last executing test programs: 18.913900872s ago: executing program 1 (id=2929): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x6, @perf_config_ext, 0x10c012, 0x89, 0x2, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.swap.events\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x4}, 0x100000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x1, 0x6}, 0x1080, 0x0, 0x51, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001000)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x18}, [@ldst={0x4, 0x3, 0x6, 0x5, 0x0, 0x64, 0x20}]}, &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xc3, &(0x7f0000000300)=""/195, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000080), 0x10}, 0x94) r2 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x12, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3250}, 0x0, 0x0, 0x4, 0x0, 0x100000}, 0x0, 0xffffffffffffffff, r2, 0xb) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x15, 0x21, &(0x7f0000002400)=ANY=[], 0x0, 0x5, 0xbf, &(0x7f0000001300)=""/191, 0x41100, 0x4d, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000026c0)={0x3, 0xc, 0x80000001, 0x7}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x10, &(0x7f0000000000), 0x4) sendmsg$inet(r3, &(0x7f0000002d40)={0x0, 0x0, 0x0}, 0x0) r4 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)="39000000140081ae00002c000500015601618575e285af0180007a1b31d569d9ae527048ffffffffffffffff56fabcb3b2aa9be3da9212d744", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x40800) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001600)=ANY=[], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYRES64=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r6}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xb, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdbf}, 0x94) socket$kcm(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, 0x0, 0x0}, 0x20) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r7 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000003000), 0x201, 0x0) openat$cgroup_int(r7, 0x0, 0x2, 0x0) unlink(&(0x7f0000001400)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 18.583359049s ago: executing program 1 (id=2932): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="d800000010008104685fa3aa7143a0f8c81ded0b25000000e8fe09a118001500060014ea000000120800030043000040a8002b000a00", 0x36}], 0x1}, 0x20000880) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) 6.250017s ago: executing program 3 (id=3007): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000001304000000005f5f"], &(0x7f0000001980)=""/4096, 0x28, 0x1000, 0x1}, 0x28) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000001340)=@hci={0x1f, 0x8e88, 0x47}, 0x80, 0x0}, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x820, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000280), 0x5}, 0x10c212, 0x8000000ac5d, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) r1 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x23, &(0x7f0000000040), 0xcf) close(r1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000120000000000000000"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x40, 0x10001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair(0x22, 0x5, 0x4, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f00000000c0)={'gretap0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1802000002000000000000000000000085000000200000001801000020786c2500000000002020207b1af8ff00000000bfa100ffffffb702000008000000b703000000000000850000009b00000095000000000000007f73682207c3b98bc2cdc0334db1ce2ca364b945ac94d5d993ff9e9b9f4294dc19693133edee2007829d504a754bea65871ae8c41fc80300000000000000c900080000009a58ef7fd561352e2a151d60e6ee29d37bf9cfc376251939d1886545f7d59fe9abba0387cc8fb73add31b9192f947f995af09aeae7e767bd057c3fd3fb764be46d0ba54ce01fec9c07d445fadad1a1"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x5ae) r4 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xf}, 0x0, 0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r4, 0x0) socketpair(0x23, 0x1, 0xb5d4, &(0x7f0000000200)) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004025a9fff0000002e0000001126078f39b52d89f6fa0b83ff40c17ef57cec2d0f76a8c1829bec8355c379c44c32e54f8fe7ca6b82e3c3d34cd6daa3ebed0779fcb90acbb4199889ae9cda14dee23f5a698d09f0aa3a0d9a5e2423e77138f4b3bdd1c24d0cee4cdb9cbb6df138362de9f4774c461afb8f5a973af29f1d822f86bab67762e8dc6229971f9fd9627bb26a0f0d8a10850b0830b8fb2dcc009f476718ec977a2d4ba13e26370397a24064a8f4", @ANYRES32, @ANYBLOB="8700"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x20048841) 5.176075627s ago: executing program 3 (id=3011): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000180)="3c00000033000b12d25a80648c2594f90124fc60100c034002418000002000139215a2281cf6b820a735b16b6a44799406db26a57b35000000000000", 0x3c}], 0x1}, 0x0) 4.604794927s ago: executing program 3 (id=3013): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c003, 0xac5d, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x4200003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="850200000000000018100000", @ANYRES32, @ANYBLOB="0000000000000000950000000000000045"], 0x0}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="05000000010000004000000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r7, 0x0, 0x0}, 0x10) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r8}, &(0x7f0000000280), &(0x7f0000000240)=r3}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r9, 0x4) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r11, 0x6, 0x6, &(0x7f0000000740), 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x89f3, &(0x7f0000000080)) r12 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r12, 0x84, 0x12, &(0x7f0000000040), 0x4) r13 = socket$kcm(0x2, 0x200000000000001, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r13, 0x5452, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 3.97780484s ago: executing program 3 (id=3016): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000001480)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000080)="05804ab382844306d758e620b9dc", 0x0, 0x12c4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="1b0000001900599c6d0e00009bd028ef80"], 0xfe33) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000040)) close(r4) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r4, 0x8923, &(0x7f0000002280)={'syzkaller0\x00', @random='\x00!.\x00'}) 3.947171912s ago: executing program 2 (id=3017): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000540)={&(0x7f0000000140)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000180)="aa13642f99e7362bde8ec03656f9016137345f25c3422bbd02178524542399965a87c10d42ecd0af9615ba14be11718f647c3ca6e61fcc8667eb42fa92d7bebc33528f44a88231a4e41f64e152888c64d1", 0x51}, {&(0x7f0000000240)="65c39a36271e456e6d7b119478ae828f1486c13bcfae273a1a49514e744faa156ce69b987abec604d2026ec4e2f5272aafd892b5f52f146beb5f029725dc7db924c77fcc45b4d72ee8dd3bb4c83b0ad884c9c5011f4c1eaed772d02d1ffa577dd13874ce1fa29a69db5ed767ac30751cfe4901e657ff309909e9dd7356dc4b18b93ca0cf76c04c43b898793247fe940ab521867a401b1e532b9fd9660be59ced235e2529a0b97d615a0d320ebd05114302f8b0f612266d9d0b30022285adc7ed0ebe51f6fd4983896d38df5c72dd83c4ec5d64cc5649f7bd9a0a4a693ff971e7aa3caacd6d84a700e407cc64373a62221e50", 0xf2}, {&(0x7f0000000340)="d51f5741670d8c629653968dadab380453f4af4b6a544f5754a8934e4f220d31f385b1966eb2e6145b483103d08d666c50e753c4d8b52335c0022aebbf85553c315a9c3fc58d3b4420e912259707c1ebe0d4be951d56caefb79557d02195b09aa5ae138834c931a528535d4b0cf9d95ef6edd659b4d5f163e0852475a46ffeec0f07bd6a3b93bbdf4450dc39f820db39fd16449d16b0f24cb6bba64ff39d32b6d32d280a2205c373476487f3c81dac8bffe44637cf98946ba6", 0xb9}, {&(0x7f0000000400)}, {&(0x7f0000000440)="dab62c78516f118cae01194a605e37fa23e980da53deb4a854028d7090bb7c8f35df458b572ac1e238b202306a36eea06efd689078f91e111cae6bc91deefaacab6a8b370c75e716ec4ed50560748d20343ef8f97aa6b9b7a0c6c6ed7dc3d88ac6c5894aa84dcc8b83b6", 0x6a}], 0x5}, 0x44805) r1 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c80)='freezer.self_freezing\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffff31, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x66, &(0x7f0000000a80), 0x0, 0x0, 0x0, &(0x7f0000000740), 0x8, 0xaf, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x7, &(0x7f00000004c0)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x100, 0x40, '\x00', r3, @fallback=0x2f, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) sendmsg$inet(r0, &(0x7f0000000d80)={&(0x7f0000000400)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000b40)=[{&(0x7f0000000580)="2747218128728faafb1a6b58bdcee0131b8e9ac942df27b868e40c47c98886300820ab024a400ef6f20a113de9bdb214d9c0d8ff76b1076fffb4ccad160a4d6801a39faed5cec96fe06dcec0e2e68d01150546d6cefe7e20e851b9c93df9aaaebbb908fdb78ec324edd82023330d752007d728d7bdbd231d179361448ffa54828ac431510a84a01b47ac318bf2508123fd24d05c08e0cdbcb752f0b02ebc8c519430516029f6b89b8f2743189b6629cce6443e83a51bfe91d8fd116aa046a2dc03", 0xc1}, {&(0x7f0000000800)="3e6567b3d5abcfbad6d34a4ef68387aa3e69077b66c83a46626e1d74b1e41f984406dfbc14c7c8a1eda8232749ac32999e54029485395328ffc260d66d548189e358e16af33f3f8f413fd4ff0d929b71d97c1a23f84b3d7889b05492a9894181dd9d2859bb387172b4196fdaf4e0d6ce370a4338e1b28f667a1b174f549f4e1344979b199597bc8d98f6df0cfe1ffa6a9d8d64214002037f5b8894a08a4acf787cf652dc6bf54a922733e681076f8ef9609714e79992471e104314338a426be4b6020dff5710b43c7d", 0xc9}, {&(0x7f0000000900)="20a074239dc140466a3a4a6341c67daa2e202993d0504554b07f709d3c2ea0d38863c8e5cbcf125747e43badf35193a11d5555cb32a63449f136350c8e89c77d2fe1de251d41f2d74490275fefb618d5a5214469e2f06b38e59db6dbb460d7aeecab0230b4f272a9da02c2754d58345a33be944886ed2a07f5f9c7735d3eba5950140d3929aa1fcee8b618ca5607c81fa85b5e27f48ff686", 0x98}, {&(0x7f00000009c0)="619d41c82d67d88d4eefb207b3778eb994eedc7e143f2947f06ea9712c829af87ca8f94704c3512110a118fd2daeecd4a86ee9b8065420a022dd2d385f3bac5ac04d3b9caf2f24131257a4aebbc0783d141aae64eea1b2", 0x57}, {&(0x7f0000000a40)="6e8d07f1abcf30dcc358eef36242e195be710cb423bdca46cbf5123cc04f4af2673120b439fb2d4acec792b074f7f8924e702ea56949ad96e6dd", 0x3a}, {&(0x7f0000000a80)}, {&(0x7f0000000ac0)="8ff4ff3067086fbb68719a79452c138956c44cdd537ac407e20c51416033e9aabd5d3983751c1aaf71d916f9767e4d4aafad238ad64de59841b16bde3d0b2b276c8d01d11d1b5ddb76241a9f72423a64857e0205076467baff1bbe83ccdd4c9e915df47ab871ee9da055bfa22f059d90fc0b5d4f", 0x74}], 0x7, &(0x7f0000001180)=ANY=[@ANYBLOB="140000000000000000000000010000000700000000000000110000000000000000000000010000000200000000000000140000000000000000000000020000002400000000000000e400000000000000000000000700000086350000000202113e08cfb55845db05688283f06ded7b01049179000ee470a2ce463970a5f0b080fd010c8858ce7780a9e27da76f444cc731ac1414aa00000008ac1414bb00000005ffffffff00000082ac14141c00000002ac1414bb0000005ae0000002000000050000000000008914ac1e000180000000e0000002000000068650000094000000d95de02c1c073623050afa738a1439143acf0704e50d000ff43e75e198ce70383a13f3f182060e9068a285a11761a5b575fbe1060b6d1aa869a22514b825070a7dff726c378755bb000000000000001400000000000000000000000200000004000000000000001400000000000000000000000200000042050000000000001100000000000000000000000100000009000000000000001c0000e8ffffffffffffff0008000000", @ANYRES32=r3, @ANYRESOCT=r0], 0x198}, 0x0) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYRES64=r1, @ANYRES8=r4], 0xfe1b) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r6 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0a00000007000000ff0f000007"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000bc0)={0xffffffffffffffff, 0x58, &(0x7f0000000e40)}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000f80)={r5}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000010c0)={0x6, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="180000006b56000100000000030e423ee0d200"/33], &(0x7f00000007c0)='syzkaller\x00', 0x7, 0x67, &(0x7f0000000dc0)=""/103, 0x41100, 0x21, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000cc0)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000f40)={0x2, 0xb, 0x8000, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000780)=[0xffffffffffffffff], &(0x7f0000001080), 0x10, 0x7}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0xc, &(0x7f0000001400)=ANY=[@ANYBLOB="18db0000000000d18b161583196d4a5600", @ANYRES32=0x0, @ANYBLOB="0000000000000000b70800000000004dd4d1007b8af8ff00000000bfa200000000000007020000f8ffffffb703000005000000b70400000000000085000000497f86f85c737ffcbe5e26e41ce8e16593e892fbd144e0f791057abd0000a08ae23f81fb44809c8bad0ba69023e39774a7f18a36d2d8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r9) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r7}, &(0x7f0000000580), &(0x7f0000000680)=r8}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="3daa000000000000711019000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000240)=@in6={0xa, 0x4e32, 0x0, @mcast2}, 0x80, 0x0}, 0x24044840) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000c00), 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000d00), 0x4}, 0xc06, 0x0, 0x0, 0x0, 0x0, 0x1, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x91c, 0x4156, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffff8, 0xffff}, 0x12640, 0xfffffffffffffffc, 0xfffffffe, 0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$sock(0xffffffffffffffff, 0x0, 0x44) 3.549870623s ago: executing program 2 (id=3018): socket$kcm(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000440)='syz0\x00', 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f00000006c0)='cgroup.threads\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = getpid() sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r2, &(0x7f0000001a00)=ANY=[@ANYBLOB="13100000520091ef"], 0xfe33) recvmsg$kcm(r2, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001a40)=""/4095, 0xfff}], 0x1}, 0x0) recvmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x50be}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="5400020029000b05d25a806f8c6394f90424fc602f0011002f2f2f00053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x5000000}, 0x0) recvmsg$kcm(r3, &(0x7f0000000240)={&(0x7f00000002c0)=@ax25={{}, [@bcast, @remote, @default, @rose, @default, @remote, @rose, @bcast]}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000100)=""/58, 0x3a}, {&(0x7f0000000340)=""/235, 0xeb}, {&(0x7f00000005c0)=""/253, 0xfd}, {&(0x7f0000000840)=""/133, 0x85}, {&(0x7f0000000900)=""/180, 0xb4}], 0x5, &(0x7f00000001c0)=""/52, 0x34}, 0x2000) recvmsg$kcm(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001180)=[{&(0x7f00000000c0)="1400000027000bff001b05290000000000000000", 0x14}], 0x1}, 0x4080) r5 = socket$kcm(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000080)={r5}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1200000004010000080000000200000000000000", @ANYRES32, @ANYBLOB="00e59062ec76e6180b00"/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r6}, &(0x7f0000001d80), &(0x7f0000001d40)}, 0x20) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000700)="ffa0ad6fa2088142ffbd3dab67f8", 0xe}, {&(0x7f0000000740)="5d951c3c5737269738439297aca43205105f06e0d2d347d5f8b88441ce542a8298584ce7", 0x24}, {&(0x7f0000000a40)="c38789d825cb4144dbf02ab3453d44dca99d10c0868382a11a42b66715b41190bd731b53f9f201234d9345a5ef2e0aafee277460018c2c73c6ae16f466d51f49f874115f69d4bc40991a9c0025d6cde246dd8e737558911f946bebc4b00bd9b8815acc26c5948ab4cd0b5315fbc79d34bab261dae9b493068d5181617d220d4bce88356fe808ec54452b0c7350ad059ee629a44b097c443a9e43b0d9a6a0a2a2c612b073973f12c74c646bef5722914ec1b4d1d18499bf6c48eed4b0ce47908f7d9355c31b3aed02931d98fe453e6f85dc82f504691fdf49b5c7ce16e54aec5914205a5b312bba4989e22b0e3cf20239d850b7776f73fe3ad76a4fe5f73c", 0xfe}, {&(0x7f0000000c40)="62ef8041a433529071647e75522232cca363c2f8f40e6c32ef11536c233268c96adfbca9ecaa0d776823334a0c79b69d133839f2b94140ae4cfded97ded71092d3c9091f2fe7f08647c3d5217f57330478253aacf9d9373b1266c8e6c4958757db8a6c8484116a60b24aa66a84c4ba4c0d34c7216913efa2a7fefd7bd2bddb77c6f722012049eac4e10f953be3a2097769c4e17435c8c903bd99a7b3940965f377ec0a7f2091b004fc63443d6bbc40b3f08565859b97ddf941551fcdf7799a06e6cd246dcadc246535e6e0a2902c3bcf281ac80111d8b8e60f8ed1061877d41ee85389ec97db317c6a6b8b2be8f146110572a497dadc1fe99e", 0xf9}, {&(0x7f0000000d40)="13d7a9f59a40e52ab2e165dd4e0c7f06c162045ed59540563b0faab7573f6c5ade898c3abd6cf6c032030d0ddf5eb35ced653226071546b5162dce6b0d845f8a8232", 0x42}], 0x5, &(0x7f0000000e40)=[@cred={{0x1c, 0x1, 0x2, {r1, 0xee01}}}], 0x20, 0x2000c054}, 0x8804) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000680)={r6, &(0x7f0000000580), &(0x7f0000000780)=""/140}, 0x20) r7 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000d80)="5c0000007a006bcd9e3fe3dc6e0817000700005425000000488bc3a00000e517d34460bc24fff3000005251e4e82949a3651f668c3664402682fb6e27bbfa83b5cae0300c9fcd1938037e786a600"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000040)="3c00000033000b1229ae3f7f03b261130124fc60100c034009410000000300189215a2681cf6e50400003d490d20b735b16b6a44799406db26a57b35", 0x3c}], 0x1}, 0x0) recvmsg$kcm(r4, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) 3.549174253s ago: executing program 0 (id=3019): r0 = socket$kcm(0x10, 0x2, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x3, &(0x7f0000000040)=@framed={{}, [], {0x95, 0x0, 0x700}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) close(0x3) socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r0, &(0x7f0000001680)={&(0x7f00000000c0)={0x2, 0x0, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000180)="c7", 0xff04}], 0x1, &(0x7f0000000040)=[@ip_retopts={{0x20, 0x84, 0x2}}], 0x20}, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xa}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000000)={0x8, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="09000000040000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x17, &(0x7f0000000880)=ANY=[@ANYBLOB="1802000000000000000000100000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000076000000bf0900000000000026090600000003e7040000000600000018010000756c6c2500000000002020207d9af8ff00000000ad9100000000000037010000f8ffffffb702000008000000b70300000000000014000000060000005c93000000000000b5030200000000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$kcm(0x10, 0x2, 0x4) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x3, &(0x7f0000000040)=@framed={{}, [], {0x95, 0x0, 0x700}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) (async) close(0x3) (async) socket$kcm(0x2, 0x1, 0x84) (async) sendmsg$inet(r0, &(0x7f0000001680)={&(0x7f00000000c0)={0x2, 0x0, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000180)="c7", 0xff04}], 0x1, &(0x7f0000000040)=[@ip_retopts={{0x20, 0x84, 0x2}}], 0x20}, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xa}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000000)={0x8, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="09000000040000000400000004"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x17, &(0x7f0000000880)=ANY=[@ANYBLOB="1802000000000000000000100000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000076000000bf0900000000000026090600000003e7040000000600000018010000756c6c2500000000002020207d9af8ff00000000ad9100000000000037010000f8ffffffb702000008000000b70300000000000014000000060000005c93000000000000b5030200000000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) 3.548556463s ago: executing program 3 (id=3020): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x1020, 0x0, 0x8, 0x0, 0x4000004, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) openat$tun(0xffffffffffffff9c, 0x0, 0x183081, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x922000000001, 0x106) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1700000000000000"], 0x48) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000100)=@ieee802154={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0102}}}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000180)="27031c0016001400020000000000000006e1f0000000894f000f1102ee1680ca82973d2bd4b8", 0x26}, {&(0x7f0000000280)="7d3ed2ea1f2f23edbb324820e73b5f4b1100201a03df64a4853ed1b39e5d175223317057500c30ec0d61342b1c428df8", 0x30}], 0x2}, 0x24000008) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x4}, 0x38) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000028000000c"], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000061100000000000006200000000a81a1564fb0918ea000000"], &(0x7f0000000100)='GPL\x00', 0x5, 0xd7, &(0x7f0000000700)=""/215, 0x0, 0x5}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 3.290034387s ago: executing program 0 (id=3021): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0xd001}) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0xd001}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000280)) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8922, &(0x7f0000000080)) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x1, 0xf, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x20}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6}, &(0x7f0000000000), &(0x7f0000000140)=r3}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6}, &(0x7f0000000000), &(0x7f0000000140)=r3}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r7, 0x4) (async) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r7, 0x4) sendmsg$inet(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x3, 0x10) (async) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c25b3aa450ffc60", 0x14}], 0x1}, 0x0) r9 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r9, 0x0, 0xf, 0x0, 0x29) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0xb, 0x18}, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) recvmsg$unix(r11, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x10}}], 0x10}, 0x0) (async) recvmsg$unix(r11, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x10}}], 0x10}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000440)={0x0, 0x8, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}, @remote, @empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}, @empty, @local, @remote]}) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000005c0)={r10, &(0x7f00000006c0)="5dc6cef1ee2045d4fa242152aefcebe056f89f66d528e6794bec868275a2cea81997edff64126745ee43a7d5d5c7b38babff34bc39e9488002574495925e51cae7"}, 0x20) recvmsg(r8, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0x10, 0x2, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) 3.184026922s ago: executing program 4 (id=3022): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x2}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000680)=@generic={&(0x7f0000000640)='./file0\x00', r2}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) r4 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x4e22, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x2004fc10) close(r4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x8020) r8 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r8, 0x6, 0x17, &(0x7f0000000200)=r8, 0x21) ioctl$TUNSETOFFLOAD(r7, 0x400454d0, 0x11) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x3}, 0x50) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000300)={0xffffffffffffffff, 0x7}, 0xc) r12 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000380)=@generic={&(0x7f0000000340)='./file0\x00', 0x0, 0x12a62b43335bf5ac}, 0x18) r13 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0xc97d, 0x0, 0x1, 0x8906, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x2}, 0x50) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="050000000500", @ANYRES32, @ANYRES32=0x0, @ANYBLOB='\x00'/27], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000180)="ff5fb99772024dca4128654351fb32", 0x800, r14}, 0x38) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r16 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000480)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x68, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x3}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x18, &(0x7f0000000100)=@raw=[@generic={0x4, 0x6, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x3}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x6}, @tail_call={{0x18, 0x2, 0x1, 0x0, r7}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r9}}, @jmp={0x5, 0x1, 0x1, 0xa, 0xa, 0x100, 0xffffffffffffffff}], &(0x7f0000000200)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x4, 0xf, 0x5d5b, 0x8000}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000500)=[r0, r10, r11, r12, r13, r14, r15, r16], &(0x7f0000000540)=[{0x3, 0x4, 0x6}, {0x4, 0x5, 0xf, 0x3}, {0x0, 0x1, 0x2, 0x5}], 0x10, 0xd}, 0x94) 2.998185622s ago: executing program 3 (id=3023): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000007feffff720af0fff8ffffff71a4f0ff000000002d030000000000001d400500000000004704000001ed000072030000001200001d44000000000000db0a00fee10000007303000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x2}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000680)=@generic={&(0x7f0000000640)='./file0\x00', r2}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) r4 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x4e22, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x2004fc10) close(r4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x8020) r8 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r8, 0x6, 0x17, &(0x7f0000000200)=r8, 0x21) ioctl$TUNSETOFFLOAD(r7, 0x400454d0, 0x11) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x3}, 0x50) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000300)={0xffffffffffffffff, 0x7}, 0xc) r12 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000380)=@generic={&(0x7f0000000340)='./file0\x00', 0x0, 0x12a62b43335bf5ac}, 0x18) r13 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0xc97d, 0x0, 0x1, 0x8906, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x2}, 0x50) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="050000000500", @ANYRES32, @ANYRES32=0x0, @ANYBLOB='\x00'/27], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000180)="ff5fb99772024dca4128654351fb32", 0x800, r14}, 0x38) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r16 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000480)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x68, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x3}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x18, &(0x7f0000000100)=@raw=[@generic={0x4, 0x6, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x3}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x6}, @tail_call={{0x18, 0x2, 0x1, 0x0, r7}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r9}}, @jmp={0x5, 0x1, 0x1, 0xa, 0xa, 0x100, 0xffffffffffffffff}], &(0x7f0000000200)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x4, 0xf, 0x5d5b, 0x8000}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000500)=[r0, r10, r11, r12, r13, r14, r15, r16], &(0x7f0000000540)=[{0x3, 0x4, 0x6}, {0x4, 0x5, 0xf, 0x3}, {0x0, 0x1, 0x2, 0x5}], 0x10, 0xd}, 0x94) 2.900884797s ago: executing program 0 (id=3024): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x8, 0x2}, 0x80, 0x0}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f2, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000840)={0x0, 0x80, 0xd, 0x35, 0x9, 0xe3, 0x0, 0x5, 0x10092, 0xb, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, @perf_config_ext={0x42, 0x7}, 0x850a, 0x4, 0x7, 0x8, 0xfff, 0x97, 0x1, 0x0, 0x7, 0x0, 0x400}, 0x0, 0x8, r1, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x1f00) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000022003505d25a806f8c6394f97e24fc60", 0x14}], 0x1, 0x0, 0x0, 0x74000000}, 0x10) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union]}}, 0x0, 0x26}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000440)={r4, 0x20, &(0x7f0000000400)={0xfffffffffffffffe, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f00000000c0)='\x00') perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030030000b12d25a80648c2594f90124fc60100c044002000000053582c137153e370248078000f017", 0x2b}], 0x1}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x1, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000100)={0x0, 0x10}, 0x10}, 0x94) r5 = socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8002fffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x3ff}, 0x0, 0xfff, 0x0, 0x2, 0x0, 0x0, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0x12, &(0x7f00000008c0)=r8, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff200000000021000aac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 2.452853081s ago: executing program 0 (id=3025): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x14214, 0x0, 0xc2ba, 0x0, 0x4f6259ab, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x11) sendmsg$kcm(r0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f00000000c0)=[{0x3d, 0x0, 0x1, 0x20}, {0x4d}]}) socketpair(0x27, 0x1, 0x100, 0x0) mkdir(0x0, 0xbe9bac6d2d0f4e0b) unlink(0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/166}, 0x20) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_bp={0x0}, 0x1001a8, 0xa, 0x0, 0x4, 0x0, 0xffff0000, 0x0, 0x0, 0xffffbfff, 0x0, 0xfffffffffffffff4}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x9) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) 2.393809904s ago: executing program 2 (id=3026): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c003, 0xac5d, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x4200003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="850200000000000018100000", @ANYRES32, @ANYBLOB="0000000000000000950000000000000045"], 0x0}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="05000000010000004000000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r7, 0x0, 0x0}, 0x10) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r8}, &(0x7f0000000280), &(0x7f0000000240)=r3}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r9, 0x4) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 2.243396092s ago: executing program 1 (id=2935): r0 = socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x3, @remote, 0x5, 0x3}, 0x80, 0x0}, 0x2600c055) setsockopt$sock_attach_bpf(r0, 0x6, 0xe, &(0x7f0000000100), 0x4) (async) setsockopt$sock_attach_bpf(r0, 0x6, 0xe, &(0x7f0000000100), 0x4) 2.151566006s ago: executing program 4 (id=3027): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x0, 0x0, 0x0, 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000061043c000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @fallback=0x31, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r2 = socket$kcm(0xa, 0x6, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f0000000400)='memory.max\x00', 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x12, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x3e, '\x00', 0x0, @fallback=0x32, r0, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10, 0x0, r1, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETSNDBUF(r5, 0x400454d4, &(0x7f00000000c0)=0x2) write$cgroup_devices(r5, &(0x7f0000000740)=ANY=[], 0xffdd) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r4, 0x702, 0xe, 0x0, &(0x7f0000000580)="e460334470d8d400eb00c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000700000095000000000000006100000600"], 0x0, 0x4}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="850000002200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/ipc\x00') bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r6, 0x0, 0xcc0, 0xfffffffffffffde6, &(0x7f00000001c0)="348b0d151f8218e3c73697e4080049c416b90900000093291cfc5e8b99005e8b9900", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000850000000800000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) setsockopt$sock_attach_bpf(r2, 0x10d, 0xa, &(0x7f0000000000)=r7, 0x11) setsockopt$sock_attach_bpf(r2, 0x10d, 0xa, &(0x7f0000000040)=r7, 0x4) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000840)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff7}, [@call={0x85, 0x0, 0x0, 0x7b}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}}]}, &(0x7f0000000880)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r9}, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@enum64={0x3, 0x0, 0x0, 0x13, 0x1, 0x1}]}, {0x0, [0x2e, 0x61, 0x61, 0x5f, 0x5f, 0x61, 0x5f]}}, &(0x7f00000006c0)=""/237, 0x2d, 0xed, 0x1}, 0x28) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 1.943127138s ago: executing program 2 (id=3028): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x4030582b, 0x0) syz_clone(0x15209100, 0x0, 0x0, 0x0, 0x0, 0x0) socket$kcm(0xa, 0x5, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0xf, &(0x7f0000000900)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000bf0200000000000085000000cc000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x104007, 0xac5d, 0x0, 0x0, 0x10001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r3, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000700)=[{&(0x7f0000001040)="5346f7f875528ef2", 0x8}], 0x1, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x26}, @loopback}}}], 0x20}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4a82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c000, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r5 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r6 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(r6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[], 0x1458}, 0x240048c0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0700000004000000000100000400000020000000", @ANYRES32=0x1, @ANYBLOB="a0fb1bcf516a54e898fb96d2100000000000000000000000010000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/24], 0x50) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @const={0x0, 0x0, 0x0, 0xb}, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x3e}, 0x20) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xffffff58, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020027000b35d25a806f8c6394f90224fc602f1b01000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 1.863964682s ago: executing program 0 (id=3038): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x2}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000680)=@generic={&(0x7f0000000640)='./file0\x00', r2}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) r4 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x4e22, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x2004fc10) close(r4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x8020) r8 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r8, 0x6, 0x17, &(0x7f0000000200)=r8, 0x21) ioctl$TUNSETOFFLOAD(r7, 0x400454d0, 0x11) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x3}, 0x50) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000300)={0xffffffffffffffff, 0x7}, 0xc) r12 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000380)=@generic={&(0x7f0000000340)='./file0\x00', 0x0, 0x12a62b43335bf5ac}, 0x18) r13 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0xc97d, 0x0, 0x1, 0x8906, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x2}, 0x50) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="050000000500", @ANYRES32, @ANYRES32=0x0, @ANYBLOB='\x00'/27], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000180)="ff5fb99772024dca4128654351fb32", 0x800, r14}, 0x38) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r16 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000480)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x68, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x3}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x18, &(0x7f0000000100)=@raw=[@generic={0x4, 0x6, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x3}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x6}, @tail_call={{0x18, 0x2, 0x1, 0x0, r7}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r9}}, @jmp={0x5, 0x1, 0x1, 0xa, 0xa, 0x100, 0xffffffffffffffff}], &(0x7f0000000200)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x4, 0xf, 0x5d5b, 0x8000}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000500)=[r0, r10, r11, r12, r13, r14, r15, r16], &(0x7f0000000540)=[{0x3, 0x4, 0x6}, {0x4, 0x5, 0xf, 0x3}, {0x0, 0x1, 0x2, 0x5}], 0x10, 0xd}, 0x94) 1.863094552s ago: executing program 1 (id=3030): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008020000e6aea67d", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000045000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0xf0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008020000e6aea67d", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000045000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0xf0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) 1.600128046s ago: executing program 4 (id=3031): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000029006bcd9e3fe3dc4e48aa31086b8703290000001f00000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63ae", 0xb}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890b, &(0x7f0000000000)) socket$kcm(0x29, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0xb, &(0x7f0000000080)=@framed={{}, [@printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}]}, &(0x7f0000000040)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r3, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) r5 = socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xa}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r6, @ANYBLOB="0000000002000000b70500000800000085000000c200000095"], &(0x7f0000000300)='GPL\x00', 0x6, 0x1013, &(0x7f0000000a40)=""/4115, 0x0, 0x70, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x21) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001fc0)={0x1, 0x58, &(0x7f0000001f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000002080)={0x0, 0x1, 0x8}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002180)={0x18, 0xc, &(0x7f0000001dc0)=@raw=[@printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5}, @jmp={0x5, 0x0, 0xa, 0x5, 0x2, 0x100, 0xfffffffffffffff0}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], &(0x7f0000001e40)='syzkaller\x00', 0x80000000, 0x82, &(0x7f0000001e80)=""/130, 0x41000, 0x9, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000002000)={0x1ff, 0x2}, 0x8, 0x10, &(0x7f0000002040)={0x2, 0xc, 0x1ff, 0x3}, 0x10, 0x0, 0x0, 0x8, &(0x7f00000020c0)=[r6, r6, r8], &(0x7f0000002100)=[{0x1, 0x1, 0x7, 0x1}, {0x4, 0x4, 0x1, 0x7}, {0x2, 0x2, 0x6, 0x6}, {0x0, 0x2, 0xb}, {0x0, 0x1, 0xc, 0x3}, {0x2, 0x5, 0xe, 0x17}, {0x200, 0x4, 0x8, 0x5}, {0x5, 0x1, 0x1, 0xa}], 0x10, 0x2}, 0x94) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@typedef={0x7, 0x0, 0x0, 0x8, 0x4}]}, {0x0, [0x0]}}, &(0x7f0000000440)=""/36, 0x27, 0x24, 0x1, 0x8}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xb, 0x5, &(0x7f0000000200)=@raw=[@func, @map_val={0x18, 0x5, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x1}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x1}], &(0x7f0000000240)='syzkaller\x00', 0x9, 0x47, &(0x7f0000000280)=""/71, 0x60600, 0x20, '\x00', r7, @fallback=0x3, r9, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540)={0x2, 0x6, 0x1, 0x6}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r4, r4, r2, r5, r4], 0x0, 0x10, 0x3}, 0x94) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000004) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x9, 0x3, 0x9, 0x1, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x4, 0xa}, 0x50) setsockopt$sock_attach_bpf(r11, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) close(r11) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000021c0)={r2, &(0x7f00000011c0)="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"}, 0x20) 1.426031765s ago: executing program 1 (id=3032): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0x9, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r0}, 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={r2, 0xe0, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000640)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000680), &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xdc, &(0x7f0000000700), 0x0, 0x10, &(0x7f0000000840), 0x0, 0x0, 0x4c, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x2000000000000063, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000fc07ffff0000000000000000850000004100000085000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r3, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', r3, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000078850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000003800000038000000040000000200000000000011f3ff0000ffffffff000000000000000200000000020000000000001202000000020000000000000e030000010000000000006100"], 0x0, 0x54}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYRESHEX=r0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70200002bfb0000850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0xfc, 0xfd, 0x0, 0x0, 0x1001, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0xca, 0x0, 0x2, 0xffffffffffffff81, 0x3}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2020) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) write$cgroup_subtree(r9, &(0x7f0000000200)=ANY=[], 0x12) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0x2a979d) 1.251503184s ago: executing program 4 (id=3033): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r0, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0/file0\x00', 0x116) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="130000000a0000000500000007000000c1000000", @ANYRES32, @ANYBLOB="0200000000000000000000080000000000000411f533679cbe542c0c8c", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000100), 0x3f, r1}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f0000000280)=""/255}, 0x20) r2 = syz_clone(0x20900000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x24000044) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb01001800000000000000500000005000000002000000000000000300000d0000000000000000000000000b000000000000000600000003000000000000000000000d000000000000000001000013040000007f4adfa0"], &(0x7f0000000c00)=""/253, 0x6a, 0xfd, 0x1}, 0x28) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x18, 0x0, 0x2) r4 = openat$cgroup_procs(r3, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000005c0)=r2, 0x12) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r0, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0xa, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x66, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0xcf, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x200000000000, 0x80420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x11, 0x200000000000002, 0x300) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x1f4, 0xe, 0x0, &(0x7f0000000940)="ff412f66b083dcc1010b3efc88ca", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x6}, 0x50) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) 1.232512935s ago: executing program 2 (id=3034): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x6, 0x8, 0x8, 0x40}, 0x50) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x5, &(0x7f0000000580)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x86}, 0x94) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) r2 = socket$kcm(0x11, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x4, 0x8f, &(0x7f00000001c0)=""/143}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000000c0)=r2, 0x8) socket$kcm(0xa, 0x922000000003, 0x11) socket$kcm(0xa, 0x922000000003, 0x11) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r3, 0x2401, 0xc35) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x11, 0xa, 0x300) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000000), 0x4) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r5, &(0x7f0000000040)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2}, 0x80, &(0x7f0000000140)=[{&(0x7f00000006c0)="62042700920101000001ad2f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a710292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9a4de33", 0xda}, {&(0x7f0000000c00)="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", 0x114}, {&(0x7f0000000a40)="0a985d7879f1bbff16c7d66e33657e452299fd0ef8c2afda588eb05891b7da030e01452a7986bea19b59c98dc2996c0ea09604d00ea48336d0c813d83025aca8623a5915ddddce2c11c5e374f2e0f387d2398fe0b899ff60dc7a73addcf253cf32aafbe2b9f90799e7fc583bdd9b564697ba988080270bdceb4714219a2d4c229fffb0d86fb286e3553a8b3ac02badc66ada5fceabe5f63c79da96e641a45901128063d6e1e31b11bcfbc3e70bd3c8c6c0be9f653f977f16", 0xfff0}, {&(0x7f0000000840)="6f4720baeb54", 0x6}], 0x4}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0600efff030000000c000400000000000000850000ffa0f83d2ea5fc64e1e74388ca272c96fe814edfaa5de00e4bbae5a158bba9bb8269730fc0bd609a01b1d6d90184ca88c7cea75ab1", @ANYRESOCT=r0, @ANYRES32=r1, @ANYRES16=r0, @ANYRES16=r1, @ANYRES16=r0], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r6}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000440)=@framed={{}, [@alu={0x7, 0x1, 0x5, 0x1, 0x5, 0x50, 0x8}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0x3) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x85, 0x1, 0x0, 0x0, 0x0, 0x2, 0x20022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x9, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.049119305s ago: executing program 1 (id=3035): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000030000000300000000c4000000400000001000084020000000a0000000300000000000001010000000000000700000000000000000000000b02000000006100302e61306161616100"], 0x0, 0x54}, 0x28) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b904021d080201000000120000a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x28, 0x0, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632f77fb080600017f020001be3e7d2a182f", 0x0, 0x104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@o_path={&(0x7f0000000100)='./file0\x00'}, 0x18) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080010000000e8fe55a1180015000600142603600e120500210000000401a8001600a400014020000300036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x4, 0x0, 0x1000, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="5c00000014006b030231a6080c000af32c00000000f800250502000f00e5aa000017d34460bc24eab556bd05251e6182949a2756f475ce36c2d13b48df000000000000ecb8f6ec63c9f4d4938037e786a6d1bdd700e6657594f1817d", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r4 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39c}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r4}, 0x8) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) r7 = socket$kcm(0x2, 0x5, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r8, 0x400454d1, &(0x7f00000000c0)={0x0, 0x0}) setsockopt$sock_attach_bpf(r7, 0x1, 0x3e, &(0x7f00000002c0)=r6, 0x4) sendmsg$inet(r7, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1}, 0x3e8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[], 0x0, 0x26}, 0x28) 864.393185ms ago: executing program 0 (id=3036): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x6, 0x8}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200000000df00850000008600000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000006c0)={@cgroup, 0x32, 0x1, 0xe18d, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000740)={0x1, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000900)=ANY=[@ANYRES32=r0, @ANYRES32=r3, @ANYBLOB="0f0000002c20000000000000", @ANYRES32=r5, @ANYBLOB="a32fca0a89237e8ecb1b075ce3e5718bf0e3624c7f6cf789667755a8fea8e5807a606b7a55ee27393a51e1f3319f5e59adc7cd241c660cd05f04fced88be6c5a855554afe7e70cbac96c3877fb85a0affba60bf5c3a71b8c6e97bccca8e30f9537ababcd7f0d766930581fedafdf31d6b1", @ANYRES64=r4], 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) sendmsg$inet(r7, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x4800) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x4, 0x1, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x8, 0x1, 0x4000004, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r9, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r10}, 0x94) getpid() r12 = socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000a80)="3c00000033000b12d25a80648c2594f90124fc60100c03400200000000200cbb9215a2281cf6b809f2db60490d20a735b16b6a44799406db26a57b35", 0x3c}], 0x1}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r11, 0x0, 0x0}, 0x10) r13 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="1400000027000b6c8cff001b0529fc60082fc569", 0x14}], 0x1}, 0x400c0c4) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007baaf8ff00000000b7"], 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x34, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r14, 0x2f, 0x10, 0x0, &(0x7f0000000640)="c1dfb080cd21d308098e002f88a87e22", 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 422.107238ms ago: executing program 2 (id=3037): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xa, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x98}}, &(0x7f0000000000)='GPL\x00'}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000200)={r1}, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r2) 199.46128ms ago: executing program 4 (id=3039): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r3}, &(0x7f0000000280), &(0x7f0000000240)=r0}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 4 (id=3040): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x8001, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_devices(r2, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000140)=ANY=[@ANYBLOB='b *:4\tmw'], 0xa) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="864ed9", 0x3}, {&(0x7f0000000ac0)="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", 0x5d}, {&(0x7f0000000a40)="64a3600fea4153c2a6ec5cb908662e80d7991735f75e2c53c2f0d1424a7a3ff692545e225223051b120249b23fc05f677ce3f4b33fb1dd8498566bdee14517a82f1687c5242018cc66079f4b", 0x4c}, {&(0x7f0000000640)="43846831ed61f31307e79d687aeae3542998245ffa386ad62985531f83001e736e30ea2822e900786b35e5c9eb", 0x4b}], 0x4}, 0x80) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = socket$kcm(0x21, 0x2, 0x2) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x208}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r7, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000200)=r8}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r9, 0xffffffffffffffff}, &(0x7f0000000180)=0x20000, &(0x7f00000001c0)=r8}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r10}, &(0x7f0000000040), &(0x7f0000000500)=r8}, 0x20) setsockopt$sock_attach_bpf(r6, 0x110, 0x4, 0x0, 0x4) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x0, 0xf, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee688884746", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000740)={{r1}, &(0x7f0000000580), &(0x7f00000005c0)='%-5lx \x00'}, 0x20) (async) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000966a07123e37f5810000eeffffff", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0xf, &(0x7f0000000780)=ANY=[@ANYBLOB="000a00edff000000004b8a3b5437", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000", @ANYRESDEC=r0], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r13 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r13, 0x1, 0x32, &(0x7f0000000900)=r12, 0x4) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f0000000280)='GPL\x00'}, 0x94) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup/syz0\x00', 0x1ff) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) kernel console output (not intermixed with test programs): over after parsing attributes in process `syz.2.1218'. [ 261.729380][ T8496] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.1223'. [ 261.820347][ T8496] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 261.919564][ T4467] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 262.393117][ T8503] tap0: tun_chr_ioctl cmd 1074025677 [ 262.406598][ T8503] tap0: linktype set to 0 [ 262.656024][ T8514] netlink: 'syz.2.1229': attribute type 22 has an invalid length. [ 262.693847][ T8514] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1229'. [ 262.724838][ T4286] Bluetooth: hci2: hcon ffff88802578e000 sent 0 < count 65535 [ 262.871963][ T8517] netlink: 'syz.0.1231': attribute type 10 has an invalid length. [ 267.352522][ T8561] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1245'. [ 267.464890][ T8564] netlink: 'syz.1.1247': attribute type 10 has an invalid length. [ 267.590191][ T8562] netlink: 'syz.4.1245': attribute type 4 has an invalid length. [ 267.603917][ T8562] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1245'. [ 267.681331][ T8562] .`: renamed from bond0 [ 267.777776][ T8566] netlink: 'syz.0.1248': attribute type 10 has an invalid length. [ 268.452926][ T8584] netlink: 'syz.2.1252': attribute type 10 has an invalid length. [ 268.907817][ T8613] netlink: 'syz.3.1263': attribute type 21 has an invalid length. [ 268.930849][ T8613] netlink: 'syz.3.1263': attribute type 4 has an invalid length. [ 269.189159][ T8619] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.1265'. [ 269.689133][ T8619] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 269.795556][ T8618] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1264'. [ 269.836325][ T8618] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1264'. [ 271.166024][ T8647] netlink: 'syz.3.1273': attribute type 10 has an invalid length. [ 271.468213][ T8652] netlink: 'syz.4.1275': attribute type 2 has an invalid length. [ 271.659697][ T8652] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1275'. [ 271.679167][ T8658] netlink: 'syz.4.1275': attribute type 10 has an invalid length. [ 271.960808][ T8666] netlink: 'syz.4.1278': attribute type 29 has an invalid length. [ 272.686236][ T8680] validate_nla: 1 callbacks suppressed [ 272.686252][ T8680] netlink: 'syz.0.1281': attribute type 4 has an invalid length. [ 272.754150][ T8680] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1281'. [ 272.807224][ T8680] .`: renamed from bond0 [ 273.263078][ T8695] netlink: 61211 bytes leftover after parsing attributes in process `syz.3.1287'. [ 273.417157][ T4286] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 273.463162][ T4286] Bluetooth: hci1: ISO packet for unknown connection handle 51 [ 273.817314][ T8714] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1292'. [ 274.610516][ T8717] netlink: 'syz.1.1295': attribute type 13 has an invalid length. [ 275.085131][ T4286] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 275.092937][ T4286] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:0' [ 275.103116][ T4286] CPU: 1 PID: 4286 Comm: kworker/u5:7 Not tainted syzkaller #0 [ 275.110729][ T4286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 275.120840][ T4286] Workqueue: hci4 hci_rx_work [ 275.125583][ T4286] Call Trace: [ 275.128911][ T4286] [ 275.131887][ T4286] dump_stack_lvl+0x188/0x24e [ 275.136642][ T4286] ? show_regs_print_info+0x12/0x12 [ 275.141891][ T4286] ? load_image+0x400/0x400 [ 275.146463][ T4286] sysfs_create_dir_ns+0x26a/0x290 [ 275.151617][ T4286] ? sysfs_warn_dup+0xa0/0xa0 [ 275.156367][ T4286] ? do_raw_spin_unlock+0x11d/0x230 [ 275.161600][ T4286] kobject_add_internal+0x61c/0xcc0 [ 275.166847][ T4286] kobject_add+0x160/0x230 [ 275.171312][ T4286] ? kobject_init+0x1d0/0x1d0 [ 275.176046][ T4286] ? klist_children_get+0x50/0x50 [ 275.181111][ T4286] ? get_device_parent+0x121/0x3f0 [ 275.186259][ T4286] device_add+0x483/0xfb0 [ 275.190619][ T4286] ? kmem_cache_free+0xf7/0x290 [ 275.195541][ T4286] hci_conn_add_sysfs+0xd1/0x1e0 [ 275.200524][ T4286] le_conn_complete_evt+0x1062/0x1670 [ 275.205938][ T4286] ? le_conn_complete_evt+0xe9/0x1670 [ 275.211360][ T4286] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 275.217641][ T4286] ? bt_info+0x180/0x180 [ 275.221923][ T4286] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 275.227599][ T4286] ? skb_pull_data+0xf7/0x200 [ 275.232316][ T4286] hci_le_conn_complete_evt+0x183/0x440 [ 275.237907][ T4286] ? hci_remote_host_features_evt+0x270/0x270 [ 275.244007][ T4286] hci_event_packet+0x7b9/0x1280 [ 275.248994][ T4286] ? bis_list+0x280/0x280 [ 275.253352][ T4286] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 275.259282][ T4286] ? kcov_remote_start+0x4c7/0x7e0 [ 275.264425][ T4286] ? patch_conexant_auto+0x1260/0x1650 [ 275.269927][ T4286] ? hci_send_to_monitor+0x9c/0x4a0 [ 275.275162][ T4286] hci_rx_work+0x3eb/0xd40 [ 275.279617][ T4286] ? _raw_spin_unlock+0x40/0x40 [ 275.284507][ T4286] ? process_one_work+0x7b0/0x1160 [ 275.289652][ T4286] process_one_work+0x8a2/0x1160 [ 275.294665][ T4286] ? worker_detach_from_pool+0x240/0x240 [ 275.300360][ T4286] ? _raw_spin_lock_irq+0xb7/0xf0 [ 275.305416][ T4286] ? _raw_spin_lock_irqsave+0x100/0x100 [ 275.310990][ T4286] ? kthread_data+0x4b/0xc0 [ 275.315542][ T4286] worker_thread+0xaa2/0x1270 [ 275.320284][ T4286] kthread+0x29d/0x330 [ 275.324376][ T4286] ? worker_clr_flags+0x1a0/0x1a0 [ 275.329427][ T4286] ? kthread_blkcg+0xd0/0xd0 [ 275.334044][ T4286] ret_from_fork+0x1f/0x30 [ 275.338510][ T4286] [ 275.347603][ T4286] kobject_add_internal failed for hci4:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 275.360751][ T4286] Bluetooth: hci4: failed to register connection device [ 275.444008][ T4286] Bluetooth: hci4: command 0x2016 tx timeout [ 275.722249][ T8754] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1303'. [ 275.764430][ T8754] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1303'. [ 275.793003][ T8762] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1303'. [ 275.815834][ T8754] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1303'. [ 276.370338][ T8782] netlink: 'syz.3.1312': attribute type 21 has an invalid length. [ 276.832179][ T8793] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1317'. [ 276.868693][ T8793] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1317'. [ 276.886446][ T8789] netlink: 'syz.2.1314': attribute type 10 has an invalid length. [ 276.944533][ T4286] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 277.209531][ T8803] netlink: 'syz.3.1320': attribute type 10 has an invalid length. [ 277.242474][ T8803] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1320'. [ 277.524052][ T4286] Bluetooth: hci4: command 0x2016 tx timeout [ 278.052477][ T8823] netlink: 'syz.2.1325': attribute type 21 has an invalid length. [ 278.963829][ T4286] Bluetooth: hci3: command 0x2016 tx timeout [ 279.274141][ T8843] netlink: 'syz.2.1332': attribute type 10 has an invalid length. [ 279.282805][ T8848] netlink: 'syz.1.1333': attribute type 2 has an invalid length. [ 279.319150][ T8848] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1333'. [ 279.342827][ T8848] netlink: 'syz.1.1333': attribute type 10 has an invalid length. [ 279.720242][ T8868] netlink: 194236 bytes leftover after parsing attributes in process `syz.4.1338'. [ 279.854726][ T8868] netlink: zone id is out of range [ 279.860232][ T8868] netlink: zone id is out of range [ 279.931543][ T8868] netlink: zone id is out of range [ 280.036396][ T8868] netlink: zone id is out of range [ 280.132495][ T8868] netlink: zone id is out of range [ 280.261765][ T8868] netlink: zone id is out of range [ 280.367122][ T8868] netlink: get zone limit has 8 unknown bytes [ 281.449875][ T8892] netlink: 'syz.4.1350': attribute type 10 has an invalid length. [ 282.058834][ T8920] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1358'. [ 282.478513][ T8930] netlink: 'syz.2.1363': attribute type 1 has an invalid length. [ 282.567231][ T8930] netlink: 112865 bytes leftover after parsing attributes in process `syz.2.1363'. [ 282.697593][ T8932] netlink: 'syz.3.1365': attribute type 10 has an invalid length. [ 282.731349][ T8935] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 282.741703][ T8935] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 282.767014][ T8935] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 282.779324][ T8935] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 283.711041][ T8964] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1374'. [ 284.129348][ T8980] netlink: 'syz.0.1378': attribute type 39 has an invalid length. [ 284.581966][ T8989] netlink: 'syz.0.1383': attribute type 10 has an invalid length. [ 284.658760][ T8993] pimreg: tun_chr_ioctl cmd 2147767520 [ 285.755803][ T9027] netlink: 'syz.1.1397': attribute type 10 has an invalid length. [ 288.051488][ T9075] netlink: 'syz.1.1411': attribute type 10 has an invalid length. [ 288.525684][ T9082] device syzkaller0 entered promiscuous mode [ 288.558747][ T9090] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.1417'. [ 288.613711][ T9085] netlink: 'syz.3.1417': attribute type 10 has an invalid length. [ 289.317740][ T9103] netlink: 154020 bytes leftover after parsing attributes in process `syz.3.1420'. [ 289.422614][ T9103] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 289.443411][ T9111] netlink: 'syz.4.1421': attribute type 16 has an invalid length. [ 289.540194][ T9111] netlink: 'syz.4.1421': attribute type 4 has an invalid length. [ 289.587857][ T9111] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1421'. [ 291.320712][ T9097] netlink: 14548 bytes leftover after parsing attributes in process `syz.3.1420'. [ 291.349530][ T9120] netlink: 'syz.0.1425': attribute type 10 has an invalid length. [ 291.782267][ T9140] netlink: 'syz.1.1432': attribute type 3 has an invalid length. [ 291.827642][ T9140] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1432'. [ 291.889308][ T9140] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1432'. [ 292.241094][ T9155] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1436'. [ 292.967344][ T9166] netlink: 'syz.4.1439': attribute type 10 has an invalid length. [ 293.223098][ T9178] netlink: 'syz.1.1445': attribute type 3 has an invalid length. [ 293.272063][ T9180] netlink: 'syz.4.1446': attribute type 27 has an invalid length. [ 293.283827][ T9178] netlink: 118424 bytes leftover after parsing attributes in process `syz.1.1445'. [ 293.298134][ T9180] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1446'. [ 293.356921][ T2970] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 294.736764][ T9210] netlink: 'syz.1.1456': attribute type 10 has an invalid length. [ 294.753631][ T9213] netlink: 'syz.2.1455': attribute type 10 has an invalid length. [ 294.809500][ T9213] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 294.821585][ T9213] .`: (slave batadv0): Enslaving as an active interface with an up link [ 295.002210][ T9220] netlink: 'syz.3.1460': attribute type 10 has an invalid length. [ 296.142786][ T9250] netlink: 'syz.0.1472': attribute type 10 has an invalid length. [ 299.099440][ T9271] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1478'. [ 299.562049][ T9297] netlink: 'syz.0.1484': attribute type 39 has an invalid length. [ 299.898581][ T9301] netlink: 'syz.1.1488': attribute type 10 has an invalid length. [ 300.562488][ T9326] netlink: 'syz.3.1495': attribute type 3 has an invalid length. [ 300.637457][ T9326] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1495'. [ 300.685837][ T9326] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 301.191067][ T9359] netlink: 'syz.0.1500': attribute type 10 has an invalid length. [ 302.167689][ T9407] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.1512'. [ 302.189442][ T9407] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 302.243280][ T9409] netlink: 'syz.1.1513': attribute type 27 has an invalid length. [ 302.267857][ T9409] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1513'. [ 302.388673][ T9409] netlink: 'syz.1.1513': attribute type 10 has an invalid length. [ 302.440678][ T9409] device wlan1 left promiscuous mode [ 302.580978][ T9409] team0: Port device wlan1 added [ 302.649404][ T9423] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1517'. [ 302.777342][ T9419] netlink: 'syz.4.1516': attribute type 10 has an invalid length. [ 303.735993][ T9450] netlink: 'syz.4.1526': attribute type 3 has an invalid length. [ 303.782932][ T9450] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1526'. [ 304.401405][ T9476] netlink: 'syz.0.1533': attribute type 10 has an invalid length. [ 304.476285][ T9475] netlink: 'syz.3.1532': attribute type 10 has an invalid length. [ 304.874066][ T9496] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1540'. [ 305.075458][ T9502] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.1542'. [ 306.710161][ T9559] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1562'. [ 308.183703][ T9587] C: renamed from team_slave_0 [ 308.241935][ T9587] netlink: 'syz.4.1569': attribute type 3 has an invalid length. [ 308.255822][ T9587] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1569'. [ 308.289345][ T9587] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 308.334826][ T9593] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1571'. [ 308.962561][ T9610] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1578'. [ 308.982340][ T9610] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1578'. [ 309.795336][ T9638] netlink: 'syz.4.1587': attribute type 7 has an invalid length. [ 310.494881][ T9654] netlink: 'syz.1.1593': attribute type 29 has an invalid length. [ 310.525521][ T9654] netlink: 'syz.1.1593': attribute type 29 has an invalid length. [ 310.535916][ T9656] netlink: 'syz.1.1593': attribute type 29 has an invalid length. [ 311.523026][ T9674] netlink: 14463 bytes leftover after parsing attributes in process `syz.3.1596'. [ 311.638614][ T9668] netlink: 'syz.2.1597': attribute type 10 has an invalid length. [ 312.037934][ T9686] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1602'. [ 312.132573][ T9691] netlink: 'syz.3.1603': attribute type 15 has an invalid length. [ 312.156396][ T9691] netlink: 'syz.3.1603': attribute type 7 has an invalid length. [ 312.435409][ T9707] netlink: 'syz.4.1607': attribute type 10 has an invalid length. [ 312.577974][ T9712] netlink: 'syz.1.1608': attribute type 10 has an invalid length. [ 312.603533][ T9712] device netdevsim0 entered promiscuous mode [ 314.807242][ T9769] netlink: 'syz.2.1626': attribute type 13 has an invalid length. [ 314.825733][ T9769] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1626'. [ 314.891733][ T9769] syz_tun: refused to change device tx_queue_len [ 314.933031][ T9769] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 315.020246][ T9770] -1: renamed from syzkaller0 [ 315.277160][ T9782] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.1629'. [ 315.951311][ T9803] netlink: 'syz.3.1635': attribute type 2 has an invalid length. [ 316.142029][ T9812] netlink: 'syz.0.1641': attribute type 21 has an invalid length. [ 317.048589][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.055008][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.823143][ T9855] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1649'. [ 318.893943][ T9888] netlink: 14463 bytes leftover after parsing attributes in process `syz.1.1659'. [ 318.991267][ T9890] netlink: 'syz.4.1661': attribute type 39 has an invalid length. [ 319.269641][ T9894] netlink: 'syz.3.1662': attribute type 3 has an invalid length. [ 319.349524][ T9894] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1662'. [ 319.417317][ T9894] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 320.136664][ T9907] netlink: 'syz.1.1667': attribute type 3 has an invalid length. [ 320.196659][ T9907] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1667'. [ 320.230745][ T9908] netlink: 'syz.1.1667': attribute type 21 has an invalid length. [ 320.278546][ T9908] netlink: 'syz.1.1667': attribute type 5 has an invalid length. [ 320.825197][ T9920] netlink: 'syz.4.1671': attribute type 10 has an invalid length. [ 320.982452][ T9926] netlink: 'syz.1.1672': attribute type 16 has an invalid length. [ 320.997521][ T9926] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1672'. [ 321.130823][ T9921] device pimreg0 entered promiscuous mode [ 322.150562][ T9949] netlink: 'syz.0.1681': attribute type 10 has an invalid length. [ 322.355376][ T9947] netlink: 14463 bytes leftover after parsing attributes in process `syz.4.1678'. [ 322.983256][ T9964] netlink: 'syz.0.1686': attribute type 10 has an invalid length. [ 323.618365][ T9980] netlink: 'syz.2.1690': attribute type 21 has an invalid length. [ 323.657843][ T9980] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1690'. [ 323.719841][ T9980] netlink: 'syz.2.1690': attribute type 5 has an invalid length. [ 323.803160][ T9980] netlink: 'syz.2.1690': attribute type 6 has an invalid length. [ 323.848042][ T9980] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1690'. [ 324.396256][ T9360] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 324.520209][ T9999] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1697'. [ 325.832898][T10022] netlink: 'syz.1.1702': attribute type 10 has an invalid length. [ 326.051899][T10028] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1716'. [ 327.056098][T10057] netlink: 105084 bytes leftover after parsing attributes in process `syz.4.1710'. [ 327.169097][T10057] netlink: 31 bytes leftover after parsing attributes in process `syz.4.1710'. [ 327.634268][T10081] netlink: 'syz.3.1721': attribute type 29 has an invalid length. [ 328.033127][T10090] netlink: 'syz.4.1724': attribute type 30 has an invalid length. [ 329.343293][T10119] netlink: 'syz.1.1734': attribute type 29 has an invalid length. [ 330.906330][T10154] netlink: 'syz.4.1744': attribute type 3 has an invalid length. [ 330.919556][T10154] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1744'. [ 330.931185][T10154] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 331.515307][T10162] netlink: 'syz.2.1747': attribute type 29 has an invalid length. [ 331.902284][T10171] netlink: 'syz.1.1750': attribute type 11 has an invalid length. [ 331.910713][T10171] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1750'. [ 331.962258][T10174] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 332.240341][T10182] netlink: 'syz.0.1753': attribute type 21 has an invalid length. [ 332.270114][T10180] netlink: 65027 bytes leftover after parsing attributes in process `syz.2.1754'. [ 332.812507][T10192] netlink: 'syz.0.1767': attribute type 27 has an invalid length. [ 332.986116][T10192] .`: (slave bond_slave_0): Releasing backup interface [ 333.476014][T10223] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1762'. [ 333.814246][T10231] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1766'. [ 335.341385][T10277] netlink: 16375 bytes leftover after parsing attributes in process `syz.0.1783'. [ 335.392580][T10281] netlink: 'syz.3.1784': attribute type 1 has an invalid length. [ 335.420693][T10281] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1784'. [ 335.557638][T10289] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.1786'. [ 335.618537][T10290] netlink: 1034 bytes leftover after parsing attributes in process `syz.4.1786'. [ 335.783611][T10295] device syzkaller0 entered promiscuous mode [ 335.820592][T10294] netlink: 'syz.3.1788': attribute type 3 has an invalid length. [ 335.844056][T10294] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1788'. [ 335.856352][T10294] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 335.953048][T10301] netlink: 'syz.4.1790': attribute type 21 has an invalid length. [ 336.559084][T10324] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1797'. [ 337.816784][T10322] netlink: 'syz.2.1797': attribute type 7 has an invalid length. [ 337.833983][T10323] netlink: 'syz.3.1796': attribute type 10 has an invalid length. [ 337.846240][T10324] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1797'. [ 338.156851][T10338] netlink: 'syz.3.1802': attribute type 3 has an invalid length. [ 338.172638][T10338] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1802'. [ 338.184008][T10338] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 338.883184][T10360] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1808'. [ 339.026530][T10371] netlink: 'syz.0.1812': attribute type 10 has an invalid length. [ 339.222261][T10376] netlink: 'syz.0.1814': attribute type 11 has an invalid length. [ 339.462930][T10386] netlink: 'syz.0.1818': attribute type 21 has an invalid length. [ 340.232527][T10409] sctp: [Deprecated]: syz.2.1822 (pid 10409) Use of struct sctp_assoc_value in delayed_ack socket option. [ 340.232527][T10409] Use struct sctp_sack_info instead [ 340.857003][T10422] netlink: 'syz.1.1829': attribute type 10 has an invalid length. [ 340.915540][T10425] netlink: 'syz.1.1829': attribute type 3 has an invalid length. [ 340.954986][T10425] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1829'. [ 340.976995][T10422] team0: Device wg1 is of different type [ 341.367496][T10431] netlink: 64019 bytes leftover after parsing attributes in process `syz.3.1832'. [ 342.443650][T10468] netlink: 'syz.3.1844': attribute type 3 has an invalid length. [ 342.458368][T10468] netlink: 16066 bytes leftover after parsing attributes in process `syz.3.1844'. [ 342.489944][T10462] can: request_module (can-proto-0) failed. [ 342.961309][T10480] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1847'. [ 343.011715][T10480] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1847'. [ 343.073148][T10476] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1847'. [ 343.160882][T10476] netlink: 'syz.3.1847': attribute type 10 has an invalid length. [ 343.217524][T10476] device bridge_slave_0 left promiscuous mode [ 343.294754][T10476] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.092193][T10510] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.1857'. [ 344.596806][T10527] netlink: 'syz.0.1862': attribute type 27 has an invalid length. [ 344.979373][T10543] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1866'. [ 345.035145][T10543] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1866'. [ 345.126565][T10537] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1866'. [ 345.177192][T10543] netlink: 'syz.2.1866': attribute type 10 has an invalid length. [ 345.204643][T10543] device team0 left promiscuous mode [ 345.213507][T10543] device team_slave_0 left promiscuous mode [ 345.226508][T10543] device team_slave_1 left promiscuous mode [ 345.237274][T10543] device bridge_slave_1 left promiscuous mode [ 345.248015][T10543] device wlan1 left promiscuous mode [ 345.280019][T10543] bridge0: port 3(team0) entered disabled state [ 345.348004][T10543] wlan1: mtu less than device minimum [ 345.367395][T10543] team0: Device wlan1 failed to change mtu [ 345.370941][T10543] .`: (slave team0): Error -22 calling dev_set_mtu [ 345.395966][T10537] device bridge_slave_0 left promiscuous mode [ 345.403470][T10537] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.006325][T10612] netlink: 'syz.4.1886': attribute type 10 has an invalid length. [ 348.112976][T10622] netlink: 'syz.3.1889': attribute type 2 has an invalid length. [ 348.141931][T10622] netlink: 'syz.3.1889': attribute type 9 has an invalid length. [ 348.172384][T10622] netlink: 'syz.3.1889': attribute type 10 has an invalid length. [ 348.188310][T10622] netlink: 'syz.3.1889': attribute type 11 has an invalid length. [ 348.199931][T10622] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1889'. [ 348.482596][T10632] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1890'. [ 348.510828][T10632] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1890'. [ 348.557158][T10636] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1893'. [ 348.717604][T10638] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1890'. [ 348.772519][T10626] netlink: 'syz.0.1890': attribute type 10 has an invalid length. [ 349.042125][T10626] 8021q: adding VLAN 0 to HW filter on device team0 [ 349.061479][T10626] .`: (slave team0): Enslaving as an active interface with an up link [ 349.109375][T10632] device bridge_slave_1 left promiscuous mode [ 349.127602][T10632] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.193361][T10632] device bridge_slave_0 left promiscuous mode [ 349.239730][T10632] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.539844][T10663] netlink: 'syz.1.1901': attribute type 10 has an invalid length. [ 352.416250][T10674] netlink: 'syz.1.1914': attribute type 10 has an invalid length. [ 352.772500][T10681] netlink: 'syz.0.1906': attribute type 153 has an invalid length. [ 352.784918][T10681] netlink: 69544 bytes leftover after parsing attributes in process `syz.0.1906'. [ 353.071285][T10692] netlink: 'syz.3.1909': attribute type 21 has an invalid length. [ 354.046754][T10711] netlink: 'syz.1.1916': attribute type 3 has an invalid length. [ 354.092811][T10711] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1916'. [ 354.129426][T10715] netlink: 'syz.0.1918': attribute type 10 has an invalid length. [ 354.219591][T10718] netlink: 'syz.4.1919': attribute type 10 has an invalid length. [ 355.417055][ T9352] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 355.970206][T10776] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1935'. [ 355.998401][T10776] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1935'. [ 356.401117][T10780] netlink: 'syz.2.1936': attribute type 10 has an invalid length. [ 356.669833][T10790] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.1938'. [ 356.886679][T10798] delete_channel: no stack [ 357.036549][T10804] netlink: 'syz.3.1944': attribute type 27 has an invalid length. [ 357.110322][T10804] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1944'. [ 359.125474][T10829] netlink: 'syz.3.1951': attribute type 27 has an invalid length. [ 359.153050][T10829] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1951'. [ 359.468100][T10843] netlink: 'syz.3.1957': attribute type 10 has an invalid length. [ 359.542651][T10843] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1957'. [ 359.634450][T10837] netlink: 'syz.0.1954': attribute type 10 has an invalid length. [ 360.103470][T10859] netlink: 'syz.0.1962': attribute type 21 has an invalid length. [ 360.124596][T10859] netlink: 'syz.0.1962': attribute type 1 has an invalid length. [ 360.568191][T10878] netlink: 'syz.0.1967': attribute type 3 has an invalid length. [ 360.588869][T10878] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1967'. [ 362.762061][T10914] netlink: 'syz.4.1981': attribute type 21 has an invalid length. [ 362.818607][T10914] netlink: 'syz.4.1981': attribute type 1 has an invalid length. [ 363.286415][T10936] netlink: 'syz.1.1986': attribute type 29 has an invalid length. [ 363.325670][T10936] netlink: 'syz.1.1986': attribute type 29 has an invalid length. [ 364.386810][T10971] validate_nla: 3 callbacks suppressed [ 364.386826][T10971] netlink: 'syz.0.1996': attribute type 33 has an invalid length. [ 364.464487][T10971] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1996'. [ 365.731939][T11002] netlink: 'syz.4.2005': attribute type 10 has an invalid length. [ 366.274045][T11018] netlink: 'syz.0.2010': attribute type 9 has an invalid length. [ 366.296294][T11018] netlink: 68280 bytes leftover after parsing attributes in process `syz.0.2010'. [ 367.167298][T11044] netlink: 'syz.4.2019': attribute type 10 has an invalid length. [ 367.812440][T11074] netlink: 'syz.4.2024': attribute type 10 has an invalid length. [ 367.866460][T11074] device hsr0 entered promiscuous mode [ 367.918392][T11074] .`: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 367.956333][T11074] .`: (slave hsr0): The slave device specified does not support setting the MAC address [ 368.055035][T11074] .`: (slave hsr0): Error -95 calling set_mac_address [ 368.447460][T11089] netlink: 'syz.4.2030': attribute type 3 has an invalid length. [ 368.473804][T11089] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2030'. [ 368.498699][T11089] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 368.731067][T11096] netlink: 154020 bytes leftover after parsing attributes in process `syz.4.2033'. [ 368.771106][T11096] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 370.078924][T11107] netlink: 'syz.1.2035': attribute type 3 has an invalid length. [ 370.163942][T11107] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2035'. [ 370.203285][T11105] netlink: 'syz.4.2034': attribute type 10 has an invalid length. [ 370.635378][T11122] netlink: 'syz.0.2040': attribute type 21 has an invalid length. [ 370.653845][T11121] netlink: 'syz.2.2039': attribute type 2 has an invalid length. [ 370.680081][T11121] netlink: 'syz.2.2039': attribute type 8 has an invalid length. [ 370.703853][T11121] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2039'. [ 371.200390][T11144] netlink: 'syz.4.2046': attribute type 10 has an invalid length. [ 371.254174][T11144] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2046'. [ 371.362550][T11147] device syzkaller0 entered promiscuous mode [ 373.844589][T11164] netlink: 'syz.0.2051': attribute type 10 has an invalid length. [ 373.854245][T11166] netlink: 'syz.4.2053': attribute type 3 has an invalid length. [ 373.862016][T11166] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2053'. [ 373.872568][T11166] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 374.646668][T11213] netlink: 'syz.0.2066': attribute type 12 has an invalid length. [ 374.683942][T11213] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2066'. [ 375.166050][T11232] netlink: 'syz.4.2070': attribute type 3 has an invalid length. [ 375.243967][T11237] netlink: 16410 bytes leftover after parsing attributes in process `syz.4.2070'. [ 375.301695][T11238] netlink: 'syz.0.2072': attribute type 10 has an invalid length. [ 375.336156][T11232] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2070'. [ 375.475544][T11240] netlink: 154788 bytes leftover after parsing attributes in process `syz.3.2073'. [ 375.490992][T11240] openvswitch: netlink: Message has 48126 unknown bytes. [ 376.189957][T11260] netlink: 17267 bytes leftover after parsing attributes in process `syz.3.2079'. [ 376.322830][T11269] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2080'. [ 376.481539][T11273] netlink: 'syz.2.2084': attribute type 10 has an invalid length. [ 377.793585][T11307] netlink: 'syz.2.2094': attribute type 10 has an invalid length. [ 378.009316][T11314] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.2096'. [ 378.337313][T11307] team0 (unregistering): Port device team_slave_0 removed [ 378.489084][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.496945][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.531413][T11307] team0 (unregistering): Port device team_slave_1 removed [ 378.641740][T11307] team0 (unregistering): Port device bridge_slave_1 removed [ 378.719036][T11307] team0 (unregistering): Port device wlan1 removed [ 378.808925][T11327] can: request_module (can-proto-0) failed. [ 378.878963][T11314] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 378.923816][T11314] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 378.933456][T11314] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 378.953987][T11325] netlink: 'syz.3.2098': attribute type 3 has an invalid length. [ 378.962156][T11325] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2098'. [ 379.070736][T11325] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 379.275414][T11337] netlink: 'syz.4.2102': attribute type 41 has an invalid length. [ 379.283331][T11337] netlink: 'syz.4.2102': attribute type 41 has an invalid length. [ 379.405104][T11337] netlink: 'syz.4.2102': attribute type 2 has an invalid length. [ 379.452444][T11337] device 0 entered promiscuous mode [ 379.479563][T11346] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2105'. [ 380.043150][T11361] netlink: 'syz.0.2112': attribute type 10 has an invalid length. [ 380.565537][T11361] .`: (slave team0): Releasing backup interface [ 381.017123][T11361] team0 (unregistering): Port device team_slave_0 removed [ 381.121900][T11361] team0 (unregistering): Port device team_slave_1 removed [ 381.196244][T11383] C: renamed from team_slave_0 [ 381.203455][T11383] netlink: 'syz.2.2116': attribute type 3 has an invalid length. [ 381.232343][T11383] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2116'. [ 381.268344][T11383] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 381.498555][T11399] delete_channel: no stack [ 382.288543][T11430] netlink: 'syz.4.2131': attribute type 3 has an invalid length. [ 382.348146][T11430] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2131'. [ 382.446809][T11430] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 382.996065][T11445] netlink: 'syz.4.2135': attribute type 10 has an invalid length. [ 383.290124][T11465] netlink: 'syz.4.2141': attribute type 12 has an invalid length. [ 383.298562][T11465] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2141'. [ 383.311631][T11465] netlink: 5 bytes leftover after parsing attributes in process `syz.4.2141'. [ 383.331067][T11465] netlink: 'syz.4.2141': attribute type 1 has an invalid length. [ 383.486999][T11469] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2142'. [ 383.774413][T11483] netlink: 'syz.4.2147': attribute type 3 has an invalid length. [ 383.802708][T11483] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2147'. [ 383.812551][T11483] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 384.114460][T11496] netlink: 'syz.2.2150': attribute type 11 has an invalid length. [ 384.128698][T11496] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2150'. [ 384.859739][T11489] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 385.618217][T11506] netlink: 'syz.3.2152': attribute type 10 has an invalid length. [ 385.830294][T11512] FAULT_INJECTION: forcing a failure. [ 385.830294][T11512] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 385.946258][T11512] CPU: 0 PID: 11512 Comm: syz.1.2154 Not tainted syzkaller #0 [ 385.953798][T11512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 385.963910][T11512] Call Trace: [ 385.967225][T11512] [ 385.970185][T11512] dump_stack_lvl+0x188/0x24e [ 385.974916][T11512] ? show_regs_print_info+0x12/0x12 [ 385.980175][T11512] ? load_image+0x400/0x400 [ 385.984729][T11512] ? __lock_acquire+0x7d10/0x7d10 [ 385.989825][T11512] should_fail_ex+0x399/0x4d0 [ 385.994543][T11512] _copy_from_user+0x2c/0x170 [ 385.999286][T11512] __sys_bpf+0x2ea/0x780 [ 386.003592][T11512] ? bpf_link_show_fdinfo+0x380/0x380 [ 386.009034][T11512] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 386.015250][T11512] __x64_sys_bpf+0x78/0x90 [ 386.019716][T11512] do_syscall_64+0x4c/0xa0 [ 386.024183][T11512] ? clear_bhb_loop+0x60/0xb0 [ 386.028906][T11512] ? clear_bhb_loop+0x60/0xb0 [ 386.033626][T11512] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 386.039558][T11512] RIP: 0033:0x7f6787f9cdd9 [ 386.044006][T11512] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 386.063675][T11512] RSP: 002b:00007f6788dfc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 386.072139][T11512] RAX: ffffffffffffffda RBX: 00007f6788215fa0 RCX: 00007f6787f9cdd9 [ 386.080149][T11512] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 386.088164][T11512] RBP: 00007f6788dfc090 R08: 0000000000000000 R09: 0000000000000000 [ 386.096190][T11512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 386.104213][T11512] R13: 00007f6788216038 R14: 00007f6788215fa0 R15: 00007ffe996d94a8 [ 386.112254][T11512] [ 386.303814][T11526] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2158'. [ 386.435480][ T9372] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 389.414241][T11576] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.2173'. [ 389.451374][T11577] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2173'. [ 389.588945][T11582] FAULT_INJECTION: forcing a failure. [ 389.588945][T11582] name failslab, interval 1, probability 0, space 0, times 1 [ 389.603105][T11582] CPU: 1 PID: 11582 Comm: syz.3.2174 Not tainted syzkaller #0 [ 389.610629][T11582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 389.620738][T11582] Call Trace: [ 389.624064][T11582] [ 389.627032][T11582] dump_stack_lvl+0x188/0x24e [ 389.631794][T11582] ? show_regs_print_info+0x12/0x12 [ 389.637062][T11582] ? load_image+0x400/0x400 [ 389.641614][T11582] ? __might_sleep+0xd0/0xd0 [ 389.646258][T11582] ? __lock_acquire+0x7d10/0x7d10 [ 389.651327][T11582] should_fail_ex+0x399/0x4d0 [ 389.656035][T11582] should_failslab+0x5/0x20 [ 389.660576][T11582] slab_pre_alloc_hook+0x59/0x310 [ 389.665640][T11582] ? bpf_prog_test_run_skb+0x234/0x12a0 [ 389.671216][T11582] __kmem_cache_alloc_node+0x4f/0x260 [ 389.676883][T11582] ? bpf_prog_test_run_skb+0x234/0x12a0 [ 389.682461][T11582] __kmalloc+0xa0/0x240 [ 389.686745][T11582] bpf_prog_test_run_skb+0x234/0x12a0 [ 389.692166][T11582] ? __fget_files+0x28/0x4b0 [ 389.696784][T11582] ? __fget_files+0x28/0x4b0 [ 389.701400][T11582] ? __fget_files+0x43d/0x4b0 [ 389.706117][T11582] ? cpu_online+0xa0/0xa0 [ 389.710476][T11582] bpf_prog_test_run+0x31e/0x390 [ 389.715450][T11582] __sys_bpf+0x62b/0x780 [ 389.719738][T11582] ? bpf_link_show_fdinfo+0x380/0x380 [ 389.725148][T11582] ? lock_chain_count+0x20/0x20 [ 389.730031][T11582] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 389.736053][T11582] __x64_sys_bpf+0x78/0x90 [ 389.740508][T11582] do_syscall_64+0x4c/0xa0 [ 389.744963][T11582] ? clear_bhb_loop+0x60/0xb0 [ 389.749676][T11582] ? clear_bhb_loop+0x60/0xb0 [ 389.754408][T11582] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 389.760336][T11582] RIP: 0033:0x7fdc62f9cdd9 [ 389.764797][T11582] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 389.784431][T11582] RSP: 002b:00007fdc63d7a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 389.792884][T11582] RAX: ffffffffffffffda RBX: 00007fdc63215fa0 RCX: 00007fdc62f9cdd9 [ 389.800881][T11582] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 389.808880][T11582] RBP: 00007fdc63d7a090 R08: 0000000000000000 R09: 0000000000000000 [ 389.816872][T11582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 389.824863][T11582] R13: 00007fdc63216038 R14: 00007fdc63215fa0 R15: 00007ffe720f7bd8 [ 389.832869][T11582] [ 389.939649][T11588] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2177'. [ 390.118616][T11592] IPv6: Can't replace route, no match found [ 391.239927][T11621] FAULT_INJECTION: forcing a failure. [ 391.239927][T11621] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 391.276056][T11621] CPU: 1 PID: 11621 Comm: syz.0.2188 Not tainted syzkaller #0 [ 391.283602][T11621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 391.293683][T11621] Call Trace: [ 391.296989][T11621] [ 391.299948][T11621] dump_stack_lvl+0x188/0x24e [ 391.304665][T11621] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 391.310859][T11621] ? show_regs_print_info+0x12/0x12 [ 391.316088][T11621] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 391.322277][T11621] ? dump_stack+0x5/0x12 [ 391.326580][T11621] should_fail_ex+0x399/0x4d0 [ 391.331288][T11621] _copy_from_user+0x2c/0x170 [ 391.335998][T11621] bpf_prog_test_run_skb+0x262/0x12a0 [ 391.341438][T11621] ? lockdep_hardirqs_on+0x94/0x140 [ 391.346688][T11621] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 391.352902][T11621] ? cpu_online+0xa0/0xa0 [ 391.357267][T11621] bpf_prog_test_run+0x31e/0x390 [ 391.362288][T11621] __sys_bpf+0x62b/0x780 [ 391.366578][T11621] ? bpf_link_show_fdinfo+0x380/0x380 [ 391.371990][T11621] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 391.378187][T11621] __x64_sys_bpf+0x78/0x90 [ 391.382643][T11621] do_syscall_64+0x4c/0xa0 [ 391.387088][T11621] ? clear_bhb_loop+0x60/0xb0 [ 391.391800][T11621] ? clear_bhb_loop+0x60/0xb0 [ 391.396600][T11621] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 391.402528][T11621] RIP: 0033:0x7fc83599cdd9 [ 391.406971][T11621] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 391.426598][T11621] RSP: 002b:00007fc8367a1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 391.435041][T11621] RAX: ffffffffffffffda RBX: 00007fc835c15fa0 RCX: 00007fc83599cdd9 [ 391.443079][T11621] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 391.451090][T11621] RBP: 00007fc8367a1090 R08: 0000000000000000 R09: 0000000000000000 [ 391.459093][T11621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 391.467098][T11621] R13: 00007fc835c16038 R14: 00007fc835c15fa0 R15: 00007ffcf1db8d58 [ 391.475107][T11621] [ 391.676329][ T4286] Bluetooth: hci4: Malformed HCI Event [ 391.990964][T11639] netlink: 'syz.4.2193': attribute type 11 has an invalid length. [ 392.078127][T11639] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2193'. [ 392.225211][T11646] delete_channel: no stack [ 392.229991][T11646] delete_channel: no stack [ 392.954685][T11636] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 393.628994][T11665] FAULT_INJECTION: forcing a failure. [ 393.628994][T11665] name failslab, interval 1, probability 0, space 0, times 0 [ 393.655314][T11665] CPU: 0 PID: 11665 Comm: syz.1.2201 Not tainted syzkaller #0 [ 393.662861][T11665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 393.672956][T11665] Call Trace: [ 393.676267][T11665] [ 393.679230][T11665] dump_stack_lvl+0x188/0x24e [ 393.683946][T11665] ? show_regs_print_info+0x12/0x12 [ 393.689198][T11665] ? load_image+0x400/0x400 [ 393.693736][T11665] ? __might_sleep+0xd0/0xd0 [ 393.698358][T11665] ? __lock_acquire+0x7d10/0x7d10 [ 393.703447][T11665] should_fail_ex+0x399/0x4d0 [ 393.708209][T11665] should_failslab+0x5/0x20 [ 393.712752][T11665] slab_pre_alloc_hook+0x59/0x310 [ 393.717825][T11665] ? lockdep_hardirqs_on+0x94/0x140 [ 393.723063][T11665] ? sk_prot_alloc+0xe7/0x210 [ 393.727778][T11665] __kmem_cache_alloc_node+0x4f/0x260 [ 393.733206][T11665] ? sk_prot_alloc+0xe7/0x210 [ 393.737912][T11665] __kmalloc+0xa0/0x240 [ 393.742128][T11665] sk_prot_alloc+0xe7/0x210 [ 393.746677][T11665] ? sk_alloc+0x20/0x340 [ 393.750979][T11665] sk_alloc+0x36/0x340 [ 393.755091][T11665] ? bpf_ctx_init+0x163/0x1a0 [ 393.759823][T11665] ? bpf_prog_test_run_skb+0x26f/0x12a0 [ 393.765419][T11665] bpf_prog_test_run_skb+0x35e/0x12a0 [ 393.770845][T11665] ? __fget_files+0x28/0x4b0 [ 393.775488][T11665] ? __fget_files+0x43d/0x4b0 [ 393.780214][T11665] ? cpu_online+0xa0/0xa0 [ 393.784582][T11665] bpf_prog_test_run+0x31e/0x390 [ 393.789562][T11665] __sys_bpf+0x62b/0x780 [ 393.793840][T11665] ? bpf_link_show_fdinfo+0x380/0x380 [ 393.799259][T11665] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 393.805460][T11665] __x64_sys_bpf+0x78/0x90 [ 393.809918][T11665] do_syscall_64+0x4c/0xa0 [ 393.814371][T11665] ? clear_bhb_loop+0x60/0xb0 [ 393.819082][T11665] ? clear_bhb_loop+0x60/0xb0 [ 393.823801][T11665] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 393.829758][T11665] RIP: 0033:0x7f6787f9cdd9 [ 393.834214][T11665] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 393.853892][T11665] RSP: 002b:00007f6788dfc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 393.862344][T11665] RAX: ffffffffffffffda RBX: 00007f6788215fa0 RCX: 00007f6787f9cdd9 [ 393.870343][T11665] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 393.878341][T11665] RBP: 00007f6788dfc090 R08: 0000000000000000 R09: 0000000000000000 [ 393.886342][T11665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 393.894344][T11665] R13: 00007f6788216038 R14: 00007f6788215fa0 R15: 00007ffe996d94a8 [ 393.902358][T11665] [ 394.146616][T11658] delete_channel: no stack [ 394.281460][T11672] netlink: 'syz.3.2204': attribute type 11 has an invalid length. [ 394.401634][T11672] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2204'. [ 395.076124][T11671] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 395.199257][T11688] netlink: 'syz.1.2202': attribute type 15 has an invalid length. [ 395.207497][T11688] netlink: 'syz.1.2202': attribute type 7 has an invalid length. [ 395.751796][T11704] netlink: 822 bytes leftover after parsing attributes in process `syz.1.2210'. [ 395.861150][T11709] netlink: 'syz.1.2210': attribute type 8 has an invalid length. [ 395.879687][T11709] netlink: 399 bytes leftover after parsing attributes in process `syz.1.2210'. [ 395.941213][T11711] FAULT_INJECTION: forcing a failure. [ 395.941213][T11711] name failslab, interval 1, probability 0, space 0, times 0 [ 395.990826][T11711] CPU: 0 PID: 11711 Comm: syz.4.2212 Not tainted syzkaller #0 [ 395.998411][T11711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 396.008513][T11711] Call Trace: [ 396.011825][T11711] [ 396.014794][T11711] dump_stack_lvl+0x188/0x24e [ 396.019537][T11711] ? show_regs_print_info+0x12/0x12 [ 396.024794][T11711] ? load_image+0x400/0x400 [ 396.029368][T11711] ? __might_sleep+0xd0/0xd0 [ 396.034004][T11711] ? __lock_acquire+0x7d10/0x7d10 [ 396.039080][T11711] should_fail_ex+0x399/0x4d0 [ 396.043787][T11711] should_failslab+0x5/0x20 [ 396.048340][T11711] slab_pre_alloc_hook+0x59/0x310 [ 396.053410][T11711] ? apparmor_sk_alloc_security+0x74/0x100 [ 396.059248][T11711] __kmem_cache_alloc_node+0x4f/0x260 [ 396.064656][T11711] ? apparmor_sk_alloc_security+0x74/0x100 [ 396.070487][T11711] kmalloc_trace+0x26/0xe0 [ 396.074934][T11711] apparmor_sk_alloc_security+0x74/0x100 [ 396.080596][T11711] security_sk_alloc+0x6a/0xa0 [ 396.085382][T11711] sk_prot_alloc+0x101/0x210 [ 396.090001][T11711] ? sk_alloc+0x20/0x340 [ 396.094277][T11711] sk_alloc+0x36/0x340 [ 396.098372][T11711] ? bpf_ctx_init+0x163/0x1a0 [ 396.103073][T11711] ? bpf_prog_test_run_skb+0x26f/0x12a0 [ 396.108648][T11711] bpf_prog_test_run_skb+0x35e/0x12a0 [ 396.114047][T11711] ? __fget_files+0x28/0x4b0 [ 396.118673][T11711] ? __fget_files+0x43d/0x4b0 [ 396.123431][T11711] ? cpu_online+0xa0/0xa0 [ 396.127801][T11711] bpf_prog_test_run+0x31e/0x390 [ 396.132786][T11711] __sys_bpf+0x62b/0x780 [ 396.137063][T11711] ? bpf_link_show_fdinfo+0x380/0x380 [ 396.142483][T11711] ? lock_chain_count+0x20/0x20 [ 396.147364][T11711] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 396.153384][T11711] __x64_sys_bpf+0x78/0x90 [ 396.157838][T11711] do_syscall_64+0x4c/0xa0 [ 396.162290][T11711] ? clear_bhb_loop+0x60/0xb0 [ 396.167003][T11711] ? clear_bhb_loop+0x60/0xb0 [ 396.171712][T11711] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 396.177640][T11711] RIP: 0033:0x7ff9b459cdd9 [ 396.182076][T11711] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 396.201711][T11711] RSP: 002b:00007ff9b53f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 396.210151][T11711] RAX: ffffffffffffffda RBX: 00007ff9b4815fa0 RCX: 00007ff9b459cdd9 [ 396.218149][T11711] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 396.226156][T11711] RBP: 00007ff9b53f4090 R08: 0000000000000000 R09: 0000000000000000 [ 396.234160][T11711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 396.242154][T11711] R13: 00007ff9b4816038 R14: 00007ff9b4815fa0 R15: 00007ffc20763228 [ 396.250176][T11711] [ 397.073542][T11724] netlink: 'syz.3.2217': attribute type 3 has an invalid length. [ 397.090738][T11724] netlink: 16066 bytes leftover after parsing attributes in process `syz.3.2217'. [ 397.178220][T11733] tun0: tun_chr_ioctl cmd 21731 [ 397.415087][T11736] netlink: 'syz.3.2220': attribute type 10 has an invalid length. [ 397.876336][T11754] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2222'. [ 397.944192][T11744] netlink: 'syz.4.2222': attribute type 12 has an invalid length. [ 397.972608][T11744] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2222'. [ 398.104239][T11744] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.182776][T11756] FAULT_INJECTION: forcing a failure. [ 398.182776][T11756] name failslab, interval 1, probability 0, space 0, times 0 [ 398.248369][T11756] CPU: 0 PID: 11756 Comm: syz.1.2226 Not tainted syzkaller #0 [ 398.255934][T11756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 398.266051][T11756] Call Trace: [ 398.269381][T11756] [ 398.272380][T11756] dump_stack_lvl+0x188/0x24e [ 398.277143][T11756] ? show_regs_print_info+0x12/0x12 [ 398.282407][T11756] ? load_image+0x400/0x400 [ 398.286979][T11756] should_fail_ex+0x399/0x4d0 [ 398.291709][T11756] should_failslab+0x5/0x20 [ 398.296243][T11756] slab_pre_alloc_hook+0x59/0x310 [ 398.301306][T11756] kmem_cache_alloc+0x56/0x2f0 [ 398.306107][T11756] ? __build_skb+0x2a/0x3c0 [ 398.310649][T11756] __build_skb+0x2a/0x3c0 [ 398.315027][T11756] build_skb+0x1e/0x230 [ 398.319220][T11756] bpf_prog_test_run_skb+0x37e/0x12a0 [ 398.324647][T11756] ? __fget_files+0x28/0x4b0 [ 398.329277][T11756] ? __fget_files+0x43d/0x4b0 [ 398.334018][T11756] ? cpu_online+0xa0/0xa0 [ 398.338384][T11756] bpf_prog_test_run+0x31e/0x390 [ 398.343406][T11756] __sys_bpf+0x62b/0x780 [ 398.347698][T11756] ? bpf_link_show_fdinfo+0x380/0x380 [ 398.353147][T11756] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 398.359349][T11756] __x64_sys_bpf+0x78/0x90 [ 398.363808][T11756] do_syscall_64+0x4c/0xa0 [ 398.368266][T11756] ? clear_bhb_loop+0x60/0xb0 [ 398.372974][T11756] ? clear_bhb_loop+0x60/0xb0 [ 398.377707][T11756] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 398.383644][T11756] RIP: 0033:0x7f6787f9cdd9 [ 398.388088][T11756] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 398.407727][T11756] RSP: 002b:00007f6788dfc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 398.416173][T11756] RAX: ffffffffffffffda RBX: 00007f6788215fa0 RCX: 00007f6787f9cdd9 [ 398.424178][T11756] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 398.432177][T11756] RBP: 00007f6788dfc090 R08: 0000000000000000 R09: 0000000000000000 [ 398.440176][T11756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 398.448230][T11756] R13: 00007f6788216038 R14: 00007f6788215fa0 R15: 00007ffe996d94a8 [ 398.456272][T11756] [ 398.980664][T11770] netlink: 'syz.4.2231': attribute type 10 has an invalid length. [ 399.013428][T11770] .`: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 399.079922][T11770] .`: (slave hsr0): The slave device specified does not support setting the MAC address [ 399.123619][T11770] .`: (slave hsr0): Error -95 calling set_mac_address [ 400.093011][T11795] netlink: 'syz.1.2240': attribute type 22 has an invalid length. [ 400.115779][T11795] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2240'. [ 400.518315][T11807] FAULT_INJECTION: forcing a failure. [ 400.518315][T11807] name failslab, interval 1, probability 0, space 0, times 0 [ 400.552702][T11807] CPU: 1 PID: 11807 Comm: syz.1.2243 Not tainted syzkaller #0 [ 400.560259][T11807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 400.570378][T11807] Call Trace: [ 400.573748][T11807] [ 400.576723][T11807] dump_stack_lvl+0x188/0x24e [ 400.581468][T11807] ? show_regs_print_info+0x12/0x12 [ 400.586727][T11807] ? load_image+0x400/0x400 [ 400.591286][T11807] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 400.597307][T11807] should_fail_ex+0x399/0x4d0 [ 400.602014][T11807] should_failslab+0x5/0x20 [ 400.606546][T11807] slab_pre_alloc_hook+0x59/0x310 [ 400.611606][T11807] kmem_cache_alloc+0x56/0x2f0 [ 400.616397][T11807] ? skb_clone+0x1e7/0x370 [ 400.620980][T11807] skb_clone+0x1e7/0x370 [ 400.625274][T11807] bpf_clone_redirect+0x163/0x4a0 [ 400.630357][T11807] bpf_prog_169a6ad24ef2d602+0x56/0x5b [ 400.635852][T11807] ? __kprobes_text_end+0x7cbb0/0x7cbb0 [ 400.641429][T11807] ? lockdep_hardirqs_on+0x94/0x140 [ 400.646759][T11807] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 400.652993][T11807] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 400.659277][T11807] ? seqcount_lockdep_reader_access+0x196/0x1d0 [ 400.665559][T11807] ? ktime_get_real_ts64+0x440/0x440 [ 400.671093][T11807] ? read_lock_is_recursive+0x10/0x10 [ 400.677222][T11807] ? perf_trace_preemptirq_template+0x268/0x320 [ 400.683512][T11807] ? __cant_sleep+0x220/0x220 [ 400.688225][T11807] ? ktime_get+0x247/0x270 [ 400.692681][T11807] bpf_test_run+0x2b6/0x830 [ 400.697321][T11807] ? convert___skb_to_skb+0x580/0x580 [ 400.702720][T11807] ? eth_get_headlen+0x200/0x200 [ 400.707680][T11807] ? __build_skb+0x257/0x3c0 [ 400.712304][T11807] ? convert___skb_to_skb+0x3d/0x580 [ 400.717621][T11807] bpf_prog_test_run_skb+0xaa6/0x12a0 [ 400.723037][T11807] ? cpu_online+0xa0/0xa0 [ 400.727392][T11807] bpf_prog_test_run+0x31e/0x390 [ 400.732375][T11807] __sys_bpf+0x62b/0x780 [ 400.736664][T11807] ? bpf_link_show_fdinfo+0x380/0x380 [ 400.742085][T11807] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 400.748307][T11807] __x64_sys_bpf+0x78/0x90 [ 400.752755][T11807] do_syscall_64+0x4c/0xa0 [ 400.757200][T11807] ? clear_bhb_loop+0x60/0xb0 [ 400.761901][T11807] ? clear_bhb_loop+0x60/0xb0 [ 400.766617][T11807] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 400.772557][T11807] RIP: 0033:0x7f6787f9cdd9 [ 400.776999][T11807] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 400.796634][T11807] RSP: 002b:00007f6788dfc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 400.805072][T11807] RAX: ffffffffffffffda RBX: 00007f6788215fa0 RCX: 00007f6787f9cdd9 [ 400.813074][T11807] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 400.821070][T11807] RBP: 00007f6788dfc090 R08: 0000000000000000 R09: 0000000000000000 [ 400.829067][T11807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 400.837057][T11807] R13: 00007f6788216038 R14: 00007f6788215fa0 R15: 00007ffe996d94a8 [ 400.845066][T11807] [ 401.137671][T11815] raw_sendmsg: syz.3.2246 forgot to set AF_INET. Fix it! [ 401.894746][T11821] netlink: 16083 bytes leftover after parsing attributes in process `syz.0.2257'. [ 402.316298][T11834] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.2250'. [ 402.362700][T11834] bridge_slave_1: default FDB implementation only supports local addresses [ 402.410101][T11833] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.2250'. [ 402.463826][T11833] bridge_slave_1: default FDB implementation only supports local addresses [ 402.676616][T11839] netlink: 'syz.4.2253': attribute type 1 has an invalid length. [ 402.744504][T11843] netlink: 'syz.4.2253': attribute type 19 has an invalid length. [ 402.747133][T11839] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.2253'. [ 402.815753][T11843] netlink: 55 bytes leftover after parsing attributes in process `syz.4.2253'. [ 403.249869][T11857] C: renamed from team_slave_0 [ 403.270564][T11857] netlink: 'syz.0.2258': attribute type 3 has an invalid length. [ 403.285844][T11857] netlink: 'syz.0.2258': attribute type 1 has an invalid length. [ 403.303857][T11857] netlink: 116 bytes leftover after parsing attributes in process `syz.0.2258'. [ 403.313626][T11856] : port 1(ip6gretap0) entered blocking state [ 403.323948][T11856] : port 1(ip6gretap0) entered disabled state [ 403.344257][T11856] device ip6gretap0 entered promiscuous mode [ 404.174700][T11864] sctp: [Deprecated]: syz.3.2260 (pid 11864) Use of int in maxseg socket option. [ 404.174700][T11864] Use struct sctp_assoc_value instead [ 406.057337][T11890] netlink: 'syz.0.2266': attribute type 2 has an invalid length. [ 406.146127][T11890] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2266'. [ 406.614935][T11896] netlink: 10 bytes leftover after parsing attributes in process `syz.4.2269'. [ 408.925700][T11949] device pim6reg1 entered promiscuous mode [ 409.036110][T11958] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.2285'. [ 409.173450][T11958] netlink: 'syz.3.2285': attribute type 39 has an invalid length. [ 409.373954][T11971] netlink: 'syz.4.2290': attribute type 25 has an invalid length. [ 409.394403][T11971] netlink: 'syz.4.2290': attribute type 28 has an invalid length. [ 409.671361][T11987] netlink: 1041 bytes leftover after parsing attributes in process `syz.4.2294'. [ 410.487084][T12020] netlink: 'syz.0.2303': attribute type 3 has an invalid length. [ 410.530137][T12020] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2303'. [ 410.571000][T12019] netlink: 'syz.3.2304': attribute type 3 has an invalid length. [ 410.581452][T12019] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2304'. [ 411.658635][T12068] netlink: 'syz.4.2319': attribute type 3 has an invalid length. [ 411.677114][T12068] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2319'. [ 411.832046][T12070] netlink: 'syz.2.2320': attribute type 39 has an invalid length. [ 412.790862][T12070] device hsr_slave_1 left promiscuous mode [ 412.818344][T12069] delete_channel: no stack [ 412.902245][T12081] netlink: 'syz.0.2324': attribute type 27 has an invalid length. [ 412.960707][T12082] netlink: 'syz.0.2324': attribute type 10 has an invalid length. [ 413.009328][T12081] netlink: 'syz.0.2324': attribute type 3 has an invalid length. [ 413.054225][T12081] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2324'. [ 413.603441][T12103] device pim6reg1 entered promiscuous mode [ 414.837000][T12138] validate_nla: 1 callbacks suppressed [ 414.837033][T12138] netlink: 'syz.4.2344': attribute type 10 has an invalid length. [ 414.889794][T12138] netlink: 140 bytes leftover after parsing attributes in process `syz.4.2344'. [ 414.921711][T12147] device wg2 entered promiscuous mode [ 414.936457][T12143] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 414.944044][T12143] IPv6: NLM_F_CREATE should be set when creating new route [ 414.977741][T12140] netlink: 'syz.2.2345': attribute type 10 has an invalid length. [ 415.271280][T12159] device pim6reg1 entered promiscuous mode [ 415.499590][T12171] mac80211_hwsim hwsim5 ªªªªªª: renamed from wlan0 [ 416.078053][T12192] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.2361'. [ 416.331116][T12197] netlink: 'syz.3.2362': attribute type 10 has an invalid length. [ 416.797495][T12211] netlink: 'syz.3.2367': attribute type 10 has an invalid length. [ 417.125047][T12208] netlink: 'syz.4.2366': attribute type 2 has an invalid length. [ 417.147945][T12219] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2366'. [ 417.218519][T12208] netlink: 'syz.4.2366': attribute type 10 has an invalid length. [ 417.462767][ T9344] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 417.883004][T12244] netlink: 'syz.3.2379': attribute type 3 has an invalid length. [ 417.922282][T12244] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2379'. [ 418.916264][T12245] netlink: 'syz.2.2378': attribute type 10 has an invalid length. [ 419.038116][T12254] bˆ¡cÊRݘOC‰ÿæ: renamed from lo [ 419.074722][T12255] netlink: 'syz.4.2382': attribute type 10 has an invalid length. [ 420.319048][T12305] netlink: 'syz.2.2396': attribute type 10 has an invalid length. [ 420.862748][T12316] netlink: 'syz.3.2402': attribute type 10 has an invalid length. [ 421.825904][T12327] netlink: 'syz.4.2406': attribute type 10 has an invalid length. [ 421.847768][T12340] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2409'. [ 423.616953][T12340] netlink: 'syz.1.2409': attribute type 12 has an invalid length. [ 423.627062][T12340] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2409'. [ 423.884095][T12356] netlink: 'syz.1.2413': attribute type 19 has an invalid length. [ 424.123138][T12369] netlink: 'syz.4.2415': attribute type 10 has an invalid length. [ 424.887215][T12400] netlink: 'syz.2.2426': attribute type 10 has an invalid length. [ 425.880372][T12419] netlink: 'syz.3.2434': attribute type 10 has an invalid length. [ 426.146740][ T4286] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 426.564423][T12444] netlink: 'syz.3.2443': attribute type 2 has an invalid length. [ 426.579905][T12444] device 0 entered promiscuous mode [ 427.189376][T12453] netlink: 'syz.1.2444': attribute type 10 has an invalid length. [ 427.903942][T12461] netlink: 'syz.3.2449': attribute type 10 has an invalid length. [ 427.996517][T12466] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2451'. [ 428.383716][T12460] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.2448'. [ 429.312769][T12506] netlink: 'syz.3.2464': attribute type 10 has an invalid length. [ 429.560072][ T4286] Bluetooth: Frame is too long (len 13, expected len 4) [ 429.567791][T12515] netlink: 180 bytes leftover after parsing attributes in process `syz.1.2467'. [ 430.340211][T12522] netlink: 'syz.2.2469': attribute type 10 has an invalid length. [ 430.367690][T12522] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2469'. [ 430.645491][T12533] netlink: 144 bytes leftover after parsing attributes in process `syz.4.2472'. [ 431.170979][T12551] netlink: 'syz.2.2478': attribute type 33 has an invalid length. [ 431.216219][T12551] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2478'. [ 431.328453][T12551] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 431.448903][T12552] netlink: 'syz.4.2479': attribute type 10 has an invalid length. [ 432.530478][T12564] netlink: 'syz.2.2481': attribute type 3 has an invalid length. [ 432.595605][T12564] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2481'. [ 433.505554][T12598] netlink: 'syz.1.2491': attribute type 3 has an invalid length. [ 433.525298][T12598] netlink: 'syz.1.2491': attribute type 1 has an invalid length. [ 433.533111][T12598] netlink: 198452 bytes leftover after parsing attributes in process `syz.1.2491'. [ 434.084609][T12618] netlink: 144 bytes leftover after parsing attributes in process `syz.4.2497'. [ 434.144678][T12618] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 434.487352][T12634] netlink: 'syz.4.2505': attribute type 10 has an invalid length. [ 434.533191][T12634] netlink: 'syz.4.2505': attribute type 19 has an invalid length. [ 434.567951][T12634] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2505'. [ 434.593117][ T4286] Bluetooth: Frame is too long (len 13, expected len 4) [ 434.896910][T12645] netlink: 'syz.2.2507': attribute type 10 has an invalid length. [ 434.920645][T12646] device pim6reg1 entered promiscuous mode [ 435.278926][T12652] syzkaller0: tun_chr_ioctl cmd 2148553947 [ 435.302575][T12652] syzkaller0: tun_chr_ioctl cmd 1074025680 [ 435.580107][T12660] netlink: 'syz.2.2511': attribute type 10 has an invalid length. [ 436.794855][T12697] netlink: 'syz.2.2521': attribute type 3 has an invalid length. [ 436.830035][T12697] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2521'. [ 437.134068][T12704] netlink: 'syz.1.2523': attribute type 3 has an invalid length. [ 437.242417][T12704] netlink: 13435 bytes leftover after parsing attributes in process `syz.1.2523'. [ 437.519526][T12713] netlink: 'syz.0.2527': attribute type 3 has an invalid length. [ 437.538947][T12713] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2527'. [ 439.000182][T12749] netlink: 'syz.0.2550': attribute type 3 has an invalid length. [ 439.020676][T12749] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2550'. [ 439.441110][T12762] netlink: 'syz.3.2544': attribute type 33 has an invalid length. [ 439.481127][T12762] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2544'. [ 439.562587][T12762] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 439.926819][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.933235][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.215888][T12781] netlink: 'syz.0.2561': attribute type 10 has an invalid length. [ 440.627149][T12800] netlink: 'syz.2.2555': attribute type 3 has an invalid length. [ 440.666952][T12800] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2555'. [ 440.921797][T12807] : port 1(syz_tun) entered blocking state [ 440.930732][T12807] : port 1(syz_tun) entered disabled state [ 440.946547][T12807] device syz_tun entered promiscuous mode [ 442.165005][T12830] netlink: 'syz.3.2568': attribute type 6 has an invalid length. [ 442.193478][T12830] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.2568'. [ 442.932889][T12847] netlink: 'syz.4.2571': attribute type 3 has an invalid length. [ 442.990268][T12847] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2571'. [ 443.054433][T12849] netlink: 'syz.3.2574': attribute type 4 has an invalid length. [ 444.879913][T12893] netlink: 'syz.2.2586': attribute type 3 has an invalid length. [ 444.923899][T12893] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2586'. [ 445.177671][T12897] netlink: 15478 bytes leftover after parsing attributes in process `syz.4.2588'. [ 445.504305][T12905] netlink: 'syz.1.2589': attribute type 10 has an invalid length. [ 445.773192][T12915] netlink: 'syz.0.2592': attribute type 6 has an invalid length. [ 445.813988][T12915] netlink: 140 bytes leftover after parsing attributes in process `syz.0.2592'. [ 446.377439][T12929] netlink: 'syz.3.2600': attribute type 3 has an invalid length. [ 446.411340][T12929] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2600'. [ 446.496105][T12927] delete_channel: no stack [ 446.532731][T12937] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 446.597222][T12937] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2598'. [ 446.974594][T12951] netlink: 'syz.2.2603': attribute type 3 has an invalid length. [ 447.036456][T12951] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2603'. [ 447.203297][T12952] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.2603'. [ 447.675180][T12957] netlink: 'syz.3.2605': attribute type 10 has an invalid length. [ 447.927545][T12969] device wlan1 entered promiscuous mode [ 447.971760][T12969] netlink: 'syz.4.2610': attribute type 1 has an invalid length. [ 447.987126][T12969] netlink: 131740 bytes leftover after parsing attributes in process `syz.4.2610'. [ 448.199017][T12978] netlink: 'syz.2.2613': attribute type 3 has an invalid length. [ 448.242309][T12978] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2613'. [ 448.271006][T12978] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 448.591754][T12993] netlink: 'syz.1.2616': attribute type 29 has an invalid length. [ 448.900157][ T7552] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 448.962394][T13001] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 449.005931][T12993] netlink: 'syz.1.2616': attribute type 29 has an invalid length. [ 449.028087][T13002] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2618'. [ 449.569240][T13020] netlink: 'syz.0.2623': attribute type 12 has an invalid length. [ 449.986977][T13025] netlink: 'syz.2.2624': attribute type 2 has an invalid length. [ 450.024631][T13025] netlink: 'syz.2.2624': attribute type 8 has an invalid length. [ 450.044025][T13025] __nla_validate_parse: 1 callbacks suppressed [ 450.044062][T13025] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2624'. [ 450.099794][T13027] netlink: 'syz.4.2625': attribute type 10 has an invalid length. [ 450.269812][T13032] netlink: 'syz.2.2628': attribute type 3 has an invalid length. [ 450.277790][T13032] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2628'. [ 450.314014][T13032] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 451.197015][T13055] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.2634'. [ 451.259622][T13058] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 451.298452][T13055] pimreg1: tun_chr_ioctl cmd 1074025673 [ 451.379878][T13058] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2635'. [ 452.018452][ T4286] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 452.383100][T13084] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2643'. [ 452.521723][T13088] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2644'. [ 453.060494][T13105] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2651'. [ 453.372664][T13115] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2652'. [ 453.763905][ T9344] wlan1: Trigger new scan to find an IBSS to join [ 453.827395][T13124] validate_nla: 4 callbacks suppressed [ 453.827417][T13124] netlink: 'syz.0.2656': attribute type 21 has an invalid length. [ 454.127108][T13134] netlink: 'syz.2.2658': attribute type 3 has an invalid length. [ 454.183892][T13134] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2658'. [ 454.212032][T13133] netlink: 'syz.4.2657': attribute type 10 has an invalid length. [ 454.290590][T13140] netlink: 70356 bytes leftover after parsing attributes in process `syz.0.2659'. [ 454.377797][T13140] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 454.663107][T13151] netlink: zone id is out of range [ 454.683571][T13151] netlink: get zone limit has 8 unknown bytes [ 454.707852][T13150] netlink: 'syz.3.2662': attribute type 1 has an invalid length. [ 455.620551][T13174] netlink: 'syz.0.2671': attribute type 3 has an invalid length. [ 455.664751][T13174] __nla_validate_parse: 3 callbacks suppressed [ 455.664772][T13174] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2671'. [ 455.739623][T13176] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2670'. [ 455.961279][T13185] FAULT_INJECTION: forcing a failure. [ 455.961279][T13185] name failslab, interval 1, probability 0, space 0, times 0 [ 456.008811][T13185] CPU: 1 PID: 13185 Comm: syz.0.2674 Not tainted syzkaller #0 [ 456.016466][T13185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 456.026563][T13185] Call Trace: [ 456.029873][T13185] [ 456.032838][T13185] dump_stack_lvl+0x188/0x24e [ 456.037570][T13185] ? show_regs_print_info+0x12/0x12 [ 456.042818][T13185] ? load_image+0x400/0x400 [ 456.047390][T13185] ? __might_sleep+0xd0/0xd0 [ 456.052029][T13185] ? __lock_acquire+0x7d10/0x7d10 [ 456.057110][T13185] should_fail_ex+0x399/0x4d0 [ 456.061837][T13185] should_failslab+0x5/0x20 [ 456.066382][T13185] slab_pre_alloc_hook+0x59/0x310 [ 456.070731][T13187] netlink: 'syz.2.2675': attribute type 2 has an invalid length. [ 456.071435][T13185] ? apparmor_sk_alloc_security+0x74/0x100 [ 456.085015][T13185] __kmem_cache_alloc_node+0x4f/0x260 [ 456.090451][T13185] ? apparmor_sk_alloc_security+0x74/0x100 [ 456.096301][T13185] kmalloc_trace+0x26/0xe0 [ 456.100773][T13185] apparmor_sk_alloc_security+0x74/0x100 [ 456.106460][T13185] security_sk_alloc+0x6a/0xa0 [ 456.108926][T13187] netlink: 'syz.2.2675': attribute type 8 has an invalid length. [ 456.111290][T13185] sk_prot_alloc+0x101/0x210 [ 456.111320][T13185] ? sk_alloc+0x20/0x340 [ 456.111348][T13185] sk_alloc+0x36/0x340 [ 456.132065][T13185] ? bpf_ctx_init+0x163/0x1a0 [ 456.136787][T13185] ? bpf_prog_test_run_skb+0x26f/0x12a0 [ 456.142379][T13185] bpf_prog_test_run_skb+0x35e/0x12a0 [ 456.147796][T13185] ? lockdep_hardirqs_on+0x94/0x140 [ 456.150819][T13187] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2675'. [ 456.153024][T13185] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 456.168259][T13185] ? cpu_online+0xa0/0xa0 [ 456.172635][T13185] bpf_prog_test_run+0x31e/0x390 [ 456.177622][T13185] __sys_bpf+0x62b/0x780 [ 456.181909][T13185] ? bpf_link_show_fdinfo+0x380/0x380 [ 456.187347][T13185] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 456.193567][T13185] __x64_sys_bpf+0x78/0x90 [ 456.198034][T13185] do_syscall_64+0x4c/0xa0 [ 456.202500][T13185] ? clear_bhb_loop+0x60/0xb0 [ 456.207219][T13185] ? clear_bhb_loop+0x60/0xb0 [ 456.211951][T13185] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 456.217891][T13185] RIP: 0033:0x7fc83599cdd9 [ 456.222339][T13185] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 456.241991][T13185] RSP: 002b:00007fc8367a1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 456.250464][T13185] RAX: ffffffffffffffda RBX: 00007fc835c15fa0 RCX: 00007fc83599cdd9 [ 456.258479][T13185] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 456.266484][T13185] RBP: 00007fc8367a1090 R08: 0000000000000000 R09: 0000000000000000 [ 456.274488][T13185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 456.282500][T13185] R13: 00007fc835c16038 R14: 00007fc835c15fa0 R15: 00007ffcf1db8d58 [ 456.290524][T13185] [ 456.724303][ T2936] wlan1: Trigger new scan to find an IBSS to join [ 457.222403][T13215] netlink: 'syz.0.2686': attribute type 3 has an invalid length. [ 457.284025][T13215] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2686'. [ 457.293144][T13215] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 457.441643][T13220] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2687'. [ 457.624519][ T9348] wlan1: Creating new IBSS network, BSSID 00:00:00:08:00:00 [ 457.652030][T13223] FAULT_INJECTION: forcing a failure. [ 457.652030][T13223] name failslab, interval 1, probability 0, space 0, times 0 [ 457.689288][T13223] CPU: 1 PID: 13223 Comm: syz.3.2691 Not tainted syzkaller #0 [ 457.696844][T13223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 457.706946][T13223] Call Trace: [ 457.710256][T13223] [ 457.713227][T13223] dump_stack_lvl+0x188/0x24e [ 457.718046][T13223] ? show_regs_print_info+0x12/0x12 [ 457.723335][T13223] ? load_image+0x400/0x400 [ 457.727899][T13223] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 457.733949][T13223] should_fail_ex+0x399/0x4d0 [ 457.738677][T13223] should_failslab+0x5/0x20 [ 457.743218][T13223] slab_pre_alloc_hook+0x59/0x310 [ 457.748295][T13223] kmem_cache_alloc+0x56/0x2f0 [ 457.753114][T13223] ? __build_skb+0x2a/0x3c0 [ 457.757674][T13223] __build_skb+0x2a/0x3c0 [ 457.762062][T13223] build_skb+0x1e/0x230 [ 457.766285][T13223] bpf_prog_test_run_skb+0x37e/0x12a0 [ 457.771701][T13223] ? __fget_files+0x28/0x4b0 [ 457.776333][T13223] ? __fget_files+0x43d/0x4b0 [ 457.781052][T13223] ? cpu_online+0xa0/0xa0 [ 457.785439][T13223] bpf_prog_test_run+0x31e/0x390 [ 457.790444][T13223] __sys_bpf+0x62b/0x780 [ 457.794718][T13223] ? bpf_link_show_fdinfo+0x380/0x380 [ 457.800137][T13223] ? lock_chain_count+0x20/0x20 [ 457.805036][T13223] __x64_sys_bpf+0x78/0x90 [ 457.809489][T13223] do_syscall_64+0x4c/0xa0 [ 457.813953][T13223] ? clear_bhb_loop+0x60/0xb0 [ 457.818671][T13223] ? clear_bhb_loop+0x60/0xb0 [ 457.823398][T13223] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 457.829339][T13223] RIP: 0033:0x7fdc62f9cdd9 [ 457.833802][T13223] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 457.853463][T13223] RSP: 002b:00007fdc63d7a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 457.861936][T13223] RAX: ffffffffffffffda RBX: 00007fdc63215fa0 RCX: 00007fdc62f9cdd9 [ 457.869944][T13223] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 457.877938][T13223] RBP: 00007fdc63d7a090 R08: 0000000000000000 R09: 0000000000000000 [ 457.885933][T13223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 457.893934][T13223] R13: 00007fdc63216038 R14: 00007fdc63215fa0 R15: 00007ffe720f7bd8 [ 457.901950][T13223] [ 458.198063][T13233] netlink: 47475 bytes leftover after parsing attributes in process `syz.3.2695'. [ 458.474820][T13249] netlink: 'syz.0.2701': attribute type 3 has an invalid length. [ 458.509517][T13249] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2701'. [ 458.520075][T13249] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 458.752840][T13257] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2704'. [ 458.825132][T13260] FAULT_INJECTION: forcing a failure. [ 458.825132][T13260] name failslab, interval 1, probability 0, space 0, times 0 [ 458.859957][T13260] CPU: 0 PID: 13260 Comm: syz.2.2705 Not tainted syzkaller #0 [ 458.867514][T13260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 458.877611][T13260] Call Trace: [ 458.880924][T13260] [ 458.883898][T13260] dump_stack_lvl+0x188/0x24e [ 458.888637][T13260] ? show_regs_print_info+0x12/0x12 [ 458.893902][T13260] ? load_image+0x400/0x400 [ 458.898465][T13260] should_fail_ex+0x399/0x4d0 [ 458.903195][T13260] should_failslab+0x5/0x20 [ 458.907745][T13260] slab_pre_alloc_hook+0x59/0x310 [ 458.912828][T13260] ? verify_lock_unused+0x140/0x140 [ 458.918084][T13260] kmem_cache_alloc+0x56/0x2f0 [ 458.922888][T13260] ? skb_clone+0x1e7/0x370 [ 458.927358][T13260] skb_clone+0x1e7/0x370 [ 458.931659][T13260] bpf_clone_redirect+0x163/0x4a0 [ 458.936747][T13260] bpf_prog_169a6ad24ef2d602+0x56/0x5b [ 458.942272][T13260] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 458.948308][T13260] ? lock_chain_count+0x20/0x20 [ 458.953212][T13260] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 458.959502][T13260] ? lockdep_hardirqs_on+0x94/0x140 [ 458.964753][T13260] ? ktime_get+0x7b/0x270 [ 458.969140][T13260] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 458.975438][T13260] ? ktime_get_real_ts64+0x440/0x440 [ 458.980784][T13260] ? read_lock_is_recursive+0x10/0x10 [ 458.986227][T13260] ? perf_trace_preemptirq_template+0xa8/0x320 [ 458.992446][T13260] ? __cant_sleep+0x220/0x220 [ 458.997171][T13260] ? ktime_get+0x247/0x270 [ 459.001645][T13260] bpf_test_run+0x2b6/0x830 [ 459.006222][T13260] ? convert___skb_to_skb+0x580/0x580 [ 459.011655][T13260] ? eth_get_headlen+0x200/0x200 [ 459.016643][T13260] ? __build_skb+0x257/0x3c0 [ 459.021334][T13260] ? convert___skb_to_skb+0x3d/0x580 [ 459.026680][T13260] bpf_prog_test_run_skb+0xaa6/0x12a0 [ 459.032155][T13260] ? cpu_online+0xa0/0xa0 [ 459.036543][T13260] bpf_prog_test_run+0x31e/0x390 [ 459.041545][T13260] __sys_bpf+0x62b/0x780 [ 459.045850][T13260] ? bpf_link_show_fdinfo+0x380/0x380 [ 459.051300][T13260] ? lock_chain_count+0x20/0x20 [ 459.056212][T13260] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 459.062266][T13260] __x64_sys_bpf+0x78/0x90 [ 459.066746][T13260] do_syscall_64+0x4c/0xa0 [ 459.071229][T13260] ? clear_bhb_loop+0x60/0xb0 [ 459.075991][T13260] ? clear_bhb_loop+0x60/0xb0 [ 459.080731][T13260] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 459.086677][T13260] RIP: 0033:0x7f879ef9cdd9 [ 459.091139][T13260] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 459.110818][T13260] RSP: 002b:00007f879fdf4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 459.119287][T13260] RAX: ffffffffffffffda RBX: 00007f879f215fa0 RCX: 00007f879ef9cdd9 [ 459.127313][T13260] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 459.135334][T13260] RBP: 00007f879fdf4090 R08: 0000000000000000 R09: 0000000000000000 [ 459.143355][T13260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 459.151372][T13260] R13: 00007f879f216038 R14: 00007f879f215fa0 R15: 00007ffd94199c68 [ 459.159414][T13260] [ 459.503844][T13275] netlink: 'syz.3.2709': attribute type 19 has an invalid length. [ 459.513630][T13275] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2709'. [ 460.283726][T13288] netlink: 'syz.0.2714': attribute type 3 has an invalid length. [ 460.291536][T13288] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2714'. [ 460.300968][T13288] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 460.736657][T13298] netlink: 'syz.0.2719': attribute type 10 has an invalid length. [ 460.871313][T13304] __nla_validate_parse: 1 callbacks suppressed [ 460.871354][T13304] netlink: 830 bytes leftover after parsing attributes in process `syz.4.2720'. [ 460.971550][T13300] can: request_module (can-proto-0) failed. [ 461.098756][T13311] netlink: 22 bytes leftover after parsing attributes in process `syz.1.2723'. [ 461.278446][T13311] netlink: 'syz.1.2723': attribute type 10 has an invalid length. [ 461.294127][T13311] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2723'. [ 461.805515][T13328] netlink: 'syz.2.2730': attribute type 3 has an invalid length. [ 461.824619][T13328] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2730'. [ 461.853542][T13328] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 462.493311][T13346] FAULT_INJECTION: forcing a failure. [ 462.493311][T13346] name failslab, interval 1, probability 0, space 0, times 0 [ 462.506573][T13346] CPU: 1 PID: 13346 Comm: syz.3.2737 Not tainted syzkaller #0 [ 462.514091][T13346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 462.524191][T13346] Call Trace: [ 462.527503][T13346] [ 462.530473][T13346] dump_stack_lvl+0x188/0x24e [ 462.535210][T13346] ? show_regs_print_info+0x12/0x12 [ 462.540453][T13346] ? load_image+0x400/0x400 [ 462.544988][T13346] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 462.551004][T13346] ? lock_chain_count+0x20/0x20 [ 462.555890][T13346] should_fail_ex+0x399/0x4d0 [ 462.560597][T13346] should_failslab+0x5/0x20 [ 462.565120][T13346] slab_pre_alloc_hook+0x59/0x310 [ 462.570171][T13346] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 462.576366][T13346] kmem_cache_alloc+0x56/0x2f0 [ 462.581161][T13346] ? dst_alloc+0x101/0x160 [ 462.585607][T13346] dst_alloc+0x101/0x160 [ 462.589893][T13346] ip_route_output_key_hash_rcu+0x14a4/0x23f0 [ 462.595996][T13346] ? ip_route_output_key_hash+0x139/0x330 [ 462.601754][T13346] ip_route_output_key_hash+0x1ef/0x330 [ 462.607344][T13346] ? ip_route_input_rcu+0x3160/0x3160 [ 462.612768][T13346] ? memset+0x1e/0x40 [ 462.616785][T13346] ip_route_output_flow+0x26/0x150 [ 462.621934][T13346] ip_tunnel_xmit+0x993/0x2440 [ 462.626736][T13346] ? ip_tunnel_xmit+0xa0/0x2440 [ 462.631649][T13346] ? ip4_dst_hoplimit+0x2d0/0x2d0 [ 462.636747][T13346] ? skb_push+0x8a/0xd0 [ 462.640942][T13346] ? gre_build_header+0x25b/0x9a0 [ 462.646010][T13346] ipgre_xmit+0x79d/0xb20 [ 462.650378][T13346] dev_hard_start_xmit+0x262/0x870 [ 462.655544][T13346] __dev_queue_xmit+0x1aa3/0x37c0 [ 462.660692][T13346] ? __dev_queue_xmit+0x26b/0x37c0 [ 462.665843][T13346] ? netdev_core_pick_tx+0x340/0x340 [ 462.671159][T13346] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 462.677350][T13346] ? lockdep_hardirqs_on+0x94/0x140 [ 462.682580][T13346] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 462.688785][T13346] ? skb_release_data+0x1d2/0x7c0 [ 462.693924][T13346] __bpf_redirect+0x917/0x1180 [ 462.698749][T13346] bpf_clone_redirect+0x30b/0x4a0 [ 462.703821][T13346] bpf_prog_169a6ad24ef2d602+0x56/0x5b [ 462.709326][T13346] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 462.715354][T13346] ? lock_chain_count+0x20/0x20 [ 462.720238][T13346] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 462.726513][T13346] ? lockdep_hardirqs_on+0x94/0x140 [ 462.731737][T13346] ? ktime_get+0x7b/0x270 [ 462.736101][T13346] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 462.742370][T13346] ? ktime_get_real_ts64+0x440/0x440 [ 462.747690][T13346] ? read_lock_is_recursive+0x10/0x10 [ 462.753112][T13346] bpf_test_run+0x4c1/0x830 [ 462.757670][T13346] ? convert___skb_to_skb+0x580/0x580 [ 462.763088][T13346] ? eth_get_headlen+0x200/0x200 [ 462.768047][T13346] ? __build_skb+0x257/0x3c0 [ 462.772681][T13346] ? convert___skb_to_skb+0x3d/0x580 [ 462.778349][T13346] bpf_prog_test_run_skb+0xaa6/0x12a0 [ 462.783782][T13346] ? cpu_online+0xa0/0xa0 [ 462.788142][T13346] bpf_prog_test_run+0x31e/0x390 [ 462.793120][T13346] __sys_bpf+0x62b/0x780 [ 462.797396][T13346] ? bpf_link_show_fdinfo+0x380/0x380 [ 462.802809][T13346] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 462.809008][T13346] __x64_sys_bpf+0x78/0x90 [ 462.813459][T13346] do_syscall_64+0x4c/0xa0 [ 462.817910][T13346] ? clear_bhb_loop+0x60/0xb0 [ 462.822638][T13346] ? clear_bhb_loop+0x60/0xb0 [ 462.827366][T13346] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 462.833288][T13346] RIP: 0033:0x7fdc62f9cdd9 [ 462.837735][T13346] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 462.857367][T13346] RSP: 002b:00007fdc63d7a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 462.865809][T13346] RAX: ffffffffffffffda RBX: 00007fdc63215fa0 RCX: 00007fdc62f9cdd9 [ 462.873803][T13346] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 462.881798][T13346] RBP: 00007fdc63d7a090 R08: 0000000000000000 R09: 0000000000000000 [ 462.889800][T13346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 462.897798][T13346] R13: 00007fdc63216038 R14: 00007fdc63215fa0 R15: 00007ffe720f7bd8 [ 462.905812][T13346] [ 463.625725][T13362] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2743'. [ 463.742518][T13364] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2744'. [ 463.978243][T13369] netlink: 'syz.1.2746': attribute type 21 has an invalid length. [ 464.002343][T13369] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2746'. [ 464.038390][T13369] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2746'. [ 464.058527][T13369] netlink: 'syz.1.2746': attribute type 12 has an invalid length. [ 464.094099][T13369] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2746'. [ 464.918943][T13403] netlink: 'syz.2.2756': attribute type 3 has an invalid length. [ 464.958009][T13403] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2756'. [ 466.336941][T13443] __nla_validate_parse: 1 callbacks suppressed [ 466.336962][T13443] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2770'. [ 466.589655][T13448] netlink: 'syz.2.2771': attribute type 3 has an invalid length. [ 466.609762][T13448] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2771'. [ 467.343734][T13458] netlink: 'syz.0.2774': attribute type 41 has an invalid length. [ 467.981249][T13479] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2781'. [ 468.044710][T13484] netlink: 'syz.3.2783': attribute type 29 has an invalid length. [ 468.054327][T13470] can: request_module (can-proto-0) failed. [ 468.092720][T13480] netlink: 'syz.2.2780': attribute type 10 has an invalid length. [ 468.104648][T13485] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2783'. [ 468.145319][T13486] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2782'. [ 468.175944][T13484] netlink: 'syz.3.2783': attribute type 29 has an invalid length. [ 468.268701][T13487] netlink: 'syz.3.2783': attribute type 10 has an invalid length. [ 468.330595][T13487] device hsr0 entered promiscuous mode [ 468.690060][T13501] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2786'. [ 470.203345][T13527] netlink: 61211 bytes leftover after parsing attributes in process `syz.1.2795'. [ 470.350860][T13530] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2797'. [ 470.786700][T13537] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2799'. [ 471.288166][T13544] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.2800'. [ 471.701983][T13552] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2803'. [ 472.601796][T13581] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2812'. [ 473.355821][T13601] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2818'. [ 474.231846][T13625] netlink: 154020 bytes leftover after parsing attributes in process `syz.2.2823'. [ 474.319597][T13625] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 476.539348][T13629] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2827'. [ 476.654543][T13635] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2828'. [ 476.956261][T13644] device syzkaller0 entered promiscuous mode [ 479.614097][T13681] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2842'. [ 481.393169][T13733] netlink: 'syz.0.2859': attribute type 39 has an invalid length. [ 481.494535][T13735] netlink: 'syz.3.2860': attribute type 3 has an invalid length. [ 481.523324][T13735] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2860'. [ 481.570872][ T4277] device syz_tun left promiscuous mode [ 481.604643][ T4277] : port 1(syz_tun) entered disabled state [ 481.646925][ T4285] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 481.701128][ T4285] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 481.709731][ T4285] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 481.733036][ T4285] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 481.749649][ T4285] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 481.757240][ T4285] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 481.876349][ T9344] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.117195][ T9344] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.230566][ T9344] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.348220][T13736] chnl_net:caif_netlink_parms(): no params data found [ 482.609915][T13769] netlink: 'syz.1.2870': attribute type 10 has an invalid length. [ 482.683445][T13736] bridge0: port 1(bridge_slave_0) entered blocking state [ 482.724349][T13736] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.765405][T13736] device bridge_slave_0 entered promiscuous mode [ 482.818863][T13736] bridge0: port 2(bridge_slave_1) entered blocking state [ 482.850746][T13736] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.892192][T13736] device bridge_slave_1 entered promiscuous mode [ 482.942281][T13768] netlink: 'syz.3.2869': attribute type 10 has an invalid length. [ 483.033065][T13736] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 483.055972][T13736] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 483.067041][T13772] delete_channel: no stack [ 483.196245][T13775] netlink: 'syz.1.2871': attribute type 10 has an invalid length. [ 483.242393][T13775] bond0: (slave bond_slave_0): Releasing backup interface [ 483.307907][ T9344] tipc: Left network mode [ 483.322661][T13736] team0: Port device team_slave_0 added [ 483.345152][T13736] team0: Port device team_slave_1 added [ 483.535612][T13736] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 483.542618][T13736] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 483.581064][T13736] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 483.593080][T13783] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.2873'. [ 483.701679][T13736] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 483.710914][T13736] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 483.809089][T13736] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 483.844065][ T4285] Bluetooth: hci2: command 0x0409 tx timeout [ 484.020493][T13736] device hsr_slave_0 entered promiscuous mode [ 484.064587][T13736] device hsr_slave_1 entered promiscuous mode [ 484.074860][T13736] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 484.124109][T13736] Cannot create hsr debugfs directory [ 485.614480][T13809] netlink: 'syz.1.2880': attribute type 10 has an invalid length. [ 485.934948][ T4286] Bluetooth: hci2: command 0x041b tx timeout [ 486.610857][T13816] netlink: 'syz.3.2882': attribute type 10 has an invalid length. [ 486.772224][T13736] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 487.011447][T13736] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 487.067492][T13736] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 487.118189][T13834] netlink: 'syz.0.2884': attribute type 11 has an invalid length. [ 487.154706][ T9344] device hsr_slave_0 left promiscuous mode [ 487.174414][T13834] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2884'. [ 487.213374][ T9344] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 487.243830][ T9344] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 487.285623][ T9344] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 487.293128][ T9344] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 488.014118][ T4286] Bluetooth: hci2: command 0x040f tx timeout [ 490.083905][ T4286] Bluetooth: hci2: command 0x0419 tx timeout [ 491.511979][ T9344] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 491.579548][ T9344] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 491.847701][ T9344] .` (unregistering): (slave batadv0): Releasing backup interface [ 491.894511][ T9344] .` (unregistering): Released all slaves [ 491.927704][T13736] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 491.936879][T13840] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2886'. [ 492.165493][ T4286] Bluetooth: Frame is too long (len 13, expected len 4) [ 494.075369][T13889] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2898'. [ 494.664033][T13882] netlink: 'syz.4.2896': attribute type 10 has an invalid length. [ 494.880503][T13736] 8021q: adding VLAN 0 to HW filter on device bond0 [ 494.892316][T13893] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2899'. [ 494.931110][ T9347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 494.954660][ T9347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 494.986539][T13736] 8021q: adding VLAN 0 to HW filter on device team0 [ 495.029946][ T9347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 495.059068][ T9347] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 495.087487][ T9347] bridge0: port 1(bridge_slave_0) entered blocking state [ 495.094679][ T9347] bridge0: port 1(bridge_slave_0) entered forwarding state [ 495.110735][T13900] netlink: 'syz.4.2901': attribute type 2 has an invalid length. [ 495.132374][ T9347] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 495.143132][T13900] netlink: 'syz.4.2901': attribute type 1 has an invalid length. [ 495.157788][T13900] netlink: 170140 bytes leftover after parsing attributes in process `syz.4.2901'. [ 495.194849][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 495.212879][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 495.236034][ T4286] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 495.245572][ T4330] bridge0: port 2(bridge_slave_1) entered blocking state [ 495.252691][ T4330] bridge0: port 2(bridge_slave_1) entered forwarding state [ 495.268923][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 495.329071][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 495.367334][ T9368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 495.401884][ T9368] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 495.486022][ T9368] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 495.505912][ T9368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 495.549820][ T9368] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 495.627293][ T9368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 495.639715][ T9368] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 495.663754][ T9368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 495.700937][ T9368] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 495.729980][T13736] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 496.555601][T13834] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 496.617829][ T9347] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 496.831929][T13937] netlink: 'syz.3.2910': attribute type 10 has an invalid length. [ 496.879932][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 496.888199][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 496.916499][T13736] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 496.959690][T13939] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2912'. [ 496.993736][ T4286] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 497.223835][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 497.232983][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 497.302948][ T9348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 497.324977][ T9348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 497.373777][T13950] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2915'. [ 497.415222][T13736] device veth0_vlan entered promiscuous mode [ 497.430973][ T9348] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 497.449739][ T9348] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 497.488239][T13736] device veth1_vlan entered promiscuous mode [ 497.510618][T13962] tap0: tun_chr_ioctl cmd 2147767517 [ 497.607335][T13956] netlink: 'syz.0.2917': attribute type 1 has an invalid length. [ 497.626787][ T2936] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 497.655837][T13956] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.2917'. [ 497.681412][ T2936] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 497.694749][ T2936] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 497.734031][ T2936] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 497.772067][T13736] device veth0_macvtap entered promiscuous mode [ 497.797061][T13968] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.2920'. [ 497.811771][T13736] device veth1_macvtap entered promiscuous mode [ 497.885848][T13736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 497.913439][T13736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.939255][T13736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 497.962798][T13736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.983039][T13736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 498.013291][T13736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.032603][T13736] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 498.113564][T13968] device syzkaller0 entered promiscuous mode [ 498.140578][ T2936] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 498.162713][ T2936] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 498.766178][ T2936] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 498.775317][ T2936] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 498.788639][T13975] netlink: 'syz.3.2921': attribute type 10 has an invalid length. [ 498.802541][T13736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 498.822318][T13736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.832481][T13736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 498.854010][T13736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.871458][T13736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 498.884250][T13736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.896434][T13736] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 500.517843][ T2936] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 500.526624][ T2936] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 500.548394][T13989] netlink: 'syz.3.2924': attribute type 10 has an invalid length. [ 500.561469][T13736] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.577610][T13736] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.589177][T13736] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.600143][T13736] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.791233][ T9347] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 500.833931][ T9347] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 500.863974][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 500.948440][ T9347] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 500.957349][ T9347] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 500.980941][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 501.118521][T14007] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2927'. [ 501.366296][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.372680][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.530744][T14022] netlink: 'syz.0.2937': attribute type 6 has an invalid length. [ 501.614043][T14022] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2937'. [ 501.881972][T14031] netlink: 'syz.4.2939': attribute type 10 has an invalid length. [ 502.105196][ T4285] Bluetooth: Frame is too long (len 13, expected len 4) [ 502.123898][ T4285] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 502.133441][ T4285] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 502.141954][ T4285] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 502.150918][ T4285] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 502.158767][ T4285] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 502.166223][ T4285] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 502.445424][ T4330] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.466817][T14037] chnl_net:caif_netlink_parms(): no params data found [ 503.329107][ T4330] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.414979][T14054] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2945'. [ 503.480994][ T4330] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.612591][T14037] bridge0: port 1(bridge_slave_0) entered blocking state [ 503.629008][T14037] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.668395][T14037] device bridge_slave_0 entered promiscuous mode [ 503.700130][T14037] bridge0: port 2(bridge_slave_1) entered blocking state [ 503.714101][T14037] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.749894][T14037] device bridge_slave_1 entered promiscuous mode [ 503.834321][T14037] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 503.851089][T14074] netlink: 'syz.0.2952': attribute type 10 has an invalid length. [ 503.875389][T14037] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 503.949941][T14037] team0: Port device team_slave_0 added [ 504.059804][T14037] team0: Port device team_slave_1 added [ 504.114519][ T4285] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 504.243947][ T4285] Bluetooth: hci1: command 0x0409 tx timeout [ 504.284961][T14037] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 504.291970][T14037] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 504.453243][T14037] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 504.534742][ T4330] device 0 left promiscuous mode [ 504.592385][T14037] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 504.613732][T14037] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 504.734130][T14037] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 504.764655][ T4330] device 1 left promiscuous mode [ 504.806245][T14109] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2962'. [ 504.908929][ T4330] tipc: Left network mode [ 504.947842][T14118] netlink: 'syz.2.2965': attribute type 29 has an invalid length. [ 505.164266][T14037] device hsr_slave_0 entered promiscuous mode [ 505.299882][T14037] device hsr_slave_1 entered promiscuous mode [ 505.314566][T14037] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 505.332823][T14037] Cannot create hsr debugfs directory [ 505.338926][T14118] netlink: 'syz.2.2965': attribute type 29 has an invalid length. [ 505.703897][T14149] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2970'. [ 505.745509][T14148] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.776557][T14149] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2970'. [ 505.809626][T14151] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2970'. [ 505.890726][T14153] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2970'. [ 506.036464][T14159] syzkaller1: tun_chr_ioctl cmd 1074812118 [ 506.203800][T14161] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2975'. [ 506.323804][ T4285] Bluetooth: hci1: command 0x041b tx timeout [ 506.465186][T14163] device pim6reg1 entered promiscuous mode [ 507.673320][ T4330] team0: Port device wlan1 removed [ 507.718701][T14037] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 507.769087][T14206] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2987'. [ 507.927539][T14037] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 508.405599][ T4285] Bluetooth: hci1: command 0x040f tx timeout [ 508.414768][T14037] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 509.652918][T14037] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 509.760360][ T4330] device hsr_slave_0 left promiscuous mode [ 509.807409][ T4330] device hsr_slave_1 left promiscuous mode [ 509.860576][ T4330] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 509.873854][ T4330] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 509.899156][ T4330] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 509.912373][ T4330] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 509.971474][ T4330] device bridge_slave_0 left promiscuous mode [ 509.989053][ T4330] bridge0: port 1(bridge_slave_0) entered disabled state [ 510.052525][ T4285] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 510.486182][ T4285] Bluetooth: hci1: command 0x0419 tx timeout [ 510.570485][ T4330] team0 (unregistering): Port device team_slave_1 removed [ 510.621600][ T4330] team0 (unregistering): Port device team_slave_0 removed [ 510.690087][ T4330] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 510.831832][ T4330] team0 (unregistering): Port device bridge_slave_1 removed [ 511.068080][ T4330] bond0 (unregistering): (slave team0): Releasing backup interface [ 511.099837][ T4330] bond0 (unregistering): Released all slaves [ 511.218170][T14249] netlink: 'syz.3.2996': attribute type 10 has an invalid length. [ 511.226959][T14251] device wlan1 entered promiscuous mode [ 511.503440][T14037] 8021q: adding VLAN 0 to HW filter on device bond0 [ 511.619035][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 511.641378][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 511.678293][T14037] 8021q: adding VLAN 0 to HW filter on device team0 [ 511.739193][ T9347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 511.760460][ T9347] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 511.807982][ T9347] bridge0: port 1(bridge_slave_0) entered blocking state [ 511.815214][ T9347] bridge0: port 1(bridge_slave_0) entered forwarding state [ 511.896322][T14263] netlink: 'syz.3.3002': attribute type 1 has an invalid length. [ 511.916208][T14263] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.3002'. [ 511.926957][ T9347] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 511.956475][ T9347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 512.005094][ T9347] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 512.040340][ T9347] bridge0: port 2(bridge_slave_1) entered blocking state [ 512.047525][ T9347] bridge0: port 2(bridge_slave_1) entered forwarding state [ 512.095619][ T9344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 512.122846][ T9344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 512.160117][ T9344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 512.176900][ T9344] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 512.198289][ T9344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 512.261192][ T9344] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 512.293250][ T9344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 512.316355][ T9344] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 512.335319][ T9344] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 512.371986][T14037] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 512.485722][T14273] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.3003'. [ 513.139277][ T9368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 513.178259][ T9368] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 513.312711][T14273] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 513.353816][T14273] CPU: 0 PID: 14273 Comm: syz.0.3003 Not tainted syzkaller #0 [ 513.361356][T14273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 513.371450][T14273] Call Trace: [ 513.374757][T14273] [ 513.377720][T14273] dump_stack_lvl+0x188/0x24e [ 513.382451][T14273] ? show_regs_print_info+0x12/0x12 [ 513.387702][T14273] ? load_image+0x400/0x400 [ 513.392268][T14273] sysfs_warn_dup+0x8a/0xa0 [ 513.396819][T14273] sysfs_do_create_link_sd+0xc0/0x110 [ 513.402244][T14273] device_add+0x7ed/0xfb0 [ 513.406629][T14273] wiphy_register+0x1d9f/0x2ac0 [ 513.411549][T14273] ? cfg80211_event_work+0x40/0x40 [ 513.416709][T14273] ? minstrel_ht_alloc+0x894/0xa20 [ 513.421868][T14273] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 513.427969][T14273] ieee80211_register_hw+0x2d00/0x39f0 [ 513.433482][T14273] ? lockdep_hardirqs_on+0x94/0x140 [ 513.438748][T14273] ? ieee80211_register_hw+0xf21/0x39f0 [ 513.444373][T14273] ? ieee80211_register_hw+0xf21/0x39f0 [ 513.449986][T14273] ? ieee80211_tasklet_handler+0x20/0x20 [ 513.455676][T14273] ? memset+0x1e/0x40 [ 513.459711][T14273] ? __hrtimer_init+0x186/0x270 [ 513.464611][T14273] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 513.470399][T14273] hwsim_new_radio_nl+0xafa/0xce0 [ 513.475503][T14273] genl_family_rcv_msg_doit+0x22a/0x330 [ 513.481091][T14273] ? end_current_label_crit_section+0x170/0x170 [ 513.487379][T14273] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 513.493332][T14273] ? bpf_lsm_capable+0x5/0x10 [ 513.498048][T14273] ? security_capable+0x85/0xb0 [ 513.502946][T14273] genl_rcv_msg+0x604/0x790 [ 513.507491][T14273] ? lockdep_hardirqs_on+0x94/0x140 [ 513.512748][T14273] ? genl_bind+0x360/0x360 [ 513.517201][T14273] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 513.523601][T14273] netlink_rcv_skb+0x1fb/0x450 [ 513.528417][T14273] ? genl_bind+0x360/0x360 [ 513.532885][T14273] ? netlink_ack+0x1170/0x1170 [ 513.537724][T14273] ? down_read+0x1a8/0x2d0 [ 513.542191][T14273] genl_rcv+0x24/0x40 [ 513.546219][T14273] netlink_unicast+0x74d/0x8d0 [ 513.551052][T14273] netlink_sendmsg+0x8ad/0xbd0 [ 513.555881][T14273] ? netlink_getsockopt+0x550/0x550 [ 513.561136][T14273] ? aa_sock_msg_perm+0x94/0x150 [ 513.566124][T14273] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 513.571457][T14273] ? security_socket_sendmsg+0x7c/0xa0 [ 513.576979][T14273] ? netlink_getsockopt+0x550/0x550 [ 513.582226][T14273] ____sys_sendmsg+0x5be/0x970 [ 513.587052][T14273] ? __sys_sendmsg_sock+0x30/0x30 [ 513.592120][T14273] ? __import_iovec+0x315/0x500 [ 513.597011][T14273] ? import_iovec+0x6f/0xa0 [ 513.601539][T14273] ___sys_sendmsg+0x2a2/0x360 [ 513.606255][T14273] ? __sys_sendmsg+0x290/0x290 [ 513.611070][T14273] ? ktime_get_real_ts64+0x440/0x440 [ 513.616417][T14273] __se_sys_sendmsg+0x1bb/0x2a0 [ 513.621306][T14273] ? __x64_sys_sendmsg+0x80/0x80 [ 513.626295][T14273] ? lockdep_hardirqs_on+0x94/0x140 [ 513.631532][T14273] do_syscall_64+0x4c/0xa0 [ 513.635981][T14273] ? clear_bhb_loop+0x60/0xb0 [ 513.640682][T14273] ? clear_bhb_loop+0x60/0xb0 [ 513.645388][T14273] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 513.651315][T14273] RIP: 0033:0x7fc83599cdd9 [ 513.655753][T14273] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 513.675383][T14273] RSP: 002b:00007fc836780028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 513.683824][T14273] RAX: ffffffffffffffda RBX: 00007fc835c16090 RCX: 00007fc83599cdd9 [ 513.691820][T14273] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 513.699942][T14273] RBP: 00007fc835a32d69 R08: 0000000000000000 R09: 0000000000000000 [ 513.708026][T14273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 513.716022][T14273] R13: 00007fc835c16128 R14: 00007fc835c16090 R15: 00007ffcf1db8d58 [ 513.724046][T14273] [ 514.437623][T14314] netlink: 'syz.0.3009': attribute type 10 has an invalid length. [ 514.494796][T14314] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.546491][T14314] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.607454][T14314] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.825802][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 514.833518][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 514.882276][T14037] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 515.030823][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 515.047587][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 515.079872][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 515.141607][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 515.225698][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 515.276805][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 515.311660][T14323] netlink: 'syz.2.3012': attribute type 10 has an invalid length. [ 515.441584][T14037] device veth0_vlan entered promiscuous mode [ 515.462514][T14330] netlink: 'syz.0.3014': attribute type 1 has an invalid length. [ 515.502988][T14037] device veth1_vlan entered promiscuous mode [ 515.525566][T14330] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.3014'. [ 515.638940][ T9368] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 515.674487][ T9368] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 515.694471][ T9368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 515.725890][ T9368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 515.742859][T14037] device veth0_macvtap entered promiscuous mode [ 515.773261][T14037] device veth1_macvtap entered promiscuous mode [ 515.836968][T14037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 515.852548][T14037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.862666][T14037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 515.879921][T14037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.891838][T14037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 515.907206][T14037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.919227][T14037] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 515.927195][ T9368] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 515.945604][ T9368] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 515.965169][ T9368] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 515.990936][ T9368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 516.055758][T14037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 516.078982][T14037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.111649][T14037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 516.145689][T14037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.214949][T14037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 516.257753][T14037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.302858][T14037] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 516.384848][ T2936] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 516.400558][ T2936] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 516.420598][T14358] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.3018'. [ 516.467882][T14037] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.483297][T14037] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.503153][T14037] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.531226][T14037] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.049087][ T2936] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 517.062850][ T2936] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 517.088872][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 517.195728][ T9348] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 517.221741][ T9348] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 517.264989][ T9348] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 517.767189][T14397] netlink: 'syz.4.3027': attribute type 10 has an invalid length. [ 517.969112][T14401] netlink: 'syz.2.3028': attribute type 1 has an invalid length. [ 518.013866][T14401] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.3028'. [ 518.304829][ T4285] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 518.747181][T14428] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3035'. [ 518.797178][T14428] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3035'. [ 518.833849][T14428] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 519.255757][ T4286] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 519.264775][ T4286] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 519.272646][ T4286] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 519.281252][ T4286] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 519.289744][ T4286] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 519.297105][ T4286] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 521.364247][ T4286] Bluetooth: hci0: command 0x0409 tx timeout [ 523.443788][ T4286] Bluetooth: hci0: command 0x041b tx timeout [ 525.523820][ T4286] Bluetooth: hci0: command 0x040f tx timeout [ 527.604457][ T4286] Bluetooth: hci0: command 0x0419 tx timeout [ 545.524704][ T5921] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 1-.... } 2648 jiffies s: 51697 root: 0x2/. [ 545.544270][ T5921] rcu: blocking rcu_node structures (internal RCU debug): [ 545.551446][ T5921] Sending NMI from CPU 0 to CPUs 1: [ 545.556862][ C1] NMI backtrace for cpu 1 [ 545.556872][ C1] CPU: 1 PID: 14431 Comm: syz.0.3036 Not tainted syzkaller #0 [ 545.556890][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 545.556900][ C1] RIP: 0010:mark_lock+0x9c/0x320 [ 545.556930][ C1] Code: 89 c7 41 81 e7 ff 1f 00 00 c1 e8 03 25 f8 03 00 00 48 8d b8 40 92 af 90 be 08 00 00 00 e8 1c 8b 6e 00 4c 0f a3 3d 34 9a 4a 0f <73> 10 4b 8d 04 7f c1 e0 06 4c 8d b8 00 11 48 90 eb 24 48 c7 c0 40 [ 545.556945][ C1] RSP: 0018:ffffc900001e0900 EFLAGS: 00000057 [ 545.556960][ C1] RAX: 0000000000000001 RBX: ffff888026283b80 RCX: ffffffff8164f804 [ 545.556974][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff90af9320 [ 545.556985][ C1] RBP: 0000000000000003 R08: ffffffff90af9327 R09: 1ffffffff215f264 [ 545.556998][ C1] R10: dffffc0000000000 R11: fffffbfff215f265 R12: 0000000000000008 [ 545.557010][ C1] R13: dffffc0000000000 R14: ffff888026284660 R15: 0000000000000731 [ 545.557023][ C1] FS: 00007fc8367a16c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 545.557039][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 545.557052][ C1] CR2: 000000110c362f5e CR3: 000000002f0fe000 CR4: 00000000003506e0 [ 545.557068][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 545.557078][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 545.557090][ C1] Call Trace: [ 545.557095][ C1] [ 545.557111][ C1] lockdep_hardirqs_on_prepare+0x249/0x770 [ 545.557143][ C1] ? lock_chain_count+0x20/0x20 [ 545.557174][ C1] ? asm_sysvec_irq_work+0x16/0x20 [ 545.557198][ C1] ? asm_sysvec_irq_work+0x16/0x20 [ 545.557220][ C1] ? trace_irq_enable_rcuidle+0xe6/0x140 [ 545.557250][ C1] trace_hardirqs_on+0x34/0x40 [ 545.557272][ C1] asm_sysvec_irq_work+0x16/0x20 [ 545.557295][ C1] RIP: 0010:rcu_read_unlock_special+0x7f/0x510 [ 545.557314][ C1] Code: eb 03 48 b8 f1 f1 f1 f1 f8 f2 f2 f2 4a 89 04 2b 42 c7 44 2b 08 f8 f3 f3 f3 65 44 8b 35 d2 33 95 7e 41 f7 c6 00 00 f0 00 74 40 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 42 c7 44 2b 08 [ 545.557329][ C1] RSP: 0018:ffffc900001e0ac0 EFLAGS: 00000206 [ 545.557343][ C1] RAX: d38ec919729ec800 RBX: 1ffff9200003c160 RCX: d38ec919729ec800 [ 545.557356][ C1] RDX: dffffc0000000000 RSI: ffffffff8a8c1120 RDI: ffffffff8adf13a0 [ 545.557369][ C1] RBP: ffffc900001e0bb0 R08: ffffffff90af9267 R09: 1ffffffff215f24c [ 545.557382][ C1] R10: dffffc0000000000 R11: fffffbfff215f24d R12: 0000000000000246 [ 545.557395][ C1] R13: dffffc0000000000 R14: ffff8880b8f3b900 R15: 0000000000000002 [ 545.557429][ C1] ? mac80211_hwsim_beacon_tx+0x61e/0xae0 [ 545.557456][ C1] ? __rcu_read_unlock+0xd0/0xd0 [ 545.557492][ C1] __rcu_read_unlock+0x78/0xd0 [ 545.557508][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x26/0x170 [ 545.557538][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 545.557557][ C1] ieee80211_iterate_active_interfaces_atomic+0x156/0x170 [ 545.557590][ C1] mac80211_hwsim_beacon+0xb7/0x1b0 [ 545.557624][ C1] __hrtimer_run_queues+0x54a/0xd50 [ 545.557654][ C1] ? hw_scan_work+0xf50/0xf50 [ 545.557694][ C1] ? hrtimer_interrupt+0x9c0/0x9c0 [ 545.557714][ C1] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 545.557756][ C1] hrtimer_run_softirq+0x183/0x2a0 [ 545.557783][ C1] handle_softirqs+0x2a1/0x930 [ 545.557811][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 545.557836][ C1] ? do_softirq+0x210/0x210 [ 545.557866][ C1] __irq_exit_rcu+0x13b/0x230 [ 545.557884][ C1] ? irq_exit_rcu+0x20/0x20 [ 545.557917][ C1] irq_exit_rcu+0x5/0x20 [ 545.557932][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 545.557952][ C1] [ 545.557957][ C1] [ 545.557964][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 545.557988][ C1] RIP: 0010:obj_cgroup_charge+0x32a/0x620 [ 545.558013][ C1] Code: 84 24 80 00 00 00 f7 84 24 80 00 00 00 00 02 00 00 41 c6 44 1f 08 f8 0f 85 21 01 00 00 41 f7 c4 00 02 00 00 74 01 fb 45 31 e4 <80> 7c 24 14 00 0f 85 a0 00 00 00 48 8b 44 24 18 49 89 c6 49 c1 ee [ 545.558027][ C1] RSP: 0018:ffffc90004de7080 EFLAGS: 00000246 [ 545.558041][ C1] RAX: d38ec919729ec800 RBX: dffffc0000000000 RCX: d38ec919729ec800 [ 545.558055][ C1] RDX: dffffc0000000000 RSI: ffffffff8a8c1120 RDI: ffffffff8adf13a0 [ 545.558068][ C1] RBP: ffffc90004de7178 R08: ffffffff90af9267 R09: 1ffffffff215f24c [ 545.558081][ C1] R10: dffffc0000000000 R11: fffffbfff215f24d R12: 0000000000000000 [ 545.558094][ C1] R13: ffff8880b8f36950 R14: ffff8880b8f36978 R15: 1ffff920009bce18 [ 545.558134][ C1] ? obj_cgroup_charge+0xe9/0x620 [ 545.558170][ C1] ? mod_objcg_mlstate+0x320/0x320 [ 545.558199][ C1] ? percpu_ref_put+0x12/0x100 [ 545.558220][ C1] ? percpu_ref_put+0x12/0x100 [ 545.558244][ C1] slab_pre_alloc_hook+0x2e7/0x310 [ 545.558263][ C1] ? slab_pre_alloc_hook+0xb6/0x310 [ 545.558287][ C1] kmem_cache_alloc_lru+0x49/0x2e0 [ 545.558304][ C1] ? new_inode_pseudo+0x7e/0x1c0 [ 545.558331][ C1] new_inode_pseudo+0x7e/0x1c0 [ 545.558354][ C1] new_inode+0x25/0x1c0 [ 545.558373][ C1] ? start_creating+0x1f5/0x310 [ 545.558394][ C1] debugfs_create_dir+0xef/0x4b0 [ 545.558416][ C1] nsim_bpf_verifier_prep+0x21e/0x540 [ 545.558442][ C1] ? nsim_bpf_finalize+0x10/0x10 [ 545.558460][ C1] ? check_attach_btf_id+0xea0/0xea0 [ 545.558482][ C1] ? down_read+0x1a8/0x2d0 [ 545.558512][ C1] bpf_prog_offload_verifier_prep+0xc6/0x130 [ 545.558533][ C1] bpf_check+0xaa2c/0x10db0 [ 545.558586][ C1] ? perf_swevent_get_recursion_context+0xda/0x150 [ 545.558615][ C1] ? bpf_get_btf_vmlinux+0x10/0x10 [ 545.558630][ C1] ? perf_trace_buf_alloc+0x12c/0x300 [ 545.558655][ C1] ? perf_trace_lock+0x197/0x390 [ 545.558681][ C1] ? trace_event_raw_event_lock+0x250/0x250 [ 545.558729][ C1] ? trace_call_bpf+0xbf/0x6b0 [ 545.558757][ C1] ? __lock_acquire+0x7d10/0x7d10 [ 545.558788][ C1] ? migrate_enable+0x148/0x220 [ 545.558810][ C1] ? trace_call_bpf+0xbf/0x6b0 [ 545.558832][ C1] ? trace_call_bpf+0xbf/0x6b0 [ 545.558856][ C1] ? trace_call_bpf+0x5d6/0x6b0 [ 545.558880][ C1] ? trace_call_bpf+0xbf/0x6b0 [ 545.558911][ C1] ? __bpf_trace_bpf_trace_printk+0x20/0x20 [ 545.558941][ C1] ? trace_event_raw_event_lock+0x250/0x250 [ 545.558968][ C1] ? perf_trace_run_bpf_submit+0x124/0x1c0 [ 545.559004][ C1] ? ct_nmi_exit+0x145/0x1c0 [ 545.559022][ C1] ? ct_irq_exit_irqson+0x113/0x170 [ 545.559046][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 545.559074][ C1] ? lock_chain_count+0x20/0x20 [ 545.559102][ C1] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 545.559124][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 545.559142][ C1] ? ktime_get_with_offset+0xff/0x320 [ 545.559162][ C1] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 545.559184][ C1] ? ktime_get_real_ts64+0x440/0x440 [ 545.559209][ C1] ? bpf_prog_offload_init+0x594/0x750 [ 545.559235][ C1] ? memset+0x1e/0x40 [ 545.559251][ C1] ? bpf_obj_name_cpy+0x190/0x1d0 [ 545.559278][ C1] bpf_prog_load+0x101a/0x1560 [ 545.559318][ C1] ? map_freeze+0x390/0x390 [ 545.559342][ C1] ? __might_fault+0xa6/0x120 [ 545.559375][ C1] ? __might_fault+0xa6/0x120 [ 545.559392][ C1] ? __might_fault+0xc2/0x120 [ 545.559408][ C1] ? __might_fault+0xa6/0x120 [ 545.559426][ C1] ? bpf_lsm_bpf+0x5/0x10 [ 545.559444][ C1] ? security_bpf+0x7a/0xa0 [ 545.559465][ C1] __sys_bpf+0x5b8/0x780 [ 545.559486][ C1] ? perf_trace_run_bpf_submit+0x124/0x1c0 [ 545.559515][ C1] ? bpf_link_show_fdinfo+0x380/0x380 [ 545.559558][ C1] ? lock_chain_count+0x20/0x20 [ 545.559593][ C1] __x64_sys_bpf+0x78/0x90 [ 545.559618][ C1] do_syscall_64+0x4c/0xa0 [ 545.559641][ C1] ? clear_bhb_loop+0x60/0xb0 [ 545.559661][ C1] ? clear_bhb_loop+0x60/0xb0 [ 545.559686][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 545.559706][ C1] RIP: 0033:0x7fc83599cdd9 [ 545.559733][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 545.559746][ C1] RSP: 002b:00007fc8367a1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 545.559762][ C1] RAX: ffffffffffffffda RBX: 00007fc835c15fa0 RCX: 00007fc83599cdd9 [ 545.559774][ C1] RDX: 0000000000000094 RSI: 0000200000000600 RDI: 0000000000000005 [ 545.559785][ C1] RBP: 00007fc835a32d69 R08: 0000000000000000 R09: 0000000000000000 [ 545.559796][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 545.559805][ C1] R13: 00007fc835c16038 R14: 00007fc835c15fa0 R15: 00007ffcf1db8d58 [ 545.559837][ C1]