last executing test programs: 14m12.934417209s ago: executing program 0 (id=2790): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x22121500, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = getpid() sendmsg$unix(r0, &(0x7f00000002c0)={&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000240)=[{&(0x7f00000000c0)="2309db6fc8400e0fb2c1ce6a810a8585e4d7c25599e16c12b8e61ab4bda6640275331dc569fd1db0618fe039fc294b87a31061c0ff55c7407d46dcfaa0f04080f6221c3dc0a14eb2d9d96c2a130e07f49920533dc973926a0b49cb1f8a9361d3cf678061bd413485589236c68bf681fb76b829010561178471c5ebda", 0x7c}, {&(0x7f0000000140)="7437c863d4e75266784cb5d2f79f565ec7a926caa805dbd0cb55dec4a4581659b87aedaf51fe210108ccd510c60b7461fb47d72f7838d74e05bf1153e001a986af7b6b6153f74e2d7f9aa1c89187cba5481dc7fce3f32853d055f8eead0298b8bbee963f4979ae7637946639f094b2c7fb929ab7016c6528c3bb5d065affeaee68b540405c70bd184d885fdde7cbeb0dce1abdf7980b51941b5698f3be863a8c9ace44fa9e4e676bd17e6dff9b157e1a957b6ccd6444528d1b5dae8fea769012996e6d9cba793c912fd9159598621cebedcaa3339b6cc0", 0xd7}], 0x2, &(0x7f0000000280)=[@cred={{0x1c, 0x1, 0x2, {r1, 0xee01}}}], 0x20, 0x1}, 0x88c0) 14m12.703625624s ago: executing program 0 (id=2791): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x0, 0x7, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/time_for_children\x00') bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001f80)={0xffffffffffffffff}) sendmsg$inet(r2, 0x0, 0x4004004) r3 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000280), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f00000002c0)={[{0x2b, 'cpuacct'}, {0x2d, 'net'}, {0x2b, 'memory'}, {0x2b, 'memory'}, {0x2b, 'memory'}]}, 0x26) r4 = socket$kcm(0x10, 0x2, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz1\x00', 0x200002, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782dbe3ff040220080207000000040000a118000200e000000700000e1208000f0100810401a80016ea1f00040000005f54c92011148ed08734843c8802033d0803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x20040014) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='T\x00'], 0x88}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[], 0xfffffffffffffe13) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000001c0)={r1}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8914, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000100)={'wlan0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) 14m11.146619772s ago: executing program 3 (id=2792): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000ac0), 0x0, 0x7fffffff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 14m10.930401087s ago: executing program 3 (id=2796): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x1008000, &(0x7f0000000300)="db7a42619cc0fb47a896ff785f67d0a956a4d2c5dca1ae3cb8a3f22796b1ded05461339c399b0941900cb42bdb26c141f8ec93790a09fdd9b829186e43357c808eee9bfb901e83ec5c8de56d59d1", 0x4e, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400)="cd2774508cc99ea151e5a8eb68f216c9a8d515183ab3485b0cf0fa000805e3e31d800707fb4812003d02343182f9900a62db63be3249c7e0de12031c4b2b0e1d008c954499778a58def9ee3593a01b3d0e7e40fb8ecb3e694b403a560baa94cbd811a859b4ff3e3ba0ef87d7b048beb6c866690d80454bf82f") perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0, 0x65}, 0x28) socketpair(0x23, 0x5, 0x2, &(0x7f0000000b80)) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02002200356bd25a806f8c6394f91124fc60040011000a7403004800000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 14m10.846253359s ago: executing program 0 (id=2798): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRESOCT=0x0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x8c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x100000000}, 0x2029, 0x0, 0x0, 0x6, 0x0, 0xfffffff9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) 14m10.541347026s ago: executing program 0 (id=2802): socket$kcm(0x10, 0x400000002, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0xf, &(0x7f0000000900)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000bf0200000000000085000000cc000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x104007, 0xac5d, 0x0, 0x0, 0x10001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000580)=@generic={&(0x7f0000000540)='./file0\x00', r4}, 0x18) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0700000004000000000100000400000020000000", @ANYRES32=0x1, @ANYBLOB="a0fb1bcf516a54e898fb96d2100000000000000000000000010000", @ANYRES32, @ANYBLOB='\x00'/25], 0x50) socket$kcm(0x10, 0x2, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb0100180000000000000024000000250000000200000000000000000000020b000000000000000000000b00020000000000"], 0x0, 0x3e}, 0x20) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xffffff58, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020027000b35d25a806f8c6394f90224fc602f1b01000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000010c0)={r5, 0xfffffffffffffd62, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0}}, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x10, 0x2, 0x4) r8 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r8, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) sendmsg(r8, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000440)="a6", 0xffffff58}], 0x1}, 0x40001) sendmsg$kcm(r7, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x7, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000007000000000000003700000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7030000008000008d0000000c000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x8c, &(0x7f0000000340)=""/140, 0x41000, 0x22, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000400)={0x4, 0x3, 0x81, 0x7ff}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, &(0x7f0000000540)=[0x1, 0xffffffffffffffff, 0x1], &(0x7f00000005c0)=[{0x1, 0x4, 0x9, 0xa}, {0x3, 0x1, 0xb}], 0x10, 0x8000}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000200)=@generic={&(0x7f0000000700)='./file0/file0/file0\x00', r7}, 0x18) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xd) socket$kcm(0x2, 0x2, 0x73) r9 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x4, 0x0, 0xef, 0x0, 0x0, 0x0, 0xc0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x0, 0x0, r9, 0x0) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 14m10.398650339s ago: executing program 3 (id=2803): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000008000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000020008500000095000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x2, 0xffc, &(0x7f0000000880)=""/4092}, 0x94) 14m9.5383476s ago: executing program 3 (id=2808): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000040)=r0, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[], 0x50) bpf$ITER_CREATE(0xb, &(0x7f00000002c0), 0x8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="2008020022003507d25a806f8c6394f90524fc600df01141092305000400000037153e370248038011f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0xc90d}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) write$cgroup_type(r3, &(0x7f0000000180), 0x40010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x5, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9}, [@map_idx_val={0x18, 0x5, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f00000001c0)='GPL\x00', 0x74, 0x2a, &(0x7f0000000200)=""/42, 0x40e00, 0x10, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f0000000240)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000280)={0x2, 0x9, 0x1, 0xe}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[0x1], &(0x7f0000000400), 0x10, 0x4}, 0x94) r4 = socket$kcm(0xa, 0x5, 0x0) socket$kcm(0x29, 0x3, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0a0000000100", @ANYRES8=r4, @ANYBLOB, @ANYRES64=0x0], 0x20) 14m8.509228434s ago: executing program 0 (id=2812): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2081c0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000000c0)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x3, 0x87) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0xfe, 0xbd, 0x5, 0x0, 0x0, 0xfd, 0x4401, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0xc8, 0x6, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x76, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x18}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xc, 0x13, &(0x7f0000000e80)=ANY=[@ANYBLOB="1800000052a607010000", @ANYRES32=r1, @ANYRES32=r1], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x0, 0x8, &(0x7f00000002c0), &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x7, 0xa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xf000000}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, @perf_bp={0x0, 0x9}, 0x42, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x1ff, 0x0, 0x400000000a8}, 0x0, 0x3, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={&(0x7f0000001200)=ANY=[@ANYBLOB="9feb0100180000000000000014000000140000000a00000002000000010000060400000006000000004e4500000061612e2e633061"], &(0x7f0000001300)=""/160, 0x36, 0xa0, 0x1}, 0x28) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) 14m8.498260014s ago: executing program 3 (id=2813): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac141410ac1414aa000000001c0000000000000097ffffff0700000001940460"], 0x40}, 0x0) 14m8.173636212s ago: executing program 3 (id=2816): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) write$cgroup_subtree(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2200102f00fe80000000120000875a65059ff57b00000000000000000000000000ac1414aa000088a8"], 0xcfa4) 14m7.878948429s ago: executing program 0 (id=2818): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x25, 0x2, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xfffffebfffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x88959c71f773f70a) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4d31, 0x200, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_config_ext={0xd34, 0x800000000}, 0x2, 0x5, 0xfffffffb, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0x4, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80020, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x2}, 0x2408, 0x0, 0xfffffffc, 0x9, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0xb) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r5, 0x80047441, &(0x7f0000001200)) close(r2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, 0x0}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f3, &(0x7f0000000080)) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0xfffffffffffffcd5, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2002) r8 = socket$kcm(0x2, 0x6, 0x0) setsockopt$sock_attach_bpf(r8, 0x1, 0x3e, &(0x7f0000000600)=r7, 0x4) sendmsg$inet(r8, &(0x7f0000001a40)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000480)={0x4, &(0x7f00000004c0)=[{0x2d, 0x0, 0x2}, {0x15}, {}, {0x6}]}) 13m52.268470569s ago: executing program 32 (id=2818): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x25, 0x2, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xfffffebfffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x88959c71f773f70a) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4d31, 0x200, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_config_ext={0xd34, 0x800000000}, 0x2, 0x5, 0xfffffffb, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0x4, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80020, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x2}, 0x2408, 0x0, 0xfffffffc, 0x9, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0xb) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21bef5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f94306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a835701bea8240399c56ce8f58df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b262341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261e58fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f9ac2f7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe8799fe266e2ccac80fefe750151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa796ea7b156d19612297c63bb20e1e0469f7615f67a9218cbace38f5236821314f76302b98afa93044b83989339ca10e6ae30e70e17a82f03e915b8425e8e7a91614306d2ae0bc3550d856f2d7293672b5673d264fc886b0c8bdf436a0fcd21bf9da7bdca98e34cd6e59b0a7ce4ba1b466561aaa35448dff47bb1d7df23d467689a6669e4300d5acf12e4d0b35abf91569f605b2f6df0d861"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r5, 0x80047441, &(0x7f0000001200)) close(r2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, 0x0}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f3, &(0x7f0000000080)) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0xfffffffffffffcd5, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2002) r8 = socket$kcm(0x2, 0x6, 0x0) setsockopt$sock_attach_bpf(r8, 0x1, 0x3e, &(0x7f0000000600)=r7, 0x4) sendmsg$inet(r8, &(0x7f0000001a40)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000480)={0x4, &(0x7f00000004c0)=[{0x2d, 0x0, 0x2}, {0x15}, {}, {0x6}]}) 13m52.19839731s ago: executing program 33 (id=2816): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) write$cgroup_subtree(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2200102f00fe80000000120000875a65059ff57b00000000000000000000000000ac1414aa000088a8"], 0xcfa4) 4.600753028s ago: executing program 2 (id=8059): bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x2, 0xa, 0x2) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8916, &(0x7f0000000000)={'wlan1\x00', @random="0200ff7fffff"}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x0, 0x2, &(0x7f0000000000)=@raw=[@map_idx={0x18, 0x0, 0x5, 0x0, 0x7}], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x604, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0xd}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x8108, 0x2, 0xfffffffe, 0x3, 0x0, 0x4, 0x6980, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0xfffffffffffffe72, &(0x7f0000000000)=[{&(0x7f0000000300)="d800000018008105e00212ba0d8105040a020200020f100b067c55a1bc000900b80006990200000015000500fc038178a80015000338004002000c0901ac040000d67f6f947a7100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e970300000000000000000000000000000000000000008dc5fb510162", 0xd8}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'nicvf0\x00', 0x5902}) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f00000001c0)={r1}) ioctl$TUNSETVNETHDRSZ(r5, 0x800454e0, &(0x7f0000000480)=0x70dfd79b) close(r4) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="110000004e0033"], 0xfe33) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2040) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002d000b12d25a80648c2594f90124fc60100c034002000187053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r8 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1b0000001a00895436dff9ce32a4e79480029ec4eea6dd56e22e57", 0x1b}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x18, &(0x7f0000000000)=r6, 0x8) 4.429096093s ago: executing program 4 (id=8063): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) write$cgroup_subtree(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2200102f00fe80000000000000875a65059ff57b00000000090000000000000000ac1414aa000088a8"], 0xcfa4) 4.330439675s ago: executing program 1 (id=8064): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020032000b07d25a806f8c6394f90424fc602f0000000a740200053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="970800000000000073113f00000000009500001200020000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x60}, 0x24) 4.11023536s ago: executing program 5 (id=8065): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1e00000000000000fdff070008"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000280)={r0, 0x0, &(0x7f0000000200)=""/76}, 0x20) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0x11, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1e00000000000000fdff070008"], 0x48) (async) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000280)={r0, 0x0, &(0x7f0000000200)=""/76}, 0x20) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0x11, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) 4.101227681s ago: executing program 2 (id=8066): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x11c002, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) socket$kcm(0xa, 0x5, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x20040800) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c006, 0xac5d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000080)=@generic={0x0, 0xffffffffffffffff, 0x80000}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000ffb000b703000000000000850000007200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000ffff00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.998550313s ago: executing program 1 (id=8067): r0 = socket$kcm(0xa, 0x3, 0x73) setsockopt$sock_attach_bpf(r0, 0x29, 0x21, &(0x7f0000000200), 0x4) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0xff, @remote}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000002900000003"], 0x18}, 0xb00000000000000) 3.935962935s ago: executing program 5 (id=8068): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}, 0x10c202, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair(0x26, 0x5, 0x0, &(0x7f0000000740)) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000000000ffb7080000980000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xac) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.822330787s ago: executing program 1 (id=8070): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xf, 0x4}, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x810, 0x2c6, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}, 0x100, 0x0, 0xc2b6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000740)={0x4, 0x80, 0x5d, 0x8, 0x9, 0xe, 0x0, 0x89, 0xba3eb64b11ebf825, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f00000001c0), 0xcae7cea7640f44ae}, 0x30, 0xfffffffffffff800, 0x9, 0x9, 0x3, 0x0, 0x7, 0x0, 0x8, 0x0, 0x1}) r0 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000240)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x5452, &(0x7f00000006c0)) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000040), 0x4) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce810003"], 0xfdef) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x9, 0xf, 0x0, 0xc6, 0x6990, r3, 0x3013, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x3}, 0x50) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440)=0xffffffffffffffff, 0x4) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r6, &(0x7f0000000100)={&(0x7f0000001540)=@tipc=@name={0x1e, 0x2, 0x3, {{0x40, 0x2e}, 0x1}}, 0x80, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0000000500"/20, @ANYRES32, @ANYBLOB="ffffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300000004000000040000000400"/28], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000580)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000600)={0x1, 0xffffffffffffffff}, 0x4) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000008000000e47f000001"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000003c0)={r10, &(0x7f0000000d00), 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0xf, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x37a}, [@map_idx_val={0x18, 0x3, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf186}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, @map_val={0x18, 0x1, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x3}, @ldst={0x0, 0x2, 0x6, 0x6, 0x1, 0x10, 0xfffffffffffffffc}, @alu={0x4, 0x1, 0x5, 0x8, 0x82f251de9c976c2d, 0x40, 0x8}, @cb_func={0x18, 0x4, 0x4, 0x0, 0x3}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x5}]}, &(0x7f0000000300)='GPL\x00', 0x5, 0xfe, &(0x7f0000000340)=""/254, 0x40f00, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f0000000480)={0x9, 0x5}, 0x8, 0x10, &(0x7f00000004c0)={0x0, 0x5, 0x6d, 0x7}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000640)=[r8, r7, r8, 0x1, r9, r10], 0x0, 0x10, 0x4}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f0000000400000004001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r11, 0x89f1, &(0x7f0000000080)) 3.821217217s ago: executing program 2 (id=8071): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000040000000200000000000091030000000000000000000000000000020100000002000000000000080200000000005f"], 0x0, 0x44}, 0x20) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r1, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000200), 0x1}, 0x6d) r2 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xc, [@struct={0x4, 0x1, 0x0, 0x4, 0x1, 0x2, [{0xa, 0x3, 0x1000000}]}, @fwd={0x1}, @restrict={0x0, 0x0, 0x0, 0xb, 0x2}]}, {0x0, [0x61, 0x0, 0x30, 0x2e, 0x61, 0x30, 0x61, 0x61, 0x61, 0x61]}}, 0x0, 0x54}, 0x28) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b904021d080201000000120000a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0x28, 0x0, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632f77fb080600017f020001be3e7d2a182f", 0x0, 0x104, 0x6000000000000000, 0x31, 0x0, &(0x7f0000000400)="9209558f0c5fb25cd57f98113135c3171b8b331fbc04f0e6955a796ff8e3aae3cac46cec3030dfc999058aea01f0e6dcf2", 0x0}, 0x50) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080010000000e8fe55a1180015000600142603600e120500210000000401a8001600a400014020000300036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x4, 0x0, 0x1000, 0x20046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) mkdir(&(0x7f0000000240)='./file0\x00', 0x3) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a8001600a400014020000b00ffffff7fb94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=ANY=[@ANYRES8], &(0x7f0000000040)='syzkaller\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}, 0x10}, 0x94) 3.70880777s ago: executing program 5 (id=8072): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000ffffffb07b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.662499871s ago: executing program 6 (id=8073): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000008000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000095000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x2, 0xffc, &(0x7f0000000880)=""/4092, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value=0xfe}, 0x94) 3.542069884s ago: executing program 5 (id=8074): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000000c0), 0x12) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000002c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440), 0x8, 0x8a, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[], 0x50) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000f80)={&(0x7f0000000d00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x160, 0x160, 0x4, [@datasec={0xb, 0x5, 0x0, 0xf, 0x1, [{0x3, 0x9, 0x86dc}, {0x2, 0x6, 0x1}, {0x2, 0x6, 0x5}, {0x4, 0x4, 0x2026}, {0x3, 0x7, 0x705}], "7f"}, @datasec={0x3, 0x1, 0x0, 0xf, 0x3, [{0x4, 0x7, 0xe}], "e52470"}, @struct={0x2, 0xa, 0x0, 0x4, 0x1, 0x8, [{0x2, 0x2, 0x7}, {0x2, 0x2, 0x5}, {0xe, 0x3, 0x1}, {0x10, 0x5, 0x69ce}, {0x0, 0x0, 0xaac3}, {0xe, 0x1, 0x2}, {0x0, 0x3, 0x3}, {0x4, 0x2}, {0x1, 0x5, 0x5}, {0x6, 0x5, 0xffffffff}]}, @const={0x5, 0x0, 0x0, 0xa, 0x4}, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{0x401, 0x1}, {0x9, 0x2}, {}, {0x5, 0x2}, {0xf, 0x3}, {0x0, 0x2}]}, @ptr={0xf, 0x0, 0x0, 0x2, 0x3}, @type_tag={0x5, 0x0, 0x0, 0x12, 0x1}, @float={0x10, 0x0, 0x0, 0x10, 0xc}, @type_tag={0xb, 0x0, 0x0, 0x12, 0x5}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000000e80)=""/237, 0x17c, 0xed, 0x1, 0x8, 0x10000}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000010c0)={0x6, 0x24, &(0x7f0000000880)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x400}, {}, {}, [@call={0x85, 0x0, 0x0, 0x45}, @generic={0x69, 0x9, 0x8, 0x6, 0x9}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x61bb54ce08987afa}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000009c0)='GPL\x00', 0xc43606ad, 0xfc, &(0x7f0000000c00)=""/252, 0x0, 0x52, '\x00', r5, 0x25, r6, 0x8, &(0x7f0000000fc0)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000001000)={0x5, 0x3, 0x3, 0x8001}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000001040)=[r0], &(0x7f0000001080)=[{0x0, 0x1, 0x4, 0xc}, {0x0, 0x5, 0x3, 0xc}], 0x10, 0xc}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8b20, &(0x7f0000000080)={'wlan1\x00', @random="0600"}) write$cgroup_pid(r4, &(0x7f0000002980), 0x12) 3.523348924s ago: executing program 6 (id=8075): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000004000000800007910000000000000c30f00ff0000000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0xd8, &(0x7f0000000300)=""/216}, 0x94) 3.384151898s ago: executing program 6 (id=8076): bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x2, 0xa, 0x2) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8916, &(0x7f0000000000)={'wlan1\x00', @random="0200ff7fffff"}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x0, 0x2, &(0x7f0000000000)=@raw=[@map_idx={0x18, 0x0, 0x5, 0x0, 0x7}], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x604, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0xd}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x8108, 0x2, 0xfffffffe, 0x3, 0x0, 0x4, 0x6980, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0xfffffffffffffe72, &(0x7f0000000000)=[{&(0x7f0000000300)="d800000018008105e00212ba0d8105040a020200020f100b067c55a1bc000900b80006990200000015000500fc038178a80015000338004002000c0901ac040000d67f6f947a7100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e970300000000000000000000000000000000000000008dc5fb510162", 0xd8}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'nicvf0\x00', 0x5902}) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f00000001c0)={r1}) ioctl$TUNSETVNETHDRSZ(r5, 0x800454e0, &(0x7f0000000480)=0x70dfd79b) close(r4) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="110000004e0033"], 0xfe33) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2040) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002d000b12d25a80648c2594f90124fc60100c034002000187053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r8 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1b0000001a00895436dff9ce32a4e79480029ec4eea6dd56e22e57", 0x1b}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x18, &(0x7f0000000000)=r6, 0x8) 1.514387893s ago: executing program 1 (id=8077): bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x2, 0xa, 0x2) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8916, &(0x7f0000000000)={'wlan1\x00', @random="0200ff7fffff"}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x604, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0xd}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x8108, 0x2, 0xfffffffe, 0x3, 0x0, 0x4, 0x6980, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0xfffffffffffffe72, &(0x7f0000000000)=[{&(0x7f0000000300)="d800000018008105e00212ba0d8105040a020200020f100b067c55a1bc000900b80006990200000015000500fc038178a80015000338004002000c0901ac040000d67f6f947a7100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e970300000000000000000000000000000000000000008dc5fb510162", 0xd8}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'nicvf0\x00', 0x5902}) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f00000001c0)={r1}) ioctl$TUNSETVNETHDRSZ(r5, 0x800454e0, &(0x7f0000000480)=0x70dfd79b) close(r4) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="110000004e0033"], 0xfe33) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2040) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002d000b12d25a80648c2594f90124fc60100c034002000187053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r8 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1b0000001a00895436dff9ce32a4e79480029ec4eea6dd56e22e57", 0x1b}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x18, &(0x7f0000000000)=r6, 0x8) 1.439003455s ago: executing program 4 (id=8078): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200, 0x1}, 0x0, 0x0, 0xc2ba, 0x9, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x300}, 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000540)="b9ff0300600d698cb89e14f00800", 0x0, 0x100, 0x60000000, 0x2a, 0x0, &(0x7f0000000180)="6046320319a1928345e9bc03cc9b9df77521ccad02603f3c2d5b362b0f00d8105d7d72651685e8b62a3f", 0x0}, 0x50) 1.412623356s ago: executing program 2 (id=8079): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) ioctl$TUNGETVNETBE(r0, 0x800454df, &(0x7f00000000c0)=0x1) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x20, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x4, 0x4, 0x8}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x6, &(0x7f0000000180)=ANY=[@ANYBLOB="1802000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000850000002500000095f1ff0000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, &(0x7f0000000100)=ANY=[@ANYRESDEC=r1, @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xeb, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) write$cgroup_type(r1, &(0x7f0000000180), 0x13bb711e) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000080), 0x2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x4030582b, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8b26, &(0x7f0000000280)={'wlan1\x00', @random="6a50bae0b3e5"}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, 0x0, 0x40) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.339322128s ago: executing program 6 (id=8080): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0xf3}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000440)="d8000000180081034ef0f206b74cb9040a1d080006007c06e8fc55a10a0015000600142603600e1208000f0000000401a8000100df80ffff00000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b31627ffe06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a468eb4edbb57a5025ccca9e00360db798262f3dcace0d0bdb8e73ece0b42a9ecbee12cf1de59bf09ebc62e9b6e6bf545de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x48) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x82a6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000700)}, {0x0}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x2, 0x1, 0x84) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, @perf_config_ext={0xf, 0x5}, 0x108ea5, 0xc78, 0x0, 0x6, 0x0, 0x0, 0xae7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e00000004000000040000000f"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r3}, 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5c00000012006b9c9e3fe3d86e6c1d0000147ea60864160af36504b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c2151fef08d8cdbf9367b4fad1f60a64c9f408000300060100000400000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)}, 0x8004) 1.210533151s ago: executing program 4 (id=8081): r0 = socket$kcm(0xa, 0x3, 0x73) setsockopt$sock_attach_bpf(r0, 0x29, 0x21, &(0x7f0000000200), 0x4) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0xff, @remote}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000002900000003"], 0x18}, 0xf00000000000000) 1.126199083s ago: executing program 4 (id=8082): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x11c002, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) socket$kcm(0xa, 0x5, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x20040800) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c006, 0xac5d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000080)=@generic={0x0, 0xffffffffffffffff, 0x80000}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000ffd000b703000000000000850000007200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000ffff00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.119570353s ago: executing program 1 (id=8083): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b405000000000000791067000000000005000000000001009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594", 0xf}], 0x1}, 0x0) mkdir(0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000040)="1400000028000b05d2600d00030009000100ff35", 0x14}], 0x1}, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)=@o_path={&(0x7f0000000400)='./cgroup/../file0\x00', 0x0, 0x0, r0}, 0x18) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0xe3, 0x0, 0x81, 0x0, 0x0, 0xc, 0x3a200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x8000000000000001}, 0x0, 0x0, 0x4000, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x100000000, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000200)={0x0, 0x0}, 0x8) r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r4, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000500)={r5, r3, 0x4, r3}, 0x10) close(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) sendmsg$unix(0xffffffffffffffff, &(0x7f0000002200)={&(0x7f00000004c0)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4000010}, 0x891) socket$kcm(0x2, 0x1000000000000002, 0x0) socket$kcm(0x10, 0x2, 0x4) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) 798.945341ms ago: executing program 6 (id=8084): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}, 0x10c202, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair(0x26, 0x5, 0x0, &(0x7f0000000740)) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000001fffffffb7080000980000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xac) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 653.625614ms ago: executing program 4 (id=8085): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x2000009, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext, 0x100080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000240)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001640)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value=0x18}, 0x48) 382.036911ms ago: executing program 6 (id=8086): socket$kcm(0x10, 0x400000002, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x3}, 0x2000, 0xac5d, 0x20, 0x0, 0x10001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb0100180000000000"], 0x0, 0x3e, 0x5a}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1100000004000000040100000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x2, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r2 = perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0x5}, 0x10c002, 0xac5d, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x5}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, r2, 0x8) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x5}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, r2, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) socket$kcm(0x10, 0x2, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x60}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x80) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)) 310.481123ms ago: executing program 2 (id=8087): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000ffffffd07b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 193.988956ms ago: executing program 5 (id=8088): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000008000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000095000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x2, 0xffc, &(0x7f0000000880)=""/4092, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value=0x700}, 0x94) 174.990016ms ago: executing program 4 (id=8089): r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_config_ext={0x0, 0x5}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b35, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030036000b05d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events.local\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000040)={0x3, 0x80, 0x9, 0xe, 0x99, 0xa, 0x0, 0x33c, 0x802, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x14, 0x4, @perf_bp={&(0x7f0000000000), 0xa}, 0x100, 0x6, 0x710, 0x2, 0x877, 0x400, 0x7, 0x0, 0x1, 0x0, 0x2}, 0xffffffffffffffff, 0xe, r3, 0x5) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r4, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000490000000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffec, 0x0, &(0x7f00000008c0)="89", 0x0, 0xf, 0x0, 0x2}, 0x32) 34.328359ms ago: executing program 2 (id=8090): bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x2, 0xa, 0x2) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8916, &(0x7f0000000000)={'wlan1\x00', @random="0200ff7fffff"}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x0, 0x2, &(0x7f0000000000)=@raw=[@map_idx={0x18, 0x0, 0x5, 0x0, 0x7}], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x604, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0xd}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x8108, 0x2, 0xfffffffe, 0x3, 0x0, 0x4, 0x6980, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0xfffffffffffffe72, &(0x7f0000000000)=[{&(0x7f0000000300)="d800000018008105e00212ba0d8105040a020200020f100b067c55a1bc000900b80006990200000015000500fc038178a80015000338004002000c0901ac040000d67f6f947a7100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e970300000000000000000000000000000000000000008dc5fb510162", 0xd8}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'nicvf0\x00', 0x5902}) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f00000001c0)={r1}) ioctl$TUNSETVNETHDRSZ(r5, 0x800454e0, &(0x7f0000000480)=0x70dfd79b) close(r4) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="110000004e0033"], 0xfe33) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2040) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002d000b12d25a80648c2594f90124fc60100c034002000187053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r8 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1b0000001a00895436dff9ce32a4e79480029ec4eea6dd56e22e57", 0x1b}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x18, &(0x7f0000000000)=r6, 0x8) 34.059549ms ago: executing program 1 (id=8091): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000005000000800007910000000000000c30f00ff0000000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0xd8, &(0x7f0000000300)=""/216}, 0x94) 0s ago: executing program 5 (id=8092): socket$kcm(0xa, 0x5, 0x0) (async) r0 = socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1000000000000008, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000f7ff45140a6adb4eb440000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf09000000000000c5090100000000009500000000000000b7020000000000007b9af8ff00000000c5090000fbffffff7baaf0ff00000000bf2700000000000007080000fffdffffbfa400000000000007040000f0ffffff540200000800000018220000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9820000000000056080000020000008500000005000000b7000000000000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000f7ff45140a6adb4eb440000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf09000000000000c5090100000000009500000000000000b7020000000000007b9af8ff00000000c5090000fbffffff7baaf0ff00000000bf2700000000000007080000fffdffffbfa400000000000007040000f0ffffff540200000800000018220000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9820000000000056080000020000008500000005000000b7000000000000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0x0, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0x0, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94) socket$kcm(0x10, 0x2, 0x10) (async) socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x10, 0x2, 0x0) (async) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x10) recvmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000300)=""/169, 0xa9}], 0x2}, 0x20000000) recvmsg$kcm(r2, 0x0, 0x0) r3 = bpf$ITER_CREATE(0xb, 0x0, 0x0) close(r3) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r4 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r4, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) (async) sendmsg$inet(r4, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000001c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000400142603600e1208000f0000000401a8001600200008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a73536138f00001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb3adbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d61", 0xad}], 0x1}, 0x4880) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000001c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000400142603600e1208000f0000000401a8001600200008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a73536138f00001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb3adbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d61", 0xad}], 0x1}, 0x4880) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x3, 0xfc, 0xff, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_config_ext={0x5}, 0x8b001, 0x0, 0xfffffffd, 0x4, 0x1ff, 0x0, 0x3, 0x0, 0xfffffffe, 0x0, 0xffffffffffffd}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x10) (async) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x3, 0xfc, 0xff, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_config_ext={0x5}, 0x8b001, 0x0, 0xfffffffd, 0x4, 0x1ff, 0x0, 0x3, 0x0, 0xfffffffe, 0x0, 0xffffffffffffd}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x4c}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r6, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffc, 0x3}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x8) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffc, 0x3}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x8) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="9feb01001800fe00000000000c000000f2000000040000f5010000000000000f0400000000005f", @ANYRESOCT=r0, @ANYRES8], 0x0, 0x28}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000040000000100000080000000", @ANYRES32, @ANYBLOB="00000000000000000000000000b08f9a5eac7d10bbc460fa9400000000000000", @ANYRES32=0x0, @ANYRES32=r7, @ANYBLOB="000000000100"/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x0, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000080850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) kernel console output (not intermixed with test programs): batadv0: Removing interface: batadv_slave_0 [ 1048.226264][ T47] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1048.234519][ T47] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1048.242961][ T47] device batadv0 left promiscuous mode [ 1048.248905][ T47] bridge0: port 2(batadv0) entered disabled state [ 1048.257422][ T47] device bridge_slave_0 left promiscuous mode [ 1048.263995][ T47] bridge0: port 1(bridge_slave_0) entered disabled state [ 1048.289635][ T47] device veth1_macvtap left promiscuous mode [ 1048.296196][ T47] device veth0_macvtap left promiscuous mode [ 1048.302700][T21391] Bluetooth: hci3: command 0x040f tx timeout [ 1048.302854][ T47] device veth1_vlan left promiscuous mode [ 1048.315178][ T47] device veth0_vlan left promiscuous mode [ 1048.505946][T23050] netlink: 130181 bytes leftover after parsing attributes in process `syz.5.6392'. [ 1049.619552][T22854] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1049.630100][T22854] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1050.377734][T21391] Bluetooth: hci3: command 0x0419 tx timeout [ 1051.713344][T22854] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1051.966915][T22854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1052.042685][T15172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1052.092811][T15172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1052.124930][T22854] 8021q: adding VLAN 0 to HW filter on device team0 [ 1052.156867][T15172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1052.184051][T15172] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1052.210030][T15172] bridge0: port 1(bridge_slave_0) entered blocking state [ 1052.217235][T15172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1052.308952][T15172] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1052.332128][T15172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1052.382903][T15172] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1052.421878][T15172] bridge0: port 2(bridge_slave_1) entered blocking state [ 1052.429090][T15172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1052.447573][T15172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1052.466661][T15172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1052.500528][T15172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1052.530163][T15172] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1052.549816][T15172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1052.568187][T15172] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1052.599395][T15172] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1052.688706][T22854] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1052.732602][T22854] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1052.772018][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1052.810394][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1052.857882][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1052.874835][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1052.904054][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1052.929501][T23097] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6406'. [ 1053.279646][T23103] device syzkaller0 entered promiscuous mode [ 1053.327747][T23115] netlink: 132 bytes leftover after parsing attributes in process `syz.5.6410'. [ 1054.395673][T23125] delete_channel: no stack [ 1054.620474][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.628733][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1057.081754][T15170] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1057.100192][T15170] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1057.135981][T22854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1057.192678][T23164] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6428'. [ 1057.233380][T23160] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6419'. [ 1057.428483][T23173] netlink: 'syz.2.6422': attribute type 21 has an invalid length. [ 1057.906671][T15170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1057.943572][T15170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1058.024966][T15143] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1058.034477][T15143] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1058.128703][T15143] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1058.193491][T15143] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1058.310470][T22854] device veth0_vlan entered promiscuous mode [ 1058.338521][T22854] device veth1_vlan entered promiscuous mode [ 1058.353911][T23193] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6424'. [ 1058.478424][T23195] netlink: 128 bytes leftover after parsing attributes in process `syz.2.6424'. [ 1058.552805][T23195] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1058.578895][T23195] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1058.785294][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1058.814630][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1058.828471][T22854] device veth0_macvtap entered promiscuous mode [ 1058.847444][T22854] device veth1_macvtap entered promiscuous mode [ 1058.944731][T23209] device syzkaller0 entered promiscuous mode [ 1058.958828][T22854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1058.999929][T22854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1059.034110][T22854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1059.048179][T22854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1059.065376][T22854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1059.080864][T22854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1059.095247][T22854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1061.332004][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1061.343781][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1061.351948][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1061.361385][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1061.389915][T23217] ÿÿÿÿÿÿ: renamed from vlan1 [ 1061.403689][T22854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1061.430667][T22854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1061.453155][T22854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1061.465228][T22854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1061.476035][T22854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1061.506049][T22854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1061.538384][T22854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1061.552720][T23226] netlink: 'syz.4.6433': attribute type 21 has an invalid length. [ 1061.566786][T15172] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1061.583617][T15172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1061.606344][T22854] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1061.628195][T22854] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1061.637564][T22854] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1061.646735][T22854] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1061.782319][T23248] netlink: 'syz.5.6437': attribute type 22 has an invalid length. [ 1061.796169][T23248] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6437'. [ 1061.929129][T15172] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1061.947038][T15172] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1061.969678][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1062.017011][ T4335] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1062.028231][ T4335] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1062.058858][T15172] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1062.519441][T23272] sctp: [Deprecated]: syz.2.6443 (pid 23272) Use of int in maxseg socket option. [ 1062.519441][T23272] Use struct sctp_assoc_value instead [ 1062.781203][T23281] netlink: 'syz.6.6447': attribute type 21 has an invalid length. [ 1062.853981][T23275] netlink: 126588 bytes leftover after parsing attributes in process `syz.5.6444'. [ 1063.871953][ T4283] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1063.881771][ T4283] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1063.894358][ T4283] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1063.902513][ T4283] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1063.910533][ T4283] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1063.919688][ T4283] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1064.385870][T23332] netlink: 'syz.5.6462': attribute type 29 has an invalid length. [ 1064.480500][T23332] netlink: 'syz.5.6462': attribute type 29 has an invalid length. [ 1064.491890][T23333] netlink: 'syz.5.6462': attribute type 29 has an invalid length. [ 1064.512070][T23336] netlink: 'syz.5.6462': attribute type 29 has an invalid length. [ 1064.528535][T23312] chnl_net:caif_netlink_parms(): no params data found [ 1064.570210][T23335] netlink: 'syz.4.6465': attribute type 21 has an invalid length. [ 1064.580861][T23335] netlink: 'syz.4.6465': attribute type 6 has an invalid length. [ 1064.595638][T23332] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.6462'. [ 1064.679256][T23335] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.6465'. [ 1064.703281][T23335] netlink: zone id is out of range [ 1064.738673][T23335] netlink: zone id is out of range [ 1064.747058][T23335] netlink: zone id is out of range [ 1064.756782][T23335] netlink: zone id is out of range [ 1064.763078][T23335] netlink: zone id is out of range [ 1064.769163][T23335] netlink: zone id is out of range [ 1064.783836][T23335] netlink: zone id is out of range [ 1064.790116][T23335] netlink: zone id is out of range [ 1064.798811][T23335] netlink: zone id is out of range [ 1064.805986][T23335] netlink: zone id is out of range [ 1064.944823][T23312] bridge0: port 1(bridge_slave_0) entered blocking state [ 1064.954021][T23312] bridge0: port 1(bridge_slave_0) entered disabled state [ 1064.962289][T23312] device bridge_slave_0 entered promiscuous mode [ 1064.994665][T23312] bridge0: port 2(bridge_slave_1) entered blocking state [ 1065.018069][T23312] bridge0: port 2(bridge_slave_1) entered disabled state [ 1065.073937][T23312] device bridge_slave_1 entered promiscuous mode [ 1065.097928][T23347] netlink: 'syz.4.6468': attribute type 11 has an invalid length. [ 1065.164901][T23347] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.6468'. [ 1065.170497][T23312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1065.365695][T23351] netlink: 'syz.4.6468': attribute type 10 has an invalid length. [ 1065.466103][T23351] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1065.490176][T23312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1065.648455][ T4402] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1065.746643][T23344] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1065.773420][T23312] team0: Port device team_slave_0 added [ 1065.848737][T23312] team0: Port device team_slave_1 added [ 1065.982839][ T4283] Bluetooth: hci4: command 0x0409 tx timeout [ 1066.021137][ T4402] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1066.208021][ T4402] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1066.241997][T23312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1066.256786][T23312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1066.306585][T23312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1066.341937][ T4402] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1066.360245][T23376] netlink: 'syz.6.6478': attribute type 10 has an invalid length. [ 1066.368481][T23376] netlink: 55 bytes leftover after parsing attributes in process `syz.6.6478'. [ 1066.397851][T23312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1066.405253][T23312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1066.450383][T23312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1066.552040][T23312] device hsr_slave_0 entered promiscuous mode [ 1066.561655][T23312] device hsr_slave_1 entered promiscuous mode [ 1066.571876][T23312] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1066.587229][T23312] Cannot create hsr debugfs directory [ 1066.858603][ T4402] tipc: Left network mode [ 1067.150058][ T4402] device ip6gretap0 left promiscuous mode [ 1067.164511][ T4402] : port 1(ip6gretap0) entered disabled state [ 1067.773234][T23416] netlink: 'syz.6.6490': attribute type 1 has an invalid length. [ 1067.822075][T23416] netlink: 157116 bytes leftover after parsing attributes in process `syz.6.6490'. [ 1068.045918][T23429] netlink: 132 bytes leftover after parsing attributes in process `syz.6.6493'. [ 1068.063542][ T4283] Bluetooth: hci4: command 0x041b tx timeout [ 1068.093754][ T4283] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 1069.678383][T23472] sctp: [Deprecated]: syz.4.6500 (pid 23472) Use of int in maxseg socket option. [ 1069.678383][T23472] Use struct sctp_assoc_value instead [ 1070.085315][T23312] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1070.128566][T23312] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1070.136654][ T4283] Bluetooth: hci2: command 0x2016 tx timeout [ 1070.142623][T21391] Bluetooth: hci4: command 0x040f tx timeout [ 1070.240673][T23476] netlink: 'syz.5.6508': attribute type 3 has an invalid length. [ 1070.282647][T23476] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.6508'. [ 1070.307396][T23312] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1070.340488][T23312] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1070.414806][ T4402] device hsr_slave_0 left promiscuous mode [ 1070.437379][ T4402] device bridge_slave_0 left promiscuous mode [ 1070.462706][ T4402] bridge0: port 1(bridge_slave_0) entered disabled state [ 1070.525376][ T4402] device veth0_macvtap left promiscuous mode [ 1070.649656][T23499] netlink: 'syz.2.6510': attribute type 1 has an invalid length. [ 1070.682952][T23499] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.6510'. [ 1070.715032][T23498] netlink: 'syz.2.6510': attribute type 1 has an invalid length. [ 1070.768769][T23498] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.6510'. [ 1070.933382][T23518] FAULT_INJECTION: forcing a failure. [ 1070.933382][T23518] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1070.953814][T23518] CPU: 0 PID: 23518 Comm: syz.5.6516 Not tainted syzkaller #0 [ 1070.961338][T23518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1070.971404][T23518] Call Trace: [ 1070.974683][T23518] [ 1070.977610][T23518] dump_stack_lvl+0x188/0x24e [ 1070.982300][T23518] ? show_regs_print_info+0x12/0x12 [ 1070.987498][T23518] ? load_image+0x410/0x410 [ 1070.992000][T23518] ? __lock_acquire+0x7c40/0x7c40 [ 1070.997028][T23518] should_fail_ex+0x390/0x4c0 [ 1071.001707][T23518] _copy_from_user+0x2c/0x170 [ 1071.006415][T23518] __sys_bpf+0x2ea/0x780 [ 1071.010671][T23518] ? bpf_link_show_fdinfo+0x380/0x380 [ 1071.016056][T23518] ? lock_chain_count+0x20/0x20 [ 1071.020913][T23518] __x64_sys_bpf+0x78/0x90 [ 1071.025461][T23518] do_syscall_64+0x4c/0xa0 [ 1071.029881][T23518] ? clear_bhb_loop+0x60/0xb0 [ 1071.034564][T23518] ? clear_bhb_loop+0x60/0xb0 [ 1071.039254][T23518] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1071.045270][T23518] RIP: 0033:0x7f87d559e0d9 [ 1071.049882][T23518] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1071.069500][T23518] RSP: 002b:00007f87d64e8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1071.077940][T23518] RAX: ffffffffffffffda RBX: 00007f87d5825fa0 RCX: 00007f87d559e0d9 [ 1071.085911][T23518] RDX: 0000000000000094 RSI: 0000200000000400 RDI: 0000000000000005 [ 1071.094143][T23518] RBP: 00007f87d64e8090 R08: 0000000000000000 R09: 0000000000000000 [ 1071.102107][T23518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1071.110079][T23518] R13: 00007f87d5826038 R14: 00007f87d5825fa0 R15: 00007fff6390f9c8 [ 1071.118063][T23518] [ 1072.027379][T23507] netlink: 'syz.6.6512': attribute type 21 has an invalid length. [ 1072.037866][T23507] netlink: 132 bytes leftover after parsing attributes in process `syz.6.6512'. [ 1072.052966][T23510] netlink: 'syz.6.6512': attribute type 21 has an invalid length. [ 1072.061105][T23524] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.6517'. [ 1072.072760][T23510] netlink: 128 bytes leftover after parsing attributes in process `syz.6.6512'. [ 1072.092144][T23510] netlink: 'syz.6.6512': attribute type 5 has an invalid length. [ 1072.108132][T23514] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.6512'. [ 1072.127689][T23534] netlink: 'syz.2.6518': attribute type 3 has an invalid length. [ 1072.144962][T23534] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.6518'. [ 1072.212576][ T4289] Bluetooth: hci4: command 0x0419 tx timeout [ 1072.489886][T23539] device sit0 entered promiscuous mode [ 1072.742953][T23312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1072.776408][T15143] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1072.800498][T15143] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1072.819111][T23312] 8021q: adding VLAN 0 to HW filter on device team0 [ 1072.867374][T15172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1072.899740][T15172] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1072.923864][T15172] bridge0: port 1(bridge_slave_0) entered blocking state [ 1072.931128][T15172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1072.989097][T15172] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1073.021531][T15172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1073.092617][T15172] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1073.101902][T15172] bridge0: port 2(bridge_slave_1) entered blocking state [ 1073.109099][T15172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1073.126333][T15172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1073.182208][T15172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1073.199546][T15172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1073.216874][T15172] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1073.243887][T15172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1073.253454][T15172] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1073.273948][T15172] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1073.289990][T15172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1073.317537][T15172] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1073.356768][ T4941] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1073.399639][ T4941] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1073.442251][T23312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1073.575629][T23578] netlink: 'syz.4.6532': attribute type 3 has an invalid length. [ 1073.595822][T23578] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.6532'. [ 1074.184681][T23595] netlink: 'syz.2.6537': attribute type 21 has an invalid length. [ 1074.524301][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1074.531898][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1074.553416][T23312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1074.588604][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1074.613874][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1074.663423][T15172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1074.690466][T15172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1074.736289][T15172] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1074.767824][T15172] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1074.789928][T23312] device veth0_vlan entered promiscuous mode [ 1074.914697][T23312] device veth1_vlan entered promiscuous mode [ 1074.999275][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1075.023852][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1075.068723][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1075.083765][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1075.170621][T23312] device veth0_macvtap entered promiscuous mode [ 1075.234087][T23312] device veth1_macvtap entered promiscuous mode [ 1075.248108][T15161] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1075.263395][T15161] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1075.398899][T23638] netlink: 'syz.2.6550': attribute type 3 has an invalid length. [ 1075.432625][T23638] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.6550'. [ 1075.455461][T23312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1075.468339][T23312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1075.498343][T23312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1075.508245][T23650] FAULT_INJECTION: forcing a failure. [ 1075.508245][T23650] name failslab, interval 1, probability 0, space 0, times 0 [ 1075.509127][T23312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1075.529752][T23650] CPU: 0 PID: 23650 Comm: syz.6.6554 Not tainted syzkaller #0 [ 1075.533991][T23312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1075.538662][T23650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1075.538674][T23650] Call Trace: [ 1075.549603][T23312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1075.559103][T23650] [ 1075.559114][T23650] dump_stack_lvl+0x188/0x24e [ 1075.559144][T23650] ? show_regs_print_info+0x12/0x12 [ 1075.559165][T23650] ? load_image+0x410/0x410 [ 1075.562996][T23312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1075.572209][T23650] ? __might_sleep+0xd0/0xd0 [ 1075.576082][T23312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1075.579793][T23650] ? __lock_acquire+0x7c40/0x7c40 [ 1075.587095][T23312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1075.589468][T23650] should_fail_ex+0x390/0x4c0 [ 1075.589501][T23650] should_failslab+0x5/0x20 [ 1075.589517][T23650] slab_pre_alloc_hook+0x59/0x300 [ 1075.589536][T23650] ? __get_vm_area_node+0x122/0x330 [ 1075.589558][T23650] __kmem_cache_alloc_node+0x4f/0x270 [ 1075.589578][T23650] ? __get_vm_area_node+0x122/0x330 [ 1075.589599][T23650] kmalloc_node_trace+0x22/0xe0 [ 1075.589626][T23650] __get_vm_area_node+0x122/0x330 [ 1075.589650][T23650] __vmalloc_node_range+0x357/0x1380 [ 1075.589671][T23650] ? bpf_prog_alloc_no_stats+0x37/0x3a0 [ 1075.589715][T23650] ? aa_get_newest_label+0xf9/0x5b0 [ 1075.589739][T23650] ? free_vm_area+0x50/0x50 [ 1075.589758][T23650] ? end_current_label_crit_section+0x170/0x170 [ 1075.589778][T23650] ? __lock_acquire+0x7c40/0x7c40 [ 1075.589801][T23650] ? bpf_prog_alloc_no_stats+0x37/0x3a0 [ 1075.589822][T23650] __vmalloc+0x76/0x80 [ 1075.708228][T23650] ? bpf_prog_alloc_no_stats+0x37/0x3a0 [ 1075.713879][T23650] bpf_prog_alloc_no_stats+0x37/0x3a0 [ 1075.719276][T23650] ? bpf_prog_alloc+0x13/0x1b0 [ 1075.724048][T23650] bpf_prog_alloc+0x1c/0x1b0 [ 1075.728689][T23650] bpf_prog_load+0x7d4/0x1530 [ 1075.733380][T23650] ? map_freeze+0x390/0x390 [ 1075.737920][T23650] ? __might_fault+0xa6/0x120 [ 1075.742593][T23650] ? __might_fault+0xa6/0x120 [ 1075.747261][T23650] ? __might_fault+0xc2/0x120 [ 1075.752016][T23650] ? __might_fault+0xa6/0x120 [ 1075.756788][T23650] ? bpf_lsm_bpf+0x5/0x10 [ 1075.761138][T23650] ? security_bpf+0x7a/0xa0 [ 1075.765653][T23650] __sys_bpf+0x5b8/0x780 [ 1075.769923][T23650] ? bpf_link_show_fdinfo+0x380/0x380 [ 1075.775351][T23650] ? lock_chain_count+0x20/0x20 [ 1075.780233][T23650] __x64_sys_bpf+0x78/0x90 [ 1075.784680][T23650] do_syscall_64+0x4c/0xa0 [ 1075.789087][T23650] ? clear_bhb_loop+0x60/0xb0 [ 1075.793768][T23650] ? clear_bhb_loop+0x60/0xb0 [ 1075.798458][T23650] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1075.804354][T23650] RIP: 0033:0x7fe2e6b9e0d9 [ 1075.808779][T23650] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1075.828401][T23650] RSP: 002b:00007fe2e7abd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1075.836814][T23650] RAX: ffffffffffffffda RBX: 00007fe2e6e25fa0 RCX: 00007fe2e6b9e0d9 [ 1075.844804][T23650] RDX: 0000000000000094 RSI: 0000200000000400 RDI: 0000000000000005 [ 1075.852789][T23650] RBP: 00007fe2e7abd090 R08: 0000000000000000 R09: 0000000000000000 [ 1075.860752][T23650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1075.868716][T23650] R13: 00007fe2e6e26038 R14: 00007fe2e6e25fa0 R15: 00007fffabab0b58 [ 1075.876703][T23650] [ 1075.894105][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1075.911802][T23650] syz.6.6554: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz6,mems_allowed=0-1 [ 1075.929852][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1075.943917][T23312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1075.946448][T23650] CPU: 0 PID: 23650 Comm: syz.6.6554 Not tainted syzkaller #0 [ 1075.955149][T23312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1075.961887][T23650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1075.961900][T23650] Call Trace: [ 1075.961908][T23650] [ 1075.961915][T23650] dump_stack_lvl+0x188/0x24e [ 1075.972436][T23312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1075.981804][T23650] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 1075.981837][T23650] ? show_regs_print_info+0x12/0x12 [ 1075.981859][T23650] ? load_image+0x410/0x410 [ 1075.985808][T23312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1075.988075][T23650] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 1075.988103][T23650] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 1075.993195][T23312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1076.003172][T23650] warn_alloc+0x242/0x330 [ 1076.003200][T23650] ? __get_vm_area_node+0x122/0x330 [ 1076.003223][T23650] ? zone_watermark_ok_safe+0x270/0x270 [ 1076.003242][T23650] ? rcu_is_watching+0x11/0xa0 [ 1076.003269][T23650] ? __get_vm_area_node+0x318/0x330 [ 1076.003291][T23650] __vmalloc_node_range+0x37c/0x1380 [ 1076.003326][T23650] ? aa_get_newest_label+0xf9/0x5b0 [ 1076.003348][T23650] ? free_vm_area+0x50/0x50 [ 1076.003367][T23650] ? end_current_label_crit_section+0x170/0x170 [ 1076.003389][T23650] ? __lock_acquire+0x7c40/0x7c40 [ 1076.003413][T23650] ? bpf_prog_alloc_no_stats+0x37/0x3a0 [ 1076.003436][T23650] __vmalloc+0x76/0x80 [ 1076.003454][T23650] ? bpf_prog_alloc_no_stats+0x37/0x3a0 [ 1076.003476][T23650] bpf_prog_alloc_no_stats+0x37/0x3a0 [ 1076.003554][T23650] ? bpf_prog_alloc+0x13/0x1b0 [ 1076.003603][T23650] bpf_prog_alloc+0x1c/0x1b0 [ 1076.003625][T23650] bpf_prog_load+0x7d4/0x1530 [ 1076.003657][T23650] ? map_freeze+0x390/0x390 [ 1076.003677][T23650] ? __might_fault+0xa6/0x120 [ 1076.003702][T23650] ? __might_fault+0xa6/0x120 [ 1076.003718][T23650] ? __might_fault+0xc2/0x120 [ 1076.003734][T23650] ? __might_fault+0xa6/0x120 [ 1076.003751][T23650] ? bpf_lsm_bpf+0x5/0x10 [ 1076.003770][T23650] ? security_bpf+0x7a/0xa0 [ 1076.003810][T23650] __sys_bpf+0x5b8/0x780 [ 1076.003831][T23650] ? bpf_link_show_fdinfo+0x380/0x380 [ 1076.003865][T23650] ? lock_chain_count+0x20/0x20 [ 1076.003894][T23650] __x64_sys_bpf+0x78/0x90 [ 1076.003916][T23650] do_syscall_64+0x4c/0xa0 [ 1076.003935][T23650] ? clear_bhb_loop+0x60/0xb0 [ 1076.003955][T23650] ? clear_bhb_loop+0x60/0xb0 [ 1076.003976][T23650] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1076.003995][T23650] RIP: 0033:0x7fe2e6b9e0d9 [ 1076.004011][T23650] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1076.004025][T23650] RSP: 002b:00007fe2e7abd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1076.004047][T23650] RAX: ffffffffffffffda RBX: 00007fe2e6e25fa0 RCX: 00007fe2e6b9e0d9 [ 1076.004060][T23650] RDX: 0000000000000094 RSI: 0000200000000400 RDI: 0000000000000005 [ 1076.004071][T23650] RBP: 00007fe2e7abd090 R08: 0000000000000000 R09: 0000000000000000 [ 1076.004081][T23650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1076.004091][T23650] R13: 00007fe2e6e26038 R14: 00007fe2e6e25fa0 R15: 00007fffabab0b58 [ 1076.004117][T23650] [ 1076.071428][T23650] Mem-Info: [ 1076.102573][T23312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1076.152487][T23650] active_anon:8013 inactive_anon:0 isolated_anon:0 [ 1076.152487][T23650] active_file:21461 inactive_file:40364 isolated_file:0 [ 1076.152487][T23650] unevictable:768 dirty:131 writeback:0 [ 1076.152487][T23650] slab_reclaimable:21723 slab_unreclaimable:95982 [ 1076.152487][T23650] mapped:30022 shmem:1385 pagetables:759 [ 1076.152487][T23650] sec_pagetables:0 bounce:0 [ 1076.152487][T23650] kernel_misc_reclaimable:0 [ 1076.152487][T23650] free:1308361 free_pcp:13379 free_cma:0 [ 1076.155005][T23312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1076.205789][T23650] Node 0 active_anon:32052kB inactive_anon:0kB active_file:85844kB inactive_file:161260kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120088kB dirty:524kB writeback:0kB shmem:4004kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11788kB pagetables:3136kB sec_pagetables:0kB all_unreclaimable? no [ 1076.209557][T23312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1076.216718][T23650] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1076.244633][T23312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1076.353691][T23650] Node 0 [ 1076.384351][T23312] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1076.452295][T23312] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1076.462803][T23312] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1076.471603][T23312] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1076.493013][T23650] DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1076.534804][T23650] lowmem_reserve[]: 0 2527 2528 2528 2528 [ 1076.551465][ T4941] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1076.560713][ T4941] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1076.569958][T23650] Node 0 DMA32 free:1321476kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:32052kB inactive_anon:0kB active_file:85844kB inactive_file:161260kB unevictable:1536kB writepending:524kB present:3129332kB managed:2592912kB mlocked:0kB bounce:0kB free_pcp:30440kB local_pcp:16744kB free_cma:0kB [ 1076.611736][T23658] netlink: 'syz.5.6557': attribute type 21 has an invalid length. [ 1076.621895][T23650] lowmem_reserve[]: 0 0 1 1 1 [ 1076.626822][T23650] Node 0 Normal free:12kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:4kB free_cma:0kB [ 1076.746374][T23650] lowmem_reserve[]: 0 0 0 0 0 [ 1076.771579][T23650] Node 1 Normal free:3896596kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:22180kB local_pcp:10464kB free_cma:0kB [ 1076.814922][T23650] lowmem_reserve[]: 0 0 0 0 0 [ 1076.820307][T23650] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1076.833638][T23662] netlink: 126588 bytes leftover after parsing attributes in process `syz.5.6557'. [ 1076.846872][T23665] netlink: 'syz.2.6558': attribute type 21 has an invalid length. [ 1076.855639][T23650] Node 0 DMA32: 187*4kB (ME) 1029*8kB (UME) 1419*16kB (UME) 1478*32kB (UME) 1468*64kB (UME) 935*128kB (UME) 303*256kB (UME) 100*512kB (UME) 5*1024kB (ME) 7*2048kB (UM) 215*4096kB (UM) = 1321476kB [ 1076.879395][T23662] netlink: 43 bytes leftover after parsing attributes in process `syz.5.6557'. [ 1076.891954][T23650] Node 0 Normal: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 1076.919080][ T4335] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1076.962686][ T4335] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1076.971488][T15143] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1076.983861][T23650] Node 1 Normal: 245*4kB (UME) 62*8kB (UME) 31*16kB (UME) 35*32kB (UME) 20*64kB (UME) 10*128kB (UME) 3*256kB (UE) 2*512kB (UM) 2*1024kB (UE) 2*2048kB (UE) 948*4096kB (M) = 3896596kB [ 1077.018319][ T4335] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1077.027103][ T4335] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1077.047915][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1077.057945][T23650] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1077.088552][T23650] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1077.091423][T23674] netlink: 'syz.4.6560': attribute type 21 has an invalid length. [ 1077.152531][T23650] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1077.182738][T23679] FAULT_INJECTION: forcing a failure. [ 1077.182738][T23679] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1077.211126][T23650] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1077.242304][T23650] 63210 total pagecache pages [ 1077.247646][T23679] CPU: 0 PID: 23679 Comm: syz.4.6560 Not tainted syzkaller #0 [ 1077.255132][T23679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1077.265184][T23679] Call Trace: [ 1077.268459][T23679] [ 1077.271392][T23679] dump_stack_lvl+0x188/0x24e [ 1077.276081][T23679] ? show_regs_print_info+0x12/0x12 [ 1077.281280][T23679] ? load_image+0x410/0x410 [ 1077.285784][T23679] ? __lock_acquire+0x7c40/0x7c40 [ 1077.290812][T23679] should_fail_ex+0x390/0x4c0 [ 1077.295496][T23679] _copy_from_user+0x2c/0x170 [ 1077.300191][T23679] ___sys_sendmsg+0x1c3/0x360 [ 1077.304875][T23679] ? __sys_sendmsg+0x2a0/0x2a0 [ 1077.309693][T23679] ? __lock_acquire+0x7c40/0x7c40 [ 1077.314732][T23679] __se_sys_sendmsg+0x1c3/0x2b0 [ 1077.319582][T23679] ? __x64_sys_sendmsg+0x80/0x80 [ 1077.324526][T23679] ? lockdep_hardirqs_on+0x94/0x140 [ 1077.329729][T23679] do_syscall_64+0x4c/0xa0 [ 1077.334151][T23679] ? clear_bhb_loop+0x60/0xb0 [ 1077.338829][T23679] ? clear_bhb_loop+0x60/0xb0 [ 1077.343504][T23679] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1077.349402][T23679] RIP: 0033:0x7f0db019e0d9 [ 1077.353814][T23679] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1077.373417][T23679] RSP: 002b:00007f0db1027028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1077.381828][T23679] RAX: ffffffffffffffda RBX: 00007f0db0426180 RCX: 00007f0db019e0d9 [ 1077.389803][T23679] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 1077.397870][T23679] RBP: 00007f0db1027090 R08: 0000000000000000 R09: 0000000000000000 [ 1077.405870][T23679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1077.413839][T23679] R13: 00007f0db0426218 R14: 00007f0db0426180 R15: 00007ffea26d6558 [ 1077.421822][T23679] [ 1077.426536][T23650] 0 pages in swap cache [ 1077.454849][T23650] Free swap = 124996kB [ 1077.501739][T23650] Total swap = 124996kB [ 1077.510280][T23650] 2097051 pages RAM [ 1077.526575][T23650] 0 pages HighMem/MovableOnly [ 1077.531322][T23650] 415222 pages reserved [ 1077.549195][T23650] 0 pages cma reserved [ 1077.666693][ T4283] Bluetooth: hci3: unexpected event 0x31 length: 151 > 6 [ 1081.048680][T23724] netlink: 'syz.5.6574': attribute type 21 has an invalid length. [ 1081.143364][T23728] netlink: 'syz.6.6575': attribute type 21 has an invalid length. [ 1081.330145][T23736] netlink: 'syz.5.6578': attribute type 21 has an invalid length. [ 1081.390188][T23745] FAULT_INJECTION: forcing a failure. [ 1081.390188][T23745] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1081.397620][T23746] netlink: 132 bytes leftover after parsing attributes in process `syz.6.6581'. [ 1081.428546][T23745] CPU: 1 PID: 23745 Comm: syz.5.6578 Not tainted syzkaller #0 [ 1081.436065][T23745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1081.446144][T23745] Call Trace: [ 1081.449431][T23745] [ 1081.452371][T23745] dump_stack_lvl+0x188/0x24e [ 1081.457080][T23745] ? show_regs_print_info+0x12/0x12 [ 1081.462306][T23745] ? load_image+0x410/0x410 [ 1081.466841][T23745] ? __lock_acquire+0x7c40/0x7c40 [ 1081.471909][T23745] should_fail_ex+0x390/0x4c0 [ 1081.476625][T23745] _copy_from_user+0x2c/0x170 [ 1081.481332][T23745] iovec_from_user+0x143/0x360 [ 1081.486130][T23745] __import_iovec+0x6c/0x510 [ 1081.490752][T23745] import_iovec+0x6f/0xa0 [ 1081.495112][T23745] ___sys_sendmsg+0x252/0x360 [ 1081.499823][T23745] ? __sys_sendmsg+0x2a0/0x2a0 [ 1081.504765][T23745] ? __lock_acquire+0x7c40/0x7c40 [ 1081.509963][T23745] __se_sys_sendmsg+0x1c3/0x2b0 [ 1081.514852][T23745] ? ct_nmi_exit+0x145/0x1c0 [ 1081.519474][T23745] ? __x64_sys_sendmsg+0x80/0x80 [ 1081.524454][T23745] ? lockdep_hardirqs_on+0x94/0x140 [ 1081.529684][T23745] do_syscall_64+0x4c/0xa0 [ 1081.534135][T23745] ? clear_bhb_loop+0x60/0xb0 [ 1081.538836][T23745] ? clear_bhb_loop+0x60/0xb0 [ 1081.543517][T23745] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1081.549409][T23745] RIP: 0033:0x7f87d559e0d9 [ 1081.553826][T23745] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1081.573462][T23745] RSP: 002b:00007f87d64c7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1081.581892][T23745] RAX: ffffffffffffffda RBX: 00007f87d5826090 RCX: 00007f87d559e0d9 [ 1081.589891][T23745] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 1081.597858][T23745] RBP: 00007f87d64c7090 R08: 0000000000000000 R09: 0000000000000000 [ 1081.605925][T23745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1081.613891][T23745] R13: 00007f87d5826128 R14: 00007f87d5826090 R15: 00007fff6390f9c8 [ 1081.621867][T23745] [ 1081.713589][T23743] netlink: 'syz.2.6580': attribute type 5 has an invalid length. [ 1082.029163][T23756] netlink: 'syz.4.6583': attribute type 21 has an invalid length. [ 1082.063861][T23756] netlink: 'syz.4.6583': attribute type 1 has an invalid length. [ 1082.676783][T23778] netlink: 'syz.2.6591': attribute type 39 has an invalid length. [ 1085.192043][T23787] netlink: 'syz.5.6594': attribute type 21 has an invalid length. [ 1085.368368][T23795] netlink: 'syz.6.6595': attribute type 11 has an invalid length. [ 1085.395315][T23795] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.6595'. [ 1085.486450][T23798] netlink: 'syz.4.6597': attribute type 21 has an invalid length. [ 1085.510619][T23790] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1085.547616][T23800] FAULT_INJECTION: forcing a failure. [ 1085.547616][T23800] name failslab, interval 1, probability 0, space 0, times 0 [ 1085.590979][T23800] CPU: 1 PID: 23800 Comm: syz.4.6597 Not tainted syzkaller #0 [ 1085.598502][T23800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1085.608583][T23800] Call Trace: [ 1085.611877][T23800] [ 1085.614826][T23800] dump_stack_lvl+0x188/0x24e [ 1085.619537][T23800] ? show_regs_print_info+0x12/0x12 [ 1085.624763][T23800] ? load_image+0x410/0x410 [ 1085.629299][T23800] ? __might_sleep+0xd0/0xd0 [ 1085.633917][T23800] ? __lock_acquire+0x7c40/0x7c40 [ 1085.639071][T23800] should_fail_ex+0x390/0x4c0 [ 1085.643784][T23800] should_failslab+0x5/0x20 [ 1085.648434][T23800] slab_pre_alloc_hook+0x59/0x300 [ 1085.653495][T23800] kmem_cache_alloc_node+0x5a/0x310 [ 1085.658718][T23800] ? __alloc_skb+0xf9/0x7d0 [ 1085.663241][T23800] __alloc_skb+0xf9/0x7d0 [ 1085.667591][T23800] netlink_sendmsg+0x654/0xbd0 [ 1085.672363][T23800] ? netlink_getsockopt+0x550/0x550 [ 1085.677657][T23800] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1085.683294][T23800] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1085.688750][T23800] ? security_socket_sendmsg+0x7c/0xa0 [ 1085.694221][T23800] ? netlink_getsockopt+0x550/0x550 [ 1085.699441][T23800] ____sys_sendmsg+0x5ed/0x9a0 [ 1085.704220][T23800] ? __sys_sendmsg_sock+0x30/0x30 [ 1085.709248][T23800] ? __import_iovec+0x306/0x510 [ 1085.714106][T23800] ? import_iovec+0x6f/0xa0 [ 1085.718608][T23800] ___sys_sendmsg+0x2a2/0x360 [ 1085.723291][T23800] ? __sys_sendmsg+0x2a0/0x2a0 [ 1085.728072][T23800] ? __lock_acquire+0x7c40/0x7c40 [ 1085.733114][T23800] __se_sys_sendmsg+0x1c3/0x2b0 [ 1085.737997][T23800] ? __x64_sys_sendmsg+0x80/0x80 [ 1085.742946][T23800] ? lockdep_hardirqs_on+0x94/0x140 [ 1085.748171][T23800] do_syscall_64+0x4c/0xa0 [ 1085.752592][T23800] ? clear_bhb_loop+0x60/0xb0 [ 1085.757265][T23800] ? clear_bhb_loop+0x60/0xb0 [ 1085.761958][T23800] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1085.767856][T23800] RIP: 0033:0x7f0db019e0d9 [ 1085.772273][T23800] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1085.791964][T23800] RSP: 002b:00007f0db1048028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1085.800375][T23800] RAX: ffffffffffffffda RBX: 00007f0db0426090 RCX: 00007f0db019e0d9 [ 1085.808339][T23800] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 1085.816304][T23800] RBP: 00007f0db1048090 R08: 0000000000000000 R09: 0000000000000000 [ 1085.824265][T23800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1085.832226][T23800] R13: 00007f0db0426128 R14: 00007f0db0426090 R15: 00007ffea26d6558 [ 1085.840201][T23800] [ 1085.972051][T23803] device syzkaller0 entered promiscuous mode [ 1088.817878][T23810] netlink: 'syz.6.6601': attribute type 5 has an invalid length. [ 1088.826340][T23822] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6603'. [ 1088.841522][T23817] netlink: 'syz.4.6603': attribute type 12 has an invalid length. [ 1088.854052][T23817] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6603'. [ 1088.998108][T23837] netlink: 132 bytes leftover after parsing attributes in process `syz.6.6610'. [ 1089.531529][T23857] netlink: 60 bytes leftover after parsing attributes in process `syz.5.6620'. [ 1089.649710][T23861] netlink: 132 bytes leftover after parsing attributes in process `syz.6.6622'. [ 1089.674509][T23861] netlink: 'syz.6.6622': attribute type 12 has an invalid length. [ 1089.683038][T23861] netlink: 132 bytes leftover after parsing attributes in process `syz.6.6622'. [ 1089.915446][T23859] netlink: 'syz.4.6621': attribute type 5 has an invalid length. [ 1090.073090][T23869] netlink: 132 bytes leftover after parsing attributes in process `syz.6.6625'. [ 1091.356827][T23909] netlink: 'syz.5.6641': attribute type 21 has an invalid length. [ 1091.408738][T23913] FAULT_INJECTION: forcing a failure. [ 1091.408738][T23913] name failslab, interval 1, probability 0, space 0, times 0 [ 1091.433014][T23913] CPU: 0 PID: 23913 Comm: syz.5.6641 Not tainted syzkaller #0 [ 1091.440567][T23913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1091.450646][T23913] Call Trace: [ 1091.453945][T23913] [ 1091.456887][T23913] dump_stack_lvl+0x188/0x24e [ 1091.461595][T23913] ? show_regs_print_info+0x12/0x12 [ 1091.466823][T23913] ? load_image+0x410/0x410 [ 1091.471358][T23913] ? verify_lock_unused+0x140/0x140 [ 1091.476599][T23913] should_fail_ex+0x390/0x4c0 [ 1091.481313][T23913] should_failslab+0x5/0x20 [ 1091.485839][T23913] slab_pre_alloc_hook+0x59/0x300 [ 1091.490920][T23913] kmem_cache_alloc+0x56/0x2f0 [ 1091.495707][T23913] ? skb_clone+0x1e7/0x370 [ 1091.500165][T23913] skb_clone+0x1e7/0x370 [ 1091.504418][T23913] __netlink_deliver_tap+0x3e4/0x7e0 [ 1091.509809][T23913] ? netlink_deliver_tap+0x2e/0x1b0 [ 1091.515033][T23913] netlink_deliver_tap+0x19c/0x1b0 [ 1091.520143][T23913] netlink_unicast+0x777/0x920 [ 1091.524998][T23913] netlink_sendmsg+0x8ad/0xbd0 [ 1091.529771][T23913] ? netlink_getsockopt+0x550/0x550 [ 1091.534970][T23913] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1091.540773][T23913] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1091.546053][T23913] ? security_socket_sendmsg+0x7c/0xa0 [ 1091.551509][T23913] ? netlink_getsockopt+0x550/0x550 [ 1091.556708][T23913] ____sys_sendmsg+0x5ed/0x9a0 [ 1091.561480][T23913] ? __sys_sendmsg_sock+0x30/0x30 [ 1091.566501][T23913] ? __import_iovec+0x306/0x510 [ 1091.571356][T23913] ? import_iovec+0x6f/0xa0 [ 1091.575861][T23913] ___sys_sendmsg+0x2a2/0x360 [ 1091.580564][T23913] ? __sys_sendmsg+0x2a0/0x2a0 [ 1091.585339][T23913] ? __lock_acquire+0x7c40/0x7c40 [ 1091.590380][T23913] __se_sys_sendmsg+0x1c3/0x2b0 [ 1091.595251][T23913] ? __x64_sys_sendmsg+0x80/0x80 [ 1091.600224][T23913] ? lockdep_hardirqs_on+0x94/0x140 [ 1091.605432][T23913] do_syscall_64+0x4c/0xa0 [ 1091.609935][T23913] ? clear_bhb_loop+0x60/0xb0 [ 1091.614612][T23913] ? clear_bhb_loop+0x60/0xb0 [ 1091.619453][T23913] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1091.625371][T23913] RIP: 0033:0x7f87d559e0d9 [ 1091.629788][T23913] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1091.649496][T23913] RSP: 002b:00007f87d64c7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1091.657910][T23913] RAX: ffffffffffffffda RBX: 00007f87d5826090 RCX: 00007f87d559e0d9 [ 1091.665911][T23913] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 1091.673888][T23913] RBP: 00007f87d64c7090 R08: 0000000000000000 R09: 0000000000000000 [ 1091.681879][T23913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1091.689901][T23913] R13: 00007f87d5826128 R14: 00007f87d5826090 R15: 00007fff6390f9c8 [ 1091.697920][T23913] [ 1092.226251][T23929] netlink: 'syz.4.6649': attribute type 21 has an invalid length. [ 1092.242658][T23929] netlink: 'syz.4.6649': attribute type 12 has an invalid length. [ 1092.276513][T23929] netlink: 'syz.4.6649': attribute type 13 has an invalid length. [ 1092.319442][T23929] netlink: 'syz.4.6649': attribute type 14 has an invalid length. [ 1092.354184][T23929] netlink: 'syz.4.6649': attribute type 15 has an invalid length. [ 1092.394844][T23929] netlink: 12926 bytes leftover after parsing attributes in process `syz.4.6649'. [ 1093.102640][T23946] netlink: 9279 bytes leftover after parsing attributes in process `syz.1.6654'. [ 1093.611138][T23968] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.6659'. [ 1093.988023][T23980] validate_nla: 3 callbacks suppressed [ 1093.988039][T23980] netlink: 'syz.1.6663': attribute type 21 has an invalid length. [ 1094.076074][T23981] FAULT_INJECTION: forcing a failure. [ 1094.076074][T23981] name failslab, interval 1, probability 0, space 0, times 0 [ 1094.187415][T23981] CPU: 1 PID: 23981 Comm: syz.1.6663 Not tainted syzkaller #0 [ 1094.194936][T23981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1094.205095][T23981] Call Trace: [ 1094.208397][T23981] [ 1094.211351][T23981] dump_stack_lvl+0x188/0x24e [ 1094.216060][T23981] ? show_regs_print_info+0x12/0x12 [ 1094.221291][T23981] ? load_image+0x410/0x410 [ 1094.225812][T23981] ? __might_sleep+0xd0/0xd0 [ 1094.230421][T23981] ? __lock_acquire+0x7c40/0x7c40 [ 1094.235472][T23981] should_fail_ex+0x390/0x4c0 [ 1094.240176][T23981] should_failslab+0x5/0x20 [ 1094.244687][T23981] slab_pre_alloc_hook+0x59/0x300 [ 1094.249726][T23981] ? genl_start+0x14e/0x490 [ 1094.254242][T23981] __kmem_cache_alloc_node+0x4f/0x270 [ 1094.259627][T23981] ? genl_start+0x14e/0x490 [ 1094.264151][T23981] kmalloc_trace+0x26/0xe0 [ 1094.268587][T23981] genl_start+0x14e/0x490 [ 1094.273044][T23981] __netlink_dump_start+0x3f0/0x6f0 [ 1094.278282][T23981] genl_family_rcv_msg_dumpit+0x228/0x3c0 [ 1094.284031][T23981] ? genl_rcv_msg+0x790/0x790 [ 1094.288723][T23981] ? __mutex_lock+0x1ab/0xae0 [ 1094.293427][T23981] ? genl_family_rcv_msg_doit+0x350/0x350 [ 1094.299165][T23981] ? genl_start+0x490/0x490 [ 1094.303696][T23981] ? genl_lock_dumpit+0x90/0x90 [ 1094.308562][T23981] ? mutex_lock_nested+0x10/0x10 [ 1094.313542][T23981] ? genl_get_cmd+0xe4/0x8b0 [ 1094.318160][T23981] ? memcpy+0x3c/0x60 [ 1094.322168][T23981] ? genl_get_cmd+0x518/0x8b0 [ 1094.326861][T23981] genl_rcv_msg+0x5c8/0x790 [ 1094.331410][T23981] ? genl_bind+0x360/0x360 [ 1094.335870][T23981] ? tipc_nametbl_stop+0x12e0/0x12e0 [ 1094.341297][T23981] netlink_rcv_skb+0x1ef/0x440 [ 1094.346088][T23981] ? genl_bind+0x360/0x360 [ 1094.350518][T23981] ? netlink_ack+0x1160/0x1160 [ 1094.355310][T23981] ? down_read+0x1a8/0x2d0 [ 1094.359740][T23981] genl_rcv+0x24/0x40 [ 1094.363733][T23981] netlink_unicast+0x7ad/0x920 [ 1094.368551][T23981] netlink_sendmsg+0x8ad/0xbd0 [ 1094.373367][T23981] ? netlink_getsockopt+0x550/0x550 [ 1094.378594][T23981] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1094.384163][T23981] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1094.389475][T23981] ? security_socket_sendmsg+0x7c/0xa0 [ 1094.394965][T23981] ? netlink_getsockopt+0x550/0x550 [ 1094.400199][T23981] ____sys_sendmsg+0x5ed/0x9a0 [ 1094.405004][T23981] ? __sys_sendmsg_sock+0x30/0x30 [ 1094.410050][T23981] ? __import_iovec+0x306/0x510 [ 1094.414931][T23981] ? import_iovec+0x6f/0xa0 [ 1094.419473][T23981] ___sys_sendmsg+0x2a2/0x360 [ 1094.424200][T23981] ? __sys_sendmsg+0x2a0/0x2a0 [ 1094.429030][T23981] ? __lock_acquire+0x7c40/0x7c40 [ 1094.434130][T23981] __se_sys_sendmsg+0x1c3/0x2b0 [ 1094.439028][T23981] ? ct_nmi_exit+0x145/0x1c0 [ 1094.443647][T23981] ? __x64_sys_sendmsg+0x80/0x80 [ 1094.448646][T23981] ? lockdep_hardirqs_on+0x94/0x140 [ 1094.453878][T23981] do_syscall_64+0x4c/0xa0 [ 1094.458314][T23981] ? clear_bhb_loop+0x60/0xb0 [ 1094.463011][T23981] ? clear_bhb_loop+0x60/0xb0 [ 1094.467705][T23981] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1094.473648][T23981] RIP: 0033:0x7fe00179e0d9 [ 1094.478081][T23981] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1094.497716][T23981] RSP: 002b:00007fe0026a5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1094.506151][T23981] RAX: ffffffffffffffda RBX: 00007fe001a26090 RCX: 00007fe00179e0d9 [ 1094.514137][T23981] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 1094.522132][T23981] RBP: 00007fe0026a5090 R08: 0000000000000000 R09: 0000000000000000 [ 1094.530122][T23981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1094.538113][T23981] R13: 00007fe001a26128 R14: 00007fe001a26090 R15: 00007ffdb93366f8 [ 1094.546119][T23981] [ 1094.981235][T23994] netlink: 'syz.6.6668': attribute type 21 has an invalid length. [ 1095.000961][T23994] netlink: 'syz.6.6668': attribute type 12 has an invalid length. [ 1095.011955][T23994] netlink: 'syz.6.6668': attribute type 13 has an invalid length. [ 1095.029816][T23994] netlink: 'syz.6.6668': attribute type 14 has an invalid length. [ 1095.058914][T23994] netlink: 'syz.6.6668': attribute type 15 has an invalid length. [ 1095.084545][T23994] netlink: 'syz.6.6668': attribute type 16 has an invalid length. [ 1095.100381][T23994] netlink: 12926 bytes leftover after parsing attributes in process `syz.6.6668'. [ 1095.538286][T24014] netlink: 'syz.5.6674': attribute type 3 has an invalid length. [ 1095.571262][T24014] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.6674'. [ 1095.634954][T24024] netlink: 'syz.1.6678': attribute type 21 has an invalid length. [ 1095.883185][T24028] netlink: 'syz.1.6679': attribute type 21 has an invalid length. [ 1095.936760][T24035] FAULT_INJECTION: forcing a failure. [ 1095.936760][T24035] name failslab, interval 1, probability 0, space 0, times 0 [ 1096.041605][T24035] CPU: 1 PID: 24035 Comm: syz.1.6679 Not tainted syzkaller #0 [ 1096.049148][T24035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1096.059403][T24035] Call Trace: [ 1096.062708][T24035] [ 1096.065665][T24035] dump_stack_lvl+0x188/0x24e [ 1096.070424][T24035] ? show_regs_print_info+0x12/0x12 [ 1096.075666][T24035] ? load_image+0x410/0x410 [ 1096.080209][T24035] ? __might_sleep+0xd0/0xd0 [ 1096.084841][T24035] ? __lock_acquire+0x7c40/0x7c40 [ 1096.089899][T24035] should_fail_ex+0x390/0x4c0 [ 1096.094608][T24035] should_failslab+0x5/0x20 [ 1096.099127][T24035] slab_pre_alloc_hook+0x59/0x300 [ 1096.104264][T24035] ? genl_start+0x14e/0x490 [ 1096.108780][T24035] __kmem_cache_alloc_node+0x4f/0x270 [ 1096.114182][T24035] ? genl_start+0x14e/0x490 [ 1096.118701][T24035] kmalloc_trace+0x26/0xe0 [ 1096.123139][T24035] genl_start+0x14e/0x490 [ 1096.127485][T24035] __netlink_dump_start+0x3f0/0x6f0 [ 1096.132706][T24035] genl_family_rcv_msg_dumpit+0x228/0x3c0 [ 1096.138436][T24035] ? genl_rcv_msg+0x790/0x790 [ 1096.143115][T24035] ? __mutex_lock+0x1ab/0xae0 [ 1096.147820][T24035] ? genl_family_rcv_msg_doit+0x350/0x350 [ 1096.153550][T24035] ? genl_start+0x490/0x490 [ 1096.158059][T24035] ? genl_lock_dumpit+0x90/0x90 [ 1096.162923][T24035] ? mutex_lock_nested+0x10/0x10 [ 1096.167877][T24035] ? genl_get_cmd+0xe4/0x8b0 [ 1096.172655][T24035] ? memcpy+0x3c/0x60 [ 1096.176654][T24035] ? genl_get_cmd+0x518/0x8b0 [ 1096.181349][T24035] genl_rcv_msg+0x5c8/0x790 [ 1096.185880][T24035] ? genl_bind+0x360/0x360 [ 1096.190301][T24035] ? tipc_nametbl_stop+0x12e0/0x12e0 [ 1096.195614][T24035] netlink_rcv_skb+0x1ef/0x440 [ 1096.200391][T24035] ? genl_bind+0x360/0x360 [ 1096.204822][T24035] ? netlink_ack+0x1160/0x1160 [ 1096.209699][T24035] ? down_read+0x1a8/0x2d0 [ 1096.214126][T24035] genl_rcv+0x24/0x40 [ 1096.218204][T24035] netlink_unicast+0x7ad/0x920 [ 1096.222990][T24035] netlink_sendmsg+0x8ad/0xbd0 [ 1096.227777][T24035] ? netlink_getsockopt+0x550/0x550 [ 1096.233004][T24035] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1096.238565][T24035] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1096.243860][T24035] ? security_socket_sendmsg+0x7c/0xa0 [ 1096.249332][T24035] ? netlink_getsockopt+0x550/0x550 [ 1096.254545][T24035] ____sys_sendmsg+0x5ed/0x9a0 [ 1096.259357][T24035] ? __sys_sendmsg_sock+0x30/0x30 [ 1096.264427][T24035] ? __import_iovec+0x306/0x510 [ 1096.269309][T24035] ? import_iovec+0x6f/0xa0 [ 1096.273840][T24035] ___sys_sendmsg+0x2a2/0x360 [ 1096.278559][T24035] ? __sys_sendmsg+0x2a0/0x2a0 [ 1096.283370][T24035] ? __lock_acquire+0x7c40/0x7c40 [ 1096.288436][T24035] __se_sys_sendmsg+0x1c3/0x2b0 [ 1096.293306][T24035] ? __x64_sys_sendmsg+0x80/0x80 [ 1096.298275][T24035] ? lockdep_hardirqs_on+0x94/0x140 [ 1096.303491][T24035] do_syscall_64+0x4c/0xa0 [ 1096.307929][T24035] ? clear_bhb_loop+0x60/0xb0 [ 1096.312617][T24035] ? clear_bhb_loop+0x60/0xb0 [ 1096.317307][T24035] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1096.323213][T24035] RIP: 0033:0x7fe00179e0d9 [ 1096.327636][T24035] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1096.347255][T24035] RSP: 002b:00007fe0026a5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1096.355767][T24035] RAX: ffffffffffffffda RBX: 00007fe001a26090 RCX: 00007fe00179e0d9 [ 1096.363746][T24035] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 1096.371727][T24035] RBP: 00007fe0026a5090 R08: 0000000000000000 R09: 0000000000000000 [ 1096.379701][T24035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1096.387678][T24035] R13: 00007fe001a26128 R14: 00007fe001a26090 R15: 00007ffdb93366f8 [ 1096.395676][T24035] [ 1096.484754][T24045] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6685'. [ 1096.496705][T24044] netlink: 199848 bytes leftover after parsing attributes in process `syz.6.6684'. [ 1096.630760][T24045] netlink: 830 bytes leftover after parsing attributes in process `syz.4.6685'. [ 1096.719347][T24054] netlink: 128 bytes leftover after parsing attributes in process `syz.4.6685'. [ 1096.796958][T24054] net_ratelimit: 24 callbacks suppressed [ 1096.796974][T24054] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1096.874852][T24060] netlink: 12926 bytes leftover after parsing attributes in process `syz.5.6688'. [ 1097.099931][T24070] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.6694'. [ 1097.215142][T24074] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.6693'. [ 1097.487446][T24092] netlink: 199848 bytes leftover after parsing attributes in process `syz.4.6702'. [ 1097.652930][ T4289] Bluetooth: hci1: command 0x0406 tx timeout [ 1098.652279][T24140] device wlan1 entered promiscuous mode [ 1098.741767][T24140] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 1098.750996][T24140] syzkaller0: linktype set to 8 [ 1098.931088][T24151] FAULT_INJECTION: forcing a failure. [ 1098.931088][T24151] name failslab, interval 1, probability 0, space 0, times 0 [ 1098.996610][T24151] CPU: 1 PID: 24151 Comm: syz.6.6723 Not tainted syzkaller #0 [ 1099.004221][T24151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1099.014301][T24151] Call Trace: [ 1099.017584][T24151] [ 1099.020518][T24151] dump_stack_lvl+0x188/0x24e [ 1099.025204][T24151] ? show_regs_print_info+0x12/0x12 [ 1099.030404][T24151] ? load_image+0x410/0x410 [ 1099.034914][T24151] should_fail_ex+0x390/0x4c0 [ 1099.039598][T24151] should_failslab+0x5/0x20 [ 1099.044098][T24151] slab_pre_alloc_hook+0x59/0x300 [ 1099.049130][T24151] kmem_cache_alloc+0x56/0x2f0 [ 1099.053912][T24151] ? skb_clone+0x1e7/0x370 [ 1099.058332][T24151] skb_clone+0x1e7/0x370 [ 1099.062578][T24151] __netlink_deliver_tap+0x3e4/0x7e0 [ 1099.067876][T24151] ? netlink_deliver_tap+0x2e/0x1b0 [ 1099.073077][T24151] netlink_deliver_tap+0x19c/0x1b0 [ 1099.078188][T24151] netlink_dump+0x80f/0xcd0 [ 1099.082696][T24151] ? netlink_lookup+0x200/0x200 [ 1099.087548][T24151] ? memcpy+0x3c/0x60 [ 1099.091524][T24151] ? genl_start+0x2d7/0x490 [ 1099.096038][T24151] __netlink_dump_start+0x52c/0x6f0 [ 1099.101242][T24151] genl_family_rcv_msg_dumpit+0x228/0x3c0 [ 1099.106981][T24151] ? genl_rcv_msg+0x790/0x790 [ 1099.111674][T24151] ? __mutex_lock+0x1ab/0xae0 [ 1099.116355][T24151] ? genl_family_rcv_msg_doit+0x350/0x350 [ 1099.122072][T24151] ? genl_start+0x490/0x490 [ 1099.126578][T24151] ? genl_lock_dumpit+0x90/0x90 [ 1099.131425][T24151] ? mutex_lock_nested+0x10/0x10 [ 1099.136362][T24151] ? genl_get_cmd+0xe4/0x8b0 [ 1099.140951][T24151] ? memcpy+0x3c/0x60 [ 1099.144937][T24151] ? genl_get_cmd+0x518/0x8b0 [ 1099.149640][T24151] genl_rcv_msg+0x5c8/0x790 [ 1099.154183][T24151] ? genl_bind+0x360/0x360 [ 1099.158638][T24151] ? tipc_nametbl_stop+0x12e0/0x12e0 [ 1099.163933][T24151] netlink_rcv_skb+0x1ef/0x440 [ 1099.168711][T24151] ? genl_bind+0x360/0x360 [ 1099.173142][T24151] ? netlink_ack+0x1160/0x1160 [ 1099.177913][T24151] ? down_read+0x1a8/0x2d0 [ 1099.182328][T24151] genl_rcv+0x24/0x40 [ 1099.186418][T24151] netlink_unicast+0x7ad/0x920 [ 1099.191194][T24151] netlink_sendmsg+0x8ad/0xbd0 [ 1099.196403][T24151] ? netlink_getsockopt+0x550/0x550 [ 1099.201612][T24151] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1099.207160][T24151] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1099.212443][T24151] ? security_socket_sendmsg+0x7c/0xa0 [ 1099.217902][T24151] ? netlink_getsockopt+0x550/0x550 [ 1099.223110][T24151] ____sys_sendmsg+0x5ed/0x9a0 [ 1099.227904][T24151] ? __sys_sendmsg_sock+0x30/0x30 [ 1099.232927][T24151] ? __import_iovec+0x306/0x510 [ 1099.237785][T24151] ? import_iovec+0x6f/0xa0 [ 1099.242289][T24151] ___sys_sendmsg+0x2a2/0x360 [ 1099.246969][T24151] ? __sys_sendmsg+0x2a0/0x2a0 [ 1099.251746][T24151] ? __lock_acquire+0x7c40/0x7c40 [ 1099.256799][T24151] __se_sys_sendmsg+0x1c3/0x2b0 [ 1099.261651][T24151] ? __x64_sys_sendmsg+0x80/0x80 [ 1099.266620][T24151] ? lockdep_hardirqs_on+0x94/0x140 [ 1099.271839][T24151] do_syscall_64+0x4c/0xa0 [ 1099.276267][T24151] ? clear_bhb_loop+0x60/0xb0 [ 1099.280942][T24151] ? clear_bhb_loop+0x60/0xb0 [ 1099.285707][T24151] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1099.291602][T24151] RIP: 0033:0x7fe2e6b9e0d9 [ 1099.296015][T24151] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1099.315703][T24151] RSP: 002b:00007fe2e7a9c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1099.324122][T24151] RAX: ffffffffffffffda RBX: 00007fe2e6e26090 RCX: 00007fe2e6b9e0d9 [ 1099.332089][T24151] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 1099.340059][T24151] RBP: 00007fe2e7a9c090 R08: 0000000000000000 R09: 0000000000000000 [ 1099.348024][T24151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1099.356005][T24151] R13: 00007fe2e6e26128 R14: 00007fe2e6e26090 R15: 00007fffabab0b58 [ 1099.363982][T24151] [ 1099.376262][T24149] validate_nla: 16 callbacks suppressed [ 1099.376295][T24149] netlink: 'syz.4.6724': attribute type 3 has an invalid length. [ 1099.408684][T24143] netlink: 'syz.1.6722': attribute type 3 has an invalid length. [ 1099.475555][T24155] device netdevsim0 entered promiscuous mode [ 1099.808250][T24172] netlink: 'syz.5.6742': attribute type 21 has an invalid length. [ 1099.837529][T24173] FAULT_INJECTION: forcing a failure. [ 1099.837529][T24173] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1099.901954][T24173] CPU: 1 PID: 24173 Comm: syz.5.6742 Not tainted syzkaller #0 [ 1099.909485][T24173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1099.919669][T24173] Call Trace: [ 1099.922997][T24173] [ 1099.925953][T24173] dump_stack_lvl+0x188/0x24e [ 1099.930669][T24173] ? show_regs_print_info+0x12/0x12 [ 1099.935907][T24173] ? load_image+0x410/0x410 [ 1099.940445][T24173] ? __lock_acquire+0x7c40/0x7c40 [ 1099.945536][T24173] ? snprintf+0xe5/0x140 [ 1099.949896][T24173] should_fail_ex+0x390/0x4c0 [ 1099.954612][T24173] _copy_to_user+0x2c/0x130 [ 1099.959234][T24173] simple_read_from_buffer+0xe3/0x150 [ 1099.964725][T24173] proc_fail_nth_read+0x1a6/0x220 [ 1099.969790][T24173] ? proc_fault_inject_write+0x310/0x310 [ 1099.975428][T24173] ? fsnotify_perm+0x248/0x550 [ 1099.980190][T24173] ? proc_fault_inject_write+0x310/0x310 [ 1099.985818][T24173] vfs_read+0x2db/0x960 [ 1099.989985][T24173] ? kernel_read+0x1e0/0x1e0 [ 1099.994578][T24173] ? __fget_files+0x28/0x460 [ 1099.999169][T24173] ? __fget_files+0x3fc/0x460 [ 1100.003878][T24173] ? __fdget_pos+0x2ae/0x360 [ 1100.008471][T24173] ? ksys_read+0x70/0x260 [ 1100.012803][T24173] ksys_read+0x14d/0x260 [ 1100.017046][T24173] ? vfs_write+0x9a0/0x9a0 [ 1100.021463][T24173] ? lockdep_hardirqs_on+0x94/0x140 [ 1100.026746][T24173] do_syscall_64+0x4c/0xa0 [ 1100.031162][T24173] ? clear_bhb_loop+0x60/0xb0 [ 1100.035838][T24173] ? clear_bhb_loop+0x60/0xb0 [ 1100.040533][T24173] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1100.046450][T24173] RIP: 0033:0x7f87d555e90e [ 1100.050865][T24173] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1100.070502][T24173] RSP: 002b:00007f87d64c6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1100.078923][T24173] RAX: ffffffffffffffda RBX: 00007f87d64c76c0 RCX: 00007f87d555e90e [ 1100.086891][T24173] RDX: 000000000000000f RSI: 00007f87d64c70a0 RDI: 0000000000000008 [ 1100.094858][T24173] RBP: 00007f87d64c7090 R08: 0000000000000000 R09: 0000000000000000 [ 1100.102823][T24173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1100.110789][T24173] R13: 00007f87d5826128 R14: 00007f87d5826090 R15: 00007fff6390f9c8 [ 1100.118768][T24173] [ 1100.182724][T24178] device syzkaller0 entered promiscuous mode [ 1100.815840][T24199] netlink: 'syz.1.6739': attribute type 3 has an invalid length. [ 1100.831007][T24199] __nla_validate_parse: 7 callbacks suppressed [ 1100.831026][T24199] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.6739'. [ 1103.412361][T24229] device syzkaller0 entered promiscuous mode [ 1103.602325][T24231] netlink: 'syz.5.6756': attribute type 3 has an invalid length. [ 1103.628034][T24231] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.6756'. [ 1105.527188][T24261] netlink: 'syz.2.6765': attribute type 29 has an invalid length. [ 1105.726039][T24263] can: request_module (can-proto-0) failed. [ 1106.013998][T24254] netlink: 'syz.4.6762': attribute type 10 has an invalid length. [ 1106.022321][T24261] netlink: 'syz.2.6765': attribute type 29 has an invalid length. [ 1106.060103][T24262] netlink: 'syz.2.6765': attribute type 29 has an invalid length. [ 1106.760947][T24289] netlink: 'syz.4.6777': attribute type 3 has an invalid length. [ 1106.783040][T24289] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.6777'. [ 1106.865215][T24292] device syzkaller0 entered promiscuous mode [ 1107.660287][T24325] netlink: 168864 bytes leftover after parsing attributes in process `syz.6.6790'. [ 1107.671459][T24325] netlink: zone id is out of range [ 1107.677452][T24325] netlink: zone id is out of range [ 1107.683757][T24325] netlink: zone id is out of range [ 1107.689058][T24325] netlink: zone id is out of range [ 1107.695251][T24325] netlink: zone id is out of range [ 1107.701904][T24325] netlink: zone id is out of range [ 1107.710665][T24325] netlink: zone id is out of range [ 1107.716484][T24325] netlink: zone id is out of range [ 1107.725227][T24325] netlink: zone id is out of range [ 1107.730687][T24325] netlink: zone id is out of range [ 1110.040456][T24319] device sit0 left promiscuous mode [ 1110.079421][T24321] device sit0 entered promiscuous mode [ 1110.160170][T24329] netlink: 'syz.5.6792': attribute type 21 has an invalid length. [ 1110.414431][T24342] netlink: 'syz.5.6796': attribute type 3 has an invalid length. [ 1110.427847][T24342] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.6796'. [ 1110.513526][T24350] netlink: 'syz.4.6800': attribute type 11 has an invalid length. [ 1110.538074][T24350] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.6800'. [ 1110.560205][T24348] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1110.969386][T24366] device syzkaller0 entered promiscuous mode [ 1114.391827][T24405] netlink: 'syz.2.6813': attribute type 3 has an invalid length. [ 1114.417151][T24405] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.6813'. [ 1114.457968][T24409] netlink: 'syz.4.6817': attribute type 29 has an invalid length. [ 1116.087438][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.093947][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1117.502190][T24409] netlink: 'syz.4.6817': attribute type 29 has an invalid length. [ 1117.510465][T24436] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6826'. [ 1117.724212][T24448] netlink: 'syz.5.6827': attribute type 27 has an invalid length. [ 1117.811350][T24448] netlink: 2418 bytes leftover after parsing attributes in process `syz.5.6827'. [ 1117.886466][T24450] netlink: 'syz.2.6832': attribute type 39 has an invalid length. [ 1118.133227][ T4283] Bluetooth: hci2: command 0x0406 tx timeout [ 1118.529967][T24450] bond0: (slave macvlan0): Releasing backup interface [ 1118.592755][T24461] netlink: 176 bytes leftover after parsing attributes in process `syz.4.6836'. [ 1118.787206][T24468] device syzkaller0 entered promiscuous mode [ 1119.114624][T24484] netlink: 'syz.4.6842': attribute type 3 has an invalid length. [ 1119.131433][T24484] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.6842'. [ 1120.952807][T24475] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6840'. [ 1121.012070][T24479] netlink: 'syz.5.6839': attribute type 1 has an invalid length. [ 1121.029427][T24479] netlink: 152 bytes leftover after parsing attributes in process `syz.5.6839'. [ 1121.689362][T24515] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6854'. [ 1121.757136][T24519] netlink: 'syz.2.6856': attribute type 10 has an invalid length. [ 1121.955484][T24517] device syzkaller0 entered promiscuous mode [ 1122.087905][T24529] netlink: 'syz.1.6858': attribute type 3 has an invalid length. [ 1122.124086][T24529] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.6858'. [ 1124.250396][T24538] netlink: 'syz.5.6863': attribute type 2 has an invalid length. [ 1124.258376][T24538] netlink: 'syz.5.6863': attribute type 4 has an invalid length. [ 1124.279974][T24538] netlink: 'syz.5.6863': attribute type 8 has an invalid length. [ 1124.312462][T24538] netlink: 'syz.5.6863': attribute type 9 has an invalid length. [ 1124.320240][T24538] netlink: 'syz.5.6863': attribute type 10 has an invalid length. [ 1124.382561][T24538] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6863'. [ 1124.566475][T24559] netlink: 132 bytes leftover after parsing attributes in process `syz.5.6870'. [ 1125.190066][T24583] netlink: 'syz.5.6878': attribute type 3 has an invalid length. [ 1125.199702][T24583] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.6878'. [ 1128.296228][T24602] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6885'. [ 1128.552144][T24614] netlink: 144 bytes leftover after parsing attributes in process `syz.4.6889'. [ 1128.639284][T24617] netlink: 'syz.6.6892': attribute type 9 has an invalid length. [ 1128.699242][T24617] netlink: 61951 bytes leftover after parsing attributes in process `syz.6.6892'. [ 1129.067760][T24641] netlink: 126324 bytes leftover after parsing attributes in process `syz.2.6902'. [ 1129.192456][T24648] netlink: 132 bytes leftover after parsing attributes in process `syz.5.6903'. [ 1129.236976][T24634] netlink: 'syz.1.6898': attribute type 3 has an invalid length. [ 1129.247623][T24634] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.6898'. [ 1129.531213][T24666] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6909'. [ 1129.957322][T24687] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6917'. [ 1130.276090][T24697] netlink: 'syz.1.6920': attribute type 3 has an invalid length. [ 1130.292769][T24697] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.6920'. [ 1130.488144][T24709] netlink: 'syz.4.6925': attribute type 10 has an invalid length. [ 1130.814269][T24716] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.6928'. [ 1131.282434][T24724] netlink: 'syz.1.6931': attribute type 22 has an invalid length. [ 1131.306364][T24716] sysfs: cannot create duplicate filename '/class/ieee80211/.! 5‚Á7>7H€' [ 1131.328470][T24716] CPU: 1 PID: 24716 Comm: syz.2.6928 Not tainted syzkaller #0 [ 1131.336006][T24716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1131.346102][T24716] Call Trace: [ 1131.349424][T24716] [ 1131.352371][T24716] dump_stack_lvl+0x188/0x24e [ 1131.357106][T24716] ? show_regs_print_info+0x12/0x12 [ 1131.362353][T24716] ? load_image+0x410/0x410 [ 1131.366904][T24716] sysfs_warn_dup+0x8a/0xa0 [ 1131.371433][T24716] sysfs_do_create_link_sd+0xc0/0x110 [ 1131.376836][T24716] device_add+0x83b/0x1050 [ 1131.381266][T24716] wiphy_register+0x1d8b/0x2aa0 [ 1131.386238][T24716] ? cfg80211_event_work+0x40/0x40 [ 1131.391461][T24716] ? minstrel_ht_alloc+0x894/0xa20 [ 1131.396628][T24716] ? strcmp+0x4e/0xb0 [ 1131.400685][T24716] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1131.406779][T24716] ieee80211_register_hw+0x2d48/0x39f0 [ 1131.412273][T24716] ? ieee80211_register_hw+0xee1/0x39f0 [ 1131.417820][T24716] ? ieee80211_register_hw+0xee1/0x39f0 [ 1131.423394][T24716] ? ieee80211_tasklet_handler+0x20/0x20 [ 1131.429122][T24716] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1131.435033][T24716] ? __debug_object_init+0xed/0x440 [ 1131.440253][T24716] ? memset+0x1e/0x40 [ 1131.444261][T24716] ? __hrtimer_init+0x189/0x270 [ 1131.449115][T24716] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 1131.454847][T24716] ? memcpy+0x3c/0x60 [ 1131.458830][T24716] hwsim_new_radio_nl+0xab7/0xc90 [ 1131.463866][T24716] genl_family_rcv_msg_doit+0x22f/0x350 [ 1131.469409][T24716] ? end_current_label_crit_section+0x170/0x170 [ 1131.475669][T24716] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1131.481655][T24716] ? bpf_lsm_capable+0x5/0x10 [ 1131.486329][T24716] ? security_capable+0x85/0xb0 [ 1131.491185][T24716] genl_rcv_msg+0x601/0x790 [ 1131.495687][T24716] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1131.501846][T24716] ? genl_bind+0x360/0x360 [ 1131.506265][T24716] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 1131.512598][T24716] ? lock_acquire+0x225/0x4a0 [ 1131.517289][T24716] netlink_rcv_skb+0x1ef/0x440 [ 1131.522059][T24716] ? genl_bind+0x360/0x360 [ 1131.526509][T24716] ? netlink_ack+0x1160/0x1160 [ 1131.531283][T24716] ? down_read+0x1a8/0x2d0 [ 1131.535700][T24716] genl_rcv+0x24/0x40 [ 1131.539698][T24716] netlink_unicast+0x7ad/0x920 [ 1131.544471][T24716] netlink_sendmsg+0x8ad/0xbd0 [ 1131.549234][T24716] ? lockdep_hardirqs_on+0x94/0x140 [ 1131.554449][T24716] ? netlink_getsockopt+0x550/0x550 [ 1131.559683][T24716] ? security_socket_sendmsg+0x41/0xa0 [ 1131.565157][T24716] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1131.570456][T24716] ? security_socket_sendmsg+0x7c/0xa0 [ 1131.575912][T24716] ? netlink_getsockopt+0x550/0x550 [ 1131.581144][T24716] ____sys_sendmsg+0x5ed/0x9a0 [ 1131.585938][T24716] ? __sys_sendmsg_sock+0x30/0x30 [ 1131.590982][T24716] ? __import_iovec+0x306/0x510 [ 1131.595851][T24716] ? import_iovec+0x6f/0xa0 [ 1131.600357][T24716] ___sys_sendmsg+0x2a2/0x360 [ 1131.605072][T24716] ? __sys_sendmsg+0x2a0/0x2a0 [ 1131.609851][T24716] ? ktime_get+0x7b/0x270 [ 1131.614197][T24716] __se_sys_sendmsg+0x1c3/0x2b0 [ 1131.619051][T24716] ? ct_nmi_exit+0x145/0x1c0 [ 1131.623654][T24716] ? __x64_sys_sendmsg+0x80/0x80 [ 1131.628602][T24716] ? lockdep_hardirqs_on+0x94/0x140 [ 1131.633800][T24716] do_syscall_64+0x4c/0xa0 [ 1131.638218][T24716] ? clear_bhb_loop+0x60/0xb0 [ 1131.642890][T24716] ? clear_bhb_loop+0x60/0xb0 [ 1131.647660][T24716] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1131.653548][T24716] RIP: 0033:0x7fa9daf9e0d9 [ 1131.657957][T24716] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1131.677561][T24716] RSP: 002b:00007fa9dbe32028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1131.685970][T24716] RAX: ffffffffffffffda RBX: 00007fa9db225fa0 RCX: 00007fa9daf9e0d9 [ 1131.693938][T24716] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 1131.701902][T24716] RBP: 00007fa9db035024 R08: 0000000000000000 R09: 0000000000000000 [ 1131.709965][T24716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1131.718015][T24716] R13: 00007fa9db226038 R14: 00007fa9db225fa0 R15: 00007ffde67b5218 [ 1131.725997][T24716] [ 1132.138381][T24734] netlink: 'syz.6.6937': attribute type 3 has an invalid length. [ 1132.731856][T24749] device syzkaller0 entered promiscuous mode [ 1136.163773][T24800] __nla_validate_parse: 2 callbacks suppressed [ 1136.163792][T24800] netlink: 44 bytes leftover after parsing attributes in process `syz.5.6952'. [ 1136.659591][T24811] netlink: 'syz.6.6957': attribute type 3 has an invalid length. [ 1136.667451][T24811] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.6957'. [ 1138.305055][T24792] netlink: 'syz.1.6953': attribute type 21 has an invalid length. [ 1138.539483][T24818] netlink: 68 bytes leftover after parsing attributes in process `syz.5.6958'. [ 1138.614084][T24822] netlink: 'syz.6.6961': attribute type 2 has an invalid length. [ 1138.761457][T24822] device 0 entered promiscuous mode [ 1139.111137][T24838] netlink: 132 bytes leftover after parsing attributes in process `syz.5.6965'. [ 1139.603234][T24855] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6970'. [ 1139.719016][T24858] netlink: 'syz.1.6971': attribute type 3 has an invalid length. [ 1139.752319][T24858] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.6971'. [ 1139.889838][T24865] device syzkaller0 entered promiscuous mode [ 1141.483786][T24903] netlink: 'syz.4.6987': attribute type 3 has an invalid length. [ 1141.491687][T24903] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.6987'. [ 1142.915135][T24913] netlink: 'syz.1.6989': attribute type 21 has an invalid length. [ 1143.636632][T24937] netlink: 132 bytes leftover after parsing attributes in process `syz.5.6999'. [ 1143.686945][T24933] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6997'. [ 1143.732730][ T4283] Bluetooth: hci0: command 0x0406 tx timeout [ 1143.817655][T24941] device syzkaller0 entered promiscuous mode [ 1144.077457][T24949] netlink: 'syz.1.7004': attribute type 28 has an invalid length. [ 1144.098765][T24949] netlink: 'syz.1.7004': attribute type 4 has an invalid length. [ 1144.113443][T24949] netlink: 136 bytes leftover after parsing attributes in process `syz.1.7004'. [ 1144.392661][T24960] sctp: [Deprecated]: syz.4.7006 (pid 24960) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1144.392661][T24960] Use struct sctp_sack_info instead [ 1145.230803][T24977] netlink: 'syz.2.7012': attribute type 4 has an invalid length. [ 1145.249467][T24977] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.7012'. [ 1147.007739][T24955] netlink: 'syz.4.7006': attribute type 21 has an invalid length. [ 1147.025631][T24958] netlink: 'syz.4.7006': attribute type 27 has an invalid length. [ 1147.047903][T24965] netlink: 'syz.5.7008': attribute type 5 has an invalid length. [ 1147.072710][T24965] netlink: 168 bytes leftover after parsing attributes in process `syz.5.7008'. [ 1147.288584][T24984] netlink: 132 bytes leftover after parsing attributes in process `syz.5.7014'. [ 1147.615459][T25003] netlink: 68 bytes leftover after parsing attributes in process `syz.1.7021'. [ 1147.955409][T25006] netlink: 8192 bytes leftover after parsing attributes in process `syz.6.7023'. [ 1148.324788][T25011] device syzkaller0 entered promiscuous mode [ 1148.343393][T25018] netlink: 'syz.4.7027': attribute type 21 has an invalid length. [ 1148.407090][T25017] netlink: 134056 bytes leftover after parsing attributes in process `syz.5.7025'. [ 1151.224647][T25017] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1151.234951][T25017] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1151.241859][T25043] netlink: 132 bytes leftover after parsing attributes in process `syz.6.7035'. [ 1151.244926][T25017] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1151.269456][T25041] netlink: 'syz.1.7034': attribute type 2 has an invalid length. [ 1151.289648][T25041] netlink: 'syz.1.7034': attribute type 8 has an invalid length. [ 1151.302755][T25041] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7034'. [ 1151.460799][T25049] netlink: 176 bytes leftover after parsing attributes in process `syz.6.7037'. [ 1151.495266][T25050] netlink: 8192 bytes leftover after parsing attributes in process `syz.2.7039'. [ 1152.285771][T25080] netlink: 'syz.2.7048': attribute type 21 has an invalid length. [ 1152.368739][T25082] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7049'. [ 1153.119779][T25115] netlink: 8192 bytes leftover after parsing attributes in process `syz.1.7059'. [ 1153.309934][T25119] netlink: 'syz.5.7060': attribute type 3 has an invalid length. [ 1153.372065][T25119] netlink: 163968 bytes leftover after parsing attributes in process `syz.5.7060'. [ 1153.805924][T25131] netlink: 132 bytes leftover after parsing attributes in process `syz.6.7064'. [ 1154.017298][T25136] netlink: 'syz.4.7065': attribute type 10 has an invalid length. [ 1154.092530][T25140] netlink: 'syz.1.7069': attribute type 27 has an invalid length. [ 1154.304403][T25140] bond0: (slave bond_slave_0): Releasing backup interface [ 1155.460221][T25170] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7081'. [ 1155.484445][T25171] device wlan1 entered promiscuous mode [ 1156.092633][T25199] delete_channel: no stack [ 1156.541219][T25223] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7098'. [ 1158.484006][T25267] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7113'. [ 1158.609993][T25273] netlink: 'syz.5.7116': attribute type 21 has an invalid length. [ 1158.763742][T25277] device syzkaller0 entered promiscuous mode [ 1159.197057][ T4289] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 1159.205953][ T4289] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 1159.217832][ T4289] CPU: 1 PID: 4289 Comm: kworker/u5:7 Not tainted syzkaller #0 [ 1159.225447][ T4289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1159.235729][ T4289] Workqueue: hci2 hci_rx_work [ 1159.240602][ T4289] Call Trace: [ 1159.243929][ T4289] [ 1159.246904][ T4289] dump_stack_lvl+0x188/0x24e [ 1159.251662][ T4289] ? show_regs_print_info+0x12/0x12 [ 1159.256927][ T4289] ? load_image+0x410/0x410 [ 1159.261533][ T4289] sysfs_create_dir_ns+0x26a/0x290 [ 1159.266713][ T4289] ? __lock_acquire+0x7c40/0x7c40 [ 1159.271791][ T4289] ? sysfs_warn_dup+0xa0/0xa0 [ 1159.276531][ T4289] ? do_raw_spin_unlock+0x11d/0x230 [ 1159.281796][ T4289] kobject_add_internal+0x617/0xca0 [ 1159.287082][ T4289] kobject_add+0x160/0x230 [ 1159.291564][ T4289] ? kobject_init+0x1c0/0x1c0 [ 1159.296313][ T4289] ? __raw_spin_lock_init+0x41/0x100 [ 1159.301651][ T4289] ? klist_children_get+0x50/0x50 [ 1159.306745][ T4289] ? get_device_parent+0x121/0x3e0 [ 1159.311926][ T4289] device_add+0x470/0x1050 [ 1159.316424][ T4289] hci_conn_add_sysfs+0xd1/0x1e0 [ 1159.321695][ T4289] le_conn_complete_evt+0xfac/0x15c0 [ 1159.327067][ T4289] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 1159.333374][ T4289] ? bt_info+0x180/0x180 [ 1159.337690][ T4289] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1159.343398][ T4289] ? mutex_unlock+0x10/0x10 [ 1159.347959][ T4289] ? skb_pull_data+0xec/0x1f0 [ 1159.352705][ T4289] hci_le_conn_complete_evt+0x183/0x440 [ 1159.358330][ T4289] ? hci_remote_host_features_evt+0x230/0x230 [ 1159.364451][ T4289] hci_event_packet+0x7b3/0x1290 [ 1159.369526][ T4289] ? __lock_acquire+0x7c40/0x7c40 [ 1159.374616][ T4289] ? bis_list+0x280/0x280 [ 1159.379035][ T4289] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1159.385003][ T4289] ? kcov_remote_start+0x4b0/0x7e0 [ 1159.390215][ T4289] ? do_machine_check+0x380/0x750 [ 1159.395326][ T4289] ? hci_send_to_monitor+0x9c/0x4a0 [ 1159.400604][ T4289] hci_rx_work+0x3eb/0xd40 [ 1159.405086][ T4289] ? _raw_spin_unlock+0x40/0x40 [ 1159.410012][ T4289] ? process_one_work+0x7b4/0x1160 [ 1159.415297][ T4289] process_one_work+0x8ab/0x1160 [ 1159.420353][ T4289] ? worker_detach_from_pool+0x240/0x240 [ 1159.426044][ T4289] ? _raw_spin_lock_irq+0x86/0xf0 [ 1159.431144][ T4289] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1159.436267][ T4289] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1159.441969][ T4289] ? wq_worker_running+0x97/0x190 [ 1159.447187][ T4289] worker_thread+0xaf5/0x12a0 [ 1159.452023][ T4289] kthread+0x29d/0x330 [ 1159.456140][ T4289] ? worker_clr_flags+0x1a0/0x1a0 [ 1159.461223][ T4289] ? kthread_blkcg+0xd0/0xd0 [ 1159.465880][ T4289] ret_from_fork+0x1f/0x30 [ 1159.470433][ T4289] [ 1159.481537][ T4289] kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 1159.495006][ T4289] Bluetooth: hci2: failed to register connection device [ 1159.789022][T25303] netlink: 'syz.5.7127': attribute type 3 has an invalid length. [ 1159.817472][T25303] netlink: 'syz.5.7127': attribute type 8 has an invalid length. [ 1159.834456][T25303] netlink: 197344 bytes leftover after parsing attributes in process `syz.5.7127'. [ 1161.579651][ T4289] Bluetooth: hci2: command 0x2016 tx timeout [ 1162.092659][T25302] netlink: 'syz.4.7128': attribute type 10 has an invalid length. [ 1162.120529][T25302] device veth0_vlan left promiscuous mode [ 1162.148163][T25302] device veth0_vlan entered promiscuous mode [ 1162.175377][T25302] team0: Device veth0_vlan failed to register rx_handler [ 1162.239030][T25306] netlink: 'syz.5.7127': attribute type 17 has an invalid length. [ 1162.252488][T25306] netlink: 152 bytes leftover after parsing attributes in process `syz.5.7127'. [ 1162.261655][T25306] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1162.312506][T25306] net_ratelimit: 219 callbacks suppressed [ 1162.312526][T25306] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1162.370524][T25305] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7129'. [ 1162.908839][T25334] device syzkaller0 entered promiscuous mode [ 1163.949652][T25373] netlink: 'syz.2.7152': attribute type 3 has an invalid length. [ 1163.962231][T25373] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.7152'. [ 1164.219497][ T4283] Bluetooth: hci3: command 0x0406 tx timeout [ 1165.230020][T25352] netlink: 132 bytes leftover after parsing attributes in process `syz.5.7144'. [ 1165.574845][ T4289] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 1165.929632][T25405] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7164'. [ 1165.985952][T25402] netlink: 'syz.5.7163': attribute type 3 has an invalid length. [ 1166.012998][T25402] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.7163'. [ 1166.272132][T25411] netlink: 'syz.1.7167': attribute type 3 has an invalid length. [ 1166.287861][T25411] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.7167'. [ 1166.824151][T25442] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7178'. [ 1167.260698][T25455] netlink: 'syz.4.7181': attribute type 3 has an invalid length. [ 1167.305053][T25455] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.7181'. [ 1167.652517][ T4289] Bluetooth: hci1: command 0x2016 tx timeout [ 1167.707647][T25467] netlink: 'syz.6.7187': attribute type 3 has an invalid length. [ 1167.744096][T25467] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.7187'. [ 1167.826106][T25479] netlink: 'syz.5.7192': attribute type 27 has an invalid length. [ 1167.843292][T25479] netlink: 152 bytes leftover after parsing attributes in process `syz.5.7192'. [ 1167.862876][T25479] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1168.324304][T25500] : port 1(ip6gretap0) entered blocking state [ 1168.324555][T25495] netlink: 'syz.2.7198': attribute type 3 has an invalid length. [ 1168.373184][T25500] : port 1(ip6gretap0) entered disabled state [ 1168.389430][T25495] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.7198'. [ 1168.433999][T25500] device ip6gretap0 entered promiscuous mode [ 1168.473545][T25497] device ip6gretap0 left promiscuous mode [ 1168.516769][T25497] : port 1(ip6gretap0) entered disabled state [ 1169.108063][T25525] netlink: 'syz.5.7207': attribute type 3 has an invalid length. [ 1169.120501][T25529] netlink: 'syz.6.7210': attribute type 46 has an invalid length. [ 1169.139076][T25525] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.7207'. [ 1169.375568][T25536] netlink: 'syz.4.7213': attribute type 3 has an invalid length. [ 1169.433581][T25536] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.7213'. [ 1169.921603][T25553] netlink: 'syz.6.7219': attribute type 3 has an invalid length. [ 1169.930752][T25553] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.7219'. [ 1170.692942][T25583] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.7229'. [ 1171.694779][T25607] validate_nla: 1 callbacks suppressed [ 1171.694833][T25607] netlink: 'syz.5.7237': attribute type 3 has an invalid length. [ 1171.747060][T25607] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.7237'. [ 1171.779199][T25615] netlink: 'syz.4.7240': attribute type 10 has an invalid length. [ 1171.823937][T25615] netlink: 55 bytes leftover after parsing attributes in process `syz.4.7240'. [ 1172.453086][T25638] netlink: 'syz.1.7246': attribute type 3 has an invalid length. [ 1172.497840][T25638] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.7246'. [ 1172.510954][T25639] : port 1(ip6gretap0) entered blocking state [ 1172.531388][T25639] : port 1(ip6gretap0) entered disabled state [ 1172.551681][T25639] device ip6gretap0 entered promiscuous mode [ 1172.575160][T25644] device ip6gretap0 left promiscuous mode [ 1172.624203][T25644] : port 1(ip6gretap0) entered disabled state [ 1172.791531][T25651] netlink: 'syz.2.7251': attribute type 10 has an invalid length. [ 1172.828169][T25651] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1173.151999][T25651] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1173.197920][T25651] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 1173.398722][T25662] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7259'. [ 1173.597160][T25664] netlink: 'syz.6.7258': attribute type 3 has an invalid length. [ 1173.606909][T25664] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.7258'. [ 1174.372955][T25690] : port 1(ip6gretap0) entered blocking state [ 1174.410101][T25690] : port 1(ip6gretap0) entered disabled state [ 1174.470207][T25690] device ip6gretap0 entered promiscuous mode [ 1174.561897][T25695] device ip6gretap0 left promiscuous mode [ 1174.572181][T25695] : port 1(ip6gretap0) entered disabled state [ 1174.639025][T25692] netlink: 'syz.6.7269': attribute type 21 has an invalid length. [ 1175.159109][T25712] netlink: 'syz.6.7276': attribute type 3 has an invalid length. [ 1175.171811][T25718] Â: renamed from pim6reg1 [ 1175.180681][T25712] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.7276'. [ 1175.848021][T25739] netlink: 'syz.5.7291': attribute type 3 has an invalid length. [ 1175.884469][T25739] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.7291'. [ 1176.344468][T25762] netlink: 'syz.1.7295': attribute type 3 has an invalid length. [ 1176.372773][T25762] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.7295'. [ 1177.034984][T25759] device syzkaller0 entered promiscuous mode [ 1177.153606][T25779] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.7300'. [ 1177.499517][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.508064][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.799991][T25804] netlink: 'syz.5.7308': attribute type 3 has an invalid length. [ 1177.808430][T25804] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.7308'. [ 1179.352747][T25786] IPv6: Can't replace route, no match found [ 1179.358987][T25798] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7307'. [ 1179.693104][T25817] netlink: 'syz.5.7313': attribute type 10 has an invalid length. [ 1179.809730][T25817] device syzkaller0 entered promiscuous mode [ 1179.819940][T25823] netlink: 'syz.4.7316': attribute type 21 has an invalid length. [ 1179.852594][T25823] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7316'. [ 1180.020839][T25832] netlink: 'syz.6.7318': attribute type 21 has an invalid length. [ 1180.029508][T25832] IPv6: NLM_F_CREATE should be specified when creating new route [ 1180.037482][T25832] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1180.044803][T25832] IPv6: NLM_F_CREATE should be set when creating new route [ 1180.052093][T25832] IPv6: NLM_F_CREATE should be set when creating new route [ 1180.059399][T25832] IPv6: NLM_F_CREATE should be set when creating new route [ 1180.084509][T25832] netlink: 'syz.6.7318': attribute type 2 has an invalid length. [ 1180.102893][T25832] netlink: 'syz.6.7318': attribute type 1 has an invalid length. [ 1180.110804][T25832] netlink: 'syz.6.7318': attribute type 4 has an invalid length. [ 1180.126679][T25832] netlink: 208312 bytes leftover after parsing attributes in process `syz.6.7318'. [ 1180.208387][T25845] netlink: 'syz.2.7319': attribute type 3 has an invalid length. [ 1180.219025][T25845] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.7319'. [ 1182.068631][T25835] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1182.076184][T25835] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1182.084739][T25835] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1182.092364][T25835] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1182.143478][T25841] netlink: 144 bytes leftover after parsing attributes in process `syz.6.7318'. [ 1182.230754][T25847] device syzkaller0 entered promiscuous mode [ 1182.406400][T25864] netlink: 'syz.5.7323': attribute type 3 has an invalid length. [ 1182.428031][T25864] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.7323'. [ 1184.945431][T25881] netlink: 'syz.6.7330': attribute type 19 has an invalid length. [ 1184.954514][T25881] netlink: 36 bytes leftover after parsing attributes in process `syz.6.7330'. [ 1184.972797][T25885] netlink: 'syz.1.7332': attribute type 1 has an invalid length. [ 1185.266468][T25898] device syzkaller0 entered promiscuous mode [ 1185.370009][T25892] netlink: 'syz.5.7336': attribute type 3 has an invalid length. [ 1185.407265][T25892] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.7336'. [ 1186.309204][T25934] netlink: 'syz.4.7346': attribute type 3 has an invalid length. [ 1186.325440][T25934] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.7346'. [ 1187.748606][T25928] netlink: 'syz.1.7347': attribute type 4 has an invalid length. [ 1188.581435][T25958] device sit0 entered promiscuous mode [ 1189.508503][T25984] netlink: 'syz.6.7363': attribute type 3 has an invalid length. [ 1189.522921][T25984] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.7363'. [ 1189.657493][T25994] netlink: 'syz.1.7367': attribute type 3 has an invalid length. [ 1189.812744][ T4289] Bluetooth: hci4: command 0x0406 tx timeout [ 1190.019094][T26013] netlink: 132 bytes leftover after parsing attributes in process `syz.6.7374'. [ 1190.092687][T26013] netlink: 184 bytes leftover after parsing attributes in process `syz.6.7374'. [ 1190.149753][T26023] netlink: 65027 bytes leftover after parsing attributes in process `syz.4.7377'. [ 1190.290547][T26031] netlink: 132 bytes leftover after parsing attributes in process `syz.5.7380'. [ 1190.336029][T26029] netlink: 'syz.1.7379': attribute type 3 has an invalid length. [ 1190.360398][T26029] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.7379'. [ 1191.869024][T26069] netlink: 'syz.2.7393': attribute type 6 has an invalid length. [ 1191.908861][T26069] netlink: 164 bytes leftover after parsing attributes in process `syz.2.7393'. [ 1192.121672][T26068] netlink: 132 bytes leftover after parsing attributes in process `syz.6.7394'. [ 1192.166231][T26076] netlink: 'syz.4.7396': attribute type 3 has an invalid length. [ 1192.334950][T26076] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.7396'. [ 1192.574776][ T4283] Bluetooth: hci2: unexpected event 0x23 length: 15 > 13 [ 1192.636959][T26080] netlink: 'syz.6.7397': attribute type 21 has an invalid length. [ 1192.696185][T26080] netlink: 132 bytes leftover after parsing attributes in process `syz.6.7397'. [ 1193.252790][T26091] device sit0 entered promiscuous mode [ 1193.283100][T26095] device sit0 left promiscuous mode [ 1193.667820][T26116] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7407'. [ 1193.794957][T26127] netlink: 'syz.1.7409': attribute type 3 has an invalid length. [ 1193.854445][T26127] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.7409'. [ 1194.797116][T26154] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7423'. [ 1195.054558][T26159] device syzkaller0 entered promiscuous mode [ 1195.299516][T26174] netlink: 'syz.4.7427': attribute type 3 has an invalid length. [ 1195.327940][T26174] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.7427'. [ 1196.838189][T26216] netlink: 'syz.5.7441': attribute type 1 has an invalid length. [ 1196.846729][T26216] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.7441'. [ 1198.336518][T26208] device syzkaller0 entered promiscuous mode [ 1199.226371][T26256] netlink: 'syz.6.7455': attribute type 3 has an invalid length. [ 1199.241103][T26256] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.7455'. [ 1199.290940][T26266] netlink: 15007 bytes leftover after parsing attributes in process `syz.1.7457'. [ 1199.625840][T26280] netlink: 'syz.1.7460': attribute type 2 has an invalid length. [ 1200.219273][T26297] netlink: 188 bytes leftover after parsing attributes in process `syz.5.7467'. [ 1200.973149][T26314] netlink: 'syz.2.7470': attribute type 4 has an invalid length. [ 1200.980942][T26314] netlink: 152 bytes leftover after parsing attributes in process `syz.2.7470'. [ 1201.173145][T26317] netlink: 'syz.1.7473': attribute type 3 has an invalid length. [ 1201.195492][T26317] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.7473'. [ 1201.409071][T26341] netlink: 'syz.5.7477': attribute type 2 has an invalid length. [ 1201.464295][T26341] netlink: 199848 bytes leftover after parsing attributes in process `syz.5.7477'. [ 1202.609139][T26380] netlink: 'syz.4.7492': attribute type 3 has an invalid length. [ 1202.637357][T26380] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.7492'. [ 1202.905931][T26397] device syzkaller0 entered promiscuous mode [ 1203.923813][T26431] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.7506'. [ 1206.057292][T26432] netlink: 14 bytes leftover after parsing attributes in process `syz.1.7509'. [ 1206.104726][T26432] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1206.125243][T26432] bond0 (unregistering): Released all slaves [ 1206.216254][T26443] netlink: 'syz.2.7511': attribute type 3 has an invalid length. [ 1206.233251][T26443] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.7511'. [ 1207.151829][T26480] netlink: 'syz.4.7522': attribute type 3 has an invalid length. [ 1207.177356][T26487] device syzkaller0 entered promiscuous mode [ 1207.182168][T26480] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.7522'. [ 1207.944588][T26501] netlink: 'syz.5.7527': attribute type 3 has an invalid length. [ 1207.967064][T26501] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.7527'. [ 1209.933053][T26484] netlink: 'syz.1.7523': attribute type 21 has an invalid length. [ 1210.285634][T26517] netlink: 132 bytes leftover after parsing attributes in process `syz.5.7532'. [ 1210.863544][T26542] device syzkaller0 entered promiscuous mode [ 1211.141410][T26558] netlink: 'syz.4.7542': attribute type 3 has an invalid length. [ 1211.178703][T26558] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.7542'. [ 1213.434180][T26533] netlink: 'syz.6.7539': attribute type 21 has an invalid length. [ 1213.565962][T26579] netlink: 132 bytes leftover after parsing attributes in process `syz.6.7548'. [ 1214.029154][T26596] netlink: 'syz.1.7556': attribute type 3 has an invalid length. [ 1214.053772][T26596] netlink: 'syz.1.7556': attribute type 8 has an invalid length. [ 1214.061556][T26596] netlink: 'syz.1.7556': attribute type 7 has an invalid length. [ 1214.090870][T26596] netlink: 194740 bytes leftover after parsing attributes in process `syz.1.7556'. [ 1214.373467][T26614] netlink: 'syz.1.7561': attribute type 3 has an invalid length. [ 1214.415287][T26613] device syzkaller0 entered promiscuous mode [ 1214.422664][T26614] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.7561'. [ 1216.763831][T26603] netlink: 'syz.2.7559': attribute type 21 has an invalid length. [ 1216.772263][T26621] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7564'. [ 1216.909285][T26641] netlink: 'syz.6.7571': attribute type 29 has an invalid length. [ 1216.920476][T26641] netlink: 'syz.6.7571': attribute type 29 has an invalid length. [ 1216.953946][T26641] netlink: 'syz.6.7571': attribute type 29 has an invalid length. [ 1217.020449][T26648] netlink: 'syz.6.7571': attribute type 11 has an invalid length. [ 1217.295329][T26660] netlink: 188 bytes leftover after parsing attributes in process `syz.6.7576'. [ 1217.333319][T26660] ksmbd: Daemon and kernel module version mismatch. ksmbd: 2, kernel module: 1. User-space ksmbd should terminate. [ 1217.635451][T26677] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7581'. [ 1217.754666][T26679] device syzkaller0 entered promiscuous mode [ 1217.912719][T26685] netlink: 116376 bytes leftover after parsing attributes in process `syz.1.7584'. [ 1217.916405][T26682] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.7583'. [ 1221.783227][T26721] validate_nla: 3 callbacks suppressed [ 1221.783262][T26721] netlink: 'syz.1.7596': attribute type 2 has an invalid length. [ 1221.824393][T26721] netlink: 'syz.1.7596': attribute type 1 has an invalid length. [ 1221.834063][T26721] netlink: 170140 bytes leftover after parsing attributes in process `syz.1.7596'. [ 1221.873249][T26727] netlink: 2639 bytes leftover after parsing attributes in process `syz.5.7598'. [ 1222.138510][T26739] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7605'. [ 1222.147508][T26734] netlink: 'syz.1.7602': attribute type 3 has an invalid length. [ 1222.161227][T26734] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.7602'. [ 1222.493287][T26747] device syzkaller0 entered promiscuous mode [ 1222.896773][T26766] netlink: 'syz.6.7613': attribute type 2 has an invalid length. [ 1222.910922][T26766] netlink: 'syz.6.7613': attribute type 1 has an invalid length. [ 1222.932378][T26766] netlink: 170140 bytes leftover after parsing attributes in process `syz.6.7613'. [ 1225.850949][T26759] netlink: 152 bytes leftover after parsing attributes in process `syz.1.7611'. [ 1225.881351][T26785] netlink: 128 bytes leftover after parsing attributes in process `syz.4.7620'. [ 1225.902543][T26785] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1226.215723][T26801] netlink: 'syz.4.7626': attribute type 2 has an invalid length. [ 1226.250342][T26801] netlink: 'syz.4.7626': attribute type 1 has an invalid length. [ 1226.286324][T26801] netlink: 170140 bytes leftover after parsing attributes in process `syz.4.7626'. [ 1226.310230][T26805] netlink: 'syz.6.7625': attribute type 3 has an invalid length. [ 1226.320056][T26805] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.7625'. [ 1226.476288][T26813] netlink: 132 bytes leftover after parsing attributes in process `syz.5.7631'. [ 1226.685062][T26816] netlink: 'syz.2.7632': attribute type 3 has an invalid length. [ 1226.904022][T26832] __nla_validate_parse: 2 callbacks suppressed [ 1226.904042][T26832] netlink: 128 bytes leftover after parsing attributes in process `syz.5.7637'. [ 1227.013042][T26832] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1227.066108][T26833] netlink: 'syz.4.7638': attribute type 3 has an invalid length. [ 1227.115789][T26832] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1227.144622][T26833] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.7638'. [ 1227.965872][T26844] device syzkaller0 entered promiscuous mode [ 1228.109464][T26860] netlink: 'syz.6.7643': attribute type 3 has an invalid length. [ 1228.129561][T26860] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.7643'. [ 1230.275839][T26865] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7647'. [ 1230.285591][T26869] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7649'. [ 1230.416429][T26872] netlink: 128 bytes leftover after parsing attributes in process `syz.1.7650'. [ 1230.458086][T26872] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1230.513223][T26872] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1230.628857][T26880] netlink: 'syz.2.7661': attribute type 3 has an invalid length. [ 1230.658124][T26880] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.7661'. [ 1230.664559][T26882] netlink: 164 bytes leftover after parsing attributes in process `syz.5.7653'. [ 1230.692125][T26878] netlink: 'syz.6.7651': attribute type 3 has an invalid length. [ 1230.711989][T26878] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.7651'. [ 1231.218835][T26903] netlink: 132 bytes leftover after parsing attributes in process `syz.6.7662'. [ 1231.573510][T26915] device syzkaller0 entered promiscuous mode [ 1231.714901][T26928] netlink: 'syz.5.7669': attribute type 3 has an invalid length. [ 1231.948274][T26935] netlink: 'syz.1.7671': attribute type 3 has an invalid length. [ 1231.972355][T26935] __nla_validate_parse: 3 callbacks suppressed [ 1231.972374][T26935] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.7671'. [ 1232.137776][ T4283] Bluetooth: hci0: unexpected subevent 0x0e length: 150 > 15 [ 1234.358058][T26956] netlink: 132 bytes leftover after parsing attributes in process `syz.6.7679'. [ 1234.447982][T26958] device sit0 entered promiscuous mode [ 1235.017789][T26978] netlink: 'syz.2.7687': attribute type 29 has an invalid length. [ 1235.290100][T26978] netlink: 'syz.2.7687': attribute type 29 has an invalid length. [ 1235.328612][T26979] netlink: 'syz.2.7687': attribute type 29 has an invalid length. [ 1235.373971][T26980] netlink: 'syz.2.7687': attribute type 29 has an invalid length. [ 1235.390832][T26981] netlink: 'syz.2.7687': attribute type 29 has an invalid length. [ 1237.797648][T26988] device syzkaller0 entered promiscuous mode [ 1237.812240][T26994] netlink: 'syz.5.7690': attribute type 3 has an invalid length. [ 1237.842022][T26994] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.7690'. [ 1238.940170][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.946751][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1240.179532][T27004] netlink: 'syz.5.7692': attribute type 3 has an invalid length. [ 1240.197207][T27004] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.7692'. [ 1243.674434][T27030] netlink: 'syz.1.7703': attribute type 3 has an invalid length. [ 1243.690224][T27030] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.7703'. [ 1243.937532][T27047] netlink: 65039 bytes leftover after parsing attributes in process `syz.6.7710'. [ 1244.110555][T27049] netlink: 'syz.5.7708': attribute type 3 has an invalid length. [ 1244.131734][T27049] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.7708'. [ 1244.206448][T27060] netlink: 134056 bytes leftover after parsing attributes in process `syz.6.7714'. [ 1244.207002][T27058] device syzkaller0 entered promiscuous mode [ 1244.729757][T27078] netlink: 'syz.2.7719': attribute type 3 has an invalid length. [ 1244.757703][T27078] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.7719'. [ 1246.696604][T27075] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1246.723370][T27075] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1246.741627][T27075] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1247.167583][T27104] netlink: 'syz.4.7728': attribute type 3 has an invalid length. [ 1247.192715][T27104] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.7728'. [ 1247.367545][T27124] netlink: 126632 bytes leftover after parsing attributes in process `syz.2.7737'. [ 1247.382657][T27124] netlink: 8192 bytes leftover after parsing attributes in process `syz.2.7737'. [ 1247.447662][T27115] netlink: 'syz.5.7734': attribute type 3 has an invalid length. [ 1247.510893][T27115] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.7734'. [ 1247.543428][T27122] netlink: 'syz.1.7736': attribute type 3 has an invalid length. [ 1247.562355][T27122] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.7736'. [ 1247.598243][T27128] device syzkaller0 entered promiscuous mode [ 1249.967946][T27136] device syzkaller0 entered promiscuous mode [ 1252.042127][T27165] netlink: 'syz.5.7749': attribute type 2 has an invalid length. [ 1252.051606][T27165] netlink: 'syz.5.7749': attribute type 4 has an invalid length. [ 1252.060367][T27165] netlink: 132 bytes leftover after parsing attributes in process `syz.5.7749'. [ 1252.237050][T27171] netlink: 'syz.6.7750': attribute type 3 has an invalid length. [ 1252.252243][T27173] netlink: 164 bytes leftover after parsing attributes in process `syz.5.7751'. [ 1252.265756][T27171] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.7750'. [ 1252.562204][T27186] netlink: 164 bytes leftover after parsing attributes in process `syz.5.7766'. [ 1252.899678][T27188] netlink: 'syz.4.7756': attribute type 3 has an invalid length. [ 1252.918482][T27188] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.7756'. [ 1252.942313][T27192] netlink: 'syz.5.7758': attribute type 3 has an invalid length. [ 1252.954479][T27192] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.7758'. [ 1253.201067][T27210] netlink: 'syz.2.7764': attribute type 3 has an invalid length. [ 1253.241487][T27210] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.7764'. [ 1253.395263][T27220] netlink: 'syz.5.7768': attribute type 10 has an invalid length. [ 1253.454893][T27220] netlink: 168 bytes leftover after parsing attributes in process `syz.5.7768'. [ 1253.606666][T27230] netlink: 164 bytes leftover after parsing attributes in process `syz.6.7770'. [ 1254.047313][T27213] delete_channel: no stack [ 1255.422278][T27246] netlink: 'syz.5.7774': attribute type 10 has an invalid length. [ 1255.517523][T27246] team0: Device hsr_slave_0 failed to register rx_handler [ 1255.721640][T27260] netlink: 'syz.2.7781': attribute type 3 has an invalid length. [ 1255.743793][T27260] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.7781'. [ 1255.781580][T27258] netlink: 'syz.6.7778': attribute type 3 has an invalid length. [ 1256.455717][T27280] device syzkaller0 entered promiscuous mode [ 1257.381004][T27325] netlink: 'syz.2.7796': attribute type 3 has an invalid length. [ 1257.393543][T27325] __nla_validate_parse: 1 callbacks suppressed [ 1257.393562][T27325] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.7796'. [ 1257.983222][T27335] netlink: 16399 bytes leftover after parsing attributes in process `syz.1.7801'. [ 1259.128779][T27304] netlink: 56 bytes leftover after parsing attributes in process `syz.4.7793'. [ 1259.271274][T27341] netlink: 9286 bytes leftover after parsing attributes in process `syz.5.7804'. [ 1259.287188][T27341] netlink: 9286 bytes leftover after parsing attributes in process `syz.5.7804'. [ 1259.821824][T27370] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1259.840520][T27370] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1260.107465][T27379] netlink: 'syz.5.7816': attribute type 21 has an invalid length. [ 1260.116951][T27379] netlink: 128 bytes leftover after parsing attributes in process `syz.5.7816'. [ 1260.139317][T27379] netlink: 'syz.5.7816': attribute type 4 has an invalid length. [ 1260.147886][T27379] netlink: 'syz.5.7816': attribute type 3 has an invalid length. [ 1260.156279][T27379] netlink: 3 bytes leftover after parsing attributes in process `syz.5.7816'. [ 1260.179709][T27377] netlink: 'syz.2.7815': attribute type 3 has an invalid length. [ 1260.205226][T27377] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.7815'. [ 1260.285842][T27384] device syzkaller0 entered promiscuous mode [ 1261.137404][T27420] netlink: 'syz.4.7829': attribute type 3 has an invalid length. [ 1261.164639][T27420] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.7829'. [ 1261.481149][T27432] netlink: 'syz.5.7832': attribute type 3 has an invalid length. [ 1261.508148][T27432] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.7832'. [ 1264.255740][T27470] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7846'. [ 1264.410532][T27477] netlink: 126632 bytes leftover after parsing attributes in process `syz.1.7848'. [ 1264.464971][T27477] netlink: 8192 bytes leftover after parsing attributes in process `syz.1.7848'. [ 1264.660658][T27481] netlink: 'syz.4.7851': attribute type 3 has an invalid length. [ 1264.751689][T27481] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.7851'. [ 1265.117019][T27494] netlink: 'syz.2.7854': attribute type 3 has an invalid length. [ 1265.158537][T27494] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.7854'. [ 1265.642120][T27522] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7864'. [ 1265.818732][T27530] netlink: 152 bytes leftover after parsing attributes in process `syz.2.7866'. [ 1266.312186][T27549] netlink: 'syz.4.7871': attribute type 3 has an invalid length. [ 1266.348250][T27549] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.7871'. [ 1266.599384][T27559] netlink: 'syz.5.7877': attribute type 13 has an invalid length. [ 1266.629725][T27559] netlink: 152 bytes leftover after parsing attributes in process `syz.5.7877'. [ 1266.680390][T27559] syz_tun: refused to change device tx_queue_len [ 1266.695805][T27559] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1266.727054][T27563] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7878'. [ 1269.267044][T27597] netlink: 152 bytes leftover after parsing attributes in process `syz.6.7889'. [ 1269.561829][T27612] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7893'. [ 1269.619355][T27611] netlink: 'syz.6.7894': attribute type 3 has an invalid length. [ 1269.639598][T27611] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.7894'. [ 1269.909450][T27632] netlink: 16255 bytes leftover after parsing attributes in process `syz.6.7903'. [ 1270.287503][T27652] netlink: 'syz.5.7912': attribute type 10 has an invalid length. [ 1270.315563][T27652] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7912'. [ 1270.347076][T27652] device ipvlan1 entered promiscuous mode [ 1270.375882][T27652] bridge0: port 3(ipvlan1) entered blocking state [ 1270.401575][T27652] bridge0: port 3(ipvlan1) entered disabled state [ 1270.425902][T27652] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1270.471224][T27656] netlink: 'syz.6.7913': attribute type 3 has an invalid length. [ 1270.491889][T27656] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.7913'. [ 1270.745430][T27676] netlink: 'syz.4.7923': attribute type 27 has an invalid length. [ 1270.860908][T27676] bond0: (slave bond_slave_0): Releasing backup interface [ 1270.907049][T27686] netlink: 108108 bytes leftover after parsing attributes in process `syz.5.7926'. [ 1271.098148][T27678] netlink: 'syz.6.7922': attribute type 3 has an invalid length. [ 1271.117664][T27678] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.7922'. [ 1271.495865][T27711] netlink: 'syz.6.7936': attribute type 2 has an invalid length. [ 1271.513837][T27711] netlink: 132 bytes leftover after parsing attributes in process `syz.6.7936'. [ 1271.598768][T27704] netlink: 'syz.5.7932': attribute type 3 has an invalid length. [ 1271.674802][T27704] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.7932'. [ 1272.191882][T27743] netlink: 'syz.1.7948': attribute type 3 has an invalid length. [ 1272.620915][T27759] netlink: 'syz.5.7956': attribute type 3 has an invalid length. [ 1273.662092][T27798] netlink: 'syz.1.7969': attribute type 21 has an invalid length. [ 1273.856275][T27805] netlink: 'syz.1.7969': attribute type 3 has an invalid length. [ 1274.338754][T27809] team0: Port device wlan1 added [ 1275.102025][T27852] __nla_validate_parse: 4 callbacks suppressed [ 1275.102065][T27852] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.7984'. [ 1275.209052][T27848] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.7985'. [ 1275.607676][T27865] validate_nla: 4 callbacks suppressed [ 1275.607691][T27865] netlink: 'syz.5.7991': attribute type 39 has an invalid length. [ 1275.662249][T27865] device macvlan0 entered promiscuous mode [ 1276.272525][T27891] netlink: 'syz.2.8000': attribute type 13 has an invalid length. [ 1276.313860][T27891] netlink: 152 bytes leftover after parsing attributes in process `syz.2.8000'. [ 1276.376820][T27891] erspan0: refused to change device tx_queue_len [ 1276.434177][T27891] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 1276.473573][T27905] netlink: 'syz.5.8001': attribute type 3 has an invalid length. [ 1276.486941][T27905] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.8001'. [ 1276.520018][T27892] netlink: 'syz.2.8000': attribute type 13 has an invalid length. [ 1276.541689][T27892] netlink: 152 bytes leftover after parsing attributes in process `syz.2.8000'. [ 1276.574370][T27892] erspan0: refused to change device tx_queue_len [ 1276.599077][T27892] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 1277.149061][T27920] netlink: 'syz.5.8010': attribute type 3 has an invalid length. [ 1277.182492][T27920] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.8010'. [ 1279.846158][T27938] netlink: 'syz.2.8015': attribute type 10 has an invalid length. [ 1279.862609][T27938] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8015'. [ 1279.871781][T27938] device ipvlan1 entered promiscuous mode [ 1279.924159][T27938] bridge0: port 3(ipvlan1) entered blocking state [ 1279.942226][T27938] bridge0: port 3(ipvlan1) entered disabled state [ 1279.951086][T27938] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1280.057874][T27935] device syzkaller0 entered promiscuous mode [ 1280.214234][T27953] netlink: 'syz.1.8021': attribute type 2 has an invalid length. [ 1280.245823][T27953] netlink: 199848 bytes leftover after parsing attributes in process `syz.1.8021'. [ 1280.411836][T27959] netlink: 'syz.2.8020': attribute type 3 has an invalid length. [ 1280.431038][T27959] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.8020'. [ 1281.262584][T27972] netlink: 4595 bytes leftover after parsing attributes in process `syz.5.8027'. [ 1282.585224][T27950] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8019'. [ 1282.850154][T27985] netlink: 'syz.4.8028': attribute type 10 has an invalid length. [ 1282.927190][T27985] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8028'. [ 1282.998964][T27985] device team0 entered promiscuous mode [ 1283.053398][T27985] device team_slave_0 entered promiscuous mode [ 1283.059762][T27985] device team_slave_1 entered promiscuous mode [ 1283.096214][T27989] netlink: 'syz.1.8034': attribute type 2 has an invalid length. [ 1283.104597][T27989] netlink: 'syz.1.8034': attribute type 3 has an invalid length. [ 1283.108935][T27985] bridge0: port 3(team0) entered blocking state [ 1283.142243][T27985] bridge0: port 3(team0) entered disabled state [ 1283.143066][T27989] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8034'. [ 1283.161708][T27985] bridge0: port 3(team0) entered blocking state [ 1283.168171][T27985] bridge0: port 3(team0) entered forwarding state [ 1283.286177][T28004] netlink: 132 bytes leftover after parsing attributes in process `syz.6.8039'. [ 1283.579718][T28009] netlink: 'syz.5.8041': attribute type 3 has an invalid length. [ 1283.600431][T28009] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.8041'. [ 1283.789355][T28025] device veth1_macvtap left promiscuous mode [ 1283.838631][T28021] netlink: 'syz.2.8045': attribute type 3 has an invalid length. [ 1283.885038][T28021] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.8045'. [ 1284.886362][T28034] device veth1_macvtap entered promiscuous mode [ 1284.893223][T28034] device macsec0 entered promiscuous mode [ 1286.956035][T28047] netlink: 'syz.1.8052': attribute type 10 has an invalid length. [ 1287.041014][T28047] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1287.075667][T28053] netlink: 132 bytes leftover after parsing attributes in process `syz.5.8055'. [ 1287.326878][T28063] netlink: 'syz.2.8059': attribute type 3 has an invalid length. [ 1287.352864][T28063] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.8059'. [ 1287.391597][T28071] netlink: 'syz.5.8062': attribute type 10 has an invalid length. [ 1287.587703][T28074] device syzkaller0 entered promiscuous mode [ 1288.710650][T28117] netlink: 'syz.6.8076': attribute type 3 has an invalid length. [ 1288.736405][T28117] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.8076'. [ 1290.145769][T28098] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8071'. [ 1290.163205][T28104] netlink: 128 bytes leftover after parsing attributes in process `syz.2.8071'. [ 1290.178047][T28104] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1290.217315][T28104] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1290.433047][T28120] netlink: 'syz.1.8077': attribute type 3 has an invalid length. [ 1290.441443][T28120] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.8077'. [ 1290.537007][T28128] netlink: 'syz.6.8080': attribute type 21 has an invalid length. [ 1290.582540][T28128] IPv6: NLM_F_CREATE should be specified when creating new route [ 1290.630470][T28128] IPv6: Can't replace route, no match found [ 1291.773891][T28152] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.8089'. [ 1292.002573][T28155] netlink: 'syz.2.8090': attribute type 3 has an invalid length. [ 1292.013024][T28155] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.8090'. [ 1300.378886][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.385302][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1318.292607][ T4317] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 1-.... } 2639 jiffies s: 238745 root: 0x2/. [ 1318.312352][ T4317] rcu: blocking rcu_node structures (internal RCU debug): [ 1318.320836][ T4317] Sending NMI from CPU 0 to CPUs 1: [ 1318.326237][ C1] NMI backtrace for cpu 1 [ 1318.326247][ C1] CPU: 1 PID: 28153 Comm: syz.4.8089 Not tainted syzkaller #0 [ 1318.326263][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1318.326272][ C1] RIP: 0010:__cant_migrate+0x155/0x2f0 [ 1318.326294][ C1] Code: 00 43 c7 44 2f 08 00 00 00 00 65 48 8b 04 25 28 00 00 00 48 3b 84 24 80 00 00 00 0f 85 09 01 00 00 48 8d 65 d8 5b 41 5c 41 5d <41> 5e 41 5f 5d c3 48 89 7c 24 18 89 74 24 14 48 c7 c0 00 f2 80 8c [ 1318.326307][ C1] RSP: 0018:ffffc9000d226f80 EFLAGS: 00000046 [ 1318.326320][ C1] RAX: 7d18fab03a701400 RBX: ffffc9000dd51000 RCX: dffffc0000000000 [ 1318.326332][ C1] RDX: 0000000000000000 RSI: 000000000000024e RDI: ffffffff8a918d80 [ 1318.326342][ C1] RBP: ffffc9000d226f90 R08: dffffc0000000000 R09: 1ffffffff2162048 [ 1318.326353][ C1] R10: dffffc0000000000 R11: fffffbfff2162049 R12: ffffffff8cb80420 [ 1318.326364][ C1] R13: ffff88801cbc1698 R14: ffff88801cbc16a8 R15: 1ffff92001a44ddc [ 1318.326375][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1318.326387][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1318.326398][ C1] CR2: 00007fa9dbe10ff8 CR3: 000000004a148000 CR4: 00000000003506e0 [ 1318.326412][ C1] DR0: 0000000000000000 DR1: 0000200000000300 DR2: 0000200000000300 [ 1318.326422][ C1] DR3: 0000200000000300 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1318.326431][ C1] Call Trace: [ 1318.326437][ C1] [ 1318.326445][ C1] trace_call_bpf+0x2e8/0x6b0 [ 1318.326466][ C1] ? trace_call_bpf+0xbf/0x6b0 [ 1318.326488][ C1] ? __bpf_trace_bpf_trace_printk+0x20/0x20 [ 1318.326507][ C1] ? trace_call_bpf+0xbf/0x6b0 [ 1318.326526][ C1] ? trace_call_bpf+0x5d6/0x6b0 [ 1318.326544][ C1] ? trace_call_bpf+0xbf/0x6b0 [ 1318.326565][ C1] perf_trace_run_bpf_submit+0x79/0x1c0 [ 1318.326589][ C1] perf_trace_preemptirq_template+0x268/0x320 [ 1318.326611][ C1] ? asm_sysvec_irq_work+0x16/0x20 [ 1318.326632][ C1] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 1318.326652][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1318.326674][ C1] ? lock_chain_count+0x20/0x20 [ 1318.326694][ C1] ? asm_sysvec_irq_work+0x16/0x20 [ 1318.326712][ C1] trace_irq_enable_rcuidle+0xd3/0x140 [ 1318.326733][ C1] trace_hardirqs_on+0x24/0x40 [ 1318.326751][ C1] asm_sysvec_irq_work+0x16/0x20 [ 1318.326768][ C1] RIP: 0010:rcu_read_unlock_special+0x7f/0x510 [ 1318.326785][ C1] Code: eb 03 48 b8 f1 f1 f1 f1 f8 f2 f2 f2 4a 89 04 2b 42 c7 44 2b 08 f8 f3 f3 f3 65 44 8b 35 a2 7c 95 7e 41 f7 c6 00 00 f0 00 74 40 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 42 c7 44 2b 08 [ 1318.326796][ C1] RSP: 0018:ffffc9000d2272c0 EFLAGS: 00000206 [ 1318.326808][ C1] RAX: 7d18fab03a701400 RBX: 1ffff92001a44e60 RCX: 7d18fab03a701400 [ 1318.326819][ C1] RDX: dffffc0000000000 RSI: ffffffff8a8c17a0 RDI: ffffffff8adf5de0 [ 1318.326830][ C1] RBP: ffffc9000d2273b0 R08: ffffffff90b10247 R09: 1ffffffff2162048 [ 1318.326840][ C1] R10: dffffc0000000000 R11: fffffbfff2162049 R12: 0000000000000246 [ 1318.326851][ C1] R13: dffffc0000000000 R14: ffff8880b8f3bb00 R15: 0000000000000002 [ 1318.326872][ C1] ? __rcu_read_unlock+0xd0/0xd0 [ 1318.326887][ C1] ? folio_memcg_lock+0xf2/0x320 [ 1318.326905][ C1] ? folio_memcg_lock+0x7d/0x320 [ 1318.326921][ C1] ? mem_cgroup_get_oom_group+0x350/0x350 [ 1318.326941][ C1] __rcu_read_unlock+0x78/0xd0 [ 1318.326956][ C1] __folio_memcg_unlock+0xea/0x110 [ 1318.326974][ C1] page_remove_rmap+0x7f5/0xef0 [ 1318.327000][ C1] unmap_page_range+0x10db/0x25b0 [ 1318.327036][ C1] unmap_vmas+0x260/0x390 [ 1318.327055][ C1] ? unmap_vmas+0x1bd/0x390 [ 1318.327076][ C1] ? unmap_page_range+0x25b0/0x25b0 [ 1318.327098][ C1] ? __lock_acquire+0x7c40/0x7c40 [ 1318.327126][ C1] exit_mmap+0x20d/0x970 [ 1318.327146][ C1] ? vm_brk+0x20/0x20 [ 1318.327162][ C1] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1318.327189][ C1] ? exit_mm+0x23d/0x350 [ 1318.327213][ C1] ? uprobe_clear_state+0x274/0x290 [ 1318.327313][ C1] __mmput+0x118/0x3a0 [ 1318.327329][ C1] exit_mm+0x24d/0x350 [ 1318.327349][ C1] ? do_exit+0x2570/0x2570 [ 1318.327369][ C1] ? taskstats_exit+0x355/0x9e0 [ 1318.327421][ C1] do_exit+0x958/0x2570 [ 1318.327446][ C1] ? put_task_struct+0x80/0x80 [ 1318.327465][ C1] ? ct_nmi_exit+0x145/0x1c0 [ 1318.327482][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1318.327501][ C1] ? _raw_spin_lock_irq+0x86/0xf0 [ 1318.327518][ C1] ? lock_chain_count+0x20/0x20 [ 1318.327537][ C1] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1318.327553][ C1] do_group_exit+0x229/0x2e0 [ 1318.327573][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 1318.327589][ C1] get_signal+0x1259/0x1340 [ 1318.327614][ C1] ? trace_call_bpf+0xbf/0x6b0 [ 1318.327637][ C1] arch_do_signal_or_restart+0xc4/0x1310 [ 1318.327691][ C1] ? __bpf_trace_bpf_trace_printk+0x20/0x20 [ 1318.327717][ C1] ? perf_trace_run_bpf_submit+0x124/0x1c0 [ 1318.327740][ C1] ? get_sigframe_size+0x10/0x10 [ 1318.327757][ C1] ? perf_trace_preemptirq_template+0x268/0x320 [ 1318.327784][ C1] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1318.327805][ C1] ? exit_to_user_mode_loop+0x3b/0x110 [ 1318.327856][ C1] exit_to_user_mode_loop+0x70/0x110 [ 1318.327877][ C1] exit_to_user_mode_prepare+0xee/0x180 [ 1318.327898][ C1] syscall_exit_to_user_mode+0x16/0x40 [ 1318.327913][ C1] do_syscall_64+0x58/0xa0 [ 1318.327932][ C1] ? clear_bhb_loop+0x60/0xb0 [ 1318.327950][ C1] ? clear_bhb_loop+0x60/0xb0 [ 1318.327969][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1318.327993][ C1] RIP: 0033:0x7f0db019e0d9 [ 1318.328006][ C1] Code: Unable to access opcode bytes at 0x7f0db019e0af. [ 1318.328013][ C1] RSP: 002b:00007f0db10480e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1318.328027][ C1] RAX: fffffffffffffe00 RBX: 00007f0db0426098 RCX: 00007f0db019e0d9 [ 1318.328038][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f0db0426098 [ 1318.328047][ C1] RBP: 00007f0db0426090 R08: 0000000000000000 R09: 0000000000000000 [ 1318.328057][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1318.328065][ C1] R13: 00007f0db0426128 R14: 00007ffea26d6470 R15: 00007ffea26d6558 [ 1318.328083][ C1]