last executing test programs: 2m50.885030231s ago: executing program 1 (id=154): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x2, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0xc}, 0x8100, 0xc8, 0xffffffff, 0x0, 0x0, 0x341}, 0x0, 0x0, 0xffffffffffffffff, 0x9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000000)="76ea090000000000009ba56a8864", 0x0, 0xff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}], 0x10}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) 2m50.568195471s ago: executing program 1 (id=159): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x1000000000000001, 0xfffffffd}, 0x7402, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1e0000000000000003000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) syz_clone(0x126400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00'}, 0x10) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x400, 0x0, 0x0, 0x0, 0x2, 0x80000001}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x3) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) 2m48.838825902s ago: executing program 2 (id=169): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x5, 0x8, 0x43, 0x42, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x20}, 0x50) 2m48.65276826s ago: executing program 4 (id=170): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x2, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0xc}, 0x8100, 0xc8, 0xffffffff, 0x0, 0x0, 0x341}, 0x0, 0x0, 0xffffffffffffffff, 0x9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000000)="76ea090000000000009ba56a8864", 0x0, 0xff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, 0x0, 0xfdef) 2m48.408454034s ago: executing program 2 (id=172): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0}, 0x94) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000200000004"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r1}, &(0x7f0000000680), &(0x7f00000006c0)}, 0x20) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2m48.407703674s ago: executing program 4 (id=173): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x41000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x541b, &(0x7f0000000640)) socketpair(0x1d, 0x8, 0x7, &(0x7f0000002380)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400000000000}, 0x0, 0x0, 0x0, 0x0, 0xf60, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000680)='syzkaller\x00'}, 0x6b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = syz_clone(0x4a008800, &(0x7f0000000240)="19eef8dc029123405c8ac841477495668070f79262d27e1f4253c4a514a77b2e045d2a2533cd9189640d60d2e3a6bfdcdc838d0648d04d1328b49d5d1c7c01d1ba4f2800ef6744f7132e83e0efb6c17c4282ac9575c4ccfdb3785f4c4425e82a6fe3b45b482d9d9955235095dd518240", 0x70, &(0x7f0000000080), &(0x7f0000000340), &(0x7f0000000380)="23e268da9286c7b6e4741be6d7cfe28c057f5d2a6e5995973c13d0f5e2dd2e06899f885747a76c23a39ed5d201209694354969757b2af797b16669885f0d3f6b35fc30ade4b59b2921e01c0bdba599c3415bca0309aab353c414a88cadad7e952fb3b9f9de1254983c1900435e28949527cb4cc09a2cee27a4ca7cb6dd4e2e259faf0a361823758bb0d7f94ab14779dbe949ab26fbdf0bd9a844aa15e79607a1cb3af98360") perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x8, 0x2, 0x1, 0x9, 0x0, 0xa, 0x80021, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1ff, 0x0, @perf_bp={&(0x7f0000000040), 0xe}, 0x240, 0x1, 0x0, 0xe, 0x3, 0x8001, 0x6, 0x0, 0x7}, r6, 0xb, r0, 0xa) 2m48.186583096s ago: executing program 2 (id=175): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) r2 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r2, 0x3a, 0x7, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x20008000) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r3, 0x26}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuacct.usage_user\x00', 0x0, 0x0) write$cgroup_netprio_ifpriomap(r5, &(0x7f0000000180)={'bond_slave_1', 0x32, 0x30}, 0xf) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg(r1, &(0x7f0000000c00)={0x0, 0x0, 0x0}, 0x2000) 2m48.024577582s ago: executing program 4 (id=177): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf00}, 0x50) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_config_ext={0x7, 0x100000001}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) 2m47.949599109s ago: executing program 2 (id=178): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000780)=ANY=[@ANYBLOB="0a00000016000000b40004007f0000004c00000036393ee8aed1481614efa221a01efb1feccfa64c90dc2fd4d73ae6ce99a585b05f9bccdb648e89661de97295f5869ebb0d3866cb5290c4140f4d309a67e693aca478b17d12eaae41314052e371923cffc87563a3a8d58fa661bb1b200ca4b80f234372058964", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703100000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) write$cgroup_subtree(r3, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2212102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa12"], 0xcfa4) syz_clone(0x200000, &(0x7f0000000400)="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", 0xfe, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)="77144a6f0cd608e9397a499866") r5 = openat$cgroup(0xffffffffffffffff, &(0x7f00000005c0)='syz0\x00', 0x200002, 0x0) r6 = getpid() bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000bc0)={@cgroup=r3, 0x1e, 0x1, 0xff, &(0x7f0000000ac0)=[0x0], 0x1, 0x0, &(0x7f0000000b00)=[0x0, 0x0, 0x0], &(0x7f0000000b40)=[0x0, 0x0, 0x0], &(0x7f0000000b80)=[0x0, 0x0, 0x0]}, 0x40) r7 = perf_event_open(0x0, r6, 0x7, 0xffffffffffffffff, 0x1) r8 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000600), 0x2, 0x0) r9 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000640)={0xffffffffffffffff}, 0x4) r10 = syz_clone(0x100000, &(0x7f0000000040)="032c9655c5e0", 0x6, 0x0, &(0x7f00000002c0), &(0x7f0000003380)="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") bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={r10, 0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000300)='+\x18\\\x00'}, 0x30) sendmsg$unix(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYRES64=r1, @ANYBLOB="bdcaaa742c0cb1e67dbcc6289494d56b48ef67ee0759c9060d48db", @ANYRES32=r6, @ANYRES32, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r1, @ANYRES64=r5, @ANYRES32=r1, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r6, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB="0000000038000000000000000100000001000000", @ANYRESOCT=r7, @ANYRES32=r1, @ANYRES32=r8, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r9, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r10, @ANYRES32=0xee01, @ANYRES32=0xee00, @ANYBLOB='\x00\x00\x00\x00'], 0xb8}, 0x4480) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x35, 0x1, 0x1, 0x81}, {0x61}, {0x6}]}) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080006007c09e8fe55a10a0015800a00142603600e1208000f0000000406a80016c0b00003400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xdf, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffd, 0x2, @perf_config_ext={0x408003, 0x1}, 0x14105, 0x32, 0xfffffbff, 0x0, 0x6, 0x1, 0xffda, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r12, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) 2m47.708083893s ago: executing program 4 (id=180): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x638c1100, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r0, 0x4) r3 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x17, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111020000000000851000000200b871852fe66025ce000095003300000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xa4}, 0x70) r4 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r4, &(0x7f0000000000)={&(0x7f00000000c0)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c0c5) setsockopt$sock_attach_bpf(r4, 0x1, 0x9, &(0x7f0000000040), 0x4) close(r4) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000780)={0x8}, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001b80)={0xffffffffffffffff, 0x0, 0x0, 0xf1, 0x0, &(0x7f0000001a00)=""/241, 0x5e880b8b, 0x0, 0x3d, 0x0, &(0x7f0000001b00)="8ba9d25ab067d03bc27c033e113bcc2df4ccd21958391b94c0f574892d298bc14666e6162aff90cae7dee2d3564e138cc1965d0226bc5b6cf8e2f21ed8", &(0x7f00000008c0), 0x5, 0x0, 0xc}, 0x50) recvmsg$kcm(r3, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) 2m47.432054211s ago: executing program 1 (id=182): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20, 0x0, 0x0, 0x1}]}}, 0x0, 0x2a, 0x0, 0x1000000}, 0x28) 2m47.228107151s ago: executing program 1 (id=184): bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x12, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xf7b, 0x0, 0x0, 0x0, 0x548}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @jmp={0x5, 0x1, 0x4, 0xa, 0x4, 0x1, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000140)='syzkaller\x00', 0x7585, 0xef, &(0x7f00000002c0)=""/239, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x0, 0x1, 0xb, 0x1e7}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000400)=[0x1, 0xffffffffffffffff], &(0x7f0000000440)=[{0x0, 0x2, 0x7, 0x5}, {0x4, 0x5, 0x5, 0x9}], 0x10, 0x2}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@ifindex, 0x2b, 0x1, 0xfff, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0]}, 0x40) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000001240)="b9ff03076804268c989e14f088a8", 0x0, 0x4068, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r2) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x0, 0x3, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x10000000, 0x2}, 0x50) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) r4 = socket$kcm(0x1e, 0x1, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r5 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(r5, &(0x7f0000000100)={&(0x7f0000001540)=@tipc, 0x80, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r7 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r7, 0x107, 0x12, &(0x7f00000008c0)=r6, 0x4) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000900)={0xffffffffffffffff, 0xfffffffd, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x11, 0x11, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8}, [@exit, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x8}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x2}, @ringbuf_query]}, &(0x7f0000000780)='syzkaller\x00', 0xffff, 0x66, &(0x7f00000007c0)=""/102, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000880)={0x4, 0x10, 0x0, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[r0, 0x1, 0x1, 0x1, r0, 0xffffffffffffffff, 0x1, r8], 0x0, 0x10, 0xad10}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000008000000000000000b00000073113d0000000000950000000051b06fb5322d165efa31000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000500000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000008000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000085100000ffffffff20000296f8533a72905e7f"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f00}, 0x94) r12 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d640a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r11}, 0x10) 2m46.888768854s ago: executing program 4 (id=187): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xf000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x5, 0x8, 0x43, 0x42, 0x1}, 0x50) 2m46.548638237s ago: executing program 2 (id=188): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2420, 0x0, 0x0, 0x3, 0x3, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)) r3 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYRES16=r3], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x2, 0x7, 0x0, 0x0, 0x0, 0x200, 0x40082, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0xb, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x80000000004, 0xffffffffffffffff, 0x9) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYRES8=r4], 0x9a) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000d22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$ITER_CREATE(0xb, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000280)={0x2, 0x80, 0x9, 0x8, 0xff, 0x9, 0x0, 0x7ff, 0x88820, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x2, @perf_config_ext={0x4, 0x18}, 0x2380, 0xfffffffffffffe00, 0x80000000, 0x7, 0x0, 0x0, 0xfffc, 0x0, 0x8, 0x0, 0x875000000}, r5, 0x2, 0xffffffffffffffff, 0x8) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80a501, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000300)=@o_path={&(0x7f0000000040)='./file0\x00', r6, 0x4000, r3}, 0x18) close(r7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r10}, 0x18) close(r9) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYRES8, @ANYBLOB="3e0002", @ANYRESHEX=r2], 0x9a) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x4, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) recvmsg$unix(r8, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r11, &(0x7f0000000000)=ANY=[@ANYRES8=r9, @ANYRES8], 0x9a) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x110e22fff7) 2m46.493554563s ago: executing program 4 (id=189): socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000380000003800000003000000010000000000000100000000000000000000000000000001"], 0x0, 0x53}, 0x28) r0 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400009"], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) (fail_nth: 5) 2m46.195294232s ago: executing program 32 (id=189): socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000380000003800000003000000010000000000000100000000000000000000000000000001"], 0x0, 0x53}, 0x28) r0 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400009"], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) (fail_nth: 5) 2m46.148740597s ago: executing program 1 (id=191): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r0}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="620ac4ff000000207110b30000000000850000000e00000095"], &(0x7f0000000480)='GPL\x00'}, 0x94) 2m45.552426546s ago: executing program 1 (id=196): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="5c0000002d006bcd9e3fe3dc6e48aa31086b87033c0000001f0300000000000004f214008d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x2}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={r1, &(0x7f00000000c0), &(0x7f0000000140)=""/227}, 0x20) sendmsg$sock(r0, &(0x7f0000000880)={&(0x7f0000000300)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x2, @remote, 0x1}}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000380)="1fd0de3497d881d79c29cdc37202ab09c1db732b2c9be180544545dbe3362abab7bab87e543ed0ef734cf23e610e94cc4aaa4211315e32bd8823ed8e040b2a50550b935ade41e77a", 0x48}, {&(0x7f0000000400)="dbc23b9834e591ea249fae40b32c14a92588ed2073fd225cd433a111a17609d5d1e8e3cbd45d95b1c5887b6129b3a8f3d65dbebfd12ce01d3ad9cccd700a249f2ee2194f9b8702eb142a24b2e5ca576698ef855fcd5aceca4ac62d39f7cbea5be5eab14840d728574ee538368b9a46aa9badbc1e58cb41ecbbe67386d2d6cf45a2ad60b533e2d97274d6605dd3b79bb9e3a980c405b0f6e40d95ce8cf3b0f3055c6026", 0xa3}, {&(0x7f00000000c0)="9fe24f3610a991a9dceb92be", 0xc}, {&(0x7f00000004c0)="6d98375c255ee4411d03271f0b6cfc8d4101b20da263325ada7950ab8b85afc2553d16ba928d0a050f1da0e1ea368f66117fc332968700135881c09c555e3f1f62a3afe7a5388e19b2aa91131c2223b46d13edc700c0b77b1f66e13aa944c191dd83c4fc45d213866d4940b12148ce929dbb779b", 0x74}, {&(0x7f0000000540)="20d5de53c91cfdf5eeb2120d938548df70b9945ab43a8aca5bf83fd0bb3e9c97b78662317382b8dbd2898fe22d7eba6853aef3d1cb2d83e6d612b7de91714884ea6484a8d12f664cc31c772c01bea210a58f2e98e328f7a85cf50e2a1a814a57ecff724f715d4c9f972d9035fcba8e16f223b73577d1a5d149bff8cc3a2e16da18d3555f1ae84f20128b1ce2851a3bc168e4bffb90dfdf4b3d52c6cbf190301a2ccb42bdd96a3f01e3c0ef7beb0480eaec0e6d3cb3", 0xb5}, {&(0x7f0000000600)}, {&(0x7f0000000640)="bff9b903ccabe27e41498e61aaec02a0edce42c84a040af44e27b148e103feddba9ef05066af5225098f1f336b42844c47849f829754a5ec29533c544d826c51aef197275267cbb22423e74b02854c553acbda8b74296cc81cb5d7b1c94099f5243ff1b8066894a6225fc064db20668b9aaffd26167d26293df3ae1aedc16473b382dbbe6d956858185ab84df7e4f96e8b123283e9faf4395591b4fa3aa959cd3db47c20cbc4", 0xa6}, {&(0x7f0000000700)="f5a2e7c9", 0x4}], 0x8, &(0x7f00000007c0)=[@txtime={{0x18, 0x1, 0x3d, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x40}}, @txtime={{0x18, 0x1, 0x3d, 0xffffffffffffff66}}, @mark={{0x14}}, @mark={{0x14, 0x1, 0x24, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x10001}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}], 0xc0}, 0x20040080) 2m45.187717851s ago: executing program 33 (id=196): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="5c0000002d006bcd9e3fe3dc6e48aa31086b87033c0000001f0300000000000004f214008d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x2}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={r1, &(0x7f00000000c0), &(0x7f0000000140)=""/227}, 0x20) sendmsg$sock(r0, &(0x7f0000000880)={&(0x7f0000000300)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x2, @remote, 0x1}}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000380)="1fd0de3497d881d79c29cdc37202ab09c1db732b2c9be180544545dbe3362abab7bab87e543ed0ef734cf23e610e94cc4aaa4211315e32bd8823ed8e040b2a50550b935ade41e77a", 0x48}, {&(0x7f0000000400)="dbc23b9834e591ea249fae40b32c14a92588ed2073fd225cd433a111a17609d5d1e8e3cbd45d95b1c5887b6129b3a8f3d65dbebfd12ce01d3ad9cccd700a249f2ee2194f9b8702eb142a24b2e5ca576698ef855fcd5aceca4ac62d39f7cbea5be5eab14840d728574ee538368b9a46aa9badbc1e58cb41ecbbe67386d2d6cf45a2ad60b533e2d97274d6605dd3b79bb9e3a980c405b0f6e40d95ce8cf3b0f3055c6026", 0xa3}, {&(0x7f00000000c0)="9fe24f3610a991a9dceb92be", 0xc}, {&(0x7f00000004c0)="6d98375c255ee4411d03271f0b6cfc8d4101b20da263325ada7950ab8b85afc2553d16ba928d0a050f1da0e1ea368f66117fc332968700135881c09c555e3f1f62a3afe7a5388e19b2aa91131c2223b46d13edc700c0b77b1f66e13aa944c191dd83c4fc45d213866d4940b12148ce929dbb779b", 0x74}, {&(0x7f0000000540)="20d5de53c91cfdf5eeb2120d938548df70b9945ab43a8aca5bf83fd0bb3e9c97b78662317382b8dbd2898fe22d7eba6853aef3d1cb2d83e6d612b7de91714884ea6484a8d12f664cc31c772c01bea210a58f2e98e328f7a85cf50e2a1a814a57ecff724f715d4c9f972d9035fcba8e16f223b73577d1a5d149bff8cc3a2e16da18d3555f1ae84f20128b1ce2851a3bc168e4bffb90dfdf4b3d52c6cbf190301a2ccb42bdd96a3f01e3c0ef7beb0480eaec0e6d3cb3", 0xb5}, {&(0x7f0000000600)}, {&(0x7f0000000640)="bff9b903ccabe27e41498e61aaec02a0edce42c84a040af44e27b148e103feddba9ef05066af5225098f1f336b42844c47849f829754a5ec29533c544d826c51aef197275267cbb22423e74b02854c553acbda8b74296cc81cb5d7b1c94099f5243ff1b8066894a6225fc064db20668b9aaffd26167d26293df3ae1aedc16473b382dbbe6d956858185ab84df7e4f96e8b123283e9faf4395591b4fa3aa959cd3db47c20cbc4", 0xa6}, {&(0x7f0000000700)="f5a2e7c9", 0x4}], 0x8, &(0x7f00000007c0)=[@txtime={{0x18, 0x1, 0x3d, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x40}}, @txtime={{0x18, 0x1, 0x3d, 0xffffffffffffff66}}, @mark={{0x14}}, @mark={{0x14, 0x1, 0x24, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x10001}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}], 0xc0}, 0x20040080) 2m45.044323175s ago: executing program 2 (id=200): r0 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f00000002c0)=@in6={0xa, 0x4e23, 0xfffffffc, @loopback={0xfe80000000000097}, 0x4}, 0x80, 0x0}, 0x20008810) 2m44.717399268s ago: executing program 34 (id=200): r0 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f00000002c0)=@in6={0xa, 0x4e23, 0xfffffffc, @loopback={0xfe80000000000097}, 0x4}, 0x80, 0x0}, 0x20008810) 20.805944401s ago: executing program 7 (id=959): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0}, 0x94) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000200000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r1}, &(0x7f0000000680), &(0x7f00000006c0)}, 0x20) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 20.580895504s ago: executing program 6 (id=961): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="d80000001c0081044e81f782db443ecd297f065d5e6094347879cca2b904021d08020700000081000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef21f4fffffffffca19750aa2297bce08affff8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060009000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d9345", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r2) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x20008000) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) perf_event_open(&(0x7f00000005c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x40, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0xc05, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001400000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70200000000df00850000008600000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r7, r4, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) close(0x3) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5d35, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0xfffff000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r9 = openat$cgroup_type(r8, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r9, &(0x7f0000000280), 0x9) 20.194313031s ago: executing program 7 (id=964): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x3}, 0x0, 0x8, 0x40, 0x1, 0x0, 0xfff, 0x0, 0x0, 0xffffffff}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x1e, 0x1, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x6, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x4, 0x108, &(0x7f0000000140)=""/250, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2d}, 0x23) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x8, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r1, 0x0, 0x100000}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a089, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x3}, 0x2018, 0x0, 0x0, 0x9, 0x1000, 0x10000, 0x7, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x100, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x5, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x8081, 0x0, 0x9, 0x0, 0x3, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFINDEX(r2, 0x400454da, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x30}, 0x94) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="2e00000011008188040f80ec59acbc0413a181003700000001010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) 20.132684798s ago: executing program 5 (id=965): socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x1000, 0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0) socket$kcm(0x23, 0x5, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000007c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380)}, 0x1d20, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f00000002c0)='cpu.stat\x00', 0x275a, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x8000, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x24}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080)) 19.511154039s ago: executing program 6 (id=970): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x2a, &(0x7f0000000100)=r2, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5c00000014006b02000000d86e6c1d0002847ea6ea6567e75110623400cdd46b44dacff32c6e020075e300250002000f000000172f71d34460bc24eab5560000000ebab8bebf9367b4fa51f60a64c9f4d4778037e786a6d0bdd70000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40) (async) sendmsg$inet(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5c00000014006b02000000d86e6c1d0002847ea6ea6567e75110623400cdd46b44dacff32c6e020075e300250002000f000000172f71d34460bc24eab5560000000ebab8bebf9367b4fa51f60a64c9f4d4778037e786a6d0bdd70000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40) sendmsg$unix(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000200)="c3", 0x1}, {&(0x7f00000006c0)="c2803b70c182", 0x6}], 0x2, 0x0, 0x0, 0x40000}, 0x20004011) (async) sendmsg$unix(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000200)="c3", 0x1}, {&(0x7f00000006c0)="c2803b70c182", 0x6}], 0x2, 0x0, 0x0, 0x40000}, 0x20004011) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x2, 0x56d, 0x2}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0x4, 0x7fff, 0x9, 0x301, r4, 0x4, '\x00', 0x0, r2, 0x5, 0x2, 0x2, 0xc}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r4}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r4}, 0x38) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4002000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4002000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 19.454028805s ago: executing program 5 (id=972): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, 0xfffe, 0x0, 0x5b8, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xeef8db63234610ca) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = socket$kcm(0x2, 0x1, 0x84) r3 = socket$kcm(0x11, 0xa, 0x300) recvmsg$kcm(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x20) recvmsg(r3, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x83, &(0x7f0000000000), 0x8) r4 = socket$kcm(0xf, 0x3, 0x2) write$cgroup_devices(r4, &(0x7f0000000080)=ANY=[], 0xfefb) r5 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r5, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r5, &(0x7f0000000040)={&(0x7f0000000640)=@l2tp6={0xa, 0x0, 0xffffffff, @local}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000ac0)="f40000ffffff8800fe8000000000000000721ef69e7ffd002000000000000100"/41, 0x29}], 0x1}, 0x804) socket$kcm(0x11, 0x200000000000002, 0x300) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000040)=0x7fffffff) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00000011008108090f9becdb4cb92e264831371600000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x40008804) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000007704f7f6fef1182000000020000000945d000004000000000000aa6dcd7918ab9256000100000d000000000400000001000000ee6728de54d5075a91342b9bf0566bc516632545ed231158abdb"], 0x0, 0x3f}, 0x28) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0x2, 0x1, 0x84) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) recvmsg$unix(r6, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x14869}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc00000, 0x9}, 0x100108, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$kcm(0x10, 0x6, 0x10) 19.316930878s ago: executing program 7 (id=973): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x12, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) syz_clone(0x638c1100, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r0, 0x4) r3 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x17, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111020000000000851000000200b871852fe66025ce000095003300000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x6}, 0x94) r4 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r4, &(0x7f0000000000)={&(0x7f00000000c0)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c0c5) setsockopt$sock_attach_bpf(r4, 0x1, 0x9, &(0x7f0000000040), 0x4) close(r4) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000780)={0x8}, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001b80)={0xffffffffffffffff, 0x0, 0x0, 0xf1, 0x0, &(0x7f0000001a00)=""/241, 0x5e880b8b, 0x0, 0x3d, 0x0, &(0x7f0000001b00)="8ba9d25ab067d03bc27c033e113bcc2df4ccd21958391b94c0f574892d298bc14666e6162aff90cae7dee2d3564e138cc1965d0226bc5b6cf8e2f21ed8", &(0x7f00000008c0), 0x5, 0x0, 0xc}, 0x50) recvmsg$kcm(r3, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) 18.964810343s ago: executing program 3 (id=975): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000014000000000085000000af0000009500000000a0a1bd371fd02c595754000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) 18.89286277s ago: executing program 0 (id=976): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0}, 0x94) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000200000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r1}, &(0x7f0000000680), &(0x7f00000006c0)}, 0x20) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 18.596187589s ago: executing program 3 (id=977): r0 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x23, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x14869, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x10) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4000011) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x3c, 0x0, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x18, &(0x7f0000000000)=r3, 0x8) write$cgroup_pressure(r3, &(0x7f0000000240)={'full', 0x20, 0x7fffffff, 0x20, 0x6}, 0x2f) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0x2}, 0x100808, 0x0, 0x8000, 0x0, 0x0, 0x3, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) 18.573407291s ago: executing program 0 (id=978): ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f2, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300000100000085"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r1, 0x0, 0xe, 0x0, &(0x7f0000000ac0)="ddc937981007901a80379c3e0813", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 18.316709947s ago: executing program 0 (id=979): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d80000001e0081054e81f782db4cb9040a1d080006007c095dd2086518000a800000000003600e1208000f0000000406a80016c0080009", 0x37}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b1"], 0xfe33) openat$cgroup_int(r0, &(0x7f0000000100)='cpuset.memory_spread_slab\x00', 0x2, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188040f80ec59acbc0413a181003100000103010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) 18.316298366s ago: executing program 3 (id=980): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x17, 0x0, 0x4, 0x0, 0x0, 0xfffffffc}, 0x0, 0x4000000000000000, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x41}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="fa48235548a6464824309b471842", 0x0, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) (fail_nth: 2) 18.188060319s ago: executing program 7 (id=981): r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x411, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7, 0x1ff}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x2, 0xffff, 0x0, 0x0, 0x0, 0xfffffffffffffff2}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xc}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xe}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2, r1}, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x5) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r3, &(0x7f00000009c0)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20040818) sendmsg$sock(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)='k', 0xffffffe2}, {&(0x7f0000000140)="ce15fc9dc237ed5b37773a15b2f2615b0230a382c5bd51f04ff7e6c1f67c42c528244c3436e3d42cd667901a878ce7a4ebb5c55bd9c6f14079c1afebfbd8107a4a469b59ae1543bdc3085d6a10876755db8093b364"}, {&(0x7f0000000040)="fe07e4ad9a397dadc913c79649675cd17df8bf86309a"}, {&(0x7f00000001c0)}], 0x1, &(0x7f0000000080)=[@timestamping={{0x14, 0x1, 0x25, 0x303}}], 0xa}, 0x4000081) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000001004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) r5 = socket$kcm(0x2, 0x3, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000002"], 0x48) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x890c, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x35}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='freezer.self_freezing\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x40082404, &(0x7f00000000c0)=0x7b) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x411, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7, 0x1ff}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x2, 0xffff, 0x0, 0x0, 0x0, 0xfffffffffffffff2}, 0x0, 0x1, 0xffffffffffffffff, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xc}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xe}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2, r1}, 0xc) (async) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x5) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socket$kcm(0x2b, 0x1, 0x0) (async) sendmsg$inet(r3, &(0x7f00000009c0)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20040818) (async) sendmsg$sock(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)='k', 0xffffffe2}, {&(0x7f0000000140)="ce15fc9dc237ed5b37773a15b2f2615b0230a382c5bd51f04ff7e6c1f67c42c528244c3436e3d42cd667901a878ce7a4ebb5c55bd9c6f14079c1afebfbd8107a4a469b59ae1543bdc3085d6a10876755db8093b364"}, {&(0x7f0000000040)="fe07e4ad9a397dadc913c79649675cd17df8bf86309a"}, {&(0x7f00000001c0)}], 0x1, &(0x7f0000000080)=[@timestamping={{0x14, 0x1, 0x25, 0x303}}], 0xa}, 0x4000081) (async) socket$kcm(0x10, 0x2, 0x4) (async) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000001004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) (async) socket$kcm(0x2, 0x3, 0x84) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000002"], 0x48) (async) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x890c, &(0x7f0000000100)) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x35}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='freezer.self_freezing\x00', 0x0, 0x0) (async) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x40082404, &(0x7f00000000c0)=0x7b) (async) 18.170638021s ago: executing program 5 (id=982): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50}, 0x48) 18.098394548s ago: executing program 0 (id=983): socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x1000, 0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0) socket$kcm(0x23, 0x5, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000007c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380)}, 0x1d20, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f00000002c0)='cpu.stat\x00', 0x275a, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x8000, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x24}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080)) 17.779462169s ago: executing program 5 (id=984): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x12, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) syz_clone(0x638c1100, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r0, 0x4) r3 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x17, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x6}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f00000000c0)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c0c5) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x9, &(0x7f0000000040), 0x4) close(0xffffffffffffffff) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000780)={0x8}, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001b80)={0xffffffffffffffff, 0x0, 0x0, 0xf1, 0x0, &(0x7f0000001a00)=""/241, 0x5e880b8b, 0x0, 0x3d, 0x0, &(0x7f0000001b00)="8ba9d25ab067d03bc27c033e113bcc2df4ccd21958391b94c0f574892d298bc14666e6162aff90cae7dee2d3564e138cc1965d0226bc5b6cf8e2f21ed8", &(0x7f00000008c0), 0x5, 0x0, 0xc}, 0x50) recvmsg$kcm(r3, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) 17.725575705s ago: executing program 6 (id=985): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x98, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101, 0x7}, 0x5112, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x1000, 0x3, 0x6, 0x0, 0xa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0xb) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) write$cgroup_devices(0xffffffffffffffff, 0x0, 0x9) setsockopt$sock_attach_bpf(r1, 0x6, 0x24, &(0x7f0000000200), 0x4) socket$kcm(0x10, 0x2, 0x4) 17.611934316s ago: executing program 7 (id=986): r0 = socket$kcm(0xa, 0x2, 0x73) setsockopt$sock_attach_bpf(r0, 0x29, 0x1f, 0x0, 0x19) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000008009500000000000000"], 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x18, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1}, {}, {}, [@alu={0x4, 0x0, 0x4, 0x4, 0x1, 0xffffffffffffffe0}, @alu={0x4, 0x1, 0x8, 0x8, 0xb, 0x80, 0x4}, @alu={0x7, 0x0, 0xc, 0x0, 0x3, 0x18, 0x1}, @map_val={0x18, 0x8, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0xfd4b}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x19, 0xc, &(0x7f0000000500)=ANY=[@ANYRESDEC, @ANYRES32=r1, @ANYRES8=r3], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x50, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x3, 0x0, 0x0, 0x10440, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f00000002c0), 0x1}, 0x0, 0x0, 0x80, 0x0, 0x4}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x24048015) perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f2, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x1f00) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x38) r6 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r6, &(0x7f0000002700)={&(0x7f0000000080)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000180)="90", 0x1}], 0x1}, 0x8040) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x0, 0x20000, 0x0, 0x0, 0x2, 0x1, 0x200, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$inet(r6, &(0x7f0000000300)={&(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000340)=[{&(0x7f00000001c0)="4ae67e1f18aba6c6f5c46194fff389c08f4138190900531b0dc5db97d5c2be678648ff0162251db52aba54e02c29c71bb460a825ddcf407ca258074954b36095ac0a15a0288d2871", 0x48}, {&(0x7f0000000280)="b88ca01f7605750ab23adfe6bb26af2deff635f67d4ec9535ff796f2e0899eddb3f4eb829e0739c5c8550e712ad7", 0x2e}, {&(0x7f0000000a40)="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", 0x1000}], 0x3}, 0x80d4) socket$kcm(0x2, 0x1, 0x84) r7 = socket$kcm(0x10, 0x2, 0x10) close(r5) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000022003505d25a806f8c6394f97e24fc60", 0x14}], 0x1, 0x0, 0x0, 0x74000000}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) 17.488676788s ago: executing program 3 (id=987): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x5, 0x7, 0x8, 0x5, 0x80}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x2000000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 17.445445952s ago: executing program 6 (id=988): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0}, 0x94) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000200000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r1}, &(0x7f0000000680), &(0x7f00000006c0)}, 0x20) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 17.37043578s ago: executing program 0 (id=989): ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f2, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300000100000085"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r1, 0x0, 0xe, 0x0, &(0x7f0000000ac0)="ddc937981007901a80379c3e0813", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 17.172076439s ago: executing program 3 (id=990): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_int(r1, &(0x7f00000000c0)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='cpu<=0||!') (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0xf}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18020000000000bd0000000003000000850000002700000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0x18, 0x0, &(0x7f0000000380)="e0bcd7c6a00e0588cd5e47b8bffc8e670f78f1f5b3aac3eb", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000640)) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) (async) r4 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000007, 0x4, @perf_bp={0x0, 0x8}, 0x101000, 0x7, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008104e00f80ecdb4cb9f207c804a00d000000880802fb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) (async) ioctl$TUNSETLINK(r3, 0x400454cd, 0x30c) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x3ffff, 0x0, 0x1, 0x5, '\x00', 0x0, 0x0}, 0x50) r5 = syz_clone(0x80000000, 0x0, 0x0, &(0x7f0000000100), &(0x7f00000003c0), &(0x7f0000000400)="f45a0e7274d1e0fe76069f4286bc7e5a5d93f6204c2a02a62a1fafb90257a11c4b023cd3cf308d3dc97117ee531d64f82204793e2feb228e15878833187cff1243731f84f2bf4155e0") perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x1, 0x0, 0x0, 0x4}, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0xf8, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x8, 0x3, 0x6, 0x0, 0x3, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x15, 0x2, &(0x7f0000000d80)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x59}], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0x34, 0x10000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x6}, 0x2c) 17.171405579s ago: executing program 6 (id=991): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000), 0xfdef) 17.050420891s ago: executing program 0 (id=992): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x12, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) syz_clone(0x638c1100, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r0, 0x4) r3 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x17, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111020000000000851000000200b871852fe66025ce000095003300000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xa4}, 0x70) r4 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r4, 0x0, 0x3000c0c5) setsockopt$sock_attach_bpf(r4, 0x1, 0x9, &(0x7f0000000040), 0x4) close(r4) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000780)={0x8}, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001b80)={0xffffffffffffffff, 0x0, 0x0, 0xf1, 0x0, &(0x7f0000001a00)=""/241, 0x5e880b8b, 0x0, 0x3d, 0x0, &(0x7f0000001b00)="8ba9d25ab067d03bc27c033e113bcc2df4ccd21958391b94c0f574892d298bc14666e6162aff90cae7dee2d3564e138cc1965d0226bc5b6cf8e2f21ed8", &(0x7f00000008c0), 0x5, 0x0, 0xc}, 0x50) recvmsg$kcm(r3, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) 17.049098501s ago: executing program 7 (id=993): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, 0xfffe, 0x0, 0x5b8, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xeef8db63234610ca) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = socket$kcm(0x2, 0x1, 0x84) r3 = socket$kcm(0x11, 0xa, 0x300) recvmsg$kcm(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x20) recvmsg(r3, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x83, &(0x7f0000000000), 0x8) r4 = socket$kcm(0xf, 0x3, 0x2) write$cgroup_devices(r4, &(0x7f0000000080)=ANY=[], 0xfefb) r5 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r5, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r5, &(0x7f0000000040)={&(0x7f0000000640)=@l2tp6={0xa, 0x0, 0xffffffff, @local}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000ac0)="f40000ffffff8800fe8000000000000000721ef69e7ffd002000000000000100"/41, 0x29}], 0x1}, 0x804) socket$kcm(0x11, 0x200000000000002, 0x300) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000040)=0x7fffffff) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00000011008108090f9becdb4cb92e264831371600000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x40008804) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000007704f7f6fef1182000000020000000945d000004000000000000aa6dcd7918ab9256000100000d000000000400000001000000ee6728de54d5075a91342b9bf0566bc516632545ed231158abdb"], 0x0, 0x3f}, 0x28) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0x2, 0x1, 0x84) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) recvmsg$unix(r6, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x14869}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc00000, 0x9}, 0x100108, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$kcm(0x10, 0x6, 0x10) 16.990626807s ago: executing program 6 (id=994): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x4, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000d20810000000000000210000730198000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f00000000c0)=r0}, 0x20) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3}, 0x50) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000800), 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x16, 0x0, 0x4, 0xffff, 0x200, 0x1}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x14869, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000021c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000900)=@generic={&(0x7f00000008c0)='./file0\x00', 0x0, 0x18}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000001880)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x5, &(0x7f00000000c0), 0x10, 0x0, r4}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r3}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x14869, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="d80000001c0081064e81f782db44b9040a1d08040e00000000000aa1180002000600142603600e1208000f0014810401a8001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r5}, &(0x7f0000000080), &(0x7f00000002c0)=r3}, 0x20) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000400)={r5, 0x58, &(0x7f00000000c0)}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={0x1, 0x58, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa8, 0xa8, 0x4, [@volatile={0x6, 0x0, 0x0, 0x9, 0x2}, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{0xd, 0x1}, {0x6, 0x2}, {0xa, 0x3}, {0x0, 0x1}, {0xc, 0x2}, {0xe, 0x5}]}, @const={0x3}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x4, 0x1dc}}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xc, 0x4}, {0xd, 0x5}, {0x0, 0x4}]}, @func={0xe, 0x0, 0x0, 0xc, 0x2}, @volatile={0x1, 0x0, 0x0, 0x9, 0x4}]}, {0x0, [0x61, 0x2e]}}, &(0x7f00000003c0)=""/90, 0xc4, 0x5a}, 0x28) r9 = bpf$ITER_CREATE(0x21, &(0x7f0000000640), 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x1b, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3800000, 0x0, 0x0, 0x0, 0x51}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x1}, @generic={0x8, 0x7, 0x7, 0x8, 0x2}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x8}]}, &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x8, '\x00', r7, 0x25, r8, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000680)=[r9], &(0x7f00000006c0)=[{0x1, 0x3, 0x6, 0xa094696004306021}, {0x3, 0x2, 0x10}, {0x2, 0x2, 0xe, 0x3}, {0x0, 0x4, 0xa, 0x9}, {0x2, 0x4, 0x8, 0x6}, {0x1, 0x1, 0x3, 0x1}, {0x3, 0x4, 0x4, 0x6}, {0x0, 0x2, 0xc}]}, 0x94) 16.900739466s ago: executing program 5 (id=995): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xa}, [@call={0x85, 0x0, 0x0, 0xbc}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x20, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2100, 0x9}, 0x77) 16.900271066s ago: executing program 3 (id=996): r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000640)="2e00000010208188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x4044830) 16.780554238s ago: executing program 5 (id=997): r0 = socket$kcm(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000f40)={r0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4d11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xb, 0x830a}, 0x0, 0x1, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x21, 0x0, 0x27) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)='%pB \x00'}, 0x20) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000280), 0x8) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r3) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x8, 0x0, 0x1ff, 0x8000, 0x0, r1, 0x0, '\x00', 0x0, r2, 0x0, 0x0, 0xfffffffe}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r5}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xd, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r6}, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xa000000, &(0x7f0000000080)=[{&(0x7f0000000040)="140000001c000b63d25a80648c2594f91c24fc60", 0x14}], 0x1}, 0x0) 1.538806719s ago: executing program 35 (id=992): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x12, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) syz_clone(0x638c1100, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r0, 0x4) r3 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x17, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111020000000000851000000200b871852fe66025ce000095003300000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xa4}, 0x70) r4 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r4, 0x0, 0x3000c0c5) setsockopt$sock_attach_bpf(r4, 0x1, 0x9, &(0x7f0000000040), 0x4) close(r4) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000780)={0x8}, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001b80)={0xffffffffffffffff, 0x0, 0x0, 0xf1, 0x0, &(0x7f0000001a00)=""/241, 0x5e880b8b, 0x0, 0x3d, 0x0, &(0x7f0000001b00)="8ba9d25ab067d03bc27c033e113bcc2df4ccd21958391b94c0f574892d298bc14666e6162aff90cae7dee2d3564e138cc1965d0226bc5b6cf8e2f21ed8", &(0x7f00000008c0), 0x5, 0x0, 0xc}, 0x50) recvmsg$kcm(r3, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) 1.439941909s ago: executing program 36 (id=994): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x4, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000d20810000000000000210000730198000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f00000000c0)=r0}, 0x20) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3}, 0x50) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000800), 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x16, 0x0, 0x4, 0xffff, 0x200, 0x1}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x14869, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000021c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000900)=@generic={&(0x7f00000008c0)='./file0\x00', 0x0, 0x18}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000001880)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x5, &(0x7f00000000c0), 0x10, 0x0, r4}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r3}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x14869, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="d80000001c0081064e81f782db44b9040a1d08040e00000000000aa1180002000600142603600e1208000f0014810401a8001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r5}, &(0x7f0000000080), &(0x7f00000002c0)=r3}, 0x20) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000400)={r5, 0x58, &(0x7f00000000c0)}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={0x1, 0x58, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa8, 0xa8, 0x4, [@volatile={0x6, 0x0, 0x0, 0x9, 0x2}, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{0xd, 0x1}, {0x6, 0x2}, {0xa, 0x3}, {0x0, 0x1}, {0xc, 0x2}, {0xe, 0x5}]}, @const={0x3}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x4, 0x1dc}}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xc, 0x4}, {0xd, 0x5}, {0x0, 0x4}]}, @func={0xe, 0x0, 0x0, 0xc, 0x2}, @volatile={0x1, 0x0, 0x0, 0x9, 0x4}]}, {0x0, [0x61, 0x2e]}}, &(0x7f00000003c0)=""/90, 0xc4, 0x5a}, 0x28) r9 = bpf$ITER_CREATE(0x21, &(0x7f0000000640), 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x1b, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3800000, 0x0, 0x0, 0x0, 0x51}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x1}, @generic={0x8, 0x7, 0x7, 0x8, 0x2}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x8}]}, &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x8, '\x00', r7, 0x25, r8, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000680)=[r9], &(0x7f00000006c0)=[{0x1, 0x3, 0x6, 0xa094696004306021}, {0x3, 0x2, 0x10}, {0x2, 0x2, 0xe, 0x3}, {0x0, 0x4, 0xa, 0x9}, {0x2, 0x4, 0x8, 0x6}, {0x1, 0x1, 0x3, 0x1}, {0x3, 0x4, 0x4, 0x6}, {0x0, 0x2, 0xc}]}, 0x94) 1.048918997s ago: executing program 37 (id=993): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, 0xfffe, 0x0, 0x5b8, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xeef8db63234610ca) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = socket$kcm(0x2, 0x1, 0x84) r3 = socket$kcm(0x11, 0xa, 0x300) recvmsg$kcm(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x20) recvmsg(r3, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x83, &(0x7f0000000000), 0x8) r4 = socket$kcm(0xf, 0x3, 0x2) write$cgroup_devices(r4, &(0x7f0000000080)=ANY=[], 0xfefb) r5 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r5, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r5, &(0x7f0000000040)={&(0x7f0000000640)=@l2tp6={0xa, 0x0, 0xffffffff, @local}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000ac0)="f40000ffffff8800fe8000000000000000721ef69e7ffd002000000000000100"/41, 0x29}], 0x1}, 0x804) socket$kcm(0x11, 0x200000000000002, 0x300) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000040)=0x7fffffff) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00000011008108090f9becdb4cb92e264831371600000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x40008804) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000007704f7f6fef1182000000020000000945d000004000000000000aa6dcd7918ab9256000100000d000000000400000001000000ee6728de54d5075a91342b9bf0566bc516632545ed231158abdb"], 0x0, 0x3f}, 0x28) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0x2, 0x1, 0x84) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) recvmsg$unix(r6, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x14869}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc00000, 0x9}, 0x100108, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$kcm(0x10, 0x6, 0x10) 960.339096ms ago: executing program 38 (id=996): r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000640)="2e00000010208188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x4044830) 0s ago: executing program 39 (id=997): r0 = socket$kcm(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000f40)={r0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4d11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xb, 0x830a}, 0x0, 0x1, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x21, 0x0, 0x27) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)='%pB \x00'}, 0x20) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000280), 0x8) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r3) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x8, 0x0, 0x1ff, 0x8000, 0x0, r1, 0x0, '\x00', 0x0, r2, 0x0, 0x0, 0xfffffffe}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r5}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xd, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r6}, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xa000000, &(0x7f0000000080)=[{&(0x7f0000000040)="140000001c000b63d25a80648c2594f91c24fc60", 0x14}], 0x1}, 0x0) kernel console output (not intermixed with test programs): ] netlink: 132 bytes leftover after parsing attributes in process `syz.3.50'. [ 86.639651][ T26] cfg80211: failed to load regulatory.db [ 87.155370][ T4533] netlink: 'syz.2.41': attribute type 29 has an invalid length. [ 87.179262][ T4533] netlink: 'syz.2.41': attribute type 29 has an invalid length. [ 87.261852][ T4537] netlink: 'syz.3.44': attribute type 29 has an invalid length. [ 88.417525][ T4554] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 90.807207][ T33] wlan1: Trigger new scan to find an IBSS to join [ 90.855293][ T4598] validate_nla: 2 callbacks suppressed [ 90.855312][ T4598] netlink: 'syz.0.61': attribute type 29 has an invalid length. [ 90.908215][ T4598] netlink: 'syz.0.61': attribute type 29 has an invalid length. [ 91.033408][ T4601] netlink: 'syz.0.61': attribute type 29 has an invalid length. [ 91.527971][ T4608] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 91.975466][ T4620] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.68'. [ 92.034545][ T4620] netlink: 6328 bytes leftover after parsing attributes in process `syz.4.68'. [ 93.084055][ T4644] netlink: 40 bytes leftover after parsing attributes in process `syz.0.76'. [ 93.182668][ T4644] netlink: 40 bytes leftover after parsing attributes in process `syz.0.76'. [ 93.228748][ T4644] netlink: 40 bytes leftover after parsing attributes in process `syz.0.76'. [ 93.298781][ T4644] netlink: 40 bytes leftover after parsing attributes in process `syz.0.76'. [ 93.408724][ T4651] netlink: 'syz.1.77': attribute type 29 has an invalid length. [ 93.430220][ T4651] netlink: 'syz.1.77': attribute type 29 has an invalid length. [ 93.457327][ T4651] netlink: 'syz.1.77': attribute type 29 has an invalid length. [ 94.489814][ T4664] FAULT_INJECTION: forcing a failure. [ 94.489814][ T4664] name failslab, interval 1, probability 0, space 0, times 0 [ 94.567640][ T4664] CPU: 0 PID: 4664 Comm: syz.4.84 Not tainted syzkaller #0 [ 94.574923][ T4664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 94.585015][ T4664] Call Trace: [ 94.588323][ T4664] [ 94.591266][ T4664] dump_stack_lvl+0x168/0x22e [ 94.595968][ T4664] ? show_regs_print_info+0x12/0x12 [ 94.601181][ T4664] ? load_image+0x3b0/0x3b0 [ 94.605712][ T4664] ? __might_sleep+0xd0/0xd0 [ 94.610333][ T4664] ? __lock_acquire+0x7c50/0x7c50 [ 94.615376][ T4664] should_fail_ex+0x399/0x4d0 [ 94.620173][ T4664] should_failslab+0x5/0x20 [ 94.624693][ T4664] slab_pre_alloc_hook+0x59/0x310 [ 94.629765][ T4664] ? do_syscall_64+0x4c/0xa0 [ 94.634368][ T4664] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 94.640456][ T4664] kmem_cache_alloc_node+0x5a/0x320 [ 94.645674][ T4664] ? __alloc_skb+0xfc/0x7e0 [ 94.650196][ T4664] __alloc_skb+0xfc/0x7e0 [ 94.654546][ T4664] netlink_dump+0x1d1/0xcd0 [ 94.659076][ T4664] ? apparmor_capable+0x12c/0x190 [ 94.664120][ T4664] ? bpf_lsm_capable+0x5/0x10 [ 94.668818][ T4664] ? netlink_lookup+0x200/0x200 [ 94.673694][ T4664] ? __inet_diag_dump_start+0x805/0x970 [ 94.679262][ T4664] __netlink_dump_start+0x537/0x6f0 [ 94.684486][ T4664] inet_diag_rcv_msg_compat+0x1e9/0x3c0 [ 94.690053][ T4664] ? __inet_diag_dump+0x380/0x380 [ 94.695094][ T4664] ? sock_diag_rcv_msg+0x142/0x5f0 [ 94.700227][ T4664] ? inet_diag_rcv_msg_compat+0x3c0/0x3c0 [ 94.705956][ T4664] ? inet_diag_dump_start_compat+0x20/0x20 [ 94.711775][ T4664] ? inet_diag_dump+0x50/0x50 [ 94.716470][ T4664] ? __inet_diag_dump+0x380/0x380 [ 94.721507][ T4664] sock_diag_rcv_msg+0x3cc/0x5f0 [ 94.726471][ T4664] ? __mutex_lock+0x19e/0xaf0 [ 94.731168][ T4664] netlink_rcv_skb+0x1de/0x420 [ 94.735951][ T4664] ? sock_diag_bind+0xa0/0xa0 [ 94.740669][ T4664] ? netlink_ack+0x1100/0x1100 [ 94.745455][ T4664] ? netlink_deliver_tap+0x2e/0x1b0 [ 94.750680][ T4664] sock_diag_rcv+0x26/0x40 [ 94.755122][ T4664] netlink_unicast+0x74d/0x8d0 [ 94.759919][ T4664] netlink_sendmsg+0x89e/0xbc0 [ 94.764711][ T4664] ? netlink_getsockopt+0x540/0x540 [ 94.770045][ T4664] ? aa_sock_msg_perm+0x94/0x150 [ 94.775022][ T4664] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 94.780321][ T4664] ? security_socket_sendmsg+0x7c/0xa0 [ 94.785816][ T4664] ? netlink_getsockopt+0x540/0x540 [ 94.791032][ T4664] ____sys_sendmsg+0x59b/0x970 [ 94.795826][ T4664] ? __sys_sendmsg_sock+0x30/0x30 [ 94.800883][ T4664] ? __import_iovec+0x315/0x500 [ 94.805800][ T4664] ? import_iovec+0x6f/0xa0 [ 94.810340][ T4664] ___sys_sendmsg+0x21c/0x290 [ 94.815074][ T4664] ? __sys_sendmsg+0x270/0x270 [ 94.819876][ T4664] ? __lock_acquire+0x7c50/0x7c50 [ 94.824938][ T4664] ? __fdget+0x17c/0x200 [ 94.829199][ T4664] __se_sys_sendmsg+0x19e/0x270 [ 94.834067][ T4664] ? perf_trace_preemptirq_template+0x287/0x330 [ 94.840331][ T4664] ? __x64_sys_sendmsg+0x80/0x80 [ 94.845319][ T4664] ? lockdep_hardirqs_on+0x94/0x140 [ 94.850568][ T4664] do_syscall_64+0x4c/0xa0 [ 94.855094][ T4664] ? clear_bhb_loop+0x60/0xb0 [ 94.859816][ T4664] ? clear_bhb_loop+0x60/0xb0 [ 94.864680][ T4664] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 94.870846][ T4664] RIP: 0033:0x7f308218eec9 [ 94.875274][ T4664] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 94.894891][ T4664] RSP: 002b:00007f30803f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 94.903322][ T4664] RAX: ffffffffffffffda RBX: 00007f30823e5fa0 RCX: 00007f308218eec9 [ 94.911305][ T4664] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 94.919288][ T4664] RBP: 00007f30803f6090 R08: 0000000000000000 R09: 0000000000000000 [ 94.927270][ T4664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 94.935251][ T4664] R13: 00007f30823e6038 R14: 00007f30823e5fa0 R15: 00007ffed9daf758 [ 94.943249][ T4664] [ 95.252152][ T4675] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.87'. [ 95.266073][ T4675] netlink: 6328 bytes leftover after parsing attributes in process `syz.1.87'. [ 95.492931][ T4679] netlink: 'syz.4.90': attribute type 2 has an invalid length. [ 95.516513][ T4679] netlink: 132 bytes leftover after parsing attributes in process `syz.4.90'. [ 95.762249][ T9] wlan1: Trigger new scan to find an IBSS to join [ 96.065147][ T4689] netlink: 'syz.2.92': attribute type 29 has an invalid length. [ 96.123848][ T4689] netlink: 'syz.2.92': attribute type 29 has an invalid length. [ 96.144198][ T4690] netlink: 'syz.2.92': attribute type 29 has an invalid length. [ 97.082832][ T4706] netlink: 'syz.0.97': attribute type 28 has an invalid length. [ 97.116983][ T4706] netlink: 'syz.0.97': attribute type 4 has an invalid length. [ 97.147639][ T4706] netlink: 136 bytes leftover after parsing attributes in process `syz.0.97'. [ 97.824455][ T4720] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 97.923509][ T4725] netlink: 'syz.0.103': attribute type 17 has an invalid length. [ 97.962379][ T4725] netlink: 148 bytes leftover after parsing attributes in process `syz.0.103'. [ 98.248385][ T4722] syz.2.102 (4722) used greatest stack depth: 16520 bytes left [ 98.448959][ T4731] netlink: 'syz.4.104': attribute type 29 has an invalid length. [ 98.516742][ T4733] Zero length message leads to an empty skb [ 98.536851][ T4731] netlink: 'syz.4.104': attribute type 29 has an invalid length. [ 98.600506][ T4731] netlink: 'syz.4.104': attribute type 29 has an invalid length. [ 98.723388][ T4504] wlan1: Trigger new scan to find an IBSS to join [ 99.525587][ T4748] device sit0 entered promiscuous mode [ 99.626176][ T4750] netlink: 'syz.3.110': attribute type 28 has an invalid length. [ 99.647005][ T4750] netlink: 136 bytes leftover after parsing attributes in process `syz.3.110'. [ 99.684504][ T4504] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 100.953420][ T4274] Bluetooth: hci3: ISO packet for unknown connection handle 2366 [ 101.110233][ T4788] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 101.551190][ T4799] validate_nla: 1 callbacks suppressed [ 101.551252][ T4799] netlink: 'syz.4.123': attribute type 28 has an invalid length. [ 101.572988][ T4799] netlink: 'syz.4.123': attribute type 4 has an invalid length. [ 101.584982][ T4799] netlink: 136 bytes leftover after parsing attributes in process `syz.4.123'. [ 101.766550][ T56] wlan1: Trigger new scan to find an IBSS to join [ 101.967325][ T4802] team0: Port device team_slave_0 removed [ 101.989878][ T4802] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 102.090415][ T4816] Illegal XDP return value 98 on prog (id 84) dev N/A, expect packet loss! [ 103.369765][ T4845] netlink: 'syz.3.137': attribute type 12 has an invalid length. [ 103.441812][ T4845] netlink: 132 bytes leftover after parsing attributes in process `syz.3.137'. [ 103.456891][ T4846] netlink: 'syz.3.137': attribute type 12 has an invalid length. [ 103.478859][ T4846] netlink: 132 bytes leftover after parsing attributes in process `syz.3.137'. [ 104.434340][ T4876] netlink: 'syz.0.147': attribute type 29 has an invalid length. [ 104.531686][ T4881] netlink: 'syz.1.148': attribute type 10 has an invalid length. [ 104.572359][ T4876] netlink: 'syz.0.147': attribute type 29 has an invalid length. [ 104.604140][ T4880] netlink: 'syz.0.147': attribute type 29 has an invalid length. [ 104.917963][ T4890] FAULT_INJECTION: forcing a failure. [ 104.917963][ T4890] name failslab, interval 1, probability 0, space 0, times 0 [ 104.957687][ T4890] CPU: 1 PID: 4890 Comm: syz.3.152 Not tainted syzkaller #0 [ 104.965043][ T4890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 104.975134][ T4890] Call Trace: [ 104.978444][ T4890] [ 104.981407][ T4890] dump_stack_lvl+0x168/0x22e [ 104.986126][ T4890] ? show_regs_print_info+0x12/0x12 [ 104.991357][ T4890] ? load_image+0x3b0/0x3b0 [ 104.995910][ T4890] ? __might_sleep+0xd0/0xd0 [ 105.000541][ T4890] ? __lock_acquire+0x7c50/0x7c50 [ 105.005629][ T4890] should_fail_ex+0x399/0x4d0 [ 105.010352][ T4890] should_failslab+0x5/0x20 [ 105.014897][ T4890] slab_pre_alloc_hook+0x59/0x310 [ 105.019982][ T4890] kmem_cache_alloc+0x56/0x2f0 [ 105.024776][ T4890] ? security_inode_alloc+0x30/0x110 [ 105.030107][ T4890] security_inode_alloc+0x30/0x110 [ 105.035255][ T4890] inode_init_always+0x8f8/0xc90 [ 105.040236][ T4890] ? memset+0x1e/0x40 [ 105.044263][ T4890] new_inode_pseudo+0x91/0x1c0 [ 105.049068][ T4890] new_inode+0x25/0x1c0 [ 105.053260][ T4890] proc_pid_make_inode+0x20/0x1c0 [ 105.058342][ T4890] proc_ns_dir_lookup+0x6a0/0x7c0 [ 105.063403][ T4890] ? proc_ns_dir_readdir+0x420/0x420 [ 105.068715][ T4890] path_openat+0xfaf/0x2e70 [ 105.073262][ T4890] ? do_filp_open+0x3c0/0x3c0 [ 105.077966][ T4890] do_filp_open+0x1c1/0x3c0 [ 105.082484][ T4890] ? vfs_tmpfile+0x480/0x480 [ 105.087094][ T4890] ? noop_direct_IO+0x10/0x10 [ 105.091801][ T4890] ? _raw_spin_unlock+0x24/0x40 [ 105.096675][ T4890] ? alloc_fd+0x58f/0x630 [ 105.101039][ T4890] do_sys_openat2+0x142/0x490 [ 105.105742][ T4890] ? ct_nmi_exit+0x145/0x1c0 [ 105.110349][ T4890] ? do_sys_open+0xe0/0xe0 [ 105.114776][ T4890] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 105.120780][ T4890] ? lock_chain_count+0x20/0x20 [ 105.125648][ T4890] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 105.131672][ T4890] __x64_sys_openat+0x135/0x160 [ 105.136600][ T4890] do_syscall_64+0x4c/0xa0 [ 105.141040][ T4890] ? clear_bhb_loop+0x60/0xb0 [ 105.145742][ T4890] ? clear_bhb_loop+0x60/0xb0 [ 105.150451][ T4890] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 105.156363][ T4890] RIP: 0033:0x7fe41e98d710 [ 105.160792][ T4890] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 105.180500][ T4890] RSP: 002b:00007fe41f815f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 105.188931][ T4890] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fe41e98d710 [ 105.196913][ T4890] RDX: 0000000000000002 RSI: 00007fe41f815fa0 RDI: 00000000ffffff9c [ 105.204894][ T4890] RBP: 00007fe41f815fa0 R08: 0000000000000000 R09: 0000000000000000 [ 105.212871][ T4890] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 105.220853][ T4890] R13: 00007fe41ebe6038 R14: 00007fe41ebe5fa0 R15: 00007ffd6f6a7048 [ 105.228881][ T4890] [ 106.190080][ T4905] syzkaller0: tun_chr_ioctl cmd 1074025675 [ 106.220344][ T4905] syzkaller0: persist disabled [ 106.451369][ T4920] netlink: 'syz.2.164': attribute type 21 has an invalid length. [ 106.757209][ T4928] netlink: 14601 bytes leftover after parsing attributes in process `syz.2.166'. [ 106.807219][ T4505] wlan1: Trigger new scan to find an IBSS to join [ 106.864684][ T4925] netlink: 'syz.4.165': attribute type 29 has an invalid length. [ 107.016048][ T4925] netlink: 'syz.4.165': attribute type 29 has an invalid length. [ 107.811130][ T4505] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 108.433726][ T4957] netlink: 'syz.2.178': attribute type 10 has an invalid length. [ 108.501851][ T4957] netlink: 40 bytes leftover after parsing attributes in process `syz.2.178'. [ 108.529384][ T4957] device team0 entered promiscuous mode [ 108.555455][ T4957] device team_slave_0 entered promiscuous mode [ 108.583990][ T4957] device team_slave_1 entered promiscuous mode [ 108.611768][ T4957] bridge0: port 3(team0) entered blocking state [ 108.697708][ T4957] bridge0: port 3(team0) entered disabled state [ 108.734962][ T4966] netlink: 'syz.4.180': attribute type 29 has an invalid length. [ 108.818684][ T4957] bridge0: port 3(team0) entered blocking state [ 108.825291][ T4957] bridge0: port 3(team0) entered forwarding state [ 108.919515][ T4966] netlink: 'syz.4.180': attribute type 29 has an invalid length. [ 108.956663][ T4968] netlink: 'syz.4.180': attribute type 29 has an invalid length. [ 109.086503][ T4957] netlink: 'syz.2.178': attribute type 21 has an invalid length. [ 109.162028][ T4978] netlink: 60 bytes leftover after parsing attributes in process `syz.1.184'. [ 109.179413][ T4957] netlink: 164 bytes leftover after parsing attributes in process `syz.2.178'. [ 110.285954][ T33] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.510068][ T33] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.778275][ T47] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 110.787692][ T47] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 110.795516][ T47] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 110.803907][ T47] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 110.805999][ T33] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.824489][ T4265] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 110.832419][ T4265] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 110.893657][ T5002] netlink: 'syz.3.197': attribute type 29 has an invalid length. [ 110.951105][ T33] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.990764][ T5002] netlink: 'syz.3.197': attribute type 29 has an invalid length. [ 111.034747][ T5003] netlink: 'syz.3.197': attribute type 29 has an invalid length. [ 111.673681][ T5000] chnl_net:caif_netlink_parms(): no params data found [ 111.687230][ T4265] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 111.697757][ T4265] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 111.705549][ T4265] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 111.714920][ T4265] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 111.727476][ T4265] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 111.735648][ T4265] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 112.149886][ T47] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 112.159258][ T47] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 112.167206][ T5000] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.174341][ T5000] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.183292][ T47] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 112.192386][ T47] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 112.201408][ T47] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 112.209114][ T47] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 112.247446][ T5000] device bridge_slave_0 entered promiscuous mode [ 112.300634][ T5000] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.316115][ T5000] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.341591][ T5000] device bridge_slave_1 entered promiscuous mode [ 112.469016][ T5000] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.525297][ T5000] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.674589][ T5000] team0: Port device team_slave_0 added [ 112.753320][ T5000] team0: Port device team_slave_1 added [ 112.877402][ T4274] Bluetooth: hci0: command 0x0409 tx timeout [ 112.904288][ T5000] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.923228][ T5000] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.964100][ T5000] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 113.031134][ T5000] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 113.038423][ T5000] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.064885][ T5000] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 113.094175][ T5017] chnl_net:caif_netlink_parms(): no params data found [ 113.254787][ T5028] chnl_net:caif_netlink_parms(): no params data found [ 113.294486][ T5000] device hsr_slave_0 entered promiscuous mode [ 113.302752][ T5000] device hsr_slave_1 entered promiscuous mode [ 113.311529][ T5000] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 113.319698][ T5000] Cannot create hsr debugfs directory [ 113.346634][ T33] device hsr_slave_0 left promiscuous mode [ 113.353493][ T33] device hsr_slave_1 left promiscuous mode [ 113.362381][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.373931][ T33] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.385017][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.401249][ T33] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.414563][ T33] device bridge_slave_1 left promiscuous mode [ 113.431217][ T33] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.453102][ T33] device bridge_slave_0 left promiscuous mode [ 113.459581][ T33] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.489903][ T33] device veth1_macvtap left promiscuous mode [ 113.505339][ T33] device veth0_macvtap left promiscuous mode [ 113.512969][ T33] device veth1_vlan left promiscuous mode [ 113.526767][ T33] device veth0_vlan left promiscuous mode [ 113.756785][ T4274] Bluetooth: hci3: command 0x0409 tx timeout [ 114.103058][ T33] team0 (unregistering): Port device team_slave_1 removed [ 114.136563][ T33] team0 (unregistering): Port device team_slave_0 removed [ 114.169797][ T33] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 114.204957][ T33] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 114.237282][ T4274] Bluetooth: hci4: command 0x0409 tx timeout [ 114.559291][ T33] bond0 (unregistering): Released all slaves [ 114.818553][ T5017] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.825868][ T5017] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.835326][ T5017] device bridge_slave_0 entered promiscuous mode [ 114.865060][ T5017] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.872497][ T5017] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.880627][ T5017] device bridge_slave_1 entered promiscuous mode [ 114.954997][ T5028] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.956835][ T4274] Bluetooth: hci0: command 0x041b tx timeout [ 114.962397][ T5028] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.977757][ T5028] device bridge_slave_0 entered promiscuous mode [ 115.057986][ T5017] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 115.082499][ T5028] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.106862][ T5028] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.125236][ T5028] device bridge_slave_1 entered promiscuous mode [ 115.204292][ T5017] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 115.301941][ T5028] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 115.331473][ T5017] team0: Port device team_slave_0 added [ 115.354415][ T5028] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 115.415911][ T5017] team0: Port device team_slave_1 added [ 115.504806][ T5028] team0: Port device team_slave_0 added [ 115.527486][ T5028] team0: Port device team_slave_1 added [ 115.642608][ T5017] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 115.659905][ T5017] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.695670][ T5017] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 115.731694][ T5028] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 115.764702][ T5028] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.836905][ T4274] Bluetooth: hci3: command 0x041b tx timeout [ 115.836928][ T5028] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 115.872003][ T5017] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 115.891513][ T5103] netlink: 'syz.3.210': attribute type 29 has an invalid length. [ 115.895877][ T5017] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.926176][ T5017] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 115.963673][ T5028] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 115.973978][ T5028] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.009080][ T5028] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 116.036575][ T5103] netlink: 'syz.3.210': attribute type 29 has an invalid length. [ 116.136147][ T5000] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 116.165935][ T5100] netlink: 'syz.3.210': attribute type 29 has an invalid length. [ 116.264957][ T33] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.285083][ T5017] device hsr_slave_0 entered promiscuous mode [ 116.294444][ T5017] device hsr_slave_1 entered promiscuous mode [ 116.301729][ T5017] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 116.312167][ T5017] Cannot create hsr debugfs directory [ 116.318302][ T4274] Bluetooth: hci4: command 0x041b tx timeout [ 116.343088][ T5000] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 116.392219][ T33] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.413496][ T5000] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 116.458157][ T5028] device hsr_slave_0 entered promiscuous mode [ 116.472059][ T5028] device hsr_slave_1 entered promiscuous mode [ 116.480238][ T5028] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 116.489496][ T5028] Cannot create hsr debugfs directory [ 116.495531][ T5000] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 116.521328][ T33] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.632057][ T33] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.994458][ T33] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.036532][ T4274] Bluetooth: hci0: command 0x040f tx timeout [ 117.118044][ T33] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.173575][ T5000] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.259203][ T33] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.294386][ T5017] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 117.327841][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 117.358944][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 117.378618][ T5000] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.405450][ T5017] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 117.454381][ T33] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.488753][ T5017] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 117.506247][ T5017] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 117.550092][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 117.569023][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 117.585954][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.593132][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.612176][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 117.630787][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 117.643835][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.651034][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.667202][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 117.733025][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 117.771159][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 117.795778][ T5028] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 117.821197][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 117.838065][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 117.858739][ T5028] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 117.877370][ T5028] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 117.887948][ T5028] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 117.900503][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 117.916985][ T4274] Bluetooth: hci3: command 0x040f tx timeout [ 117.982108][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 117.998964][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 118.017224][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 118.048437][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 118.067461][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 118.096051][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 118.108767][ T5000] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 118.396423][ T4274] Bluetooth: hci4: command 0x040f tx timeout [ 118.454252][ T5017] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.499241][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 118.515261][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 118.554051][ T5017] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.593273][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 118.630651][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 118.679891][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.687105][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.719348][ T5028] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.764306][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 118.784302][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 118.814607][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 118.850704][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.857981][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.888648][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 118.929784][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 118.940703][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 118.954853][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 118.967114][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 118.977798][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 118.987732][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 119.021286][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 119.046076][ T5028] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.071389][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 119.087373][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 119.115768][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 119.116602][ T47] Bluetooth: hci0: command 0x0419 tx timeout [ 119.145394][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 119.164959][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 119.202881][ T5017] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 119.256959][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 119.292868][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 119.311052][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.318270][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.409390][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 119.433672][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 119.471153][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.478387][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.525147][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 119.607841][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 119.638267][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 119.654695][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 119.721332][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 119.736790][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 119.744466][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 119.791999][ T5000] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.837559][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 119.857813][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 119.885825][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 119.996829][ T47] Bluetooth: hci3: command 0x0419 tx timeout [ 120.077707][ T5195] netlink: 'syz.3.221': attribute type 29 has an invalid length. [ 120.123825][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 120.139953][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 120.175392][ T5195] netlink: 'syz.3.221': attribute type 29 has an invalid length. [ 120.259596][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 120.271688][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 120.290397][ T5196] netlink: 'syz.3.221': attribute type 29 has an invalid length. [ 120.335201][ T5028] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 120.477042][ T4274] Bluetooth: hci4: command 0x0419 tx timeout [ 120.588762][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 120.600115][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 120.630803][ T5017] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.257496][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 121.287388][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 121.494342][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 121.537331][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 121.564422][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 121.591008][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 121.641690][ T5000] device veth0_vlan entered promiscuous mode [ 121.797660][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 121.814572][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 121.830753][ T5000] device veth1_vlan entered promiscuous mode [ 121.860621][ T5028] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.167479][ T5000] device veth0_macvtap entered promiscuous mode [ 122.196454][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 122.205875][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 122.236170][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 122.269978][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 122.287419][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 122.306911][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 122.451804][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 122.461953][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 122.474203][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 122.497706][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 122.517149][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 122.541120][ T5000] device veth1_macvtap entered promiscuous mode [ 122.575494][ T5017] device veth0_vlan entered promiscuous mode [ 122.847043][ T5017] device veth1_vlan entered promiscuous mode [ 122.863376][ T5000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.890927][ T5000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.927601][ T5000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.963566][ T5000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.997639][ T5000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.031042][ T5000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.065241][ T5000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.096511][ T5000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.139377][ T5000] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 123.157313][ T5241] netlink: 2 bytes leftover after parsing attributes in process `syz.3.225'. [ 123.202118][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 123.238090][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 123.280162][ T5000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.316443][ T5000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.355310][ T5000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.406697][ T5000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.434479][ T5000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.475270][ T5000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.516958][ T5000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.546386][ T5000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.578151][ T5000] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 123.796544][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 123.807528][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 123.849155][ T5000] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.866171][ T5000] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.885404][ T5000] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.898517][ T5000] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.927209][ T5254] netlink: 'syz.0.228': attribute type 10 has an invalid length. [ 123.943862][ T5258] netlink: 'syz.3.229': attribute type 29 has an invalid length. [ 123.965385][ T5017] device veth0_macvtap entered promiscuous mode [ 124.036767][ T33] device hsr_slave_0 left promiscuous mode [ 124.043271][ T33] device hsr_slave_1 left promiscuous mode [ 124.087753][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.095338][ T33] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 124.114884][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.123605][ T33] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.144922][ T33] bridge0: port 3(team0) entered disabled state [ 124.151849][ T5261] FAULT_INJECTION: forcing a failure. [ 124.151849][ T5261] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 124.166228][ T5261] CPU: 0 PID: 5261 Comm: syz.0.230 Not tainted syzkaller #0 [ 124.173555][ T5261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 124.183640][ T5261] Call Trace: [ 124.186951][ T5261] [ 124.189907][ T5261] dump_stack_lvl+0x168/0x22e [ 124.194635][ T5261] ? show_regs_print_info+0x12/0x12 [ 124.199872][ T5261] ? load_image+0x3b0/0x3b0 [ 124.204418][ T5261] ? __lock_acquire+0x7c50/0x7c50 [ 124.209501][ T5261] should_fail_ex+0x399/0x4d0 [ 124.214230][ T5261] _copy_from_user+0x2c/0x170 [ 124.218947][ T5261] __sys_bpf+0x265/0x6d0 [ 124.223255][ T5261] ? bpf_link_show_fdinfo+0x340/0x340 [ 124.228699][ T5261] ? lock_chain_count+0x20/0x20 [ 124.233592][ T5261] __x64_sys_bpf+0x78/0x90 [ 124.238044][ T5261] do_syscall_64+0x4c/0xa0 [ 124.242493][ T5261] ? clear_bhb_loop+0x60/0xb0 [ 124.247202][ T5261] ? clear_bhb_loop+0x60/0xb0 [ 124.251913][ T5261] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 124.257848][ T5261] RIP: 0033:0x7f328c78eec9 [ 124.262291][ T5261] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 124.281932][ T5261] RSP: 002b:00007f328d60a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 124.290383][ T5261] RAX: ffffffffffffffda RBX: 00007f328c9e5fa0 RCX: 00007f328c78eec9 [ 124.298391][ T5261] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 124.306390][ T5261] RBP: 00007f328d60a090 R08: 0000000000000000 R09: 0000000000000000 [ 124.314394][ T5261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 124.322476][ T5261] R13: 00007f328c9e6038 R14: 00007f328c9e5fa0 R15: 00007ffc73907a68 [ 124.330498][ T5261] [ 124.341271][ T33] device bridge_slave_1 left promiscuous mode [ 124.364589][ T33] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.385326][ T33] device bridge_slave_0 left promiscuous mode [ 124.394685][ T33] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.474021][ T33] device hsr_slave_0 left promiscuous mode [ 124.496974][ T33] device hsr_slave_1 left promiscuous mode [ 124.503708][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.518184][ T33] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 124.536515][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.553107][ T33] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.590475][ T33] device bridge_slave_1 left promiscuous mode [ 124.599454][ T33] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.621563][ T33] device bridge_slave_0 left promiscuous mode [ 124.642875][ T33] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.891626][ T33] device veth1_macvtap left promiscuous mode [ 124.899253][ T33] device veth0_macvtap left promiscuous mode [ 124.920868][ T33] device veth1_vlan left promiscuous mode [ 124.935632][ T33] device veth0_vlan left promiscuous mode [ 124.954338][ T33] device veth1_macvtap left promiscuous mode [ 124.963547][ T33] device veth0_macvtap left promiscuous mode [ 124.975914][ T33] device veth1_vlan left promiscuous mode [ 124.993063][ T33] device veth0_vlan left promiscuous mode [ 125.867492][ T33] device team_slave_1 left promiscuous mode [ 125.876157][ T33] team0 (unregistering): Port device team_slave_1 removed [ 125.911277][ T33] device team_slave_0 left promiscuous mode [ 125.919588][ T33] team0 (unregistering): Port device team_slave_0 removed [ 125.958768][ T33] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 125.994744][ T33] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 126.373642][ T33] bond0 (unregistering): Released all slaves [ 126.708523][ T33] team0 (unregistering): Port device team_slave_1 removed [ 126.744820][ T33] team0 (unregistering): Port device team_slave_0 removed [ 126.778743][ T33] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 126.815319][ T33] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 127.170945][ T33] bond0 (unregistering): Released all slaves [ 127.256620][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 127.266051][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 127.276128][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 127.285016][ T5258] netlink: 'syz.3.229': attribute type 29 has an invalid length. [ 127.300329][ T5017] device veth1_macvtap entered promiscuous mode [ 127.346011][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 127.372951][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 127.405652][ T5017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.428279][ T5017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.438833][ T5017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.449662][ T5017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.460749][ T5017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.471312][ T5017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.484344][ T5017] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 127.523194][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 127.533822][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 127.558024][ T5017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.586324][ T5017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.607049][ T5017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.646353][ T5017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.666451][ T5017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.677420][ T5017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.691169][ T5017] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 127.741692][ T5028] device veth0_vlan entered promiscuous mode [ 127.769591][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 127.789137][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 127.806241][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 127.825760][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 127.845052][ T5017] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.876319][ T5017] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.885079][ T5017] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.897043][ T5017] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.940228][ T5028] device veth1_vlan entered promiscuous mode [ 127.953867][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 127.980430][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 127.993975][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 128.058530][ T4344] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.094413][ T4344] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.131447][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 128.148578][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 128.187629][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 128.207377][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 128.233829][ T5028] device veth0_macvtap entered promiscuous mode [ 128.274247][ T4504] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.281736][ T5028] device veth1_macvtap entered promiscuous mode [ 128.298243][ T4504] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.324465][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 128.337572][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 128.347788][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 128.378839][ T4504] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.395050][ T4504] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.453748][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 128.495047][ T5028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.513840][ T5028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.531187][ T5028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.556634][ T5028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.596741][ T5028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.632433][ T5028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.649542][ T5028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.660791][ T5028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.694970][ T5028] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 128.742674][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 128.772405][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 128.836972][ T5028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.862875][ T5028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.896438][ T5028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.936433][ T5028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.996759][ T5028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.067423][ T5028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.106373][ T5028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.145009][ T5028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.173352][ T5028] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 129.198956][ T4505] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.218012][ T4505] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.228408][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 129.267207][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 129.297900][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 129.330460][ T5028] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.366799][ T5028] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.375565][ T5028] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.416369][ T5028] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.765460][ T4504] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.801078][ T4504] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.847762][ T5303] netlink: 'syz.0.238': attribute type 2 has an invalid length. [ 129.855777][ T5303] netlink: 199848 bytes leftover after parsing attributes in process `syz.0.238'. [ 129.866178][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 129.894074][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.956336][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.966587][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 130.782458][ T5329] FAULT_INJECTION: forcing a failure. [ 130.782458][ T5329] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 130.867511][ T5329] CPU: 0 PID: 5329 Comm: syz.7.246 Not tainted syzkaller #0 [ 130.874879][ T5329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 130.884981][ T5329] Call Trace: [ 130.888304][ T5329] [ 130.891272][ T5329] dump_stack_lvl+0x168/0x22e [ 130.896008][ T5329] ? show_regs_print_info+0x12/0x12 [ 130.901253][ T5329] ? load_image+0x3b0/0x3b0 [ 130.905810][ T5329] ? __lock_acquire+0x7c50/0x7c50 [ 130.910884][ T5329] ? verify_lock_unused+0x140/0x140 [ 130.916141][ T5329] should_fail_ex+0x399/0x4d0 [ 130.920886][ T5329] _copy_from_user+0x2c/0x170 [ 130.925613][ T5329] ___sys_sendmsg+0x155/0x290 [ 130.930340][ T5329] ? __sys_sendmsg+0x270/0x270 [ 130.935201][ T5329] ? __lock_acquire+0x7c50/0x7c50 [ 130.940296][ T5329] ? __fdget+0x17c/0x200 [ 130.944585][ T5329] __se_sys_sendmsg+0x19e/0x270 [ 130.949486][ T5329] ? perf_trace_preemptirq_template+0x287/0x330 [ 130.955780][ T5329] ? __x64_sys_sendmsg+0x80/0x80 [ 130.960789][ T5329] ? lockdep_hardirqs_on+0x94/0x140 [ 130.966031][ T5329] do_syscall_64+0x4c/0xa0 [ 130.970490][ T5329] ? clear_bhb_loop+0x60/0xb0 [ 130.975210][ T5329] ? clear_bhb_loop+0x60/0xb0 [ 130.979929][ T5329] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 130.985860][ T5329] RIP: 0033:0x7fd5baf8eec9 [ 130.990310][ T5329] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.009962][ T5329] RSP: 002b:00007fd5bbe65038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 131.018431][ T5329] RAX: ffffffffffffffda RBX: 00007fd5bb1e5fa0 RCX: 00007fd5baf8eec9 [ 131.026529][ T5329] RDX: 0000000000000014 RSI: 0000200000000000 RDI: 0000000000000005 [ 131.034546][ T5329] RBP: 00007fd5bbe65090 R08: 0000000000000000 R09: 0000000000000000 [ 131.042559][ T5329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 131.050568][ T5329] R13: 00007fd5bb1e6038 R14: 00007fd5bb1e5fa0 R15: 00007fffd69ce578 [ 131.058598][ T5329] [ 131.621962][ T5342] netlink: 'syz.7.249': attribute type 29 has an invalid length. [ 131.684652][ T5342] netlink: 44 bytes leftover after parsing attributes in process `syz.7.249'. [ 131.743104][ T5342] netlink: 'syz.7.249': attribute type 29 has an invalid length. [ 131.781075][ T5342] netlink: 44 bytes leftover after parsing attributes in process `syz.7.249'. [ 132.010627][ T5359] netlink: 'syz.0.252': attribute type 29 has an invalid length. [ 132.053474][ T5359] netlink: 'syz.0.252': attribute type 29 has an invalid length. [ 132.087249][ T5364] netlink: 'syz.0.252': attribute type 29 has an invalid length. [ 132.187229][ T5366] netlink: 'syz.7.253': attribute type 29 has an invalid length. [ 132.215998][ T5359] netlink: 'syz.0.252': attribute type 29 has an invalid length. [ 132.256520][ T5366] netlink: 'syz.7.253': attribute type 29 has an invalid length. [ 132.434293][ T5374] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.257'. [ 132.732631][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.747322][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.066072][ T5391] netlink: 'syz.6.263': attribute type 21 has an invalid length. [ 133.096187][ T5391] netlink: 132 bytes leftover after parsing attributes in process `syz.6.263'. [ 134.277255][ T5417] netlink: 2 bytes leftover after parsing attributes in process `syz.0.268'. [ 136.399824][ T5492] validate_nla: 4 callbacks suppressed [ 136.399863][ T5492] netlink: 'syz.7.288': attribute type 1 has an invalid length. [ 136.454723][ T5492] netlink: 132 bytes leftover after parsing attributes in process `syz.7.288'. [ 136.487301][ T5494] macvtap0: refused to change device tx_queue_len [ 137.075913][ T5514] netlink: 'syz.0.291': attribute type 29 has an invalid length. [ 137.158603][ T5514] netlink: 'syz.0.291': attribute type 29 has an invalid length. [ 137.227962][ T5519] netlink: 'syz.0.291': attribute type 29 has an invalid length. [ 139.036800][ T5555] netlink: 194236 bytes leftover after parsing attributes in process `syz.3.307'. [ 139.078125][ T5555] netlink: zone id is out of range [ 139.114262][ T5555] netlink: zone id is out of range [ 139.144617][ T5555] netlink: zone id is out of range [ 139.170276][ T5555] netlink: zone id is out of range [ 139.202416][ T5555] netlink: zone id is out of range [ 139.275898][ T5555] netlink: zone id is out of range [ 139.333712][ T5555] netlink: zone id is out of range [ 139.377957][ T5555] netlink: get zone limit has 8 unknown bytes [ 139.485919][ T5562] netlink: 'syz.0.308': attribute type 10 has an invalid length. [ 140.007863][ T5577] netlink: 164 bytes leftover after parsing attributes in process `syz.6.310'. [ 140.121233][ T5587] netlink: 'syz.3.313': attribute type 29 has an invalid length. [ 140.123471][ T5566] netlink: 'syz.6.310': attribute type 1 has an invalid length. [ 140.188626][ T5566] netlink: 'syz.6.310': attribute type 1 has an invalid length. [ 140.240433][ T5566] netlink: 116376 bytes leftover after parsing attributes in process `syz.6.310'. [ 140.258865][ T5587] netlink: 'syz.3.313': attribute type 29 has an invalid length. [ 140.332637][ T5593] netlink: 'syz.3.313': attribute type 29 has an invalid length. [ 141.489300][ T5613] validate_nla: 1 callbacks suppressed [ 141.489320][ T5613] netlink: 'syz.5.318': attribute type 29 has an invalid length. [ 141.742006][ T5604] netlink: 'syz.5.318': attribute type 29 has an invalid length. [ 142.113330][ T5609] netlink: 'syz.5.318': attribute type 29 has an invalid length. [ 142.268028][ T5624] netlink: 'syz.5.318': attribute type 29 has an invalid length. [ 142.739819][ T5644] netlink: 'syz.7.324': attribute type 10 has an invalid length. [ 142.980561][ T5647] netlink: 'syz.6.325': attribute type 10 has an invalid length. [ 143.941535][ T5675] netlink: 'syz.3.333': attribute type 29 has an invalid length. [ 144.021684][ T5675] netlink: 'syz.3.333': attribute type 29 has an invalid length. [ 144.050758][ T5677] netlink: 'syz.3.333': attribute type 29 has an invalid length. [ 144.701255][ T5695] FAULT_INJECTION: forcing a failure. [ 144.701255][ T5695] name failslab, interval 1, probability 0, space 0, times 0 [ 144.802026][ T5695] CPU: 1 PID: 5695 Comm: syz.5.338 Not tainted syzkaller #0 [ 144.809508][ T5695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 144.819624][ T5695] Call Trace: [ 144.822961][ T5695] [ 144.825948][ T5695] dump_stack_lvl+0x168/0x22e [ 144.830709][ T5695] ? show_regs_print_info+0x12/0x12 [ 144.835972][ T5695] ? load_image+0x3b0/0x3b0 [ 144.840556][ T5695] ? __might_sleep+0xd0/0xd0 [ 144.845228][ T5695] ? __lock_acquire+0x7c50/0x7c50 [ 144.850371][ T5695] should_fail_ex+0x399/0x4d0 [ 144.855145][ T5695] should_failslab+0x5/0x20 [ 144.859727][ T5695] slab_pre_alloc_hook+0x59/0x310 [ 144.864839][ T5695] kmem_cache_alloc_node+0x5a/0x320 [ 144.870096][ T5695] ? __alloc_skb+0xfc/0x7e0 [ 144.874684][ T5695] __alloc_skb+0xfc/0x7e0 [ 144.879074][ T5695] ? netlink_autobind+0xda/0x300 [ 144.884099][ T5695] netlink_sendmsg+0x645/0xbc0 [ 144.888958][ T5695] ? netlink_getsockopt+0x540/0x540 [ 144.894233][ T5695] ? aa_sock_msg_perm+0x94/0x150 [ 144.899256][ T5695] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 144.904594][ T5695] ? security_socket_sendmsg+0x7c/0xa0 [ 144.910117][ T5695] ? netlink_getsockopt+0x540/0x540 [ 144.915359][ T5695] ____sys_sendmsg+0x59b/0x970 [ 144.920187][ T5695] ? __sys_sendmsg_sock+0x30/0x30 [ 144.925242][ T5695] ? __import_iovec+0x315/0x500 [ 144.930152][ T5695] ? import_iovec+0x6f/0xa0 [ 144.934712][ T5695] ___sys_sendmsg+0x21c/0x290 [ 144.939435][ T5695] ? __sys_sendmsg+0x270/0x270 [ 144.944291][ T5695] ? __lock_acquire+0x7c50/0x7c50 [ 144.949574][ T5695] ? __fdget+0x17c/0x200 [ 144.953863][ T5695] __se_sys_sendmsg+0x19e/0x270 [ 144.958744][ T5695] ? ct_nmi_exit+0x145/0x1c0 [ 144.963375][ T5695] ? __x64_sys_sendmsg+0x80/0x80 [ 144.968384][ T5695] ? lockdep_hardirqs_on+0x94/0x140 [ 144.973716][ T5695] do_syscall_64+0x4c/0xa0 [ 144.978159][ T5695] ? clear_bhb_loop+0x60/0xb0 [ 144.982868][ T5695] ? clear_bhb_loop+0x60/0xb0 [ 144.987580][ T5695] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 144.993501][ T5695] RIP: 0033:0x7fc6a058eec9 [ 144.997949][ T5695] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 145.017581][ T5695] RSP: 002b:00007fc6a1388038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 145.026025][ T5695] RAX: ffffffffffffffda RBX: 00007fc6a07e5fa0 RCX: 00007fc6a058eec9 [ 145.034029][ T5695] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 145.042030][ T5695] RBP: 00007fc6a1388090 R08: 0000000000000000 R09: 0000000000000000 [ 145.050050][ T5695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.058065][ T5695] R13: 00007fc6a07e6038 R14: 00007fc6a07e5fa0 R15: 00007ffdc823d0e8 [ 145.066127][ T5695] [ 146.664388][ T5700] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 146.676663][ T47] Bluetooth: hci4: unexpected event 0x31 length: 15 > 6 [ 146.687542][ T4344] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00 [ 146.836024][ T4344] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 147.448143][ T5724] netlink: 40 bytes leftover after parsing attributes in process `syz.6.344'. [ 147.514374][ T5724] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.718241][ T5724] device bridge_slave_0 left promiscuous mode [ 147.756155][ T5724] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.898618][ T5738] netlink: 'syz.7.348': attribute type 29 has an invalid length. [ 147.934664][ T5728] netlink: 56863 bytes leftover after parsing attributes in process `syz.6.344'. [ 147.965147][ T5734] netlink: 156 bytes leftover after parsing attributes in process `syz.3.347'. [ 147.986965][ T5738] netlink: 'syz.7.348': attribute type 29 has an invalid length. [ 148.032104][ T5742] netlink: 'syz.7.348': attribute type 29 has an invalid length. [ 148.467567][ T5749] netlink: 'syz.5.350': attribute type 10 has an invalid length. [ 150.421770][ T5805] netlink: 'syz.3.364': attribute type 29 has an invalid length. [ 150.487813][ T5805] netlink: 'syz.3.364': attribute type 29 has an invalid length. [ 150.531882][ T5807] netlink: 'syz.3.364': attribute type 29 has an invalid length. [ 150.713122][ T5814] netlink: 'syz.5.368': attribute type 10 has an invalid length. [ 150.992658][ T5819] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 151.040789][ T5819] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 152.496054][ T5859] netlink: 'syz.0.380': attribute type 29 has an invalid length. [ 152.625487][ T5856] netlink: 'syz.5.381': attribute type 10 has an invalid length. [ 152.716471][ T56] wlan1: Trigger new scan to find an IBSS to join [ 153.124505][ T5872] validate_nla: 4 callbacks suppressed [ 153.124524][ T5872] netlink: 'syz.5.382': attribute type 29 has an invalid length. [ 153.244786][ T5872] netlink: 'syz.5.382': attribute type 29 has an invalid length. [ 153.295339][ T5874] netlink: 'syz.5.382': attribute type 29 has an invalid length. [ 154.484667][ T5908] netlink: 'syz.7.392': attribute type 10 has an invalid length. [ 154.621330][ T5909] netlink: 'syz.0.391': attribute type 10 has an invalid length. [ 154.758891][ T5909] device hsr_slave_0 left promiscuous mode [ 154.850553][ T5913] netlink: 763 bytes leftover after parsing attributes in process `syz.6.393'. [ 156.069709][ T5949] netlink: 14568 bytes leftover after parsing attributes in process `syz.7.404'. [ 156.646410][ T5968] netlink: 'syz.7.406': attribute type 29 has an invalid length. [ 156.720231][ T5968] netlink: 'syz.7.406': attribute type 29 has an invalid length. [ 156.735549][ T5971] netlink: 'syz.3.407': attribute type 29 has an invalid length. [ 156.932831][ T5971] netlink: 'syz.3.407': attribute type 29 has an invalid length. [ 156.974925][ T5970] netlink: 'syz.7.406': attribute type 29 has an invalid length. [ 157.434316][ T5984] netlink: 763 bytes leftover after parsing attributes in process `syz.5.409'. [ 159.674248][ T6040] validate_nla: 1 callbacks suppressed [ 159.674268][ T6040] netlink: 'syz.3.423': attribute type 29 has an invalid length. [ 159.835021][ T6040] netlink: 'syz.3.423': attribute type 29 has an invalid length. [ 159.934577][ T6045] netlink: 'syz.3.423': attribute type 29 has an invalid length. [ 160.073971][ T6060] netlink: 763 bytes leftover after parsing attributes in process `syz.0.425'. [ 161.501285][ T6093] netlink: 'syz.6.437': attribute type 29 has an invalid length. [ 161.613231][ T6093] netlink: 'syz.6.437': attribute type 29 has an invalid length. [ 161.697573][ T6095] netlink: 'syz.6.437': attribute type 29 has an invalid length. [ 162.396034][ T6113] netlink: 'syz.3.442': attribute type 10 has an invalid length. [ 163.161361][ T6130] netlink: 763 bytes leftover after parsing attributes in process `syz.7.443'. [ 163.185954][ T6132] netlink: 'syz.5.444': attribute type 10 has an invalid length. [ 165.721451][ T6232] netlink: 'syz.7.451': attribute type 29 has an invalid length. [ 165.802719][ T6232] netlink: 'syz.7.451': attribute type 29 has an invalid length. [ 165.893808][ T6238] netlink: 'syz.7.451': attribute type 29 has an invalid length. [ 166.098326][ T6237] netlink: 60 bytes leftover after parsing attributes in process `syz.3.454'. [ 166.139953][ T6241] netlink: 'syz.0.455': attribute type 21 has an invalid length. [ 166.315551][ T6247] netlink: 'syz.0.457': attribute type 2 has an invalid length. [ 166.353803][ T6247] device 0 entered promiscuous mode [ 168.306783][ T6275] netlink: 'syz.3.462': attribute type 10 has an invalid length. [ 169.076833][ T47] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 169.561703][ T6301] netlink: 'syz.7.468': attribute type 29 has an invalid length. [ 169.764117][ T6301] netlink: 'syz.7.468': attribute type 29 has an invalid length. [ 169.818148][ T6305] netlink: 'syz.7.468': attribute type 29 has an invalid length. [ 170.383199][ T6323] netlink: 'syz.3.476': attribute type 29 has an invalid length. [ 172.042464][ T6370] FAULT_INJECTION: forcing a failure. [ 172.042464][ T6370] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 172.112350][ T6370] CPU: 0 PID: 6370 Comm: syz.3.490 Not tainted syzkaller #0 [ 172.119720][ T6370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 172.129810][ T6370] Call Trace: [ 172.133129][ T6370] [ 172.136084][ T6370] dump_stack_lvl+0x168/0x22e [ 172.140798][ T6370] ? show_regs_print_info+0x12/0x12 [ 172.146026][ T6370] ? load_image+0x3b0/0x3b0 [ 172.150579][ T6370] ? __lock_acquire+0x7c50/0x7c50 [ 172.155663][ T6370] ? mutex_lock_nested+0x10/0x10 [ 172.160642][ T6370] should_fail_ex+0x399/0x4d0 [ 172.165363][ T6370] _copy_from_user+0x2c/0x170 [ 172.170084][ T6370] __tun_chr_ioctl+0x12e0/0x1e10 [ 172.175073][ T6370] ? tun_flow_create+0x310/0x310 [ 172.180076][ T6370] ? bpf_lsm_file_ioctl+0x5/0x10 [ 172.185048][ T6370] ? security_file_ioctl+0x7c/0xa0 [ 172.190195][ T6370] ? tun_chr_poll+0x630/0x630 [ 172.194924][ T6370] __se_sys_ioctl+0xfa/0x170 [ 172.199572][ T6370] do_syscall_64+0x4c/0xa0 [ 172.204033][ T6370] ? clear_bhb_loop+0x60/0xb0 [ 172.208740][ T6370] ? clear_bhb_loop+0x60/0xb0 [ 172.213457][ T6370] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 172.219397][ T6370] RIP: 0033:0x7fe41e98eec9 [ 172.223842][ T6370] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 172.243484][ T6370] RSP: 002b:00007fe41f816038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 172.251947][ T6370] RAX: ffffffffffffffda RBX: 00007fe41ebe5fa0 RCX: 00007fe41e98eec9 [ 172.259949][ T6370] RDX: 0000200000000040 RSI: 00000000401054d5 RDI: 0000000000000003 [ 172.267953][ T6370] RBP: 00007fe41f816090 R08: 0000000000000000 R09: 0000000000000000 [ 172.275961][ T6370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.283967][ T6370] R13: 00007fe41ebe6038 R14: 00007fe41ebe5fa0 R15: 00007ffd6f6a7048 [ 172.291987][ T6370] [ 173.397932][ T6381] netlink: 28 bytes leftover after parsing attributes in process `syz.6.492'. [ 174.903998][ T6381] netlink: 28 bytes leftover after parsing attributes in process `syz.6.492'. [ 175.009683][ T6386] netlink: 10 bytes leftover after parsing attributes in process `syz.6.492'. [ 175.484336][ T6402] FAULT_INJECTION: forcing a failure. [ 175.484336][ T6402] name failslab, interval 1, probability 0, space 0, times 0 [ 175.537698][ T6402] CPU: 1 PID: 6402 Comm: syz.0.497 Not tainted syzkaller #0 [ 175.545134][ T6402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 175.555225][ T6402] Call Trace: [ 175.558544][ T6402] [ 175.561530][ T6402] dump_stack_lvl+0x168/0x22e [ 175.566245][ T6402] ? show_regs_print_info+0x12/0x12 [ 175.571476][ T6402] ? load_image+0x3b0/0x3b0 [ 175.576040][ T6402] ? __might_sleep+0xd0/0xd0 [ 175.580678][ T6402] ? __lock_acquire+0x7c50/0x7c50 [ 175.585743][ T6402] should_fail_ex+0x399/0x4d0 [ 175.590466][ T6402] should_failslab+0x5/0x20 [ 175.595011][ T6402] slab_pre_alloc_hook+0x59/0x310 [ 175.600085][ T6402] ? apparmor_sk_alloc_security+0x74/0x100 [ 175.605937][ T6402] __kmem_cache_alloc_node+0x4f/0x260 [ 175.611346][ T6402] ? apparmor_sk_alloc_security+0x74/0x100 [ 175.617193][ T6402] kmalloc_trace+0x26/0xe0 [ 175.621652][ T6402] apparmor_sk_alloc_security+0x74/0x100 [ 175.627329][ T6402] security_sk_alloc+0x6a/0xa0 [ 175.632131][ T6402] sk_prot_alloc+0x101/0x210 [ 175.636751][ T6402] ? sk_alloc+0x20/0x340 [ 175.641025][ T6402] sk_alloc+0x36/0x340 [ 175.645134][ T6402] ? bpf_ctx_init+0x163/0x1a0 [ 175.649861][ T6402] ? bpf_prog_test_run_skb+0x267/0x11b0 [ 175.655454][ T6402] bpf_prog_test_run_skb+0x350/0x11b0 [ 175.660869][ T6402] ? __fget_files+0x28/0x4d0 [ 175.665582][ T6402] ? __fget_files+0x44a/0x4d0 [ 175.670305][ T6402] ? cpu_online+0xa0/0xa0 [ 175.675042][ T6402] bpf_prog_test_run+0x31e/0x390 [ 175.680032][ T6402] __sys_bpf+0x593/0x6d0 [ 175.684312][ T6402] ? bpf_link_show_fdinfo+0x340/0x340 [ 175.689743][ T6402] ? lock_chain_count+0x20/0x20 [ 175.694640][ T6402] __x64_sys_bpf+0x78/0x90 [ 175.699094][ T6402] do_syscall_64+0x4c/0xa0 [ 175.703546][ T6402] ? clear_bhb_loop+0x60/0xb0 [ 175.708258][ T6402] ? clear_bhb_loop+0x60/0xb0 [ 175.712968][ T6402] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 175.718896][ T6402] RIP: 0033:0x7f328c78eec9 [ 175.723338][ T6402] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.743077][ T6402] RSP: 002b:00007f328d60a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 175.751530][ T6402] RAX: ffffffffffffffda RBX: 00007f328c9e5fa0 RCX: 00007f328c78eec9 [ 175.759555][ T6402] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 175.767562][ T6402] RBP: 00007f328d60a090 R08: 0000000000000000 R09: 0000000000000000 [ 175.775572][ T6402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 175.783578][ T6402] R13: 00007f328c9e6038 R14: 00007f328c9e5fa0 R15: 00007ffc73907a68 [ 175.791604][ T6402] [ 176.438984][ T6433] netlink: 'syz.3.503': attribute type 29 has an invalid length. [ 176.511315][ T6433] netlink: 'syz.3.503': attribute type 29 has an invalid length. [ 176.563064][ T6436] netlink: 'syz.3.503': attribute type 29 has an invalid length. [ 176.633244][ T6439] netlink: 'syz.6.507': attribute type 13 has an invalid length. [ 176.646684][ T6439] netlink: 160 bytes leftover after parsing attributes in process `syz.6.507'. [ 176.676742][ T6439] erspan0: refused to change device tx_queue_len [ 176.710932][ T6439] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 178.419437][ T6482] device syzkaller0 entered promiscuous mode [ 179.357208][ T6499] netlink: 'syz.0.524': attribute type 29 has an invalid length. [ 180.980356][ T6500] netlink: 'syz.5.523': attribute type 21 has an invalid length. [ 180.993757][ T6500] netlink: 'syz.5.523': attribute type 1 has an invalid length. [ 181.009438][ T6499] netlink: 'syz.0.524': attribute type 29 has an invalid length. [ 181.701793][ T6532] netlink: 'syz.5.530': attribute type 29 has an invalid length. [ 181.747452][ T6535] netlink: 'syz.6.531': attribute type 29 has an invalid length. [ 181.795482][ T6540] netlink: 'syz.3.532': attribute type 9 has an invalid length. [ 181.821278][ T6540] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.532'. [ 181.897607][ T6532] netlink: 'syz.5.530': attribute type 29 has an invalid length. [ 181.916407][ T6535] netlink: 'syz.6.531': attribute type 29 has an invalid length. [ 181.934843][ T6530] netlink: 'syz.6.531': attribute type 29 has an invalid length. [ 181.971826][ T6533] netlink: 'syz.0.533': attribute type 10 has an invalid length. [ 182.018030][ T6528] netlink: 'syz.5.530': attribute type 29 has an invalid length. [ 182.740580][ T6568] netlink: 3 bytes leftover after parsing attributes in process `syz.6.538'. [ 182.801050][ T6566] syzkaller0: tun_chr_ioctl cmd 1074025673 [ 182.864169][ T6565] syzkaller0: tun_chr_ioctl cmd 35111 [ 182.921043][ T6571] syzkaller0: tun_chr_ioctl cmd 35111 [ 183.648466][ T6597] netlink: 'syz.6.544': attribute type 29 has an invalid length. [ 183.670630][ T6597] netlink: 'syz.6.544': attribute type 29 has an invalid length. [ 184.744037][ T6629] netlink: 156 bytes leftover after parsing attributes in process `syz.3.555'. [ 184.759456][ T6629] FAULT_INJECTION: forcing a failure. [ 184.759456][ T6629] name failslab, interval 1, probability 0, space 0, times 0 [ 184.787092][ T6629] CPU: 0 PID: 6629 Comm: syz.3.555 Not tainted syzkaller #0 [ 184.794444][ T6629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 184.804521][ T6629] Call Trace: [ 184.807815][ T6629] [ 184.810753][ T6629] dump_stack_lvl+0x168/0x22e [ 184.815469][ T6629] ? show_regs_print_info+0x12/0x12 [ 184.820680][ T6629] ? load_image+0x3b0/0x3b0 [ 184.825201][ T6629] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 184.831131][ T6629] ? lockdep_hardirqs_on+0x94/0x140 [ 184.836347][ T6629] should_fail_ex+0x399/0x4d0 [ 184.841042][ T6629] should_failslab+0x5/0x20 [ 184.845562][ T6629] slab_pre_alloc_hook+0x59/0x310 [ 184.850598][ T6629] kmem_cache_alloc+0x56/0x2f0 [ 184.855366][ T6629] ? skb_clone+0x1e7/0x370 [ 184.859795][ T6629] skb_clone+0x1e7/0x370 [ 184.864052][ T6629] __netlink_deliver_tap+0x3ed/0x800 [ 184.869358][ T6629] ? netlink_deliver_tap+0x2e/0x1b0 [ 184.874571][ T6629] netlink_deliver_tap+0x19c/0x1b0 [ 184.879701][ T6629] netlink_dump+0x804/0xcd0 [ 184.884230][ T6629] ? netlink_lookup+0x200/0x200 [ 184.889104][ T6629] ? netlink_lookup+0x30/0x200 [ 184.893894][ T6629] ? netlink_lookup+0x30/0x200 [ 184.898676][ T6629] __netlink_dump_start+0x537/0x6f0 [ 184.903895][ T6629] rtnetlink_rcv_msg+0xb92/0xed0 [ 184.908848][ T6629] ? neigh_get+0xcf0/0xcf0 [ 184.913273][ T6629] ? rtnetlink_rcv_msg+0x1d8/0xed0 [ 184.918456][ T6629] ? rtnetlink_bind+0x80/0x80 [ 184.923145][ T6629] ? __local_bh_enable_ip+0x12a/0x1b0 [ 184.928540][ T6629] ? lockdep_hardirqs_on+0x94/0x140 [ 184.933761][ T6629] ? __local_bh_enable_ip+0x12a/0x1b0 [ 184.939156][ T6629] ? _local_bh_enable+0xa0/0xa0 [ 184.944057][ T6629] ? __dev_queue_xmit+0x26f/0x3760 [ 184.949189][ T6629] ? __dev_queue_xmit+0x26f/0x3760 [ 184.954416][ T6629] ? __dev_queue_xmit+0x15c9/0x3760 [ 184.959648][ T6629] ? __dev_queue_xmit+0x26f/0x3760 [ 184.964785][ T6629] ? netdev_core_pick_tx+0x340/0x340 [ 184.970095][ T6629] ? ref_tracker_free+0x630/0x7c0 [ 184.975137][ T6629] ? refcount_inc+0x70/0x70 [ 184.979657][ T6629] ? neigh_get+0xcf0/0xcf0 [ 184.984083][ T6629] ? __skb_clone+0x480/0x790 [ 184.988695][ T6629] netlink_rcv_skb+0x1de/0x420 [ 184.993475][ T6629] ? rtnetlink_bind+0x80/0x80 [ 184.998171][ T6629] ? netlink_ack+0x1100/0x1100 [ 185.002963][ T6629] ? netlink_deliver_tap+0x2e/0x1b0 [ 185.008182][ T6629] netlink_unicast+0x74d/0x8d0 [ 185.012967][ T6629] netlink_sendmsg+0x89e/0xbc0 [ 185.017751][ T6629] ? netlink_getsockopt+0x540/0x540 [ 185.022970][ T6629] ? aa_sock_msg_perm+0x94/0x150 [ 185.027953][ T6629] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 185.033250][ T6629] ? security_socket_sendmsg+0x7c/0xa0 [ 185.038740][ T6629] ? netlink_getsockopt+0x540/0x540 [ 185.043950][ T6629] ____sys_sendmsg+0x59b/0x970 [ 185.048739][ T6629] ? __sys_sendmsg_sock+0x30/0x30 [ 185.053776][ T6629] ? __import_iovec+0x315/0x500 [ 185.058660][ T6629] ? import_iovec+0x6f/0xa0 [ 185.063202][ T6629] ___sys_sendmsg+0x21c/0x290 [ 185.067921][ T6629] ? __sys_sendmsg+0x270/0x270 [ 185.072732][ T6629] ? __lock_acquire+0x7c50/0x7c50 [ 185.077887][ T6629] ? __fdget+0x17c/0x200 [ 185.082171][ T6629] __se_sys_sendmsg+0x19e/0x270 [ 185.087066][ T6629] ? __x64_sys_sendmsg+0x80/0x80 [ 185.092030][ T6629] ? lockdep_hardirqs_on+0x94/0x140 [ 185.097254][ T6629] do_syscall_64+0x4c/0xa0 [ 185.101682][ T6629] ? clear_bhb_loop+0x60/0xb0 [ 185.106368][ T6629] ? clear_bhb_loop+0x60/0xb0 [ 185.111058][ T6629] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 185.116961][ T6629] RIP: 0033:0x7fe41e98eec9 [ 185.121388][ T6629] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 185.141005][ T6629] RSP: 002b:00007fe41f816038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 185.149431][ T6629] RAX: ffffffffffffffda RBX: 00007fe41ebe5fa0 RCX: 00007fe41e98eec9 [ 185.157419][ T6629] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 185.165399][ T6629] RBP: 00007fe41f816090 R08: 0000000000000000 R09: 0000000000000000 [ 185.173379][ T6629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 185.181358][ T6629] R13: 00007fe41ebe6038 R14: 00007fe41ebe5fa0 R15: 00007ffd6f6a7048 [ 185.189372][ T6629] [ 186.071320][ T6660] netlink: 4 bytes leftover after parsing attributes in process `syz.7.565'. [ 186.202097][ T6663] netlink: 152 bytes leftover after parsing attributes in process `syz.3.566'. [ 188.013395][ T6708] validate_nla: 11 callbacks suppressed [ 188.013440][ T6708] netlink: 'syz.5.576': attribute type 10 has an invalid length. [ 188.146107][ T6713] netlink: 209852 bytes leftover after parsing attributes in process `syz.7.580'. [ 188.168323][ T6710] netlink: 'syz.3.578': attribute type 2 has an invalid length. [ 188.188110][ T6710] netlink: 'syz.3.578': attribute type 8 has an invalid length. [ 188.206748][ T6710] netlink: 132 bytes leftover after parsing attributes in process `syz.3.578'. [ 188.423497][ T6721] netlink: 830 bytes leftover after parsing attributes in process `syz.5.581'. [ 188.684470][ T6729] netlink: 'syz.6.583': attribute type 29 has an invalid length. [ 188.780029][ T6729] netlink: 'syz.6.583': attribute type 29 has an invalid length. [ 188.910168][ T6736] netlink: 'syz.6.583': attribute type 29 has an invalid length. [ 189.339012][ T6752] ref_ctr_offset mismatch. inode: 0x186 offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 189.550842][ T6757] netlink: 'syz.6.592': attribute type 10 has an invalid length. [ 192.280538][ T6806] netlink: 'syz.7.602': attribute type 29 has an invalid length. [ 192.395376][ T6806] netlink: 'syz.7.602': attribute type 29 has an invalid length. [ 192.539945][ T6813] netlink: 'syz.7.602': attribute type 29 has an invalid length. [ 192.747362][ T6823] netlink: 2 bytes leftover after parsing attributes in process `syz.5.607'. [ 192.842100][ T6823] device bond0 entered promiscuous mode [ 192.888860][ T6823] device bond_slave_0 entered promiscuous mode [ 192.931172][ T6823] device bond_slave_1 entered promiscuous mode [ 192.998822][ T6823] bridge0: port 3(bond0) entered blocking state [ 193.044641][ T6823] bridge0: port 3(bond0) entered disabled state [ 193.175970][ T6823] bridge0: port 3(bond0) entered blocking state [ 193.182757][ T6823] bridge0: port 3(bond0) entered forwarding state [ 193.205880][ T6827] validate_nla: 2 callbacks suppressed [ 193.205898][ T6827] netlink: 'syz.6.608': attribute type 10 has an invalid length. [ 193.221499][ T6827] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.244967][ T6827] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.252512][ T6827] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.346188][ T6827] team0: Port device bridge0 added [ 193.374402][ T6832] device bridge_slave_1 left promiscuous mode [ 193.412742][ T6832] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.572777][ T6832] team0: Port device bridge0 removed [ 193.653305][ T6839] netlink: 'syz.7.610': attribute type 10 has an invalid length. [ 193.670602][ T6841] netlink: 'syz.3.611': attribute type 21 has an invalid length. [ 193.686750][ T6841] netlink: 14530 bytes leftover after parsing attributes in process `syz.3.611'. [ 194.172707][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.179240][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.854170][ T6884] netlink: 'syz.6.619': attribute type 29 has an invalid length. [ 194.882611][ T6884] netlink: 'syz.6.619': attribute type 29 has an invalid length. [ 194.952634][ T6886] FAULT_INJECTION: forcing a failure. [ 194.952634][ T6886] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 195.076731][ T6886] CPU: 1 PID: 6886 Comm: syz.6.619 Not tainted syzkaller #0 [ 195.084112][ T6886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 195.094227][ T6886] Call Trace: [ 195.097568][ T6886] [ 195.100569][ T6886] dump_stack_lvl+0x168/0x22e [ 195.105333][ T6886] ? show_regs_print_info+0x12/0x12 [ 195.110614][ T6886] ? load_image+0x3b0/0x3b0 [ 195.115205][ T6886] ? __lock_acquire+0x7c50/0x7c50 [ 195.120332][ T6886] should_fail_ex+0x399/0x4d0 [ 195.125109][ T6886] _copy_from_user+0x2c/0x170 [ 195.129865][ T6886] ___sys_recvmsg+0x12b/0x510 [ 195.134624][ T6886] ? __sys_recvmsg+0x270/0x270 [ 195.139483][ T6886] ? common_file_perm+0x171/0x1c0 [ 195.144633][ T6886] ? __fget_files+0x44a/0x4d0 [ 195.149441][ T6886] ? __fdget+0x17c/0x200 [ 195.153856][ T6886] __x64_sys_recvmsg+0x1eb/0x2b0 [ 195.158854][ T6886] ? ct_nmi_exit+0x145/0x1c0 [ 195.163522][ T6886] ? ___sys_recvmsg+0x510/0x510 [ 195.168499][ T6886] ? lockdep_hardirqs_on+0x94/0x140 [ 195.173777][ T6886] do_syscall_64+0x4c/0xa0 [ 195.178266][ T6886] ? clear_bhb_loop+0x60/0xb0 [ 195.182986][ T6886] ? clear_bhb_loop+0x60/0xb0 [ 195.187724][ T6886] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 195.193675][ T6886] RIP: 0033:0x7ff52158eec9 [ 195.198150][ T6886] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 195.217825][ T6886] RSP: 002b:00007ff5223b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 195.226301][ T6886] RAX: ffffffffffffffda RBX: 00007ff5217e6090 RCX: 00007ff52158eec9 [ 195.234332][ T6886] RDX: 0000000040012100 RSI: 0000200000000640 RDI: 0000000000000003 [ 195.242469][ T6886] RBP: 00007ff5223b7090 R08: 0000000000000000 R09: 0000000000000000 [ 195.250508][ T6886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 195.258533][ T6886] R13: 00007ff5217e6128 R14: 00007ff5217e6090 R15: 00007ffd56c75998 [ 195.266610][ T6886] [ 195.719778][ T6885] netlink: 22 bytes leftover after parsing attributes in process `syz.3.620'. [ 196.000604][ T6894] netlink: 'syz.7.621': attribute type 1 has an invalid length. [ 196.036438][ T6894] netlink: 181400 bytes leftover after parsing attributes in process `syz.7.621'. [ 196.246709][ T47] Bluetooth: hci1: command 0x0406 tx timeout [ 196.253496][ T47] Bluetooth: hci2: command 0x0406 tx timeout [ 196.318234][ T6897] netlink: 'syz.0.622': attribute type 29 has an invalid length. [ 196.397224][ T6897] netlink: 'syz.0.622': attribute type 29 has an invalid length. [ 196.839405][ T6908] netlink: 'syz.7.626': attribute type 10 has an invalid length. [ 197.645614][ T6931] netlink: 40 bytes leftover after parsing attributes in process `syz.3.632'. [ 198.100250][ T6950] netlink: 60 bytes leftover after parsing attributes in process `syz.6.637'. [ 198.164568][ T6950] netlink: 60 bytes leftover after parsing attributes in process `syz.6.637'. [ 198.255067][ T6953] netlink: 60 bytes leftover after parsing attributes in process `syz.6.637'. [ 198.337441][ T6952] netlink: 60 bytes leftover after parsing attributes in process `syz.6.637'. [ 198.780994][ T6962] netlink: 'syz.5.641': attribute type 10 has an invalid length. [ 198.807934][ T6962] bridge0: port 3(bond0) entered disabled state [ 198.814523][ T6962] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.822247][ T6962] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.960810][ T6962] bridge0: port 3(bond0) entered blocking state [ 198.967509][ T6962] bridge0: port 3(bond0) entered forwarding state [ 198.975658][ T6962] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.982971][ T6962] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.991450][ T6962] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.998732][ T6962] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.201075][ T6962] team0: Port device bridge0 added [ 199.266980][ T6960] netlink: 111 bytes leftover after parsing attributes in process `syz.6.640'. [ 199.349422][ T6969] bridge0: port 3(bond0) entered disabled state [ 199.504559][ T6969] device bridge_slave_1 left promiscuous mode [ 199.524072][ T6969] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.583630][ T6969] device bridge_slave_0 left promiscuous mode [ 199.605559][ T6969] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.696565][ T6969] team0: Port device bridge0 removed [ 199.767606][ T6978] netlink: 'syz.3.644': attribute type 10 has an invalid length. [ 200.257964][ T6985] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 200.314731][ T6985] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 200.959275][ T6985] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 200.995581][ T6985] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 201.122725][ T7005] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.652'. [ 201.339968][ T7012] netlink: 'syz.5.653': attribute type 29 has an invalid length. [ 201.374407][ T7013] netlink: 'syz.6.654': attribute type 10 has an invalid length. [ 201.460366][ T7012] netlink: 'syz.5.653': attribute type 29 has an invalid length. [ 201.565581][ T7014] netlink: 'syz.5.653': attribute type 29 has an invalid length. [ 201.814672][ T7024] netlink: 'syz.3.657': attribute type 10 has an invalid length. [ 201.864099][ T7024] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.871885][ T7024] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.930588][ T7024] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.938177][ T7024] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.946868][ T7024] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.954212][ T7024] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.089222][ T7024] team0: Port device bridge0 added [ 202.133998][ T7027] device bridge_slave_1 left promiscuous mode [ 202.249717][ T7027] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.378836][ T7027] device bridge_slave_0 left promiscuous mode [ 202.447654][ T7027] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.753058][ T7027] team0: Port device bridge0 removed [ 202.843985][ T7026] netlink: 'syz.7.658': attribute type 10 has an invalid length. [ 204.182684][ T7070] netlink: 28 bytes leftover after parsing attributes in process `syz.3.669'. [ 204.293042][ T7070] netlink: 28 bytes leftover after parsing attributes in process `syz.3.669'. [ 204.520395][ T7068] netlink: 28 bytes leftover after parsing attributes in process `syz.3.669'. [ 204.645052][ T7070] netlink: 156 bytes leftover after parsing attributes in process `syz.3.669'. [ 204.729011][ T7059] netlink: 28 bytes leftover after parsing attributes in process `syz.3.669'. [ 205.205117][ T7086] netlink: 'syz.7.673': attribute type 10 has an invalid length. [ 205.578183][ T7095] FAULT_INJECTION: forcing a failure. [ 205.578183][ T7095] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 205.636324][ T7095] CPU: 0 PID: 7095 Comm: syz.7.677 Not tainted syzkaller #0 [ 205.643694][ T7095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 205.653788][ T7095] Call Trace: [ 205.657088][ T7095] [ 205.660032][ T7095] dump_stack_lvl+0x168/0x22e [ 205.664724][ T7095] ? show_regs_print_info+0x12/0x12 [ 205.669946][ T7095] ? load_image+0x3b0/0x3b0 [ 205.674485][ T7095] ? __lock_acquire+0x7c50/0x7c50 [ 205.679543][ T7095] ? verify_lock_unused+0x140/0x140 [ 205.684756][ T7095] should_fail_ex+0x399/0x4d0 [ 205.689458][ T7095] _copy_from_user+0x2c/0x170 [ 205.694153][ T7095] ___sys_sendmsg+0x155/0x290 [ 205.698848][ T7095] ? __sys_sendmsg+0x270/0x270 [ 205.703645][ T7095] ? __lock_acquire+0x7c50/0x7c50 [ 205.708717][ T7095] ? __fdget+0x17c/0x200 [ 205.713003][ T7095] __se_sys_sendmsg+0x19e/0x270 [ 205.717884][ T7095] ? __x64_sys_sendmsg+0x80/0x80 [ 205.722855][ T7095] ? lockdep_hardirqs_on+0x94/0x140 [ 205.728079][ T7095] do_syscall_64+0x4c/0xa0 [ 205.732509][ T7095] ? clear_bhb_loop+0x60/0xb0 [ 205.737196][ T7095] ? clear_bhb_loop+0x60/0xb0 [ 205.741894][ T7095] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 205.747799][ T7095] RIP: 0033:0x7fd5baf8eec9 [ 205.752229][ T7095] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 205.771850][ T7095] RSP: 002b:00007fd5bbe44038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 205.780282][ T7095] RAX: ffffffffffffffda RBX: 00007fd5bb1e6090 RCX: 00007fd5baf8eec9 [ 205.788268][ T7095] RDX: 0900000000000000 RSI: 0000200000000500 RDI: 0000000000000004 [ 205.796262][ T7095] RBP: 00007fd5bbe44090 R08: 0000000000000000 R09: 0000000000000000 [ 205.804242][ T7095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 205.812227][ T7095] R13: 00007fd5bb1e6128 R14: 00007fd5bb1e6090 R15: 00007fffd69ce578 [ 205.820243][ T7095] [ 206.332854][ T7101] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 206.358521][ T7101] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 206.470467][ T7106] FAULT_INJECTION: forcing a failure. [ 206.470467][ T7106] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 206.483128][ T7101] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 206.532214][ T7101] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 206.595769][ T7106] CPU: 0 PID: 7106 Comm: syz.0.681 Not tainted syzkaller #0 [ 206.603137][ T7106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 206.613240][ T7106] Call Trace: [ 206.616554][ T7106] [ 206.619520][ T7106] dump_stack_lvl+0x168/0x22e [ 206.624256][ T7106] ? show_regs_print_info+0x12/0x12 [ 206.629491][ T7106] ? load_image+0x3b0/0x3b0 [ 206.634043][ T7106] ? __lock_acquire+0x7c50/0x7c50 [ 206.639112][ T7106] ? verify_lock_unused+0x140/0x140 [ 206.644356][ T7106] should_fail_ex+0x399/0x4d0 [ 206.649065][ T7106] _copy_from_user+0x2c/0x170 [ 206.653762][ T7106] ___sys_sendmsg+0x155/0x290 [ 206.658466][ T7106] ? __sys_sendmsg+0x270/0x270 [ 206.663263][ T7106] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 206.669020][ T7106] ? __fdget+0x17c/0x200 [ 206.673285][ T7106] __se_sys_sendmsg+0x19e/0x270 [ 206.678157][ T7106] ? __x64_sys_sendmsg+0x80/0x80 [ 206.683126][ T7106] ? syscall_enter_from_user_mode+0x2a/0x80 [ 206.689042][ T7106] do_syscall_64+0x4c/0xa0 [ 206.693470][ T7106] ? clear_bhb_loop+0x60/0xb0 [ 206.698172][ T7106] ? clear_bhb_loop+0x60/0xb0 [ 206.702876][ T7106] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 206.708778][ T7106] RIP: 0033:0x7f328c78eec9 [ 206.713210][ T7106] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 206.732824][ T7106] RSP: 002b:00007f328d60a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 206.741254][ T7106] RAX: ffffffffffffffda RBX: 00007f328c9e5fa0 RCX: 00007f328c78eec9 [ 206.749241][ T7106] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000007 [ 206.757230][ T7106] RBP: 00007f328d60a090 R08: 0000000000000000 R09: 0000000000000000 [ 206.765210][ T7106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 206.773294][ T7106] R13: 00007f328c9e6038 R14: 00007f328c9e5fa0 R15: 00007ffc73907a68 [ 206.781299][ T7106] [ 207.655307][ T7121] FAULT_INJECTION: forcing a failure. [ 207.655307][ T7121] name failslab, interval 1, probability 0, space 0, times 0 [ 207.656742][ T7120] FAULT_INJECTION: forcing a failure. [ 207.656742][ T7120] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 207.732548][ T7121] CPU: 0 PID: 7121 Comm: syz.5.687 Not tainted syzkaller #0 [ 207.739916][ T7121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 207.750009][ T7121] Call Trace: [ 207.753323][ T7121] [ 207.756290][ T7121] dump_stack_lvl+0x168/0x22e [ 207.761029][ T7121] ? show_regs_print_info+0x12/0x12 [ 207.766253][ T7121] ? load_image+0x3b0/0x3b0 [ 207.770797][ T7121] ? __might_sleep+0xd0/0xd0 [ 207.775419][ T7121] ? __lock_acquire+0x7c50/0x7c50 [ 207.780480][ T7121] should_fail_ex+0x399/0x4d0 [ 207.785196][ T7121] should_failslab+0x5/0x20 [ 207.789753][ T7121] slab_pre_alloc_hook+0x59/0x310 [ 207.794814][ T7121] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 207.800561][ T7121] __kmem_cache_alloc_node+0x4f/0x260 [ 207.805964][ T7121] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 207.811713][ T7121] __kmalloc+0xa0/0x240 [ 207.815897][ T7121] tomoyo_realpath_from_path+0xdf/0x5d0 [ 207.821475][ T7121] tomoyo_path_number_perm+0x1e3/0x600 [ 207.826957][ T7121] ? tomoyo_path_number_perm+0x1b6/0x600 [ 207.832625][ T7121] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 207.838106][ T7121] ? seqcount_lockdep_reader_access+0x15c/0x1c0 [ 207.844397][ T7121] ? __fget_files+0x28/0x4d0 [ 207.849026][ T7121] security_file_ioctl+0x6c/0xa0 [ 207.853984][ T7121] __se_sys_ioctl+0x48/0x170 [ 207.858608][ T7121] do_syscall_64+0x4c/0xa0 [ 207.863044][ T7121] ? clear_bhb_loop+0x60/0xb0 [ 207.867738][ T7121] ? clear_bhb_loop+0x60/0xb0 [ 207.872515][ T7121] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 207.878430][ T7121] RIP: 0033:0x7fc6a058eec9 [ 207.882856][ T7121] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 207.902492][ T7121] RSP: 002b:00007fc6a1388038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 207.910929][ T7121] RAX: ffffffffffffffda RBX: 00007fc6a07e5fa0 RCX: 00007fc6a058eec9 [ 207.918913][ T7121] RDX: 00002000000000c0 RSI: 000000000000541b RDI: 0000000000000005 [ 207.926896][ T7121] RBP: 00007fc6a1388090 R08: 0000000000000000 R09: 0000000000000000 [ 207.934881][ T7121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 207.942868][ T7121] R13: 00007fc6a07e6038 R14: 00007fc6a07e5fa0 R15: 00007ffdc823d0e8 [ 207.950872][ T7121] [ 207.971728][ T7120] CPU: 0 PID: 7120 Comm: syz.7.684 Not tainted syzkaller #0 [ 207.979095][ T7120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 207.989190][ T7120] Call Trace: [ 207.992504][ T7120] [ 207.995473][ T7120] dump_stack_lvl+0x168/0x22e [ 208.000197][ T7120] ? show_regs_print_info+0x12/0x12 [ 208.005441][ T7120] ? load_image+0x3b0/0x3b0 [ 208.009996][ T7120] ? __lock_acquire+0x7c50/0x7c50 [ 208.015074][ T7120] should_fail_ex+0x399/0x4d0 [ 208.019808][ T7120] _copy_from_user+0x2c/0x170 [ 208.024535][ T7120] __sys_bpf+0x265/0x6d0 [ 208.028828][ T7120] ? bpf_link_show_fdinfo+0x340/0x340 [ 208.034270][ T7120] ? lock_chain_count+0x20/0x20 [ 208.039189][ T7120] __x64_sys_bpf+0x78/0x90 [ 208.043667][ T7120] do_syscall_64+0x4c/0xa0 [ 208.048132][ T7120] ? clear_bhb_loop+0x60/0xb0 [ 208.052857][ T7120] ? clear_bhb_loop+0x60/0xb0 [ 208.057581][ T7120] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 208.063517][ T7120] RIP: 0033:0x7fd5baf8eec9 [ 208.067973][ T7120] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 208.087634][ T7120] RSP: 002b:00007fd5bbe44038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 208.096095][ T7120] RAX: ffffffffffffffda RBX: 00007fd5bb1e6090 RCX: 00007fd5baf8eec9 [ 208.104121][ T7120] RDX: 0000000000000090 RSI: 0000200000000840 RDI: 0000000000000005 [ 208.112142][ T7120] RBP: 00007fd5bbe44090 R08: 0000000000000000 R09: 0000000000000000 [ 208.120163][ T7120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 208.128180][ T7120] R13: 00007fd5bb1e6128 R14: 00007fd5bb1e6090 R15: 00007fffd69ce578 [ 208.136221][ T7120] [ 208.476649][ T7121] ERROR: Out of memory at tomoyo_realpath_from_path. [ 208.581313][ T7130] netlink: 'syz.0.688': attribute type 10 has an invalid length. [ 209.263303][ T7145] netlink: 'syz.3.693': attribute type 10 has an invalid length. [ 209.599124][ T7145] 8021q: adding VLAN 0 to HW filter on device team0 [ 209.674537][ T7145] bond0: (slave team0): Enslaving as an active interface with an up link [ 210.045672][ T7165] netlink: 202920 bytes leftover after parsing attributes in process `syz.0.700'. [ 210.268386][ T7170] netlink: 'syz.5.702': attribute type 29 has an invalid length. [ 210.320686][ T7170] netlink: 'syz.5.702': attribute type 29 has an invalid length. [ 210.443674][ T7170] netlink: 'syz.5.702': attribute type 29 has an invalid length. [ 210.554567][ T7178] netlink: 'syz.7.704': attribute type 29 has an invalid length. [ 210.655455][ T7178] netlink: 'syz.7.704': attribute type 29 has an invalid length. [ 210.830990][ T7187] netlink: 10 bytes leftover after parsing attributes in process `syz.6.708'. [ 213.245325][ T7212] netlink: 132 bytes leftover after parsing attributes in process `syz.6.714'. [ 214.334972][ T7238] netlink: 'syz.7.721': attribute type 10 has an invalid length. [ 214.514871][ T7245] netlink: 'syz.3.722': attribute type 29 has an invalid length. [ 215.010306][ T7238] device syz_tun entered promiscuous mode [ 215.050517][ T7242] FAULT_INJECTION: forcing a failure. [ 215.050517][ T7242] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 215.096897][ T7242] CPU: 1 PID: 7242 Comm: syz.6.724 Not tainted syzkaller #0 [ 215.104263][ T7242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 215.114362][ T7242] Call Trace: [ 215.117673][ T7242] [ 215.120646][ T7242] dump_stack_lvl+0x168/0x22e [ 215.125369][ T7242] ? show_regs_print_info+0x12/0x12 [ 215.130622][ T7242] ? load_image+0x3b0/0x3b0 [ 215.135172][ T7242] ? __lock_acquire+0x7c50/0x7c50 [ 215.140251][ T7242] ? __rcu_read_unlock+0x78/0xd0 [ 215.145242][ T7242] should_fail_ex+0x399/0x4d0 [ 215.149975][ T7242] _copy_to_user+0x2c/0x130 [ 215.154528][ T7242] bpf_test_finish+0x4c8/0x600 [ 215.159340][ T7242] ? convert___skb_to_skb+0x580/0x580 [ 215.164766][ T7242] ? convert_skb_to___skb+0x420/0x420 [ 215.166982][ T7238] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 215.170166][ T7242] ? bpf_test_init+0x134/0x150 [ 215.183570][ T7242] bpf_prog_test_run_xdp+0x782/0xe50 [ 215.188927][ T7242] ? dev_put+0x80/0x80 [ 215.193045][ T7242] ? dev_put+0x80/0x80 [ 215.197155][ T7242] bpf_prog_test_run+0x31e/0x390 [ 215.202141][ T7242] __sys_bpf+0x593/0x6d0 [ 215.206428][ T7242] ? bpf_link_show_fdinfo+0x340/0x340 [ 215.211859][ T7242] ? lock_chain_count+0x20/0x20 [ 215.216783][ T7242] __x64_sys_bpf+0x78/0x90 [ 215.221240][ T7242] do_syscall_64+0x4c/0xa0 [ 215.225695][ T7242] ? clear_bhb_loop+0x60/0xb0 [ 215.230418][ T7242] ? clear_bhb_loop+0x60/0xb0 [ 215.235144][ T7242] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 215.241074][ T7242] RIP: 0033:0x7ff52158eec9 [ 215.245529][ T7242] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 215.265180][ T7242] RSP: 002b:00007ff5223b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 215.273649][ T7242] RAX: ffffffffffffffda RBX: 00007ff5217e6090 RCX: 00007ff52158eec9 [ 215.281667][ T7242] RDX: 0000000000000050 RSI: 00002000000004c0 RDI: 000000000000000a [ 215.289684][ T7242] RBP: 00007ff5223b7090 R08: 0000000000000000 R09: 0000000000000000 [ 215.297698][ T7242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 215.305711][ T7242] R13: 00007ff5217e6128 R14: 00007ff5217e6090 R15: 00007ffd56c75998 [ 215.313739][ T7242] [ 215.479838][ T7245] netlink: 'syz.3.722': attribute type 29 has an invalid length. [ 215.730998][ T7256] FAULT_INJECTION: forcing a failure. [ 215.730998][ T7256] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 215.790864][ T7256] CPU: 0 PID: 7256 Comm: syz.6.728 Not tainted syzkaller #0 [ 215.798253][ T7256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 215.808384][ T7256] Call Trace: [ 215.811718][ T7256] [ 215.814696][ T7256] dump_stack_lvl+0x168/0x22e [ 215.819461][ T7256] ? show_regs_print_info+0x12/0x12 [ 215.824726][ T7256] ? load_image+0x3b0/0x3b0 [ 215.829315][ T7256] ? __lock_acquire+0x7c50/0x7c50 [ 215.834409][ T7256] ? perf_trace_buf_update+0x9c/0x220 [ 215.839848][ T7256] should_fail_ex+0x399/0x4d0 [ 215.844605][ T7256] _copy_from_user+0x2c/0x170 [ 215.849350][ T7256] do_ipv6_setsockopt+0x2b3/0x3b20 [ 215.854523][ T7256] ? tracing_gen_ctx_irq_test+0xc9/0x150 [ 215.860246][ T7256] ? sk_dst_reset+0xa0/0xa0 [ 215.864815][ T7256] ? perf_swevent_event+0xc8/0x530 [ 215.870004][ T7256] ? perf_tp_event+0xa4a/0xb60 [ 215.874844][ T7256] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 215.880770][ T7256] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 215.886603][ T7256] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 215.892406][ T7256] ? aa_label_sk_perm+0x3e7/0x500 [ 215.897487][ T7256] ? perf_trace_lock+0x2ec/0x370 [ 215.902495][ T7256] ? aa_sk_perm+0x920/0x920 [ 215.907084][ T7256] ? __might_sleep+0xd0/0xd0 [ 215.911745][ T7256] ? __fget_files+0x28/0x4d0 [ 215.916401][ T7256] ? __lock_acquire+0x7c50/0x7c50 [ 215.921498][ T7256] ipv6_setsockopt+0x55/0x190 [ 215.926240][ T7256] dccp_setsockopt+0x15a/0x830 [ 215.931083][ T7256] ? aa_af_perm+0x2b0/0x2b0 [ 215.935651][ T7256] ? dccp_ioctl+0x1d0/0x1d0 [ 215.940211][ T7256] ? aa_sock_opt_perm+0x74/0x100 [ 215.945214][ T7256] ? sock_common_setsockopt+0x32/0xb0 [ 215.950652][ T7256] ? sock_common_recvmsg+0x1a0/0x1a0 [ 215.955997][ T7256] __sys_setsockopt+0x2bf/0x3d0 [ 215.960918][ T7256] __x64_sys_setsockopt+0xb1/0xc0 [ 215.966008][ T7256] do_syscall_64+0x4c/0xa0 [ 215.970484][ T7256] ? clear_bhb_loop+0x60/0xb0 [ 215.975218][ T7256] ? clear_bhb_loop+0x60/0xb0 [ 215.979963][ T7256] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 215.985913][ T7256] RIP: 0033:0x7ff52158eec9 [ 215.990383][ T7256] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 216.010058][ T7256] RSP: 002b:00007ff5223d8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 216.018535][ T7256] RAX: ffffffffffffffda RBX: 00007ff5217e5fa0 RCX: 00007ff52158eec9 [ 216.026565][ T7256] RDX: 000000000000004a RSI: 0000000000000029 RDI: 0000000000000004 [ 216.034601][ T7256] RBP: 00007ff5223d8090 R08: 0000000000000120 R09: 0000000000000000 [ 216.042633][ T7256] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 216.050663][ T7256] R13: 00007ff5217e6038 R14: 00007ff5217e5fa0 R15: 00007ffd56c75998 [ 216.058721][ T7256] [ 216.741785][ T7268] netlink: 'syz.6.730': attribute type 10 has an invalid length. [ 216.780704][ T7268] team0: Port device wlan1 added [ 217.090571][ T7278] netlink: 'syz.7.735': attribute type 29 has an invalid length. [ 217.158129][ T7278] netlink: 'syz.7.735': attribute type 29 has an invalid length. [ 217.185568][ T7279] netlink: 'syz.7.735': attribute type 29 has an invalid length. [ 217.654049][ T7286] netlink: 'syz.5.738': attribute type 29 has an invalid length. [ 217.742232][ T7286] netlink: 'syz.5.738': attribute type 29 has an invalid length. [ 217.860997][ T7287] netlink: 'syz.5.738': attribute type 29 has an invalid length. [ 219.656036][ T7321] netlink: 'syz.6.750': attribute type 29 has an invalid length. [ 219.798804][ T7321] netlink: 'syz.6.750': attribute type 29 has an invalid length. [ 219.996849][ T7329] device veth0_macvtap left promiscuous mode [ 220.742592][ T7355] validate_nla: 5 callbacks suppressed [ 220.742612][ T7355] netlink: 'syz.5.761': attribute type 41 has an invalid length. [ 220.800437][ T7355] netlink: 40 bytes leftover after parsing attributes in process `syz.5.761'. [ 221.535881][ T7360] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 221.543623][ T7360] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 221.772601][ T7365] netlink: 'syz.5.764': attribute type 10 has an invalid length. [ 221.925078][ T7365] team0: Port device geneve1 added [ 222.059909][ T7369] netlink: 60 bytes leftover after parsing attributes in process `syz.0.765'. [ 222.435829][ T7379] netlink: 'syz.6.768': attribute type 29 has an invalid length. [ 222.607938][ T7379] netlink: 'syz.6.768': attribute type 29 has an invalid length. [ 222.616055][ T7380] netlink: 'syz.6.768': attribute type 29 has an invalid length. [ 222.755189][ T7387] netlink: 'syz.3.769': attribute type 29 has an invalid length. [ 222.866972][ T7387] netlink: 'syz.3.769': attribute type 29 has an invalid length. [ 222.935052][ T7390] netlink: 'syz.3.769': attribute type 29 has an invalid length. [ 223.858819][ T7409] netlink: 'syz.6.778': attribute type 41 has an invalid length. [ 223.866835][ T7409] netlink: 40 bytes leftover after parsing attributes in process `syz.6.778'. [ 223.908674][ T7402] device veth1_macvtap left promiscuous mode [ 224.562479][ T7420] €Â0: renamed from pim6reg1 [ 224.615313][ T7421] netlink: 'syz.5.779': attribute type 29 has an invalid length. [ 225.248177][ T7437] device veth0_macvtap left promiscuous mode [ 225.754235][ T7446] validate_nla: 3 callbacks suppressed [ 225.754254][ T7446] netlink: 'syz.3.789': attribute type 29 has an invalid length. [ 225.780365][ T7447] netlink: 'syz.0.788': attribute type 29 has an invalid length. [ 225.821831][ T7447] netlink: 'syz.0.788': attribute type 29 has an invalid length. [ 225.950413][ T7446] netlink: 'syz.3.789': attribute type 29 has an invalid length. [ 225.993870][ T7445] netlink: 'syz.0.788': attribute type 29 has an invalid length. [ 226.069789][ T7444] netlink: 'syz.3.789': attribute type 29 has an invalid length. [ 226.104640][ T7450] netlink: 'syz.6.790': attribute type 10 has an invalid length. [ 226.133270][ T7450] netlink: 65015 bytes leftover after parsing attributes in process `syz.6.790'. [ 226.193781][ T7451] netlink: 'syz.6.790': attribute type 39 has an invalid length. [ 227.212018][ T7466] €Â0: renamed from pim6reg1 [ 228.475351][ T7477] netlink: 'syz.7.799': attribute type 10 has an invalid length. [ 228.765596][ T7485] netlink: 'syz.0.802': attribute type 39 has an invalid length. [ 228.858502][ T7485] device veth0_macvtap left promiscuous mode [ 229.181800][ T7494] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.806'. [ 229.777744][ T7508] €Â0: renamed from pim6reg1 [ 231.018525][ T7517] syz.0.812 (7517) used obsolete PPPIOCDETACH ioctl [ 231.173634][ T7528] validate_nla: 2 callbacks suppressed [ 231.173654][ T7528] netlink: 'syz.6.814': attribute type 29 has an invalid length. [ 231.272732][ T7528] netlink: 'syz.6.814': attribute type 29 has an invalid length. [ 231.327154][ T7530] netlink: 'syz.6.814': attribute type 29 has an invalid length. [ 231.574699][ T7538] netlink: 'syz.0.817': attribute type 29 has an invalid length. [ 231.632334][ T7538] netlink: 'syz.0.817': attribute type 29 has an invalid length. [ 231.664394][ T7541] netlink: 'syz.0.817': attribute type 29 has an invalid length. [ 231.828628][ T7550] netlink: 'syz.7.822': attribute type 10 has an invalid length. [ 231.842888][ T7550] netlink: 65015 bytes leftover after parsing attributes in process `syz.7.822'. [ 231.874510][ T7550] netlink: 'syz.7.822': attribute type 39 has an invalid length. [ 232.057924][ T7554] netlink: 'syz.6.832': attribute type 29 has an invalid length. [ 232.155053][ T7554] netlink: 'syz.6.832': attribute type 29 has an invalid length. [ 233.574566][ T7573] netlink: 156 bytes leftover after parsing attributes in process `syz.5.829'. [ 233.618161][ T7575] netlink: 132 bytes leftover after parsing attributes in process `syz.5.829'. [ 233.648091][ T7575] netlink: 132 bytes leftover after parsing attributes in process `syz.5.829'. [ 233.696903][ T7575] netlink: 132 bytes leftover after parsing attributes in process `syz.5.829'. [ 233.740741][ T7575] netlink: 132 bytes leftover after parsing attributes in process `syz.5.829'. [ 233.755530][ T7575] netlink: 132 bytes leftover after parsing attributes in process `syz.5.829'. [ 235.307883][ T7610] FAULT_INJECTION: forcing a failure. [ 235.307883][ T7610] name failslab, interval 1, probability 0, space 0, times 0 [ 235.326499][ T7610] CPU: 1 PID: 7610 Comm: syz.5.840 Not tainted syzkaller #0 [ 235.333865][ T7610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 235.344053][ T7610] Call Trace: [ 235.347372][ T7610] [ 235.350341][ T7610] dump_stack_lvl+0x168/0x22e [ 235.355070][ T7610] ? show_regs_print_info+0x12/0x12 [ 235.360331][ T7610] ? load_image+0x3b0/0x3b0 [ 235.364896][ T7610] ? __might_sleep+0xd0/0xd0 [ 235.369541][ T7610] ? __lock_acquire+0x7c50/0x7c50 [ 235.374637][ T7610] should_fail_ex+0x399/0x4d0 [ 235.379374][ T7610] should_failslab+0x5/0x20 [ 235.383948][ T7610] slab_pre_alloc_hook+0x59/0x310 [ 235.389025][ T7610] ? kvmalloc_node+0x6c/0x180 [ 235.393765][ T7610] __kmem_cache_alloc_node+0x4f/0x260 [ 235.399198][ T7610] ? kvmalloc_node+0x6c/0x180 [ 235.403938][ T7610] __kmalloc_node+0xa0/0x240 [ 235.408594][ T7610] kvmalloc_node+0x6c/0x180 [ 235.413165][ T7610] page_pool_create+0x1f3/0x5d0 [ 235.418070][ T7610] bpf_test_run_xdp_live+0x1c3/0x1970 [ 235.423470][ T7610] ? text_poke_copy+0x79/0x90 [ 235.428172][ T7610] ? 0xffffffffa0004440 [ 235.432345][ T7610] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 235.438525][ T7610] ? xdp_convert_md_to_buff+0x330/0x330 [ 235.444111][ T7610] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 235.450370][ T7610] ? bpf_test_init+0x134/0x150 [ 235.455152][ T7610] ? xdp_convert_md_to_buff+0x5b/0x330 [ 235.460629][ T7610] bpf_prog_test_run_xdp+0x6f1/0xe50 [ 235.465935][ T7610] ? lock_chain_count+0x20/0x20 [ 235.470805][ T7610] ? dev_put+0x80/0x80 [ 235.474900][ T7610] ? dev_put+0x80/0x80 [ 235.478981][ T7610] bpf_prog_test_run+0x31e/0x390 [ 235.483941][ T7610] __sys_bpf+0x593/0x6d0 [ 235.488208][ T7610] ? bpf_link_show_fdinfo+0x340/0x340 [ 235.493609][ T7610] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 235.499789][ T7610] __x64_sys_bpf+0x78/0x90 [ 235.504224][ T7610] do_syscall_64+0x4c/0xa0 [ 235.508657][ T7610] ? clear_bhb_loop+0x60/0xb0 [ 235.513347][ T7610] ? clear_bhb_loop+0x60/0xb0 [ 235.518040][ T7610] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 235.523948][ T7610] RIP: 0033:0x7fc6a058eec9 [ 235.528377][ T7610] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 235.547999][ T7610] RSP: 002b:00007fc6a1388038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 235.556427][ T7610] RAX: ffffffffffffffda RBX: 00007fc6a07e5fa0 RCX: 00007fc6a058eec9 [ 235.564415][ T7610] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 235.572415][ T7610] RBP: 00007fc6a1388090 R08: 0000000000000000 R09: 0000000000000000 [ 235.580403][ T7610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 235.588388][ T7610] R13: 00007fc6a07e6038 R14: 00007fc6a07e5fa0 R15: 00007ffdc823d0e8 [ 235.596383][ T7610] [ 235.638940][ T7610] page_pool_create() gave up with errno -12 [ 236.680641][ T7632] validate_nla: 11 callbacks suppressed [ 236.680660][ T7632] netlink: 'syz.6.846': attribute type 29 has an invalid length. [ 236.721510][ T7634] netlink: 'syz.0.847': attribute type 10 has an invalid length. [ 236.732167][ T7632] netlink: 'syz.6.846': attribute type 29 has an invalid length. [ 236.751086][ T7634] netlink: 3819 bytes leftover after parsing attributes in process `syz.0.847'. [ 236.839671][ T7637] netlink: 'syz.6.846': attribute type 29 has an invalid length. [ 237.196388][ T4274] Bluetooth: hci0: command 0x0406 tx timeout [ 237.202531][ T4274] Bluetooth: hci3: command 0x0406 tx timeout [ 237.207469][ T47] Bluetooth: hci4: command 0x0406 tx timeout [ 237.522630][ T7659] netlink: 132 bytes leftover after parsing attributes in process `syz.7.855'. [ 237.833771][ T7666] IPv6: pim6reg1: Disabled Multicast RS [ 238.907175][ T7689] netlink: 'syz.6.863': attribute type 29 has an invalid length. [ 239.001751][ T7689] netlink: 'syz.6.863': attribute type 29 has an invalid length. [ 239.053760][ T7691] netlink: 'syz.6.863': attribute type 29 has an invalid length. [ 240.482172][ T7707] netlink: 'syz.7.868': attribute type 10 has an invalid length. [ 241.042306][ C1] dccp_invalid_packet: P.Data Offset(3) too small [ 241.051461][ C1] dccp_invalid_packet: P.Data Offset(3) too small [ 241.068386][ C1] dccp_invalid_packet: P.Data Offset(3) too small [ 241.087546][ C1] dccp_invalid_packet: P.Data Offset(3) too small [ 241.098839][ C1] dccp_invalid_packet: P.Data Offset(3) too small [ 241.107773][ C1] dccp_invalid_packet: P.Data Offset(3) too small [ 241.115876][ C1] dccp_invalid_packet: P.Data Offset(3) too small [ 241.144257][ C1] dccp_invalid_packet: P.Data Offset(3) too small [ 241.153696][ C1] dccp_invalid_packet: P.Data Offset(3) too small [ 241.162751][ C1] dccp_invalid_packet: P.Data Offset(3) too small [ 241.733179][ T7731] netlink: 'syz.0.876': attribute type 29 has an invalid length. [ 241.888438][ T7731] netlink: 'syz.0.876': attribute type 29 has an invalid length. [ 241.955225][ T7733] netlink: 'syz.0.876': attribute type 29 has an invalid length. [ 243.131285][ T7768] netlink: 'syz.7.885': attribute type 29 has an invalid length. [ 243.320797][ T7769] netlink: 'syz.5.883': attribute type 10 has an invalid length. [ 243.371954][ T7768] netlink: 'syz.7.885': attribute type 29 has an invalid length. [ 243.406121][ T7771] netlink: 'syz.7.885': attribute type 29 has an invalid length. [ 244.469511][ T7795] netlink: 'syz.7.893': attribute type 29 has an invalid length. [ 244.547927][ T7795] netlink: 'syz.7.893': attribute type 29 has an invalid length. [ 244.638546][ T7795] netlink: 'syz.7.893': attribute type 29 has an invalid length. [ 245.244814][ T7818] netlink: 132 bytes leftover after parsing attributes in process `syz.3.900'. [ 245.481956][ T7824] netlink: 14 bytes leftover after parsing attributes in process `syz.7.902'. [ 247.290062][ T7857] validate_nla: 4 callbacks suppressed [ 247.290083][ T7857] netlink: 'syz.0.909': attribute type 2 has an invalid length. [ 247.323839][ T7859] netlink: 'syz.7.910': attribute type 29 has an invalid length. [ 247.363031][ T7859] netlink: 'syz.7.910': attribute type 29 has an invalid length. [ 247.393832][ T7858] netlink: 'syz.7.910': attribute type 29 has an invalid length. [ 247.472547][ T7857] device 0 entered promiscuous mode [ 247.888468][ T7865] netlink: 132 bytes leftover after parsing attributes in process `syz.5.912'. [ 249.034171][ T7887] netlink: 'syz.0.920': attribute type 10 has an invalid length. [ 249.511944][ T7901] netlink: 'syz.5.924': attribute type 29 has an invalid length. [ 249.639617][ T7901] netlink: 'syz.5.924': attribute type 29 has an invalid length. [ 249.686638][ T7899] netlink: 'syz.5.924': attribute type 29 has an invalid length. [ 250.683184][ T7922] FAULT_INJECTION: forcing a failure. [ 250.683184][ T7922] name failslab, interval 1, probability 0, space 0, times 0 [ 250.725837][ T7922] CPU: 1 PID: 7922 Comm: syz.7.931 Not tainted syzkaller #0 [ 250.733201][ T7922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 250.743299][ T7922] Call Trace: [ 250.746622][ T7922] [ 250.749574][ T7922] dump_stack_lvl+0x168/0x22e [ 250.754286][ T7922] ? show_regs_print_info+0x12/0x12 [ 250.759522][ T7922] ? load_image+0x3b0/0x3b0 [ 250.764073][ T7922] ? __might_sleep+0xd0/0xd0 [ 250.768729][ T7922] ? __lock_acquire+0x7c50/0x7c50 [ 250.773807][ T7922] should_fail_ex+0x399/0x4d0 [ 250.778536][ T7922] should_failslab+0x5/0x20 [ 250.783065][ T7922] slab_pre_alloc_hook+0x59/0x310 [ 250.788112][ T7922] ? kvmalloc_node+0x6c/0x180 [ 250.792805][ T7922] __kmem_cache_alloc_node+0x4f/0x260 [ 250.798197][ T7922] ? kvmalloc_node+0x6c/0x180 [ 250.802888][ T7922] __kmalloc_node+0xa0/0x240 [ 250.807499][ T7922] kvmalloc_node+0x6c/0x180 [ 250.812034][ T7922] page_pool_create+0x1f3/0x5d0 [ 250.816913][ T7922] bpf_test_run_xdp_live+0x1c3/0x1970 [ 250.822299][ T7922] ? text_poke_copy+0x79/0x90 [ 250.827000][ T7922] ? 0xffffffffa0004440 [ 250.831173][ T7922] ? __sys_bpf+0x593/0x6d0 [ 250.835610][ T7922] ? __x64_sys_bpf+0x78/0x90 [ 250.840220][ T7922] ? do_syscall_64+0x4c/0xa0 [ 250.844836][ T7922] ? xdp_convert_md_to_buff+0x330/0x330 [ 250.850420][ T7922] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 250.856675][ T7922] ? bpf_test_init+0x134/0x150 [ 250.861463][ T7922] ? xdp_convert_md_to_buff+0x5b/0x330 [ 250.866941][ T7922] bpf_prog_test_run_xdp+0x6f1/0xe50 [ 250.872246][ T7922] ? dev_put+0x80/0x80 [ 250.876339][ T7922] ? dev_put+0x80/0x80 [ 250.880417][ T7922] bpf_prog_test_run+0x31e/0x390 [ 250.885374][ T7922] __sys_bpf+0x593/0x6d0 [ 250.889636][ T7922] ? bpf_link_show_fdinfo+0x340/0x340 [ 250.895039][ T7922] ? lock_chain_count+0x20/0x20 [ 250.899917][ T7922] __x64_sys_bpf+0x78/0x90 [ 250.904355][ T7922] do_syscall_64+0x4c/0xa0 [ 250.908781][ T7922] ? clear_bhb_loop+0x60/0xb0 [ 250.913469][ T7922] ? clear_bhb_loop+0x60/0xb0 [ 250.918165][ T7922] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 250.924073][ T7922] RIP: 0033:0x7fd5baf8eec9 [ 250.928505][ T7922] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 250.948123][ T7922] RSP: 002b:00007fd5bbe65038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 250.956549][ T7922] RAX: ffffffffffffffda RBX: 00007fd5bb1e5fa0 RCX: 00007fd5baf8eec9 [ 250.964536][ T7922] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 250.972518][ T7922] RBP: 00007fd5bbe65090 R08: 0000000000000000 R09: 0000000000000000 [ 250.980504][ T7922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 250.988486][ T7922] R13: 00007fd5bb1e6038 R14: 00007fd5bb1e5fa0 R15: 00007fffd69ce578 [ 250.996482][ T7922] [ 251.087330][ T7924] netlink: 188 bytes leftover after parsing attributes in process `syz.0.932'. [ 251.274558][ T7928] netlink: 'syz.3.933': attribute type 29 has an invalid length. [ 251.369680][ T7928] netlink: 'syz.3.933': attribute type 29 has an invalid length. [ 251.545464][ T7922] page_pool_create() gave up with errno -12 [ 254.383626][ T7989] validate_nla: 2 callbacks suppressed [ 254.383665][ T7989] netlink: 'syz.6.953': attribute type 39 has an invalid length. [ 254.496706][ T7999] netlink: 'syz.5.954': attribute type 29 has an invalid length. [ 255.017131][ T7999] netlink: 'syz.5.954': attribute type 29 has an invalid length. [ 255.058662][ T8003] netlink: 'syz.0.957': attribute type 21 has an invalid length. [ 255.103486][ T8003] netlink: 128 bytes leftover after parsing attributes in process `syz.0.957'. [ 255.122894][ T8003] netlink: 3 bytes leftover after parsing attributes in process `syz.0.957'. [ 255.224937][ T8001] netlink: 'syz.5.954': attribute type 29 has an invalid length. [ 255.604979][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.611380][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.691999][ T8016] netlink: 188 bytes leftover after parsing attributes in process `syz.6.961'. [ 256.503000][ T8029] netlink: 'syz.7.964': attribute type 10 has an invalid length. [ 257.112504][ T8052] netlink: 'syz.7.973': attribute type 29 has an invalid length. [ 257.209770][ T8052] netlink: 'syz.7.973': attribute type 29 has an invalid length. [ 257.272831][ T8056] netlink: 'syz.7.973': attribute type 29 has an invalid length. [ 257.304039][ T8049] netlink: 'syz.5.972': attribute type 39 has an invalid length. [ 257.948854][ T8068] FAULT_INJECTION: forcing a failure. [ 257.948854][ T8068] name failslab, interval 1, probability 0, space 0, times 0 [ 257.994009][ T8068] CPU: 0 PID: 8068 Comm: syz.3.980 Not tainted syzkaller #0 [ 258.001377][ T8068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 258.011474][ T8068] Call Trace: [ 258.014791][ T8068] [ 258.017758][ T8068] dump_stack_lvl+0x168/0x22e [ 258.022497][ T8068] ? show_regs_print_info+0x12/0x12 [ 258.027737][ T8068] ? load_image+0x3b0/0x3b0 [ 258.032297][ T8068] ? __lock_acquire+0x7c50/0x7c50 [ 258.037376][ T8068] should_fail_ex+0x399/0x4d0 [ 258.042116][ T8068] should_failslab+0x5/0x20 [ 258.046664][ T8068] slab_pre_alloc_hook+0x59/0x310 [ 258.051740][ T8068] ? verify_lock_unused+0x140/0x140 [ 258.057059][ T8068] ? bpf_test_init+0xc0/0x150 [ 258.061785][ T8068] __kmem_cache_alloc_node+0x4f/0x260 [ 258.067195][ T8068] ? bpf_test_init+0xc0/0x150 [ 258.071912][ T8068] __kmalloc+0xa0/0x240 [ 258.076108][ T8068] bpf_test_init+0xc0/0x150 [ 258.080671][ T8068] bpf_prog_test_run_xdp+0x359/0xe50 [ 258.086015][ T8068] ? dev_put+0x80/0x80 [ 258.090136][ T8068] ? dev_put+0x80/0x80 [ 258.094249][ T8068] bpf_prog_test_run+0x31e/0x390 [ 258.099238][ T8068] __sys_bpf+0x593/0x6d0 [ 258.103537][ T8068] ? bpf_link_show_fdinfo+0x340/0x340 [ 258.108965][ T8068] ? lock_chain_count+0x20/0x20 [ 258.113939][ T8068] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 258.120056][ T8068] __x64_sys_bpf+0x78/0x90 [ 258.124499][ T8068] do_syscall_64+0x4c/0xa0 [ 258.128934][ T8068] ? clear_bhb_loop+0x60/0xb0 [ 258.133631][ T8068] ? clear_bhb_loop+0x60/0xb0 [ 258.138340][ T8068] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 258.144296][ T8068] RIP: 0033:0x7fe41e98eec9 [ 258.148725][ T8068] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 258.168347][ T8068] RSP: 002b:00007fe41f816038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 258.176774][ T8068] RAX: ffffffffffffffda RBX: 00007fe41ebe5fa0 RCX: 00007fe41e98eec9 [ 258.184755][ T8068] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 258.192744][ T8068] RBP: 00007fe41f816090 R08: 0000000000000000 R09: 0000000000000000 [ 258.200718][ T8068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 258.208710][ T8068] R13: 00007fe41ebe6038 R14: 00007fe41ebe5fa0 R15: 00007ffd6f6a7048 [ 258.216714][ T8068] [ 259.282030][ T8108] netlink: 132 bytes leftover after parsing attributes in process `syz.6.994'. [ 259.486844][ T8118] validate_nla: 4 callbacks suppressed [ 259.486863][ T8118] netlink: 'syz.0.992': attribute type 29 has an invalid length. [ 275.319764][ T47] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 275.328918][ T47] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 275.337917][ T47] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 275.345860][ T47] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 275.354482][ T47] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 275.361893][ T47] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 275.617661][ T47] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 275.627368][ T47] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 275.635432][ T47] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 275.644215][ T47] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 275.651907][ T47] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 275.660102][ T47] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 275.701961][ T47] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 275.711043][ T47] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 275.720782][ T47] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 275.728909][ T47] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 275.738318][ T47] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 275.745647][ T47] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 276.037422][ T47] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 276.046953][ T47] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 276.055401][ T47] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 276.064392][ T47] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 276.072126][ T47] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 276.081365][ T47] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 276.417882][ T47] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 276.427562][ T47] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 276.436129][ T47] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 276.445695][ T47] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 276.453471][ T47] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 276.461671][ T47] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 277.436352][ T47] Bluetooth: hci5: command 0x0409 tx timeout [ 277.676369][ T47] Bluetooth: hci6: command 0x0409 tx timeout [ 277.836359][ T47] Bluetooth: hci7: command 0x0409 tx timeout [ 278.156480][ T47] Bluetooth: hci8: command 0x0409 tx timeout [ 278.476828][ T47] Bluetooth: hci9: command 0x0409 tx timeout [ 279.517074][ T47] Bluetooth: hci5: command 0x041b tx timeout [ 279.756390][ T47] Bluetooth: hci6: command 0x041b tx timeout [ 279.923417][ T47] Bluetooth: hci7: command 0x041b tx timeout [ 280.236400][ T47] Bluetooth: hci8: command 0x041b tx timeout [ 280.556347][ T47] Bluetooth: hci9: command 0x041b tx timeout [ 281.596304][ T47] Bluetooth: hci5: command 0x040f tx timeout [ 281.836421][ T47] Bluetooth: hci6: command 0x040f tx timeout [ 281.996362][ T47] Bluetooth: hci7: command 0x040f tx timeout [ 282.316385][ T47] Bluetooth: hci8: command 0x040f tx timeout [ 282.636310][ T47] Bluetooth: hci9: command 0x040f tx timeout [ 283.676322][ T47] Bluetooth: hci5: command 0x0419 tx timeout [ 283.916317][ T47] Bluetooth: hci6: command 0x0419 tx timeout [ 284.076368][ T47] Bluetooth: hci7: command 0x0419 tx timeout [ 284.396392][ T47] Bluetooth: hci8: command 0x0419 tx timeout [ 284.716369][ T47] Bluetooth: hci9: command 0x0419 tx timeout [ 285.677018][ T4280] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 0-.... } 2635 jiffies s: 23533 root: 0x1/. [ 285.689897][ T4280] rcu: blocking rcu_node structures (internal RCU debug): [ 285.697534][ T4280] Sending NMI from CPU 1 to CPUs 0: [ 285.702785][ C0] NMI backtrace for cpu 0 [ 285.702801][ C0] CPU: 0 PID: 8108 Comm: syz.6.994 Not tainted syzkaller #0 [ 285.702817][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 285.702827][ C0] RIP: 0010:__lock_acquire+0x718/0x7c50 [ 285.702857][ C0] Code: 5c c5 00 48 89 d8 48 c1 e8 03 42 0f b6 04 00 84 c0 75 45 8b 1b 48 8b 44 24 50 42 0f b6 04 00 84 c0 75 55 48 8b 44 24 18 33 18 <41> ff ce 49 ff cf f7 c3 00 60 00 00 74 a8 e9 22 01 00 00 48 c7 c7 [ 285.702872][ C0] RSP: 0018:ffffc90000006ea0 EFLAGS: 00000006 [ 285.702886][ C0] RAX: ffff8880271a0b50 RBX: 0000000000000039 RCX: ffff8880271a0000 [ 285.702898][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff90ae2240 [ 285.702909][ C0] RBP: ffffc900000070f0 R08: dffffc0000000000 R09: fffffbfff215c449 [ 285.702921][ C0] R10: fffffbfff215c449 R11: 1ffffffff215c448 R12: 0000000000000000 [ 285.702933][ C0] R13: ffff8880271a0b00 R14: 0000000000000003 R15: 0000000000000001 [ 285.702943][ C0] FS: 00007ff5223d86c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 285.702958][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 285.702969][ C0] CR2: 000000110c32390b CR3: 000000005f431000 CR4: 00000000003506f0 [ 285.702983][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 285.702993][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 285.703003][ C0] Call Trace: [ 285.703009][ C0] [ 285.703019][ C0] ? mark_lock+0x94/0x320 [ 285.703049][ C0] ? verify_lock_unused+0x140/0x140 [ 285.703075][ C0] ? mark_lock+0x94/0x320 [ 285.703097][ C0] ? verify_lock_unused+0x140/0x140 [ 285.703117][ C0] ? __lock_acquire+0x12e5/0x7c50 [ 285.703143][ C0] lock_acquire+0x1b4/0x490 [ 285.703163][ C0] ? __virt_addr_valid+0x188/0x540 [ 285.703191][ C0] ? read_lock_is_recursive+0x10/0x10 [ 285.703216][ C0] ? rcu_read_unlock+0x8c/0xa0 [ 285.703237][ C0] ? __virt_addr_valid+0x188/0x540 [ 285.703258][ C0] __virt_addr_valid+0x1a5/0x540 [ 285.703279][ C0] ? __virt_addr_valid+0x188/0x540 [ 285.703302][ C0] kasan_addr_to_slab+0x9/0xc0 [ 285.703323][ C0] __kasan_record_aux_stack+0xf/0xc0 [ 285.703347][ C0] irq_work_queue_on+0x10f/0x260 [ 285.703373][ C0] rcu_read_unlock_special+0x3c7/0x500 [ 285.703391][ C0] ? __rcu_read_unlock+0xd0/0xd0 [ 285.703407][ C0] ? __perf_cgroup_move+0x150/0x150 [ 285.703427][ C0] ? perf_callchain+0x190/0x190 [ 285.703449][ C0] ? perf_event_output_forward+0x96/0x2a0 [ 285.703473][ C0] __rcu_read_unlock+0x78/0xd0 [ 285.703488][ C0] perf_event_output_forward+0x237/0x2a0 [ 285.703511][ C0] ? perf_event_output_forward+0x96/0x2a0 [ 285.703533][ C0] ? perf_get_page_size+0x420/0x420 [ 285.703556][ C0] ? perf_event_output_forward+0x248/0x2a0 [ 285.703579][ C0] ? perf_event_output_forward+0x96/0x2a0 [ 285.703600][ C0] ? perf_get_page_size+0x420/0x420 [ 285.703623][ C0] ? __perf_event_account_interrupt+0x187/0x280 [ 285.703648][ C0] __perf_event_overflow+0x448/0x610 [ 285.703675][ C0] perf_swevent_event+0x4ad/0x530 [ 285.703701][ C0] perf_tp_event+0x335/0xb60 [ 285.703724][ C0] ? perf_swevent_event+0x33e/0x530 [ 285.703748][ C0] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 285.703772][ C0] ? perf_tp_event+0xa4a/0xb60 [ 285.703817][ C0] ? kvm_sched_clock_read+0x14/0x40 [ 285.703831][ C0] ? sched_clock_cpu+0x6e/0x250 [ 285.703851][ C0] perf_trace_run_bpf_submit+0xf3/0x1c0 [ 285.703877][ C0] perf_trace_preemptirq_template+0x287/0x330 [ 285.703900][ C0] ? asm_sysvec_irq_work+0x16/0x20 [ 285.703918][ C0] ? trace_event_raw_event_preemptirq_template+0x1d0/0x1d0 [ 285.703941][ C0] ? __irq_exit_rcu+0x13b/0x220 [ 285.703967][ C0] ? irq_exit_rcu+0x20/0x20 [ 285.703993][ C0] ? asm_sysvec_irq_work+0x16/0x20 [ 285.704010][ C0] trace_irq_enable_rcuidle+0xd3/0x140 [ 285.704032][ C0] trace_hardirqs_on+0x24/0x40 [ 285.704052][ C0] asm_sysvec_irq_work+0x16/0x20 [ 285.704068][ C0] RIP: 0010:rcu_read_unlock_special+0x84/0x500 [ 285.704084][ C0] Code: f1 f1 f1 00 f2 f2 f2 4a 89 04 2b 66 42 c7 44 2b 09 f3 f3 42 c6 44 2b 0b f3 65 44 8b 35 3d 97 96 7e 41 f7 c6 00 00 f0 00 74 45 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 66 42 c7 44 2b [ 285.704098][ C0] RSP: 0018:ffffc90000007aa0 EFLAGS: 00000206 [ 285.704110][ C0] RAX: dd90c177537e0600 RBX: 1ffff92000000f5c RCX: dd90c177537e0600 [ 285.704123][ C0] RDX: dffffc0000000000 RSI: ffffffff8a8c0500 RDI: ffffffff8adef020 [ 285.704135][ C0] RBP: ffffc90000007b90 R08: dffffc0000000000 R09: ffffed10171c6afa [ 285.704148][ C0] R10: ffffed10171c6afa R11: 1ffff110171c6af9 R12: 0000000000000246 [ 285.704159][ C0] R13: dffffc0000000000 R14: ffff8880b8e3b900 R15: 0000000000000001 [ 285.704179][ C0] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 285.704198][ C0] ? __rcu_read_unlock+0xd0/0xd0 [ 285.704218][ C0] __rcu_read_unlock+0x78/0xd0 [ 285.704231][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x26/0x170 [ 285.704252][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 285.704271][ C0] ieee80211_iterate_active_interfaces_atomic+0x156/0x170 [ 285.704293][ C0] mac80211_hwsim_beacon+0xb7/0x1b0 [ 285.704311][ C0] __hrtimer_run_queues+0x554/0xd60 [ 285.704333][ C0] ? hw_scan_work+0xf30/0xf30 [ 285.704352][ C0] ? hrtimer_interrupt+0x9c0/0x9c0 [ 285.704368][ C0] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 285.704392][ C0] hrtimer_run_softirq+0x183/0x2a0 [ 285.704411][ C0] handle_softirqs+0x2a1/0x920 [ 285.704438][ C0] ? __irq_exit_rcu+0x12f/0x220 [ 285.704466][ C0] ? do_softirq+0x200/0x200 [ 285.704492][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 285.704519][ C0] __irq_exit_rcu+0x12f/0x220 [ 285.704544][ C0] ? irq_exit_rcu+0x20/0x20 [ 285.704573][ C0] irq_exit_rcu+0x5/0x20 [ 285.704596][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 285.704621][ C0] [ 285.704625][ C0] [ 285.704630][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 285.704648][ C0] RIP: 0010:finish_task_switch+0x26a/0x8f0 [ 285.704669][ C0] Code: 0f 84 3b 01 00 00 48 85 db 0f 85 5a 01 00 00 0f 1f 44 00 00 4c 8b 75 d0 4c 89 e7 e8 90 3f c9 08 e8 6b b1 2e 00 fb 4c 8b 65 c0 <49> 8d bc 24 f8 15 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0 [ 285.704683][ C0] RSP: 0018:ffffc9000413f858 EFLAGS: 00000282 [ 285.704696][ C0] RAX: dd90c177537e0600 RBX: 0000000000000000 RCX: dd90c177537e0600 [ 285.704707][ C0] RDX: dffffc0000000000 RSI: ffffffff8a8c0500 RDI: ffffffff8adef020 [ 285.704719][ C0] RBP: ffffc9000413f8b0 R08: dffffc0000000000 R09: ffffed10171c6afa [ 285.704732][ C0] R10: ffffed10171c6afa R11: 1ffff110171c6af9 R12: ffff8880271a0000 [ 285.704744][ C0] R13: dffffc0000000000 R14: ffff88802f790000 R15: ffff8880b8e3b590 [ 285.704764][ C0] ? finish_task_switch+0x265/0x8f0 [ 285.704788][ C0] __schedule+0x10f4/0x40b0 [ 285.704822][ C0] ? __sched_text_start+0x8/0x8 [ 285.704839][ C0] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 285.704857][ C0] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 285.704876][ C0] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 285.704894][ C0] ? preempt_schedule+0xa7/0xb0 [ 285.704912][ C0] preempt_schedule_common+0x82/0xd0 [ 285.704932][ C0] preempt_schedule+0xa7/0xb0 [ 285.704950][ C0] ? schedule_preempt_disabled+0x20/0x20 [ 285.704969][ C0] ? _raw_spin_unlock_irqrestore+0xa5/0x100 [ 285.704994][ C0] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 285.705019][ C0] ? _raw_spin_unlock+0x40/0x40 [ 285.705043][ C0] preempt_schedule_thunk+0x16/0x18 [ 285.705072][ C0] try_to_wake_up+0x6ae/0x1080 [ 285.705096][ C0] wake_up_q+0x78/0xc0 [ 285.705114][ C0] futex_wake+0x409/0x4b0 [ 285.705132][ C0] ? futex_wake_mark+0x150/0x150 [ 285.705152][ C0] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 285.705177][ C0] do_futex+0x2e2/0x320 [ 285.705205][ C0] ? __ia32_sys_get_robust_list+0x80/0x80 [ 285.705229][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 285.705253][ C0] ? lock_chain_count+0x20/0x20 [ 285.705275][ C0] __se_sys_futex+0x14a/0x440 [ 285.705300][ C0] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 285.705320][ C0] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 285.705338][ C0] ? __x64_sys_futex+0xf0/0xf0 [ 285.705366][ C0] ? __x64_sys_futex+0x1d/0xf0 [ 285.705392][ C0] do_syscall_64+0x4c/0xa0 [ 285.705409][ C0] ? clear_bhb_loop+0x60/0xb0 [ 285.705425][ C0] ? clear_bhb_loop+0x60/0xb0 [ 285.705443][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 285.705459][ C0] RIP: 0033:0x7ff52158eec9 [ 285.705472][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 285.705486][ C0] RSP: 002b:00007ff5223d80e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 285.705501][ C0] RAX: ffffffffffffffda RBX: 00007ff5217e5fa8 RCX: 00007ff52158eec9 [ 285.705513][ C0] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007ff5217e5fac [ 285.705523][ C0] RBP: 00007ff5217e5fa0 R08: 00102720a8f102ba R09: 0000000000000000 [ 285.705534][ C0] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 285.705545][ C0] R13: 00007ff5217e6038 R14: 00007ffd56c758b0 R15: 00007ffd56c75998 [ 285.705564][ C0]