last executing test programs: 2m21.637612921s ago: executing program 0 (id=765): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x6, &(0x7f0000000040), 0x4) setsockopt$sock_attach_bpf(r1, 0x29, 0x39, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703340000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002a0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r2 = perf_event_open(&(0x7f0000001200)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x108, 0x0, 0xfffffffe, 0x0, 0x4, 0x0, 0xa}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001340)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f949c479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a867e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c27578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261e58fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f13dff7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe8799fe266e2ccac80fefe750151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa796ea7b156d19612297c63"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f0000000200)={&(0x7f0000000040)=@abs={0x1, 0x2e, 0xf6ffffff}, 0x6e, 0x0}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x200002, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3, 0x101}, 0x8c00, 0x2, 0xfffffffe, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x21, 0x2, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000001a80)={0x11, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r5, 0x110, 0x2, &(0x7f0000000000), 0x4) socket$kcm(0x2, 0x922000000001, 0x106) socket$kcm(0x10, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@generic={&(0x7f0000000180)='./file0\x00', 0x0, 0x10}, 0x18) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/uts\x00') syz_open_procfs$namespace(0x0, &(0x7f0000001d80)='ns/uts\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800"/16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r6}, 0xc) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000b000140020203600e4109000800ac00060311000000160012000a00fc000000035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000009ab791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de604000dd6e4edef3d93452a92954b43370e97039207099923f9000000008af26c8b7b55f4d2a6823a45f28f", 0xd8}], 0x1}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001380)={0x15, 0x4, &(0x7f0000001a40)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x7, 0x1000, &(0x7f0000000280)=""/4096, 0x40f00, 0x62, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000001280)={0x9, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x5, &(0x7f0000001300)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1], &(0x7f0000001b80)=[{0x3, 0x1, 0x6, 0x3}, {0x5, 0x1, 0x9, 0x5}, {0x1, 0x4, 0x2, 0xa}, {0x0, 0x6, 0x8, 0x9}, {0x1, 0x2, 0xc, 0xa}], 0x10, 0x2011}, 0x94) sendmsg(r5, &(0x7f0000002300)={&(0x7f0000001dc0)=@ax25={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x8}, [@null, @bcast, @default, @bcast, @default, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x80, 0x0}, 0x40) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000001440)=r8, 0x4) 2m20.238582442s ago: executing program 0 (id=771): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000340)="6aa1d85be04e5d1d00000000000096ca0b0000000000000022d5102ebb63ba59bf6700000034efa2e68e5a33f5b3e5c25c4a6b130342c098f4ede7f49b4ece963ec7402298a5485b36e544db07ca64880e5411f7233f585e5358e871ea2e3ebe87ebaebb62d06f16222730285d98c734116dfdbb932bac3c1169a0a5379b9dc7a59dfbe77c5b160405001966e6aa3b8345f63d46f05603e1506e3ee8deaf0c33a7a78cf9729d8994761e25", 0xab}], 0x1}, 0x40001) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0040011004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x8000) 2m19.175732296s ago: executing program 0 (id=779): r0 = socket$kcm(0x2, 0x922000000001, 0x106) r1 = syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0/file0\x00', 0x116) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0xc8a9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r4, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000440)=r3}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000980)={r4, 0x58, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x18, 0x17, &(0x7f00000007c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, [@btf_id={0x18, 0x5, 0x3, 0x0, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}]}, &(0x7f0000000880)='syzkaller\x00', 0x7c77, 0x9, &(0x7f00000008c0)=""/9, 0x41100, 0x38, '\x00', r6, 0x0, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000a00)=[{0x3, 0x5, 0x2, 0x4}, {0x2, 0x2, 0xe}, {0x5, 0x5, 0x8, 0x8}, {0x2, 0x3, 0xb, 0x3}], 0x10, 0x3}, 0x94) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x890b, 0x0) close(r4) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r7 = openat$cgroup_procs(r2, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000080)=r1, 0x12) sendmsg$inet(r0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=ANY=[], 0x110}, 0xc8c0) 2m18.366064834s ago: executing program 0 (id=784): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0xf, 0x0}, 0x8) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=r0, @ANYBLOB="ff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000030000000100080000000000000000000000000000000010"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1c, 0x11, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_fd={0x18, 0x7, 0x1, 0x0, r0}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x235c4bda25b2acc1, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000033000b1ef9dad256094bc7c308920fd2", 0x14}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 2m17.350325037s ago: executing program 0 (id=788): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402000000e8fe55a1180015000600142603600e1209000a0000000401a80016000a00104006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0800089e408e8d8ef52b49816277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100", 0x9b}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x7, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x1}, 0x0, 0x2, 0xfffffffa, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)=@o_path={&(0x7f0000000680)='./file0/../file0\x00', 0x0, 0x10, r0}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0), ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, &(0x7f0000000200)=[0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x3b, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x4000001e, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) r4 = bpf$ITER_CREATE(0xb, &(0x7f00000006c0), 0xfffffffffffffe03) close(r4) ioctl$TUNGETVNETBE(r4, 0x800454df, &(0x7f00000001c0)=0x1) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1b00000000000000000000000400000000000000", @ANYRES32=r4, @ANYBLOB="ffffffff00000000000000000000000000000000202e25b5b437a03f2047b88b733b86f37c2a16930f7c1028b00d6545b03e149a6221440a2b1d24d8bce48589a6da5c4fcd424a048b4b2803d02df0e203c925a7b31a54f14756593c0158917a1a7bd7628df807aa39ddfe26e0", @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="03000000000000000500000000040000000000000400020000000000594ffebb708a5ef6ea7d06e5c0aaddc5ab0b8debe0a77c67dd24f6e8951da0309be34d3404c5d9d1c56ddb6621dd85e56e9ac0f8b286f9992a3702c71d9dd133563c0dc53931a6b198173308ee080568b5486049f894e0d3315b8cffffffff4d635ed168d3e343454ef0c819039a82bb61cefc2af46fc4bdcbd3c9f8b4e58432e212a6679bcecf4f19ff2db136c1919ae2fa449c3fa613d14fbbb999c818de544bb41ffb940b596fb6e876f0e4f420cd8d5c695961dc3eb505deec53b3b08271d2a5bd03bad867683e38937b9c52cf6c2d3e42ed8cfca2bff1d86a"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1e00000004000000001000000004000040100000", @ANYRES32=r1, @ANYBLOB="3eb500"/20, @ANYRES32=r3, @ANYRES32=r1, @ANYBLOB="0400000005000000040000000700c5a200"/28], 0x50) socketpair$unix(0x1, 0x5, 0x0, 0x0) r5 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="00f6ff0000332e121c04000000009500040000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b37, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xfede, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848420000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x20000000000000, &(0x7f0000000200)=ANY=[@ANYRESHEX=r2, @ANYRES32, @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000c400"/28], 0x50) r6 = socket$kcm(0x10, 0x3, 0x10) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r8 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r7}, 0x8) close(r8) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r7, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r9 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r9, r8, 0x0, 0x0, 0xfffffffffffffffe}, 0x30) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5d32, 0x41026, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x100000001, 0x8}, 0x1b, 0x0, 0x3, 0x1, 0x8, 0xfffffffd, 0x4, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffdfffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x15, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="180000b7000000000000800000707b1df58e464c52000000"], &(0x7f00000005c0)='GPL\x00'}, 0x80) 2m16.829203449s ago: executing program 0 (id=791): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000040)={0x5, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000, 0x2, @perf_config_ext={0x100000001, 0x9}, 0x10401, 0xfffffffffffffbf4, 0x0, 0x0, 0xcc, 0x400, 0x0, 0x0, 0x0, 0x20, 0x1a17}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4000010) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = socket$kcm(0x11, 0x2, 0x0) r2 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0), 0x8) close(r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32, @ANYBLOB="870000000200000800f3000000000000bc24024b19", @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, 0x0, &(0x7f0000000040)=r2}, 0x20) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000140)=@generic={&(0x7f0000000100)='./file0\x00', r3}, 0x18) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r4, 0x107, 0x12, &(0x7f00000000c0)=r1, 0x8) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'virt_wifi0\x00', 0x11}) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r5, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb98}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r9 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000000c0)=r9, 0x4) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r8, 0x4) syz_clone(0x61000600, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x201}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001d00)=ANY=[@ANYBLOB="b70200001a000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946e0ebc622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deda8e0400000000000000c61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7b148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1b2ef4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b74cd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f53d709959d7bd2f5cc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b36fb0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece010000000100000010223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f50714600fb6241c6e955031795b2c2f56411e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffff854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeedd005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8012392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccaca8154b8601213ee2296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e92604e1026e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c04701563816514f868a2b95319abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdff7f00000000000000000000000000002037abf06a81cfe9aee998b980958cac000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977e37df17a321d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd52364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2c6aea1d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb89243a16ff10feea20bdac0000000000000000ca06f256c8028e0fb165f037b21f3289f86a01040000a35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92de6b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000a5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f250054f84b0fccd4f810bce02322b489b79aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58f0225f3390343c12aa51810134d3dfbf71f6516737be55c06d9cdcfb1e20280e14700eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b19128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff17320adda5867947257f164391c673b6079e65d7ae45ed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a927de6f4c09f4b742e037381c85d2ec7bb2a8152f0d6a99a0370e0cbd65744eb2efd7b65f04aa7e72588757b9612bb4253a63bb303c0c68a07f115d104f2007237a4f771416741bfd63fdfe3ae6f8bea755d8b7202c2bbae137dc1c3cf40db74a4c1c219d8ddec8f91dae2cdea1353fe062830fa1d233296ec9d8317872257e154665485e7f31cdbfbf435517faf93015b57417d84b8bc8662e097d5ba55d02d48e1000000b81b6790062e61cd000000acb1b33c38ddd302e28e8e30b5c180d38bb1cd770195799c541a7481f5d34ca75d74b3833d399371c8f09f6745d0e43d46f7c82ff1b7d6c04467d083fc708348f35ae9bb9b78f2984a0ee55647d4c4a63c4f438fdec726e7d8228eaff2374b2300b9c35f4259e3452b2f53ee114bb8a6c0ea6fc89a55fef6673013d7dd4597660865423e978dd6e41e201bb3a584d6fe6f24e290613b677271603c558ee2021be29c4a06a057b2acc5bfd34898afac0d839079bbcb3acd43532563367ac8ae6c4379fb5fdcdab5fe55e1a3a521284209871216817338073cbc4ec9903725b788a25b5a6003b579b8f0e20d78be3d885557292971e65f4f1daefad2c5ccbca608b46406ffff25610c3cbae9f56cd47678f482e2c1f7cdfc5ce2a67c1545c1192f2ac3990f9c850788401469fbca801e73cd9efbcc6e44b2f414cdff5c49e706d699b5c0a75526f700c4e32611b826b2787f99532c02262a9c60e4b07a09377c38747c7f05e38b6db5d8cc625873af8fc5a7d362334c509f6bb4e36e1c9e08949679e0ed9f84e668588b9f1b21069bd5ffe263b1e6860c305d1faca4d6e4680ab6a6d491ecc97a904cc9c643e489d1a5f7d8a359bea93ba2d95bd3341d98d4918118e5f7b6fa6f603274c561f63ee337ad8d0017bbd1e17b5ce71a18c8572810029fe5d0ac2a661d8b346240c46f0223981cd53c067b65b579c144a4c918504888132a19a6a1702afb8646cf8fbcc5a4f5fbc0728f7bd7955138fc4919d78cfc5f2fd7dccf3a20896045698d2b7b70773412029db69c099fda38be5f37adc5bd00d0654716fd6b4b64fa48f7f11b5632bb63fa18718c1a24e0bad8d21f51f6bf3fbd3786a00c4e8f8536f6af28c9b8cd210bc0e82112f9943fc0fa81c08e456983cbdd8d08053c128e122da8b7583cb1eb"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r10, 0x18000000000002a0, 0xe2f, 0x60000000, &(0x7f0000000100)="b9ff03316844268cb89e14f086dd65e0ffff00122c00631177fbac141416e000030a44079f03fe8000000000000000000000000000222f050b038da1880b251810a59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x0, 0x700}, 0x2c) 2m1.785986295s ago: executing program 32 (id=791): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000040)={0x5, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000, 0x2, @perf_config_ext={0x100000001, 0x9}, 0x10401, 0xfffffffffffffbf4, 0x0, 0x0, 0xcc, 0x400, 0x0, 0x0, 0x0, 0x20, 0x1a17}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4000010) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = socket$kcm(0x11, 0x2, 0x0) r2 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0), 0x8) close(r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32, @ANYBLOB="870000000200000800f3000000000000bc24024b19", @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, 0x0, &(0x7f0000000040)=r2}, 0x20) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000140)=@generic={&(0x7f0000000100)='./file0\x00', r3}, 0x18) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r4, 0x107, 0x12, &(0x7f00000000c0)=r1, 0x8) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'virt_wifi0\x00', 0x11}) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r5, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb98}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r9 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000000c0)=r9, 0x4) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r8, 0x4) syz_clone(0x61000600, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x201}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001d00)=ANY=[@ANYBLOB="b70200001a000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946e0ebc622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deda8e0400000000000000c61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7b148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1b2ef4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b74cd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f53d709959d7bd2f5cc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b36fb0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece010000000100000010223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f50714600fb6241c6e955031795b2c2f56411e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffff854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeedd005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8012392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccaca8154b8601213ee2296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e92604e1026e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c04701563816514f868a2b95319abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdff7f00000000000000000000000000002037abf06a81cfe9aee998b980958cac000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977e37df17a321d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd52364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2c6aea1d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb89243a16ff10feea20bdac0000000000000000ca06f256c8028e0fb165f037b21f3289f86a01040000a35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92de6b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000a5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f250054f84b0fccd4f810bce02322b489b79aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58f0225f3390343c12aa51810134d3dfbf71f6516737be55c06d9cdcfb1e20280e14700eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b19128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff17320adda5867947257f164391c673b6079e65d7ae45ed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a927de6f4c09f4b742e037381c85d2ec7bb2a8152f0d6a99a0370e0cbd65744eb2efd7b65f04aa7e72588757b9612bb4253a63bb303c0c68a07f115d104f2007237a4f771416741bfd63fdfe3ae6f8bea755d8b7202c2bbae137dc1c3cf40db74a4c1c219d8ddec8f91dae2cdea1353fe062830fa1d233296ec9d8317872257e154665485e7f31cdbfbf435517faf93015b57417d84b8bc8662e097d5ba55d02d48e1000000b81b6790062e61cd000000acb1b33c38ddd302e28e8e30b5c180d38bb1cd770195799c541a7481f5d34ca75d74b3833d399371c8f09f6745d0e43d46f7c82ff1b7d6c04467d083fc708348f35ae9bb9b78f2984a0ee55647d4c4a63c4f438fdec726e7d8228eaff2374b2300b9c35f4259e3452b2f53ee114bb8a6c0ea6fc89a55fef6673013d7dd4597660865423e978dd6e41e201bb3a584d6fe6f24e290613b677271603c558ee2021be29c4a06a057b2acc5bfd34898afac0d839079bbcb3acd43532563367ac8ae6c4379fb5fdcdab5fe55e1a3a521284209871216817338073cbc4ec9903725b788a25b5a6003b579b8f0e20d78be3d885557292971e65f4f1daefad2c5ccbca608b46406ffff25610c3cbae9f56cd47678f482e2c1f7cdfc5ce2a67c1545c1192f2ac3990f9c850788401469fbca801e73cd9efbcc6e44b2f414cdff5c49e706d699b5c0a75526f700c4e32611b826b2787f99532c02262a9c60e4b07a09377c38747c7f05e38b6db5d8cc625873af8fc5a7d362334c509f6bb4e36e1c9e08949679e0ed9f84e668588b9f1b21069bd5ffe263b1e6860c305d1faca4d6e4680ab6a6d491ecc97a904cc9c643e489d1a5f7d8a359bea93ba2d95bd3341d98d4918118e5f7b6fa6f603274c561f63ee337ad8d0017bbd1e17b5ce71a18c8572810029fe5d0ac2a661d8b346240c46f0223981cd53c067b65b579c144a4c918504888132a19a6a1702afb8646cf8fbcc5a4f5fbc0728f7bd7955138fc4919d78cfc5f2fd7dccf3a20896045698d2b7b70773412029db69c099fda38be5f37adc5bd00d0654716fd6b4b64fa48f7f11b5632bb63fa18718c1a24e0bad8d21f51f6bf3fbd3786a00c4e8f8536f6af28c9b8cd210bc0e82112f9943fc0fa81c08e456983cbdd8d08053c128e122da8b7583cb1eb"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r10, 0x18000000000002a0, 0xe2f, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x0, 0x700}, 0x2c) 7.104697051s ago: executing program 2 (id=1904): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0x18, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a7000000180100002020642500000000002020207b1af8ff00000000bfa1"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x19}, 0x94) socket$kcm(0x2, 0x200000000000001, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8931, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8932, &(0x7f0000000080)) 6.902925136s ago: executing program 2 (id=1906): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r0, 0x4) close(r0) socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) recvmsg(r0, &(0x7f0000004140)={0x0, 0x0, &(0x7f00000040c0)=[{&(0x7f0000000540)=""/242, 0xf2}], 0x1}, 0x20) 5.820457289s ago: executing program 5 (id=1913): r0 = syz_clone(0x20000, &(0x7f0000001080), 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) perf_event_open(&(0x7f00000012c0)={0x6, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340)}, 0x0, 0x0, 0x0, 0x0, 0x7}, r0, 0x0, 0xffffffffffffffff, 0x0) 5.81918172s ago: executing program 2 (id=1914): socket$kcm(0x2, 0x922000000001, 0x106) r0 = syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0/file0\x00', 0x116) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1d, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0xc, 0x9, 0xfc, 0x0, 0x0, 0x5d31, 0x40034, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000080), 0xa}, 0xc113, 0x1, 0x3, 0x1, 0x40, 0xfffffffd, 0x4, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffdfffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000033000000", @ANYRES32, @ANYBLOB="00000000000000002c000000000000001800000000000000000000000000000095000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r4, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0xc8a9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r3}, &(0x7f00000002c0), &(0x7f0000000440)=r2}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000980)={r3, 0x58, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x18, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="00000002000010c100"/24], &(0x7f0000000880)='syzkaller\x00', 0x7c77, 0x9, &(0x7f00000008c0)=""/9, 0x41100, 0x38, '\x00', r5, 0x0, r3, 0x8, &(0x7f00000009c0)={0x2, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000a00)=[{0x3, 0x8000005, 0x7, 0x4}, {0x2, 0x2, 0xd}, {0x5, 0x5, 0x8, 0x8}, {0x2, 0x3, 0xb, 0x3}], 0x10, 0x3}, 0x94) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) r6 = openat$cgroup(r3, &(0x7f0000000180)='syz1\x00', 0x200002, 0x0) r7 = socket$kcm(0x10, 0x2, 0x2) close(r7) openat$cgroup_ro(r6, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x890b, 0x0) close(r3) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r8 = openat$cgroup_procs(r1, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) socketpair(0xb, 0x2, 0x101, &(0x7f0000000280)={0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000b80)={r2, 0x0, 0x80, 0x0, &(0x7f00000003c0)="55c9868a32e7af186a3ad5fa7a218223a012fa9f9bca9bdb574e99dbf8e89a5e15b9281c8bc4f9ce01ad3d3b0fa749823377afeadfc1c6d6443b957595fd3595a99989fea8c00ca03b9435e514759edd2afe7762d5b14d0ec91fe74d9b3328b3efd13405e0bdcd2d8f75f5493361b7df7c97bca1ba60b0b9c9fd9109031e763e", 0x0, 0x80000000, 0x0, 0x68, 0x0, &(0x7f0000000b00)="5b0370955243e00fa9bdccb59516797f92f36ac95cb7d381a3dad5ebd5e8ae9aa944e24a5746d5e3167295806776fd6b605751f1625a94e2e5dda46efcd518c9640912d8ac4bfb8d4c8b91c29e65fa1ec5fe6045efb9bb3c5be700846c187c2dd10b9ca8db96a30b", 0x0, 0x2, 0x0, 0x3}, 0x50) sendmsg$kcm(r9, &(0x7f0000000640)={&(0x7f0000000340)=@qipcrtr={0x2a, 0xffffffff, 0x8000}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x108}, 0x4080) write$cgroup_pid(r8, &(0x7f0000000080)=r0, 0x12) 5.219357223s ago: executing program 5 (id=1920): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002140)={0x18, 0x11, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_idx={0x18, 0x9, 0x5, 0x0, 0xe}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000500)='syzkaller\x00', 0x9, 0x1000, &(0x7f0000001040)=""/4096, 0x41100, 0x73, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000002040)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000002080)={0x5, 0x1, 0xc4, 0x6d}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000020c0)=[0xffffffffffffffff], &(0x7f0000002100)=[{0x2, 0x2, 0x10, 0x3}, {0x0, 0x3, 0x3, 0x9}, {0x3, 0x3, 0xc, 0x1}, {0x3, 0x4, 0xe, 0x2}], 0x10, 0x5}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000440)={@cgroup, 0xc, 0x1, 0xff, 0x0, 0x0, 0x0, &(0x7f0000000280)=[0x0], 0x0, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x18, 0x0, 0x0, &(0x7f0000000640)='syzkaller\x00', 0xfff, 0x7c, &(0x7f00000007c0)=""/124, 0x41100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0x0, 0x1}, 0x8, 0x10, &(0x7f00000008c0)={0x2, 0x1, 0xb, 0x9}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000900)=[{0x3, 0x5, 0x8}, {0x1, 0x3, 0x9, 0x1}, {0x3, 0x3, 0x8, 0x2}, {0x0, 0x1, 0x9, 0x5}, {0x5, 0x1, 0xa, 0xa}], 0x10, 0x7}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000c40)=ANY=[@ANYRES32=r3, @ANYRES32, @ANYBLOB="180000000400000000000000dbc8b6ca18e94d0b368bfdcf3ddb4dcb7116fd9c8165c67dfe276cd0b3e4307b5eb723efd44edb13de7366b1be51c6d105a2f801d8c9596f3bbc5c2fd8d1961d647d9f208b62df9d1b6879919264871db0a23096ce4a00"/109, @ANYRES32=r5, @ANYBLOB, @ANYRES64=r4], 0x20) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002240)='./cgroup.net/syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000005c0)={@cgroup=r6, r2, 0x36, 0x2010, 0xffffffffffffffff, @value, @void, @void, @void, r4}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/189, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x2e}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r7) socket$kcm(0x11, 0x200000000000002, 0x300) syz_open_procfs$namespace(0x0, &(0x7f0000000780)='ns/pid_for_children\x00') perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x2) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x13, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x4}, 0x0, 0x5, 0x3, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xf, 0x4, 0x8, 0xc}, 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x918a81, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r9 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9c, 0x1, 0x0, 0x0, 0x0, 0x300000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x5, &(0x7f0000000040)=@framed={{0x25, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x64}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) setsockopt$sock_attach_bpf(r8, 0x1, 0x2a, &(0x7f0000000100)=r10, 0x4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r11}, 0x34) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x2400, 0x4) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="2e00000010008188040f80ec59acbc0413a181003b00000001010000000200000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) 4.947684579s ago: executing program 2 (id=1921): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x0, 0x20a, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x5, 0x5e, &(0x7f00000004c0)=ANY=[@ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0xed) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907003675f37538e486dd6317ce623900fe8000000020"], 0xfffffffffffffdfc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x248, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x40000000, 0x10005}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) socket$kcm(0x10, 0x400000002, 0x0) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000001000004ffffffff000000000300000000000000000000000000000203000000000000000000000902"], 0x0, 0x4a}, 0x20) sendmsg$inet(r2, &(0x7f0000000b40)={&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)}, 0xe900) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000500)={0xffffffffffffffff, &(0x7f0000000400), 0x0}, 0x20) write$cgroup_subtree(r2, 0x0, 0xfe33) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xc, 0x17, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000001700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000010000008500000086000000bf91000000000000b7020000000000008500000084000000b70000004000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$inet(0xffffffffffffffff, &(0x7f00000029c0)={&(0x7f0000000100)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000002780)=[{&(0x7f00000006c0)}], 0x1}, 0x4000040) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000001040)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1}, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) close(0xffffffffffffffff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) 4.277739764s ago: executing program 4 (id=1923): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x30cc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x7f}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000060000000800000005"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000001200)=ANY=[@ANYBLOB="020000000400000005000000430100001410"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000004a0850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x11300}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e00000004000000080000000c00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000005000000000000000000000047000000000000deb9009a8805"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc) r4 = socket$kcm(0x21, 0x2, 0xa) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000002400)=@bloom_filter={0x1e, 0xfc, 0x3, 0x3, 0x200, r0, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x0, 0x4}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000002480)={&(0x7f0000001240)="1ff7308a9574e1af6706588ecdc125779d0209078eed19e79e0324efbb8931086a26ead253bf4f4fa0716e6f4e94f0a4c9945f0de82ecffdb1969fe3cc919a5d4c3f1fc188d0fad602a06d7f48e946da3c712ecc678450a444a71c70e405ecdfb3724382799803bb1cbfa1d9936a66a95f225e3cff4d122431244498b8a9453b76b02f30ae06c6146f173cc557264c54e2294668183f9f2c5ca4707eefe2cdaa95f11e99aba596652db8460dac893fe3b3f46baec2f12c5e103381dfaf3020eba8bf1afa3db7ac3ccb8a171c6f47bebae4a248524ff0f30a0e11120669352e8dbba94eca907cbdbe47be24df3e87289e3454e72a6d08959e9fec21e2a3d0dee688d76724d69020499d89591680036e595103a8c705488ac0002202f3b576ea746c4265fa150905f8ef055c8e4cae7547ccd9dbeb532e8b333dcea5e5a323a5feb9a6be0c265ad094ef02c12acc6c34483464f146b5d1d69f045f73012479569d09cef2fbf9fb0bb5bd2541e2b53e7bdd3599f77a64588f4c3516bc90fae7d1a6ac8aab3a241de96832bb79add93c3abb7acea5e44e50440c107c845702b1f169cfc4f4024e5d373a0fed6f047db5e1060e98f6c2423fca971f9a0eb6b121ead5aa5befce1ed2862a56656db324ee123e9f8ab3582a043a4477d49b52b1e1d299c13421f4858f502ffef639d910f9f0c9c9352b32f5cea367c67468fc18b36295b982b1ef3120613d84f747fee5dbff9c1c542a122df63a091b27de2a7f7765afbb710fb170973632d3323e64c372f9b3867d8c65f44839c541cebf5c28d4b40a7a994848376ebed8d758ddbf1bdb9df7f240de11a486c0c3cfec052bd9d4e8544064ee87bb97813da55ded40c349f1f3a013d580e913e2aab9e214fc6be646e5031f6b4b39b4a72fbea3850a24eb8b9b3b0c979368f31b9bffd19e453e749a86fb9a8f2db4492647ad7dfbcd41498b2edafe915c869e017ce22b5d540a69959579521a6f5b46fbe756c073a12017cb4af80997ef1c31f6b84f9bfd265c6a2a88eecebb615ff019aa5bb49af378fd35b4c3079c3a3424bcadd46f7429bcdda386bbe8cfd6d88c34d11f0c82158657961589243173e15d7f727105d6f72e05c7a75b374e67c9d933059433444e723d31495203c35ea163a14443e539a89af100b55cd4471ce2b107818366adfde45073e85e62c3b551cc0d5ec4f83a808ff9c225cf5a64b4a2c4d05e4d2902862f482d3958e82cf4cf45588160a850a3b7adbd5e36050eeb89ef0cd1af157060abe12e12bede0bbe79c4e7e5fe6489292dcae94542f919beee39880a9ec0fc6ab273bcceebece145ff8be82ba7207f1f4698e795fcccfa8a579254bfa1230d12928547ca2e70cc7fc8ea9230fd12506e89f2bd77d5a343bb0c06992973c848d7629626a45693b30ab2a4fd2a26e00c9da46a670579b709ea976c5fcb9a4473f1de9ee4b21eb2ab1216a224546b2ec33337712d417079f350456788d6d8deb8fbe6404366320f90796c031dabda3085f52f45d7f27d74f848eef293a03b7cbf49a28abbcaeb88073deb8619cdf6ec63c6b146e62c6b1051f4d6b20a91550cf71f5c8e96de79f96c92abdcceeb862b5381fd94f7e9ab679a9c8b05772bb49f0c1315b16044dbc26b0233c3b44da06f7298355feba9ac0627422d389dbe3ddb23a405cbc2dc85200abd45affc57f7a3ecd63e9bc7fc32da739cdd80c88d8894604268388c87a9d24de39e393c0da1b62079f9d96a4ae999bc05336f1a50d3831d7559148df9846d37acaf27a198fb110e874bfc1d213ee6c06853d9ecaaa721ad4ee62f9841040a14908998e841f7f8987d5b73335d043922065811897a14dfcfe44b02bb254a08690f813c1fd871d605156510c93135ed70f06a86ad795f7523fef365fa9afa1aae2d6daa9f670fb0a57b27451176b2ba5fdfc91f5739da7902e91e475c6f519c84325255257b972b0325252336f216c861356bdee1631fca7ac6bf2fdd4aed6ec53bff2d4abb11ed47a6051666bd1822de4db43a4537b44e6d56e9a9474a0b6fbc780e3b9761b7785cb29ec7f09136ead5ac82150d4980f92a1c1e6cd51fe55ece43e236012935d93817ef2696c28cb7bed7d2aa0bec231117cc5a28ec2829f55836ca1b5518b45dad4b404359cff29d2b25e537323f59f87bc1fa07cb080e1f2cbff33b0493ca2741f4e6cdc5950efe956b22de578965050b2b03a23e62ced0b8eaf1ea42878d654e58d6097a90c88dc475151b6692a1baad67ab8bb420c5e8f8239467b0d45a6b12c8685a6b735204054599cc763aac83a2841a0bf830295ecc7682ed73c3679dad395b4b88cce944ecc99adb2bfd5a5027ea66698a6901a742cd388989bc94a4c0a90b96215bbee6b7b32e93ce8637d036e931c0e05245205fcad4ce083b2317141e9dcfd5b25a5d64922b19cdec6daf98b84134a66a8ba27c818851009375d47b27b0165680867ffb5a485a61b6c842ec4ec8506a7185f8baf29a86f8ac5b95a94d2b46d1982f5037866e67da93f4d702b216031fdff0fd5b70d4e28f29e346ceba5cc104fee282bc0a40bcc98c282b69aa2d73556e685ce233a55febf840867e04046ded28fc8ad6eb5a0c3b150babdba86d6402fffe003a739db7b361a4b041f864c9adf30685504bfc811258f508b9f9f7009c6f7d66948fde810e6d324401fef84d69fc694b6424880c6888a23682f83c1770d2d552536e06bab49dd35f658cfa309abf577297ac54e602e931b7a2b40f05301c766d13245dcdfadd36dd4c5d2f4337920ca5ff29ea2b07e2b426013265f93e264fde8fb6e75094651870d4bddc7726bc33ecd7e8606ab41f5eef9a3a578e6044ee4cbafa87931572a310e9f2642f0e839464456f2de0beacfac8ec92f67290dc08ecc946c206c8920b508aa079079556cac6a9de85e22c0f230d62ec2731e1e95db1c59e4042e5ff65604359d0c335e2262633b4deb14b0f095852d82cf096171d54c0a006af25f073b8f61cebc734f59c292520abd0f70d591f713c0030d1bc13334543860114dc7f37fca0c7bc95ab6e13d2b76d360b73723d7004a136b037cd2235560fca93f6eef18f5902b7a8396099c869896c4c555880c71118af5060a84f952c1404ba5d55437f0a0e7a7882217cb2adf1d407a761d9626669277360f0d91b82175eee6e8061605c7eeec5286b3ca82a92134eeeb6405b3b2667e0286476ba1071ea2748c41f99a5d179ea1e2aa600e88d56194d43daf91ab3448254a3f42e193d351be2c40fe68962cc25eb396c7ef45f8ff23641a309cbd51f7220f84647322f8676a1e49e3512027db26868580b0ef8a1f8ad4152ae0caa3b35bbdae018ce3bd75da6a5b3a57d1efe89c66754db2f08e04219c8756a0d1f0ba625f2f89afa023af9da5327dacefd042eb43ed03d86ff4f8d3c08e9e12a131c2bfd0750477817592e4bf9f14274718e5eacc1a30d8f624be09fa1ca99fcbd04b6a6399b0c65203dcef0069a792bdbc6a357e5f89a92ad265db0650f3c770babeaf6e9b60c912eff413aec62d75ab4d324ddac55fea38e7fe691a5025a9c73eec19b7abfabafe446b0214d1bcc556bc127379afb220ef774d3580066d3a9aa0295618c3eca5eb68834502b9038295dead68ff9a31e18454417d008c5414c82a1f375cac9236645f3f40ba71661e543fcdca60cd02fa89de4a6d5917ed98ca163c2a0b4235293a10e149bbd2a45123cb8beca1f1f5045aefa84576f91469bf0afda91b2309b9d35d1724e6a5216e415b46271ec9cd61fdd2f4a1de8b5140100dfee8b65046e7dc8e44ef39d4b42b1ed49fe51233b052529626938a34bc96f6508a57c018244143f873c535797e685c4f1fa53cf5ebbb736184a271078d6795cac82b68a2b3b2093c102dce862af0334a0575809bb6d79c73973b4775c677990650af1ffe1ac0e6d2275d583355b5c531b2822344228341c319c09a2152de505bc21cf8630273612b2d1289b8071e2232385b6dd3eebbc32be3095298df7a251d14bc7681525357634b398326821c03b48c95eb273f3b57993e2aa4b0251884d2325401cc6e1a092c42d6af52b24ab068b82ed46b50ce0e9bb5b5876b745f856be0c61bf4d398d7acadc4866561aa868169a14fd3125fa2d2807b4f1731eec0387d45bb834cf06a654d02ebb1ec8177fb24756e37012671fc09290464b58ecec2304d8313c0a41fd87090eec49c9e86deece0dd0dcb14cf582a104c8c2a505916b17ec4b6959bef230f29d4feb46d47e8a61c087c7b13b7021fe0bc6c98cc31f5f9e5ea8503484d3f6856ca5bad1d807ef11cc950d710f594dc1179f1d32196109c161be40a84971ea22a3a31b4108aba81307c721c3d55d6f633637d8f87c8e0d196e6ce9d01abc73f81cf701e7ac7575aff81d67b8b3b55dc6599a8d0595affde3431d5d22d8fc2ab530c61857bd49745bbf3c3fd4d915651d2ed1c8d4cfad9bec0e2b1113c3691d0b86e8aee0a2e32d4d0605dd657fd2929be50da8a29d495b8b65dd20976aee2233aeca525961e9e02ee12be7dc6dea4c2962ad95ab697a4153fc7a3603b476335c50ba8b5d94a5abee23f88281b83b81de789f32e4b9974780803e6c7ae61d67d00b57dfa6babaf3dc0389228937ed3c4ddb5364ed47b36c15c6c4f545791fbf159b56087b7a0c1eb0c19aad765de73c2e29b86f2937e1ad6b124ed921b19796a019af85a2f60b5b5d91c07af8de61bc12321b79959db52d5f9e3303425696604c4b98e7dc2c1ce566222ada6397542f2870785e7a78117f67afdac97526d52b32498ff6e958b0d71f178546913f0999345745f4fe5c7a6b43e2f06476e78be68eb9ae43abf7f23252ca4d17ce458199b23513e05032742ff5b61b2a12dcb3862bcd4d2f69dee512b93dd8d1d611fed0cd7fb01cdaa7850e204ba70d876e3217b71e8dd240b1f4fc2e9ab18617ed6fd18cd2070084b452b20dad71310ffb8318ca45cfbadb4ccf325c7db16366a70e241cc17f75cbaa428f4e94375828308bbe6b09f91b7b6df9fbc3f937d75d643ab24f5ce6aef5689e11f6e2fda4ee74e4f14a1b7381579625afbb3cef00251633389a69db548b34612248a8fa1938eb0e545a621e614e132717eee665e53eb378956b121425aafc8bbb440e735e5f368dda9bcd2a49378268224cfcbc4bd9cf739742d166c10f4b627138dd582d9003292b3cd77386fda9058d730b04b339d357ee1dc691a6bf3a050ba1bfb31d318ab97ab5aa37fb8cc5a72327121dd4dec83979e0c65a52c418dbc956d79bfba9d33cb300949808da241be0cd5c8a7ce79cd44f4589e761a1ee4de10a5aabc449800a7b587481e8a367e1a0b8128ad6b0e18e1efdd8ee715825a85b973a9e49ce54c942d3e614d9d7b48a71707a7b13c6127db421199fa584f5af4cf73d2f3a8bd39896020ae844439b138c35ee647f5d2af5c36aea4d583beedea530f9a86ae6437e0344f249820f45273e25d1cb845126275c30adc60ba8017f3dddb3dcab5f5e728e30c21b909fb71a3c7cdebceabc4773bc03543c53801830d3359ad6ddfd706514b0f15709b81aa6bf02f858510cf1c03c5e57510823b3d7642ca70e460ad033a43ab6ae6ed2dc1f6b2ecc9916b485b9e1ea2e09b2739d450fd301dc92fab4f36bc36fbc44ab74effbe0db1d2d3ab26d700a4588966554905ec3bec0016372836208f4cc935993219fab5772790aca1abdb16c55d21a1796d656d43d9db36468b9eb4a0758503d37619970", &(0x7f0000002240)=""/90, &(0x7f00000022c0)="c28402ef805cc3abbc17880381f82a35d3aeebe05679f2dee6a9c34728fba524690a0a6cf8964d203aa620747be042c00939a529a50a203a23e25d0f11f5689ac5c467142c52d576d25c2af3b4dce5936529c94179a2fd4236148b390f9910c2eb177111f83dc9111f7a83ab5ea138bdd777d593eaa6c8eb10259afbf430a8007e8c46e23d1a3dee68fd12903c1b461a9e7cb99f1b4b", &(0x7f0000002380)="928c4cf982659eb74fdb596a5e97637aa22bf94d415f55af15784134dbc0910b8f4db5626e4b363d2931cc8f0ee627d93909ad3164dea9477ecc863f6ae20469c771fad5bb61a1299a9a", 0x0, r5, 0x4}, 0x38) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x10, 0x110, 0xe}, {0x18, 0x110, 0x1, '\x00'}], 0x28}, 0xfc40) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4020, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0x1104, 0x0, 0xfffffffd, 0x3, 0x1000, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x9) recvmsg(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000005c0)=""/227, 0xe3}], 0x1}, 0x40000001) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x19, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 3.798289095s ago: executing program 3 (id=1925): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, 0x0, &(0x7f0000000440)='GPL\x00'}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x30, 0x7f, 0x86, 0xfffff010}, {0x6, 0xfd, 0x3, 0xffffffff}]}) 3.482499832s ago: executing program 2 (id=1926): r0 = syz_clone(0x180000, &(0x7f0000000000)="70ced6c75b30e658a1f19beb645a67707fc8d850feb7aac4bc8fe6ed2ef5c0271a0ff5b013bf0b344c52a1d158d8212138778cb5240d004ff8558cada06090ec12c9087e1f9b4b171ba7df9e011f5888eabba99433b25e755ed0502fda3f245cb977a061f9241359d5abcb470c5b40f1cc1e3dfc06e7d209bf68", 0x7a, &(0x7f00000000c0), 0x0, &(0x7f0000000140)="5ca1e193bf1695d42948a82dd6073e7c2290db1619d4a5de29d272f3c8d8ea52e2ed8aee20f93193466a8997c0433caf048e887173576a0af8ee0309691b92fa9b96ac8043dfb4a2be8b0ce23134b020cd366837fe84f61b9b9530133deb2b765aba3cf8787dd42b0bae8b1af0a7c049d150b48c35d69c4eff2ec0dce9a7138a29d4bae31dcd848d85e0dbcbd4c6117600329918a473b277438f9a47") close(0xffffffffffffffff) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0xf}]}}, 0x0, 0x26}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x248, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x40000000, 0x10001}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0xa, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89d7, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10210, 0xfa8, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40305829, &(0x7f0000000040)) r2 = socket$kcm(0xa, 0x6, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x10d, 0x2, &(0x7f0000000040)=r3, 0x17) r4 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000900), 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x1, 0x40, 0x5, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)="1f43", &(0x7f0000000300), 0x1003, r7}, 0x38) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000b80)={r7, &(0x7f00000014c0), &(0x7f0000000b40)=""/31}, 0x20) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000940), 0x8) sendmsg$unix(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000200)="9070d5ab9dfa2d51d4dbdd6bf1ab2bb21b94ca585de97c44c621ad7ef68d7d0cbf26f65253a63e925b439834811250aa0482596a1880efbff31503a239e5a927165bc3007883e6efa6da97be524eb37847736a2d98d7f2323a3db8298c8a155307ced00faa36bde53999913cf3df6b2b9696", 0x72}, {&(0x7f0000000280)="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", 0xfd}, {&(0x7f0000000380)="f49cdc7ba9814d3ef86168ed557ac770967c6dc6c7b897268e57d970d7a9", 0x1e}, {0x0}, {&(0x7f0000000740)="ceff9683838e586353513c094b3d9d", 0xf}, {&(0x7f0000000780)="937eef9040450124493ce97a631340145b44b2e1953e803f6d82a49c041b13f2a3bf95433d0ed473f0b4ffbd6f4d3cfb1a43b674cc85f963b2dae9c305c5f8d8cdf4c05504fc6af9a2999d8100f0e1d3550df7cf060bdeb898d24054c3282717cd330ced753bd7e11e47598c03d4a4f8d121dcbee7a5fbbdafe541cc3de582828dcf8b63d5923b891d0551043770f38578f2eefbdb8ed0a76d8d956f20134d4e84b83a1135bf69f843c91fda050348e51c28b2516dd325da976a56df709c51f4fde5796d4844ee734ee2fd2c1c5a26888851300f19f959422df8110e9e1d7fd949fc815e8023aeebfe56d7296f20326684af2cb197", 0xf5}], 0x6, &(0x7f0000000980)=[@cred={{0x1c, 0x1, 0x2, {r0, 0xffffffffffffffff, 0xee01}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [r4, r5]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r6, 0xffffffffffffffff, r7, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r8, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r0, 0xee01}}}], 0xc8, 0x4}, 0x20000015) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000500)='\t!~&\x00\xaeH\xfc\xf7\xf7\xd4\x1c\x94\xcb\r^\xd6<\xda9\xdc\xac(\x8cj\x13hk\xfc\xa8\v#)\xddk\x93\x12\xbfh\x95\xb9\xb7-:\xebr\xf2%\xaf\x8fH\x89MO\xf7\xbe\x1b\xd7\xd7S\b\x00\x00\x00\x00\x00\x00') r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)="5c00000013006bcd9e3fe3dc6e48aa31086b8703040047887ea60264160af365040004", 0x23}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002f000b08d25a80648c7494f90424fc600b", 0x15}], 0x1}, 0x0) r10 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r10, &(0x7f0000000040)=ANY=[@ANYBLOB="934300004300"], 0xfe33) recvmsg$kcm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000025c0)=[{&(0x7f0000000140)=""/117, 0x75}, {&(0x7f0000000900)=""/249, 0xf9}, {&(0x7f00000003c0)=""/30, 0x6f}, {&(0x7f0000000340)=""/8, 0x8}, {&(0x7f00000000c0)=""/10, 0x13}, {&(0x7f0000000540)=""/263, 0x107}, {&(0x7f0000000240)=""/200, 0xc8}, {&(0x7f00000011c0)=""/172, 0xac}, {&(0x7f00000036c0)=""/4114, 0x1012}], 0x9}, 0x10000) 3.11592428s ago: executing program 5 (id=1927): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x15, &(0x7f0000000040), 0x10) (async) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x1000000000004, 0xffffffffffffffff, 0x0) (async, rerun: 64) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x105c31, 0x11009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x10, 0x3170fd8a}, 0x101c, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x2, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async, rerun: 64) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ceb71c0010ec90db133c22a690ae708000000000004087"], 0xfe1b) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="0000186df4b1768c36153d42", @ANYRES32, @ANYBLOB="1c00000000000300000000000000010045"], 0x0}, 0x90) (async, rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x100, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) (rerun: 32) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) (async, rerun: 32) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f3, &(0x7f0000000080)) (async) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="140000002e000b12d25a80648c2594f90224fc60", 0x14}], 0x1}, 0x0) (async) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000840)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000380), 0x12) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x2c, 0x1) (async) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000002e000000760000000000000027000000000000049500000000000000"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000001e0000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000908500000071000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8fffdffb702000000000000b7030000000000008500000070"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62f, 0x0, @perf_config_ext={0x1}, 0x10f380, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="0e0000000200"}) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) (async) perf_event_open(0x0, 0x0, 0xffffffdfffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x20, 0x12504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_config_ext={0x7, 0x7}, 0x7602, 0x5, 0x0, 0x0, 0x100000000000000, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r6 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700760409"], 0x50) (async) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x890b, &(0x7f0000000000)) (async) r7 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r7, &(0x7f0000000b00)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x6}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000280)="62031f00d7552f056510120800afbcf7916df67d3dbd11e12b7f96e5521c8cf217300100000093c1", 0x2a}], 0x1}, 0x4084) 3.014292643s ago: executing program 3 (id=1928): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0x18, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a7000000180100002020642500000000002020207b1af8ff00000000bfa1"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x19}, 0x94) socket$kcm(0x2, 0x200000000000001, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8931, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8932, &(0x7f0000000080)) 2.816845567s ago: executing program 5 (id=1929): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = socket$kcm(0xa, 0x2, 0x73) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000005000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x0, 0x0, &(0x7f0000001140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x15, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4d31, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x830d}, 0x100600, 0xfff, 0xfffffffc, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x37e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) recvmsg(r1, &(0x7f0000001840)={0x0, 0x0, &(0x7f00000016c0)}, 0x2341) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000000), 0x8) recvmsg(r0, &(0x7f0000001fc0)={0x0, 0x0, 0x0}, 0x40010042) r2 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000011c0)={&(0x7f0000000080)=@pppoe={0x18, 0x0, {0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, 'wlan1\x00'}}, 0x80, &(0x7f0000000640), 0x0, &(0x7f0000001200)}, 0x0) sendmsg$kcm(r2, 0x0, 0x8000) sendmsg$kcm(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 2.738369349s ago: executing program 3 (id=1930): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x489f}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001080)="63c22f2e5551262681db986e1cadb870072e6cd059cf7822e6f8282bf167785451683427e2beffce3507b2f1d7b4b4870f10b57baf8ef1378adf587b2160ba", 0x3f}], 0x4}, 0x4008090) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/uts\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000040000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x6, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff0003, 0x0, 0x0, 0x0, 0x40}, [@call={0x85, 0x0, 0x0, 0x7b}, @call={0x85, 0x0, 0x0, 0xf}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r0, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000600)="3db024bbdeb81dc47a133a5c6217b94163d5e87fd28c9e11e43c25876e7dfd77368fec2e9c05be6fd304f19d0655718ae32ee0745ac29f29219422ef60e026088a0aca41d5e4d96639922c94178395c1c7", 0x51}, {&(0x7f0000000980)="964056eca893d0f82852f32230b74e3b87bcaa66ba9a1161f9e8b8b7c8c3a919e6c9555d49f41272d3a4e549408e14a24163c951498b90ad500599a46666f0446aa05e115eff7d1be86a2d46bfae932295f342cf153b30d1bb4b5b5782f80d5020b55de615cfd593fcdbdb822cb16e4a110c38bfa150d2542b9678a439a403932bc28d2110761df6c36ea683dcd9e37180eff047a7ff13bc81c83febaaf222213c358eeac8161b2759ab7779a68abd367e4af619c94c", 0xb6}, {&(0x7f0000000a40)="b3e1c0d0d92e48bb5f4b63fb345c", 0xe}, {&(0x7f0000000a80)="016cea2ac81a987ee85c2690840691c1cc738062d36fe20eced53f927a0b12cf", 0x20}, {&(0x7f0000000ac0)="7a1274a7525c4e87117d06aa175103bed92e65cae6afbe1059f7a39c97f6145e0d8d96e1dd94d4e4e69ab7be6f92e147e0b6dfb4627bffa57cb6bd6da3c95fdcd007910d32e3b9feb7a74e320c826840fecfcd7595323cd43490baa0eb26", 0x5e}, {&(0x7f0000000c40)}, {&(0x7f0000000cc0)="74a50001f479f4fd60d2d62f6894c1e624cf3c1b19060479081fc1053dbbecabbf322c66944cc10a24ac16c4a6006baaa3ef004776fe8264889cb8a506fe05a5142c87c132af174973c54bc88ab549ff418c131a850bcedb0c8c63", 0x5b}, {&(0x7f0000000d40)="d24bb55abb55d859e9478c602280ef79100a6d0934bbe7c871330f53e473d24f03961abc12df2eac8e", 0x29}, {&(0x7f0000000d80)="54ac5c044e20a6072e58140d730a40a5b14efb6ccf01c8a83e35aced32c93e840dc0f31f2b5a65a2605a654d022ce41b0690d63e3ea1eac21e62bb7095e7cec2", 0x40}], 0x9}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d030000000000000000000002000000000000000040000009030000000000000061008419a4a5938180dad568c98ea25bd4039527e439"], 0x0, 0x52}, 0x28) r1 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x0, 0x32, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x3963, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x22, 0x0, 0x0, 0x8010, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0x0, 0x5}, 0x8090, 0x5, 0xfffffffc, 0x0, 0x0, 0xffeefffc, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000c80)='ns/cgroup\x00') sendmsg$inet(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x880) r2 = syz_clone(0x80019080, 0x0, 0x0, 0x0, &(0x7f0000000300), 0x0) syz_open_procfs$namespace(r2, &(0x7f0000000400)='ns/cgroup\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x1e, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0xa480}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0xbf, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280), 0x4) 2.68974412s ago: executing program 4 (id=1931): socketpair(0x1, 0x5, 0x0, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x14, 0x4, 0x8, 0x8}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000500)={r0, &(0x7f0000000400), 0x0}, 0x20) r1 = socket$kcm(0x10, 0x2, 0x4) recvmsg$kcm(r1, &(0x7f0000001040)={0x0, 0x0, 0x0}, 0x40000040) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b11d25a806c8c6f94f90424fc601000407a0a000600053582c137153e37000c11802f2ff4070300", 0x33fe0}], 0x1, 0x0, 0x0, 0x35}, 0x0) socketpair(0x1, 0x5, 0x0, 0x0) (async) socket$kcm(0xa, 0x922000000003, 0x11) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x14, 0x4, 0x8, 0x8}, 0x48) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000500)={r0, &(0x7f0000000400), 0x0}, 0x20) (async) socket$kcm(0x10, 0x2, 0x4) (async) recvmsg$kcm(r1, &(0x7f0000001040)={0x0, 0x0, 0x0}, 0x40000040) (async) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) (async) socket$kcm(0x10, 0x3, 0x10) (async) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b11d25a806c8c6f94f90424fc601000407a0a000600053582c137153e37000c11802f2ff4070300", 0x33fe0}], 0x1, 0x0, 0x0, 0x35}, 0x0) (async) 2.138396762s ago: executing program 3 (id=1933): bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{0x1, 0xffffffffffffffff}, 0x0, &(0x7f0000000340)='%pB \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x8, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0xd}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x500, 0x4000000}, 0x28) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000400)={&(0x7f00000000c0)="b3d9450fc6c0d3ac8d463cfa8389cb034a0bfc666c0778fc9988ae99e156c76dc3607ac1784f0e3add427772515287340fc308687bafa6246f0cb3ef770ad6d110eea08684ef1ef3e60e8a08b7cc88af6abe38b8090e1d21e9fb8871356003a2e9f5cf536678e00bd15ea3939c024c927e6b01d38374b0be3ebe89a294fe29c83e3cb3e840b412f5e46ebddb7546a16bfc7a8970405519324d7266ce3187569e83aeb23ed5df546d4bf444801a6df6db4ef05a4ddf58c5d2425ec11c5756301fd3c0", &(0x7f00000001c0)=""/8, &(0x7f0000000200), &(0x7f00000002c0), 0x10001, r0, 0x4}, 0x38) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000380), 0x12) r4 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000580)={0x0, r0}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@bloom_filter={0x1e, 0x4, 0x4, 0x3, 0x14024, r0, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x4, 0xd, @void, @value, @value=r4}, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r5 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) write$cgroup_type(r5, &(0x7f0000000080), 0x9) 2.031409394s ago: executing program 5 (id=1935): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = socket$kcm(0xa, 0x2, 0x73) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000005000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x0, 0x0, &(0x7f0000001140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x15, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4d31, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x830d}, 0x100600, 0xfff, 0xfffffffc, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x37e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) recvmsg(r1, &(0x7f0000001840)={0x0, 0x0, &(0x7f00000016c0)}, 0x2341) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000000), 0x8) recvmsg(r0, &(0x7f0000001fc0)={0x0, 0x0, 0x0}, 0x40010042) r2 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000011c0)={&(0x7f0000000080)=@pppoe={0x18, 0x0, {0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, 'wlan1\x00'}}, 0x80, &(0x7f0000000640), 0x0, &(0x7f0000001200)}, 0x0) sendmsg$kcm(r2, 0x0, 0x8000) sendmsg$kcm(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) ioctl$SIOCSIFHWADDR(r3, 0x8b1b, 0x0) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @multicast2}, 0x3c, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838029f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x34}}, @ip_tos_u8={{0x38, 0x29, 0x3e}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @remote}}}], 0x50}, 0xff00) r4 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r4, 0x1, 0x24, 0x0, 0x28) perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 1.78938643s ago: executing program 4 (id=1936): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = socket$kcm(0xa, 0x2, 0x73) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000005000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x0, 0x0, &(0x7f0000001140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x15, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4d31, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x830d}, 0x100600, 0xfff, 0xfffffffc, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x37e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) recvmsg(r1, &(0x7f0000001840)={0x0, 0x0, &(0x7f00000016c0)}, 0x2341) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000000), 0x8) recvmsg(r0, &(0x7f0000001fc0)={0x0, 0x0, 0x0}, 0x40010042) r2 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000011c0)={&(0x7f0000000080)=@pppoe={0x18, 0x0, {0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, 'wlan1\x00'}}, 0x80, &(0x7f0000000640), 0x0, &(0x7f0000001200)}, 0x0) sendmsg$kcm(r2, 0x0, 0x8000) sendmsg$kcm(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) ioctl$SIOCSIFHWADDR(r3, 0x8b1b, 0x0) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @multicast2}, 0x3c, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838029f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x34}}, @ip_tos_u8={{0x38, 0x29, 0x3e}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @remote}}}], 0x50}, 0xff00) r4 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r4, 0x1, 0x24, 0x0, 0x28) perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 1.230850092s ago: executing program 1 (id=1938): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, 0x0, &(0x7f0000000440)='GPL\x00'}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x30, 0x7f, 0x86, 0xfffff010}, {0x6, 0xfd, 0x3, 0xffffffff}]}) 1.050713716s ago: executing program 3 (id=1939): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2f, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xf, 0x3, 0x2) 991.540968ms ago: executing program 1 (id=1940): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0x18, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff0000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a7000000180100002020642500000000002020207b1af8ff00000000bfa1"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x19}, 0x94) socket$kcm(0x2, 0x200000000000001, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8931, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8932, &(0x7f0000000080)) 789.174242ms ago: executing program 5 (id=1941): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x7, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, 0x0, 0x0, 0xfffffdff, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x8309}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000011000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x1002, &(0x7f00000014c0)=""/4098}, 0x16) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) syz_open_procfs$namespace(0x0, 0x0) 710.458654ms ago: executing program 2 (id=1942): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0a000000040000000400000002"], 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030017000b63d25a80648c2594f92e24fc60100c", 0x16}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0xfffffffe, 0x5}, {0x2000000, 0x5, 0xffffffff, 0x2}, {0x2000, 0x2, 0x1000a}]}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32, @ANYBLOB="8752000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, 0x0, &(0x7f0000000040)}, 0x20) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe000032"], 0xfe33) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) 605.686866ms ago: executing program 1 (id=1943): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xa, 0x3, 0x4, 0x8}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0x2000a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x50) 558.830777ms ago: executing program 4 (id=1944): perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x880}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd00}, 0x48) 381.707691ms ago: executing program 4 (id=1945): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = socket$kcm(0xa, 0x2, 0x73) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000005000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x0, 0x0, &(0x7f0000001140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x15, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4d31, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x830d}, 0x100600, 0xfff, 0xfffffffc, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x37e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) recvmsg(r1, &(0x7f0000001840)={0x0, 0x0, &(0x7f00000016c0)}, 0x2341) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000000), 0x8) recvmsg(r0, &(0x7f0000001fc0)={0x0, 0x0, 0x0}, 0x40010042) r2 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000011c0)={&(0x7f0000000080)=@pppoe={0x18, 0x0, {0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, 'wlan1\x00'}}, 0x80, &(0x7f0000000640), 0x0, &(0x7f0000001200)}, 0x0) sendmsg$kcm(r2, 0x0, 0x8000) sendmsg$kcm(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 381.252341ms ago: executing program 1 (id=1946): r0 = perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d649379071c33390e418ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fcb4e0b6eab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afcc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab2e4b380a00d72bc0480f949c479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a662d8bc9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e558d17879570c8ad943e392955f4f979ea13201bafe4f0f6ea508000000a0c548552b571bed5647323c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151fcda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ecec37e83efceefd7ca2533659edc8bef9cb85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d350000000000000000e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e5a61561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a2946501559335781092cf8ce987c56cd31121624d7455f2a3666276c3c0e812b28e2f30d035cee5d0e77a3c72208ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463aaf28345bde0c195bc9f022ca8ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262d0af3246eb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a0600adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a8f27e02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cd50feeb7bfad9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5631820420b75b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff201000000000000002e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa66237e0dacc107f532348cc2116473381e961f3d988c21578fe3245097c280abe51427b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d174b0000000000000000000000fa08ad0731ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282b6caa2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae0533496b6d58da50ee80a6b9a7438a58c5465113f668eb4484350048289d07dbef325d3221a7cb35f812f257941a9781e3214c2a3dcf89d99844b762a9cf17548c54fccad2c7ae8072b82e0880815daf966bd5343c1635e123f868a7167cfcff33320253af570f4ef9c0254afdd89ac3943562b530dd88da8a94013bbaf204bebc38055adc39f07f7c22711f4d1f6dcc928d1578a093c072e0b92babc76f47ee367e745a024a2278319d9a4d1378482b74c516647652bfb6e93002494a5cd74e2a9a4734487062437da23e1efa6ef7674108aaa3ffac859c3577c2637bb3bdc69bc365b1f20dba96b8acca62f3f80045318de0facf2ed44b814e842c2a520159bb6c320cec0910c0b8bd3d547bdfba2e0bb24d117ed0388afd37affbad2f9c77c9c1314a16ffe64f5e3744a2fffd7039670f5706e589a4c38680a377f8c26e6e382067f690089f34b13ee0633a171c7918401acd4575f1443815854f775308c083ff4f4046cfca8bca48e6db6b211113c06797722230af92290231a0f02e247cf96876257dac9ff0b8f07ff5916a8ccd3f15b389d34520f074c6f006e0383280bf0b9765c995ef1e696a1da41d9372a1c9d85f1a83b6213b5fb236fbeda8fb90dee70ca3cfc0833741a0e9341ab4dee09669b832840fef5a2bbebd5957503656c445a428efc5711d1c66093b360c63e63e91cb871f8dc43a915ec87be492daec18847de7032d5c97d0296a1fa97d17f"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0xe3, 0x0, 0x0, 0x7, 0x10000}, 0x28) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffff9}, 0x0, 0xc8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="9fedcb7968ddc36c8f263408"], 0xfdef) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0xfdef) 295.891693ms ago: executing program 3 (id=1947): r0 = perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x200, 0x80220, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x411, 0x1, 0xb, 0x0, 0x81}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2f, 0x10, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0xf, 0x0, &(0x7f0000000780)) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x7, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x9, 0x0, 0x0, 0x0, 0x69, 0x10, 0xb0}, [@ldst={0x4, 0x0, 0x6, 0x9}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x49) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x16, &(0x7f00000006c0)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000002d0301000000000095000000000000006926000000000000bf67000000000000150600000fff070067060000200000006a0200000ee60000bf050000000000003d350000000000006507000002000000070700004a0000000f75000000000000bf54000000000000070400000400f9ff3d53010000000000840400000000000073720000000000009500000000000000db13d5d8b741f2cdaabc8383caf56b8c2b84a8d09535a157f9005bd38addaa65b925cd3ded25b8b9e2a095d2c51ef45c5588ec78c7f32946b17cecfe54c53ab530c58b67851b7e0e82452a083b98a6aa766401047d150203b0417edef332233b081df18961d6822d133bf72a4de1c2ea17f04537fc211576846ac629d1d93265ba4580047a9dc88de358ce795731891a2031de4e09740c64e5506f991ed4785a9773a433e0db9c1a7d4ab9d658ce9cfdb4db3bed62bcb2bc91ddcdfadfe6d4421c49fb6641cbf56914e76702f673b586c767562a90a3967093b000e3806f825f1d0da2a304e06543b56d35235d78b7a7fe912971aab876022e96f5143b6234f5a6b701690b07fb664a44e22b72e843e7cf55f394cf75d1cd3ee79a25fb98cc45b3fde43e42e150d4a2fddd9a97677400ef0bd697d135324ce480c2960344de346bd511dea4ff7a07400b2d12dd1a8c4c300aee5f948777085ca142b79dfc3aca5fadaa0532ab0572169f68584ff2ee063bc7e75ecd5cc8973464629ba236e3ff97f6033d0800000000000000cef54a60aff12590a50ef147e3e640193d00263003a4ef412420a070dd0327e47c8c7abb77b4b53874788d7e2e5d554de4713db957afb56d4673f1b904c5a317d3670003000000183fb7d36e173044080034"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffa0}, 0x48) 160.038207ms ago: executing program 1 (id=1948): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffdbb}, 0x48) 22.22645ms ago: executing program 1 (id=1949): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x0, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="1806a69595113e32099a9a7116860afa020000000000000000008000850000007500000095000000"], 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x101000, 0x7, 0x8, 0x0, 0x0, 0x2, 0xffff, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x400040, 0x0) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000100)=r0) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000000000000000000000000085000000500000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)="d800000019008111e00212ba0d8105040a600000ff0f040b067c55a1bc000900080006990300000015000500fe8081780d001500030001400200000901ac040000d67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$PROG_LOAD(0x5, 0x0, 0x0) 0s ago: executing program 4 (id=1950): bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{0x1, 0xffffffffffffffff}, 0x0, &(0x7f0000000340)='%pB \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x8, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0xd}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x500, 0x4000000}, 0x28) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000400)={&(0x7f00000000c0)="b3d9450fc6c0d3ac8d463cfa8389cb034a0bfc666c0778fc9988ae99e156c76dc3607ac1784f0e3add427772515287340fc308687bafa6246f0cb3ef770ad6d110eea08684ef1ef3e60e8a08b7cc88af6abe38b8090e1d21e9fb8871356003a2e9f5cf536678e00bd15ea3939c024c927e6b01d38374b0be3ebe89a294fe29c83e3cb3e840b412f5e46ebddb7546a16bfc7a8970405519324d7266ce3187569e83aeb23ed5df546d4bf444801a6df6db4ef05a4ddf58c5d2425ec11c5756301fd3c0", &(0x7f00000001c0)=""/8, &(0x7f0000000200), &(0x7f00000002c0), 0x10001, r0, 0x4}, 0x38) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000380), 0x12) r4 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000580)={0x0, r0}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@bloom_filter={0x1e, 0x4, 0x4, 0x3, 0x14024, r0, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x4, 0xd, @void, @value, @value=r4}, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r5 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) write$cgroup_type(r5, &(0x7f0000000080), 0x9) kernel console output (not intermixed with test programs): nk becomes ready [ 66.567450][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.576551][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.585418][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.595072][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.599798][ T4233] Bluetooth: hci3: command 0x040f tx timeout [ 66.606880][ T4188] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.618434][ T4188] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.623608][ T4233] Bluetooth: hci2: command 0x040f tx timeout [ 66.628079][ T4188] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.638891][ T4233] Bluetooth: hci1: command 0x040f tx timeout [ 66.641968][ T4188] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.662396][ T4187] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.671420][ T4187] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.681016][ T4233] Bluetooth: hci0: command 0x040f tx timeout [ 66.687047][ T4187] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.687790][ T4233] Bluetooth: hci4: command 0x040f tx timeout [ 66.697450][ T4187] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.729336][ T4190] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.738063][ T4190] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.747154][ T4190] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.757454][ T4190] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.784670][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.796420][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.819546][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.827956][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.841124][ T4202] device veth0_macvtap entered promiscuous mode [ 66.858627][ T3058] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.867851][ T3058] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.888247][ T4202] device veth1_macvtap entered promiscuous mode [ 66.947201][ T4202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.963519][ T4202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.973859][ T4202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.984584][ T4202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.995291][ T4202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.005791][ T4202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.017140][ T4202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.027735][ T4202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.038877][ T4202] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.082850][ T3058] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.091780][ T3058] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.104744][ T4202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.119756][ T4202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.153153][ T4202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.164400][ T4202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.174468][ T4202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.185172][ T4202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.195365][ T4202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.206086][ T4202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.224993][ T4202] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.256954][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.266520][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.276017][ T4243] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.277992][ T4202] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.297683][ T4243] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.298900][ T4202] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.322247][ T4202] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.334739][ T4202] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.359527][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.367385][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.385757][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.394690][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.434926][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.454129][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.464878][ T4243] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.478241][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.514747][ T4243] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.555194][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.636172][ T4271] netlink: 'syz.3.6': attribute type 7 has an invalid length. [ 67.658246][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.667606][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.689090][ C0] hrtimer: interrupt took 59811 ns [ 67.710486][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.734967][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.743582][ T4243] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.773543][ T4243] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.796753][ T4271] Zero length message leads to an empty skb [ 67.798906][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.814987][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.833928][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.876473][ T4274] netlink: 180 bytes leftover after parsing attributes in process `syz.1.2'. [ 67.937700][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.952295][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.972621][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.036947][ T4277] netlink: 'syz.3.7': attribute type 15 has an invalid length. [ 68.071433][ T4277] netlink: 11834 bytes leftover after parsing attributes in process `syz.3.7'. [ 68.132621][ T4281] netlink: 'syz.3.7': attribute type 4 has an invalid length. [ 68.155654][ T4281] netlink: 'syz.3.7': attribute type 5 has an invalid length. [ 68.174723][ T4281] netlink: 'syz.3.7': attribute type 6 has an invalid length. [ 68.184271][ T4281] netlink: 'syz.3.7': attribute type 7 has an invalid length. [ 68.199430][ T4281] netlink: 'syz.3.7': attribute type 11 has an invalid length. [ 68.207502][ T4281] netlink: 'syz.3.7': attribute type 15 has an invalid length. [ 68.215841][ T4281] netlink: 'syz.3.7': attribute type 16 has an invalid length. [ 68.223915][ T4281] netlink: 'syz.3.7': attribute type 21 has an invalid length. [ 68.233101][ T4281] netlink: 11834 bytes leftover after parsing attributes in process `syz.3.7'. [ 68.625356][ T4294] netlink: 11834 bytes leftover after parsing attributes in process `syz.3.11'. [ 68.665499][ T4299] netlink: 11834 bytes leftover after parsing attributes in process `syz.3.11'. [ 68.682236][ T4231] Bluetooth: hci1: command 0x0419 tx timeout [ 68.696110][ T4231] Bluetooth: hci2: command 0x0419 tx timeout [ 68.739289][ T4231] Bluetooth: hci3: command 0x0419 tx timeout [ 68.771512][ T4231] Bluetooth: hci4: command 0x0419 tx timeout [ 68.818474][ T4231] Bluetooth: hci0: command 0x0419 tx timeout [ 69.553099][ T4306] netlink: 128 bytes leftover after parsing attributes in process `syz.3.15'. [ 69.622175][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 69.681545][ T4306] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 70.070408][ T4306] syz.3.15 (4306) used greatest stack depth: 19632 bytes left [ 70.546791][ T4343] netlink: 40 bytes leftover after parsing attributes in process `syz.3.27'. [ 70.589186][ T4343] batman_adv: batadv0: Adding interface: virt_wifi0 [ 70.595937][ T4343] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.728485][ T4343] batman_adv: batadv0: Interface activated: virt_wifi0 [ 71.482587][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.489323][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 73.228312][ T4393] netlink: 128 bytes leftover after parsing attributes in process `syz.4.42'. [ 73.413354][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 73.726377][ T4393] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 73.870243][ T4402] validate_nla: 8 callbacks suppressed [ 73.870261][ T4402] netlink: 'syz.1.44': attribute type 10 has an invalid length. [ 73.981959][ T4402] netlink: 40 bytes leftover after parsing attributes in process `syz.1.44'. [ 74.110603][ T4402] batman_adv: batadv0: Adding interface: virt_wifi0 [ 74.182413][ T4402] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.307073][ T4402] batman_adv: batadv0: Interface activated: virt_wifi0 [ 79.474906][ T4477] netlink: 'syz.2.64': attribute type 15 has an invalid length. [ 79.568715][ T4477] netlink: 11834 bytes leftover after parsing attributes in process `syz.2.64'. [ 79.691780][ T4478] netlink: 'syz.2.64': attribute type 4 has an invalid length. [ 79.793877][ T4478] netlink: 'syz.2.64': attribute type 5 has an invalid length. [ 79.890124][ T4478] netlink: 'syz.2.64': attribute type 6 has an invalid length. [ 80.039209][ T4478] netlink: 'syz.2.64': attribute type 7 has an invalid length. [ 80.046829][ T4478] netlink: 'syz.2.64': attribute type 11 has an invalid length. [ 80.249446][ T4478] netlink: 'syz.2.64': attribute type 15 has an invalid length. [ 80.257228][ T4478] netlink: 'syz.2.64': attribute type 16 has an invalid length. [ 80.395585][ T4478] netlink: 'syz.2.64': attribute type 21 has an invalid length. [ 80.509097][ T4478] netlink: 'syz.2.64': attribute type 25 has an invalid length. [ 80.611331][ T4478] netlink: 11834 bytes leftover after parsing attributes in process `syz.2.64'. [ 80.790203][ T4497] netlink: 128 bytes leftover after parsing attributes in process `syz.0.69'. [ 80.907918][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 81.091334][ T4497] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 81.253825][ T4500] netlink: 180 bytes leftover after parsing attributes in process `syz.3.71'. [ 81.532203][ T4512] netlink: 207976 bytes leftover after parsing attributes in process `syz.4.76'. [ 84.812971][ T4543] validate_nla: 5 callbacks suppressed [ 84.813045][ T4543] netlink: 'syz.0.84': attribute type 7 has an invalid length. [ 85.362266][ T4554] netlink: 180 bytes leftover after parsing attributes in process `syz.2.87'. [ 85.657472][ T4564] netlink: 'syz.3.91': attribute type 10 has an invalid length. [ 85.700889][ T4564] netlink: 40 bytes leftover after parsing attributes in process `syz.3.91'. [ 85.889446][ T4564] netlink: 'syz.3.91': attribute type 11 has an invalid length. [ 85.966168][ T4564] netlink: 140 bytes leftover after parsing attributes in process `syz.3.91'. [ 86.098703][ T4557] netlink: 'syz.4.88': attribute type 15 has an invalid length. [ 86.410314][ T4557] netlink: 11834 bytes leftover after parsing attributes in process `syz.4.88'. [ 86.529517][ T4561] netlink: 'syz.4.88': attribute type 4 has an invalid length. [ 86.531060][ T4572] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.94'. [ 86.537123][ T4561] netlink: 'syz.4.88': attribute type 5 has an invalid length. [ 86.537140][ T4561] netlink: 'syz.4.88': attribute type 6 has an invalid length. [ 86.537152][ T4561] netlink: 'syz.4.88': attribute type 7 has an invalid length. [ 86.537165][ T4561] netlink: 'syz.4.88': attribute type 11 has an invalid length. [ 86.895034][ T1111] cfg80211: failed to load regulatory.db [ 86.919631][ T4561] netlink: 'syz.4.88': attribute type 15 has an invalid length. [ 86.985400][ T4561] netlink: 11834 bytes leftover after parsing attributes in process `syz.4.88'. [ 88.460416][ T4609] netlink: 14560 bytes leftover after parsing attributes in process `syz.4.103'. [ 88.678667][ T4608] netlink: 40 bytes leftover after parsing attributes in process `syz.2.104'. [ 88.976261][ T4608] batman_adv: batadv0: Adding interface: virt_wifi0 [ 89.022367][ T4608] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.190618][ T4608] batman_adv: batadv0: Interface activated: virt_wifi0 [ 89.276949][ T4615] netlink: 140 bytes leftover after parsing attributes in process `syz.2.104'. [ 89.788592][ T4628] netlink: 11834 bytes leftover after parsing attributes in process `syz.3.110'. [ 89.847176][ T4630] validate_nla: 10 callbacks suppressed [ 89.847198][ T4630] netlink: 'syz.3.110': attribute type 4 has an invalid length. [ 89.977375][ T4630] netlink: 'syz.3.110': attribute type 5 has an invalid length. [ 89.999736][ T4630] netlink: 'syz.3.110': attribute type 6 has an invalid length. [ 90.051010][ T4630] netlink: 'syz.3.110': attribute type 7 has an invalid length. [ 90.091093][ T4630] netlink: 'syz.3.110': attribute type 11 has an invalid length. [ 90.098885][ T4630] netlink: 'syz.3.110': attribute type 15 has an invalid length. [ 90.160503][ T4630] netlink: 'syz.3.110': attribute type 16 has an invalid length. [ 90.187067][ T4630] netlink: 'syz.3.110': attribute type 21 has an invalid length. [ 90.201470][ T4630] netlink: 'syz.3.110': attribute type 25 has an invalid length. [ 90.234057][ T4630] netlink: 'syz.3.110': attribute type 27 has an invalid length. [ 91.397919][ T4669] device syzkaller0 entered promiscuous mode [ 91.508332][ T4669] __nla_validate_parse: 2 callbacks suppressed [ 91.508352][ T4669] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.126'. [ 91.663931][ T4680] netlink: 11834 bytes leftover after parsing attributes in process `syz.3.129'. [ 91.711648][ T4683] netlink: 11834 bytes leftover after parsing attributes in process `syz.3.129'. [ 92.755421][ T4686] netlink: 20 bytes leftover after parsing attributes in process `syz.0.130'. [ 92.854768][ T4695] netlink: 20 bytes leftover after parsing attributes in process `syz.0.130'. [ 92.980328][ T4698] netlink: 40 bytes leftover after parsing attributes in process `syz.3.135'. [ 93.180517][ T4703] netlink: 140 bytes leftover after parsing attributes in process `syz.3.135'. [ 94.143527][ T4733] can: request_module (can-proto-0) failed. [ 94.158299][ T4730] netlink: 6026 bytes leftover after parsing attributes in process `syz.4.140'. [ 94.650235][ T4748] netlink: 40 bytes leftover after parsing attributes in process `syz.1.149'. [ 96.107360][ T4779] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.157'. [ 96.743092][ T4785] validate_nla: 24 callbacks suppressed [ 96.743133][ T4785] netlink: 'syz.0.159': attribute type 15 has an invalid length. [ 97.001946][ T4785] netlink: 11834 bytes leftover after parsing attributes in process `syz.0.159'. [ 97.064794][ T4801] netlink: 6026 bytes leftover after parsing attributes in process `syz.3.162'. [ 97.088567][ T4787] netlink: 'syz.0.159': attribute type 4 has an invalid length. [ 97.279293][ T4787] netlink: 'syz.0.159': attribute type 5 has an invalid length. [ 97.419181][ T4787] netlink: 'syz.0.159': attribute type 6 has an invalid length. [ 97.519106][ T4787] netlink: 'syz.0.159': attribute type 7 has an invalid length. [ 97.526839][ T4787] netlink: 'syz.0.159': attribute type 11 has an invalid length. [ 97.599131][ T4787] netlink: 'syz.0.159': attribute type 15 has an invalid length. [ 97.606922][ T4787] netlink: 'syz.0.159': attribute type 16 has an invalid length. [ 97.778154][ T4787] netlink: 'syz.0.159': attribute type 21 has an invalid length. [ 97.871224][ T4787] netlink: 'syz.0.159': attribute type 25 has an invalid length. [ 97.999133][ T4787] netlink: 11834 bytes leftover after parsing attributes in process `syz.0.159'. [ 100.057802][ T4847] netlink: 6026 bytes leftover after parsing attributes in process `syz.1.176'. [ 100.591272][ T4863] netlink: 12798 bytes leftover after parsing attributes in process `syz.3.178'. [ 102.524107][ T4910] validate_nla: 4 callbacks suppressed [ 102.524126][ T4910] netlink: 'syz.4.191': attribute type 10 has an invalid length. [ 102.550690][ T4910] netlink: 40 bytes leftover after parsing attributes in process `syz.4.191'. [ 102.582489][ T4910] batman_adv: batadv0: Adding interface: virt_wifi0 [ 102.656607][ T4910] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.726593][ T4910] batman_adv: batadv0: Interface activated: virt_wifi0 [ 102.873727][ T4915] netlink: 'syz.4.191': attribute type 11 has an invalid length. [ 102.917186][ T4915] netlink: 140 bytes leftover after parsing attributes in process `syz.4.191'. [ 103.354136][ T4931] netlink: 'syz.4.195': attribute type 15 has an invalid length. [ 103.389314][ T4931] netlink: 11834 bytes leftover after parsing attributes in process `syz.4.195'. [ 103.403768][ T4928] netlink: 'syz.4.195': attribute type 4 has an invalid length. [ 103.529722][ T4928] netlink: 'syz.4.195': attribute type 5 has an invalid length. [ 103.572848][ T4928] netlink: 'syz.4.195': attribute type 6 has an invalid length. [ 103.599503][ T4928] netlink: 'syz.4.195': attribute type 7 has an invalid length. [ 103.659474][ T4928] netlink: 'syz.4.195': attribute type 11 has an invalid length. [ 103.740270][ T4928] netlink: 'syz.4.195': attribute type 15 has an invalid length. [ 103.748542][ T4928] netlink: 'syz.4.195': attribute type 16 has an invalid length. [ 103.782346][ T4928] netlink: 11834 bytes leftover after parsing attributes in process `syz.4.195'. [ 104.609428][ T4951] netlink: 61967 bytes leftover after parsing attributes in process `syz.4.199'. [ 105.396642][ T4964] netlink: 132 bytes leftover after parsing attributes in process `syz.4.202'. [ 106.053438][ T4969] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.203'. [ 106.792805][ T4982] netlink: 11834 bytes leftover after parsing attributes in process `syz.3.209'. [ 106.926120][ T4983] netlink: 11834 bytes leftover after parsing attributes in process `syz.3.209'. [ 107.043227][ T4988] netlink: 40 bytes leftover after parsing attributes in process `syz.1.212'. [ 108.896423][ T5029] FAULT_INJECTION: forcing a failure. [ 108.896423][ T5029] name failslab, interval 1, probability 0, space 0, times 1 [ 108.989248][ T5029] CPU: 1 PID: 5029 Comm: syz.4.224 Not tainted syzkaller #0 [ 108.996601][ T5029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 109.006683][ T5029] Call Trace: [ 109.009988][ T5029] [ 109.012944][ T5029] dump_stack_lvl+0x188/0x250 [ 109.017678][ T5029] ? show_regs_print_info+0x20/0x20 [ 109.022912][ T5029] ? load_image+0x410/0x410 [ 109.027440][ T5029] ? __might_sleep+0xf0/0xf0 [ 109.032047][ T5029] ? __lock_acquire+0x7b50/0x7b50 [ 109.037094][ T5029] should_fail+0x383/0x4b0 [ 109.041561][ T5029] should_failslab+0x5/0x20 [ 109.046075][ T5029] slab_pre_alloc_hook+0x51/0xc0 [ 109.051208][ T5029] __kmalloc+0x6b/0x340 [ 109.055368][ T5029] ? tomoyo_encode+0x28a/0x550 [ 109.060144][ T5029] tomoyo_encode+0x28a/0x550 [ 109.064740][ T5029] tomoyo_realpath_from_path+0x5a2/0x5e0 [ 109.070474][ T5029] tomoyo_path_number_perm+0x251/0x6b0 [ 109.075941][ T5029] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 109.081402][ T5029] ? verify_lock_unused+0x140/0x140 [ 109.086604][ T5029] ? hrtimer_interrupt+0x4c1/0x8b0 [ 109.091721][ T5029] ? ktime_get+0x7b/0x270 [ 109.096101][ T5029] security_file_ioctl+0x6c/0xa0 [ 109.101045][ T5029] __se_sys_ioctl+0x48/0x170 [ 109.105634][ T5029] do_syscall_64+0x4c/0xa0 [ 109.110047][ T5029] ? clear_bhb_loop+0x30/0x80 [ 109.114809][ T5029] ? clear_bhb_loop+0x30/0x80 [ 109.119484][ T5029] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 109.125382][ T5029] RIP: 0033:0x7f809364ae99 [ 109.129803][ T5029] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.149407][ T5029] RSP: 002b:00007f80918a3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 109.157823][ T5029] RAX: ffffffffffffffda RBX: 00007f80938d2fa0 RCX: 00007f809364ae99 [ 109.165793][ T5029] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000005 [ 109.173765][ T5029] RBP: 00007f80918a3090 R08: 0000000000000000 R09: 0000000000000000 [ 109.181822][ T5029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 109.189808][ T5029] R13: 00007f80938d3038 R14: 00007f80938d2fa0 R15: 00007ffcd8114ec8 [ 109.197839][ T5029] [ 109.264660][ T5029] ERROR: Out of memory at tomoyo_realpath_from_path. [ 109.409304][ T5034] validate_nla: 24 callbacks suppressed [ 109.409328][ T5034] netlink: 'syz.2.225': attribute type 10 has an invalid length. [ 109.449263][ T5034] __nla_validate_parse: 2 callbacks suppressed [ 109.449284][ T5034] netlink: 40 bytes leftover after parsing attributes in process `syz.2.225'. [ 109.531637][ T5035] netlink: 'syz.2.225': attribute type 11 has an invalid length. [ 109.569270][ T5035] netlink: 140 bytes leftover after parsing attributes in process `syz.2.225'. [ 109.936765][ T5040] netlink: 'syz.3.226': attribute type 15 has an invalid length. [ 109.989164][ T5040] netlink: 11834 bytes leftover after parsing attributes in process `syz.3.226'. [ 110.387698][ T5038] netlink: 'syz.3.226': attribute type 4 has an invalid length. [ 110.395458][ T5038] netlink: 'syz.3.226': attribute type 5 has an invalid length. [ 110.405045][ T5038] netlink: 'syz.3.226': attribute type 6 has an invalid length. [ 110.412828][ T5038] netlink: 'syz.3.226': attribute type 7 has an invalid length. [ 110.423131][ T5038] netlink: 'syz.3.226': attribute type 11 has an invalid length. [ 110.430961][ T5038] netlink: 'syz.3.226': attribute type 15 has an invalid length. [ 110.438873][ T5038] netlink: 'syz.3.226': attribute type 16 has an invalid length. [ 110.459259][ T5038] netlink: 11834 bytes leftover after parsing attributes in process `syz.3.226'. [ 110.523942][ T5057] netlink: 132 bytes leftover after parsing attributes in process `syz.4.232'. [ 110.560794][ T5050] netlink: 11834 bytes leftover after parsing attributes in process `syz.2.227'. [ 110.578125][ T5051] netlink: 11834 bytes leftover after parsing attributes in process `syz.2.227'. [ 111.061156][ T5071] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.237'. [ 111.241012][ T5074] netlink: 40 bytes leftover after parsing attributes in process `syz.2.239'. [ 111.684765][ T5075] netlink: 140 bytes leftover after parsing attributes in process `syz.2.239'. [ 113.428945][ T5104] FAULT_INJECTION: forcing a failure. [ 113.428945][ T5104] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 113.494625][ T5104] CPU: 1 PID: 5104 Comm: syz.4.251 Not tainted syzkaller #0 [ 113.501979][ T5104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 113.512063][ T5104] Call Trace: [ 113.515357][ T5104] [ 113.518308][ T5104] dump_stack_lvl+0x188/0x250 [ 113.523027][ T5104] ? show_regs_print_info+0x20/0x20 [ 113.528265][ T5104] ? load_image+0x410/0x410 [ 113.532808][ T5104] ? __lock_acquire+0x7b50/0x7b50 [ 113.537858][ T5104] ? unix_ioctl+0x255/0x6a0 [ 113.542387][ T5104] should_fail+0x383/0x4b0 [ 113.546839][ T5104] _copy_from_user+0x2e/0x170 [ 113.551540][ T5104] sock_do_ioctl+0x18c/0x320 [ 113.556166][ T5104] ? sock_show_fdinfo+0xb0/0xb0 [ 113.561052][ T5104] sock_ioctl+0x48a/0x700 [ 113.565403][ T5104] ? sock_poll+0x420/0x420 [ 113.569860][ T5104] ? bpf_lsm_file_ioctl+0x5/0x10 [ 113.574818][ T5104] ? security_file_ioctl+0x7c/0xa0 [ 113.579959][ T5104] ? sock_poll+0x420/0x420 [ 113.584403][ T5104] __se_sys_ioctl+0xfa/0x170 [ 113.589025][ T5104] do_syscall_64+0x4c/0xa0 [ 113.593463][ T5104] ? clear_bhb_loop+0x30/0x80 [ 113.598163][ T5104] ? clear_bhb_loop+0x30/0x80 [ 113.602954][ T5104] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 113.608874][ T5104] RIP: 0033:0x7f809364ae99 [ 113.613308][ T5104] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.633027][ T5104] RSP: 002b:00007f80918a3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 113.641468][ T5104] RAX: ffffffffffffffda RBX: 00007f80938d2fa0 RCX: 00007f809364ae99 [ 113.649455][ T5104] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000005 [ 113.657460][ T5104] RBP: 00007f80918a3090 R08: 0000000000000000 R09: 0000000000000000 [ 113.665451][ T5104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 113.673521][ T5104] R13: 00007f80938d3038 R14: 00007f80938d2fa0 R15: 00007ffcd8114ec8 [ 113.681631][ T5104] [ 114.461094][ T5114] validate_nla: 42 callbacks suppressed [ 114.461115][ T5114] netlink: 'syz.0.248': attribute type 15 has an invalid length. [ 114.753167][ T5114] __nla_validate_parse: 7 callbacks suppressed [ 114.753185][ T5114] netlink: 11834 bytes leftover after parsing attributes in process `syz.0.248'. [ 114.915690][ T5127] netlink: 'syz.0.248': attribute type 4 has an invalid length. [ 114.970250][ T5127] netlink: 'syz.0.248': attribute type 5 has an invalid length. [ 114.977945][ T5127] netlink: 'syz.0.248': attribute type 6 has an invalid length. [ 115.269178][ T5127] netlink: 'syz.0.248': attribute type 7 has an invalid length. [ 115.389144][ T5127] netlink: 'syz.0.248': attribute type 11 has an invalid length. [ 115.396937][ T5127] netlink: 'syz.0.248': attribute type 15 has an invalid length. [ 115.439505][ T5141] netlink: 'syz.4.263': attribute type 3 has an invalid length. [ 115.498479][ T5141] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.263'. [ 115.501514][ T5127] netlink: 'syz.0.248': attribute type 16 has an invalid length. [ 115.521729][ T5127] netlink: 'syz.0.248': attribute type 21 has an invalid length. [ 115.570577][ T5127] netlink: 11834 bytes leftover after parsing attributes in process `syz.0.248'. [ 115.615787][ T5133] netlink: 11834 bytes leftover after parsing attributes in process `syz.2.259'. [ 115.638740][ T5134] netlink: 11834 bytes leftover after parsing attributes in process `syz.2.259'. [ 115.886280][ T5148] netlink: 40 bytes leftover after parsing attributes in process `syz.4.265'. [ 119.080781][ T5165] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.271'. [ 119.215638][ T5171] FAULT_INJECTION: forcing a failure. [ 119.215638][ T5171] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 119.259228][ T5171] CPU: 1 PID: 5171 Comm: syz.4.272 Not tainted syzkaller #0 [ 119.266572][ T5171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 119.276828][ T5171] Call Trace: [ 119.280140][ T5171] [ 119.283212][ T5171] dump_stack_lvl+0x188/0x250 [ 119.287913][ T5171] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 119.294093][ T5171] ? show_regs_print_info+0x20/0x20 [ 119.299316][ T5171] ? load_image+0x410/0x410 [ 119.303867][ T5171] should_fail+0x383/0x4b0 [ 119.308324][ T5171] _copy_from_user+0x2e/0x170 [ 119.313039][ T5171] dev_ethtool+0xd7/0xff0 [ 119.317408][ T5171] ? ethtool_get_module_eeprom_call+0x170/0x170 [ 119.323677][ T5171] ? mutex_lock_io_nested+0x60/0x60 [ 119.328902][ T5171] ? full_name_hash+0x8e/0xe0 [ 119.333622][ T5171] dev_ioctl+0x457/0xe30 [ 119.337892][ T5171] sock_do_ioctl+0x245/0x320 [ 119.342506][ T5171] ? sock_show_fdinfo+0xb0/0xb0 [ 119.347393][ T5171] ? rcu_nmi_exit+0x6f/0xf0 [ 119.352013][ T5171] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 119.358022][ T5171] ? lock_chain_count+0x20/0x20 [ 119.362903][ T5171] sock_ioctl+0x48a/0x700 [ 119.367346][ T5171] ? sock_poll+0x420/0x420 [ 119.371789][ T5171] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 119.377969][ T5171] ? __se_sys_ioctl+0x53/0x170 [ 119.382754][ T5171] ? sock_poll+0x420/0x420 [ 119.387188][ T5171] __se_sys_ioctl+0xfa/0x170 [ 119.391883][ T5171] do_syscall_64+0x4c/0xa0 [ 119.396318][ T5171] ? clear_bhb_loop+0x30/0x80 [ 119.401026][ T5171] ? clear_bhb_loop+0x30/0x80 [ 119.405729][ T5171] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 119.411640][ T5171] RIP: 0033:0x7f809364ae99 [ 119.416091][ T5171] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 119.435715][ T5171] RSP: 002b:00007f80918a3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 119.444137][ T5171] RAX: ffffffffffffffda RBX: 00007f80938d2fa0 RCX: 00007f809364ae99 [ 119.452119][ T5171] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000005 [ 119.460088][ T5171] RBP: 00007f80918a3090 R08: 0000000000000000 R09: 0000000000000000 [ 119.468143][ T5171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 119.476113][ T5171] R13: 00007f80938d3038 R14: 00007f80938d2fa0 R15: 00007ffcd8114ec8 [ 119.484097][ T5171] [ 119.837210][ T5181] device syzkaller0 entered promiscuous mode [ 119.901558][ T5187] validate_nla: 20 callbacks suppressed [ 119.901575][ T5187] netlink: 'syz.2.278': attribute type 15 has an invalid length. [ 119.964489][ T5187] netlink: 11834 bytes leftover after parsing attributes in process `syz.2.278'. [ 120.004491][ T5183] netlink: 'syz.2.278': attribute type 4 has an invalid length. [ 120.055859][ T5183] netlink: 'syz.2.278': attribute type 5 has an invalid length. [ 120.084354][ T5183] netlink: 'syz.2.278': attribute type 6 has an invalid length. [ 120.108470][ T5183] netlink: 'syz.2.278': attribute type 7 has an invalid length. [ 120.147046][ T5183] netlink: 'syz.2.278': attribute type 11 has an invalid length. [ 120.172436][ T5183] netlink: 'syz.2.278': attribute type 15 has an invalid length. [ 120.221853][ T5183] netlink: 'syz.2.278': attribute type 16 has an invalid length. [ 120.315938][ T5183] netlink: 'syz.2.278': attribute type 21 has an invalid length. [ 120.331202][ T5183] netlink: 'syz.2.278': attribute type 25 has an invalid length. [ 120.347734][ T5183] netlink: 11834 bytes leftover after parsing attributes in process `syz.2.278'. [ 122.015407][ T5223] FAULT_INJECTION: forcing a failure. [ 122.015407][ T5223] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 122.089398][ T5223] CPU: 0 PID: 5223 Comm: syz.2.290 Not tainted syzkaller #0 [ 122.096735][ T5223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 122.106819][ T5223] Call Trace: [ 122.110128][ T5223] [ 122.113088][ T5223] dump_stack_lvl+0x188/0x250 [ 122.117801][ T5223] ? show_regs_print_info+0x20/0x20 [ 122.123034][ T5223] ? load_image+0x410/0x410 [ 122.127568][ T5223] ? __lock_acquire+0x7b50/0x7b50 [ 122.132624][ T5223] should_fail+0x383/0x4b0 [ 122.137068][ T5223] _copy_from_user+0x2e/0x170 [ 122.141773][ T5223] ethtool_get_stats+0x192/0x390 [ 122.146741][ T5223] ? ethtool_phys_id+0x4b0/0x4b0 [ 122.151707][ T5223] dev_ethtool+0xc07/0xff0 [ 122.156146][ T5223] ? ethtool_get_module_eeprom_call+0x170/0x170 [ 122.162418][ T5223] ? mutex_lock_io_nested+0x60/0x60 [ 122.167659][ T5223] dev_ioctl+0x457/0xe30 [ 122.171931][ T5223] ? _copy_from_user+0x111/0x170 [ 122.176894][ T5223] sock_do_ioctl+0x245/0x320 [ 122.181499][ T5223] ? sock_show_fdinfo+0xb0/0xb0 [ 122.186367][ T5223] sock_ioctl+0x48a/0x700 [ 122.190697][ T5223] ? sock_poll+0x420/0x420 [ 122.195124][ T5223] ? bpf_lsm_file_ioctl+0x5/0x10 [ 122.200059][ T5223] ? security_file_ioctl+0x7c/0xa0 [ 122.205257][ T5223] ? sock_poll+0x420/0x420 [ 122.209675][ T5223] __se_sys_ioctl+0xfa/0x170 [ 122.214286][ T5223] do_syscall_64+0x4c/0xa0 [ 122.218704][ T5223] ? clear_bhb_loop+0x30/0x80 [ 122.223381][ T5223] ? clear_bhb_loop+0x30/0x80 [ 122.228064][ T5223] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 122.233971][ T5223] RIP: 0033:0x7fdd8e812e99 [ 122.238388][ T5223] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.258166][ T5223] RSP: 002b:00007fdd8ca6b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 122.266729][ T5223] RAX: ffffffffffffffda RBX: 00007fdd8ea9afa0 RCX: 00007fdd8e812e99 [ 122.274720][ T5223] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000005 [ 122.282698][ T5223] RBP: 00007fdd8ca6b090 R08: 0000000000000000 R09: 0000000000000000 [ 122.290676][ T5223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 122.298648][ T5223] R13: 00007fdd8ea9b038 R14: 00007fdd8ea9afa0 R15: 00007ffe02cb36f8 [ 122.306632][ T5223] [ 123.446391][ T5258] device syzkaller0 entered promiscuous mode [ 124.476854][ T5274] tap0: tun_chr_ioctl cmd 1074025680 [ 124.613187][ T5286] netlink: 11834 bytes leftover after parsing attributes in process `syz.0.310'. [ 124.697320][ T5286] netlink: 11834 bytes leftover after parsing attributes in process `syz.0.310'. [ 124.788531][ T5296] FAULT_INJECTION: forcing a failure. [ 124.788531][ T5296] name failslab, interval 1, probability 0, space 0, times 0 [ 124.857909][ T5296] CPU: 0 PID: 5296 Comm: syz.1.313 Not tainted syzkaller #0 [ 124.865251][ T5296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 124.875333][ T5296] Call Trace: [ 124.878637][ T5296] [ 124.881596][ T5296] dump_stack_lvl+0x188/0x250 [ 124.886319][ T5296] ? show_regs_print_info+0x20/0x20 [ 124.891545][ T5296] ? load_image+0x410/0x410 [ 124.896075][ T5296] ? __might_sleep+0xf0/0xf0 [ 124.900684][ T5296] ? __lock_acquire+0x7b50/0x7b50 [ 124.905730][ T5296] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 124.911739][ T5296] should_fail+0x383/0x4b0 [ 124.916265][ T5296] should_failslab+0x5/0x20 [ 124.920782][ T5296] slab_pre_alloc_hook+0x51/0xc0 [ 124.925738][ T5296] kmem_cache_alloc_node_trace+0x4a/0x2f0 [ 124.931480][ T5296] ? __get_vm_area_node+0x119/0x2d0 [ 124.936703][ T5296] __get_vm_area_node+0x119/0x2d0 [ 124.941755][ T5296] __vmalloc_node_range+0xef/0x8b0 [ 124.946869][ T5296] ? ethtool_get_stats+0x207/0x390 [ 124.951990][ T5296] ? __might_fault+0xb3/0x110 [ 124.956672][ T5296] ? ethtool_get_stats+0x207/0x390 [ 124.961788][ T5296] vzalloc+0x75/0x80 [ 124.965686][ T5296] ? ethtool_get_stats+0x207/0x390 [ 124.970796][ T5296] ethtool_get_stats+0x207/0x390 [ 124.975734][ T5296] ? ethtool_phys_id+0x4b0/0x4b0 [ 124.980676][ T5296] dev_ethtool+0xc07/0xff0 [ 124.985095][ T5296] ? ethtool_get_module_eeprom_call+0x170/0x170 [ 124.991335][ T5296] ? lockdep_hardirqs_on+0x94/0x140 [ 124.996535][ T5296] ? mutex_lock_io_nested+0x60/0x60 [ 125.001734][ T5296] ? full_name_hash+0x8e/0xe0 [ 125.006420][ T5296] dev_ioctl+0x457/0xe30 [ 125.010695][ T5296] ? _copy_from_user+0x111/0x170 [ 125.015639][ T5296] sock_do_ioctl+0x245/0x320 [ 125.020233][ T5296] ? sock_show_fdinfo+0xb0/0xb0 [ 125.025082][ T5296] ? rcu_nmi_exit+0x6f/0xf0 [ 125.029676][ T5296] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 125.035658][ T5296] ? lock_chain_count+0x20/0x20 [ 125.040516][ T5296] sock_ioctl+0x48a/0x700 [ 125.044849][ T5296] ? sock_poll+0x420/0x420 [ 125.049267][ T5296] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 125.055446][ T5296] ? sock_poll+0x420/0x420 [ 125.059867][ T5296] __se_sys_ioctl+0xfa/0x170 [ 125.064546][ T5296] do_syscall_64+0x4c/0xa0 [ 125.068960][ T5296] ? clear_bhb_loop+0x30/0x80 [ 125.073635][ T5296] ? clear_bhb_loop+0x30/0x80 [ 125.078329][ T5296] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 125.084247][ T5296] RIP: 0033:0x7f8872f33e99 [ 125.088686][ T5296] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.108383][ T5296] RSP: 002b:00007f887118c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 125.116798][ T5296] RAX: ffffffffffffffda RBX: 00007f88731bbfa0 RCX: 00007f8872f33e99 [ 125.124969][ T5296] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000005 [ 125.132941][ T5296] RBP: 00007f887118c090 R08: 0000000000000000 R09: 0000000000000000 [ 125.140911][ T5296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 125.148886][ T5296] R13: 00007f88731bc038 R14: 00007f88731bbfa0 R15: 00007fffca7dc878 [ 125.156869][ T5296] [ 125.809936][ T5296] syz.1.313: vmalloc error: size 232, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 125.826209][ T5296] CPU: 1 PID: 5296 Comm: syz.1.313 Not tainted syzkaller #0 [ 125.833532][ T5296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 125.843810][ T5296] Call Trace: [ 125.847114][ T5296] [ 125.850055][ T5296] dump_stack_lvl+0x188/0x250 [ 125.854753][ T5296] ? rcu_lock_release+0x5/0x20 [ 125.859630][ T5296] ? show_regs_print_info+0x20/0x20 [ 125.864948][ T5296] ? load_image+0x410/0x410 [ 125.869480][ T5296] warn_alloc+0x245/0x320 [ 125.873842][ T5296] ? zone_watermark_ok_safe+0x250/0x250 [ 125.879444][ T5296] ? lockdep_hardirqs_on+0x94/0x140 [ 125.884679][ T5296] __vmalloc_node_range+0x2b1/0x8b0 [ 125.889897][ T5296] ? __might_fault+0xb3/0x110 [ 125.894584][ T5296] ? ethtool_get_stats+0x207/0x390 [ 125.899707][ T5296] vzalloc+0x75/0x80 [ 125.903613][ T5296] ? ethtool_get_stats+0x207/0x390 [ 125.908744][ T5296] ethtool_get_stats+0x207/0x390 [ 125.913692][ T5296] ? ethtool_phys_id+0x4b0/0x4b0 [ 125.918647][ T5296] dev_ethtool+0xc07/0xff0 [ 125.923077][ T5296] ? ethtool_get_module_eeprom_call+0x170/0x170 [ 125.929332][ T5296] ? lockdep_hardirqs_on+0x94/0x140 [ 125.934552][ T5296] ? mutex_lock_io_nested+0x60/0x60 [ 125.939791][ T5296] ? full_name_hash+0x8e/0xe0 [ 125.944500][ T5296] dev_ioctl+0x457/0xe30 [ 125.948757][ T5296] ? _copy_from_user+0x111/0x170 [ 125.953714][ T5296] sock_do_ioctl+0x245/0x320 [ 125.958319][ T5296] ? sock_show_fdinfo+0xb0/0xb0 [ 125.963176][ T5296] ? rcu_nmi_exit+0x6f/0xf0 [ 125.967696][ T5296] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 125.973688][ T5296] ? lock_chain_count+0x20/0x20 [ 125.978556][ T5296] sock_ioctl+0x48a/0x700 [ 125.982900][ T5296] ? sock_poll+0x420/0x420 [ 125.987328][ T5296] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 125.993521][ T5296] ? sock_poll+0x420/0x420 [ 125.997957][ T5296] __se_sys_ioctl+0xfa/0x170 [ 126.002559][ T5296] do_syscall_64+0x4c/0xa0 [ 126.006986][ T5296] ? clear_bhb_loop+0x30/0x80 [ 126.011669][ T5296] ? clear_bhb_loop+0x30/0x80 [ 126.016358][ T5296] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 126.022350][ T5296] RIP: 0033:0x7f8872f33e99 [ 126.026869][ T5296] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.046587][ T5296] RSP: 002b:00007f887118c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 126.055121][ T5296] RAX: ffffffffffffffda RBX: 00007f88731bbfa0 RCX: 00007f8872f33e99 [ 126.063110][ T5296] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000005 [ 126.071102][ T5296] RBP: 00007f887118c090 R08: 0000000000000000 R09: 0000000000000000 [ 126.079112][ T5296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 126.087201][ T5296] R13: 00007f88731bc038 R14: 00007f88731bbfa0 R15: 00007fffca7dc878 [ 126.095209][ T5296] [ 126.113792][ T5296] Mem-Info: [ 126.116955][ T5296] active_anon:269 inactive_anon:5736 isolated_anon:0 [ 126.116955][ T5296] active_file:24909 inactive_file:36248 isolated_file:0 [ 126.116955][ T5296] unevictable:768 dirty:141 writeback:0 [ 126.116955][ T5296] slab_reclaimable:20503 slab_unreclaimable:95362 [ 126.116955][ T5296] mapped:29474 shmem:1631 pagetables:638 bounce:0 [ 126.116955][ T5296] kernel_misc_reclaimable:0 [ 126.116955][ T5296] free:1367562 free_pcp:13746 free_cma:0 [ 126.169618][ T5296] Node 0 active_anon:1044kB inactive_anon:22532kB active_file:99432kB inactive_file:144992kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117896kB dirty:560kB writeback:0kB shmem:4444kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:10788kB pagetables:2552kB all_unreclaimable? no [ 126.202546][ T5296] Node 1 active_anon:32kB inactive_anon:512kB active_file:204kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:2080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 126.281069][ T5296] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 126.310594][ T5296] lowmem_reserve[]: 0 2539 2540 2540 2540 [ 126.332009][ T5296] Node 0 DMA32 free:1545160kB min:34784kB low:43480kB high:52176kB reserved_highatomic:0KB active_anon:1044kB inactive_anon:22432kB active_file:99432kB inactive_file:144992kB unevictable:1536kB writepending:560kB present:3129332kB managed:2606524kB mlocked:0kB bounce:0kB free_pcp:42560kB local_pcp:20840kB free_cma:0kB [ 126.497426][ T5296] lowmem_reserve[]: 0 0 0 0 0 [ 126.505827][ T5296] Node 0 Normal free:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:660kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 126.542430][ T5296] lowmem_reserve[]: 0 0 0 0 0 [ 126.547291][ T5296] Node 1 Normal free:3909812kB min:55108kB low:68884kB high:82660kB reserved_highatomic:0KB active_anon:32kB inactive_anon:512kB active_file:204kB inactive_file:0kB unevictable:1536kB writepending:4kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:12576kB local_pcp:3944kB free_cma:0kB [ 126.589492][ T5296] lowmem_reserve[]: 0 0 0 0 0 [ 126.594267][ T5296] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 126.628604][ T5296] Node 0 DMA32: 4067*4kB (UM) 3828*8kB (UME) 2956*16kB (UME) 3262*32kB (UME) 2048*64kB (UME) 873*128kB (UME) 331*256kB (UM) 108*512kB (UM) 16*1024kB (UME) 1*2048kB (M) 231*4096kB (M) = 1546028kB [ 126.655102][ T5296] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 126.667237][ T5296] Node 1 Normal: 77*4kB (UME) 24*8kB (UE) 26*16kB (UME) 95*32kB (UE) 51*64kB (UME) 23*128kB (UME) 5*256kB (UME) 4*512kB (U) 1*1024kB (U) 2*2048kB (UM) 950*4096kB (M) = 3909812kB [ 126.694376][ T5296] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 126.706072][ T5296] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 126.722441][ T5296] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 126.736435][ T5296] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 126.750814][ T5296] 62788 total pagecache pages [ 126.755607][ T5296] 0 pages in swap cache [ 126.764223][ T5296] Swap cache stats: add 0, delete 0, find 0/0 [ 126.773399][ T5296] Free swap = 124996kB [ 126.777647][ T5296] Total swap = 124996kB [ 126.786090][ T5296] 2097051 pages RAM [ 126.792966][ T5296] 0 pages HighMem/MovableOnly [ 126.797659][ T5296] 411497 pages reserved [ 126.808591][ T5296] 0 pages cma reserved [ 127.086091][ T5333] validate_nla: 21 callbacks suppressed [ 127.086130][ T5333] netlink: 'syz.2.327': attribute type 15 has an invalid length. [ 127.127096][ T5333] netlink: 11834 bytes leftover after parsing attributes in process `syz.2.327'. [ 127.271872][ T5342] netlink: 'syz.2.327': attribute type 4 has an invalid length. [ 127.332366][ T5342] netlink: 'syz.2.327': attribute type 5 has an invalid length. [ 127.344180][ T5342] netlink: 'syz.2.327': attribute type 6 has an invalid length. [ 127.352227][ T5342] netlink: 'syz.2.327': attribute type 7 has an invalid length. [ 127.367757][ T5342] netlink: 'syz.2.327': attribute type 11 has an invalid length. [ 127.395489][ T5342] netlink: 'syz.2.327': attribute type 15 has an invalid length. [ 127.438152][ T5342] netlink: 'syz.2.327': attribute type 16 has an invalid length. [ 127.509491][ T5342] netlink: 'syz.2.327': attribute type 21 has an invalid length. [ 127.635191][ T5342] netlink: 'syz.2.327': attribute type 25 has an invalid length. [ 127.689155][ T5342] netlink: 11834 bytes leftover after parsing attributes in process `syz.2.327'. [ 127.737063][ T5350] netlink: 40 bytes leftover after parsing attributes in process `syz.1.331'. [ 127.869685][ T5351] netlink: 140 bytes leftover after parsing attributes in process `syz.1.331'. [ 129.019535][ T5394] netlink: 40 bytes leftover after parsing attributes in process `syz.0.346'. [ 129.074455][ T5394] batman_adv: batadv0: Adding interface: virt_wifi0 [ 129.090522][ T5394] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.213708][ T5394] batman_adv: batadv0: Interface activated: virt_wifi0 [ 129.410590][ T5394] netlink: 140 bytes leftover after parsing attributes in process `syz.0.346'. [ 129.670373][ T5406] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.347'. [ 130.093595][ T5412] team0: Port device vlan0 added [ 130.540299][ T5424] netlink: 132 bytes leftover after parsing attributes in process `syz.2.355'. [ 130.712836][ T5439] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.358'. [ 131.753049][ T5445] netlink: 40 bytes leftover after parsing attributes in process `syz.0.362'. [ 132.227490][ T5469] device syzkaller0 entered promiscuous mode [ 132.398242][ T5480] device sit0 entered promiscuous mode [ 132.611830][ T5482] validate_nla: 29 callbacks suppressed [ 132.611862][ T5482] netlink: 'syz.1.373': attribute type 2 has an invalid length. [ 133.014117][ T5492] __nla_validate_parse: 4 callbacks suppressed [ 133.014135][ T5492] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.376'. [ 133.030600][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.036926][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.195347][ T5496] netlink: 'syz.1.377': attribute type 10 has an invalid length. [ 133.226960][ T5496] netlink: 40 bytes leftover after parsing attributes in process `syz.1.377'. [ 133.254475][ T5498] netlink: 'syz.4.378': attribute type 21 has an invalid length. [ 133.273865][ T5498] netlink: 100 bytes leftover after parsing attributes in process `syz.4.378'. [ 133.311086][ T5492] netlink: 128 bytes leftover after parsing attributes in process `syz.0.376'. [ 133.362942][ T5492] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 133.393166][ T5492] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 133.485764][ T5499] netlink: 'syz.1.377': attribute type 11 has an invalid length. [ 133.512492][ T5499] netlink: 140 bytes leftover after parsing attributes in process `syz.1.377'. [ 133.841862][ T5508] netlink: 'syz.4.382': attribute type 15 has an invalid length. [ 133.871108][ T5508] netlink: 11834 bytes leftover after parsing attributes in process `syz.4.382'. [ 134.043374][ T5508] netlink: 'syz.4.382': attribute type 4 has an invalid length. [ 134.113606][ T5508] netlink: 'syz.4.382': attribute type 5 has an invalid length. [ 134.156394][ T5508] netlink: 'syz.4.382': attribute type 6 has an invalid length. [ 134.214354][ T5508] netlink: 'syz.4.382': attribute type 7 has an invalid length. [ 134.270432][ T5508] netlink: 'syz.4.382': attribute type 11 has an invalid length. [ 134.446080][ T5508] netlink: 11834 bytes leftover after parsing attributes in process `syz.4.382'. [ 134.470455][ T5519] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 134.542883][ T5519] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 134.657637][ T5519] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 135.106803][ T5538] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.391'. [ 135.226497][ T5538] netlink: 128 bytes leftover after parsing attributes in process `syz.1.391'. [ 135.263559][ T5544] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.393'. [ 135.282919][ T5538] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 135.330916][ T5538] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 136.332881][ T5548] device syzkaller0 entered promiscuous mode [ 137.369966][ T5600] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 137.476373][ T5600] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 138.518814][ T5632] validate_nla: 24 callbacks suppressed [ 138.518856][ T5632] netlink: 'syz.2.422': attribute type 15 has an invalid length. [ 138.569985][ T5632] __nla_validate_parse: 6 callbacks suppressed [ 138.570021][ T5632] netlink: 11834 bytes leftover after parsing attributes in process `syz.2.422'. [ 138.634729][ T5640] netlink: 'syz.2.422': attribute type 4 has an invalid length. [ 138.642366][ T5636] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.418'. [ 138.700884][ T5640] netlink: 'syz.2.422': attribute type 5 has an invalid length. [ 138.741438][ T5640] netlink: 'syz.2.422': attribute type 6 has an invalid length. [ 138.763860][ T5640] netlink: 'syz.2.422': attribute type 7 has an invalid length. [ 138.804935][ T5640] netlink: 'syz.2.422': attribute type 11 has an invalid length. [ 138.859265][ T5640] netlink: 'syz.2.422': attribute type 15 has an invalid length. [ 138.896203][ T5640] netlink: 'syz.2.422': attribute type 16 has an invalid length. [ 138.921295][ T5640] netlink: 'syz.2.422': attribute type 21 has an invalid length. [ 138.977337][ T5640] netlink: 'syz.2.422': attribute type 25 has an invalid length. [ 139.016913][ T5640] netlink: 11834 bytes leftover after parsing attributes in process `syz.2.422'. [ 139.390519][ T5649] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 139.413766][ T5649] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 139.545415][ T5649] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 139.559468][ T5649] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 139.611086][ T5649] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 139.633211][ T5649] batman_adv: batadv0: Removing interface: virt_wifi0 [ 140.466425][ T5674] netlink: 144 bytes leftover after parsing attributes in process `syz.2.433'. [ 140.602597][ T5683] netlink: 2 bytes leftover after parsing attributes in process `syz.4.437'. [ 140.671430][ T5683] device bond0 entered promiscuous mode [ 140.753187][ T5683] device bond_slave_0 entered promiscuous mode [ 140.755623][ T5687] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 140.773623][ T5683] device bond_slave_1 entered promiscuous mode [ 140.865569][ T5683] bridge0: port 3(bond0) entered blocking state [ 140.982485][ T5683] bridge0: port 3(bond0) entered disabled state [ 140.984815][ T5687] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.438'. [ 141.006110][ T5683] bridge0: port 3(bond0) entered blocking state [ 141.013203][ T5683] bridge0: port 3(bond0) entered forwarding state [ 141.063397][ T5691] netlink: 11834 bytes leftover after parsing attributes in process `syz.1.439'. [ 141.102356][ T5692] netlink: 11834 bytes leftover after parsing attributes in process `syz.1.439'. [ 142.288369][ T5719] device syzkaller0 entered promiscuous mode [ 142.722109][ T5733] netlink: 11834 bytes leftover after parsing attributes in process `syz.3.452'. [ 142.819353][ T5738] netlink: 11834 bytes leftover after parsing attributes in process `syz.3.452'. [ 143.396015][ T5758] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 143.694794][ T5756] validate_nla: 35 callbacks suppressed [ 143.694817][ T5756] netlink: 'syz.3.462': attribute type 11 has an invalid length. [ 143.864079][ T5756] __nla_validate_parse: 2 callbacks suppressed [ 143.864100][ T5756] netlink: 140 bytes leftover after parsing attributes in process `syz.3.462'. [ 143.993042][ T5758] netlink: 'syz.4.463': attribute type 11 has an invalid length. [ 144.053723][ T5758] netlink: 140 bytes leftover after parsing attributes in process `syz.4.463'. [ 144.579421][ T5781] netlink: 'syz.4.469': attribute type 3 has an invalid length. [ 144.610681][ T5781] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.469'. [ 144.670833][ T5776] netlink: 'syz.1.468': attribute type 15 has an invalid length. [ 144.706183][ T5776] netlink: 11834 bytes leftover after parsing attributes in process `syz.1.468'. [ 144.870909][ T5776] netlink: 'syz.1.468': attribute type 4 has an invalid length. [ 144.911432][ T5776] netlink: 'syz.1.468': attribute type 5 has an invalid length. [ 144.980209][ T5776] netlink: 'syz.1.468': attribute type 6 has an invalid length. [ 145.051541][ T5776] netlink: 'syz.1.468': attribute type 7 has an invalid length. [ 145.131224][ T5776] netlink: 'syz.1.468': attribute type 11 has an invalid length. [ 145.184692][ T5776] netlink: 'syz.1.468': attribute type 15 has an invalid length. [ 145.258695][ T5776] netlink: 11834 bytes leftover after parsing attributes in process `syz.1.468'. [ 145.601519][ T5797] device syzkaller0 entered promiscuous mode [ 145.722863][ T5767] syz.2.464 (5767) used greatest stack depth: 15960 bytes left [ 146.307685][ T5808] syz.1.477 uses obsolete (PF_INET,SOCK_PACKET) [ 146.330395][ T5809] netlink: 40 bytes leftover after parsing attributes in process `syz.2.475'. [ 146.440359][ T5812] netlink: 140 bytes leftover after parsing attributes in process `syz.2.475'. [ 146.599870][ T5818] netlink: 40 bytes leftover after parsing attributes in process `syz.0.478'. [ 146.907232][ T5818] netlink: 140 bytes leftover after parsing attributes in process `syz.0.478'. [ 148.327388][ T5844] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.485'. [ 150.235619][ T5831] device syzkaller0 entered promiscuous mode [ 150.342053][ T5852] validate_nla: 11 callbacks suppressed [ 150.342076][ T5852] netlink: 'syz.3.487': attribute type 15 has an invalid length. [ 150.389156][ T5852] netlink: 11834 bytes leftover after parsing attributes in process `syz.3.487'. [ 150.419108][ T5854] netlink: 'syz.3.487': attribute type 4 has an invalid length. [ 150.426892][ T5854] netlink: 'syz.3.487': attribute type 5 has an invalid length. [ 150.461625][ T5854] netlink: 'syz.3.487': attribute type 6 has an invalid length. [ 150.499634][ T5854] netlink: 'syz.3.487': attribute type 7 has an invalid length. [ 150.509606][ T5854] netlink: 'syz.3.487': attribute type 11 has an invalid length. [ 150.517457][ T5854] netlink: 'syz.3.487': attribute type 15 has an invalid length. [ 150.569240][ T5854] netlink: 'syz.3.487': attribute type 16 has an invalid length. [ 150.577042][ T5854] netlink: 'syz.3.487': attribute type 21 has an invalid length. [ 150.630576][ T5854] netlink: 'syz.3.487': attribute type 25 has an invalid length. [ 150.638370][ T5854] netlink: 11834 bytes leftover after parsing attributes in process `syz.3.487'. [ 150.701261][ T5855] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.488'. [ 151.556689][ T5870] device syzkaller0 entered promiscuous mode [ 151.658448][ T5875] netlink: 40 bytes leftover after parsing attributes in process `syz.3.493'. [ 151.723549][ T5878] netlink: 140 bytes leftover after parsing attributes in process `syz.3.493'. [ 152.486287][ T5897] netlink: 40 bytes leftover after parsing attributes in process `syz.1.499'. [ 152.539616][ T5898] netlink: 11834 bytes leftover after parsing attributes in process `syz.2.497'. [ 152.599875][ T5902] netlink: 140 bytes leftover after parsing attributes in process `syz.1.499'. [ 152.633882][ T5888] netlink: 11834 bytes leftover after parsing attributes in process `syz.2.497'. [ 152.748068][ T5908] netlink: 132 bytes leftover after parsing attributes in process `syz.3.500'. [ 154.788330][ T5964] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.427061][ T5986] delete_channel: no stack [ 155.511314][ T5986] delete_channel: no stack [ 156.161497][ T6008] __nla_validate_parse: 6 callbacks suppressed [ 156.161517][ T6008] netlink: 105940 bytes leftover after parsing attributes in process `syz.0.533'. [ 156.466971][ T6016] FAULT_INJECTION: forcing a failure. [ 156.466971][ T6016] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 156.567283][ T6016] CPU: 1 PID: 6016 Comm: syz.2.537 Not tainted syzkaller #0 [ 156.574632][ T6016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 156.584716][ T6016] Call Trace: [ 156.588018][ T6016] [ 156.590965][ T6016] dump_stack_lvl+0x188/0x250 [ 156.595677][ T6016] ? show_regs_print_info+0x20/0x20 [ 156.600899][ T6016] ? load_image+0x410/0x410 [ 156.605432][ T6016] ? __lock_acquire+0x7b50/0x7b50 [ 156.610487][ T6016] ? rcu_lock_acquire+0xe/0x30 [ 156.615282][ T6016] should_fail+0x383/0x4b0 [ 156.619734][ T6016] _copy_from_user+0x2e/0x170 [ 156.624441][ T6016] __copy_msghdr_from_user+0xc9/0x630 [ 156.629845][ T6016] ? verify_lock_unused+0x140/0x140 [ 156.635065][ T6016] ? tracing_gen_ctx_irq_test+0xb3/0x130 [ 156.641524][ T6016] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 156.646824][ T6016] ? perf_trace_buf_update+0xa8/0x230 [ 156.652222][ T6016] ___sys_sendmsg+0x19a/0x2e0 [ 156.656920][ T6016] ? __sys_sendmsg+0x290/0x290 [ 156.661829][ T6016] __se_sys_sendmsg+0x1b7/0x2a0 [ 156.666694][ T6016] ? lockdep_hardirqs_on+0x94/0x140 [ 156.671904][ T6016] ? __x64_sys_sendmsg+0x80/0x80 [ 156.676880][ T6016] ? __se_sys_sendmsg+0xd/0x2a0 [ 156.681748][ T6016] ? trace_sys_enter+0x1f/0x80 [ 156.686532][ T6016] do_syscall_64+0x4c/0xa0 [ 156.690956][ T6016] ? clear_bhb_loop+0x30/0x80 [ 156.695645][ T6016] ? clear_bhb_loop+0x30/0x80 [ 156.700332][ T6016] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 156.706233][ T6016] RIP: 0033:0x7fdd8e812e99 [ 156.710664][ T6016] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 156.730368][ T6016] RSP: 002b:00007fdd8ca6b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 156.738796][ T6016] RAX: ffffffffffffffda RBX: 00007fdd8ea9afa0 RCX: 00007fdd8e812e99 [ 156.746777][ T6016] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 000000000000000c [ 156.754763][ T6016] RBP: 00007fdd8ca6b090 R08: 0000000000000000 R09: 0000000000000000 [ 156.762828][ T6016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.770813][ T6016] R13: 00007fdd8ea9b038 R14: 00007fdd8ea9afa0 R15: 00007ffe02cb36f8 [ 156.778806][ T6016] [ 157.065571][ T6012] device syzkaller0 entered promiscuous mode [ 157.129800][ T6020] validate_nla: 45 callbacks suppressed [ 157.129818][ T6020] netlink: 'syz.4.536': attribute type 6 has an invalid length. [ 157.167581][ T6023] netlink: 'syz.0.538': attribute type 15 has an invalid length. [ 157.183420][ T6023] netlink: 11834 bytes leftover after parsing attributes in process `syz.0.538'. [ 157.249131][ T6025] netlink: 'syz.0.538': attribute type 4 has an invalid length. [ 157.269766][ T6025] netlink: 'syz.0.538': attribute type 5 has an invalid length. [ 157.277554][ T6025] netlink: 'syz.0.538': attribute type 6 has an invalid length. [ 157.327818][ T6025] netlink: 'syz.0.538': attribute type 7 has an invalid length. [ 157.349205][ T6025] netlink: 'syz.0.538': attribute type 11 has an invalid length. [ 157.357016][ T6025] netlink: 'syz.0.538': attribute type 15 has an invalid length. [ 157.369652][ T6025] netlink: 'syz.0.538': attribute type 16 has an invalid length. [ 157.377537][ T6025] netlink: 'syz.0.538': attribute type 21 has an invalid length. [ 157.385775][ T6025] netlink: 11834 bytes leftover after parsing attributes in process `syz.0.538'. [ 157.395231][ T6016] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.537'. [ 157.417551][ T6030] netlink: 11834 bytes leftover after parsing attributes in process `syz.3.539'. [ 157.484082][ T6031] netlink: 11834 bytes leftover after parsing attributes in process `syz.3.539'. [ 157.713094][ T6034] netlink: 128 bytes leftover after parsing attributes in process `syz.4.540'. [ 157.767687][ T6034] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 157.834703][ T6034] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 158.519754][ T6079] FAULT_INJECTION: forcing a failure. [ 158.519754][ T6079] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 158.581543][ T6079] CPU: 1 PID: 6079 Comm: syz.0.555 Not tainted syzkaller #0 [ 158.588898][ T6079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 158.598987][ T6079] Call Trace: [ 158.602294][ T6079] [ 158.605241][ T6079] dump_stack_lvl+0x188/0x250 [ 158.609947][ T6079] ? show_regs_print_info+0x20/0x20 [ 158.615173][ T6079] ? load_image+0x410/0x410 [ 158.619708][ T6079] ? __lock_acquire+0x7b50/0x7b50 [ 158.624754][ T6079] ? rcu_nmi_exit+0x6f/0xf0 [ 158.629281][ T6079] should_fail+0x383/0x4b0 [ 158.633762][ T6079] _copy_from_user+0x2e/0x170 [ 158.638467][ T6079] iovec_from_user+0x142/0x370 [ 158.643458][ T6079] ? lockdep_hardirqs_on+0x94/0x140 [ 158.648687][ T6079] __import_iovec+0x70/0x490 [ 158.653322][ T6079] ? ___sys_sendmsg+0x1d8/0x2e0 [ 158.659243][ T6079] import_iovec+0x6f/0xa0 [ 158.663600][ T6079] ___sys_sendmsg+0x1fd/0x2e0 [ 158.668304][ T6079] ? __sys_sendmsg+0x290/0x290 [ 158.673137][ T6079] __se_sys_sendmsg+0x1b7/0x2a0 [ 158.678021][ T6079] ? __x64_sys_sendmsg+0x80/0x80 [ 158.683068][ T6079] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 158.688833][ T6079] ? trace_sys_enter+0x1f/0x80 [ 158.693631][ T6079] do_syscall_64+0x4c/0xa0 [ 158.698073][ T6079] ? clear_bhb_loop+0x30/0x80 [ 158.702774][ T6079] ? clear_bhb_loop+0x30/0x80 [ 158.707484][ T6079] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 158.713482][ T6079] RIP: 0033:0x7fee0fbdde99 [ 158.717923][ T6079] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 158.737653][ T6079] RSP: 002b:00007fee0de36028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 158.746107][ T6079] RAX: ffffffffffffffda RBX: 00007fee0fe65fa0 RCX: 00007fee0fbdde99 [ 158.754116][ T6079] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 000000000000000c [ 158.762118][ T6079] RBP: 00007fee0de36090 R08: 0000000000000000 R09: 0000000000000000 [ 158.770139][ T6079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.778400][ T6079] R13: 00007fee0fe66038 R14: 00007fee0fe65fa0 R15: 00007ffd4af85438 [ 158.786416][ T6079] [ 159.047655][ T6091] netlink: 192 bytes leftover after parsing attributes in process `syz.3.559'. [ 159.282952][ T6079] netlink: 11834 bytes leftover after parsing attributes in process `syz.0.555'. [ 159.327678][ T6084] netlink: 11834 bytes leftover after parsing attributes in process `syz.0.555'. [ 159.344311][ T6092] IPv6: NLM_F_CREATE should be specified when creating new route [ 159.367082][ T6092] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 159.374931][ T6092] IPv6: NLM_F_CREATE should be set when creating new route [ 159.382963][ T6092] IPv6: NLM_F_CREATE should be set when creating new route [ 159.390674][ T6092] IPv6: NLM_F_CREATE should be set when creating new route [ 160.116659][ T6115] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.850298][ T6144] FAULT_INJECTION: forcing a failure. [ 160.850298][ T6144] name failslab, interval 1, probability 0, space 0, times 0 [ 160.880268][ T6144] CPU: 1 PID: 6144 Comm: syz.0.577 Not tainted syzkaller #0 [ 160.887616][ T6144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 160.897700][ T6144] Call Trace: [ 160.901002][ T6144] [ 160.903963][ T6144] dump_stack_lvl+0x188/0x250 [ 160.908669][ T6144] ? show_regs_print_info+0x20/0x20 [ 160.913888][ T6144] ? load_image+0x410/0x410 [ 160.918416][ T6144] ? __might_sleep+0xf0/0xf0 [ 160.923026][ T6144] ? __lock_acquire+0x7b50/0x7b50 [ 160.928080][ T6144] ? netlink_insert+0xe90/0x11f0 [ 160.933052][ T6144] should_fail+0x383/0x4b0 [ 160.937508][ T6144] should_failslab+0x5/0x20 [ 160.942027][ T6144] slab_pre_alloc_hook+0x51/0xc0 [ 160.947024][ T6144] kmem_cache_alloc_node+0x47/0x2c0 [ 160.952256][ T6144] ? __alloc_skb+0xf4/0x750 [ 160.956794][ T6144] __alloc_skb+0xf4/0x750 [ 160.961146][ T6144] netlink_sendmsg+0x654/0xbe0 [ 160.965947][ T6144] ? netlink_getsockopt+0x570/0x570 [ 160.971173][ T6144] ? aa_sock_msg_perm+0x94/0x150 [ 160.976139][ T6144] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 160.981443][ T6144] ? security_socket_sendmsg+0x7c/0xa0 [ 160.986932][ T6144] ? netlink_getsockopt+0x570/0x570 [ 160.992160][ T6144] ____sys_sendmsg+0x5be/0x8f0 [ 160.996970][ T6144] ? __sys_sendmsg_sock+0x30/0x30 [ 161.002027][ T6144] ? import_iovec+0x6f/0xa0 [ 161.006570][ T6144] ___sys_sendmsg+0x236/0x2e0 [ 161.011278][ T6144] ? __sys_sendmsg+0x290/0x290 [ 161.016191][ T6144] __se_sys_sendmsg+0x1b7/0x2a0 [ 161.021067][ T6144] ? __x64_sys_sendmsg+0x80/0x80 [ 161.026110][ T6144] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 161.031869][ T6144] ? trace_sys_enter+0x1f/0x80 [ 161.036662][ T6144] do_syscall_64+0x4c/0xa0 [ 161.041115][ T6144] ? clear_bhb_loop+0x30/0x80 [ 161.045833][ T6144] ? clear_bhb_loop+0x30/0x80 [ 161.050555][ T6144] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 161.056479][ T6144] RIP: 0033:0x7fee0fbdde99 [ 161.060918][ T6144] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 161.080545][ T6144] RSP: 002b:00007fee0de36028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 161.088981][ T6144] RAX: ffffffffffffffda RBX: 00007fee0fe65fa0 RCX: 00007fee0fbdde99 [ 161.096976][ T6144] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 000000000000000c [ 161.105052][ T6144] RBP: 00007fee0de36090 R08: 0000000000000000 R09: 0000000000000000 [ 161.113088][ T6144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 161.121083][ T6144] R13: 00007fee0fe66038 R14: 00007fee0fe65fa0 R15: 00007ffd4af85438 [ 161.129099][ T6144] [ 161.292476][ T6134] device syzkaller0 entered promiscuous mode [ 161.303953][ T6141] __nla_validate_parse: 5 callbacks suppressed [ 161.303971][ T6141] netlink: 4 bytes leftover after parsing attributes in process `syz.3.576'. [ 161.333561][ T6142] netlink: 4 bytes leftover after parsing attributes in process `syz.3.576'. [ 161.351529][ T6153] netlink: 12542 bytes leftover after parsing attributes in process `syz.0.577'. [ 161.365663][ T6144] netlink: 11834 bytes leftover after parsing attributes in process `syz.0.577'. [ 161.713237][ T6159] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.590'. [ 161.800220][ T6159] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.252098][ T6171] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.583'. [ 163.507602][ T6191] device syzkaller0 entered promiscuous mode [ 164.108717][ T6213] validate_nla: 58 callbacks suppressed [ 164.108740][ T6213] netlink: 'syz.1.594': attribute type 4 has an invalid length. [ 164.179313][ T6213] netlink: 'syz.1.594': attribute type 5 has an invalid length. [ 164.252042][ T6213] netlink: 'syz.1.594': attribute type 6 has an invalid length. [ 164.252550][ T6217] FAULT_INJECTION: forcing a failure. [ 164.252550][ T6217] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 164.322756][ T6213] netlink: 'syz.1.594': attribute type 7 has an invalid length. [ 164.360098][ T6217] CPU: 0 PID: 6217 Comm: syz.2.597 Not tainted syzkaller #0 [ 164.367446][ T6217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 164.377281][ T6213] netlink: 'syz.1.594': attribute type 11 has an invalid length. [ 164.377528][ T6217] Call Trace: [ 164.377538][ T6217] [ 164.386725][ T6213] netlink: 'syz.1.594': attribute type 15 has an invalid length. [ 164.388644][ T6217] dump_stack_lvl+0x188/0x250 [ 164.391620][ T6213] netlink: 'syz.1.594': attribute type 16 has an invalid length. [ 164.399305][ T6217] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 164.399334][ T6217] ? show_regs_print_info+0x20/0x20 [ 164.399353][ T6217] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 164.404023][ T6213] netlink: 'syz.1.594': attribute type 21 has an invalid length. [ 164.411744][ T6217] should_fail+0x383/0x4b0 [ 164.411774][ T6217] _copy_from_user+0x2e/0x170 [ 164.446156][ T6217] kstrtouint_from_user+0xd3/0x220 [ 164.451289][ T6217] ? kstrtol_from_user+0x2a0/0x2a0 [ 164.456433][ T6217] proc_fail_nth_write+0x8b/0x200 [ 164.461466][ T6217] ? proc_fail_nth_read+0x220/0x220 [ 164.466673][ T6217] ? common_file_perm+0x171/0x1c0 [ 164.471711][ T6217] ? proc_fail_nth_read+0x220/0x220 [ 164.476921][ T6217] vfs_write+0x304/0xd70 [ 164.481182][ T6217] ? file_end_write+0x250/0x250 [ 164.486066][ T6217] ? mutex_lock_nested+0x17/0x20 [ 164.491017][ T6217] ? __fdget_pos+0x2bf/0x370 [ 164.495610][ T6217] ? ksys_write+0x70/0x260 [ 164.500048][ T6217] ksys_write+0x153/0x260 [ 164.504393][ T6217] ? __ia32_sys_read+0x80/0x80 [ 164.509168][ T6217] ? trace_sys_enter+0x1f/0x80 [ 164.513941][ T6217] do_syscall_64+0x4c/0xa0 [ 164.518356][ T6217] ? clear_bhb_loop+0x30/0x80 [ 164.523034][ T6217] ? clear_bhb_loop+0x30/0x80 [ 164.527713][ T6217] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 164.533614][ T6217] RIP: 0033:0x7fdd8e7d36ce [ 164.538031][ T6217] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 164.557822][ T6217] RSP: 002b:00007fdd8ca6afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 164.566247][ T6217] RAX: ffffffffffffffda RBX: 00007fdd8ca6b6c0 RCX: 00007fdd8e7d36ce [ 164.574220][ T6217] RDX: 0000000000000001 RSI: 00007fdd8ca6b0a0 RDI: 000000000000000d [ 164.583577][ T6217] RBP: 00007fdd8ca6b090 R08: 0000000000000000 R09: 0000000000000000 [ 164.591580][ T6217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 164.599668][ T6217] R13: 00007fdd8ea9b038 R14: 00007fdd8ea9afa0 R15: 00007ffe02cb36f8 [ 164.607832][ T6217] [ 164.734915][ T6213] netlink: 'syz.1.594': attribute type 25 has an invalid length. [ 164.785047][ T6213] netlink: 'syz.1.594': attribute type 27 has an invalid length. [ 164.806554][ T6213] netlink: 11834 bytes leftover after parsing attributes in process `syz.1.594'. [ 164.824003][ T6206] netlink: 11834 bytes leftover after parsing attributes in process `syz.1.594'. [ 164.850090][ T6219] netlink: 11834 bytes leftover after parsing attributes in process `syz.2.597'. [ 164.961186][ T6233] netlink: 40 bytes leftover after parsing attributes in process `syz.1.601'. [ 165.170381][ T6223] device syzkaller0 entered promiscuous mode [ 167.039603][ T6261] device syzkaller0 entered promiscuous mode [ 167.080588][ T6276] __nla_validate_parse: 3 callbacks suppressed [ 167.080692][ T6276] netlink: 40 bytes leftover after parsing attributes in process `syz.4.616'. [ 167.102424][ T6276] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 167.136999][ T6280] netlink: 140 bytes leftover after parsing attributes in process `syz.4.616'. [ 167.356079][ T6293] device syzkaller0 entered promiscuous mode [ 168.541974][ T6308] device syzkaller0 entered promiscuous mode [ 169.317354][ T6326] validate_nla: 16 callbacks suppressed [ 169.317376][ T6326] netlink: 'syz.4.632': attribute type 10 has an invalid length. [ 169.421260][ T6326] netlink: 40 bytes leftover after parsing attributes in process `syz.4.632'. [ 169.453287][ T6326] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 169.707150][ T6328] netlink: 'syz.4.632': attribute type 11 has an invalid length. [ 169.727961][ T6328] netlink: 140 bytes leftover after parsing attributes in process `syz.4.632'. [ 170.121429][ T6347] netlink: 'syz.3.637': attribute type 10 has an invalid length. [ 170.564555][ T6347] team0: Device wg1 is of different type [ 170.650915][ T6345] delete_channel: no stack [ 170.689533][ T6345] delete_channel: no stack [ 170.771908][ T6341] device syzkaller0 entered promiscuous mode [ 170.820856][ T6366] netlink: 'syz.0.642': attribute type 21 has an invalid length. [ 170.912471][ T6366] netlink: 156 bytes leftover after parsing attributes in process `syz.0.642'. [ 171.504237][ T6381] netlink: 'syz.4.647': attribute type 10 has an invalid length. [ 171.532806][ T6381] netlink: 40 bytes leftover after parsing attributes in process `syz.4.647'. [ 171.546638][ T6381] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 171.738141][ T6387] netlink: 'syz.3.651': attribute type 3 has an invalid length. [ 171.810428][ T6383] netlink: 11834 bytes leftover after parsing attributes in process `syz.0.649'. [ 171.831131][ T6387] netlink: 132 bytes leftover after parsing attributes in process `syz.3.651'. [ 171.854268][ T6381] netlink: 'syz.4.647': attribute type 11 has an invalid length. [ 171.932636][ T6381] netlink: 140 bytes leftover after parsing attributes in process `syz.4.647'. [ 172.090219][ T6389] netlink: 'syz.0.649': attribute type 28 has an invalid length. [ 172.098105][ T6389] netlink: 'syz.0.649': attribute type 29 has an invalid length. [ 172.113741][ T6389] netlink: 'syz.0.649': attribute type 30 has an invalid length. [ 172.395195][ T6405] netlink: 132 bytes leftover after parsing attributes in process `syz.2.654'. [ 172.840352][ T6411] netlink: 152 bytes leftover after parsing attributes in process `syz.0.657'. [ 173.417342][ T6411] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 173.539821][ T6431] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.663'. [ 173.579737][ T6431] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 174.170544][ T6440] device syzkaller0 entered promiscuous mode [ 175.489940][ T6473] device syzkaller0 entered promiscuous mode [ 175.617374][ T6482] validate_nla: 2 callbacks suppressed [ 175.617435][ T6482] netlink: 'syz.0.678': attribute type 9 has an invalid length. [ 175.649811][ T6482] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.678'. [ 178.820984][ T6543] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.698'. [ 178.914289][ T6545] netlink: 'syz.0.698': attribute type 3 has an invalid length. [ 178.922505][ T6545] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.698'. [ 179.693318][ T6558] netlink: 'syz.0.703': attribute type 1 has an invalid length. [ 179.800518][ T6558] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.703'. [ 180.019928][ T6558] netlink: 1 bytes leftover after parsing attributes in process `syz.0.703'. [ 180.710722][ T6572] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.707'. [ 180.769711][ T6573] device syzkaller0 entered promiscuous mode [ 181.247051][ T6586] netlink: 'syz.3.710': attribute type 10 has an invalid length. [ 181.276299][ T6586] netlink: 40 bytes leftover after parsing attributes in process `syz.3.710'. [ 181.468889][ T6589] netlink: 'syz.3.710': attribute type 11 has an invalid length. [ 181.530005][ T6589] netlink: 140 bytes leftover after parsing attributes in process `syz.3.710'. [ 181.759496][ T6599] netlink: 'syz.0.724': attribute type 10 has an invalid length. [ 181.795632][ T6599] netlink: 40 bytes leftover after parsing attributes in process `syz.0.724'. [ 181.940669][ T6604] netlink: 'syz.0.724': attribute type 11 has an invalid length. [ 181.972210][ T6604] netlink: 140 bytes leftover after parsing attributes in process `syz.0.724'. [ 184.636990][ T6637] netlink: 'syz.3.723': attribute type 6 has an invalid length. [ 185.423086][ T6656] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 185.619350][ T6658] netlink: 'syz.3.730': attribute type 9 has an invalid length. [ 185.638002][ T6658] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.730'. [ 185.839942][ T6667] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 186.191461][ T4230] Bluetooth: hci1: command 0x0406 tx timeout [ 186.244202][ T4230] Bluetooth: hci2: command 0x0406 tx timeout [ 186.250502][ T4230] Bluetooth: hci4: command 0x0406 tx timeout [ 186.256550][ T4230] Bluetooth: hci3: command 0x0406 tx timeout [ 186.349600][ T4230] Bluetooth: hci0: command 0x0406 tx timeout [ 186.574967][ T6680] netlink: 12542 bytes leftover after parsing attributes in process `syz.0.735'. [ 187.006360][ T6688] syz.3.739 (6688) used obsolete PPPIOCDETACH ioctl [ 188.850184][ T6712] netlink: 'syz.2.748': attribute type 10 has an invalid length. [ 188.919792][ T6712] netlink: 40 bytes leftover after parsing attributes in process `syz.2.748'. [ 189.153873][ T6712] netlink: 'syz.2.748': attribute type 11 has an invalid length. [ 189.280815][ T6712] netlink: 140 bytes leftover after parsing attributes in process `syz.2.748'. [ 190.308356][ T6744] netlink: 'syz.2.759': attribute type 4 has an invalid length. [ 190.433612][ T6744] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.759'. [ 191.152725][ T6793] netlink: 'syz.0.765': attribute type 10 has an invalid length. [ 191.229461][ T6793] netlink: 40 bytes leftover after parsing attributes in process `syz.0.765'. [ 191.509960][ T6800] netlink: 'syz.2.766': attribute type 15 has an invalid length. [ 191.570383][ T6800] netlink: 11834 bytes leftover after parsing attributes in process `syz.2.766'. [ 191.707368][ T6791] netlink: 'syz.2.766': attribute type 4 has an invalid length. [ 191.743553][ T6791] netlink: 'syz.2.766': attribute type 5 has an invalid length. [ 191.827591][ T6791] netlink: 'syz.2.766': attribute type 6 has an invalid length. [ 191.909226][ T6791] netlink: 'syz.2.766': attribute type 7 has an invalid length. [ 191.917032][ T6791] netlink: 'syz.2.766': attribute type 11 has an invalid length. [ 192.024514][ T6791] netlink: 11834 bytes leftover after parsing attributes in process `syz.2.766'. [ 192.122698][ T6793] netlink: 140 bytes leftover after parsing attributes in process `syz.0.765'. [ 192.448948][ T6802] device syzkaller0 entered promiscuous mode [ 194.363049][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.369551][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.402547][ T6840] team0: Port device geneve1 added [ 194.510422][ T6851] validate_nla: 11 callbacks suppressed [ 194.510443][ T6851] netlink: 'syz.3.782': attribute type 10 has an invalid length. [ 194.695161][ T6851] netlink: 40 bytes leftover after parsing attributes in process `syz.3.782'. [ 194.759242][ T6849] netlink: 11834 bytes leftover after parsing attributes in process `syz.4.781'. [ 195.032032][ T6867] netlink: 'syz.2.785': attribute type 2 has an invalid length. [ 195.233163][ T6866] netlink: 156 bytes leftover after parsing attributes in process `syz.2.785'. [ 195.325556][ T6867] netlink: 'syz.2.785': attribute type 7 has an invalid length. [ 195.385324][ T6867] netlink: 208644 bytes leftover after parsing attributes in process `syz.2.785'. [ 195.564102][ T6861] device syzkaller0 entered promiscuous mode [ 196.567364][ T6898] netlink: 'syz.2.797': attribute type 10 has an invalid length. [ 196.587984][ T6898] netlink: 40 bytes leftover after parsing attributes in process `syz.2.797'. [ 196.906159][ T6903] netlink: 'syz.2.797': attribute type 11 has an invalid length. [ 197.043225][ T6903] netlink: 140 bytes leftover after parsing attributes in process `syz.2.797'. [ 200.773720][ T6976] device syzkaller0 entered promiscuous mode [ 200.833051][ T6983] netlink: 5427 bytes leftover after parsing attributes in process `syz.1.821'. [ 200.895015][ T6983] netlink: 52477 bytes leftover after parsing attributes in process `syz.1.821'. [ 200.991359][ T6983] netlink: 71676 bytes leftover after parsing attributes in process `syz.1.821'. [ 202.567873][ T7021] netlink: 11834 bytes leftover after parsing attributes in process `syz.1.832'. [ 203.411887][ T7039] netlink: 'syz.2.838': attribute type 10 has an invalid length. [ 203.469723][ T7039] netlink: 40 bytes leftover after parsing attributes in process `syz.2.838'. [ 203.651135][ T7048] netlink: 'syz.3.841': attribute type 10 has an invalid length. [ 203.658938][ T7048] netlink: 40 bytes leftover after parsing attributes in process `syz.3.841'. [ 203.887471][ T7039] netlink: 'syz.2.838': attribute type 11 has an invalid length. [ 203.931390][ T7039] netlink: 140 bytes leftover after parsing attributes in process `syz.2.838'. [ 204.057273][ T7051] netlink: 'syz.3.841': attribute type 11 has an invalid length. [ 204.149221][ T7051] netlink: 140 bytes leftover after parsing attributes in process `syz.3.841'. [ 205.800201][ T7092] netlink: 'syz.2.854': attribute type 10 has an invalid length. [ 205.819146][ T7092] netlink: 40 bytes leftover after parsing attributes in process `syz.2.854'. [ 206.248227][ T7090] device syzkaller0 entered promiscuous mode [ 206.439271][ T7097] netlink: 'syz.2.854': attribute type 11 has an invalid length. [ 206.488091][ T7097] netlink: 140 bytes leftover after parsing attributes in process `syz.2.854'. [ 206.879792][ T7105] netlink: 'syz.1.857': attribute type 10 has an invalid length. [ 206.887578][ T7105] netlink: 40 bytes leftover after parsing attributes in process `syz.1.857'. [ 207.265329][ T7105] netlink: 'syz.1.857': attribute type 11 has an invalid length. [ 207.349935][ T7105] netlink: 140 bytes leftover after parsing attributes in process `syz.1.857'. [ 209.724873][ T7157] netlink: 'syz.3.873': attribute type 10 has an invalid length. [ 209.732700][ T7157] netlink: 40 bytes leftover after parsing attributes in process `syz.3.873'. [ 210.110368][ T7157] netlink: 'syz.3.873': attribute type 11 has an invalid length. [ 210.151870][ T7157] netlink: 140 bytes leftover after parsing attributes in process `syz.3.873'. [ 210.223953][ T7155] netlink: 11834 bytes leftover after parsing attributes in process `syz.4.872'. [ 212.654636][ T7202] chnl_net:caif_netlink_parms(): no params data found [ 212.725767][ T7219] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.892'. [ 213.469301][ T6784] Bluetooth: hci5: command 0x0409 tx timeout [ 213.583029][ T7202] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.671404][ T7202] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.714734][ T7202] device bridge_slave_0 entered promiscuous mode [ 213.776228][ T7202] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.813172][ T7202] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.882076][ T7202] device bridge_slave_1 entered promiscuous mode [ 214.050507][ T7255] netlink: 'syz.4.905': attribute type 10 has an invalid length. [ 214.169075][ T7255] netlink: 40 bytes leftover after parsing attributes in process `syz.4.905'. [ 214.301926][ T7255] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 214.531941][ T7202] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.560529][ T7255] netlink: 'syz.4.905': attribute type 11 has an invalid length. [ 214.568330][ T7255] netlink: 140 bytes leftover after parsing attributes in process `syz.4.905'. [ 214.631140][ T7202] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.722620][ T7266] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.907'. [ 215.348098][ T7202] team0: Port device team_slave_0 added [ 215.358747][ T7266] netlink: 3064 bytes leftover after parsing attributes in process `syz.2.907'. [ 215.390439][ T7202] team0: Port device team_slave_1 added [ 215.438412][ T7202] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 215.499199][ T7202] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.549195][ T6784] Bluetooth: hci5: command 0x041b tx timeout [ 215.571702][ T7286] FAULT_INJECTION: forcing a failure. [ 215.571702][ T7286] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 215.599298][ T7202] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 215.608011][ T7286] CPU: 0 PID: 7286 Comm: syz.3.914 Not tainted syzkaller #0 [ 215.617132][ T7286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 215.627213][ T7286] Call Trace: [ 215.630506][ T7286] [ 215.630871][ T7202] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 215.633455][ T7286] dump_stack_lvl+0x188/0x250 [ 215.645076][ T7286] ? show_regs_print_info+0x20/0x20 [ 215.650298][ T7286] ? load_image+0x410/0x410 [ 215.654827][ T7286] ? __lock_acquire+0x7b50/0x7b50 [ 215.659974][ T7286] should_fail+0x383/0x4b0 [ 215.664597][ T7286] _copy_from_user+0x2e/0x170 [ 215.669303][ T7286] __copy_msghdr_from_user+0xc9/0x630 [ 215.673405][ T7202] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.674697][ T7286] ? verify_lock_unused+0x140/0x140 [ 215.705837][ T7286] ? mark_lock+0x94/0x320 [ 215.710469][ T7286] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 215.715786][ T7286] ? __lock_acquire+0x13dc/0x7b50 [ 215.719005][ T7202] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 215.720837][ T7286] ___sys_sendmsg+0x19a/0x2e0 [ 215.735995][ T7286] ? __sys_sendmsg+0x290/0x290 [ 215.740829][ T7286] __se_sys_sendmsg+0x1b7/0x2a0 [ 215.745709][ T7286] ? __x64_sys_sendmsg+0x80/0x80 [ 215.750664][ T7286] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 215.756680][ T7286] ? lockdep_hardirqs_on+0x94/0x140 [ 215.761898][ T7286] do_syscall_64+0x4c/0xa0 [ 215.766329][ T7286] ? clear_bhb_loop+0x30/0x80 [ 215.771019][ T7286] ? clear_bhb_loop+0x30/0x80 [ 215.775714][ T7286] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 215.781621][ T7286] RIP: 0033:0x7f5a73b31e99 [ 215.786061][ T7286] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 215.805781][ T7286] RSP: 002b:00007f5a71d8a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 215.814226][ T7286] RAX: ffffffffffffffda RBX: 00007f5a73db9fa0 RCX: 00007f5a73b31e99 [ 215.822225][ T7286] RDX: 00000000000040c0 RSI: 0000200000000b80 RDI: 0000000000000003 [ 215.830232][ T7286] RBP: 00007f5a71d8a090 R08: 0000000000000000 R09: 0000000000000000 [ 215.838232][ T7286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 215.846219][ T7286] R13: 00007f5a73dba038 R14: 00007f5a73db9fa0 R15: 00007ffeece01c88 [ 215.854228][ T7286] [ 216.000765][ T7202] device hsr_slave_0 entered promiscuous mode [ 216.096009][ T7202] device hsr_slave_1 entered promiscuous mode [ 216.104550][ T7202] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 216.128670][ T7202] Cannot create hsr debugfs directory [ 216.140521][ T7293] device batadv0 entered promiscuous mode [ 216.176960][ T7300] netlink: 'syz.1.920': attribute type 10 has an invalid length. [ 216.196567][ T7300] netlink: 40 bytes leftover after parsing attributes in process `syz.1.920'. [ 216.591896][ T7306] device syzkaller0 entered promiscuous mode [ 216.707458][ T7300] netlink: 'syz.1.920': attribute type 11 has an invalid length. [ 216.768097][ T7300] netlink: 140 bytes leftover after parsing attributes in process `syz.1.920'. [ 217.115989][ T7202] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 217.170531][ T7329] netlink: 'syz.2.929': attribute type 3 has an invalid length. [ 217.178344][ T7202] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 217.233220][ T7202] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 217.244699][ T7329] netlink: 132 bytes leftover after parsing attributes in process `syz.2.929'. [ 217.294106][ T7202] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 217.320967][ T7329] netlink: 'syz.2.929': attribute type 1 has an invalid length. [ 217.352614][ T7329] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.929'. [ 217.421137][ T7329] netlink: 1 bytes leftover after parsing attributes in process `syz.2.929'. [ 217.599209][ T7202] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.629334][ T6784] Bluetooth: hci5: command 0x040f tx timeout [ 217.662978][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 217.807543][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 217.939483][ T7202] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.980754][ T7359] netlink: 'syz.3.940': attribute type 2 has an invalid length. [ 217.994550][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 218.041855][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 218.081730][ T156] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.088857][ T156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.154230][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 218.270486][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 218.310051][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 218.332066][ T156] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.339215][ T156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.430895][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 218.458626][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 218.497549][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 218.511261][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 218.530613][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 218.551348][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 218.561052][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 218.596306][ T7202] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 218.628131][ T7202] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 218.679254][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 218.706848][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 218.716992][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 218.779301][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 218.866608][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 219.303511][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 219.313262][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 219.351576][ T7202] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.597157][ T7411] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.955'. [ 219.709643][ T6782] Bluetooth: hci5: command 0x0419 tx timeout [ 220.143285][ T4243] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.270746][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 220.324245][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 220.417703][ T4243] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.471648][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 220.490935][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 220.543274][ T7202] device veth0_vlan entered promiscuous mode [ 220.597360][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 220.628232][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 220.662036][ T7459] netlink: 11834 bytes leftover after parsing attributes in process `syz.2.969'. [ 220.699818][ T4243] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.733417][ T7458] netlink: 'syz.2.969': attribute type 28 has an invalid length. [ 220.746885][ T7458] netlink: 'syz.2.969': attribute type 29 has an invalid length. [ 220.774765][ T7458] netlink: 'syz.2.969': attribute type 30 has an invalid length. [ 220.787165][ T7456] netlink: 'syz.4.967': attribute type 11 has an invalid length. [ 220.807450][ T7456] netlink: 140 bytes leftover after parsing attributes in process `syz.4.967'. [ 220.895256][ T7202] device veth1_vlan entered promiscuous mode [ 221.039720][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 221.048169][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 221.070327][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 221.098154][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 221.150971][ T7202] device veth0_macvtap entered promiscuous mode [ 221.212398][ T7481] netlink: 'syz.1.975': attribute type 10 has an invalid length. [ 221.257864][ T7481] netlink: 40 bytes leftover after parsing attributes in process `syz.1.975'. [ 221.351006][ T7202] device veth1_macvtap entered promiscuous mode [ 221.467192][ T7202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.505340][ T7202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.548199][ T7202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.608633][ T7202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.637169][ T7202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.709122][ T7202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.730019][ T7202] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 221.738679][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 221.748862][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 221.760579][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 221.782680][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 221.828597][ T7515] netlink: 13566 bytes leftover after parsing attributes in process `syz.2.983'. [ 221.868861][ T7202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.919223][ T7202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.988113][ T7202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.122017][ T7202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.134353][ T7202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.145589][ T7202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.155885][ T7202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.166690][ T7202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.178314][ T7202] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 222.227403][ T7514] device syzkaller0 entered promiscuous mode [ 222.298453][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 222.349672][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 222.386839][ T7202] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.416085][ T7202] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.445651][ T7202] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.454880][ T7202] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.609347][ T7550] netlink: 'syz.4.992': attribute type 10 has an invalid length. [ 222.633931][ T7550] netlink: 40 bytes leftover after parsing attributes in process `syz.4.992'. [ 222.658373][ T7550] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 222.774661][ T7554] netlink: 'syz.4.992': attribute type 11 has an invalid length. [ 222.798201][ T7554] netlink: 140 bytes leftover after parsing attributes in process `syz.4.992'. [ 223.247917][ T7567] netlink: 132 bytes leftover after parsing attributes in process `syz.1.996'. [ 223.310652][ T4250] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.324404][ T4250] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.497057][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 223.610450][ T7600] netlink: 14560 bytes leftover after parsing attributes in process `syz.3.1005'. [ 223.712417][ T4250] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.728953][ T4250] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.768934][ T7611] netlink: 'syz.4.1009': attribute type 10 has an invalid length. [ 223.849124][ T7611] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1009'. [ 223.878830][ T7611] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 224.170003][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 224.237224][ T7614] netlink: 'syz.4.1009': attribute type 11 has an invalid length. [ 224.281270][ T7614] netlink: 140 bytes leftover after parsing attributes in process `syz.4.1009'. [ 225.537928][ T7657] netlink: 'syz.4.1021': attribute type 27 has an invalid length. [ 225.581574][ T7657] netlink: 'syz.4.1021': attribute type 3 has an invalid length. [ 225.858647][ T7675] netlink: 'syz.3.1025': attribute type 10 has an invalid length. [ 225.866821][ T7675] __nla_validate_parse: 2 callbacks suppressed [ 225.866837][ T7675] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1025'. [ 226.127354][ T7683] netlink: 'syz.3.1025': attribute type 11 has an invalid length. [ 226.184684][ T7683] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1025'. [ 226.621988][ T4243] device hsr_slave_0 left promiscuous mode [ 226.684063][ T4243] device hsr_slave_1 left promiscuous mode [ 226.704111][ T4243] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 226.821262][ T4243] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 226.877680][ T4243] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 226.896060][ T4243] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 227.041674][ T4243] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 227.070926][ T4243] batman_adv: batadv0: Removing interface: virt_wifi0 [ 227.078545][ T4243] device bridge_slave_1 left promiscuous mode [ 227.091442][ T4243] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.118330][ T4243] device bridge_slave_0 left promiscuous mode [ 227.133695][ T4243] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.191952][ T4243] device veth1_macvtap left promiscuous mode [ 227.204281][ T4243] device veth0_macvtap left promiscuous mode [ 227.226527][ T4243] device veth1_vlan left promiscuous mode [ 227.261910][ T4243] device veth0_vlan left promiscuous mode [ 227.277797][ T7715] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1037'. [ 227.310946][ T7715] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 227.324125][ T7715] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 228.047647][ T4243] team0 (unregistering): Port device team_slave_1 removed [ 228.082197][ T4243] team0 (unregistering): Port device team_slave_0 removed [ 228.116467][ T4243] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 228.156787][ T4243] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 228.445899][ T4243] bond0 (unregistering): Released all slaves [ 228.573159][ T7709] netlink: 'syz.5.1034': attribute type 15 has an invalid length. [ 228.588167][ T7709] netlink: 'syz.5.1034': attribute type 7 has an invalid length. [ 228.602672][ T7709] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1034'. [ 228.637698][ T7721] netlink: 'syz.2.1040': attribute type 10 has an invalid length. [ 228.654234][ T7721] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1040'. [ 228.739077][ T7723] netlink: 'syz.2.1040': attribute type 11 has an invalid length. [ 228.746942][ T7723] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1040'. [ 229.890325][ T7769] syzkaller0: create flow: hash 482165946 index 2 [ 229.993529][ T6782] syzkaller0: tun_net_xmit 76 [ 229.998671][ T6782] syzkaller0: tun_net_xmit 48 [ 230.074322][ T4232] syzkaller0: tun_net_xmit 76 [ 230.082378][ T6784] syzkaller0: tun_net_xmit 76 [ 230.130158][ T7762] syzkaller0: delete flow: hash 482165946 index 2 [ 230.171241][ T4232] syzkaller0: tun_net_xmit 76 [ 230.199624][ T4891] syzkaller0: tun_net_xmit 76 [ 232.556168][ T7841] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 232.582277][ T7841] device syzkaller0 entered promiscuous mode [ 234.715201][ T7877] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.723575][ T7877] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.819262][ T7887] device bridge_slave_1 left promiscuous mode [ 234.826079][ T7887] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.931750][ T7887] device bridge_slave_0 left promiscuous mode [ 234.962006][ T7887] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.050345][ T4905] Bluetooth: hci5: command 0x0406 tx timeout [ 237.582655][ T7965] syzkaller0: create flow: hash 482165946 index 2 [ 237.713368][ T6782] syzkaller0: tun_net_xmit 76 [ 237.718285][ T6782] syzkaller0: tun_net_xmit 48 [ 237.759140][ T4230] syzkaller0: tun_net_xmit 76 [ 238.180452][ T4232] syzkaller0: tun_net_xmit 76 [ 238.264704][ T7958] syzkaller0: delete flow: hash 482165946 index 2 [ 243.787539][ T8109] bridge0: port 4(team0) entered blocking state [ 243.839675][ T8109] bridge0: port 4(team0) entered disabled state [ 244.032258][ T8109] device team0 entered promiscuous mode [ 244.038913][ T8109] device team_slave_0 entered promiscuous mode [ 244.076630][ T8109] device team_slave_1 entered promiscuous mode [ 244.226581][ T8109] bridge0: port 4(team0) entered blocking state [ 244.233501][ T8109] bridge0: port 4(team0) entered forwarding state [ 245.313801][ T8139] device syzkaller0 entered promiscuous mode [ 245.609572][ T8150] device syzkaller0 entered promiscuous mode [ 247.842621][ T8200] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 247.893823][ T8200] device syzkaller0 entered promiscuous mode [ 248.447161][ T8227] syz_tun: tun_net_xmit 86 [ 249.479930][ C1] syz_tun: tun_net_xmit 86 [ 250.509165][ C1] syz_tun: tun_net_xmit 86 [ 252.740246][ T8356] device syzkaller0 entered promiscuous mode [ 255.801529][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.807931][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.509982][ T8483] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1277'. [ 256.796798][ T8506] netlink: 'syz.5.1281': attribute type 3 has an invalid length. [ 256.827636][ T8506] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1281'. [ 257.173221][ T8532] netlink: 'syz.1.1287': attribute type 10 has an invalid length. [ 257.207685][ T8532] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1287'. [ 257.402189][ T8532] netlink: 'syz.1.1287': attribute type 11 has an invalid length. [ 257.463103][ T8532] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1287'. [ 258.797825][ T8601] netlink: 'syz.4.1306': attribute type 10 has an invalid length. [ 258.829034][ T8601] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1306'. [ 258.916275][ T8601] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 259.065260][ T8598] netlink: 'syz.4.1306': attribute type 11 has an invalid length. [ 259.126549][ T8598] netlink: 140 bytes leftover after parsing attributes in process `syz.4.1306'. [ 260.373825][ T8678] netlink: 'syz.1.1328': attribute type 13 has an invalid length. [ 260.414111][ T8678] netlink: 172 bytes leftover after parsing attributes in process `syz.1.1328'. [ 261.103590][ T8678] erspan0: refused to change device tx_queue_len [ 261.623199][ T8726] netlink: 'syz.3.1341': attribute type 10 has an invalid length. [ 261.790052][ T8726] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1341'. [ 261.953708][ T8726] netlink: 'syz.3.1341': attribute type 11 has an invalid length. [ 262.001760][ T8726] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1341'. [ 262.562140][ T8772] netlink: 'syz.5.1355': attribute type 10 has an invalid length. [ 262.605850][ T8772] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1355'. [ 262.637040][ T8772] batman_adv: batadv0: Adding interface: virt_wifi0 [ 262.644339][ T8772] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.701172][ T8772] batman_adv: batadv0: Interface activated: virt_wifi0 [ 262.918896][ T8778] netlink: 'syz.5.1355': attribute type 11 has an invalid length. [ 263.002253][ T8778] netlink: 140 bytes leftover after parsing attributes in process `syz.5.1355'. [ 263.063889][ T8790] netlink: 'syz.2.1358': attribute type 10 has an invalid length. [ 263.107941][ T8790] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1358'. [ 263.410687][ T8804] netlink: 1057 bytes leftover after parsing attributes in process `syz.1.1363'. [ 263.423977][ T8790] netlink: 'syz.2.1358': attribute type 11 has an invalid length. [ 263.441830][ T8790] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1358'. [ 263.574042][ T8804] netlink: 'syz.1.1363': attribute type 9 has an invalid length. [ 263.636707][ T8804] netlink: 144304 bytes leftover after parsing attributes in process `syz.1.1363'. [ 264.558356][ T8826] netlink: 'syz.1.1372': attribute type 10 has an invalid length. [ 264.643905][ T8826] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1372'. [ 264.734003][ T8837] netlink: 'syz.3.1374': attribute type 10 has an invalid length. [ 264.869117][ T8838] sctp: [Deprecated]: syz.2.1375 (pid 8838) Use of int in max_burst socket option deprecated. [ 264.869117][ T8838] Use struct sctp_assoc_value instead [ 264.904451][ T8837] team0: Device hsr_slave_0 failed to register rx_handler [ 264.976532][ T8829] netlink: 'syz.4.1371': attribute type 10 has an invalid length. [ 264.994231][ T8829] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1371'. [ 265.037448][ T8829] device ipvlan1 entered promiscuous mode [ 265.107745][ T8829] bridge0: port 5(ipvlan1) entered blocking state [ 265.160766][ T8829] bridge0: port 5(ipvlan1) entered disabled state [ 265.324526][ T8829] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 265.410099][ T8826] netlink: 'syz.1.1372': attribute type 11 has an invalid length. [ 267.080302][ T8897] validate_nla: 1 callbacks suppressed [ 267.080320][ T8897] netlink: 'syz.3.1393': attribute type 10 has an invalid length. [ 267.219196][ T8897] __nla_validate_parse: 2 callbacks suppressed [ 267.219215][ T8897] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1393'. [ 267.339470][ T8895] ref_ctr_offset mismatch. inode: 0x5e2 offset: 0xe ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 267.356115][ T8904] netlink: 'syz.3.1393': attribute type 11 has an invalid length. [ 267.420261][ T8904] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1393'. [ 267.469146][ T8912] netlink: 'syz.1.1398': attribute type 10 has an invalid length. [ 267.494233][ T8912] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1398'. [ 267.688098][ T8912] netlink: 'syz.1.1398': attribute type 11 has an invalid length. [ 267.706415][ T8912] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1398'. [ 268.499758][ T8950] netlink: 'syz.2.1412': attribute type 10 has an invalid length. [ 268.545489][ T8950] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1412'. [ 268.635938][ T8958] netlink: 'syz.3.1414': attribute type 10 has an invalid length. [ 268.657191][ T8958] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1414'. [ 268.723576][ T8955] netlink: 'syz.2.1412': attribute type 11 has an invalid length. [ 268.753346][ T8955] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1412'. [ 268.858730][ T8958] netlink: 'syz.3.1414': attribute type 11 has an invalid length. [ 268.884846][ T8958] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1414'. [ 269.782944][ T8994] netlink: 'syz.3.1430': attribute type 11 has an invalid length. [ 269.874162][ T8994] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1430'. [ 269.894506][ T8999] netlink: 'syz.4.1427': attribute type 33 has an invalid length. [ 269.924112][ T8999] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1427'. [ 270.614020][ T9021] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 270.636494][ T9021] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 270.645914][ T9021] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 270.655209][ T9021] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 270.677289][ T9021] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 270.707697][ T9021] batman_adv: batadv0: Removing interface: virt_wifi0 [ 271.368899][ T9040] bridge0: port 3(batadv0) entered blocking state [ 271.402917][ T9040] bridge0: port 3(batadv0) entered disabled state [ 271.438825][ T9040] device batadv0 entered promiscuous mode [ 271.466456][ T9040] bridge0: port 3(batadv0) entered blocking state [ 271.473047][ T9040] bridge0: port 3(batadv0) entered forwarding state [ 271.591616][ T9] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 271.601630][ T9] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 271.700960][ T9054] device ipvlan1 entered promiscuous mode [ 271.747657][ T9054] bridge0: port 3(ipvlan1) entered blocking state [ 271.895656][ T9054] bridge0: port 3(ipvlan1) entered disabled state [ 271.982333][ T9054] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 272.219712][ T9063] validate_nla: 7 callbacks suppressed [ 272.219733][ T9063] netlink: 'syz.2.1451': attribute type 11 has an invalid length. [ 272.288089][ T9063] __nla_validate_parse: 8 callbacks suppressed [ 272.288111][ T9063] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1451'. [ 272.792857][ T9088] netlink: 'syz.5.1462': attribute type 10 has an invalid length. [ 272.860418][ T9088] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1462'. [ 272.930225][ T9094] netlink: 192 bytes leftover after parsing attributes in process `syz.3.1463'. [ 273.126855][ T9096] netlink: 'syz.5.1462': attribute type 11 has an invalid length. [ 273.194075][ T9096] netlink: 140 bytes leftover after parsing attributes in process `syz.5.1462'. [ 273.239565][ T9098] netlink: 'syz.3.1463': attribute type 21 has an invalid length. [ 273.303279][ T9098] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 273.452150][ T9112] netlink: 'syz.5.1471': attribute type 10 has an invalid length. [ 273.488837][ T9112] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1471'. [ 273.513520][ T9112] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 273.613300][ T9112] batman_adv: batadv0: Removing interface: virt_wifi0 [ 273.841192][ T9112] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 273.958360][ T9118] netlink: 'syz.5.1471': attribute type 11 has an invalid length. [ 274.010494][ T9118] netlink: 140 bytes leftover after parsing attributes in process `syz.5.1471'. [ 274.126205][ T9113] netlink: 'syz.2.1469': attribute type 10 has an invalid length. [ 274.189382][ T9113] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1469'. [ 274.228356][ T9113] device ipvlan1 entered promiscuous mode [ 274.316031][ T9113] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 274.753922][ T9152] netlink: 'syz.2.1482': attribute type 10 has an invalid length. [ 274.769099][ T9152] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1482'. [ 275.200649][ T9167] netlink: 'syz.5.1488': attribute type 10 has an invalid length. [ 275.208453][ T9165] netlink: 'syz.1.1486': attribute type 10 has an invalid length. [ 275.222868][ T9167] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1488'. [ 275.262774][ T9167] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 275.601332][ T9175] netlink: 140 bytes leftover after parsing attributes in process `syz.5.1488'. [ 276.421809][ T9197] device ipvlan1 entered promiscuous mode [ 276.446254][ T9197] bridge0: port 4(ipvlan1) entered blocking state [ 276.492248][ T9197] bridge0: port 4(ipvlan1) entered disabled state [ 276.524745][ T9197] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 277.628622][ T9250] validate_nla: 6 callbacks suppressed [ 277.628639][ T9250] netlink: 'syz.3.1512': attribute type 4 has an invalid length. [ 277.721566][ T9250] __nla_validate_parse: 4 callbacks suppressed [ 277.721585][ T9250] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1512'. [ 277.829556][ T9250] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 278.010057][ T9260] netlink: 'syz.2.1517': attribute type 10 has an invalid length. [ 278.049536][ T9260] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1517'. [ 278.320731][ T9260] netlink: 'syz.2.1517': attribute type 11 has an invalid length. [ 278.328608][ T9260] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1517'. [ 278.751408][ T9287] netlink: 'syz.2.1526': attribute type 2 has an invalid length. [ 278.797251][ T9287] netlink: 198628 bytes leftover after parsing attributes in process `syz.2.1526'. [ 278.993833][ T9294] netlink: 'syz.4.1530': attribute type 10 has an invalid length. [ 279.049983][ T9294] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1530'. [ 279.112507][ T9294] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 279.375367][ T9304] netlink: 128 bytes leftover after parsing attributes in process `syz.5.1529'. [ 279.437708][ T9304] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 279.501157][ T9294] netlink: 'syz.4.1530': attribute type 11 has an invalid length. [ 279.540276][ T9294] netlink: 140 bytes leftover after parsing attributes in process `syz.4.1530'. [ 281.293421][ T9348] netlink: 'syz.5.1547': attribute type 11 has an invalid length. [ 281.331891][ T9348] netlink: 140 bytes leftover after parsing attributes in process `syz.5.1547'. [ 283.305229][ T9401] netlink: 'syz.2.1563': attribute type 10 has an invalid length. [ 283.319194][ T9401] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1563'. [ 283.603330][ T9402] netlink: 'syz.2.1563': attribute type 11 has an invalid length. [ 283.629128][ T9402] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1563'. [ 283.758504][ T9410] netlink: 399 bytes leftover after parsing attributes in process `syz.3.1566'. [ 283.905958][ T9410] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1566'. [ 284.059640][ T9410] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 285.107090][ T9461] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1583'. [ 285.129151][ T9461] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 285.249725][ T9461] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 287.711374][ T9522] device sit0 left promiscuous mode [ 291.024906][ T9586] device veth1_macvtap left promiscuous mode [ 295.008655][ T9692] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1659'. [ 297.333759][ T9756] netlink: 14568 bytes leftover after parsing attributes in process `syz.5.1678'. [ 297.626658][ T9766] netlink: 64859 bytes leftover after parsing attributes in process `syz.5.1681'. [ 297.885200][ T9764] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.1680'. [ 298.000562][ T9781] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.1684'. [ 299.153912][ T9807] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 302.226423][ T9819] device veth1_macvtap left promiscuous mode [ 303.991163][ T9879] netlink: 'syz.2.1715': attribute type 29 has an invalid length. [ 304.175353][ T9879] netlink: 'syz.2.1715': attribute type 29 has an invalid length. [ 304.266753][ T9890] netlink: 'syz.1.1719': attribute type 21 has an invalid length. [ 304.313150][ T9890] netlink: 'syz.1.1719': attribute type 29 has an invalid length. [ 304.384155][ T9890] netlink: 'syz.1.1719': attribute type 29 has an invalid length. [ 306.545295][ T9950] netlink: 'syz.3.1741': attribute type 10 has an invalid length. [ 306.649417][ T9950] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 307.245402][ T9976] netlink: 'syz.3.1750': attribute type 29 has an invalid length. [ 308.225702][T10001] ref_ctr_offset mismatch. inode: 0x30b offset: 0xe ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 308.319234][T10018] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1759'. [ 308.408735][T10018] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1759'. [ 308.439461][T10024] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1759'. [ 308.459188][T10029] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1759'. [ 308.673392][T10033] pim6reg: tun_chr_ioctl cmd 1074025677 [ 308.724540][T10033] pim6reg: linktype set to 778 [ 309.649826][T10058] netlink: 'syz.4.1769': attribute type 21 has an invalid length. [ 309.680455][T10058] netlink: 'syz.4.1769': attribute type 29 has an invalid length. [ 309.688737][T10058] netlink: 'syz.4.1769': attribute type 29 has an invalid length. [ 310.554282][T10086] netlink: 'syz.3.1780': attribute type 3 has an invalid length. [ 310.619702][T10087] netlink: 'syz.3.1780': attribute type 3 has an invalid length. [ 310.651683][T10087] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1780'. [ 310.702777][T10085] netlink: 'syz.5.1779': attribute type 27 has an invalid length. [ 310.749770][T10086] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1780'. [ 315.628650][T10213] netlink: 61211 bytes leftover after parsing attributes in process `syz.5.1823'. [ 316.715292][T10241] netlink: 16178 bytes leftover after parsing attributes in process `syz.5.1833'. [ 316.819190][T10236] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1832'. [ 316.857843][T10236] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 316.990379][T10249] netlink: 'syz.3.1836': attribute type 1 has an invalid length. [ 317.003067][T10241] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1833'. [ 317.039011][T10249] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.1836'. [ 317.065091][T10241] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1833'. [ 317.102829][T10249] netlink: 'syz.3.1836': attribute type 1 has an invalid length. [ 317.186870][T10253] netlink: 'syz.1.1837': attribute type 10 has an invalid length. [ 317.377331][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.383805][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.613776][T10253] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.622636][T10253] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.902324][T10253] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.909528][T10253] bridge0: port 2(bridge_slave_1) entered forwarding state [ 317.918052][T10253] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.925277][T10253] bridge0: port 1(bridge_slave_0) entered forwarding state [ 318.164764][T10253] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 318.265408][T10250] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1833'. [ 318.823515][T10280] netlink: 'syz.1.1845': attribute type 46 has an invalid length. [ 321.033964][T10339] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1865'. [ 321.135662][T10345] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.1866'. [ 321.234426][T10339] device hsr_slave_0 left promiscuous mode [ 321.479027][T10339] device hsr_slave_1 left promiscuous mode [ 323.425433][T10387] netlink: 'syz.5.1882': attribute type 4 has an invalid length. [ 323.722606][T10400] netlink: 703 bytes leftover after parsing attributes in process `syz.3.1883'. [ 324.905181][T10428] netlink: 17259 bytes leftover after parsing attributes in process `syz.2.1894'. [ 325.694016][T10448] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1900'. [ 325.988758][T10448] device hsr_slave_0 left promiscuous mode [ 326.256356][T10448] device hsr_slave_1 left promiscuous mode [ 326.971538][T10485] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.160370][T10518] netlink: 'syz.3.1922': attribute type 12 has an invalid length. [ 328.168255][T10518] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1922'. [ 328.936620][T10529] netlink: 'syz.1.1924': attribute type 29 has an invalid length. [ 329.000427][T10529] netlink: 'syz.1.1924': attribute type 29 has an invalid length. [ 329.078269][T10532] netlink: 'syz.1.1924': attribute type 29 has an invalid length. [ 329.171136][T10529] netlink: 'syz.1.1924': attribute type 29 has an invalid length. [ 330.045582][T10550] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1931'. [ 332.592930][ T4200] ------------[ cut here ]------------ [ 332.598699][ T4200] WARNING: CPU: 1 PID: 4200 at net/bluetooth/hci_conn.c:443 hci_conn_timeout+0x24f/0x450 [ 332.608621][ T4200] Modules linked in: [ 332.612576][ T4200] CPU: 1 PID: 4200 Comm: kworker/u5:6 Not tainted syzkaller #0 [ 332.630305][ T4200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 332.640537][ T4200] Workqueue: hci5 hci_conn_timeout [ 332.645928][ T4200] RIP: 0010:hci_conn_timeout+0x24f/0x450 [ 332.651655][ T4200] Code: 8a 8d e8 04 3c df f8 48 8b 35 f5 15 ac 04 bf 08 00 00 00 48 89 da 5b 41 5c 41 5d 41 5e 41 5f 5d e9 46 00 6f f8 e8 61 1d 9a f8 <0f> 0b e9 35 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c dd fd [ 332.671332][ T4200] RSP: 0000:ffffc90002fffc08 EFLAGS: 00010293 [ 332.677438][ T4200] RAX: ffffffff88ded53f RBX: ffff88803a83c138 RCX: ffff888079470000 [ 332.685534][ T4200] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 332.693792][ T4200] RBP: 00000000ffffffff R08: ffff88803a83c013 R09: 1ffff11007507802 [ 332.702080][ T4200] R10: dffffc0000000000 R11: ffffed1007507803 R12: ffff888074abf008 [ 332.706197][T10601] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.1942'. [ 332.711192][ T4200] R13: dffffc0000000000 R14: ffff88803a83c000 R15: ffff88803a83c010 [ 332.727478][ T4200] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 332.736614][ T4200] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 332.743263][ T4200] CR2: 00007f88731bddac CR3: 0000000055356000 CR4: 00000000003506e0 [ 332.751449][ T4200] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 332.759475][ T4200] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 332.767471][ T4200] Call Trace: [ 332.772692][ T4200] [ 332.775665][ T4200] process_one_work+0x867/0xff0 [ 332.780623][ T4200] ? worker_detach_from_pool+0x240/0x240 [ 332.786280][ T4200] ? lockdep_hardirqs_off+0x70/0x100 [ 332.791672][ T4200] ? _raw_spin_lock_irq+0xb7/0xf0 [ 332.796738][ T4200] ? _raw_spin_lock_irqsave+0x100/0x100 [ 332.802382][ T4200] ? wq_worker_running+0x97/0x170 [ 332.807448][ T4200] worker_thread+0xad7/0x12a0 [ 332.812243][ T4200] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 332.818179][ T4200] kthread+0x42e/0x520 [ 332.822370][ T4200] ? rcu_lock_release+0x20/0x20 [ 332.827243][ T4200] ? kthread_blkcg+0xd0/0xd0 [ 332.831984][ T4200] ret_from_fork+0x1f/0x30 [ 332.836452][ T4200] [ 332.839626][ T4200] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 332.846992][ T4200] CPU: 1 PID: 4200 Comm: kworker/u5:6 Not tainted syzkaller #0 [ 332.854543][ T4200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 332.864611][ T4200] Workqueue: hci5 hci_conn_timeout [ 332.869736][ T4200] Call Trace: [ 332.873023][ T4200] [ 332.875953][ T4200] dump_stack_lvl+0x188/0x250 [ 332.880644][ T4200] ? show_regs_print_info+0x20/0x20 [ 332.885846][ T4200] ? load_image+0x410/0x410 [ 332.890358][ T4200] panic+0x2f8/0x850 [ 332.894315][ T4200] ? bpf_jit_dump+0xd0/0xd0 [ 332.898822][ T4200] ? ret_from_fork+0x1f/0x30 [ 332.903412][ T4200] ? hci_conn_timeout+0x24f/0x450 [ 332.908440][ T4200] __warn+0x248/0x2b0 [ 332.912420][ T4200] ? hci_conn_timeout+0x24f/0x450 [ 332.917445][ T4200] report_bug+0x1b9/0x2e0 [ 332.921808][ T4200] handle_bug+0x3a/0x70 [ 332.926397][ T4200] exc_invalid_op+0x16/0x40 [ 332.930899][ T4200] asm_exc_invalid_op+0x16/0x20 [ 332.935748][ T4200] RIP: 0010:hci_conn_timeout+0x24f/0x450 [ 332.941504][ T4200] Code: 8a 8d e8 04 3c df f8 48 8b 35 f5 15 ac 04 bf 08 00 00 00 48 89 da 5b 41 5c 41 5d 41 5e 41 5f 5d e9 46 00 6f f8 e8 61 1d 9a f8 <0f> 0b e9 35 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c dd fd [ 332.961112][ T4200] RSP: 0000:ffffc90002fffc08 EFLAGS: 00010293 [ 332.967179][ T4200] RAX: ffffffff88ded53f RBX: ffff88803a83c138 RCX: ffff888079470000 [ 332.975151][ T4200] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 332.983120][ T4200] RBP: 00000000ffffffff R08: ffff88803a83c013 R09: 1ffff11007507802 [ 332.991177][ T4200] R10: dffffc0000000000 R11: ffffed1007507803 R12: ffff888074abf008 [ 332.999149][ T4200] R13: dffffc0000000000 R14: ffff88803a83c000 R15: ffff88803a83c010 [ 333.007126][ T4200] ? hci_conn_timeout+0x24f/0x450 [ 333.012159][ T4200] ? hci_conn_timeout+0x24f/0x450 [ 333.017360][ T4200] process_one_work+0x867/0xff0 [ 333.022223][ T4200] ? worker_detach_from_pool+0x240/0x240 [ 333.027867][ T4200] ? lockdep_hardirqs_off+0x70/0x100 [ 333.033157][ T4200] ? _raw_spin_lock_irq+0xb7/0xf0 [ 333.038182][ T4200] ? _raw_spin_lock_irqsave+0x100/0x100 [ 333.043730][ T4200] ? wq_worker_running+0x97/0x170 [ 333.048754][ T4200] worker_thread+0xad7/0x12a0 [ 333.053447][ T4200] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 333.059353][ T4200] kthread+0x42e/0x520 [ 333.063422][ T4200] ? rcu_lock_release+0x20/0x20 [ 333.068277][ T4200] ? kthread_blkcg+0xd0/0xd0 [ 333.072873][ T4200] ret_from_fork+0x1f/0x30 [ 333.077300][ T4200] [ 333.080579][ T4200] Kernel Offset: disabled [ 333.085066][ T4200] Rebooting in 86400 seconds..