 Comm: syz.5.3191 Not tainted syzkaller #0 [ 891.857191][T15307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 891.867287][T15307] Call Trace: [ 891.870619][T15307] [ 891.873583][T15307] dump_stack_lvl+0x188/0x24e [ 891.878318][T15307] ? show_regs_print_info+0x12/0x12 [ 891.883583][T15307] ? load_image+0x410/0x410 [ 891.888142][T15307] ? __lock_acquire+0x7c40/0x7c40 [ 891.893253][T15307] should_fail_ex+0x390/0x4c0 [ 891.897999][T15307] _copy_from_user+0x2c/0x170 [ 891.902720][T15307] iovec_from_user+0x143/0x360 [ 891.907528][T15307] __import_iovec+0x6c/0x510 [ 891.912174][T15307] import_iovec+0x6f/0xa0 [ 891.916549][T15307] ___sys_sendmsg+0x252/0x360 [ 891.921262][T15307] ? __sys_sendmsg+0x2a0/0x2a0 [ 891.926067][T15307] ? __lock_acquire+0x7c40/0x7c40 [ 891.931170][T15307] __se_sys_sendmsg+0x1c3/0x2b0 [ 891.936060][T15307] ? ct_nmi_exit+0x145/0x1c0 [ 891.940697][T15307] ? __x64_sys_sendmsg+0x80/0x80 [ 891.945689][T15307] ? lockdep_hardirqs_on+0x94/0x140 [ 891.950928][T15307] do_syscall_64+0x4c/0xa0 [ 891.955389][T15307] ? clear_bhb_loop+0x60/0xb0 [ 891.960110][T15307] ? clear_bhb_loop+0x60/0xb0 [ 891.964834][T15307] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 891.970860][T15307] RIP: 0033:0x7f6b4039e159 [ 891.975309][T15307] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 891.995043][T15307] RSP: 002b:00007f6b4128a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 892.003498][T15307] RAX: ffffffffffffffda RBX: 00007f6b40625fa0 RCX: 00007f6b4039e159 [ 892.011591][T15307] RDX: 0000000000000003 RSI: 0000200000000980 RDI: 0000000000000004 [ 892.019587][T15307] RBP: 00007f6b4128a090 R08: 0000000000000000 R09: 0000000000000000 [ 892.027586][T15307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 892.035585][T15307] R13: 00007f6b40626038 R14: 00007f6b40625fa0 R15: 00007ffeae8f7148 [ 892.043600][T15307] [ 892.082091][ T4287] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 892.095656][ T4287] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 892.103695][ T4287] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 892.112679][ T4287] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 892.125631][ T4287] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 892.133083][ T4287] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 892.351935][T15316] netlink: 'syz.2.3193': attribute type 10 has an invalid length. [ 892.424121][T15316] team0: Device hsr_slave_0 failed to register rx_handler [ 892.717537][T15320] netlink: 'syz.5.3195': attribute type 16 has an invalid length. [ 892.746968][T15320] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3195'. [ 892.873439][T15321] netlink: 'syz.5.3195': attribute type 10 has an invalid length. [ 893.010768][T15319] delete_channel: no stack [ 893.420163][ T7889] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 893.589954][T15329] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3196'. [ 894.191472][ T7889] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 894.207203][ T4287] Bluetooth: hci4: command 0x0409 tx timeout [ 894.302513][T15308] chnl_net:caif_netlink_parms(): no params data found [ 894.544136][ T7889] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 894.651626][T15338] netlink: 'syz.5.3199': attribute type 10 has an invalid length. [ 894.705230][T15338] team0: Device hsr_slave_0 failed to register rx_handler [ 895.072209][ T7889] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 895.331013][T15331] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.3197'. [ 895.535044][T15308] bridge0: port 1(bridge_slave_0) entered blocking state [ 895.602329][T15308] bridge0: port 1(bridge_slave_0) entered disabled state [ 895.627131][T15308] device bridge_slave_0 entered promiscuous mode [ 895.687451][T15308] bridge0: port 2(bridge_slave_1) entered blocking state [ 895.705467][T15308] bridge0: port 2(bridge_slave_1) entered disabled state [ 895.713821][T15308] device bridge_slave_1 entered promiscuous mode [ 895.922119][T15308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 895.966517][T15308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 896.209524][T15308] team0: Port device team_slave_0 added [ 896.287022][ T4287] Bluetooth: hci4: command 0x041b tx timeout [ 896.346032][T15308] team0: Port device team_slave_1 added [ 896.427102][ T7889] tipc: Left network mode [ 896.470999][T15308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 896.480050][T15364] netlink: 'syz.5.3205': attribute type 2 has an invalid length. [ 896.499778][T15364] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.3205'. [ 896.524081][T15308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 896.556916][T15308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 896.762264][T15308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 896.776078][T15308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 896.964412][T15308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 897.280331][T15308] device hsr_slave_0 entered promiscuous mode [ 897.317932][T15308] device hsr_slave_1 entered promiscuous mode [ 897.324841][T15308] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 897.343222][T15308] Cannot create hsr debugfs directory [ 897.522719][T15383] netlink: 'syz.5.3208': attribute type 16 has an invalid length. [ 897.540342][T15383] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3208'. [ 897.604302][T15380] netlink: 'syz.5.3208': attribute type 10 has an invalid length. [ 897.691628][T15379] delete_channel: no stack [ 898.151589][T15388] netlink: 'syz.2.3210': attribute type 10 has an invalid length. [ 898.177527][T15388] team0: Device hsr_slave_0 failed to register rx_handler [ 898.306809][T15395] netlink: 'syz.3.3211': attribute type 10 has an invalid length. [ 898.336556][T15395] team0: Device hsr_slave_0 failed to register rx_handler [ 898.365709][ T4287] Bluetooth: hci4: command 0x040f tx timeout [ 898.423517][T15397] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3209'. [ 899.074253][T15409] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.3216'. [ 899.255085][T15410] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 899.280275][T15410] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 899.336488][T15410] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 899.344204][T15410] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 899.499857][T15403] netlink: 3529 bytes leftover after parsing attributes in process `syz.5.3213'. [ 899.518635][T15403] netlink: 52477 bytes leftover after parsing attributes in process `syz.5.3213'. [ 899.534485][T15403] netlink: 71676 bytes leftover after parsing attributes in process `syz.5.3213'. [ 899.879411][ T7889] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 899.893652][ T7889] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 899.915023][ T7889] bridge0: port 2(bridge_slave_1) entered disabled state [ 899.952883][ T7889] device bridge_slave_0 left promiscuous mode [ 899.962666][ T7889] bridge0: port 1(bridge_slave_0) entered disabled state [ 900.455130][ T4287] Bluetooth: hci4: command 0x0419 tx timeout [ 901.379376][T15427] netlink: 'syz.5.3220': attribute type 21 has an invalid length. [ 901.387538][T15427] netlink: 168 bytes leftover after parsing attributes in process `syz.5.3220'. [ 901.492083][T15308] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 901.545426][T15308] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 901.582803][T15447] netlink: 'syz.5.3221': attribute type 16 has an invalid length. [ 901.593013][T15308] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 901.613689][T15447] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3221'. [ 901.641942][T15447] netlink: 'syz.5.3221': attribute type 10 has an invalid length. [ 901.699468][T15446] delete_channel: no stack [ 901.712891][T15308] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 901.939920][T15451] netlink: 'syz.0.3224': attribute type 10 has an invalid length. [ 902.008937][T15451] team0: Device hsr_slave_0 failed to register rx_handler [ 902.347440][T15308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 902.450048][T12702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 902.476536][T12702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 902.530486][T15457] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3225'. [ 902.575905][T15308] 8021q: adding VLAN 0 to HW filter on device team0 [ 902.671835][T12706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 902.692527][T12706] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 902.726770][T12706] bridge0: port 1(bridge_slave_0) entered blocking state [ 902.734010][T12706] bridge0: port 1(bridge_slave_0) entered forwarding state [ 902.765238][T12706] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 902.784117][T12706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 902.811793][T12706] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 902.831570][T12706] bridge0: port 2(bridge_slave_1) entered blocking state [ 902.838818][T12706] bridge0: port 2(bridge_slave_1) entered forwarding state [ 902.976697][T12706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 903.011439][T12706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 903.042780][T15467] FAULT_INJECTION: forcing a failure. [ 903.042780][T15467] name failslab, interval 1, probability 0, space 0, times 0 [ 903.080397][ T7904] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 903.102058][T15467] CPU: 1 PID: 15467 Comm: syz.3.3228 Not tainted syzkaller #0 [ 903.109606][T15467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 903.119719][T15467] Call Trace: [ 903.123070][T15467] [ 903.125010][ T7904] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 903.126032][T15467] dump_stack_lvl+0x188/0x24e [ 903.126066][T15467] ? show_regs_print_info+0x12/0x12 [ 903.126090][T15467] ? load_image+0x410/0x410 [ 903.148388][T15467] ? __might_sleep+0xd0/0xd0 [ 903.153056][T15467] ? __lock_acquire+0x7c40/0x7c40 [ 903.158164][T15467] should_fail_ex+0x390/0x4c0 [ 903.162908][T15467] should_failslab+0x5/0x20 [ 903.167458][T15467] slab_pre_alloc_hook+0x59/0x300 [ 903.172530][T15467] ? kvmalloc_node+0x6c/0x180 [ 903.177272][T15467] __kmem_cache_alloc_node+0x4f/0x270 [ 903.182707][T15467] ? kvmalloc_node+0x6c/0x180 [ 903.187456][T15467] __kmalloc_node+0xa2/0x240 [ 903.188095][ T7904] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 903.192086][T15467] kvmalloc_node+0x6c/0x180 [ 903.204534][T15467] page_pool_create+0x1e7/0x5c0 [ 903.209433][T15467] bpf_test_run_xdp_live+0x220/0x1a90 [ 903.214865][T15467] ? 0xffffffffa0004440 [ 903.219065][T15467] ? text_poke_copy+0x7b/0x90 [ 903.223802][T15467] ? 0xffffffffa0004440 [ 903.228001][T15467] ? bpf_dispatcher_change_prog+0xc92/0xf10 [ 903.233970][T15467] ? xdp_convert_md_to_buff+0x330/0x330 [ 903.239605][T15467] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 903.245949][T15467] ? bpf_test_init+0x119/0x140 [ 903.250780][T15467] ? xdp_convert_md_to_buff+0x5b/0x330 [ 903.256306][T15467] bpf_prog_test_run_xdp+0x757/0xf80 [ 903.261651][T15467] ? __lock_acquire+0x7c40/0x7c40 [ 903.266775][T15467] ? dev_put+0x80/0x80 [ 903.268126][ T7904] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 903.270918][T15467] ? dev_put+0x80/0x80 [ 903.282860][T15467] bpf_prog_test_run+0x31c/0x390 [ 903.287860][T15467] __sys_bpf+0x62b/0x780 [ 903.292170][T15467] ? bpf_link_show_fdinfo+0x380/0x380 [ 903.297615][T15467] ? lock_chain_count+0x20/0x20 [ 903.302533][T15467] __x64_sys_bpf+0x78/0x90 [ 903.307007][T15467] do_syscall_64+0x4c/0xa0 [ 903.311502][T15467] ? clear_bhb_loop+0x60/0xb0 [ 903.316222][T15467] ? clear_bhb_loop+0x60/0xb0 [ 903.320620][ T7904] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 903.320931][T15467] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 903.334074][T15467] RIP: 0033:0x7f9e72f9e159 [ 903.338531][T15467] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 903.352962][ T7904] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 903.358162][T15467] RSP: 002b:00007f9e711f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 903.358191][T15467] RAX: ffffffffffffffda RBX: 00007f9e73225fa0 RCX: 00007f9e72f9e159 [ 903.358208][T15467] RDX: 0000000000000050 RSI: 0000200000000740 RDI: 000000000000000a [ 903.358222][T15467] RBP: 00007f9e711f6090 R08: 0000000000000000 R09: 0000000000000000 [ 903.358236][T15467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 903.358249][T15467] R13: 00007f9e73226038 R14: 00007f9e73225fa0 R15: 00007ffcadadb238 [ 903.358313][T15467] [ 903.417753][ T7904] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 903.429453][T15470] netlink: 'syz.5.3229': attribute type 3 has an invalid length. [ 903.443989][T15467] page_pool_create() gave up with errno -12 [ 903.483443][T15470] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.3229'. [ 903.531374][ T7904] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 903.632794][ T7904] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 903.705207][T15308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 903.910892][T15485] netlink: 'syz.3.3231': attribute type 21 has an invalid length. [ 903.934435][T15489] ip6tnl0: mtu greater than device maximum [ 904.704202][T15491] device syzkaller0 entered promiscuous mode [ 904.773895][T15497] netlink: 'syz.5.3234': attribute type 16 has an invalid length. [ 904.821534][T15497] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3234'. [ 905.484047][T15496] delete_channel: no stack [ 907.354721][T15502] netlink: 'syz.5.3234': attribute type 10 has an invalid length. [ 907.375690][T15308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 907.386222][T15509] netlink: 'syz.3.3236': attribute type 10 has an invalid length. [ 907.394099][T15509] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.3236'. [ 907.440890][T15511] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3235'. [ 907.460019][ T7889] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 907.478863][ T7889] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 907.530654][T15519] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3237'. [ 907.557940][ T7889] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 907.596838][ T7889] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 907.811397][T15526] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3238'. [ 907.897773][ T7889] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 907.957926][ T7889] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 908.274894][ T7889] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 908.317852][ T7889] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 908.366291][T15308] device veth0_vlan entered promiscuous mode [ 908.399258][T15308] device veth1_vlan entered promiscuous mode [ 908.467344][ T7889] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 908.493796][ T7889] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 908.529448][ T7903] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 908.552421][ T7903] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 908.595024][T15308] device veth0_macvtap entered promiscuous mode [ 908.614001][T15308] device veth1_macvtap entered promiscuous mode [ 908.671672][T15308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 908.717690][T15308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 908.785097][T15308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 908.838859][T15308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 908.872532][T15308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 908.926490][T15308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 908.965901][T15308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 908.990297][ T7903] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 909.040734][ T7903] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 909.086864][ T7903] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 909.126587][ T7903] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 909.218716][T15308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 909.255377][T15308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 909.300986][T15308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 909.352977][T15308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 909.406090][T15308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 909.466527][T15308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 909.535043][T15308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 909.565948][ T7902] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 909.584653][ T7902] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 909.620641][T15308] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 909.643620][T15308] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 909.672183][T15308] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 909.701747][T15308] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 909.773008][T15552] netlink: 'syz.0.3244': attribute type 49 has an invalid length. [ 909.993908][ T7889] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 910.022191][ T7889] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 910.042898][T15556] netlink: 'syz.3.3247': attribute type 16 has an invalid length. [ 910.064070][T15556] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3247'. [ 910.128242][ T7902] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 910.140974][T15556] netlink: 'syz.3.3247': attribute type 10 has an invalid length. [ 910.201674][T15562] netlink: 'syz.5.3249': attribute type 10 has an invalid length. [ 910.212730][ T7902] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 910.222453][ T7902] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 910.232606][T15555] delete_channel: no stack [ 910.238075][T15562] netlink: 65015 bytes leftover after parsing attributes in process `syz.5.3249'. [ 910.268458][ T7889] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 910.501676][T15566] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3250'. [ 910.774953][T15569] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3251'. [ 910.906109][T15573] netlink: 184 bytes leftover after parsing attributes in process `syz.5.3252'. [ 911.560508][T15596] netlink: 'syz.2.3260': attribute type 29 has an invalid length. [ 911.617383][T15596] netlink: 'syz.2.3260': attribute type 29 has an invalid length. [ 911.697623][T15599] netlink: 'syz.0.3261': attribute type 16 has an invalid length. [ 911.730446][T15601] netlink: 'syz.2.3260': attribute type 29 has an invalid length. [ 911.745557][T15599] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3261'. [ 911.777553][T15602] netlink: 'syz.0.3261': attribute type 10 has an invalid length. [ 912.046723][T15598] delete_channel: no stack [ 912.073610][T15604] netlink: 'syz.1.3262': attribute type 10 has an invalid length. [ 912.237343][T15605] device aaaaaaaaaaaaaaa entered promiscuous mode [ 912.624040][T15609] __nla_validate_parse: 1 callbacks suppressed [ 912.624322][T15609] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3265'. [ 912.779159][T15614] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3266'. [ 913.444968][T15628] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3268'. [ 914.007228][T15637] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3272'. [ 914.064809][T15640] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3274'. [ 914.349567][T15640] team0: Port device macvlan0 added [ 914.381517][T15646] netlink: 65015 bytes leftover after parsing attributes in process `syz.5.3276'. [ 914.423563][T15638] delete_channel: no stack [ 914.777470][T15659] validate_nla: 5 callbacks suppressed [ 914.777489][T15659] netlink: 'syz.0.3279': attribute type 7 has an invalid length. [ 914.814600][T15659] netlink: 'syz.0.3279': attribute type 6 has an invalid length. [ 914.907082][T15665] netlink: 'syz.5.3290': attribute type 16 has an invalid length. [ 914.940993][T15665] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3290'. [ 914.987248][T15665] netlink: 'syz.5.3290': attribute type 10 has an invalid length. [ 915.635784][T15660] delete_channel: no stack [ 918.086659][T15674] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3281'. [ 918.223780][T15676] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3282'. [ 918.697221][T15687] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3285'. [ 918.761782][T15691] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.3287'. [ 918.865487][T15691] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.3287'. [ 918.889042][T15694] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.3287'. [ 919.529864][T15700] netlink: 'syz.5.3291': attribute type 10 has an invalid length. [ 919.551445][T15700] netlink: 65015 bytes leftover after parsing attributes in process `syz.5.3291'. [ 919.705783][T15706] netlink: 'syz.0.3292': attribute type 16 has an invalid length. [ 919.756847][T15706] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3292'. [ 919.794016][T15704] netlink: 'syz.0.3292': attribute type 10 has an invalid length. [ 920.099876][T15701] delete_channel: no stack [ 920.284042][T15710] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3294'. [ 920.644590][T15708] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.3293'. [ 920.796905][T15708] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 920.825563][T15708] CPU: 1 PID: 15708 Comm: syz.2.3293 Not tainted syzkaller #0 [ 920.833128][T15708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 920.843231][T15708] Call Trace: [ 920.846552][T15708] [ 920.849518][T15708] dump_stack_lvl+0x188/0x24e [ 920.854254][T15708] ? show_regs_print_info+0x12/0x12 [ 920.859504][T15708] ? load_image+0x410/0x410 [ 920.864084][T15708] sysfs_warn_dup+0x8a/0xa0 [ 920.868648][T15708] sysfs_do_create_link_sd+0xc0/0x110 [ 920.874075][T15708] device_add+0x83b/0x1050 [ 920.878557][T15708] wiphy_register+0x1d8b/0x2aa0 [ 920.883479][T15708] ? cfg80211_event_work+0x40/0x40 [ 920.888645][T15708] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 920.894947][T15708] ? ieee80211_register_hw+0x2914/0x39f0 [ 920.900731][T15708] ieee80211_register_hw+0x2d48/0x39f0 [ 920.906285][T15708] ? ieee80211_register_hw+0xf41/0x39f0 [ 920.911891][T15708] ? ieee80211_register_hw+0xf41/0x39f0 [ 920.917480][T15708] ? ieee80211_tasklet_handler+0x20/0x20 [ 920.923181][T15708] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 920.929402][T15708] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 920.935201][T15708] ? memcpy+0x3c/0x60 [ 920.939242][T15708] hwsim_new_radio_nl+0xab7/0xc90 [ 920.944345][T15708] genl_family_rcv_msg_doit+0x22f/0x350 [ 920.950031][T15708] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 920.955982][T15708] ? lockdep_hardirqs_on+0x94/0x140 [ 920.961251][T15708] ? genl_rcv_msg+0x5d9/0x790 [ 920.965993][T15708] genl_rcv_msg+0x601/0x790 [ 920.970646][T15708] ? genl_bind+0x360/0x360 [ 920.975125][T15708] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 920.981543][T15708] netlink_rcv_skb+0x1ef/0x440 [ 920.986360][T15708] ? genl_bind+0x360/0x360 [ 920.990838][T15708] ? netlink_ack+0x1160/0x1160 [ 920.995651][T15708] ? lockdep_hardirqs_on+0x94/0x140 [ 921.000916][T15708] ? down_read+0x1a8/0x2d0 [ 921.005392][T15708] genl_rcv+0x24/0x40 [ 921.009433][T15708] netlink_unicast+0x7ad/0x920 [ 921.014257][T15708] netlink_sendmsg+0x8ad/0xbd0 [ 921.019082][T15708] ? netlink_getsockopt+0x550/0x550 [ 921.024347][T15708] ? apparmor_socket_sendmsg+0x8a/0x330 [ 921.029982][T15708] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 921.035321][T15708] ? security_socket_sendmsg+0x7c/0xa0 [ 921.040838][T15708] ? netlink_getsockopt+0x550/0x550 [ 921.046097][T15708] ____sys_sendmsg+0x5ed/0x9a0 [ 921.050908][T15708] ? iovec_from_user+0x2b0/0x360 [ 921.055919][T15708] ? __sys_sendmsg_sock+0x30/0x30 [ 921.060993][T15708] ? __import_iovec+0x306/0x510 [ 921.065916][T15708] ? import_iovec+0x6f/0xa0 [ 921.070486][T15708] ___sys_sendmsg+0x2a2/0x360 [ 921.075224][T15708] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 921.081014][T15708] ? __sys_sendmsg+0x2a0/0x2a0 [ 921.085891][T15708] __se_sys_sendmsg+0x1c3/0x2b0 [ 921.090800][T15708] ? __x64_sys_sendmsg+0x80/0x80 [ 921.095817][T15708] ? syscall_enter_from_user_mode+0x2a/0x80 [ 921.101871][T15708] do_syscall_64+0x4c/0xa0 [ 921.106358][T15708] ? clear_bhb_loop+0x60/0xb0 [ 921.111095][T15708] ? clear_bhb_loop+0x60/0xb0 [ 921.115824][T15708] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 921.123281][T15708] RIP: 0033:0x7f51d1d9e159 [ 921.127848][T15708] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 921.147610][T15708] RSP: 002b:00007f51d2c05028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 921.156621][T15708] RAX: ffffffffffffffda RBX: 00007f51d2025fa0 RCX: 00007f51d1d9e159 [ 921.164904][T15708] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000c [ 921.173104][T15708] RBP: 00007f51d1e3506b R08: 0000000000000000 R09: 0000000000000000 [ 921.181135][T15708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 921.189308][T15708] R13: 00007f51d2026038 R14: 00007f51d2025fa0 R15: 00007fff9dd57c08 [ 921.197326][T15708] [ 922.642120][T15754] netlink: 'syz.1.3307': attribute type 10 has an invalid length. [ 923.198687][T15770] netlink: 'syz.0.3312': attribute type 10 has an invalid length. [ 923.235556][T14040] Bluetooth: hci3: command 0x0406 tx timeout [ 923.377321][T15770] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 923.586926][T15775] __nla_validate_parse: 5 callbacks suppressed [ 923.587176][T15775] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3314'. [ 923.884336][T15780] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.3315'. [ 924.492908][T15804] netlink: 'syz.5.3324': attribute type 10 has an invalid length. [ 924.509261][T15804] netlink: 65015 bytes leftover after parsing attributes in process `syz.5.3324'. [ 925.206178][T15822] device sit0 entered promiscuous mode [ 925.342093][T15820] netlink: 'syz.0.3329': attribute type 10 has an invalid length. [ 925.375008][T15820] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 925.551961][T15832] device syzkaller0 entered promiscuous mode [ 926.227204][T15854] netlink: 'syz.1.3333': attribute type 29 has an invalid length. [ 928.608430][T15846] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3331'. [ 928.636275][T15854] netlink: 'syz.1.3333': attribute type 29 has an invalid length. [ 929.485418][T15877] netlink: 'syz.3.3340': attribute type 10 has an invalid length. [ 929.544179][T15877] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.3340'. [ 929.714809][T15886] device aaaaaaaaaaaaaaa entered promiscuous mode [ 929.814877][T15885] netlink: 'syz.1.3341': attribute type 10 has an invalid length. [ 930.954525][T15885] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 931.399744][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.406390][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.788652][T15954] device syzkaller0 entered promiscuous mode [ 933.910280][T15969] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3347'. [ 934.357594][T15986] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3352'. [ 934.377530][T15987] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3352'. [ 937.273484][T15986] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3352'. [ 937.482691][T16000] device sit0 entered promiscuous mode [ 937.793705][T16025] netlink: 'syz.1.3362': attribute type 16 has an invalid length. [ 937.815531][T16025] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3362'. [ 937.853970][T16030] netlink: 'syz.1.3362': attribute type 10 has an invalid length. [ 938.136912][T16024] delete_channel: no stack [ 938.274647][T16029] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3363'. [ 938.963779][T16045] netlink: 'syz.5.3367': attribute type 10 has an invalid length. [ 939.030109][T16045] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 939.484619][T16054] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3370'. [ 939.808687][T16058] device syzkaller0 entered promiscuous mode [ 940.175188][T16074] netlink: 'syz.3.3378': attribute type 16 has an invalid length. [ 940.190115][T16074] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3378'. [ 940.948813][T16072] delete_channel: no stack [ 941.925428][T16070] ¥: port 1(bond0) entered blocking state [ 941.931275][T16070] ¥: port 1(bond0) entered disabled state [ 941.942843][T16070] device bond0 entered promiscuous mode [ 941.959552][T16070] device bond_slave_0 entered promiscuous mode [ 941.966287][T16070] device bond_slave_1 entered promiscuous mode [ 941.986988][T16074] netlink: 'syz.3.3378': attribute type 10 has an invalid length. [ 942.570107][T16089] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3380'. [ 942.633982][T16084] netlink: 'syz.2.3381': attribute type 10 has an invalid length. [ 942.765486][T16084] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 943.602835][T16116] device syzkaller0 entered promiscuous mode [ 943.626084][T16115] netlink: 'syz.2.3400': attribute type 10 has an invalid length. [ 943.652177][T16115] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 944.027524][T16123] netlink: 'syz.5.3393': attribute type 16 has an invalid length. [ 944.100935][T16123] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3393'. [ 944.717091][T16122] delete_channel: no stack [ 960.484684][T14040] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 960.494659][T14040] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 960.503870][T14040] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 960.513938][T14040] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 960.526152][ T4283] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 960.534805][ T4283] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 961.927501][T16152] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 961.937769][T16152] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 961.947013][T16152] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 961.956743][T16152] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 961.967200][T16152] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 961.975923][T16152] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 962.276578][T16152] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 962.286930][T16152] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 962.296139][T16152] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 962.306469][T16152] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 962.318492][T16152] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 962.327597][T16152] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 962.622268][ T4283] Bluetooth: hci0: command 0x0409 tx timeout [ 962.943058][T16152] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 962.953005][T16152] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 962.962169][T16152] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 962.971899][T16152] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 962.980940][T16152] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 962.988873][T16152] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 963.481249][T16152] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 963.491043][T16152] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 963.500146][T16152] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 963.510376][T16152] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 963.521661][T16152] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 963.529620][T16152] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 964.066436][T16152] Bluetooth: hci6: command 0x0409 tx timeout [ 964.366073][T16152] Bluetooth: hci7: command 0x0409 tx timeout [ 964.716137][T16152] Bluetooth: hci0: command 0x041b tx timeout [ 965.016067][T16152] Bluetooth: hci8: command 0x0409 tx timeout [ 965.565982][T16152] Bluetooth: hci9: command 0x0409 tx timeout [ 966.115695][T16152] Bluetooth: hci6: command 0x041b tx timeout [ 966.466136][T16152] Bluetooth: hci7: command 0x041b tx timeout [ 966.766023][T16152] Bluetooth: hci0: command 0x040f tx timeout [ 967.115776][T16152] Bluetooth: hci8: command 0x041b tx timeout [ 967.666065][T16152] Bluetooth: hci9: command 0x041b tx timeout [ 968.215970][T16152] Bluetooth: hci6: command 0x040f tx timeout [ 968.516226][T16152] Bluetooth: hci7: command 0x040f tx timeout [ 968.865789][T16152] Bluetooth: hci0: command 0x0419 tx timeout [ 969.166163][T16152] Bluetooth: hci8: command 0x040f tx timeout [ 969.715735][T16152] Bluetooth: hci9: command 0x040f tx timeout [ 970.315687][T16152] Bluetooth: hci6: command 0x0419 tx timeout [ 970.615816][T16152] Bluetooth: hci7: command 0x0419 tx timeout [ 971.116413][T12238] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 0-.... } 2681 jiffies s: 145173 root: 0x1/. [ 971.130033][T12238] rcu: blocking rcu_node structures (internal RCU debug): [ 971.139009][T12238] Sending NMI from CPU 1 to CPUs 0: [ 971.144311][ C0] NMI backtrace for cpu 0 [ 971.144323][ C0] CPU: 0 PID: 16128 Comm: syz.3.3394 Not tainted syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 971.144340][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 971.144350][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x2a/0x60 [ 971.144378][ C0] Code: 48 8b 04 24 65 48 8b 0d 54 3c 80 7e 65 8b 15 55 3c 80 7e 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 35 83 b9 1c 16 00 00 00 <74> 2c 8b 91 f8 15 00 00 83 fa 02 75 21 48 8b 91 00 16 00 00 48 8b [ 971.144393][ C0] RSP: 0018:ffffc900000070d8 EFLAGS: 00000046 [ 971.144408][ C0] RAX: ffffffff818a4d3c RBX: 000000000000002c RCX: ffff88802e3c3c00 [ 971.144427][ C0] RDX: 0000000000000100 RSI: 00000000ffffffff RDI: 0000000000000000 [ 971.144438][ C0] RBP: 00000000ffffffff R08: ffffffff8e20b46f R09: 1ffffffff1c4168d [ 971.144451][ C0] R10: dffffc0000000000 R11: fffffbfff1c4168e R12: ffffe8ffffc356b8 [ 971.144464][ C0] R13: dffffc0000000000 R14: ffffc90000007180 R15: ffffc900000071a0 [ 971.144477][ C0] FS: 00007f9e711f66c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 971.144492][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 971.144504][ C0] CR2: 000000110c2684e5 CR3: 000000005f01f000 CR4: 00000000003506f0 [ 971.144519][ C0] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 971.144529][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 971.144540][ C0] Call Trace: [ 971.144546][ C0] [ 971.144552][ C0] perf_trace_buf_alloc+0x12c/0x300 [ 971.144586][ C0] perf_trace_lock+0x19c/0x390 [ 971.144620][ C0] ? trace_event_raw_event_lock+0x230/0x230 [ 971.144671][ C0] lock_release+0x8ad/0x920 [ 971.144702][ C0] ? perf_event_output_forward+0xbe/0x2f0 [ 971.144736][ C0] ? __lock_acquire+0x7c40/0x7c40 [ 971.144786][ C0] perf_event_output_forward+0x282/0x2f0 [ 971.144812][ C0] ? perf_swevent_get_recursion_context+0xda/0x150 [ 971.144839][ C0] ? perf_event_output_forward+0xbe/0x2f0 [ 971.144866][ C0] ? perf_get_page_size+0x430/0x430 [ 971.144889][ C0] ? perf_trace_buf_alloc+0x12c/0x300 [ 971.144917][ C0] ? perf_trace_lock+0x19c/0x390 [ 971.144954][ C0] ? __perf_event_account_interrupt+0x187/0x280 [ 971.144988][ C0] __perf_event_overflow+0x457/0x630 [ 971.145029][ C0] perf_swevent_overflow+0x19b/0x230 [ 971.145062][ C0] perf_swevent_event+0x458/0x570 [ 971.145095][ C0] ? perf_tp_event+0xc10/0xc10 [ 971.145119][ C0] ? perf_trace_buf_alloc+0x12c/0x300 [ 971.145140][ C0] ? perf_trace_buf_alloc+0x300/0x300 [ 971.145164][ C0] ? perf_trace_lock+0x19c/0x390 [ 971.145197][ C0] perf_tp_event+0x36b/0xc10 [ 971.145236][ C0] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 971.145323][ C0] ? trace_call_bpf+0xbf/0x6b0 [ 971.145430][ C0] ? trace_call_bpf+0xbf/0x6b0 [ 971.145456][ C0] ? trace_call_bpf+0x5d6/0x6b0 [ 971.145498][ C0] ? __bpf_trace_bpf_trace_printk+0x20/0x20 [ 971.145537][ C0] perf_trace_run_bpf_submit+0xf3/0x1c0 [ 971.145577][ C0] perf_trace_preemptirq_template+0x268/0x320 [ 971.145606][ C0] ? irqentry_enter+0x33/0x50 [ 971.145632][ C0] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 971.145662][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 971.145694][ C0] ? lock_chain_count+0x20/0x20 [ 971.145720][ C0] ? irqentry_enter+0x33/0x50 [ 971.145748][ C0] trace_hardirqs_off_finish+0x13f/0x180 [ 971.145776][ C0] irqentry_enter+0x33/0x50 [ 971.145799][ C0] sysvec_irq_work+0xa/0xc0 [ 971.145821][ C0] asm_sysvec_irq_work+0x16/0x20 [ 971.145838][ C0] RIP: 0010:rcu_read_unlock_special+0x7f/0x510 [ 971.145857][ C0] Code: eb 03 48 b8 f1 f1 f1 f1 f8 f2 f2 f2 4a 89 04 2b 42 c7 44 2b 08 f8 f3 f3 f3 65 44 8b 35 32 7b 95 7e 41 f7 c6 00 00 f0 00 74 40 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 42 c7 44 2b 08 [ 971.145871][ C0] RSP: 0018:ffffc90000007ae0 EFLAGS: 00000206 [ 971.145885][ C0] RAX: 94fdc2537ad84e00 RBX: 1ffff92000000f64 RCX: 94fdc2537ad84e00 [ 971.145898][ C0] RDX: dffffc0000000000 RSI: ffffffff8a8c18a0 RDI: ffffffff8adf68a0 [ 971.145910][ C0] RBP: ffffc90000007bd0 R08: ffff8880b8e357cb R09: 1ffff110171c6af9 [ 971.145924][ C0] R10: dffffc0000000000 R11: ffffed10171c6afa R12: 0000000000000246 [ 971.145936][ C0] R13: dffffc0000000000 R14: ffff8880b8e3bb00 R15: 0000000000000001 [ 971.145980][ C0] ? kmem_cache_free+0xb0/0x2a0 [ 971.146009][ C0] ? __rcu_read_unlock+0xd0/0xd0 [ 971.146052][ C0] __rcu_read_unlock+0x78/0xd0 [ 971.146067][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x26/0x170 [ 971.146153][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 971.146173][ C0] ieee80211_iterate_active_interfaces_atomic+0x156/0x170 [ 971.146210][ C0] mac80211_hwsim_beacon+0xb7/0x1b0 [ 971.146235][ C0] __hrtimer_run_queues+0x522/0xc90 [ 971.146269][ C0] ? hw_scan_work+0xf00/0xf00 [ 971.146305][ C0] ? hrtimer_interrupt+0x980/0x980 [ 971.146343][ C0] hrtimer_run_softirq+0x173/0x290 [ 971.146374][ C0] handle_softirqs+0x291/0x910 [ 971.146402][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 971.146434][ C0] ? do_softirq+0x210/0x210 [ 971.146449][ C0] ? hrtimer_interrupt+0x775/0x980 [ 971.146478][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 971.146503][ C0] __irq_exit_rcu+0x13b/0x230 [ 971.146522][ C0] ? irq_exit_rcu+0x20/0x20 [ 971.146562][ C0] irq_exit_rcu+0x5/0x20 [ 971.146577][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 971.146620][ C0] [ 971.146625][ C0] [ 971.146633][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 971.146651][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xbc/0x120 [ 971.146677][ C0] Code: c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 41 c6 04 07 f8 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 3f 1a 1c f7 65 8b 05 10 ca c5 75 85 c0 74 3c 48 c7 04 24 0e 36 [ 971.146691][ C0] RSP: 0018:ffffc900044df660 EFLAGS: 00000206 [ 971.146704][ C0] RAX: dffffc0000000004 RBX: 0000000000000a06 RCX: 94fdc2537ad84e00 [ 971.146716][ C0] RDX: dffffc0000000000 RSI: ffffffff8a8c18a0 RDI: 0000000000000001 [ 971.146728][ C0] RBP: ffffc900044df6f8 R08: ffff8880b8e357cb R09: 1ffff110171c6af9 [ 971.146741][ C0] R10: dffffc0000000000 R11: ffffed10171c6afa R12: dffffc0000000000 [ 971.146754][ C0] R13: 0000000000120000 R14: ffff8880174ccd80 R15: 1ffff9200089becc [ 971.146797][ C0] ? _raw_spin_unlock+0x40/0x40 [ 971.146843][ C0] __slab_free+0x1e9/0x290 [ 971.146876][ C0] qlist_free_all+0x76/0xe0 [ 971.146903][ C0] kasan_quarantine_reduce+0x144/0x160 [ 971.146929][ C0] __kasan_slab_alloc+0x1e/0x80 [ 971.146958][ C0] slab_post_alloc_hook+0x4b/0x490 [ 971.146992][ C0] kmem_cache_alloc_node+0x1ad/0x310 [ 971.147013][ C0] ? __alloc_skb+0xf9/0x7d0 [ 971.147041][ C0] __alloc_skb+0xf9/0x7d0 [ 971.147066][ C0] netlink_sendmsg+0x654/0xbd0 [ 971.147086][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 971.147124][ C0] ? netlink_getsockopt+0x550/0x550 [ 971.147152][ C0] ? bpf_lsm_socket_accept+0x10/0x10 [ 971.147174][ C0] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 971.147191][ C0] ? security_socket_sendmsg+0x7c/0xa0 [ 971.147215][ C0] ? netlink_getsockopt+0x550/0x550 [ 971.147240][ C0] ____sys_sendmsg+0x5ed/0x9a0 [ 971.147276][ C0] ? __sys_sendmsg_sock+0x30/0x30 [ 971.147292][ C0] ? __import_iovec+0x306/0x510 [ 971.147336][ C0] ? import_iovec+0x6f/0xa0 [ 971.147371][ C0] ___sys_sendmsg+0x2a2/0x360 [ 971.147401][ C0] ? __sys_sendmsg+0x2a0/0x2a0 [ 971.147466][ C0] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 971.147533][ C0] __se_sys_sendmsg+0x1c3/0x2b0 [ 971.147558][ C0] ? __x64_sys_sendmsg+0x80/0x80 [ 971.147608][ C0] ? syscall_enter_from_user_mode+0x2a/0x80 [ 971.147640][ C0] do_syscall_64+0x4c/0xa0 [ 971.147657][ C0] ? clear_bhb_loop+0x60/0xb0 [ 971.147674][ C0] ? clear_bhb_loop+0x60/0xb0 [ 971.147695][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 971.147722][ C0] RIP: 0033:0x7f9e72f9e159 [ 971.147740][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 971.147754][ C0] RSP: 002b:00007f9e711f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 971.147770][ C0] RAX: ffffffffffffffda RBX: 00007f9e73225fa0 RCX: 00007f9e72f9e159 [ 971.147783][ C0] RDX: 0000000020040804 RSI: 0000200000000040 RDI: 000000000000000e [ 971.147794][ C0] RBP: 00007f9e7303506b R08: 0000000000000000 R09: 0000000000000000 [ 971.147805][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 971.147815][ C0] R13: 00007f9e73226038 R14: 00007f9e73225fa0 R15: 00007ffcadadb238 [ 971.147856][ C0] [ 971.266888][T16152] Bluetooth: hci8: command 0x0419 tx timeout [ 971.991285][ T4283] Bluetooth: hci9: command 0x0419 tx timeout