last executing test programs: 30m36.00824364s ago: executing program 1 (id=2544): bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x5, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x5b, '\x00', 0x0, @fallback=0x1f}, 0x94) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) socketpair(0x1, 0x1, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, &(0x7f0000000080), 0x0}, 0x20) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8982, 0x0) socket$kcm(0xa, 0x6, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000700000095000000000000006100000600"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x2, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs$namespace(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000a000000040000000006000e0400000000000000060000000100000f0100000004000000ff0f00000000000009000000000000000f03000000e10418000000002e61"], &(0x7f0000000900)=""/179, 0x5a, 0xb3, 0x1}, 0x28) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000500)={0x0, 0x80, 0x3, 0xf9, 0xaa, 0x0, 0x0, 0x2, 0x20200, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x100, 0x2, @perf_config_ext={0xc4, 0x2}, 0x1000a8, 0x7, 0x80000000, 0x6, 0x0, 0x3, 0x2, 0x0, 0xffffff7f, 0x0, 0x9dd}, 0xffffffffffffffff, 0x5, r0, 0x6) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000c40), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(r2, 0x0, 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1, 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r4, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) 30m35.385607879s ago: executing program 1 (id=2561): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x43, 0x0, 0x0) 30m35.03918494s ago: executing program 1 (id=2554): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20008884) (async) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20008884) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xe, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000600)="2e000000110049409e32d211936ce81fc5f87834bb5d17fb77aedfc8b31b000d007828f0cac6e6299a96e542def8e055ad1d1171c3649deafa34885bc0c5c74c3e11cda3f500dc2f73", 0x49}], 0x1}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@map=0xffffffffffffffff, 0xe, 0xfb9a240946c11785, 0x7, &(0x7f00000002c0)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x1a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x450, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x4, @perf_config_ext, 0x0, 0x8, 0x2, 0x5, 0x0, 0x7fff, 0x9, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x0) (async) r2 = perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x1a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x450, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x4, @perf_config_ext, 0x0, 0x8, 0x2, 0x5, 0x0, 0x7fff, 0x9, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, 0x0, &(0x7f0000000080)='syzkaller\x00'}, 0x94) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, 0x0, &(0x7f0000000080)='syzkaller\x00'}, 0x94) recvmsg$unix(0xffffffffffffffff, 0x0, 0x100) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) (async) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) (async) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000580)=r3}, 0x20) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@enum, @typedef={0x6, 0x0, 0x0, 0x8, 0x3}, @func={0x2, 0x0, 0x0, 0xc, 0x4}, @func_proto]}, {0x0, [0x0, 0x61, 0x5f, 0x0, 0x0, 0x61, 0x5f, 0x5f]}}, 0x0, 0x52}, 0x20) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x460, 0x9, 0x0, 0xa, 0xe4, 0xffff0000, 0xffff, 0x0, 0x102ff, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=@bloom_filter={0x1e, 0x7, 0x10001, 0x0, 0x4800, r1, 0x6, '\x00', 0x0, r8, 0x0, 0x3, 0x1, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0xb, 0x15, &(0x7f0000000740)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x81}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x9}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000800)='GPL\x00', 0x240000, 0xe8, &(0x7f0000000840)=""/232, 0x40f00, 0x14, '\x00', 0x0, @fallback=0x2b, r8, 0x8, &(0x7f0000000940)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000980)={0x4, 0x2, 0xffffffff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000c00)=[r6, r1, r6, r5, r6, r9, r1, r1], 0x0, 0x10, 0x8}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0xb, 0x15, &(0x7f0000000740)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x81}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x9}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000800)='GPL\x00', 0x240000, 0xe8, &(0x7f0000000840)=""/232, 0x40f00, 0x14, '\x00', 0x0, @fallback=0x2b, r8, 0x8, &(0x7f0000000940)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000980)={0x4, 0x2, 0xffffffff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000c00)=[r6, r1, r6, r5, r6, r9, r1, r1], 0x0, 0x10, 0x8}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f1, &(0x7f0000000080)) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f1, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f00000006c0)={0x5, 0x80, 0x40, 0xb, 0x5b, 0x71, 0x0, 0x8, 0x80000, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xa0a, 0x0, @perf_config_ext={0x89, 0x6}, 0x8b23, 0xe, 0x5ba46521, 0x6, 0x9, 0xefd8, 0x6f23, 0x0, 0x800, 0x0, 0xfe0}) 30m29.661749877s ago: executing program 1 (id=2562): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x6, 0x0, 0x0, 0x0, 0x0, 0xa0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_bp={&(0x7f0000000240), 0x6}, 0x0, 0x0, 0xc2ba, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x7, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x6}, {0x5}, {0x0, 0x5}]}]}, {0x0, [0x0, 0x2e, 0x5f, 0x61, 0x30]}}, &(0x7f0000000400)=""/188, 0x43, 0xbc, 0x1}, 0x28) syz_clone(0x50205100, 0x0, 0x0, 0x0, 0x0, 0x0) 30m29.429496964s ago: executing program 1 (id=2567): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x3e1, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081084e81f782db44b904021d080006007c06e8fe55a10a0015400100142603600e120800060000000201a80016000900014003e01100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x4, 0x5, 0x7, 0x8, 0x0, 0x0, 0x1004, 0x9, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa98d, 0x4, @perf_bp={&(0x7f0000000300), 0xa}, 0xc020, 0x1, 0x125, 0x5, 0x9, 0x9, 0x28, 0x0, 0x2, 0x0, 0x5}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0xb) perf_event_open$cgroup(&(0x7f0000000240)={0x0, 0x80, 0x0, 0x8, 0x9, 0x3, 0x0, 0x3, 0x80, 0x5, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x731, 0x1, @perf_bp={&(0x7f0000000100), 0x4}, 0xa00, 0x401, 0x8, 0x3, 0x8000, 0x1, 0x100, 0x0, 0x100, 0x0, 0xf1d9}, r1, 0xf, r2, 0x1) r3 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x0, @private0={0x76}}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000000)="bb", 0x1}], 0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="20000000000000008400f6ff070000003d3152a6773eb7d092000000000000002000000000000000840000000800000076"], 0x40}, 0x0) 30m28.886901601s ago: executing program 1 (id=2573): perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x40, 0x5, 0x7f, 0x5, 0x0, 0x5, 0x10000, 0x9, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xff, 0x1, @perf_config_ext={0xadb2, 0x6}, 0x4c14, 0x2, 0x3ff, 0x4, 0x4, 0x5, 0x9, 0x0, 0x9, 0x0, 0xb9}, 0x0, 0x6, 0xffffffffffffffff, 0xb) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000080), &(0x7f0000000240)=r3}, 0x20) syz_clone(0x410644f5, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x2a801400, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) 30m13.783952629s ago: executing program 32 (id=2573): perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x40, 0x5, 0x7f, 0x5, 0x0, 0x5, 0x10000, 0x9, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xff, 0x1, @perf_config_ext={0xadb2, 0x6}, 0x4c14, 0x2, 0x3ff, 0x4, 0x4, 0x5, 0x9, 0x0, 0x9, 0x0, 0xb9}, 0x0, 0x6, 0xffffffffffffffff, 0xb) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000080), &(0x7f0000000240)=r3}, 0x20) syz_clone(0x410644f5, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x2a801400, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) 23m11.253563049s ago: executing program 2 (id=4032): r0 = syz_clone(0x1220080, &(0x7f0000000000)="b01dfae9d455be2b3b49c152d544d1ee5292934d4d74", 0x16, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)="7571e9af061a260e1f146197b8fdb749b7584097a9d1dcae2a19cb0ad949e15897b46da946dc44c8798d6e9b19b11864b3f90e8966b9e90254cb11646ea9a51b218f53eb61d7670157f51e5b6405f422d941f7a6a38af668d67866096c8b661ea6cfbbade556a51ee8831e465a4ac584470ad5d537aafaf2d14dbbc8b270d8d5efda39106ec6a09a6e4704da2bec06c3a486be0ebd13e586a708ff42f7fdbb501179e10cb7a8d7b989f2d62dcca0f3e5f45a3e19bf8c00b0346d913fd8385b3599549fa7f8d9c044feb0bb3540ed64c7636270f11d17f4c322e056752d200552849e8968bfa016799ec42c11d6060af1") (async) r1 = perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x6b, 0xe, 0x0, 0x0, 0x0, 0xfffffffffffff44f, 0x64, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0xf97, 0x8a9f}, 0x1, 0x3, 0x7226, 0x3, 0x100, 0x401, 0x9, 0x0, 0xf, 0x0, 0x3}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r0, r1, 0x0, 0x9, &(0x7f0000000240)='#-+.+@#&\x00'}, 0x30) (async) r2 = syz_open_procfs$namespace(r0, &(0x7f00000002c0)='ns/cgroup\x00') (async) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000300)='syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000340)='cpuset.effective_cpus\x00', 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x6e40c0, 0x0) ioctl$TUNSETCARRIER(r5, 0x400454e2, &(0x7f00000003c0)=0x1) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@ifindex=0x0, 0x19, 0x0, 0x3, &(0x7f0000000400)=[0x0], 0x1, 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000540)={@fallback=r2, r4, 0x18, 0x0, 0x0, @void, @value, @void, @void, r7}, 0x20) (async, rerun: 64) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000580)={r4}) (rerun: 64) sendmsg$inet(r8, &(0x7f0000000780)={&(0x7f00000005c0)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000600)="06bfadcc3d415b25099a69da915131de720847dc08a5e57b7457c7700f5fbe87154f275dd41f66081f1761345be48f55b28682ef127f37d3cf98087c7450d2980d24977f17cf04ffbf904e76f65af29886d4f6022f3deddbea2e6064470a37c6cee553574aa013fd3aeb50a96a4f1be27fa597d8333808d05795d7fd45622b2d736b6da5212e52051d356283502b202902fea69e2e509d8a1428a3a12f2f7691", 0xa0}, {&(0x7f00000006c0)}], 0x2, &(0x7f0000000740)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x200}}], 0x18}, 0x8000840) (async) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000007c0)=0x7fff) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000800)={r4, 0xffffffffffffffff}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={r4, 0xe0, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000a40)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000000a80)=[0x0], &(0x7f0000000ac0)=[0x0, 0x0, 0x0], 0x0, 0xc6, &(0x7f0000000b00)=[{}], 0x8, 0x10, &(0x7f0000000b40), &(0x7f0000000b80), 0x8, 0xd5, 0x8, 0x8, &(0x7f0000000bc0)}}, 0x10) (async) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=@bloom_filter={0x1e, 0x7f, 0x5, 0x3, 0x1420, r4, 0x2, '\x00', r6, r4, 0x5, 0x4, 0x5, 0xb}, 0x50) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0xa829203a758df02a, 0x18, &(0x7f0000000840)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9f}, [@map_val={0x18, 0x5, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x7f}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7ff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r9}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @map_val={0x18, 0x4, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x8}]}, &(0x7f0000000900)='GPL\x00', 0xfffffff8, 0x50, &(0x7f0000000940)=""/80, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, r4, 0x8, &(0x7f00000009c0)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000a00)={0x1, 0xa, 0x100, 0x4}, 0x10, r11, r4, 0x2, &(0x7f0000000dc0)=[r12, r4], &(0x7f0000000e00)=[{0x1, 0x2, 0x2}, {0x4, 0x4, 0x4}], 0x10, 0x4}, 0x94) syz_clone(0x808100, &(0x7f0000000f00)="cd4083891c49b7f0eec39f897bd132bb81828e7d30c6a5084639d496b891e1a850e7711123c46a6319b6d344d9dafbe98ec8a9ff41f7783b3979335096fcb0f24614770c3fc388952e1b135c18d857472ec0599bf9ebc6126aebc0c419fee5eb462ddf231e2825c24a54e97a6e919d0c593cc147af522f5fbf380509fa00e1266cf3278bb70c999946bfbd8c61f62833c479817cfb87f31f5f950e6453f1cdb6ee01c3910b3aa26ac6e38c75f92a19212b28e2d5e81636ccaf1b7b2a0b047d7a0d587483cf2694df6f70964786cf6edad99769b5608a55859b16bff1acc7af13553a6a579f1a33", 0xe7, &(0x7f0000001000), &(0x7f0000001040), &(0x7f0000001080)="5a868aaf80") socket$kcm(0x29, 0x5, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001140)={{r13, 0xffffffffffffffff}, &(0x7f00000010c0), &(0x7f0000001100)=r4}, 0x20) r15 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0x11, 0xb, &(0x7f0000001180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xd1}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r14}}, @map_fd={0x18, 0x8, 0x1, 0x0, r12}, @jmp={0x5, 0x0, 0x4, 0xb, 0xa, 0x0, 0x1}, @ldst={0x2, 0x1, 0x4, 0xb, 0x8, 0xffffffffffffffe0, 0xfffffffffffffff0}]}, &(0x7f0000001200)='syzkaller\x00', 0x81, 0x0, &(0x7f0000001240), 0x41000, 0x53, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001280)={0x8, 0x5}, 0x8, 0x10, &(0x7f00000012c0)={0x5, 0xa, 0x9, 0x5}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000001300)=[r1], &(0x7f0000001340)=[{0x0, 0x5, 0x0, 0x8}, {0x0, 0x5, 0x1, 0x2}], 0x10, 0x8}, 0x94) (async) r16 = perf_event_open(&(0x7f0000001480)={0x3, 0x80, 0x80, 0x3, 0x3, 0x72, 0x0, 0x4, 0x4, 0xb, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000001440), 0x8}, 0x111080, 0x3, 0x8c, 0x4, 0x3, 0x4, 0xfff9, 0x0, 0xa4}, 0x0, 0x7, r1, 0x9) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, 0xfffffffffffffffe) r17 = socket$kcm(0x29, 0x2, 0x0) r18 = perf_event_open$cgroup(&(0x7f0000001500)={0x3, 0x80, 0xc, 0x3, 0x1, 0x4, 0x0, 0x4, 0x80000, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x8, 0x81}, 0x231, 0x7, 0x2, 0x0, 0x2, 0xa22c, 0x81, 0x0, 0x2, 0x0, 0x9}, r3, 0x8, r16, 0x4) ioctl$PERF_EVENT_IOC_RESET(r18, 0x2403, 0xfffffffffffffffa) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001600)={{0x1, 0xffffffffffffffff}, &(0x7f0000001580), &(0x7f00000015c0)=r15}, 0x20) (async) r20 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000001640)={r10}, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000001680)={r4, r20, 0x4, r4}, 0x10) (async, rerun: 32) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001800)={@fallback=r17, r19, 0x0, 0x18, r13}, 0x20) (rerun: 32) 23m10.965105217s ago: executing program 2 (id=4033): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0xc8, 0x80001, 0x1, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce8186768800fe08000e40000200875a65969ff57b00ff02000000008dffffffffffffff0001"], 0xfdef) 23m10.823425682s ago: executing program 2 (id=4034): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000940)={r0, &(0x7f0000000840)="5406cd8b976006e12ae94e4fd58d92843e32102cf27df3aef4490c0870a88912eb100e7a4afd8cff7bc7a94aebe8962c0b76de4fd296b03fed2d5152f2fb6c1c7282fa", &(0x7f00000008c0)=""/124, 0x4}, 0x20) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x28209, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x7, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}, [@generic={0x71, 0x0, 0x1, 0x81}]}, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0xb9, &(0x7f0000000200)=""/185, 0x41100, 0x0, '\x00', 0x0, 0xd}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000001b80)={0x0, 0x0, 0x0}, 0x12000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x2a, &(0x7f0000000100)=r5, 0x4) sendmsg$unix(r4, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r4], 0x18, 0x80}, 0xc0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffb, 0x81}, 0x100c, 0x0, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@const={0x0, 0x0, 0x0, 0x9, 0x3}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0x2000}}]}}, 0x0, 0x4e}, 0x28) sendmsg$inet(r1, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1100000000000000004003000100000000000000000000001c00000000000000000f00fd08000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000d58963294297d5ea14db774b9be13b5e633a514b39f6921d4b597394b16cf23f44ac64740f83048a2277d7631d34cfd51b840d3123deec9224dc23d42694bb42d582e6ee5f692fd59be4cabb3ca4822c03843e8c53961366470e7e0040000000000000", @ANYRES32=0x0, @ANYBLOB="a00500000000000000000000240000000000000000000000070000009404000044108800000000000000000000000000000000001100000000000000000000000100"/76], 0x98}, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x6, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x1, 0x0, 0x4, 0x0, 0x0, 0x6, 0x86e46, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0xc, 0x806}, 0x240, 0x1, 0x0, 0x0, 0x0, 0xffff0000, 0xd, 0x0, 0xfffffffd, 0x0, 0x3ffffffffffffffc}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000600)=""/182}, 0x20) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r0, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000280)=[0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0], 0x0, 0xa9, &(0x7f00000004c0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000500), &(0x7f00000005c0), 0x8, 0x32, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000a80)={@cgroup=r0, 0x8, 0x0, 0x2, &(0x7f0000000980)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f00000009c0), &(0x7f0000000a00)=[0x0, 0x0], &(0x7f0000000a40)=[0x0, 0x0, 0x0, 0x0]}, 0x40) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f1, &(0x7f0000000080)) 23m8.95966459s ago: executing program 2 (id=4036): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffa}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x48004) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000400)='syz0\x00', 0x200002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x13, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c1300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000048aa008085000000040000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000540)={r2}, 0xc) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000440), 0x2, 0x0) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x2) r3 = syz_clone(0x10400, &(0x7f0000000580)="8555451985e93ae51af05b6faec3bc8aa826dc25ea7622f4b639d1aec6e11b4509d48399a1eccb34f145a531180e02dae7b3b76502d3429b5311c8aeda564a0304188c520b9116aba382e63fad54ba2a4357bc3c54decb76be04b191009485f9eb3ccc97333eca2879d8ac8ce1272cf6879c6ef81da9ec7709e9aa0a3a95daedd999a92404dc9d92d3a0befa8f4e93a829a3d37d7d5ef06d945e84aac44c3bcd2b4b85afa8fdbed3d0", 0xa9, 0x0, 0x0, &(0x7f0000000700)="04d978da36bb2c23a54ea29983340e62175bf3fbb155019f2d08f30d06fd1e1c6cbece45887240") syz_open_procfs$namespace(r3, &(0x7f0000000840)='ns/mnt\x00') r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000400000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70700000000000018010000202070c84ec73887202500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000800"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$kcm(0xa, 0x5, 0x0) r6 = socket$kcm(0xa, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000800000004000000000000070000000003000000000000080100000000000000000000090200000000002e2e5f"], 0x0, 0x44}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)=ANY=[@ANYBLOB="9beb01031800000000000000000000008000000002"], 0x0, 0x1a}, 0x28) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x8916, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x8916, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x8936, 0x0) 23m8.716391657s ago: executing program 2 (id=4037): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x4200003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000012000000000000"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000840)={r1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0x7, 0x0, &(0x7f0000000280)="61df718305a359", 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(r0, &(0x7f0000003a80)={0x0, 0x0, &(0x7f0000000a00)=[{0x0}], 0x1, &(0x7f0000002780)=[{0x58, 0x10e, 0x8, "31c3608f71471ed663a3b4dcaa0cf5d589af7372fa59c348b15aec6d05923b0897a64eabc783efd7e720eb9c056acb2a51fa00652f552525cb35bd22a42c21ce14e4"}, {0x10, 0x1, 0xdc6f}, {0x10, 0x1, 0x7}], 0x78}, 0x40) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000fc0)={r2, 0xe0, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80), ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000d40)=[0x0], 0x0, 0x0, 0xf2, &(0x7f0000000dc0)=[{}, {}, {}, {}], 0x20, 0x0, 0x0, 0x0, 0x0, 0xb1, 0x8, 0x8, &(0x7f0000000e80)}}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x1d, 0x3, &(0x7f0000000c40)=ANY=[@ANYRES8=r4], &(0x7f0000000000)='GPL\x00', 0x5, 0xbc, &(0x7f000000cf3d)=""/188, 0x41100, 0x0, '\x00', r3, @fallback=0x30}, 0x94) r5 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x1, 0x106) r6 = perf_event_open$cgroup(&(0x7f00000008c0)={0x5, 0x80, 0x5, 0x8, 0x2, 0x2, 0x0, 0x1, 0x8000, 0xb, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x7960, 0x6}, 0x200, 0x400, 0x5, 0x5, 0x1000, 0x2, 0x0, 0x0, 0x2, 0x0, 0x3}, 0xffffffffffffffff, 0xe, r5, 0x4) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r6, 0x2405, r5) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x7c}, [@ldst={0x6, 0x3}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x3c) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) 23m3.037363944s ago: executing program 2 (id=4044): perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x2, 0x2, 0x8, 0x9, 0x0, 0x6, 0x0, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x2080, 0xff, 0x33, 0x0, 0x8000000000000001, 0x145d, 0x1, 0x0, 0x3f8, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000040)={0x5, 0x45, 0x2, 0x4, 0x8, 0x9, 0x0, 0x6, 0x0, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x2000, 0xff, 0x9, 0x4, 0x4, 0x145d, 0x1, 0x0, 0x3f8, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) 22m47.402857109s ago: executing program 33 (id=4044): perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x2, 0x2, 0x8, 0x9, 0x0, 0x6, 0x0, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x2080, 0xff, 0x33, 0x0, 0x8000000000000001, 0x145d, 0x1, 0x0, 0x3f8, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000040)={0x5, 0x45, 0x2, 0x4, 0x8, 0x9, 0x0, 0x6, 0x0, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x2000, 0xff, 0x9, 0x4, 0x4, 0x145d, 0x1, 0x0, 0x3f8, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) 6.775870211s ago: executing program 4 (id=10908): r0 = socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5, 0x80014, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000003c0)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r2, 0xffffffffffffffff}, 0x4) r4 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x5421, 0x110e22fff7) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000ffff0b867b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r5, 0x0, 0x0, 0x0, &(0x7f0000000300), 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.421697181s ago: executing program 4 (id=10910): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000006c0)}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4014) socket$kcm(0x10, 0x3, 0x10) r3 = perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r1) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x4000}]}) socket$kcm(0x21, 0x2, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000012"], &(0x7f0000000c00)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000ffffffe10000000000000000"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r5 = syz_clone(0x80, &(0x7f0000001040)="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", 0xc00, &(0x7f0000002040), &(0x7f0000002080), &(0x7f00000020c0)="7eb5713ea3f5810f3d62a8ecba87582edd53e5c56f051b01d3652466") perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000fc0)={0x5, 0x80, 0x0, 0x20, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000001, 0x4, @perf_config_ext={0x2000000000000003, 0x60d}, 0x2080, 0x1, 0x0, 0x0, 0xa, 0x20000d5}, 0x0, 0xfff0000000000000, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8b", 0x1}], 0x1, 0x0, 0x0, 0x900}, 0x60) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xa, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180200000300000000000000000000008500000027000000850000000800000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6.191642967s ago: executing program 0 (id=10914): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x24008051) r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x92, 0x1, 0x0, 0x0, 0x0, 0x2, 0x20460, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x1, @perf_bp={0x0}, 0x2080, 0x1, 0x3, 0x0, 0x6, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1, 0x0, 0x20}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) socket$kcm(0x29, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040), &(0x7f00000000c0)='%-010d \x00'}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0xe, 0x0, &(0x7f0000000300)="14fd6c00"/14, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000040)="f4b84de4115d64244a0e839e9900", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="b0251a79de44bb0db2e80f00d6ce3a4a4971aa45c16625a4cfc3e9069cc3a831482dc318535e8d24ccfcc1cc221cfa5f482690dee88c67ba6cb9edece585ad9bb5d7643c3e9808ce5ef930ccdc90b5a0f3ea88b1753f17ee978ea6c7fc55b48fe18d1f4d9b93e7b46ce6a105f2d40d56d5ebb90e", 0x74}, {&(0x7f00000000c0)="ba05e83a404b5eda37cc", 0xa}, {&(0x7f0000000100)="de57892289ed5e0b6504afeb993adbb21d8ab1db985453a5754914e164f2d3538d2f0f867590a5c3d4fc26a1adec1bdf7454f672029f5a452efa4dc172b70c512f3d37afbf3a219f3d13ca82af41a990fd7258cae789105598335fce782a3474e61876833a0342b9a6ae3cb6fc1c316cdc2e1467f5af42a9dac958bc60cdbdd345e6347a0ca6a647315e2e8a54198f2b4e3f0a7cfc3af3c42bd6a665277a6656d1532d97779a9179367fa718fe3f889991e27e7f1898bf7658eec7b799148c54f9be4831304a0cbad84267073efd833333c57be49699d8fb763510deccd2f9", 0xdf}, {&(0x7f0000000200)="57587b0eaccf9cace8d90acb8e22c9bc502a7a9c432d80327da66cf64a51b830202c7452928c40ebaf372e185ec235f59afa95a7f279ff73763f29b2a802a8f701b0f381a688867b8d2e7a8dd8c2b3961200f56f4b2bcc1375df40837bd2157febe68eaf0734b3afb3a8a4bc3220354001e379c98fe101ff0c6429afe61ab217d6386d3f518af8a384c8958cea37dcb7192a88df9eb240ec679b7a37a39cdbabc2a8670b0347647f965090b1f5759b16fa551df4368728de346608d0", 0xbc}, {&(0x7f00000002c0)="25664080615b926d6213bdb88e01e789b2fae9a86544487cab25fd6a85a6ac1105395b35040ea6954091115051d211755201ccad71ea56ab7ab7172d59776278efd22dcca59aaecab07f59507718bb5cc461261c6514499245dd3006cde3e18156e01d263b6865497b91c5cdfdd532dd20ea8de6613f7712ee86650f92559d5a3ec4f9f4c673ce0ab4146a29b1631d42c0e6993e9949a2dd3a0a6fbb99db73569b4a7e", 0xa3}], 0x5}, 0x804) 5.453519908s ago: executing program 3 (id=10916): r0 = socket$kcm(0x2, 0x5, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000d2c63840b41a98f7c456fe760564f6", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000009800000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000a80)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001100)=[{&(0x7f0000000ac0)="1feaf7b86221199cf183da266c2f0a77aee86fedfdf2df0e2417f8aacd0e7354b81bb4da040b31bc85c5a2836bce68c06ac5847116a7d4b6cdea0e895bd8c1adde4bc93a5ddb6f8f6774c4ffd6f9b5e5b1c15311322ada5952cff126521bd7f31c18b979f6c56392c68862d5225a93ccc1ea031a93e13d23a702da9a1862a7eb68e54ec513153a4abca52fa7c5c41b2ac4f56f7d80d741144a49b0d94cae446156303e42c516993f3ad10613b9f832c351d4685df0145747080afba614e6f133486a42613bfe76932b930e79ec33fe06596f862545cd9704682c98ddb7ac734ff604e1f55ae5c439bd38", 0xea}, {&(0x7f0000000bc0)="3f831f219573a75789938ecc14464b355d8c1b1aae964a95c519d125df9f192abe148b9d5fd65e54dc59bd38cc2f9cced43a0ebe1267063d8da3d584c02df200ea03a9dce0f9e8400ddb63be29ea08c3ec2fc353d728982ecf35d69d579c0873043e05f65bf7ee38c860163b7979fe5a0bfec48c4601e523837cac6ac821f3f2008cc149c8927091231edaf53e783503ef002d7a8c9a8374e35856de04c63bc034c7bc35fb2b2bf51ae31e2b3dfc10c4eb0083900e", 0xb5}, {&(0x7f0000000c80)="4dd41646286a9b66321083d8681ec5a7d4a8eedc940fca0cadbfa6915b887dc819c5bb644bcbe13f537f3ad526a44dd0f7975206812e58f8d3ca73435949f1700fc729", 0x43}, {&(0x7f0000000d00)="d2ce86753b5d604a35f7c93f8617581407455e4cf68ff592707839bbc21e70e2eebb1be6f79c7101ec22076a38d3cfdf33502ef94a8ccbdda8e5ecb7fe4cc56473dd726fd62a000000000000", 0x4c}, {&(0x7f0000000d80)="92f3ad8f2a971d78d359cce8bf3d923325da568e7ce6b719a4582515bc38bd9d57d23d60ee5df0ed1459105164529a169fe62d6582acac", 0x37}, {&(0x7f0000000e80)="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", 0xff}, {&(0x7f0000000f80)="0f9d1fc9b36dba677341be1401728c7bd71661f25572da040f3126d7e6e3a457259ecd8aa085d0342f03421a982b80601f387dddf500265287d801ffed6e51687be5c40dee98dd083f5df846ca4227a8c911ef072b41bc43006ef52f037237a9e55cadf0756e2225cc", 0x69}, {&(0x7f0000001000)="18eaffb65c1a71847aa5180ba474e44b4fe1d346296d91f447eddf1d978e9ddab41a179dc86a3bddd162cb", 0x2b}, {&(0x7f0000001040)="34b2a5722b87fe572d421b555f8218dac4b5fb2d4f3960a2e2cb6f56e0a0e7cb8d80711feeb1fdeadabbb1fe8cdc1a2e9f6f76e11bf93466fde840d5dc7037081522eb6a5aec34ca1dd62b2bce4a8ac45272f06d21725509fcc9133b1d55548b85506898894c37316fe43b5f677d09e9d8822bbf46a8d9e5c7bd17148450f3b44183bd10b7b721d24df3e50302049c2caafa31b2cc6395b8d2f265f7134d1ae61de673bd403d99dcd5d5b0336115af77c51658fec0b5ba16fc63f31bfd60b4ec", 0xc0}], 0x9, &(0x7f00000013c0)=[@ip_retopts={{0x2c, 0x0, 0x7, {[@rr={0x7, 0x7, 0x4f, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_prespec={0x44, 0xc, 0x80, 0x3, 0xc, [{@dev={0xac, 0x14, 0x14, 0xa}, 0x7}]}, @cipso={0x86, 0x6}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x45}}, @ip_retopts={{0x14, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}]}}}, @ip_retopts={{0x4c, 0x0, 0x7, {[@ra={0x94, 0x4}, @timestamp_addr={0x44, 0x2c, 0xb9, 0x1, 0x4, [{@loopback, 0xffffffff}, {@private=0xa210100, 0xfffffffc}, {@multicast2, 0x6}, {@remote, 0x81}, {@dev={0xac, 0x14, 0x14, 0xb}, 0xfff}]}, @noop, @ssrr={0x89, 0x7, 0xdb, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_prespec={0x44, 0x4, 0x0, 0x3, 0x8}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x40}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xd}}, @ip_retopts={{0x60, 0x0, 0x7, {[@ssrr={0x89, 0x7, 0x3b, [@private=0xa010100]}, @lsrr={0x83, 0xf, 0x2, [@rand_addr=0x64010100, @multicast2, @loopback]}, @lsrr={0x83, 0x13, 0xb1, [@dev={0xac, 0x14, 0x14, 0xe}, @loopback, @multicast1, @private=0xa010100]}, @end, @end, @timestamp={0x44, 0x10, 0x79, 0x0, 0xd, [0x7f2, 0x2, 0xffff]}, @cipso={0x86, 0x15, 0x2, [{0x3, 0xd, "ce11d48825d11091a618a2"}, {0x2, 0x2}]}]}}}, @ip_retopts={{0xc8, 0x0, 0x7, {[@generic={0x94, 0x9, "3061e38f2798ca"}, @noop, @noop, @timestamp_addr={0x44, 0x3c, 0x55, 0x1, 0x7, [{@loopback, 0x7}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x3e}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@loopback, 0x1}, {@loopback, 0x1}, {@private=0xa010102, 0x8}, {@remote, 0x1b4}]}, @cipso={0x86, 0x4b, 0x0, [{0x5, 0xd, "fd3c0eb1d68644c0cf3949"}, {0x0, 0xd, "735e62b33e971a83428fe2"}, {0x2, 0xd, "cfc3e8f72066393678832f"}, {0x1, 0x7, "d926bfe963"}, {0x6, 0x9, "beecddd21f8b1c"}, {0x2, 0xb, "02211676b85ae31049"}, {0x6, 0x3, 'u'}]}, @cipso={0x86, 0x24, 0xffffffffffffffff, [{0x6, 0x8, "33c2f41082be"}, {0x1, 0xf, "b509e9ab09ac41dcf9fb1b980a"}, {0x2, 0x7, "7e02892596"}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}], 0x238}, 0x20000004) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="d2ff03066003008cb89e08d988a8", 0x0, 0xd5b4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) setsockopt$sock_attach_bpf(r0, 0x84, 0x10, &(0x7f0000000240), 0x8) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x92, 0x1, 0x0, 0x0, 0x0, 0x2, 0x20460, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x1, @perf_bp={0x0}, 0x2080, 0x1, 0x3, 0x0, 0x6, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1, 0x0, 0x20}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r5}, &(0x7f0000000040), &(0x7f00000000c0)='%-010d \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r5, r5}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0xe, 0x0, &(0x7f0000000300)="14fd6c00"/14, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000040)="f4b84de4115d64244a0e839e9900", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.290573913s ago: executing program 6 (id=10917): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0xc8, 0x80001, 0x1, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce8186768800fe08000e40000200875a65969ff57b00ff0200000000000000008dff00000001"], 0xfdef) 4.460937506s ago: executing program 0 (id=10919): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}], 0x10}, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYRES8=r2], 0x12) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0xaa}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x31) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_ext={0x1c, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x8000, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x92ee, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0000000900000000000000312715482993", @ANYRES32=0x1, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000240)={0x1, &(0x7f00000001c0)=[{0x16, 0x0, 0x6, 0xa}]}) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={r5, &(0x7f00000001c0)="7b4d62fa24bc8822", 0x0}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa4000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7050000080000a8c5000000a50000001801000020206405000000000004000f7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70400000000000085000000a700000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r7, 0x0, 0x0, 0xfffffffffffffdf3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r8, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x114}, 0x10) setsockopt$sock_attach_bpf(r9, 0x1, 0x22, &(0x7f00000018c0), 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="140000002a00070021b994de7d3c4d6cbe7bbea3", 0x14}], 0x1}, 0x0) perf_event_open(&(0x7f0000000380)={0x7, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80114, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_config_ext={0xffffffffffffffff, 0x5d}, 0x2, 0xca, 0x0, 0x0, 0x3, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x6c6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) syz_open_procfs$namespace(0x0, &(0x7f0000000000)) 3.888327532s ago: executing program 4 (id=10921): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="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"/2848], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffd78, 0x10, &(0x7f0000000000), 0x143}, 0x48) 3.857606543s ago: executing program 6 (id=10922): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffb0}, 0x94) 3.737770236s ago: executing program 5 (id=10923): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x440080, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'caif0\x00', 0x8000}) (async, rerun: 32) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x4, &(0x7f0000000180)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x97}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r1, 0x0, 0xa5, 0x12, &(0x7f00000001c0)="c218f6aae7877ef9e2a28fb14116c5485f43173e5f21be8ec5957d48b4464f3cde12b748427051e58e338fae14ea5302c05f7db2a705aca8a119e08a51f7ce46ecd211817d075205b710d6629d2f74f2b2e70bfd7dde9a9c1a783de7e42f285692179f3f91bf10a4f54f8bf89323b409de628cf14f3351643600a3dc8d2ce2bcc0f957f0ac8f523659b38c8c854fd26f6a1b1e08e317cf83ac936d19bcd9e95af7716a23a6", &(0x7f0000000280)=""/18, 0x7, 0x0, 0x22, 0xe1, &(0x7f00000002c0)="9b72163090144e5012cadce4aeeedaa233ed691d9c1c351b85ccdb219fdf54f1c4d2", &(0x7f0000000300)="b87cfe3ae4d3e81873e6ac3d0d377dcd1841763b26ae8a2ff4fcda32db95490a02088e6731dd946ea169810bdc4e83f9bd52c46d84128b5d410a8a9988ec235b0358b87c4b5e3a8013bd1ba4e0811ccae8618286dc599d84b958cbc443b8d98d92ab20db6de16ff825e2b5d8595c90cfb54764bef2e87132ad81bba3d6bfe3e02e7a13f94a4af8fb59f056a6dd8f2128bbb5846f8bc4bb275552a820b0c98015c70fc8573342b2f82930fa07f6d17f4d6e5e9382c806ab2ba4f8ea4c141a896625d8c1d3b12c482d3a603ff3967bdaa4addc38edb0d525dffbdda688a3a054227a", 0x0, 0x0, 0x2}, 0x50) 3.671692758s ago: executing program 3 (id=10924): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0x1}, 0x0, &(0x7f0000000080)=r0}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r1, 0x0, 0x0) socket$kcm(0x2, 0x1, 0x84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x4, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x9, 0x17, 0x8, 0x4, 0x0, 0x1, 0x7}, 0x50) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa88"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040033, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3.61176238s ago: executing program 0 (id=10925): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000005000000850000002e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r2, 0x4) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x10) sendmsg$unix(r1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x33fe0, 0x0, 0x0, 0x8800}, 0x40000) 3.529709712s ago: executing program 4 (id=10926): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000800000000000000000850000004100000085000000d000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000280)='cpuset.mem_hardwall\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000040), 0x1) socket$kcm(0xa, 0x2, 0x3a) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x1, @perf_bp={0x0}, 0x8061, 0x3, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40, 0x401}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000100)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f00000000c0)=0x2, 0xe) 3.412890385s ago: executing program 5 (id=10927): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, 0x0, 0x80000001}, 0x94) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$kcm(0x10, 0x2, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xc, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000000000008500000069000000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 3.342186637s ago: executing program 6 (id=10928): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffa}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x48004) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000400)='syz0\x00', 0x200002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x13, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c1300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000048aa008085000000040000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000540)={r2}, 0xc) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000440), 0x2, 0x0) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x2) r3 = syz_clone(0x10400, &(0x7f0000000580)="8555451985e93ae51af05b6faec3bc8aa826dc25ea7622f4b639d1aec6e11b4509d48399a1eccb34f145a531180e02dae7b3b76502d3429b5311c8aeda564a0304188c520b9116aba382e63fad54ba2a4357bc3c54decb76be04b191009485f9eb3ccc97333eca2879d8ac8ce1272cf6879c6ef81da9ec7709e9aa0a3a95daedd999a92404dc9d92d3a0befa8f4e93a829a3d37d7d5ef06d945e84aac44c3bcd2b4b85afa8fdbed3d0", 0xa9, 0x0, 0x0, &(0x7f0000000700)="04d978da36bb2c23a54ea29983340e62175bf3fbb155019f2d08f30d06fd1e1c6cbece45887240") syz_open_procfs$namespace(r3, &(0x7f0000000840)='ns/mnt\x00') r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000400000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70700000000000018010000202070c84ec73887202500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000800"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$kcm(0xa, 0x5, 0x0) r6 = socket$kcm(0xa, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001800000000000b0024000000240000000800000004000000000000070000000003000000000000080100000000000000000000090200000000002e2e5f"], 0x0, 0x44}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)=ANY=[@ANYBLOB="9beb01031800000000000000000000008000000002"], 0x0, 0x1a}, 0x28) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x8916, &(0x7f0000000000)={r6}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x8916, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x8936, 0x0) 3.25370141s ago: executing program 0 (id=10929): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x24008051) r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x92, 0x1, 0x0, 0x0, 0x0, 0x2, 0x20460, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x1, @perf_bp={0x0}, 0x2080, 0x1, 0x3, 0x0, 0x6, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1, 0x0, 0x20}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) socket$kcm(0x29, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040), &(0x7f00000000c0)='%-010d \x00'}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0xe, 0x0, &(0x7f0000000300)="14fd6c00"/14, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000040)="f4b84de4115d64244a0e839e9900", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="b0251a79de44bb0db2e80f00d6ce3a4a4971aa45c16625a4cfc3e9069cc3a831482dc318535e8d24ccfcc1cc221cfa5f482690dee88c67ba6cb9edece585ad9bb5d7643c3e9808ce5ef930ccdc90b5a0f3ea88b1753f17ee978ea6c7fc55b48fe18d1f4d9b93e7b46ce6a105f2d40d56d5ebb90e", 0x74}, {&(0x7f00000000c0)="ba05e83a404b5eda37cc", 0xa}, {&(0x7f0000000100)="de57892289ed5e0b6504afeb993adbb21d8ab1db985453a5754914e164f2d3538d2f0f867590a5c3d4fc26a1adec1bdf7454f672029f5a452efa4dc172b70c512f3d37afbf3a219f3d13ca82af41a990fd7258cae789105598335fce782a3474e61876833a0342b9a6ae3cb6fc1c316cdc2e1467f5af42a9dac958bc60cdbdd345e6347a0ca6a647315e2e8a54198f2b4e3f0a7cfc3af3c42bd6a665277a6656d1532d97779a9179367fa718fe3f889991e27e7f1898bf7658eec7b799148c54f9be4831304a0cbad84267073efd833333c57be49699d8fb763510deccd2f9", 0xdf}, {&(0x7f0000000200)="57587b0eaccf9cace8d90acb8e22c9bc502a7a9c432d80327da66cf64a51b830202c7452928c40ebaf372e185ec235f59afa95a7f279ff73763f29b2a802a8f701b0f381a688867b8d2e7a8dd8c2b3961200f56f4b2bcc1375df40837bd2157febe68eaf0734b3afb3a8a4bc3220354001e379c98fe101ff0c6429afe61ab217d6386d3f518af8a384c8958cea37dcb7192a88df9eb240ec679b7a37a39cdbabc2a8670b0347647f965090b1f5759b16fa551df4368728de346608d0", 0xbc}, {&(0x7f00000002c0)="25664080615b926d6213bdb88e01e789b2fae9a86544487cab25fd6a85a6ac1105395b35040ea6954091115051d211755201ccad71ea56ab7ab7172d59776278efd22dcca59aaecab07f59507718bb5cc461261c6514499245dd3006cde3e18156e01d263b6865497b91c5cdfdd532dd20ea8de6613f7712ee86650f92559d5a3ec4f9f4c673ce0ab4146a29b1631d42c0e6993e9949a2dd3a0a6fbb99db73569b4a7e", 0xa3}], 0x5}, 0x804) 2.622682877s ago: executing program 3 (id=10930): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa}, 0x94) r0 = syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/net\x00') ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x5460, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1fb, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x29}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2a}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r4, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387d9a570343ecb61d4", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r5) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) r7 = socket$kcm(0x2c, 0x3, 0x0) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0xc, [@struct={0xb, 0x6, 0x0, 0x4, 0x0, 0x7c5, [{0xb, 0x3, 0x9}, {0x3, 0x4, 0x1}, {0x6, 0x2, 0x3ff}, {0x2, 0x3}, {0x5, 0x2, 0x10000}, {0x5, 0x5, 0x8}]}]}, {0x0, [0x30, 0x0, 0x2e, 0x0, 0x61, 0x0, 0x0, 0x2e, 0x61, 0x0]}}, &(0x7f0000000380)=""/59, 0x78, 0x3b, 0x0, 0x1}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x10000, 0x0, r1, 0x8000, '\x00', 0x0, r8, 0x3, 0x0, 0x2}, 0x50) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffc54}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r9, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r6}, &(0x7f0000000080), &(0x7f00000001c0)=r7}, 0x20) close(0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x4, &(0x7f00000001c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xcb}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x89f1, &(0x7f0000000080)) 2.582977288s ago: executing program 5 (id=10931): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x4, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000aecd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad94ed406f21caf5adcf920569c00cc1199684fa75814709fea019af247c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c1faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6fab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b79db2e3d5986c82b5aa94e539b204d58f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c7160ec83070000020000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72b0000000000001cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2cc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78ac02ca3cdf6a662db1c9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad943e392955f4f979ea13201bafedcd2063d11dd665647223c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd89346cfbb5567e54d3504723177d356c4604b7a492ecec37e83efceefd7ca2533659edc8be05cc85451c6a14507434eb54b6f43caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffca9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a294351c5356c1d06c92cf8ce3c7c56cd31121624d74517fd3666277f670e812b28e2f30d035cee5d0e77a3c7220000000000000005a474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f034b8d3ebce68663ef5af469abe75b314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041e12282ce24463aaf28345bd168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f09000000000000004fc4bda3453602004535a976eacd3adaa4d2ee6fe0d072ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d401adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb40f7f02f750d6c977a191852c9ae031db044b2353199546609f9f69a6cfefdf879d447df53f3b9b70d10355b00300000000000000553d18a6cc50feeb7bfad9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f58fab987baab97a9bfbd8f185b5631820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe527340935aa3c0b4f3f45b418a18217747ae442e31560e5b741445ea2a1acee2a81425ff000000d2a0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51423b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f88735fce5115dc83ed73d8ee4a91322608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf5000000000000fa08ad0631c4b839688b22c4da2a6bc4cf45854d221a2d5f96bc64647f15daa2ba79cd0f4254ed55217912ef84bd2927df82fc061aef2920c49b2a90886da75561173fa186cb7ee86dd4285c4721eb428c953296bb2f5d825da54dbef07c1b349b4901e093d13e6b9a0000009b5b22e887bc061d40bcaf0aa18623fd9b7179ccc692ba74b531b65c4decf9d080a8ac7e82d4cde1267aa64b2a94fd87a009e6742c2ddc3a9d7eccbb1831b1fa218277c2814a91cab7cb59c697166d6f1bb1a360470000000000000000000000000000000000000000000000000000f9f9b4ce7e871f507084c8c88e0652decbe579b03ed84ea94597dd1059620a050f69ea03b99b4e19d35f4a3b54e96ae2172effecec80f6baa4bf69a6ebf5392882df78b0983e662dc0cb64b77f3f006b6b25443197ae93f0be6de5a703d003f00720943c0e4b33af00000000000000000021a688b2d7007fcc4b59f719afb0b3b7e0aee306ca70fe42bf4984a68f40e1fc043a03a17e4744359b87dc27c82d51cbeb64e52a28daeb6a78d6fe06181ecc840000"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_bp={&(0x7f00000001c0), 0x4}, 0x4000, 0xf1c, 0x0, 0x0, 0x40000, 0x2, 0x0, 0x0, 0xfffffb78}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_bp={0x0, 0xb}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x7}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="d8000000580081044e9bf782db44b904021d08000900030001000000000000000600140903600e120900210000000401", 0x30}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)="d80000001000810468f70082db44b904021d080b01000000e8fe55a1180015000600140000000012080004", 0x2b}], 0x1}, 0x20000004) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a", 0x1d}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000017c0)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40092}, 0x80, 0x0}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="043900002000ef029dd2b97576b11d210a"], 0x33fe0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x40}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x80) socketpair(0x9, 0x1, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8946, &(0x7f0000000080)) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000140)=[{&(0x7f0000000040)="c018030030000b12d25a80648c2594f90124fc60100c044002000006053582c137153e370248078000f01700d1bd", 0x33fe0}, {&(0x7f0000000c80)="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"}], 0x7}, 0x0) 2.569621379s ago: executing program 4 (id=10932): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r0, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000002000000000007000000440c0503ac"], 0x20}, 0x0) 2.469767911s ago: executing program 6 (id=10933): r0 = socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5, 0x80014, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000003c0)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r2, 0xffffffffffffffff}, 0x4) r4 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x5421, 0x110e22fff7) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000ffff0b867b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r5, 0x0, 0x0, 0x0, &(0x7f0000000300), 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.14941756s ago: executing program 4 (id=10934): r0 = socket$kcm(0x2, 0x5, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000d2c63840b41a98f7c456fe760564f6", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000009800000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000a80)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001100)=[{&(0x7f0000000ac0)="1feaf7b86221199cf183da266c2f0a77aee86fedfdf2df0e2417f8aacd0e7354b81bb4da040b31bc85c5a2836bce68c06ac5847116a7d4b6cdea0e895bd8c1adde4bc93a5ddb6f8f6774c4ffd6f9b5e5b1c15311322ada5952cff126521bd7f31c18b979f6c56392c68862d5225a93ccc1ea031a93e13d23a702da9a1862a7eb68e54ec513153a4abca52fa7c5c41b2ac4f56f7d80d741144a49b0d94cae446156303e42c516993f3ad10613b9f832c351d4685df0145747080afba614e6f133486a42613bfe76932b930e79ec33fe06596f862545cd9704682c98ddb7ac734ff604e1f55ae5c439bd38", 0xea}, {&(0x7f0000000bc0)="3f831f219573a75789938ecc14464b355d8c1b1aae964a95c519d125df9f192abe148b9d5fd65e54dc59bd38cc2f9cced43a0ebe1267063d8da3d584c02df200ea03a9dce0f9e8400ddb63be29ea08c3ec2fc353d728982ecf35d69d579c0873043e05f65bf7ee38c860163b7979fe5a0bfec48c4601e523837cac6ac821f3f2008cc149c8927091231edaf53e783503ef002d7a8c9a8374e35856de04c63bc034c7bc35fb2b2bf51ae31e2b3dfc10c4eb0083900e", 0xb5}, {&(0x7f0000000c80)="4dd41646286a9b66321083d8681ec5a7d4a8eedc940fca0cadbfa6915b887dc819c5bb644bcbe13f537f3ad526a44dd0f7975206812e58f8d3ca73435949f1700fc729", 0x43}, {&(0x7f0000000d00)="d2ce86753b5d604a35f7c93f8617581407455e4cf68ff592707839bbc21e70e2eebb1be6f79c7101ec22076a38d3cfdf33502ef94a8ccbdda8e5ecb7fe4cc56473dd726fd62a000000000000", 0x4c}, {&(0x7f0000000d80)="92f3ad8f2a971d78d359cce8bf3d923325da568e7ce6b719a4582515bc38bd9d57d23d60ee5df0ed1459105164529a169fe62d6582acac", 0x37}, {&(0x7f0000000e80)="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", 0xff}, {&(0x7f0000000f80)="0f9d1fc9b36dba677341be1401728c7bd71661f25572da040f3126d7e6e3a457259ecd8aa085d0342f03421a982b80601f387dddf500265287d801ffed6e51687be5c40dee98dd083f5df846ca4227a8c911ef072b41bc43006ef52f037237a9e55cadf0756e2225cc", 0x69}, {&(0x7f0000001000)="18eaffb65c1a71847aa5180ba474e44b4fe1d346296d91f447eddf1d978e9ddab41a179dc86a3bddd162cb", 0x2b}, {&(0x7f0000001040)="34b2a5722b87fe572d421b555f8218dac4b5fb2d4f3960a2e2cb6f56e0a0e7cb8d80711feeb1fdeadabbb1fe8cdc1a2e9f6f76e11bf93466fde840d5dc7037081522eb6a5aec34ca1dd62b2bce4a8ac45272f06d21725509fcc9133b1d55548b85506898894c37316fe43b5f677d09e9d8822bbf46a8d9e5c7bd17148450f3b44183bd10b7b721d24df3e50302049c2caafa31b2cc6395b8d2f265f7134d1ae61de673bd403d99dcd5d5b0336115af77c51658fec0b5ba16fc63f31bfd60b4ec", 0xc0}], 0x9, &(0x7f00000013c0)=[@ip_retopts={{0x2c, 0x0, 0x7, {[@rr={0x7, 0x7, 0x4f, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_prespec={0x44, 0xc, 0x80, 0x3, 0xc, [{@dev={0xac, 0x14, 0x14, 0xa}, 0x7}]}, @cipso={0x86, 0x6}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x45}}, @ip_retopts={{0x14, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}]}}}, @ip_retopts={{0x4c, 0x0, 0x7, {[@ra={0x94, 0x4}, @timestamp_addr={0x44, 0x2c, 0xb9, 0x1, 0x4, [{@loopback, 0xffffffff}, {@private=0xa210100, 0xfffffffc}, {@multicast2, 0x6}, {@remote, 0x81}, {@dev={0xac, 0x14, 0x14, 0xb}, 0xfff}]}, @noop, @ssrr={0x89, 0x7, 0xdb, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_prespec={0x44, 0x4, 0x0, 0x3, 0x8}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x40}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xd}}, @ip_retopts={{0x60, 0x0, 0x7, {[@ssrr={0x89, 0x7, 0x3b, [@private=0xa010100]}, @lsrr={0x83, 0xf, 0x2, [@rand_addr=0x64010100, @multicast2, @loopback]}, @lsrr={0x83, 0x13, 0xb1, [@dev={0xac, 0x14, 0x14, 0xe}, @loopback, @multicast1, @private=0xa010100]}, @end, @end, @timestamp={0x44, 0x10, 0x79, 0x0, 0xd, [0x7f2, 0x2, 0xffff]}, @cipso={0x86, 0x15, 0x2, [{0x3, 0xd, "ce11d48825d11091a618a2"}, {0x2, 0x2}]}]}}}, @ip_retopts={{0xc8, 0x0, 0x7, {[@generic={0x94, 0x9, "3061e38f2798ca"}, @noop, @noop, @timestamp_addr={0x44, 0x3c, 0x55, 0x1, 0x7, [{@loopback, 0x7}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x3e}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@loopback, 0x1}, {@loopback, 0x1}, {@private=0xa010102, 0x8}, {@remote, 0x1b4}]}, @cipso={0x86, 0x4b, 0x0, [{0x5, 0xd, "fd3c0eb1d68644c0cf3949"}, {0x0, 0xd, "735e62b33e971a83428fe2"}, {0x2, 0xd, "cfc3e8f72066393678832f"}, {0x1, 0x7, "d926bfe963"}, {0x6, 0x9, "beecddd21f8b1c"}, {0x2, 0xb, "02211676b85ae31049"}, {0x6, 0x3, 'u'}]}, @cipso={0x86, 0x24, 0xffffffffffffffff, [{0x6, 0x8, "33c2f41082be"}, {0x1, 0xf, "b509e9ab09ac41dcf9fb1b980a"}, {0x2, 0x7, "7e02892596"}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}], 0x238}, 0x20000004) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="d2ff03066003008cb89e08d988a8", 0x0, 0xd5b4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) setsockopt$sock_attach_bpf(r0, 0x84, 0x10, &(0x7f0000000240), 0x8) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x92, 0x1, 0x0, 0x0, 0x0, 0x2, 0x20460, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x1, @perf_bp={0x0}, 0x2080, 0x1, 0x3, 0x0, 0x6, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1, 0x0, 0x20}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r5}, &(0x7f0000000040), &(0x7f00000000c0)='%-010d \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r5, r5}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0xe, 0x0, &(0x7f0000000300)="14fd6c00"/14, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000040)="f4b84de4115d64244a0e839e9900", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.875472368s ago: executing program 6 (id=10935): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}], 0x10}, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYRES8=r2], 0x12) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0xaa}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x31) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_ext={0x1c, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x8000, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x92ee, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0000000900000000000000312715482993", @ANYRES32=0x1, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000240)={0x1, &(0x7f00000001c0)=[{0x16, 0x0, 0x6, 0xa}]}) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={r5, &(0x7f00000001c0)="7b4d62fa24bc8822", 0x0}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa4000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7050000080000a8c5000000a50000001801000020206405000000000004000f7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70400000000000085000000a700000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r7, 0x0, 0x0, 0xfffffffffffffdf3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r8, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x114}, 0x10) setsockopt$sock_attach_bpf(r9, 0x1, 0x22, &(0x7f00000018c0), 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="140000002a00070021b994de7d3c4d6cbe7bbea3", 0x14}], 0x1}, 0x0) perf_event_open(&(0x7f0000000380)={0x7, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80114, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_config_ext={0xffffffffffffffff, 0x5d}, 0x2, 0xca, 0x0, 0x0, 0x3, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x6c6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) syz_open_procfs$namespace(0x0, &(0x7f0000000000)) 1.817237909s ago: executing program 5 (id=10936): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x1c092, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0xb3e, 0xfffffffffffffff8}, 0x840, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1c00000000000000000000000897ffff", @ANYRES32=0x0, @ANYBLOB="ac141411e00000010000000020000000000000000000000007000000440d09"], 0x40}, 0x20002880) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xb, 0xe, &(0x7f0000001540)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) 1.722253862s ago: executing program 0 (id=10937): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x11c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYRES8=r0, @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socketpair(0x3, 0x805, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000006c0), 0x4) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x7, 0x1, 0x8, 0x9, 0x5, 0xfffffffffffffffe, 0xffffffffffffffec}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1a, 0x0, 0x0, 0x8000}, 0x50) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000400), 0x12}, 0x104101, 0x4, 0x0, 0x5, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000700)=ANY=[@ANYRES8=r3], 0x0, 0x2a}, 0x28) bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1000000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES64=r1, @ANYRES32=r4, @ANYBLOB="010000000100"], 0x48) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)="1400000035000b45d30000000000000003d25a80", 0x14}], 0x1}, 0x0) socketpair(0xa, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYRES16=r5], 0x0, 0xfffffffffffffe3d, 0x0, 0x0, 0x0, 0x10000}, 0x28) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89a0, &(0x7f0000000540)='\xb1\x9c\x9b\x06\xf0\x00C\xbb\x82\xa0\xc8\xa9 @\xec\f\x95wp\b\b\xf0aP\x13\x01\x81\xc6\xa0\xc2\xf6+\xae\xac\xa5oE\x89\xf6\x933\r\xbf\xa8M\xba^\x87\x1d7\xa9vU\xc5\xdb\x8b9\xd03\xf8\xb04\xb3Z\xc8$\x05n\xaeU\x80\x17\x1cC\xb1\x1ex\xb3\xb7\xc6\xb2\xed\xbe]\xb6\x0f\xd7\x0f\xe9\x94\x1eD\xb8\xc6\xc7?1\x01i\x89\xa3\xd2\xb3&w\xe7s\xff)=\\c\x0eP\xbb\xdb\xcf6S\xd685\x9f\xed]\xbbb\xce\xed\x04\x85\xbfs\x00\xb9\x00\xe8\x89\xa7\xd2\xe4$\x04\xf4Y\xe1MOH\xeb\xc9\xab\r\xd4?\xf0r\x80\xb28w\xf4\xc5\xce\x9c/') socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89a2, &(0x7f0000000080)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000002400000024"], 0x0, 0x42, 0x0, 0x1, 0xe988}, 0x28) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000280)={0x0, 0x0}) sendmsg$inet(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000140)}, {&(0x7f00000001c0)}], 0x2, &(0x7f0000000240)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x20}}, @ip_ttl={{0x14, 0x0, 0x2, 0xffffffb3}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}], 0x48}, 0x4008004) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x89a2, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r10, &(0x7f0000000100)=0x8, 0x12) ioctl$SIOCSIFHWADDR(r10, 0x4030582b, &(0x7f0000000000)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) 1.645732474s ago: executing program 3 (id=10938): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa}, 0x94) r0 = syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/net\x00') ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x5460, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x2, 0x4, 0x49, 0x1, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0xf, &(0x7f0000000880)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x2, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0xce}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, &(0x7f0000000040)='GPL\x00'}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057000000"], 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000800000000000000000001811", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)) 1.545633157s ago: executing program 5 (id=10939): r0 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) socket$kcm(0x10, 0x400000002, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) close(0xffffffffffffffff) socketpair(0x1e, 0x1, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10e, 0xb, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x1, @perf_bp={0x0}, 0x8061, 0x3, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@base={0x10, 0x4, 0x4, 0x2}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r3, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r4 = socket$kcm(0xa, 0x922000000003, 0x11) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x7, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r4) setsockopt$sock_attach_bpf(r4, 0x29, 0x24, &(0x7f0000000080), 0x4) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000680)="5c00000014006b03000000d86e6c1d000a117ea6e070d6060000000000000000250002000f00000017d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9767b4fa51f62a64c9f4d49346d88037e786a6d0bdd70000ffff", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a0006", 0x1b}], 0x1, 0x0, 0x0, 0x8100000}, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x0, 0x1, 0x0, 0x81, 0x0, 0x5ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000008, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x2, 0x0, 0x68d1}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x0) 1.147919599s ago: executing program 3 (id=10940): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0x1}, 0x0, &(0x7f0000000080)=r0}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r1, 0x0, 0x0) socket$kcm(0x2, 0x1, 0x84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x4, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x9, 0x17, 0x8, 0x4, 0x0, 0x1, 0x7}, 0x50) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa88"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040033, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.138533669s ago: executing program 0 (id=10941): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, 0x0, 0x80000001}, 0x94) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xc, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYBLOB="0000000000000000b703000000000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 1.012186322s ago: executing program 5 (id=10942): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2d0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x10c002, 0xac5d, 0x10000200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000a80)=ANY=[@ANYBLOB="b4000000001700e860146c000000000005000000000000009500000000000000dd7f78d6f653b001a0eb66fb99fa28176b5c680e93db7d7a897273627c6f3f63052699d303e6ada8d18bf005ddbd6ddc9679e0788a4c6b057173fbd085fec3bec239"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_clone(0x6988b500, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21bef5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f94306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a835701bea8240399c56ce8f58df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b262341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261e58fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f9ac2f7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe8799fe266e2ccac80fefe750151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa796ea7b156d19612297c63bb20e1e0469f7615f67a9218cbace38f5236821314f76302b98afa93044b83989339ca10e6ae30e70e17a82f03e915b8425e8e7a91614306d2ae0bc3550d856f2d7293672b5673d264fc886b0c8bdf436a0fcd21bf9da7bdca98e34cd6e59b0a7ce4ba1b466561aaa35448dff47bb1d7df23d467689a6669e4300d5acf12e4d0b35abf91569f605b2f6df0d861"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) syz_clone(0x11080000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000100)=r4, 0x4) r5 = socket$kcm(0x2, 0x200000000000006, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x541b, 0x0) sendmsg$inet(r1, &(0x7f0000002b00)={0x0, 0x0, &(0x7f0000002a80)=[{&(0x7f0000002800)='A', 0x1}], 0x1}, 0x4040) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0x1c48}], 0x13, 0x0, 0x0, 0x10000000}, 0x12cd) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x297f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8, 0x0, 0x3, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) recvmsg$unix(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) close(r7) write$cgroup_subtree(r8, &(0x7f0000000040)={[{0x2b, 'rdma'}, {0x2b, 'freezer'}, {0x2b, 'memory'}]}, 0x17) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r9, 0x0, 0xe40, 0xfffffe6d, &(0x7f0000000100)="5c71f91b05c413550230b4c817a628", 0x0, 0x1, 0x0, 0x302, 0x0, &(0x7f0000000180)='\x00', 0x0}, 0x48) 903.600985ms ago: executing program 6 (id=10943): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000800000000000000000850000004100000085000000d000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000280)='cpuset.mem_hardwall\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000040), 0x1) socket$kcm(0xa, 0x2, 0x3a) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x1, @perf_bp={0x0}, 0x8061, 0x3, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40, 0x401}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000100)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f00000000c0)=0x2, 0xe) 0s ago: executing program 3 (id=10944): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000280)=@caif=@dgm={0x25, 0x9, 0x9}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000480)="62042760590200000000002f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a5d0292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9a4de33", 0xda}, {&(0x7f0000000840)="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", 0x1cb}, {&(0x7f0000000a40)="0a985d7879f1bb", 0x7}], 0x3}, 0x8001) kernel console output (not intermixed with test programs): 56][T31452] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2061.483770][T31452] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2061.492658][T31452] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2061.744489][T24798] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2061.783630][T24798] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2061.840369][ T4876] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2061.985996][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2062.005403][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2062.013075][T24798] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2062.064749][T31844] netlink: 'syz.5.8958': attribute type 2 has an invalid length. [ 2062.072570][T31844] netlink: 'syz.5.8958': attribute type 8 has an invalid length. [ 2062.127054][T31844] netlink: 132 bytes leftover after parsing attributes in process `syz.5.8958'. [ 2062.278999][T31848] netlink: 'syz.5.8958': attribute type 3 has an invalid length. [ 2062.339097][T31848] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.8958'. [ 2064.356929][T22266] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2064.366455][T22266] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2064.375098][T22266] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2064.383156][T22266] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2064.390925][T22266] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 2064.398662][T22266] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2064.751189][T31881] chnl_net:caif_netlink_parms(): no params data found [ 2065.522856][T31881] bridge0: port 1(bridge_slave_0) entered blocking state [ 2065.531391][T31881] bridge0: port 1(bridge_slave_0) entered disabled state [ 2065.554776][T31881] device bridge_slave_0 entered promiscuous mode [ 2065.602848][T31913] netlink: 188 bytes leftover after parsing attributes in process `syz.5.8971'. [ 2065.662932][T31881] bridge0: port 2(bridge_slave_1) entered blocking state [ 2065.716878][T31881] bridge0: port 2(bridge_slave_1) entered disabled state [ 2065.755470][T31881] device bridge_slave_1 entered promiscuous mode [ 2065.949259][ T4876] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2066.141551][T31881] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2066.179066][T31881] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2066.318740][ T4876] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2066.478416][ T4876] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2066.489707][T22266] Bluetooth: hci2: command 0x0409 tx timeout [ 2066.526883][T31881] team0: Port device team_slave_0 added [ 2066.628766][ T4876] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2066.726991][T31939] netlink: 'syz.6.8979': attribute type 10 has an invalid length. [ 2066.778141][T31939] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 2066.841140][T31881] team0: Port device team_slave_1 added [ 2066.957494][T31881] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2066.994564][T31881] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2067.182542][T31881] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2067.247170][T31881] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2067.284110][T31881] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2067.398780][T31881] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2067.627018][T31881] device hsr_slave_0 entered promiscuous mode [ 2067.674821][T31881] device hsr_slave_1 entered promiscuous mode [ 2067.697297][T31881] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2067.753652][T31881] Cannot create hsr debugfs directory [ 2068.536821][ T4876] device 0 left promiscuous mode [ 2068.563707][T22266] Bluetooth: hci2: command 0x041b tx timeout [ 2068.679677][T31972] FAULT_INJECTION: forcing a failure. [ 2068.679677][T31972] name failslab, interval 1, probability 0, space 0, times 0 [ 2068.709221][T31972] CPU: 0 PID: 31972 Comm: syz.5.8991 Not tainted syzkaller #0 [ 2068.716773][T31972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2068.726859][T31972] Call Trace: [ 2068.730162][T31972] [ 2068.733117][T31972] dump_stack_lvl+0x188/0x24e [ 2068.737836][T31972] ? show_regs_print_info+0x12/0x12 [ 2068.743091][T31972] ? load_image+0x400/0x400 [ 2068.747638][T31972] ? __might_sleep+0xd0/0xd0 [ 2068.752252][T31972] ? __lock_acquire+0x7d10/0x7d10 [ 2068.757312][T31972] should_fail_ex+0x399/0x4d0 [ 2068.762016][T31972] should_failslab+0x5/0x20 [ 2068.766544][T31972] slab_pre_alloc_hook+0x59/0x310 [ 2068.771626][T31972] ? bpf_prog_test_run_skb+0x234/0x12a0 [ 2068.777207][T31972] __kmem_cache_alloc_node+0x4f/0x260 [ 2068.782609][T31972] ? bpf_prog_test_run_skb+0x234/0x12a0 [ 2068.788286][T31972] __kmalloc+0xa0/0x240 [ 2068.792482][T31972] bpf_prog_test_run_skb+0x234/0x12a0 [ 2068.797972][T31972] ? lockdep_hardirqs_on+0x94/0x140 [ 2068.803201][T31972] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2068.809418][T31972] ? cpu_online+0xa0/0xa0 [ 2068.813782][T31972] bpf_prog_test_run+0x31e/0x390 [ 2068.818847][T31972] __sys_bpf+0x62b/0x780 [ 2068.823139][T31972] ? bpf_link_show_fdinfo+0x380/0x380 [ 2068.828732][T31972] ? lock_chain_count+0x20/0x20 [ 2068.833623][T31972] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2068.839640][T31972] __x64_sys_bpf+0x78/0x90 [ 2068.844084][T31972] do_syscall_64+0x4c/0xa0 [ 2068.848545][T31972] ? clear_bhb_loop+0x60/0xb0 [ 2068.853253][T31972] ? clear_bhb_loop+0x60/0xb0 [ 2068.857967][T31972] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2068.863891][T31972] RIP: 0033:0x7f6cbcb9cdd9 [ 2068.868340][T31972] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2068.888008][T31972] RSP: 002b:00007f6cbdac6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2068.896467][T31972] RAX: ffffffffffffffda RBX: 00007f6cbce15fa0 RCX: 00007f6cbcb9cdd9 [ 2068.904509][T31972] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 2068.912511][T31972] RBP: 00007f6cbdac6090 R08: 0000000000000000 R09: 0000000000000000 [ 2068.920503][T31972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2068.928495][T31972] R13: 00007f6cbce16038 R14: 00007f6cbce15fa0 R15: 00007ffeadcd4158 [ 2068.936500][T31972] [ 2069.528532][T31989] netlink: 'syz.5.8995': attribute type 29 has an invalid length. [ 2069.696894][T31989] netlink: 'syz.5.8995': attribute type 29 has an invalid length. [ 2070.645737][T22266] Bluetooth: hci2: command 0x040f tx timeout [ 2070.973310][T31881] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2071.130499][T32022] netlink: 198580 bytes leftover after parsing attributes in process `syz.6.9004'. [ 2071.472041][T31881] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2072.094798][T31881] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2072.129504][T31881] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2072.164225][T32033] netlink: 'syz.6.9007': attribute type 29 has an invalid length. [ 2072.185031][T32033] netlink: 'syz.6.9007': attribute type 29 has an invalid length. [ 2072.306851][T32036] netlink: 'syz.0.9006': attribute type 3 has an invalid length. [ 2072.370116][T32036] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.9006'. [ 2072.726147][T22266] Bluetooth: hci2: command 0x0419 tx timeout [ 2072.887381][T32043] netlink: 'syz.6.9010': attribute type 28 has an invalid length. [ 2073.003043][ T4876] device hsr_slave_0 left promiscuous mode [ 2073.034455][ T4876] device hsr_slave_1 left promiscuous mode [ 2073.100308][ T4876] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2073.123925][ T4876] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2073.145146][ T4876] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2073.170552][ T4876] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2073.852225][ T4876] device veth0_macvtap left promiscuous mode [ 2073.868813][ T4876] device veth1_vlan left promiscuous mode [ 2073.889180][ T4876] device veth0_vlan left promiscuous mode [ 2074.258992][T32070] netlink: 'syz.5.9019': attribute type 29 has an invalid length. [ 2075.893562][ T4876] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2075.939326][ T4876] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2076.225558][ T4876] bond0 (unregistering): Released all slaves [ 2076.290711][T32070] netlink: 'syz.5.9019': attribute type 29 has an invalid length. [ 2076.308056][T31881] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2076.365792][T31881] 8021q: adding VLAN 0 to HW filter on device team0 [ 2076.387206][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2076.397276][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2076.497024][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2076.550057][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2076.644636][ T29] bridge0: port 1(bridge_slave_0) entered blocking state [ 2076.651826][ T29] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2076.667309][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2076.676479][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2076.685929][ T29] bridge0: port 2(bridge_slave_1) entered blocking state [ 2076.693091][ T29] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2076.701411][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2076.717689][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2076.743124][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2076.763860][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2076.773190][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2076.789115][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2076.888951][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2076.934791][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2077.020971][T31881] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2077.115344][T31881] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2077.198653][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2077.224049][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2077.273451][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2077.348370][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2077.360859][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2077.378154][T32095] netlink: 'syz.5.9027': attribute type 33 has an invalid length. [ 2077.436170][T32095] netlink: 152 bytes leftover after parsing attributes in process `syz.5.9027'. [ 2078.335944][T32123] netlink: 'syz.6.9034': attribute type 29 has an invalid length. [ 2078.445108][T32123] netlink: 'syz.6.9034': attribute type 29 has an invalid length. [ 2078.509901][T11590] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2078.519870][T11590] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2078.580040][T31881] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2078.631034][ T4876] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2078.659002][ T4876] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2078.801283][T31881] device veth0_vlan entered promiscuous mode [ 2078.840719][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2078.861504][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2078.902066][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2078.942507][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2079.041260][T31881] device veth1_vlan entered promiscuous mode [ 2079.202362][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2079.222334][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2079.295305][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2079.359052][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2079.423332][T31881] device veth0_macvtap entered promiscuous mode [ 2079.452963][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2079.489571][T31881] device veth1_macvtap entered promiscuous mode [ 2079.583991][T31881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2079.633243][T31881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2079.665437][T31881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2079.685633][T31881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2079.704304][T31881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2079.733854][T31881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2079.770812][T32145] netlink: 9286 bytes leftover after parsing attributes in process `syz.6.9040'. [ 2079.777942][T31881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2079.844425][T31881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2079.918548][T31881] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2079.984771][T24798] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2080.014379][T24798] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2080.057547][T31881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2080.100673][T31881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2080.154897][T31881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2080.199426][T31881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2080.233419][T31881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2080.269561][T31881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2080.289810][T31881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2080.333331][T32156] netlink: 'syz.4.9044': attribute type 30 has an invalid length. [ 2080.343596][T31881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2080.393610][T31881] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2080.412707][T31881] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2080.438066][T31881] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2080.464220][T31881] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2080.478935][T32160] netlink: 'syz.5.9045': attribute type 29 has an invalid length. [ 2080.493552][T31881] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2080.520218][T22335] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2080.540155][T22335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2080.600298][T32160] netlink: 'syz.5.9045': attribute type 29 has an invalid length. [ 2080.769871][T22335] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2080.817811][T22335] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2080.888435][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2080.908146][T22335] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2080.934957][T22335] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2080.980121][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2081.931980][T32186] device lo entered promiscuous mode [ 2082.216391][T32196] netlink: 112 bytes leftover after parsing attributes in process `syz.3.9059'. [ 2083.054072][T32201] device wg2 entered promiscuous mode [ 2086.691596][T32239] netlink: 'syz.0.9077': attribute type 10 has an invalid length. [ 2086.758142][T32239] device hsr0 entered promiscuous mode [ 2086.807098][T32239] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 2086.861774][T32239] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 2086.932664][T32239] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 2087.010870][T32239] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 2092.412426][T32309] device syzkaller0 entered promiscuous mode [ 2092.499869][T23702] bridge0: port 3(syz_tun) entered disabled state [ 2092.559569][T23702] device syz_tun left promiscuous mode [ 2092.611816][T23702] bridge0: port 3(syz_tun) entered disabled state [ 2092.735426][T17268] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2092.746474][T17268] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2092.754366][T17268] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2092.763334][T17268] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2092.783579][T17268] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 2092.791083][T17268] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2094.818743][T32347] sctp: [Deprecated]: syz.0.9112 (pid 32347) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2094.818743][T32347] Use struct sctp_sack_info instead [ 2094.898384][T17268] Bluetooth: hci0: command 0x0409 tx timeout [ 2096.151922][ T4876] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2096.201103][T32352] netlink: 'syz.0.9113': attribute type 10 has an invalid length. [ 2096.244345][T32352] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2096.284742][T32352] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 2096.355899][ T4876] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2096.529289][ T4876] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2096.756628][ T4876] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2096.964459][T17268] Bluetooth: hci0: command 0x041b tx timeout [ 2097.257920][T32318] chnl_net:caif_netlink_parms(): no params data found [ 2097.615507][ T4876] device 0 left promiscuous mode [ 2097.651669][T32318] bridge0: port 1(bridge_slave_0) entered blocking state [ 2097.659877][T32318] bridge0: port 1(bridge_slave_0) entered disabled state [ 2097.668545][T32318] device bridge_slave_0 entered promiscuous mode [ 2097.677986][T32318] bridge0: port 2(bridge_slave_1) entered blocking state [ 2097.685882][T32318] bridge0: port 2(bridge_slave_1) entered disabled state [ 2097.694961][T32318] device bridge_slave_1 entered promiscuous mode [ 2097.730939][T32318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2097.750633][T32318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2097.955638][T32318] team0: Port device team_slave_0 added [ 2098.094910][T32318] team0: Port device team_slave_1 added [ 2098.131960][T32318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2098.139164][T32318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2098.179829][T32318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2098.228450][T32318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2098.247921][T32318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2098.327542][T32318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2098.571192][T32318] device hsr_slave_0 entered promiscuous mode [ 2098.617081][T32318] device hsr_slave_1 entered promiscuous mode [ 2098.656447][T32318] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2098.688769][T32318] Cannot create hsr debugfs directory [ 2099.015710][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 2099.022521][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 2099.053549][T17268] Bluetooth: hci0: command 0x040f tx timeout [ 2099.290394][T32420] device syzkaller0 entered promiscuous mode [ 2101.127747][T17268] Bluetooth: hci0: command 0x0419 tx timeout [ 2101.877242][T32431] netlink: 61967 bytes leftover after parsing attributes in process `syz.6.9137'. [ 2103.252440][ T4876] device hsr_slave_0 left promiscuous mode [ 2103.299525][T22266] Bluetooth: hci3: unexpected event 0x1c length: 15 > 5 [ 2103.303904][ T4876] device hsr_slave_1 left promiscuous mode [ 2103.354886][ T4876] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2103.403236][ T4876] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2103.463288][ T4876] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2103.521232][ T4876] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2103.580983][ T4876] device bridge_slave_1 left promiscuous mode [ 2103.605818][ T4876] bridge0: port 2(bridge_slave_1) entered disabled state [ 2103.625170][ T4876] device bridge_slave_0 left promiscuous mode [ 2103.638555][ T4876] bridge0: port 1(bridge_slave_0) entered disabled state [ 2103.694612][ T4876] device veth1_vlan left promiscuous mode [ 2103.701286][ T4876] device veth0_vlan left promiscuous mode [ 2104.533308][ T4876] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2104.576553][ T4876] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2104.834644][ T4876] bond0 (unregistering): Released all slaves [ 2104.927306][T32475] netlink: 15743 bytes leftover after parsing attributes in process `syz.0.9147'. [ 2105.062014][T32318] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2105.106495][T32318] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2105.177207][T32318] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2105.271235][T32318] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2105.635265][T32318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2105.694861][T24798] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2105.707232][T24798] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2105.752612][T32318] 8021q: adding VLAN 0 to HW filter on device team0 [ 2105.830272][T24798] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2105.887133][T24798] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2105.966840][T24798] bridge0: port 1(bridge_slave_0) entered blocking state [ 2105.974094][T24798] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2105.999500][T24798] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2106.149462][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2106.178997][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2106.239809][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 2106.247172][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2106.317721][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2106.355859][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2106.438616][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2106.483889][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2106.543361][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2106.555796][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2106.606825][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2106.653392][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2106.681133][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2106.733090][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2106.799293][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2106.851103][T32318] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2107.713926][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2107.721588][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2107.756842][T32318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2107.769659][T32548] netlink: 198580 bytes leftover after parsing attributes in process `syz.5.9164'. [ 2108.480227][T32571] netlink: 'syz.0.9170': attribute type 21 has an invalid length. [ 2108.514153][T32571] netlink: 128 bytes leftover after parsing attributes in process `syz.0.9170'. [ 2108.569991][T32571] netlink: 3 bytes leftover after parsing attributes in process `syz.0.9170'. [ 2109.484397][T32440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2109.502602][T32440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2109.556163][T32440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2109.585095][T32440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2109.630238][T32318] device veth0_vlan entered promiscuous mode [ 2109.642779][T32440] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2109.674953][T32440] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2109.720256][T32318] device veth1_vlan entered promiscuous mode [ 2109.879310][T32440] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2109.888062][T32440] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2109.929467][T32440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2109.964546][T32440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2110.001479][T32318] device veth0_macvtap entered promiscuous mode [ 2110.020706][T32318] device veth1_macvtap entered promiscuous mode [ 2110.208260][T32318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2110.251721][T32318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2110.307919][T32318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2110.372043][T32318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2110.434005][T32318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2110.504674][T32318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2110.558093][T32318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2110.627005][T32318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2110.709784][T32318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2110.771457][T32440] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2110.850088][T32440] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2110.897360][T32440] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2110.961076][T32440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2111.019151][T32318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2111.044269][T32318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2111.071592][T32318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2111.120895][T32318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2111.152399][T32318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2111.182452][T32318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2111.212898][T32318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2111.282297][T32318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2111.330261][T32318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2111.380377][T32440] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2111.423245][T32440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2111.530845][T32318] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2111.562655][T32318] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2111.587370][T32318] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2111.614683][T32318] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2111.659976][T32634] netlink: 15743 bytes leftover after parsing attributes in process `syz.3.9187'. [ 2112.062592][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2112.092350][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2112.138189][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2112.191849][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2112.210368][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2112.262800][T11590] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2114.662378][T32686] netlink: 15743 bytes leftover after parsing attributes in process `syz.6.9200'. [ 2115.201739][T32697] netlink: 'syz.5.9205': attribute type 10 has an invalid length. [ 2115.264216][T32697] netlink: 40 bytes leftover after parsing attributes in process `syz.5.9205'. [ 2115.335731][T32697] device ipvlan1 entered promiscuous mode [ 2115.402149][T32697] bridge0: port 3(ipvlan1) entered blocking state [ 2115.442480][T32697] bridge0: port 3(ipvlan1) entered disabled state [ 2115.482754][T32697] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 2119.291120][T32736] netlink: 15743 bytes leftover after parsing attributes in process `syz.5.9219'. [ 2122.800539][ T317] netlink: 15743 bytes leftover after parsing attributes in process `syz.6.9235'. [ 2123.317002][ T335] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.9240'. [ 2125.413041][ T359] netlink: 15743 bytes leftover after parsing attributes in process `syz.6.9249'. [ 2128.101282][ T398] netlink: 15743 bytes leftover after parsing attributes in process `syz.4.9263'. [ 2128.188984][ T401] netlink: 'syz.0.9265': attribute type 10 has an invalid length. [ 2128.199220][ T401] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9265'. [ 2128.219283][ T401] device ipvlan1 entered promiscuous mode [ 2128.241223][ T401] bridge0: port 3(ipvlan1) entered blocking state [ 2128.249184][ T401] bridge0: port 3(ipvlan1) entered disabled state [ 2128.267387][ T401] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 2128.937711][ T428] netlink: 'syz.5.9273': attribute type 3 has an invalid length. [ 2129.025377][ T428] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.9273'. [ 2131.530853][ T484] device veth1_macvtap left promiscuous mode [ 2131.543790][ T484] device macsec0 entered promiscuous mode [ 2131.572642][ T488] netlink: 'syz.4.9295': attribute type 39 has an invalid length. [ 2131.763572][T17268] Bluetooth: hci4: command 0x0406 tx timeout [ 2132.531538][ T519] sctp: [Deprecated]: syz.0.9307 (pid 519) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2132.531538][ T519] Use struct sctp_sack_info instead [ 2133.143455][ T529] netlink: 'syz.5.9309': attribute type 29 has an invalid length. [ 2134.433936][ T529] netlink: 'syz.5.9309': attribute type 29 has an invalid length. [ 2135.232720][ T556] netlink: 15743 bytes leftover after parsing attributes in process `syz.4.9318'. [ 2135.835915][ T573] sctp: [Deprecated]: syz.0.9325 (pid 573) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2135.835915][ T573] Use struct sctp_sack_info instead [ 2136.161492][ T574] device syzkaller0 entered promiscuous mode [ 2136.502031][ T582] FAULT_INJECTION: forcing a failure. [ 2136.502031][ T582] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2136.531523][ T582] CPU: 0 PID: 582 Comm: syz.6.9326 Not tainted syzkaller #0 [ 2136.538977][ T582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2136.549086][ T582] Call Trace: [ 2136.552409][ T582] [ 2136.555382][ T582] dump_stack_lvl+0x188/0x24e [ 2136.560120][ T582] ? show_regs_print_info+0x12/0x12 [ 2136.565378][ T582] ? load_image+0x400/0x400 [ 2136.569930][ T582] ? __lock_acquire+0x7d10/0x7d10 [ 2136.575015][ T582] should_fail_ex+0x399/0x4d0 [ 2136.579742][ T582] _copy_from_user+0x2c/0x170 [ 2136.584474][ T582] ip6_tnl_siocdevprivate+0x3a9/0xaf0 [ 2136.589904][ T582] ? lock_chain_count+0x20/0x20 [ 2136.594805][ T582] ? ip6_tnl_start_xmit+0x1200/0x1200 [ 2136.600280][ T582] dev_ifsioc+0xa4a/0xd40 [ 2136.604652][ T582] ? dev_ioctl+0xe80/0xe80 [ 2136.609097][ T582] ? full_name_hash+0x8e/0xe0 [ 2136.613807][ T582] ? dev_load+0x1d/0x1e0 [ 2136.618082][ T582] ? dev_load+0x1d/0x1e0 [ 2136.622356][ T582] dev_ioctl+0x5f8/0xe80 [ 2136.626637][ T582] ? get_user_ifreq+0xc7/0x170 [ 2136.631433][ T582] sock_ioctl+0x691/0x710 [ 2136.635819][ T582] ? sock_poll+0x410/0x410 [ 2136.640266][ T582] ? bpf_lsm_file_ioctl+0x5/0x10 [ 2136.645253][ T582] ? security_file_ioctl+0x7c/0xa0 [ 2136.650392][ T582] ? sock_poll+0x410/0x410 [ 2136.654832][ T582] __se_sys_ioctl+0xfa/0x170 [ 2136.659448][ T582] do_syscall_64+0x4c/0xa0 [ 2136.663900][ T582] ? clear_bhb_loop+0x60/0xb0 [ 2136.668615][ T582] ? clear_bhb_loop+0x60/0xb0 [ 2136.673324][ T582] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2136.679246][ T582] RIP: 0033:0x7ff2f839cdd9 [ 2136.683686][ T582] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2136.703325][ T582] RSP: 002b:00007ff2f9348028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2136.711772][ T582] RAX: ffffffffffffffda RBX: 00007ff2f8615fa0 RCX: 00007ff2f839cdd9 [ 2136.719791][ T582] RDX: 0000200000000080 RSI: 00000000000089f1 RDI: 0000000000000008 [ 2136.727794][ T582] RBP: 00007ff2f9348090 R08: 0000000000000000 R09: 0000000000000000 [ 2136.735784][ T582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2136.743778][ T582] R13: 00007ff2f8616038 R14: 00007ff2f8615fa0 R15: 00007ffda3326908 [ 2136.751789][ T582] [ 2140.487261][ T611] netlink: 15743 bytes leftover after parsing attributes in process `syz.5.9334'. [ 2140.704698][ T620] FAULT_INJECTION: forcing a failure. [ 2140.704698][ T620] name failslab, interval 1, probability 0, space 0, times 0 [ 2140.748590][ T620] CPU: 0 PID: 620 Comm: syz.4.9336 Not tainted syzkaller #0 [ 2140.755980][ T620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2140.766079][ T620] Call Trace: [ 2140.769411][ T620] [ 2140.772381][ T620] dump_stack_lvl+0x188/0x24e [ 2140.777127][ T620] ? show_regs_print_info+0x12/0x12 [ 2140.782393][ T620] ? load_image+0x400/0x400 [ 2140.786947][ T620] ? __might_sleep+0xd0/0xd0 [ 2140.791610][ T620] ? __lock_acquire+0x7d10/0x7d10 [ 2140.796696][ T620] should_fail_ex+0x399/0x4d0 [ 2140.801426][ T620] should_failslab+0x5/0x20 [ 2140.805975][ T620] slab_pre_alloc_hook+0x59/0x310 [ 2140.811049][ T620] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 2140.816828][ T620] __kmem_cache_alloc_node+0x4f/0x260 [ 2140.822251][ T620] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 2140.828029][ T620] __kmalloc+0xa0/0x240 [ 2140.832255][ T620] tomoyo_realpath_from_path+0xdf/0x5d0 [ 2140.837868][ T620] ? tomoyo_path_number_perm+0x205/0x650 [ 2140.843559][ T620] tomoyo_path_number_perm+0x22f/0x650 [ 2140.849073][ T620] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 2140.854587][ T620] ? ksys_write+0x1c0/0x250 [ 2140.859145][ T620] ? common_file_perm+0x171/0x1c0 [ 2140.864242][ T620] ? __fget_files+0x28/0x4b0 [ 2140.868885][ T620] ? __fget_files+0x28/0x4b0 [ 2140.873550][ T620] security_file_ioctl+0x6c/0xa0 [ 2140.878536][ T620] __se_sys_ioctl+0x48/0x170 [ 2140.883161][ T620] do_syscall_64+0x4c/0xa0 [ 2140.887618][ T620] ? clear_bhb_loop+0x60/0xb0 [ 2140.892432][ T620] ? clear_bhb_loop+0x60/0xb0 [ 2140.897149][ T620] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2140.903090][ T620] RIP: 0033:0x7fcfc539cdd9 [ 2140.907530][ T620] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2140.927162][ T620] RSP: 002b:00007fcfc622b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2140.935604][ T620] RAX: ffffffffffffffda RBX: 00007fcfc5615fa0 RCX: 00007fcfc539cdd9 [ 2140.943605][ T620] RDX: 0000200000000080 RSI: 00000000000089f3 RDI: 0000000000000004 [ 2140.951610][ T620] RBP: 00007fcfc622b090 R08: 0000000000000000 R09: 0000000000000000 [ 2140.959605][ T620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2140.967617][ T620] R13: 00007fcfc5616038 R14: 00007fcfc5615fa0 R15: 00007ffc7a94aee8 [ 2140.975632][ T620] [ 2140.991896][ T620] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2141.034847][ T627] sctp: [Deprecated]: syz.3.9340 (pid 627) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2141.034847][ T627] Use struct sctp_sack_info instead [ 2143.926820][ T656] device lo entered promiscuous mode [ 2143.964342][ T655] netlink: 15743 bytes leftover after parsing attributes in process `syz.3.9349'. [ 2146.409804][ T675] sctp: [Deprecated]: syz.3.9357 (pid 675) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2146.409804][ T675] Use struct sctp_sack_info instead [ 2149.492991][ T708] netlink: 15743 bytes leftover after parsing attributes in process `syz.4.9368'. [ 2150.953432][ T735] sctp: [Deprecated]: syz.3.9379 (pid 735) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2150.953432][ T735] Use struct sctp_sack_info instead [ 2150.978035][T17268] Bluetooth: hci4: unexpected event 0x1c length: 15 > 5 [ 2151.635101][ T758] netlink: 15743 bytes leftover after parsing attributes in process `syz.5.9384'. [ 2157.528915][ T795] netlink: 'syz.4.9395': attribute type 21 has an invalid length. [ 2157.550685][ T795] netlink: 128 bytes leftover after parsing attributes in process `syz.4.9395'. [ 2157.663093][ T795] netlink: 3 bytes leftover after parsing attributes in process `syz.4.9395'. [ 2157.677241][ T798] netlink: 15743 bytes leftover after parsing attributes in process `syz.5.9397'. [ 2159.835220][ T809] sctp: [Deprecated]: syz.0.9400 (pid 809) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2159.835220][ T809] Use struct sctp_sack_info instead [ 2160.422826][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.429295][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 2162.483756][T22266] Bluetooth: hci1: command 0x0406 tx timeout [ 2163.299678][ T854] netlink: 15743 bytes leftover after parsing attributes in process `syz.0.9413'. [ 2164.013058][ T884] sctp: [Deprecated]: syz.4.9423 (pid 884) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2164.013058][ T884] Use struct sctp_sack_info instead [ 2165.765781][ T911] netlink: 15743 bytes leftover after parsing attributes in process `syz.6.9429'. [ 2166.152422][ T927] netlink: 'syz.3.9432': attribute type 1 has an invalid length. [ 2166.162058][ T927] netlink: 'syz.3.9432': attribute type 1 has an invalid length. [ 2166.182611][ T927] netlink: 116376 bytes leftover after parsing attributes in process `syz.3.9432'. [ 2168.616715][ T949] sctp: [Deprecated]: syz.5.9441 (pid 949) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2168.616715][ T949] Use struct sctp_sack_info instead [ 2169.481492][ T963] netlink: 15743 bytes leftover after parsing attributes in process `syz.0.9445'. [ 2170.785744][ T1008] netlink: 15743 bytes leftover after parsing attributes in process `syz.0.9462'. [ 2170.813225][ T1009] sctp: [Deprecated]: syz.4.9461 (pid 1009) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2170.813225][ T1009] Use struct sctp_sack_info instead [ 2171.289760][ T1026] netlink: 'syz.3.9466': attribute type 29 has an invalid length. [ 2171.330002][ T1026] netlink: 'syz.3.9466': attribute type 29 has an invalid length. [ 2172.469763][ T1060] netlink: 15743 bytes leftover after parsing attributes in process `syz.3.9477'. [ 2172.858963][ T1064] netlink: 15743 bytes leftover after parsing attributes in process `syz.4.9478'. [ 2172.942006][ T1069] netlink: 'syz.6.9480': attribute type 29 has an invalid length. [ 2172.961243][ T1069] netlink: 'syz.6.9480': attribute type 29 has an invalid length. [ 2173.454747][ T1082] netlink: 'syz.6.9485': attribute type 10 has an invalid length. [ 2173.474780][ T1082] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2173.551094][ T1082] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2173.622894][ T1082] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 2173.753751][ T1095] netlink: 15743 bytes leftover after parsing attributes in process `syz.4.9491'. [ 2173.819001][ T1094] netlink: 15743 bytes leftover after parsing attributes in process `syz.0.9490'. [ 2173.831923][ T1097] netlink: 'syz.3.9492': attribute type 29 has an invalid length. [ 2173.903745][ T1097] netlink: 'syz.3.9492': attribute type 29 has an invalid length. [ 2174.132564][ T1107] netlink: 15743 bytes leftover after parsing attributes in process `syz.6.9494'. [ 2174.684903][ T1132] netlink: 'syz.6.9505': attribute type 29 has an invalid length. [ 2174.693347][ T1132] netlink: 'syz.6.9505': attribute type 29 has an invalid length. [ 2174.927899][ T1138] netlink: 15743 bytes leftover after parsing attributes in process `syz.5.9509'. [ 2175.287561][ T1147] netlink: 15743 bytes leftover after parsing attributes in process `syz.3.9511'. [ 2175.833350][ T1162] netlink: 'syz.4.9516': attribute type 29 has an invalid length. [ 2176.305412][ T1175] device 0 entered promiscuous mode [ 2176.579915][ T1195] netlink: 15743 bytes leftover after parsing attributes in process `syz.3.9529'. [ 2176.610610][ T1198] validate_nla: 2 callbacks suppressed [ 2176.610629][ T1198] netlink: 'syz.0.9530': attribute type 29 has an invalid length. [ 2176.704826][ T1198] netlink: 'syz.0.9530': attribute type 29 has an invalid length. [ 2178.399027][ T1237] netlink: 'syz.3.9546': attribute type 29 has an invalid length. [ 2178.433167][ T1237] netlink: 'syz.3.9546': attribute type 29 has an invalid length. [ 2179.287927][ T1263] sctp: [Deprecated]: syz.3.9555 (pid 1263) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2179.287927][ T1263] Use struct sctp_sack_info instead [ 2179.345416][ T1265] netlink: 'syz.5.9556': attribute type 10 has an invalid length. [ 2179.359680][ T1265] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 2179.725232][ T1271] netlink: 'syz.0.9558': attribute type 29 has an invalid length. [ 2179.750919][ T1271] netlink: 'syz.0.9558': attribute type 29 has an invalid length. [ 2180.582213][ T1304] tap0: tun_chr_ioctl cmd 2147767517 [ 2180.599558][ T1306] netlink: 'syz.5.9571': attribute type 29 has an invalid length. [ 2180.632046][ T1306] netlink: 'syz.5.9571': attribute type 29 has an invalid length. [ 2180.724423][ T1313] sctp: [Deprecated]: syz.4.9572 (pid 1313) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2180.724423][ T1313] Use struct sctp_sack_info instead [ 2181.216271][ T1324] netlink: 'syz.0.9576': attribute type 1 has an invalid length. [ 2181.244276][ T1324] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.9576'. [ 2181.337958][ T1329] FAULT_INJECTION: forcing a failure. [ 2181.337958][ T1329] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2181.548231][ T1329] CPU: 1 PID: 1329 Comm: syz.6.9577 Not tainted syzkaller #0 [ 2181.555774][ T1329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2181.565867][ T1329] Call Trace: [ 2181.569177][ T1329] [ 2181.572166][ T1329] dump_stack_lvl+0x188/0x24e [ 2181.576900][ T1329] ? show_regs_print_info+0x12/0x12 [ 2181.582139][ T1329] ? load_image+0x400/0x400 [ 2181.586687][ T1329] ? __lock_acquire+0x7d10/0x7d10 [ 2181.591774][ T1329] ? snprintf+0xe5/0x140 [ 2181.596060][ T1329] should_fail_ex+0x399/0x4d0 [ 2181.600792][ T1329] _copy_to_user+0x2c/0x130 [ 2181.605345][ T1329] simple_read_from_buffer+0xe3/0x150 [ 2181.610749][ T1329] proc_fail_nth_read+0x1a6/0x220 [ 2181.615804][ T1329] ? proc_fault_inject_write+0x310/0x310 [ 2181.621465][ T1329] ? fsnotify_perm+0x248/0x550 [ 2181.626272][ T1329] ? proc_fault_inject_write+0x310/0x310 [ 2181.631945][ T1329] vfs_read+0x2de/0xa00 [ 2181.636135][ T1329] ? kernel_read+0x1e0/0x1e0 [ 2181.640763][ T1329] ? __fget_files+0x28/0x4b0 [ 2181.645382][ T1329] ? __fget_files+0x28/0x4b0 [ 2181.650005][ T1329] ? __fget_files+0x43d/0x4b0 [ 2181.654735][ T1329] ? __fdget_pos+0x2ae/0x360 [ 2181.659358][ T1329] ? ksys_read+0x71/0x250 [ 2181.663747][ T1329] ksys_read+0x14c/0x250 [ 2181.668039][ T1329] ? vfs_write+0xa30/0xa30 [ 2181.672496][ T1329] ? lockdep_hardirqs_on+0x94/0x140 [ 2181.677719][ T1329] do_syscall_64+0x4c/0xa0 [ 2181.682167][ T1329] ? clear_bhb_loop+0x60/0xb0 [ 2181.686877][ T1329] ? clear_bhb_loop+0x60/0xb0 [ 2181.691589][ T1329] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2181.697516][ T1329] RIP: 0033:0x7ff2f835d60e [ 2181.701959][ T1329] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2181.721589][ T1329] RSP: 002b:00007ff2f9347fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2181.730027][ T1329] RAX: ffffffffffffffda RBX: 00007ff2f93486c0 RCX: 00007ff2f835d60e [ 2181.738026][ T1329] RDX: 000000000000000f RSI: 00007ff2f93480a0 RDI: 0000000000000009 [ 2181.746025][ T1329] RBP: 00007ff2f9348090 R08: 0000000000000000 R09: 0000000000000000 [ 2181.754021][ T1329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2181.762016][ T1329] R13: 00007ff2f8616038 R14: 00007ff2f8615fa0 R15: 00007ffda3326908 [ 2181.770027][ T1329] [ 2182.316392][ T1347] netlink: 'syz.0.9583': attribute type 29 has an invalid length. [ 2182.337848][ T1347] netlink: 'syz.0.9583': attribute type 29 has an invalid length. [ 2182.481224][ T1354] netlink: 15743 bytes leftover after parsing attributes in process `syz.4.9585'. [ 2182.964820][ T1365] device syzkaller0 entered promiscuous mode [ 2183.385389][ T1385] FAULT_INJECTION: forcing a failure. [ 2183.385389][ T1385] name failslab, interval 1, probability 0, space 0, times 0 [ 2183.463803][ T1385] CPU: 0 PID: 1385 Comm: syz.4.9595 Not tainted syzkaller #0 [ 2183.471255][ T1385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2183.481342][ T1385] Call Trace: [ 2183.484649][ T1385] [ 2183.487621][ T1385] dump_stack_lvl+0x188/0x24e [ 2183.492357][ T1385] ? show_regs_print_info+0x12/0x12 [ 2183.497604][ T1385] ? load_image+0x400/0x400 [ 2183.502187][ T1385] ? __might_sleep+0xd0/0xd0 [ 2183.506829][ T1385] ? __lock_acquire+0x7d10/0x7d10 [ 2183.511914][ T1385] should_fail_ex+0x399/0x4d0 [ 2183.516639][ T1385] should_failslab+0x5/0x20 [ 2183.521189][ T1385] slab_pre_alloc_hook+0x59/0x310 [ 2183.526269][ T1385] ? tomoyo_encode+0x27e/0x540 [ 2183.531095][ T1385] __kmem_cache_alloc_node+0x4f/0x260 [ 2183.536522][ T1385] ? tomoyo_encode+0x27e/0x540 [ 2183.541336][ T1385] __kmalloc+0xa0/0x240 [ 2183.545558][ T1385] tomoyo_encode+0x27e/0x540 [ 2183.550221][ T1385] tomoyo_realpath_from_path+0x58e/0x5d0 [ 2183.555909][ T1385] ? tomoyo_path_number_perm+0x205/0x650 [ 2183.561601][ T1385] tomoyo_path_number_perm+0x22f/0x650 [ 2183.567114][ T1385] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 2183.572617][ T1385] ? ksys_write+0x1c0/0x250 [ 2183.577168][ T1385] ? common_file_perm+0x171/0x1c0 [ 2183.582261][ T1385] ? __fget_files+0x28/0x4b0 [ 2183.586900][ T1385] ? __fget_files+0x28/0x4b0 [ 2183.591555][ T1385] security_file_ioctl+0x6c/0xa0 [ 2183.596547][ T1385] __se_sys_ioctl+0x48/0x170 [ 2183.601193][ T1385] do_syscall_64+0x4c/0xa0 [ 2183.605673][ T1385] ? clear_bhb_loop+0x60/0xb0 [ 2183.610402][ T1385] ? clear_bhb_loop+0x60/0xb0 [ 2183.615134][ T1385] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2183.621078][ T1385] RIP: 0033:0x7fcfc539cdd9 [ 2183.625534][ T1385] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2183.645298][ T1385] RSP: 002b:00007fcfc622b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2183.653772][ T1385] RAX: ffffffffffffffda RBX: 00007fcfc5615fa0 RCX: 00007fcfc539cdd9 [ 2183.661797][ T1385] RDX: 0000200000000080 RSI: 00000000000089f3 RDI: 0000000000000004 [ 2183.669805][ T1385] RBP: 00007fcfc622b090 R08: 0000000000000000 R09: 0000000000000000 [ 2183.677818][ T1385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2183.685831][ T1385] R13: 00007fcfc5616038 R14: 00007fcfc5615fa0 R15: 00007ffc7a94aee8 [ 2183.693866][ T1385] [ 2183.718742][ T1385] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2184.360533][ T1392] netlink: 'syz.3.9599': attribute type 29 has an invalid length. [ 2184.413063][ T1391] sctp: [Deprecated]: syz.5.9598 (pid 1391) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2184.413063][ T1391] Use struct sctp_sack_info instead [ 2186.531842][ T1392] netlink: 'syz.3.9599': attribute type 29 has an invalid length. [ 2186.733886][ T1404] netlink: 15743 bytes leftover after parsing attributes in process `syz.5.9603'. [ 2187.560574][ T1433] netlink: 'syz.5.9615': attribute type 29 has an invalid length. [ 2187.582563][ T1433] netlink: 'syz.5.9615': attribute type 29 has an invalid length. [ 2188.083691][T17268] Bluetooth: hci2: command 0x0406 tx timeout [ 2188.352186][ T1465] netlink: 'syz.6.9629': attribute type 29 has an invalid length. [ 2188.377293][ T1465] netlink: 'syz.6.9629': attribute type 29 has an invalid length. [ 2189.096060][ T1496] netlink: 'syz.6.9642': attribute type 21 has an invalid length. [ 2189.152486][ T1501] netlink: 'syz.0.9643': attribute type 29 has an invalid length. [ 2189.172543][ T1501] netlink: 'syz.0.9643': attribute type 29 has an invalid length. [ 2189.617833][ T1520] netlink: 'syz.4.9651': attribute type 10 has an invalid length. [ 2189.643209][ T1520] team0: Device ipvlan1 failed to register rx_handler [ 2190.355162][ T1535] netlink: 'syz.0.9657': attribute type 29 has an invalid length. [ 2190.378770][ T1535] netlink: 'syz.0.9657': attribute type 29 has an invalid length. [ 2190.546875][ T1542] tap0: tun_chr_ioctl cmd 2147767517 [ 2190.747805][ T1549] netlink: 105120 bytes leftover after parsing attributes in process `syz.5.9658'. [ 2191.060698][ T1567] FAULT_INJECTION: forcing a failure. [ 2191.060698][ T1567] name failslab, interval 1, probability 0, space 0, times 0 [ 2191.093868][ T1567] CPU: 1 PID: 1567 Comm: syz.0.9667 Not tainted syzkaller #0 [ 2191.101330][ T1567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2191.111429][ T1567] Call Trace: [ 2191.114766][ T1567] [ 2191.117727][ T1567] dump_stack_lvl+0x188/0x24e [ 2191.122463][ T1567] ? show_regs_print_info+0x12/0x12 [ 2191.127715][ T1567] ? load_image+0x400/0x400 [ 2191.132272][ T1567] ? __might_sleep+0xd0/0xd0 [ 2191.136942][ T1567] ? __lock_acquire+0x7d10/0x7d10 [ 2191.142034][ T1567] should_fail_ex+0x399/0x4d0 [ 2191.146784][ T1567] should_failslab+0x5/0x20 [ 2191.151330][ T1567] slab_pre_alloc_hook+0x59/0x310 [ 2191.156401][ T1567] ? apparmor_sk_alloc_security+0x74/0x100 [ 2191.162258][ T1567] __kmem_cache_alloc_node+0x4f/0x260 [ 2191.167693][ T1567] ? apparmor_sk_alloc_security+0x74/0x100 [ 2191.173544][ T1567] kmalloc_trace+0x26/0xe0 [ 2191.178020][ T1567] apparmor_sk_alloc_security+0x74/0x100 [ 2191.183700][ T1567] security_sk_alloc+0x6a/0xa0 [ 2191.188513][ T1567] sk_prot_alloc+0x101/0x210 [ 2191.193147][ T1567] ? sk_alloc+0x20/0x340 [ 2191.197454][ T1567] sk_alloc+0x36/0x340 [ 2191.201574][ T1567] bpf_prog_test_run_skb+0x35e/0x12a0 [ 2191.206990][ T1567] ? lockdep_hardirqs_on+0x94/0x140 [ 2191.212231][ T1567] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2191.218443][ T1567] ? cpu_online+0xa0/0xa0 [ 2191.222839][ T1567] bpf_prog_test_run+0x31e/0x390 [ 2191.227852][ T1567] __sys_bpf+0x62b/0x780 [ 2191.232161][ T1567] ? bpf_link_show_fdinfo+0x380/0x380 [ 2191.237597][ T1567] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2191.243825][ T1567] __x64_sys_bpf+0x78/0x90 [ 2191.248307][ T1567] do_syscall_64+0x4c/0xa0 [ 2191.252776][ T1567] ? clear_bhb_loop+0x60/0xb0 [ 2191.257494][ T1567] ? clear_bhb_loop+0x60/0xb0 [ 2191.262236][ T1567] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2191.268181][ T1567] RIP: 0033:0x7fcdf5f9cdd9 [ 2191.272638][ T1567] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2191.292302][ T1567] RSP: 002b:00007fcdf6d7c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2191.300821][ T1567] RAX: ffffffffffffffda RBX: 00007fcdf6215fa0 RCX: 00007fcdf5f9cdd9 [ 2191.308833][ T1567] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 2191.316847][ T1567] RBP: 00007fcdf6d7c090 R08: 0000000000000000 R09: 0000000000000000 [ 2191.324873][ T1567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2191.332894][ T1567] R13: 00007fcdf6216038 R14: 00007fcdf6215fa0 R15: 00007ffc0cbc5f18 [ 2191.340925][ T1567] [ 2191.696344][ T1577] netlink: 198580 bytes leftover after parsing attributes in process `syz.0.9671'. [ 2192.152619][ T1598] netlink: 128 bytes leftover after parsing attributes in process `syz.6.9679'. [ 2192.223635][ T1598] netlink: 3 bytes leftover after parsing attributes in process `syz.6.9679'. [ 2192.384316][ T1604] sctp: [Deprecated]: syz.5.9681 (pid 1604) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2192.384316][ T1604] Use struct sctp_sack_info instead [ 2192.437517][ T1607] sctp: [Deprecated]: syz.3.9682 (pid 1607) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2192.437517][ T1607] Use struct sctp_sack_info instead [ 2193.548981][ T1644] validate_nla: 8 callbacks suppressed [ 2193.548998][ T1644] netlink: 'syz.4.9696': attribute type 29 has an invalid length. [ 2193.599046][ T1644] netlink: 'syz.4.9696': attribute type 29 has an invalid length. [ 2194.393621][ T1667] sctp: [Deprecated]: syz.0.9705 (pid 1667) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2194.393621][ T1667] Use struct sctp_sack_info instead [ 2194.500103][ T1680] netlink: 'syz.5.9709': attribute type 29 has an invalid length. [ 2194.569885][ T1679] sctp: [Deprecated]: syz.4.9708 (pid 1679) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2194.569885][ T1679] Use struct sctp_sack_info instead [ 2194.583820][ T1680] netlink: 'syz.5.9709': attribute type 29 has an invalid length. [ 2195.709497][ T1706] netlink: 'syz.5.9718': attribute type 1 has an invalid length. [ 2195.741034][ T1706] netlink: 'syz.5.9718': attribute type 1 has an invalid length. [ 2195.780604][ T1706] netlink: 116376 bytes leftover after parsing attributes in process `syz.5.9718'. [ 2196.037365][ T1716] netlink: 'syz.6.9723': attribute type 29 has an invalid length. [ 2196.073373][ T1716] netlink: 'syz.6.9723': attribute type 29 has an invalid length. [ 2196.283139][ T1721] sctp: [Deprecated]: syz.5.9725 (pid 1721) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2196.283139][ T1721] Use struct sctp_sack_info instead [ 2196.577898][ T1737] sctp: [Deprecated]: syz.4.9730 (pid 1737) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2196.577898][ T1737] Use struct sctp_sack_info instead [ 2196.837238][ T1739] sctp: [Deprecated]: syz.0.9731 (pid 1739) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2196.837238][ T1739] Use struct sctp_sack_info instead [ 2197.411206][ T1748] netlink: 'syz.5.9734': attribute type 10 has an invalid length. [ 2197.431899][ T1748] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 2197.802152][ T1760] netlink: 'syz.6.9739': attribute type 29 has an invalid length. [ 2198.253012][ T1755] device syzkaller0 entered promiscuous mode [ 2199.026978][ T1786] sctp: [Deprecated]: syz.5.9745 (pid 1786) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2199.026978][ T1786] Use struct sctp_sack_info instead [ 2201.681549][ T1809] validate_nla: 1 callbacks suppressed [ 2201.681570][ T1809] netlink: 'syz.6.9751': attribute type 29 has an invalid length. [ 2202.328933][ T1809] netlink: 'syz.6.9751': attribute type 29 has an invalid length. [ 2202.880257][ T1826] sctp: [Deprecated]: syz.6.9758 (pid 1826) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2202.880257][ T1826] Use struct sctp_sack_info instead [ 2203.168415][ T1836] netlink: 15743 bytes leftover after parsing attributes in process `syz.5.9762'. [ 2203.247825][ T1839] netlink: 'syz.0.9763': attribute type 29 has an invalid length. [ 2203.274295][ T1839] netlink: 'syz.0.9763': attribute type 29 has an invalid length. [ 2203.954914][ T1840] device syzkaller0 entered promiscuous mode [ 2204.769133][ T1877] netlink: 'syz.6.9776': attribute type 29 has an invalid length. [ 2206.891282][ T1877] netlink: 'syz.6.9776': attribute type 29 has an invalid length. [ 2206.899850][ T1882] netlink: 15743 bytes leftover after parsing attributes in process `syz.4.9778'. [ 2207.204911][ T1898] sctp: [Deprecated]: syz.6.9781 (pid 1898) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2207.204911][ T1898] Use struct sctp_sack_info instead [ 2208.504025][ T1920] netlink: 'syz.3.9791': attribute type 29 has an invalid length. [ 2208.534545][ T1920] netlink: 'syz.3.9791': attribute type 29 has an invalid length. [ 2209.221620][ T1931] device syzkaller0 entered promiscuous mode [ 2209.245021][ T1946] sctp: [Deprecated]: syz.3.9798 (pid 1946) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2209.245021][ T1946] Use struct sctp_sack_info instead [ 2209.611118][ T1960] sctp: [Deprecated]: syz.6.9802 (pid 1960) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2209.611118][ T1960] Use struct sctp_sack_info instead [ 2210.367535][ T1967] netlink: 'syz.5.9805': attribute type 29 has an invalid length. [ 2213.052516][ T1967] netlink: 'syz.5.9805': attribute type 29 has an invalid length. [ 2213.244059][ T1994] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.9813'. [ 2213.532415][ T2000] sctp: [Deprecated]: syz.0.9817 (pid 2000) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2213.532415][ T2000] Use struct sctp_sack_info instead [ 2213.977842][ T2011] netlink: 'syz.4.9821': attribute type 2 has an invalid length. [ 2214.234649][ T2021] netlink: 'syz.5.9824': attribute type 29 has an invalid length. [ 2214.263894][ T2021] netlink: 'syz.5.9824': attribute type 29 has an invalid length. [ 2214.422870][T22266] Bluetooth: hci2: ISO packet for unknown connection handle 272 [ 2215.471899][ T2055] FAULT_INJECTION: forcing a failure. [ 2215.471899][ T2055] name failslab, interval 1, probability 0, space 0, times 0 [ 2215.474974][ T2057] netlink: 'syz.4.9835': attribute type 29 has an invalid length. [ 2215.494237][ T2057] netlink: 'syz.4.9835': attribute type 29 has an invalid length. [ 2215.533537][ T2055] CPU: 0 PID: 2055 Comm: syz.6.9836 Not tainted syzkaller #0 [ 2215.541019][ T2055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2215.551124][ T2055] Call Trace: [ 2215.554442][ T2055] [ 2215.557412][ T2055] dump_stack_lvl+0x188/0x24e [ 2215.562153][ T2055] ? show_regs_print_info+0x12/0x12 [ 2215.567403][ T2055] ? load_image+0x400/0x400 [ 2215.571964][ T2055] ? __might_sleep+0xd0/0xd0 [ 2215.576589][ T2055] ? __lock_acquire+0x7d10/0x7d10 [ 2215.581651][ T2055] ? mark_lock+0x94/0x320 [ 2215.586045][ T2055] should_fail_ex+0x399/0x4d0 [ 2215.590786][ T2055] should_failslab+0x5/0x20 [ 2215.595343][ T2055] slab_pre_alloc_hook+0x59/0x310 [ 2215.600411][ T2055] kmem_cache_alloc_node+0x5a/0x320 [ 2215.605637][ T2055] ? __alloc_skb+0xfc/0x7e0 [ 2215.610186][ T2055] __alloc_skb+0xfc/0x7e0 [ 2215.614554][ T2055] kcm_sendmsg+0x1eb4/0x2310 [ 2215.619178][ T2055] ? __might_sleep+0xd0/0xd0 [ 2215.623800][ T2055] ? aa_file_perm+0x112/0xf00 [ 2215.628511][ T2055] ? aa_sk_perm+0x81f/0x950 [ 2215.633045][ T2055] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 2215.639501][ T2055] ? kcm_getsockopt+0x280/0x280 [ 2215.644386][ T2055] ? aa_file_perm+0x3ea/0xf00 [ 2215.649088][ T2055] ? aa_file_perm+0x112/0xf00 [ 2215.653801][ T2055] ? aa_sock_msg_perm+0x94/0x150 [ 2215.658772][ T2055] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2215.664114][ T2055] ? security_socket_sendmsg+0x7c/0xa0 [ 2215.669615][ T2055] sock_write_iter+0x2d9/0x3e0 [ 2215.674410][ T2055] ? sock_read_iter+0x3a0/0x3a0 [ 2215.679297][ T2055] ? common_file_perm+0x171/0x1c0 [ 2215.684358][ T2055] vfs_write+0x4b1/0xa30 [ 2215.688649][ T2055] ? file_end_write+0x250/0x250 [ 2215.693546][ T2055] ? __fget_files+0x43d/0x4b0 [ 2215.698270][ T2055] ? __fdget_pos+0x1d4/0x360 [ 2215.702898][ T2055] ? ksys_write+0x71/0x250 [ 2215.707349][ T2055] ksys_write+0x14c/0x250 [ 2215.711718][ T2055] ? __ia32_sys_read+0x80/0x80 [ 2215.716519][ T2055] ? lockdep_hardirqs_on+0x94/0x140 [ 2215.721746][ T2055] do_syscall_64+0x4c/0xa0 [ 2215.726187][ T2055] ? clear_bhb_loop+0x60/0xb0 [ 2215.730890][ T2055] ? clear_bhb_loop+0x60/0xb0 [ 2215.735594][ T2055] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2215.741513][ T2055] RIP: 0033:0x7ff2f839cdd9 [ 2215.745951][ T2055] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2215.765709][ T2055] RSP: 002b:00007ff2f9348028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2215.774153][ T2055] RAX: ffffffffffffffda RBX: 00007ff2f8615fa0 RCX: 00007ff2f839cdd9 [ 2215.782150][ T2055] RDX: 00000000fffffdef RSI: 0000200000000140 RDI: 0000000000000005 [ 2215.790144][ T2055] RBP: 00007ff2f9348090 R08: 0000000000000000 R09: 0000000000000000 [ 2215.798139][ T2055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2215.806143][ T2055] R13: 00007ff2f8616038 R14: 00007ff2f8615fa0 R15: 00007ffda3326908 [ 2215.814173][ T2055] [ 2216.353143][ T2068] sctp: [Deprecated]: syz.5.9839 (pid 2068) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2216.353143][ T2068] Use struct sctp_sack_info instead [ 2217.404965][ T2080] netlink: 'syz.4.9842': attribute type 10 has an invalid length. [ 2217.466657][ T2081] netlink: 'syz.4.9842': attribute type 10 has an invalid length. [ 2218.075810][ T2101] netlink: 'syz.6.9848': attribute type 29 has an invalid length. [ 2218.120442][ T2103] sctp: [Deprecated]: syz.4.9849 (pid 2103) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2218.120442][ T2103] Use struct sctp_sack_info instead [ 2218.162379][ T2101] netlink: 'syz.6.9848': attribute type 29 has an invalid length. [ 2218.695293][ T2123] sctp: [Deprecated]: syz.3.9853 (pid 2123) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2218.695293][ T2123] Use struct sctp_sack_info instead [ 2218.803612][T17268] Bluetooth: hci0: command 0x0406 tx timeout [ 2219.204561][ T2139] netlink: 'syz.0.9862': attribute type 29 has an invalid length. [ 2219.212930][ T2139] netlink: 'syz.0.9862': attribute type 29 has an invalid length. [ 2219.302570][ T2142] @: port 1(vlan0) entered blocking state [ 2219.316303][ T2142] @: port 1(vlan0) entered disabled state [ 2219.329419][ T2142] device vlan0 entered promiscuous mode [ 2219.351762][ T2144] netlink: 'syz.0.9864': attribute type 10 has an invalid length. [ 2219.367181][ T2144] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 2220.113239][ T2165] sctp: [Deprecated]: syz.3.9869 (pid 2165) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2220.113239][ T2165] Use struct sctp_sack_info instead [ 2220.356086][ T2173] netlink: 'syz.6.9874': attribute type 29 has an invalid length. [ 2220.414411][ T2173] netlink: 'syz.6.9874': attribute type 29 has an invalid length. [ 2220.844409][ T2187] sctp: [Deprecated]: syz.6.9877 (pid 2187) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2220.844409][ T2187] Use struct sctp_sack_info instead [ 2221.412056][ T2208] netlink: 'syz.5.9887': attribute type 29 has an invalid length. [ 2221.452739][ T2208] netlink: 'syz.5.9887': attribute type 29 has an invalid length. [ 2221.756132][ T2226] netlink: 198580 bytes leftover after parsing attributes in process `syz.0.9894'. [ 2221.866045][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 2221.872445][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 2221.881850][ T2228] sctp: [Deprecated]: syz.6.9893 (pid 2228) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2221.881850][ T2228] Use struct sctp_sack_info instead [ 2223.952903][ T2243] netlink: 'syz.0.9900': attribute type 29 has an invalid length. [ 2224.001709][ T2243] netlink: 'syz.0.9900': attribute type 29 has an invalid length. [ 2224.048919][ T2248] netlink: 15743 bytes leftover after parsing attributes in process `syz.3.9902'. [ 2224.168882][ T2250] mac80211_hwsim hwsim86 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2224.917873][ T2289] sctp: [Deprecated]: syz.6.9915 (pid 2289) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2224.917873][ T2289] Use struct sctp_sack_info instead [ 2225.059901][ T2293] netlink: 'syz.4.9917': attribute type 29 has an invalid length. [ 2225.697562][ T2293] netlink: 'syz.4.9917': attribute type 29 has an invalid length. [ 2225.715233][ T2298] netlink: 15743 bytes leftover after parsing attributes in process `syz.0.9919'. [ 2226.541921][ T2323] netlink: 15743 bytes leftover after parsing attributes in process `syz.5.9928'. [ 2226.806149][ T2329] netlink: 'syz.4.9931': attribute type 29 has an invalid length. [ 2226.842740][ T2329] netlink: 'syz.4.9931': attribute type 29 has an invalid length. [ 2226.857411][T17268] Bluetooth: hci2: unexpected event 0x1c length: 15 > 5 [ 2227.114816][ T2337] netlink: 15743 bytes leftover after parsing attributes in process `syz.4.9935'. [ 2227.325951][ T2345] sctp: [Deprecated]: syz.5.9934 (pid 2345) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2227.325951][ T2345] Use struct sctp_sack_info instead [ 2228.787082][ T2369] netlink: 15743 bytes leftover after parsing attributes in process `syz.3.9944'. [ 2228.841042][ T2371] netlink: 'syz.5.9945': attribute type 29 has an invalid length. [ 2228.882841][ T2371] netlink: 'syz.5.9945': attribute type 29 has an invalid length. [ 2229.689405][ T2402] sctp: [Deprecated]: syz.5.9955 (pid 2402) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2229.689405][ T2402] Use struct sctp_sack_info instead [ 2229.731744][ T2405] netlink: 'syz.4.9956': attribute type 3 has an invalid length. [ 2229.758908][ T2405] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.9956'. [ 2229.939023][ T2414] netlink: 'syz.3.9958': attribute type 29 has an invalid length. [ 2229.969930][ T2414] netlink: 'syz.3.9958': attribute type 29 has an invalid length. [ 2230.479042][ T2417] netlink: 15743 bytes leftover after parsing attributes in process `syz.4.9959'. [ 2230.526932][ T2421] netlink: 'syz.6.9960': attribute type 10 has an invalid length. [ 2230.546180][ T2421] netlink: 40 bytes leftover after parsing attributes in process `syz.6.9960'. [ 2230.573281][ T2421] device dummy0 entered promiscuous mode [ 2230.590973][ T2421] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 2231.278282][ T2429] device syzkaller0 entered promiscuous mode [ 2231.293105][ T2451] netlink: 17267 bytes leftover after parsing attributes in process `syz.5.9967'. [ 2231.581337][ T2464] netlink: 'syz.3.9971': attribute type 29 has an invalid length. [ 2232.885133][ T2475] sctp: [Deprecated]: syz.4.9973 (pid 2475) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2232.885133][ T2475] Use struct sctp_sack_info instead [ 2235.251984][ T2464] netlink: 'syz.3.9971': attribute type 29 has an invalid length. [ 2235.266796][ T2477] mac80211_hwsim hwsim91 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2235.454225][ T2514] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.9987'. [ 2235.488924][ T2514] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.9987'. [ 2236.474271][ T2531] netlink: 'syz.4.9994': attribute type 29 has an invalid length. [ 2236.483292][ T2531] netlink: 'syz.4.9994': attribute type 29 has an invalid length. [ 2236.534994][ T2533] netlink: 'syz.5.9995': attribute type 3 has an invalid length. [ 2236.545199][ T2533] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.9995'. [ 2236.587714][ T2539] device syzkaller0 entered promiscuous mode [ 2236.636411][ T2540] mac80211_hwsim hwsim93 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2237.620478][ T2572] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.10005'. [ 2237.923925][ T46] wlan1: Trigger new scan to find an IBSS to join [ 2238.065498][ T2581] netlink: 'syz.0.10008': attribute type 29 has an invalid length. [ 2238.963802][ T46] wlan1: Trigger new scan to find an IBSS to join [ 2240.910353][ T2581] netlink: 'syz.0.10008': attribute type 29 has an invalid length. [ 2241.053264][ T2590] netlink: 'syz.0.10010': attribute type 3 has an invalid length. [ 2241.069881][ T2590] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.10010'. [ 2241.234850][ T2604] netlink: 'syz.5.10011': attribute type 10 has an invalid length. [ 2241.242850][ T2604] netlink: 40 bytes leftover after parsing attributes in process `syz.5.10011'. [ 2241.370735][ T2604] batman_adv: batadv0: Adding interface: vlan1 [ 2241.424377][ T2604] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2241.574139][ T2604] batman_adv: batadv0: Interface activated: vlan1 [ 2241.761083][ T2621] sctp: [Deprecated]: syz.0.10019 (pid 2621) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2241.761083][ T2621] Use struct sctp_sack_info instead [ 2241.810819][ T2623] netlink: 'syz.4.10020': attribute type 29 has an invalid length. [ 2241.845151][ T2623] netlink: 'syz.4.10020': attribute type 29 has an invalid length. [ 2241.923867][T10227] wlan1: Trigger new scan to find an IBSS to join [ 2241.935145][T10227] wlan1: Trigger new scan to find an IBSS to join [ 2242.172023][ T2629] sctp: [Deprecated]: syz.5.10021 (pid 2629) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2242.172023][ T2629] Use struct sctp_sack_info instead [ 2242.507672][ T2636] device syzkaller0 entered promiscuous mode [ 2242.864183][ T46] wlan1: Creating new IBSS network, BSSID 00:00:00:08:00:00 [ 2243.491283][ T2653] netlink: 'syz.3.10027': attribute type 3 has an invalid length. [ 2243.499826][ T2653] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.10027'. [ 2244.350499][ T2676] netlink: 'syz.0.10033': attribute type 29 has an invalid length. [ 2244.884073][T10227] wlan1: Trigger new scan to find an IBSS to join [ 2247.324062][T11590] wlan1: Creating new IBSS network, BSSID 00:00:00:08:00:00 [ 2248.566535][ T2676] netlink: 'syz.0.10033': attribute type 29 has an invalid length. [ 2248.801241][ T2695] sctp: [Deprecated]: syz.0.10035 (pid 2695) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2248.801241][ T2695] Use struct sctp_sack_info instead [ 2249.232142][ T2711] netlink: 'syz.3.10043': attribute type 2 has an invalid length. [ 2249.278480][ T2716] netlink: 'syz.5.10045': attribute type 5 has an invalid length. [ 2249.299434][ T2716] netlink: 'syz.5.10045': attribute type 5 has an invalid length. [ 2249.473538][ T2724] netlink: 'syz.4.10047': attribute type 29 has an invalid length. [ 2249.511241][ T2725] netlink: 'syz.3.10048': attribute type 3 has an invalid length. [ 2249.526607][ T2725] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.10048'. [ 2249.580756][ T2727] device syzkaller0 entered promiscuous mode [ 2249.588847][ T2724] netlink: 'syz.4.10047': attribute type 29 has an invalid length. [ 2250.842367][ T2758] netlink: 'syz.0.10060': attribute type 29 has an invalid length. [ 2251.282031][ T2763] netlink: 'syz.3.10062': attribute type 3 has an invalid length. [ 2251.299820][ T2763] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.10062'. [ 2251.581584][ T2765] sctp: [Deprecated]: syz.6.10063 (pid 2765) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2251.581584][ T2765] Use struct sctp_sack_info instead [ 2253.414671][ T2758] netlink: 'syz.0.10060': attribute type 29 has an invalid length. [ 2253.830916][ T2808] netlink: 1057 bytes leftover after parsing attributes in process `syz.4.10073'. [ 2254.182680][ T2822] sctp: [Deprecated]: syz.0.10075 (pid 2822) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2254.182680][ T2822] Use struct sctp_sack_info instead [ 2254.583362][ T2833] netlink: 'syz.6.10080': attribute type 3 has an invalid length. [ 2254.610586][ T2833] netlink: 105116 bytes leftover after parsing attributes in process `syz.6.10080'. [ 2254.622045][ T2837] netlink: 'syz.3.10081': attribute type 29 has an invalid length. [ 2254.684058][ T2837] netlink: 'syz.3.10081': attribute type 29 has an invalid length. [ 2254.856762][ T2840] device syzkaller0 entered promiscuous mode [ 2255.405179][ T2863] netlink: 198580 bytes leftover after parsing attributes in process `syz.5.10090'. [ 2255.619160][ T2872] FAULT_INJECTION: forcing a failure. [ 2255.619160][ T2872] name failslab, interval 1, probability 0, space 0, times 0 [ 2255.649450][ T2874] netlink: 'syz.3.10095': attribute type 29 has an invalid length. [ 2255.657637][ T2872] CPU: 1 PID: 2872 Comm: syz.5.10094 Not tainted syzkaller #0 [ 2255.665150][ T2872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2255.675264][ T2872] Call Trace: [ 2255.678582][ T2872] [ 2255.681550][ T2872] dump_stack_lvl+0x188/0x24e [ 2255.686326][ T2872] ? show_regs_print_info+0x12/0x12 [ 2255.691576][ T2872] ? load_image+0x400/0x400 [ 2255.696149][ T2872] should_fail_ex+0x399/0x4d0 [ 2255.700874][ T2872] should_failslab+0x5/0x20 [ 2255.705413][ T2872] slab_pre_alloc_hook+0x59/0x310 [ 2255.710481][ T2872] ? verify_lock_unused+0x140/0x140 [ 2255.715738][ T2872] kmem_cache_alloc+0x56/0x2f0 [ 2255.720551][ T2872] ? skb_clone+0x1e7/0x370 [ 2255.725022][ T2872] skb_clone+0x1e7/0x370 [ 2255.729312][ T2872] bpf_clone_redirect+0x163/0x4a0 [ 2255.734374][ T2872] bpf_prog_dde6c29962cc7727+0x56/0x5b [ 2255.739875][ T2872] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2255.745895][ T2872] ? lock_chain_count+0x20/0x20 [ 2255.750781][ T2872] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 2255.757051][ T2872] ? lockdep_hardirqs_on+0x94/0x140 [ 2255.762269][ T2872] ? ktime_get+0x7b/0x270 [ 2255.766619][ T2872] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 2255.772880][ T2872] ? ktime_get_real_ts64+0x440/0x440 [ 2255.778211][ T2872] ? read_lock_is_recursive+0x10/0x10 [ 2255.783620][ T2872] ? __cant_sleep+0x220/0x220 [ 2255.788338][ T2872] ? ktime_get+0x247/0x270 [ 2255.792778][ T2872] bpf_test_run+0x2b6/0x830 [ 2255.797320][ T2872] ? convert___skb_to_skb+0x580/0x580 [ 2255.802751][ T2872] ? eth_get_headlen+0x200/0x200 [ 2255.807713][ T2872] ? __build_skb+0x257/0x3c0 [ 2255.812338][ T2872] ? convert___skb_to_skb+0x3d/0x580 [ 2255.817672][ T2872] bpf_prog_test_run_skb+0xaa6/0x12a0 [ 2255.823114][ T2872] ? cpu_online+0xa0/0xa0 [ 2255.827485][ T2872] bpf_prog_test_run+0x31e/0x390 [ 2255.832456][ T2872] __sys_bpf+0x62b/0x780 [ 2255.836731][ T2872] ? bpf_link_show_fdinfo+0x380/0x380 [ 2255.842136][ T2872] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2255.848331][ T2872] __x64_sys_bpf+0x78/0x90 [ 2255.852777][ T2872] do_syscall_64+0x4c/0xa0 [ 2255.857218][ T2872] ? clear_bhb_loop+0x60/0xb0 [ 2255.861927][ T2872] ? clear_bhb_loop+0x60/0xb0 [ 2255.866631][ T2872] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2255.872543][ T2872] RIP: 0033:0x7f6cbcb9cdd9 [ 2255.876991][ T2872] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2255.896629][ T2872] RSP: 002b:00007f6cbdac6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2255.905065][ T2872] RAX: ffffffffffffffda RBX: 00007f6cbce15fa0 RCX: 00007f6cbcb9cdd9 [ 2255.913068][ T2872] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 2255.921099][ T2872] RBP: 00007f6cbdac6090 R08: 0000000000000000 R09: 0000000000000000 [ 2255.929091][ T2872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2255.937085][ T2872] R13: 00007f6cbce16038 R14: 00007f6cbce15fa0 R15: 00007ffeadcd4158 [ 2255.945091][ T2872] [ 2256.009372][ T2879] netlink: 'syz.6.10097': attribute type 3 has an invalid length. [ 2256.026891][ T2876] sctp: [Deprecated]: syz.0.10096 (pid 2876) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2256.026891][ T2876] Use struct sctp_sack_info instead [ 2256.044406][ T2879] netlink: 105116 bytes leftover after parsing attributes in process `syz.6.10097'. [ 2259.645963][ T2874] netlink: 'syz.3.10095': attribute type 29 has an invalid length. [ 2260.672628][ T2917] netlink: 'syz.0.10109': attribute type 3 has an invalid length. [ 2260.683829][ T2917] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.10109'. [ 2260.818620][ T2923] sctp: [Deprecated]: syz.6.10111 (pid 2923) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2260.818620][ T2923] Use struct sctp_sack_info instead [ 2261.010227][ T2929] netlink: 'syz.0.10113': attribute type 3 has an invalid length. [ 2261.033275][ T2931] netlink: 'syz.4.10114': attribute type 29 has an invalid length. [ 2261.041643][ T2931] netlink: 'syz.4.10114': attribute type 29 has an invalid length. [ 2261.050701][ T2929] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.10113'. [ 2261.329054][T17268] Bluetooth: hci1: unexpected event 0x1d length: 15 > 5 [ 2261.682243][ T2939] device syzkaller0 entered promiscuous mode [ 2262.134369][ T2957] netlink: 'syz.6.10125': attribute type 3 has an invalid length. [ 2262.154427][ T2957] netlink: 105116 bytes leftover after parsing attributes in process `syz.6.10125'. [ 2262.325719][ T2969] netlink: 'syz.5.10129': attribute type 29 has an invalid length. [ 2262.617119][ T2976] netlink: 'syz.3.10131': attribute type 2 has an invalid length. [ 2262.677081][ T2977] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.10131'. [ 2264.413632][ T2969] netlink: 'syz.5.10129': attribute type 29 has an invalid length. [ 2264.788505][ T2998] sctp: [Deprecated]: syz.3.10136 (pid 2998) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2264.788505][ T2998] Use struct sctp_sack_info instead [ 2265.654643][ T3017] netlink: 'syz.5.10141': attribute type 10 has an invalid length. [ 2265.711233][ T3017] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 2265.822078][ T3019] netlink: 'syz.4.10143': attribute type 3 has an invalid length. [ 2265.873110][ T3019] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.10143'. [ 2266.056042][ T3028] netlink: 'syz.0.10145': attribute type 29 has an invalid length. [ 2266.153575][ T3028] netlink: 'syz.0.10145': attribute type 29 has an invalid length. [ 2266.657101][ T3052] sctp: [Deprecated]: syz.0.10156 (pid 3052) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2266.657101][ T3052] Use struct sctp_sack_info instead [ 2267.174141][ T3069] netlink: 'syz.6.10162': attribute type 29 has an invalid length. [ 2267.203916][ T3069] netlink: 'syz.6.10162': attribute type 29 has an invalid length. [ 2267.443932][ T3080] netlink: 'syz.6.10168': attribute type 10 has an invalid length. [ 2267.825649][ T3089] netlink: 'syz.3.10169': attribute type 3 has an invalid length. [ 2267.844524][ T3089] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.10169'. [ 2268.061533][ T3100] netlink: 52 bytes leftover after parsing attributes in process `syz.5.10175'. [ 2268.267172][ T3107] netlink: 'syz.0.10178': attribute type 29 has an invalid length. [ 2268.300784][ T3107] netlink: 'syz.0.10178': attribute type 29 has an invalid length. [ 2268.545888][ T3113] netlink: 60 bytes leftover after parsing attributes in process `syz.4.10180'. [ 2268.622109][ T3113] netlink: 60 bytes leftover after parsing attributes in process `syz.4.10180'. [ 2268.709692][ T3114] netlink: 60 bytes leftover after parsing attributes in process `syz.4.10180'. [ 2268.853305][ T3117] netlink: 60 bytes leftover after parsing attributes in process `syz.4.10180'. [ 2269.430118][ T3131] sctp: [Deprecated]: syz.3.10183 (pid 3131) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2269.430118][ T3131] Use struct sctp_sack_info instead [ 2271.137169][ T3149] netlink: 'syz.4.10189': attribute type 3 has an invalid length. [ 2271.163821][ T3149] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.10189'. [ 2271.456003][ T3158] netlink: 'syz.3.10191': attribute type 29 has an invalid length. [ 2271.585277][ T3158] netlink: 'syz.3.10191': attribute type 29 has an invalid length. [ 2272.927933][ T75] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2273.160117][ T3185] sctp: [Deprecated]: syz.6.10203 (pid 3185) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2273.160117][ T3185] Use struct sctp_sack_info instead [ 2273.401336][ T3189] netlink: 'syz.0.10205': attribute type 3 has an invalid length. [ 2273.460996][ T3189] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.10205'. [ 2273.947598][ T3198] netlink: 'syz.0.10208': attribute type 29 has an invalid length. [ 2274.020380][ T3198] netlink: 'syz.0.10208': attribute type 29 has an invalid length. [ 2274.232033][ T3203] sctp: [Deprecated]: syz.4.10209 (pid 3203) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2274.232033][ T3203] Use struct sctp_sack_info instead [ 2275.954402][ T3234] sctp: [Deprecated]: syz.0.10220 (pid 3234) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2275.954402][ T3234] Use struct sctp_sack_info instead [ 2276.016167][ T3237] netlink: 'syz.6.10221': attribute type 29 has an invalid length. [ 2276.564800][ T3237] netlink: 'syz.6.10221': attribute type 29 has an invalid length. [ 2276.854773][ T3241] device syzkaller0 entered promiscuous mode [ 2277.134504][ T3250] device syzkaller0 entered promiscuous mode [ 2277.159788][ T3260] sctp: [Deprecated]: syz.0.10228 (pid 3260) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2277.159788][ T3260] Use struct sctp_sack_info instead [ 2277.330182][T10227] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2277.649820][ T3276] netlink: 'syz.4.10234': attribute type 29 has an invalid length. [ 2279.292209][ T3289] sctp: [Deprecated]: syz.0.10238 (pid 3289) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2279.292209][ T3289] Use struct sctp_sack_info instead [ 2280.424917][ T3295] netlink: 'syz.0.10240': attribute type 27 has an invalid length. [ 2280.442021][ T3295] netlink: 164 bytes leftover after parsing attributes in process `syz.0.10240'. [ 2281.205794][ T3276] netlink: 'syz.4.10234': attribute type 29 has an invalid length. [ 2282.720756][ T3322] netlink: 'syz.0.10251': attribute type 29 has an invalid length. [ 2282.779205][ T3320] sctp: [Deprecated]: syz.3.10250 (pid 3320) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2282.779205][ T3320] Use struct sctp_sack_info instead [ 2282.994248][ T3334] FAULT_INJECTION: forcing a failure. [ 2282.994248][ T3334] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2283.026353][ T3334] CPU: 0 PID: 3334 Comm: syz.5.10254 Not tainted syzkaller #0 [ 2283.033997][ T3334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2283.044197][ T3334] Call Trace: [ 2283.047518][ T3334] [ 2283.050485][ T3334] dump_stack_lvl+0x188/0x24e [ 2283.055259][ T3334] ? show_regs_print_info+0x12/0x12 [ 2283.060519][ T3334] ? load_image+0x400/0x400 [ 2283.065083][ T3334] ? __lock_acquire+0x7d10/0x7d10 [ 2283.070168][ T3334] should_fail_ex+0x399/0x4d0 [ 2283.074894][ T3334] _copy_from_user+0x2c/0x170 [ 2283.079656][ T3334] ___sys_sendmsg+0x1c3/0x360 [ 2283.084428][ T3334] ? __sys_sendmsg+0x290/0x290 [ 2283.089277][ T3334] ? __lock_acquire+0x7d10/0x7d10 [ 2283.094394][ T3334] __se_sys_sendmsg+0x1bb/0x2a0 [ 2283.099315][ T3334] ? __x64_sys_sendmsg+0x80/0x80 [ 2283.104337][ T3334] ? lockdep_hardirqs_on+0x94/0x140 [ 2283.109584][ T3334] do_syscall_64+0x4c/0xa0 [ 2283.114040][ T3334] ? clear_bhb_loop+0x60/0xb0 [ 2283.118756][ T3334] ? clear_bhb_loop+0x60/0xb0 [ 2283.123477][ T3334] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2283.129421][ T3334] RIP: 0033:0x7f6cbcb9cdd9 [ 2283.133871][ T3334] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2283.153516][ T3334] RSP: 002b:00007f6cbdac6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2283.161962][ T3334] RAX: ffffffffffffffda RBX: 00007f6cbce15fa0 RCX: 00007f6cbcb9cdd9 [ 2283.169975][ T3334] RDX: 0000000000008001 RSI: 0000200000000040 RDI: 0000000000000003 [ 2283.177975][ T3334] RBP: 00007f6cbdac6090 R08: 0000000000000000 R09: 0000000000000000 [ 2283.185971][ T3334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2283.193990][ T3334] R13: 00007f6cbce16038 R14: 00007f6cbce15fa0 R15: 00007ffeadcd4158 [ 2283.202005][ T3334] [ 2283.299117][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 2283.305714][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 2286.658470][ T3322] netlink: 'syz.0.10251': attribute type 29 has an invalid length. [ 2286.788001][ T3329] device syzkaller0 entered promiscuous mode [ 2286.815073][ T3355] netlink: 'syz.3.10260': attribute type 2 has an invalid length. [ 2288.448241][ T3417] netlink: 'syz.3.10284': attribute type 29 has an invalid length. [ 2288.467880][ T3415] netlink: 'syz.6.10285': attribute type 3 has an invalid length. [ 2288.480560][ T3415] netlink: 105116 bytes leftover after parsing attributes in process `syz.6.10285'. [ 2290.229178][ T3417] netlink: 'syz.3.10284': attribute type 29 has an invalid length. [ 2290.389183][ T3421] device syzkaller0 entered promiscuous mode [ 2290.420538][ T3432] netlink: 'syz.4.10290': attribute type 3 has an invalid length. [ 2290.467779][ T3432] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.10290'. [ 2291.220461][T22266] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2291.231782][T22266] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2291.239779][T22266] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2291.248429][T22266] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2291.280788][T22266] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 2291.289296][T22266] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2291.699299][ T3449] netlink: 'syz.0.10297': attribute type 29 has an invalid length. [ 2291.895523][ T3452] sctp: [Deprecated]: syz.3.10298 (pid 3452) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2291.895523][ T3452] Use struct sctp_sack_info instead [ 2293.374133][T17268] Bluetooth: hci5: command 0x0409 tx timeout [ 2293.996434][ T3449] netlink: 'syz.0.10297': attribute type 29 has an invalid length. [ 2294.086682][ T3464] device syzkaller0 entered promiscuous mode [ 2294.372100][ T3480] netlink: 'syz.4.10308': attribute type 3 has an invalid length. [ 2294.381074][ T3480] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.10308'. [ 2295.160204][ T4876] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2295.446648][T17268] Bluetooth: hci5: command 0x041b tx timeout [ 2296.992792][ T3482] netlink: 15743 bytes leftover after parsing attributes in process `syz.5.10307'. [ 2297.086250][ T4876] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2297.166120][ T3490] netlink: 'syz.0.10310': attribute type 10 has an invalid length. [ 2297.191845][ T3492] netlink: 'syz.4.10311': attribute type 3 has an invalid length. [ 2297.209345][ T3490] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 2297.222854][ T3494] netlink: 'syz.5.10313': attribute type 29 has an invalid length. [ 2297.231907][ T3492] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.10311'. [ 2297.266131][ T4876] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2297.299948][ T3494] netlink: 'syz.5.10313': attribute type 29 has an invalid length. [ 2297.409891][ T4876] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2297.524872][T17268] Bluetooth: hci5: command 0x040f tx timeout [ 2297.768964][ T4876] device 0 left promiscuous mode [ 2297.922024][ T3513] device syzkaller0 entered promiscuous mode [ 2297.950595][ T3444] chnl_net:caif_netlink_parms(): no params data found [ 2299.603785][T17268] Bluetooth: hci5: command 0x0419 tx timeout [ 2300.345217][ T3526] device syzkaller0 entered promiscuous mode [ 2300.500460][ T3547] netlink: 'syz.5.10322': attribute type 3 has an invalid length. [ 2300.510978][ T3547] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.10322'. [ 2302.519822][ T3545] netlink: 15743 bytes leftover after parsing attributes in process `syz.4.10323'. [ 2302.663086][ T3550] netlink: 'syz.4.10324': attribute type 3 has an invalid length. [ 2302.685158][ T3550] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.10324'. [ 2302.732126][ T3552] netlink: 'syz.0.10325': attribute type 29 has an invalid length. [ 2304.261959][ T75] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2304.533519][ T3552] netlink: 'syz.0.10325': attribute type 29 has an invalid length. [ 2304.772673][ T3444] bridge0: port 1(bridge_slave_0) entered blocking state [ 2304.790707][ T3444] bridge0: port 1(bridge_slave_0) entered disabled state [ 2304.835050][ T3444] device bridge_slave_0 entered promiscuous mode [ 2304.964636][ T3444] bridge0: port 2(bridge_slave_1) entered blocking state [ 2305.033739][ T3444] bridge0: port 2(bridge_slave_1) entered disabled state [ 2305.042114][ T3444] device bridge_slave_1 entered promiscuous mode [ 2305.167573][ T3444] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2305.216103][ T3444] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2305.314988][ T3444] team0: Port device team_slave_0 added [ 2305.371012][ T3444] team0: Port device team_slave_1 added [ 2305.519796][ T3580] device syzkaller0 entered promiscuous mode [ 2305.766749][ T3588] netlink: 'syz.4.10338': attribute type 29 has an invalid length. [ 2306.565335][ T3444] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2306.589988][ T3444] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2306.627226][ T3444] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2306.661327][ T3588] netlink: 'syz.4.10338': attribute type 29 has an invalid length. [ 2306.810042][ T3444] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2306.822588][ T3444] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2306.861970][ T3604] netlink: 'syz.5.10339': attribute type 3 has an invalid length. [ 2306.905976][ T3604] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.10339'. [ 2306.941692][ T3444] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2308.941684][ T3615] netlink: 61211 bytes leftover after parsing attributes in process `syz.3.10344'. [ 2309.074786][T11590] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2309.107343][ T3444] device hsr_slave_0 entered promiscuous mode [ 2309.140349][ T3444] device hsr_slave_1 entered promiscuous mode [ 2309.170597][ T3444] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2309.183743][ T3444] Cannot create hsr debugfs directory [ 2309.586853][ T3640] netlink: 'syz.3.10351': attribute type 29 has an invalid length. [ 2309.650033][ T3640] netlink: 'syz.3.10351': attribute type 29 has an invalid length. [ 2310.185176][ T3652] netlink: 'syz.0.10354': attribute type 3 has an invalid length. [ 2310.217046][ T3652] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.10354'. [ 2311.577862][ T3663] netlink: 15743 bytes leftover after parsing attributes in process `syz.0.10356'. [ 2312.278632][ T3686] netlink: 168 bytes leftover after parsing attributes in process `syz.0.10362'. [ 2312.335592][ T3692] netlink: 'syz.3.10364': attribute type 29 has an invalid length. [ 2312.371310][ T3675] device syzkaller0 entered promiscuous mode [ 2312.420835][ T3693] netlink: 'syz.4.10365': attribute type 3 has an invalid length. [ 2312.429757][ T3693] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.10365'. [ 2312.531142][ T3692] netlink: 'syz.3.10364': attribute type 29 has an invalid length. [ 2312.558366][ T4876] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2312.571024][ T4876] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2312.628565][ T4876] device veth1_macvtap left promiscuous mode [ 2312.643823][ T4876] device veth0_macvtap left promiscuous mode [ 2312.655022][ T4876] device veth1_vlan left promiscuous mode [ 2313.779509][ T3711] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.10371'. [ 2314.640051][ T4283] Bluetooth: hci0: unexpected event 0x1c length: 15 > 5 [ 2314.880066][ T4876] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 2314.936402][ T4876] team0 (unregistering): Port device team_slave_1 removed [ 2314.982961][ T4876] team0 (unregistering): Port device team_slave_0 removed [ 2315.028109][ T4876] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2315.072125][ T4876] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2315.397021][ T4876] bond0 (unregistering): Released all slaves [ 2315.670071][ T3724] netlink: 'syz.3.10377': attribute type 29 has an invalid length. [ 2315.696685][ T3726] netlink: 'syz.4.10376': attribute type 3 has an invalid length. [ 2315.705089][ T3726] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.10376'. [ 2317.495800][ T3724] netlink: 'syz.3.10377': attribute type 29 has an invalid length. [ 2317.689044][ T3444] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 2317.804167][ T3444] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 2317.844402][ T3444] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 2317.873309][ T3444] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 2317.945485][ T3733] netlink: 'syz.3.10380': attribute type 21 has an invalid length. [ 2317.985298][ T3733] netlink: 128 bytes leftover after parsing attributes in process `syz.3.10380'. [ 2318.024265][ T3733] netlink: 3 bytes leftover after parsing attributes in process `syz.3.10380'. [ 2318.350971][ T3444] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2318.378035][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2318.403197][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2318.419853][ T3748] netlink: 'syz.3.10385': attribute type 3 has an invalid length. [ 2318.443301][ T3748] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.10385'. [ 2318.457787][ T3444] 8021q: adding VLAN 0 to HW filter on device team0 [ 2318.484344][T10227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2318.494314][T10227] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2318.561967][T10227] bridge0: port 1(bridge_slave_0) entered blocking state [ 2318.569214][T10227] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2318.617703][T10227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2318.626707][T10227] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2318.673609][T10227] bridge0: port 2(bridge_slave_1) entered blocking state [ 2318.680824][T10227] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2318.689480][T10227] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2318.747212][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2318.806517][ T3759] netlink: 'syz.0.10388': attribute type 3 has an invalid length. [ 2318.839890][ T3759] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.10388'. [ 2318.854935][T10227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2318.874882][T10227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2318.886669][T10227] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2318.895468][T10227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2318.951385][T10227] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2318.990436][T10227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2319.034926][T10227] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2319.070180][ T3764] netlink: 'syz.3.10389': attribute type 29 has an invalid length. [ 2319.080251][T10227] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2319.117426][ T3444] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2319.182753][ T3444] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2319.226047][ T3764] netlink: 'syz.3.10389': attribute type 29 has an invalid length. [ 2319.256143][T10227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2319.275567][T10227] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2320.449981][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2320.458571][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2320.514040][ T3444] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2321.938608][ T3813] netlink: 'syz.4.10399': attribute type 3 has an invalid length. [ 2321.977402][ T3813] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.10399'. [ 2322.336559][ T3827] netlink: 'syz.4.10402': attribute type 29 has an invalid length. [ 2322.377284][ T3827] netlink: 'syz.4.10402': attribute type 29 has an invalid length. [ 2322.419468][ T3830] netlink: 'syz.0.10400': attribute type 3 has an invalid length. [ 2322.460775][ T4876] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2322.482199][ T4876] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2322.510815][ T3830] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.10400'. [ 2322.573281][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2322.594203][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2322.641887][ T3444] device veth0_vlan entered promiscuous mode [ 2322.670076][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2322.713846][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2322.834065][ T3444] device veth1_vlan entered promiscuous mode [ 2323.013485][T10227] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2323.033870][T10227] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2323.059637][T10227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2323.153151][T10227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2323.165745][ T3444] device veth0_macvtap entered promiscuous mode [ 2323.223968][ T3444] device veth1_macvtap entered promiscuous mode [ 2323.360845][ T3444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2323.432588][ T3444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2323.497845][ T3444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2323.565157][ T3444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2323.641318][ T3444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2323.658354][ T3843] netlink: 'syz.0.10406': attribute type 3 has an invalid length. [ 2323.697647][ T3444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2323.744892][ T3843] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.10406'. [ 2323.765227][ T3444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2323.820871][ T3444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2323.871064][ T3444] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2323.992377][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2324.021487][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2324.078988][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2324.154736][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2324.243772][ T3444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2324.309490][ T3444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2324.401637][ T3444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2324.475783][ T3444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2324.548858][ T3444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2324.606042][ T3444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2324.677376][ T3444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2324.749418][ T3444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2324.819716][ T3444] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2324.967433][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2324.998569][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2325.046054][ T3444] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2325.091215][ T3444] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2325.143491][ T3444] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2325.169167][ T3444] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2325.985935][T11590] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2326.013561][T11590] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2326.031348][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2326.108821][ T29] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2326.127389][ T29] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2326.160845][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2326.195973][ T3861] netlink: 'syz.4.10408': attribute type 1 has an invalid length. [ 2326.229863][ T3861] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.10408'. [ 2326.811517][ T3871] netlink: 'syz.5.10411': attribute type 3 has an invalid length. [ 2326.870150][ T3871] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.10411'. [ 2327.291554][ T3887] netlink: 'syz.4.10414': attribute type 29 has an invalid length. [ 2327.352104][ T3887] netlink: 'syz.4.10414': attribute type 29 has an invalid length. [ 2327.396740][ T3891] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.10415'. [ 2327.505676][ T3899] netlink: 15743 bytes leftover after parsing attributes in process `syz.0.10416'. [ 2330.759098][ T3942] netlink: 'syz.6.10423': attribute type 3 has an invalid length. [ 2330.795540][ T3929] netlink: 'syz.0.10420': attribute type 3 has an invalid length. [ 2330.823890][ T3942] netlink: 105116 bytes leftover after parsing attributes in process `syz.6.10423'. [ 2330.909657][ T3929] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.10420'. [ 2331.342252][ T3953] netlink: 'syz.4.10426': attribute type 3 has an invalid length. [ 2331.424106][ T3953] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.10426'. [ 2331.708346][ T3964] netlink: 15743 bytes leftover after parsing attributes in process `syz.5.10429'. [ 2331.854964][ T3967] sctp: [Deprecated]: syz.4.10430 (pid 3967) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2331.854964][ T3967] Use struct sctp_sack_info instead [ 2332.407121][ T3979] netlink: 15743 bytes leftover after parsing attributes in process `syz.5.10434'. [ 2333.507750][ T3986] netlink: 'syz.3.10438': attribute type 3 has an invalid length. [ 2333.529144][ T3986] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.10438'. [ 2333.907452][ T3998] netlink: 'syz.0.10441': attribute type 3 has an invalid length. [ 2333.916950][ T3998] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.10441'. [ 2334.128870][ T4011] FAULT_INJECTION: forcing a failure. [ 2334.128870][ T4011] name failslab, interval 1, probability 0, space 0, times 0 [ 2334.182801][ T4011] CPU: 0 PID: 4011 Comm: syz.5.10445 Not tainted syzkaller #0 [ 2334.190401][ T4011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2334.200501][ T4011] Call Trace: [ 2334.203823][ T4011] [ 2334.206797][ T4011] dump_stack_lvl+0x188/0x24e [ 2334.211529][ T4011] ? show_regs_print_info+0x12/0x12 [ 2334.216779][ T4011] ? load_image+0x400/0x400 [ 2334.221339][ T4011] ? __might_sleep+0xd0/0xd0 [ 2334.225966][ T4011] ? __lock_acquire+0x7d10/0x7d10 [ 2334.231069][ T4011] should_fail_ex+0x399/0x4d0 [ 2334.235795][ T4011] should_failslab+0x5/0x20 [ 2334.240327][ T4011] slab_pre_alloc_hook+0x59/0x310 [ 2334.245381][ T4011] ? tcp_sendmsg_fastopen+0x1d5/0x600 [ 2334.250779][ T4011] __kmem_cache_alloc_node+0x4f/0x260 [ 2334.256191][ T4011] ? tcp_sendmsg_fastopen+0x1d5/0x600 [ 2334.261614][ T4011] kmalloc_trace+0x26/0xe0 [ 2334.266082][ T4011] tcp_sendmsg_fastopen+0x1d5/0x600 [ 2334.271316][ T4011] tcp_sendmsg_locked+0x3616/0x3a90 [ 2334.276532][ T4011] ? verify_lock_unused+0x140/0x140 [ 2334.281779][ T4011] ? mark_lock+0x94/0x320 [ 2334.286142][ T4011] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2334.292149][ T4011] ? lock_chain_count+0x20/0x20 [ 2334.297026][ T4011] ? tcp_set_state+0x520/0x520 [ 2334.301820][ T4011] tcp_sendmsg+0x2b/0x40 [ 2334.306087][ T4011] ? inet_send_prepare+0x260/0x260 [ 2334.311223][ T4011] ____sys_sendmsg+0x5be/0x970 [ 2334.316023][ T4011] ? __sys_sendmsg_sock+0x30/0x30 [ 2334.321085][ T4011] ? __import_iovec+0x315/0x500 [ 2334.325979][ T4011] ? import_iovec+0x6f/0xa0 [ 2334.330508][ T4011] ___sys_sendmsg+0x2a2/0x360 [ 2334.335338][ T4011] ? __sys_sendmsg+0x290/0x290 [ 2334.340141][ T4011] ? __lock_acquire+0x7d10/0x7d10 [ 2334.345210][ T4011] __se_sys_sendmsg+0x1bb/0x2a0 [ 2334.350094][ T4011] ? __x64_sys_sendmsg+0x80/0x80 [ 2334.355087][ T4011] ? lockdep_hardirqs_on+0x94/0x140 [ 2334.360326][ T4011] do_syscall_64+0x4c/0xa0 [ 2334.364789][ T4011] ? clear_bhb_loop+0x60/0xb0 [ 2334.369501][ T4011] ? clear_bhb_loop+0x60/0xb0 [ 2334.374207][ T4011] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2334.380139][ T4011] RIP: 0033:0x7f6cbcb9cdd9 [ 2334.384583][ T4011] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2334.404218][ T4011] RSP: 002b:00007f6cbdac6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2334.412659][ T4011] RAX: ffffffffffffffda RBX: 00007f6cbce15fa0 RCX: 00007f6cbcb9cdd9 [ 2334.420650][ T4011] RDX: 0000000020008054 RSI: 0000200000002100 RDI: 0000000000000003 [ 2334.428663][ T4011] RBP: 00007f6cbdac6090 R08: 0000000000000000 R09: 0000000000000000 [ 2334.436666][ T4011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2334.444659][ T4011] R13: 00007f6cbce16038 R14: 00007f6cbce15fa0 R15: 00007ffeadcd4158 [ 2334.452675][ T4011] [ 2335.131516][ T4019] netlink: 15743 bytes leftover after parsing attributes in process `syz.3.10446'. [ 2336.313755][ T46] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2337.618585][ T4040] netlink: 'syz.0.10452': attribute type 3 has an invalid length. [ 2337.653984][ T4040] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.10452'. [ 2338.031521][ T4050] sctp: [Deprecated]: syz.6.10457 (pid 4050) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2338.031521][ T4050] Use struct sctp_sack_info instead [ 2339.432283][ T4079] netlink: 15743 bytes leftover after parsing attributes in process `syz.6.10466'. [ 2339.477767][ T4075] netlink: 'syz.3.10467': attribute type 2 has an invalid length. [ 2339.537197][ T4075] netlink: 10 bytes leftover after parsing attributes in process `syz.3.10467'. [ 2340.311122][ T4095] netlink: 'syz.0.10469': attribute type 3 has an invalid length. [ 2340.319887][ T4095] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.10469'. [ 2340.337235][ T46] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2341.346977][ T4099] sctp: [Deprecated]: syz.0.10472 (pid 4099) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2341.346977][ T4099] Use struct sctp_sack_info instead [ 2342.624802][ T4127] netlink: 15743 bytes leftover after parsing attributes in process `syz.3.10480'. [ 2342.716973][ T4124] netlink: 'syz.5.10479': attribute type 3 has an invalid length. [ 2342.780731][ T4124] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.10479'. [ 2343.035628][ T4132] netlink: 'syz.6.10481': attribute type 3 has an invalid length. [ 2343.053766][ T4132] netlink: 105116 bytes leftover after parsing attributes in process `syz.6.10481'. [ 2343.111157][ T4134] netlink: 'syz.4.10482': attribute type 3 has an invalid length. [ 2343.133142][ T4134] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.10482'. [ 2343.922276][ T4150] sctp: [Deprecated]: syz.4.10489 (pid 4150) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2343.922276][ T4150] Use struct sctp_sack_info instead [ 2344.745940][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 2344.752399][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 2345.719199][ T4162] netlink: 'syz.3.10493': attribute type 3 has an invalid length. [ 2345.728401][ T4162] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.10493'. [ 2345.885196][ T4166] netlink: 15743 bytes leftover after parsing attributes in process `syz.3.10495'. [ 2346.184137][ T4170] netlink: 'syz.4.10496': attribute type 3 has an invalid length. [ 2346.208513][ T4170] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.10496'. [ 2346.356187][ T4173] netlink: 'syz.0.10497': attribute type 3 has an invalid length. [ 2346.399394][ T4173] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.10497'. [ 2346.778647][ T4187] netlink: 'syz.0.10502': attribute type 29 has an invalid length. [ 2346.813897][ T4187] netlink: 'syz.0.10502': attribute type 29 has an invalid length. [ 2347.059409][ T4199] FAULT_INJECTION: forcing a failure. [ 2347.059409][ T4199] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2347.108663][ T4199] CPU: 1 PID: 4199 Comm: syz.0.10507 Not tainted syzkaller #0 [ 2347.116191][ T4200] sctp: [Deprecated]: syz.6.10505 (pid 4200) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2347.116191][ T4200] Use struct sctp_sack_info instead [ 2347.132523][ T4199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2347.132541][ T4199] Call Trace: [ 2347.132549][ T4199] [ 2347.132559][ T4199] dump_stack_lvl+0x188/0x24e [ 2347.132596][ T4199] ? show_regs_print_info+0x12/0x12 [ 2347.158908][ T4199] ? load_image+0x400/0x400 [ 2347.163485][ T4199] ? __lock_acquire+0x7d10/0x7d10 [ 2347.168570][ T4199] should_fail_ex+0x399/0x4d0 [ 2347.173297][ T4199] _copy_from_user+0x2c/0x170 [ 2347.178025][ T4199] __copy_msghdr+0x3b7/0x580 [ 2347.182666][ T4199] ___sys_sendmsg+0x210/0x360 [ 2347.187399][ T4199] ? __sys_sendmsg+0x290/0x290 [ 2347.192233][ T4199] ? __lock_acquire+0x7d10/0x7d10 [ 2347.197326][ T4199] __se_sys_sendmsg+0x1bb/0x2a0 [ 2347.202234][ T4199] ? __x64_sys_sendmsg+0x80/0x80 [ 2347.207229][ T4199] ? lockdep_hardirqs_on+0x94/0x140 [ 2347.212473][ T4199] do_syscall_64+0x4c/0xa0 [ 2347.216936][ T4199] ? clear_bhb_loop+0x60/0xb0 [ 2347.221647][ T4199] ? clear_bhb_loop+0x60/0xb0 [ 2347.226350][ T4199] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2347.232295][ T4199] RIP: 0033:0x7fcdf5f9cdd9 [ 2347.236733][ T4199] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2347.256533][ T4199] RSP: 002b:00007fcdf6d7c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2347.264965][ T4199] RAX: ffffffffffffffda RBX: 00007fcdf6215fa0 RCX: 00007fcdf5f9cdd9 [ 2347.272950][ T4199] RDX: 0000000000008001 RSI: 0000200000000040 RDI: 0000000000000003 [ 2347.280941][ T4199] RBP: 00007fcdf6d7c090 R08: 0000000000000000 R09: 0000000000000000 [ 2347.288951][ T4199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2347.296944][ T4199] R13: 00007fcdf6216038 R14: 00007fcdf6215fa0 R15: 00007ffc0cbc5f18 [ 2347.304944][ T4199] [ 2348.003180][ T4214] netlink: 15743 bytes leftover after parsing attributes in process `syz.5.10511'. [ 2348.787276][ T4220] netlink: 'syz.4.10514': attribute type 3 has an invalid length. [ 2348.803626][ T4220] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.10514'. [ 2349.050360][ T4229] netlink: 'syz.4.10517': attribute type 29 has an invalid length. [ 2349.083741][ T4229] netlink: 'syz.4.10517': attribute type 29 has an invalid length. [ 2349.711735][ T4249] netlink: 15743 bytes leftover after parsing attributes in process `syz.4.10526'. [ 2349.754128][ T4259] netlink: 'syz.3.10529': attribute type 3 has an invalid length. [ 2349.762430][ T4259] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.10529'. [ 2349.769572][ T4255] sctp: [Deprecated]: syz.5.10527 (pid 4255) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2349.769572][ T4255] Use struct sctp_sack_info instead [ 2349.894395][ T4250] sctp: [Deprecated]: syz.0.10525 (pid 4250) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2349.894395][ T4250] Use struct sctp_sack_info instead [ 2349.940407][ T4258] sctp: [Deprecated]: syz.6.10528 (pid 4258) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2349.940407][ T4258] Use struct sctp_sack_info instead [ 2349.998921][ T4265] netlink: 'syz.3.10530': attribute type 2 has an invalid length. [ 2350.194831][ T4270] netlink: 'syz.3.10532': attribute type 29 has an invalid length. [ 2350.247705][ T4270] netlink: 'syz.3.10532': attribute type 29 has an invalid length. [ 2351.041771][ T4286] netlink: 'syz.3.10539': attribute type 21 has an invalid length. [ 2351.073434][ T4286] netlink: 'syz.3.10539': attribute type 4 has an invalid length. [ 2351.091191][ T4286] netlink: 152 bytes leftover after parsing attributes in process `syz.3.10539'. [ 2351.122070][ T4291] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10539'. [ 2352.069483][ T4300] netlink: 'syz.6.10542': attribute type 3 has an invalid length. [ 2352.081271][ T4300] netlink: 105116 bytes leftover after parsing attributes in process `syz.6.10542'. [ 2352.425330][ T4311] sctp: [Deprecated]: syz.3.10546 (pid 4311) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2352.425330][ T4311] Use struct sctp_sack_info instead [ 2352.582765][ T4323] sctp: [Deprecated]: syz.5.10550 (pid 4323) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2352.582765][ T4323] Use struct sctp_sack_info instead [ 2354.412352][ T4334] validate_nla: 2 callbacks suppressed [ 2354.412390][ T4334] netlink: 'syz.4.10555': attribute type 3 has an invalid length. [ 2354.462006][ T4334] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.10555'. [ 2354.698489][ T4346] netlink: 'syz.5.10559': attribute type 29 has an invalid length. [ 2354.769577][ T4346] netlink: 'syz.5.10559': attribute type 29 has an invalid length. [ 2355.146885][ T4359] netlink: 'syz.4.10566': attribute type 3 has an invalid length. [ 2355.168170][ T4359] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.10566'. [ 2355.349534][ T4365] sctp: [Deprecated]: syz.5.10567 (pid 4365) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2355.349534][ T4365] Use struct sctp_sack_info instead [ 2358.018998][ T4375] FAULT_INJECTION: forcing a failure. [ 2358.018998][ T4375] name failslab, interval 1, probability 0, space 0, times 0 [ 2358.078479][ T4377] netlink: 122896 bytes leftover after parsing attributes in process `syz.6.10568'. [ 2358.114408][ T4376] netlink: 'syz.0.10571': attribute type 3 has an invalid length. [ 2358.139606][ T4375] CPU: 1 PID: 4375 Comm: syz.4.10570 Not tainted syzkaller #0 [ 2358.142439][ T4376] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.10571'. [ 2358.147113][ T4375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2358.147129][ T4375] Call Trace: [ 2358.147137][ T4375] [ 2358.147146][ T4375] dump_stack_lvl+0x188/0x24e [ 2358.147186][ T4375] ? show_regs_print_info+0x12/0x12 [ 2358.147219][ T4375] ? load_image+0x400/0x400 [ 2358.147255][ T4375] should_fail_ex+0x399/0x4d0 [ 2358.147282][ T4375] should_failslab+0x5/0x20 [ 2358.147302][ T4375] slab_pre_alloc_hook+0x59/0x310 [ 2358.201722][ T4375] kmem_cache_alloc+0x56/0x2f0 [ 2358.206536][ T4375] ? skb_clone+0x1e7/0x370 [ 2358.211019][ T4375] skb_clone+0x1e7/0x370 [ 2358.215361][ T4375] bpf_clone_redirect+0x163/0x4a0 [ 2358.220442][ T4375] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 2358.226236][ T4375] bpf_prog_dde6c29962cc7727+0x56/0x5b [ 2358.231750][ T4375] ? ct_irq_exit_irqson+0x113/0x170 [ 2358.236996][ T4375] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2358.243032][ T4375] ? lock_chain_count+0x20/0x20 [ 2358.247945][ T4375] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2358.254154][ T4375] ? lockdep_hardirqs_on+0x94/0x140 [ 2358.259403][ T4375] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2358.265632][ T4375] ? __cant_sleep+0x220/0x220 [ 2358.270355][ T4375] ? bpf_test_timer_continue+0x142/0x380 [ 2358.276041][ T4375] ? bpf_test_timer_continue+0x2b1/0x380 [ 2358.281725][ T4375] ? bpf_test_timer_continue+0x142/0x380 [ 2358.287409][ T4375] bpf_test_run+0x2b6/0x830 [ 2358.291969][ T4375] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2358.298168][ T4375] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2358.304392][ T4375] ? convert___skb_to_skb+0x580/0x580 [ 2358.309848][ T4375] ? eth_get_headlen+0x200/0x200 [ 2358.314837][ T4375] ? __build_skb+0x257/0x3c0 [ 2358.319490][ T4375] ? convert___skb_to_skb+0x3d/0x580 [ 2358.324822][ T4375] bpf_prog_test_run_skb+0xaa6/0x12a0 [ 2358.330249][ T4375] ? cpu_online+0xa0/0xa0 [ 2358.334639][ T4375] bpf_prog_test_run+0x31e/0x390 [ 2358.339639][ T4375] __sys_bpf+0x62b/0x780 [ 2358.343941][ T4375] ? bpf_link_show_fdinfo+0x380/0x380 [ 2358.349375][ T4375] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2358.355589][ T4375] __x64_sys_bpf+0x78/0x90 [ 2358.360075][ T4375] do_syscall_64+0x4c/0xa0 [ 2358.364553][ T4375] ? clear_bhb_loop+0x60/0xb0 [ 2358.369282][ T4375] ? clear_bhb_loop+0x60/0xb0 [ 2358.374052][ T4375] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2358.379988][ T4375] RIP: 0033:0x7fcfc539cdd9 [ 2358.384432][ T4375] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2358.404078][ T4375] RSP: 002b:00007fcfc622b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2358.412537][ T4375] RAX: ffffffffffffffda RBX: 00007fcfc5615fa0 RCX: 00007fcfc539cdd9 [ 2358.420549][ T4375] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 2358.428558][ T4375] RBP: 00007fcfc622b090 R08: 0000000000000000 R09: 0000000000000000 [ 2358.436571][ T4375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2358.444590][ T4375] R13: 00007fcfc5616038 R14: 00007fcfc5615fa0 R15: 00007ffc7a94aee8 [ 2358.452626][ T4375] [ 2358.686079][ T4386] netlink: 'syz.0.10573': attribute type 29 has an invalid length. [ 2358.705044][ T4386] netlink: 'syz.0.10573': attribute type 29 has an invalid length. [ 2359.552090][ T4408] netlink: 'syz.3.10581': attribute type 3 has an invalid length. [ 2359.638065][ T4408] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.10581'. [ 2359.732648][ T4413] sctp: [Deprecated]: syz.6.10583 (pid 4413) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2359.732648][ T4413] Use struct sctp_sack_info instead [ 2359.877140][ T4415] netlink: 'syz.0.10584': attribute type 3 has an invalid length. [ 2359.891209][ T4415] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.10584'. [ 2360.116789][ T4418] netlink: 'syz.3.10585': attribute type 3 has an invalid length. [ 2360.180196][ T4418] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.10585'. [ 2360.311176][ T4420] netlink: 'syz.0.10586': attribute type 29 has an invalid length. [ 2360.362011][ T4420] netlink: 'syz.0.10586': attribute type 29 has an invalid length. [ 2363.242939][ T4445] netlink: 'syz.5.10594': attribute type 1 has an invalid length. [ 2363.265907][ T4448] netlink: 'syz.0.10596': attribute type 3 has an invalid length. [ 2363.274783][ T4445] netlink: 5 bytes leftover after parsing attributes in process `syz.5.10594'. [ 2363.285865][ T4448] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.10596'. [ 2363.574654][ T4460] netlink: 'syz.3.10600': attribute type 1 has an invalid length. [ 2363.621340][ T4460] netlink: 'syz.3.10600': attribute type 2 has an invalid length. [ 2363.648124][ T4466] netlink: 'syz.5.10601': attribute type 29 has an invalid length. [ 2363.659213][ T4460] netlink: 198692 bytes leftover after parsing attributes in process `syz.3.10600'. [ 2364.431167][ T4475] sctp: [Deprecated]: syz.3.10605 (pid 4475) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2364.431167][ T4475] Use struct sctp_sack_info instead [ 2366.492271][ T4486] validate_nla: 1 callbacks suppressed [ 2366.492311][ T4486] netlink: 'syz.5.10609': attribute type 3 has an invalid length. [ 2366.553810][ T4486] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.10609'. [ 2366.824597][ T4501] netlink: 'syz.6.10613': attribute type 29 has an invalid length. [ 2366.851363][ T4501] netlink: 'syz.6.10613': attribute type 29 has an invalid length. [ 2366.873726][ T4283] Bluetooth: hci4: unexpected event 0x1c length: 15 > 5 [ 2367.511094][T11590] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2367.533920][ T4523] sctp: [Deprecated]: syz.0.10621 (pid 4523) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2367.533920][ T4523] Use struct sctp_sack_info instead [ 2370.401355][ T4533] netlink: 'syz.5.10624': attribute type 3 has an invalid length. [ 2370.413001][ T4535] netlink: 'syz.0.10625': attribute type 29 has an invalid length. [ 2370.442003][ T4535] netlink: 'syz.0.10625': attribute type 29 has an invalid length. [ 2370.446126][ T4533] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.10624'. [ 2370.548549][ T4540] netlink: 'syz.4.10627': attribute type 14 has an invalid length. [ 2370.567838][ T4540] netlink: 156 bytes leftover after parsing attributes in process `syz.4.10627'. [ 2371.404751][ T75] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2372.036279][ T4569] sctp: [Deprecated]: syz.4.10637 (pid 4569) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2372.036279][ T4569] Use struct sctp_sack_info instead [ 2374.220622][ T4574] netlink: 'syz.6.10639': attribute type 29 has an invalid length. [ 2374.239267][ T4574] netlink: 'syz.6.10639': attribute type 29 has an invalid length. [ 2374.663056][ T4586] netlink: 'syz.0.10642': attribute type 3 has an invalid length. [ 2374.706491][ T4586] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.10642'. [ 2375.199661][ T4607] netlink: 763 bytes leftover after parsing attributes in process `syz.5.10649'. [ 2375.732729][ T4618] netlink: 'syz.5.10653': attribute type 29 has an invalid length. [ 2375.762251][ T4618] netlink: 'syz.5.10653': attribute type 29 has an invalid length. [ 2377.390076][ T4639] netlink: 'syz.3.10657': attribute type 3 has an invalid length. [ 2377.419367][ T4639] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.10657'. [ 2377.528059][ T4634] netlink: 'syz.6.10658': attribute type 10 has an invalid length. [ 2377.558301][ T4634] netlink: 40 bytes leftover after parsing attributes in process `syz.6.10658'. [ 2377.601402][ T4634] device team0 entered promiscuous mode [ 2377.608555][ T4634] device team_slave_0 entered promiscuous mode [ 2377.622195][ T4634] device team_slave_1 entered promiscuous mode [ 2377.669407][ T4634] bridge0: port 3(team0) entered blocking state [ 2377.731676][ T4634] bridge0: port 3(team0) entered disabled state [ 2377.897815][ T4634] bridge0: port 3(team0) entered blocking state [ 2377.905086][ T4634] bridge0: port 3(team0) entered forwarding state [ 2378.145243][ T4664] netlink: 'syz.6.10669': attribute type 29 has an invalid length. [ 2378.162406][ T4665] FAULT_INJECTION: forcing a failure. [ 2378.162406][ T4665] name failslab, interval 1, probability 0, space 0, times 0 [ 2378.182360][ T4664] netlink: 'syz.6.10669': attribute type 29 has an invalid length. [ 2378.223540][ T4665] CPU: 1 PID: 4665 Comm: syz.0.10668 Not tainted syzkaller #0 [ 2378.231122][ T4665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2378.241224][ T4665] Call Trace: [ 2378.244552][ T4665] [ 2378.247526][ T4665] dump_stack_lvl+0x188/0x24e [ 2378.252267][ T4665] ? show_regs_print_info+0x12/0x12 [ 2378.257520][ T4665] ? load_image+0x400/0x400 [ 2378.262076][ T4665] ? __might_sleep+0xd0/0xd0 [ 2378.267062][ T4665] ? __lock_acquire+0x7d10/0x7d10 [ 2378.272148][ T4665] ? verify_lock_unused+0x140/0x140 [ 2378.277549][ T4665] should_fail_ex+0x399/0x4d0 [ 2378.282288][ T4665] should_failslab+0x5/0x20 [ 2378.286846][ T4665] slab_pre_alloc_hook+0x59/0x310 [ 2378.291919][ T4665] ? mark_lock+0x94/0x320 [ 2378.296296][ T4665] kmem_cache_alloc_node+0x5a/0x320 [ 2378.301530][ T4665] ? __lock_acquire+0x12f4/0x7d10 [ 2378.306594][ T4665] ? __alloc_skb+0xfc/0x7e0 [ 2378.311161][ T4665] __alloc_skb+0xfc/0x7e0 [ 2378.315537][ T4665] alloc_skb_with_frags+0xa7/0x710 [ 2378.320690][ T4665] sock_alloc_send_pskb+0x87f/0x9a0 [ 2378.325936][ T4665] ? sock_kzfree_s+0x50/0x50 [ 2378.330589][ T4665] tun_get_user+0x915/0x3c70 [ 2378.335226][ T4665] ? rcu_read_unlock+0xa0/0xa0 [ 2378.340037][ T4665] ? tun_get+0x1c/0x2e0 [ 2378.344246][ T4665] ? __lock_acquire+0x7d10/0x7d10 [ 2378.349332][ T4665] ? tun_get+0x1c/0x2e0 [ 2378.353533][ T4665] tun_chr_write_iter+0x112/0x1f0 [ 2378.358604][ T4665] vfs_write+0x4b1/0xa30 [ 2378.362892][ T4665] ? file_end_write+0x250/0x250 [ 2378.367825][ T4665] ? __fget_files+0x43d/0x4b0 [ 2378.372539][ T4665] ? __fdget_pos+0x1d4/0x360 [ 2378.377214][ T4665] ? ksys_write+0x71/0x250 [ 2378.381675][ T4665] ksys_write+0x14c/0x250 [ 2378.386044][ T4665] ? __ia32_sys_read+0x80/0x80 [ 2378.390840][ T4665] ? lockdep_hardirqs_on+0x94/0x140 [ 2378.396066][ T4665] do_syscall_64+0x4c/0xa0 [ 2378.400506][ T4665] ? clear_bhb_loop+0x60/0xb0 [ 2378.405209][ T4665] ? clear_bhb_loop+0x60/0xb0 [ 2378.409930][ T4665] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2378.415848][ T4665] RIP: 0033:0x7fcdf5f9cdd9 [ 2378.420285][ T4665] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2378.439911][ T4665] RSP: 002b:00007fcdf6d7c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2378.448357][ T4665] RAX: ffffffffffffffda RBX: 00007fcdf6215fa0 RCX: 00007fcdf5f9cdd9 [ 2378.456355][ T4665] RDX: 000000000000fdef RSI: 0000200000000100 RDI: 00000000000000c8 [ 2378.464377][ T4665] RBP: 00007fcdf6d7c090 R08: 0000000000000000 R09: 0000000000000000 [ 2378.472369][ T4665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2378.480363][ T4665] R13: 00007fcdf6216038 R14: 00007fcdf6215fa0 R15: 00007ffc0cbc5f18 [ 2378.488376][ T4665] [ 2378.602649][ T4676] netlink: 146340 bytes leftover after parsing attributes in process `syz.6.10673'. [ 2378.648745][ T4676] openvswitch: netlink: Key type 386 is out of range max 32 [ 2379.408403][ T4685] netlink: 'syz.6.10675': attribute type 3 has an invalid length. [ 2379.448166][ T4685] netlink: 105116 bytes leftover after parsing attributes in process `syz.6.10675'. [ 2381.546095][ T4708] netlink: 'syz.5.10683': attribute type 29 has an invalid length. [ 2381.575942][ T4708] netlink: 'syz.5.10683': attribute type 29 has an invalid length. [ 2382.759615][ T4744] netlink: 'syz.0.10699': attribute type 29 has an invalid length. [ 2382.771973][ T4744] netlink: 'syz.0.10699': attribute type 29 has an invalid length. [ 2384.257709][ T4767] netlink: 'syz.5.10706': attribute type 2 has an invalid length. [ 2384.294819][ T4767] device .*! entered promiscuous mode [ 2384.300889][ T4767] netlink: 'syz.5.10706': attribute type 2 has an invalid length. [ 2384.340044][ T4767] netlink: 'syz.5.10706': attribute type 2 has an invalid length. [ 2384.364445][ T4767] netlink: 'syz.5.10706': attribute type 2 has an invalid length. [ 2384.385609][ T4767] netlink: 'syz.5.10706': attribute type 2 has an invalid length. [ 2384.414262][ T4767] netlink: 'syz.5.10706': attribute type 2 has an invalid length. [ 2384.448973][ T4767] netlink: 'syz.5.10706': attribute type 2 has an invalid length. [ 2384.474571][ T4771] netlink: 'syz.6.10711': attribute type 29 has an invalid length. [ 2384.482877][ T4771] netlink: 'syz.6.10711': attribute type 29 has an invalid length. [ 2384.520598][ T4767] netlink: 'syz.5.10706': attribute type 2 has an invalid length. [ 2384.576428][ T4774] netlink: 'syz.4.10710': attribute type 3 has an invalid length. [ 2384.585417][ T4767] netlink: 'syz.5.10706': attribute type 2 has an invalid length. [ 2384.606067][ T4774] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.10710'. [ 2384.622697][ T4776] netlink: 'syz.0.10712': attribute type 3 has an invalid length. [ 2384.634613][ T4767] netlink: 'syz.5.10706': attribute type 2 has an invalid length. [ 2384.651599][ T4776] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.10712'. [ 2384.684946][ T4767] netlink: 'syz.5.10706': attribute type 2 has an invalid length. [ 2388.113968][ T4817] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.10727'. [ 2391.167791][ T4843] validate_nla: 25 callbacks suppressed [ 2391.167813][ T4843] netlink: 'syz.5.10736': attribute type 29 has an invalid length. [ 2391.371163][ T4841] device syzkaller0 entered promiscuous mode [ 2391.500874][ T4843] netlink: 'syz.5.10736': attribute type 29 has an invalid length. [ 2392.773824][ T4866] FAULT_INJECTION: forcing a failure. [ 2392.773824][ T4866] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2392.864524][ T4866] CPU: 1 PID: 4866 Comm: syz.5.10743 Not tainted syzkaller #0 [ 2392.872082][ T4866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2392.882180][ T4866] Call Trace: [ 2392.885498][ T4866] [ 2392.888476][ T4866] dump_stack_lvl+0x188/0x24e [ 2392.893228][ T4866] ? show_regs_print_info+0x12/0x12 [ 2392.898496][ T4866] ? load_image+0x400/0x400 [ 2392.903080][ T4866] ? __lock_acquire+0x7d10/0x7d10 [ 2392.908172][ T4866] should_fail_ex+0x399/0x4d0 [ 2392.912897][ T4866] _copy_from_iter+0x1c0/0x1130 [ 2392.917803][ T4866] ? rcu_is_watching+0x11/0xa0 [ 2392.922619][ T4866] ? __alloc_pages+0x294/0x4f0 [ 2392.927435][ T4866] ? copyout_mc+0x110/0x110 [ 2392.932002][ T4866] ? page_copy_sane+0x4e/0x390 [ 2392.936811][ T4866] copy_page_from_iter+0x77/0x100 [ 2392.941889][ T4866] tun_get_user+0x1b37/0x3c70 [ 2392.946625][ T4866] ? tun_get_user+0x668/0x3c70 [ 2392.951457][ T4866] ? rcu_read_unlock+0xa0/0xa0 [ 2392.956283][ T4866] ? tun_get+0x1c/0x2e0 [ 2392.960495][ T4866] ? __lock_acquire+0x7d10/0x7d10 [ 2392.965582][ T4866] ? tun_get+0x1c/0x2e0 [ 2392.969912][ T4866] tun_chr_write_iter+0x112/0x1f0 [ 2392.975059][ T4866] vfs_write+0x4b1/0xa30 [ 2392.979379][ T4866] ? file_end_write+0x250/0x250 [ 2392.984292][ T4866] ? __fget_files+0x43d/0x4b0 [ 2392.989081][ T4866] ? __fdget_pos+0x1d4/0x360 [ 2392.993802][ T4866] ? ksys_write+0x71/0x250 [ 2392.998263][ T4866] ksys_write+0x14c/0x250 [ 2393.002640][ T4866] ? __ia32_sys_read+0x80/0x80 [ 2393.007442][ T4866] ? lockdep_hardirqs_on+0x94/0x140 [ 2393.012670][ T4866] do_syscall_64+0x4c/0xa0 [ 2393.017124][ T4866] ? clear_bhb_loop+0x60/0xb0 [ 2393.021828][ T4866] ? clear_bhb_loop+0x60/0xb0 [ 2393.026541][ T4866] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2393.032575][ T4866] RIP: 0033:0x7f6cbcb9cdd9 [ 2393.037024][ T4866] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2393.056663][ T4866] RSP: 002b:00007f6cbdaa5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2393.065104][ T4866] RAX: ffffffffffffffda RBX: 00007f6cbce16090 RCX: 00007f6cbcb9cdd9 [ 2393.073116][ T4866] RDX: 0000000000000011 RSI: 0000200000000040 RDI: 00000000000000c8 [ 2393.081113][ T4866] RBP: 00007f6cbdaa5090 R08: 0000000000000000 R09: 0000000000000000 [ 2393.089103][ T4866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2393.097122][ T4866] R13: 00007f6cbce16128 R14: 00007f6cbce16090 R15: 00007ffeadcd4158 [ 2393.105126][ T4866] [ 2393.768331][ T4879] sctp: [Deprecated]: syz.0.10748 (pid 4879) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2393.768331][ T4879] Use struct sctp_sack_info instead [ 2394.196138][ T4884] netlink: 'syz.4.10750': attribute type 29 has an invalid length. [ 2397.251854][ T4917] netlink: 194236 bytes leftover after parsing attributes in process `syz.5.10759'. [ 2397.344911][ T4917] netlink: zone id is out of range [ 2397.392902][ T4917] netlink: get zone limit has 8 unknown bytes [ 2399.328970][ T4884] netlink: 'syz.4.10750': attribute type 29 has an invalid length. [ 2399.623900][ T4933] netlink: 'syz.3.10765': attribute type 1 has an invalid length. [ 2399.642637][ T4933] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.10765'. [ 2400.125495][T10227] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2401.028896][ T4956] netlink: 'syz.4.10773': attribute type 10 has an invalid length. [ 2401.086126][ T4962] netlink: 'syz.5.10775': attribute type 29 has an invalid length. [ 2401.213127][ T4958] sctp: [Deprecated]: syz.0.10774 (pid 4958) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2401.213127][ T4958] Use struct sctp_sack_info instead [ 2401.537421][ T4956] team0 (unregistering): Port device team_slave_0 removed [ 2401.602401][ T4956] team0 (unregistering): Port device team_slave_1 removed [ 2401.829426][ T4962] netlink: 'syz.5.10775': attribute type 29 has an invalid length. [ 2402.037381][ T4967] device syzkaller0 entered promiscuous mode [ 2403.127099][ T4283] Bluetooth: hci4: unexpected event 0x1d length: 15 > 5 [ 2403.990546][ T5008] netlink: 'syz.4.10789': attribute type 3 has an invalid length. [ 2404.029558][ T5008] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.10789'. [ 2404.101807][ T75] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2405.894716][ T5010] netlink: 'syz.3.10801': attribute type 3 has an invalid length. [ 2405.920608][ T5010] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.10801'. [ 2405.922285][ T5014] netlink: 'syz.5.10791': attribute type 29 has an invalid length. [ 2405.984118][ T5014] netlink: 'syz.5.10791': attribute type 29 has an invalid length. [ 2406.032350][ T5015] netlink: 'syz.4.10790': attribute type 1 has an invalid length. [ 2406.041208][ T5015] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.10790'. [ 2406.175294][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 2406.181701][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 2406.851956][ T5035] netlink: 'syz.5.10800': attribute type 21 has an invalid length. [ 2406.910261][ T5035] netlink: 128 bytes leftover after parsing attributes in process `syz.5.10800'. [ 2406.955197][ T5035] netlink: 3 bytes leftover after parsing attributes in process `syz.5.10800'. [ 2407.168526][ T5038] sctp: [Deprecated]: syz.3.10802 (pid 5038) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2407.168526][ T5038] Use struct sctp_sack_info instead [ 2407.546217][ T5053] netlink: 'syz.4.10807': attribute type 29 has an invalid length. [ 2407.570001][ T5053] netlink: 'syz.4.10807': attribute type 29 has an invalid length. [ 2408.162819][ T5059] netlink: 'syz.4.10808': attribute type 3 has an invalid length. [ 2408.202313][ T5059] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.10808'. [ 2409.289518][ T5081] netlink: 'syz.5.10817': attribute type 1 has an invalid length. [ 2409.343728][ T5081] netlink: 'syz.5.10817': attribute type 1 has an invalid length. [ 2409.463562][ T5081] netlink: 116376 bytes leftover after parsing attributes in process `syz.5.10817'. [ 2409.979834][ T5089] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.10821'. [ 2410.452925][ T5093] team0 (unregistering): Port device team_slave_0 removed [ 2410.471603][ T5099] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.10823'. [ 2410.550950][ T5093] team0 (unregistering): Port device team_slave_1 removed [ 2412.335414][ T5135] validate_nla: 2 callbacks suppressed [ 2412.335454][ T5135] netlink: 'syz.4.10836': attribute type 3 has an invalid length. [ 2412.360811][ T5139] netlink: 'syz.5.10837': attribute type 3 has an invalid length. [ 2412.383980][ T5139] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.10837'. [ 2412.394516][ T5135] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.10836'. [ 2412.411668][ T5137] netlink: 'syz.3.10838': attribute type 10 has an invalid length. [ 2412.606972][ T5146] netlink: 'syz.6.10841': attribute type 3 has an invalid length. [ 2412.616761][ T5146] netlink: 105116 bytes leftover after parsing attributes in process `syz.6.10841'. [ 2412.676109][ T5137] team0 (unregistering): Port device team_slave_0 removed [ 2412.762330][ T5137] team0 (unregistering): Port device team_slave_1 removed [ 2413.155548][ T5151] netlink: 'syz.4.10843': attribute type 10 has an invalid length. [ 2413.886747][ T5173] netlink: 'syz.5.10852': attribute type 3 has an invalid length. [ 2414.053420][ T5173] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.10852'. [ 2414.694207][ T5182] netlink: 'syz.6.10854': attribute type 3 has an invalid length. [ 2414.742713][ T5182] netlink: 105116 bytes leftover after parsing attributes in process `syz.6.10854'. [ 2414.980396][ T5194] netlink: 'syz.5.10856': attribute type 3 has an invalid length. [ 2415.024574][ T5194] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.10856'. [ 2415.346119][ T5198] netlink: 144 bytes leftover after parsing attributes in process `syz.0.10858'. [ 2415.811095][ T5208] netlink: 'syz.5.10863': attribute type 3 has an invalid length. [ 2415.853850][ T5208] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.10863'. [ 2416.057716][ T5214] netlink: 63503 bytes leftover after parsing attributes in process `syz.6.10864'. [ 2416.142631][ T5217] netlink: 'syz.0.10878': attribute type 3 has an invalid length. [ 2416.160321][ T5217] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.10878'. [ 2416.911045][ T5233] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.10871'. [ 2417.065965][ T5240] netlink: 2418 bytes leftover after parsing attributes in process `syz.3.10877'. [ 2417.129594][ T5240] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10877'. [ 2417.568300][ T5254] validate_nla: 4 callbacks suppressed [ 2417.568338][ T5254] netlink: 'syz.0.10882': attribute type 3 has an invalid length. [ 2417.588801][ T5254] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.10882'. [ 2418.515832][T17268] Bluetooth: hci5: command 0x0406 tx timeout [ 2418.895865][ T5280] netlink: 'syz.4.10891': attribute type 21 has an invalid length. [ 2418.962931][ T46] tipc: Subscription rejected, illegal request [ 2419.310923][ T5298] netlink: 'syz.3.10897': attribute type 3 has an invalid length. [ 2419.571430][ T5310] sctp: [Deprecated]: syz.3.10900 (pid 5310) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2419.571430][ T5310] Use struct sctp_sack_info instead [ 2421.680838][ T5349] netlink: 'syz.6.10911': attribute type 3 has an invalid length. [ 2421.888747][ T5349] __nla_validate_parse: 1 callbacks suppressed [ 2421.888785][ T5349] netlink: 105116 bytes leftover after parsing attributes in process `syz.6.10911'. [ 2422.472181][ T5360] sctp: [Deprecated]: syz.3.10916 (pid 5360) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2422.472181][ T5360] Use struct sctp_sack_info instead [ 2425.312227][ T5413] netlink: 'syz.5.10931': attribute type 21 has an invalid length. [ 2425.352862][ T5413] netlink: 14548 bytes leftover after parsing attributes in process `syz.5.10931'. Stopping sshd: [ 2425.801182][ T5422] sctp: [Deprecated]: syz.4.10934 (pid 5422) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2425.801182][ T5422] Use struct sctp_sack_info instead stopped /usr/sbin/sshd (pid 4024) OK Stopping crond: stopped /usr/sbin/crond (pid 4010) OK Stopping dhcpcd... stopped /sbin/dhcpcd (pid 3931) [ 2427.987183][ T5469] netlink: 'syz.5.10946': attribute type 29 has an invalid length. [ 2428.020050][ T5469] netlink: 'syz.5.10946': attribute type 29 has an invalid length. [ 2428.052271][ T5474] netlink: 'syz.5.10946': attribute type 29 has an invalid length. Stopping network: OK Stopping iptables: OK Stopping system message bus: done [ 2431.340802][T10227] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) Stopping klogd: OK Stopping acpid: OK Stopping syslogd: stopped /sbin/syslogd (pid 3619) OK umount: can't remount debugfs read-only umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! Sent SIGTERM to all processes [ 2435.128890][ T46] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) Sent SIGKILL to all processes [ 2435.981168][ T46] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2436.093868][ T46] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 Requesting system poweroff [ 2436.167398][ T46] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2436.292465][ T46] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2437.139793][ T5563] kvm: exiting hardware virtualization [ 2437.178787][ T5563] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 2437.195745][ T5563] ACPI: PM: Preparing to enter system sleep state S5 [ 2437.212177][ T5563] reboot: Power down serialport: VM disconnected.