last executing test programs: 1m54.31357071s ago: executing program 0 (id=2083): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000140)={&(0x7f0000000040)=@hci={0x1f, 0x4, 0x2}, 0x80, 0x0, 0xfffffffffffffd7c}, 0x44) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) 1m53.630450846s ago: executing program 0 (id=2086): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) r1 = syz_clone(0x81084000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002380)) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x6, '\x00', 0x0, r0, 0x1, 0x2, 0x2}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x4}]}]}, {0x0, [0x0, 0x0, 0x0, 0x5f, 0x10]}}, &(0x7f0000000380)=""/136, 0x37, 0x88, 0x1}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002140)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x4}, 0x50) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x600000, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x10000}, r1, 0x0, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0xfe, 0x4, 0x4, 0x0, 0x9, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x9, 0x43a1bd76, 0x7, 0xa, 0x6, 0x2, 0x0, 0xfffffffc, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x7, 0x1d, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000001000000b708000000000000dbaaf8fff1000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffff", @ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000b300"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r3}, 0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0x58, &(0x7f0000000580)}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x6, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000400000", @ANYRES32=r4, @ANYRES32=r5], 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x9, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x255e35d075133d71, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff05, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r7, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c98e16a6009e62476f000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = gettid() sendmsg$unix(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000007c0)='>', 0x1}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r10, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r9, @ANYRES32=0x0, @ANYRES32=r8, @ANYRES32=r9, @ANYRES32=r8, @ANYRES32=r9, @ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r8, @ANYBLOB="e5ffff6e18"], 0xa0}, 0x4004881) r11 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba00001b2cc32b38d3740000ffffffefffffff", 0x38}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc/1k\xfc\x9e\x98\xac;#\xdb\x0f!/\x00\x82q\xee\xe5\xa0\xbd\xc2\x98#'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x7}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1d, 0x2, 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000180)={[{0x2d, 'cpu'}, {0x2d, 'freezer'}, {0x2d, 'rdma'}, {0x6, 'pids'}]}, 0x1a) 1m53.226779116s ago: executing program 0 (id=2089): close(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x2505, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x8}, 0x0, 0x4, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x10, 0x0, 0x0) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000800) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x9a) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000880)={@cgroup, 0xffffffffffffffff, 0x1f, 0x201c}, 0x20) (async) r0 = socket$kcm(0xf, 0x3, 0x2) close(r0) (async) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xb, &(0x7f0000001a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xfffffffc}, [@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}, {0x85, 0x0, 0x0, 0x6c}}]}, &(0x7f0000000180)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x18, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a7}, 0x94) 1m52.951311163s ago: executing program 0 (id=2091): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x8000, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x7ff, 0x72}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd634936f2}) r2 = openat$cgroup_ro(r0, &(0x7f0000000180)='memory.current\x00', 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0xd) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000080)) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x2}, 0x90, 0xa4, 0x2, 0x5, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0x3) 1m52.23057311s ago: executing program 0 (id=2095): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000001140)=ANY=[@ANYBLOB='1-2:5'], 0x31) r3 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, 0x0, 0x0) r4 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[], 0x101d0) r5 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r6 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[], 0x101d0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, 0x0, 0x0) syz_clone(0x630c0700, 0x0, 0x0, 0x0, 0x0, 0x0) close(0x3) 1m50.047316883s ago: executing program 0 (id=2112): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r3 = openat$cgroup_procs(r0, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000300)=r2, 0x12) (async) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) (async) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) 1m34.109032527s ago: executing program 32 (id=2112): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r3 = openat$cgroup_procs(r0, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000300)=r2, 0x12) (async) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) (async) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) 7.942888487s ago: executing program 1 (id=2536): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='pids.events\x00', 0x26e1, 0x0) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@rights={{0x14, 0x1, 0x1, [r2]}}], 0x18, 0x4004064}, 0x40046) (async) r3 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="7e3f18a703bb1180334ef0ad18afe7020a31", 0x12}], 0x1}, 0x0) (async) close(r2) (async, rerun: 32) recvmsg$unix(r1, &(0x7f00000013c0)={0x0, 0x0, 0x0}, 0x1c0) (async, rerun: 32) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00eaff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x48) (async, rerun: 32) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x89ec, 0xfffffffffffffffb}, 0x10fc1d, 0x3, 0x4, 0x4, 0x3, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) (rerun: 32) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r5) (async) recvmsg(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000200)=""/94, 0x5e}], 0x1, &(0x7f0000000380)=""/8, 0x8}, 0x40002140) (async) r7 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000040), 0x3f00}], 0x1}, 0x0) (async, rerun: 64) recvmsg(r7, &(0x7f0000003180)={0x0, 0x8, 0x0, 0xffffffffffffff29, 0x0, 0xfef3}, 0x10060) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x3, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000004f00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000009800000095", @ANYRES8=r7], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, 0x94) (async) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) (async, rerun: 64) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x8d4) (async, rerun: 64) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81ffffffffb9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0x0, @mcast1}, 0x80, 0x0}, 0x0) (async, rerun: 64) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79fbff9775f3750300fe0000000000000000"], 0xfe1b) (async, rerun: 64) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) (async) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[], 0xfe33) (async) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000580)="5c00000052006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038021d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d49380e78ff6a1577ae18c819945fb4e37e70e4509c5", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10) (async) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="18000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x16}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe42, 0x0, &(0x7f0000000000)="0eefe1784c8b574772dd456e969e4cd0b6a1e80fdff25da951ba809d0e88b5e92e1304dcbade6c29e55cfecf89009522f5924de9d4cf5ab51da06f65b3584807c56d4a56e0cd55b17b6b5d3e432f48483a9ac5b981f1730586034e42f80aca17df94eabc583206", 0x0}, 0x50) 7.731786722s ago: executing program 3 (id=2537): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xfffffffffffffffb, 0x3fff8000}, 0xb182, 0x8c, 0x9, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x34}, 0x28) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x88, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}, 0x118880, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xf) syz_open_procfs$namespace(0x0, 0x0) socket$kcm(0x25, 0x5, 0x0) socketpair(0x2, 0x6, 0x31, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8946, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b400000000000003dd0a00000000000073013500000000009500000000000000b38a595efa0578208e8354bb546620e3690771f5bf003326913779cfaf84efb8b3f976c934b37c6aab214e75d6019bf1582d07e5b5351fb88008465255c682"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7}, 0x48) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x18, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r5, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000015c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6050, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x9}, 0x50) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f0000000040)}, 0x20) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f0, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4c, &(0x7f0000000000), 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f3, &(0x7f0000000080)) 7.289429363s ago: executing program 1 (id=2540): perf_event_open(&(0x7f00000008c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0xffffffffffffffff, 0x2b4}, 0x0, 0x10000, 0x100, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0900000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="00a600"/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="0200000001"], 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r1, 0x5b, &(0x7f00000001c0)}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_devices(r2, 0x0, 0x9) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)="d8000000140081054e81f782db44b904021f08020a000000040000a118000200e00000e4ffff0d1208000f0100810401880016ea1f0006400303000803600cfab94dcf5c0461c1d67f6f94007134cf6ee080005c8400f45312b3429fa0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a0000", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) perf_event_open(&(0x7f00000008c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0xffffffffffffffff, 0x2b4}, 0x0, 0x10000, 0x100, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37}, 0x20) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0900000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="00a600"/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="0200000001"], 0x50) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r1, 0x5b, &(0x7f00000001c0)}, 0x10) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000005c0)) (async) write$cgroup_devices(r2, 0x0, 0x9) (async) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)="d8000000140081054e81f782db44b904021f08020a000000040000a118000200e00000e4ffff0d1208000f0100810401880016ea1f0006400303000803600cfab94dcf5c0461c1d67f6f94007134cf6ee080005c8400f45312b3429fa0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a0000", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) (async) 7.098243628s ago: executing program 3 (id=2541): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001d80)=ANY=[@ANYBLOB="b70200001a000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b70600007fffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e6185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946e0ebc622003b538dfd8e012e79578e51bc5f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f659cb132b803000000661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7b148ba532e6ea09c346dfebd38608b32a0080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c61a137462c7f2539479f49d4eb2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e14861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc16e7c337642d3e5a815232f5e16b089f37b3591a15c0a9be6eb18208404c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b74cd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f50714600fb6241c6e955031795b2c2f56411e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c0977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6040099d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663dd472021d202eedd005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe3594d4a3f2239cfe00000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed180d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35f267632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e80339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd52364600000000000000000000000000000000000000000000dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000a5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f3390343c12a851810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f314001a62863f6e04b4506ac2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab79e609c57a2a7332f4d8764c302ccd5aac114482b619fca4d97a0ae75ccf11e29a854380e2b4bb9905a1517ec40bb3fa44f9959bad67ccaba76408da35e9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff17320adda5867947257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a927de6f4c09f4b742e037381c85d2ec7bb2a8152f0d6a99a0370e0cbd65744eb2efd7b65f04aa7e72588757b9612bb4253a63bb303c0c68a07f115d104f2007237a4f771416741bfd63fdfe3ae6f8bea755d8b7202c2bbae137dc1c3cf40db74a4c1c219d8ddec8f91dae2cdea1353fe062830fa1d233296e99d8317872257e154665485e7f31cdbfbf435517faf93015b57417d84b8bc8662e097d5ba55000048e150695ffae3a676555b10da11751865126d19336116a1e58ab727dda6b343cc97f9479136a66f552abf8fe3d134f6d69df1cf7800b4bda4db5e68aaccf44d24e09f8a769e3ae7bf246673f15e3d1adae4384bdb7cd30a33e30466b421feb96006c810fd3830a1c75af2580727ffc699d2b04f476acc21419fad9b1baec88974da2db29b80859bde08b85c8086e4b7f1fd568042ad5396d3179c71b1dc43291e450ce9b8d7d80fcb44966d7ad4691a37870000000000000000000000000000000000000000000000000000000000000000000083a5765d06da91165d24bc316607e2d69344aa1c07ff7cd7bc3d17f122478b6e81077782b9c298edc2546045feff90e7aa7dc1a869fa5551b873e2c838e979e033b7707df75b93cf5b8d25242741a88f2d54a7107375b25911aa11efa3a4f87fc14f180e353615b3cb9a5cf5ea843014a277c3694a5a83266f73ef039dd739187923715548d58ff43be997e357e0cbed29faef19c0082e26fb867bf0ff0000000000000000000000a0616252abda1102c3eee13eddef0275f21752ee474e32d790ae1f3df77e303ae1968c2a4419d1ca13b97b2c3123ab5b8473b880644e6acfe1d346d1528262c6e91f38029ec24eeb4fe5c1b3726bcfd386ba153fed11692170e5a09432bd02fa9dba861ecad4dbf61a93733a21aeff5f541b8f78bccbf1ac0000000000000000000000145aaaa62ff74b216b2977e7b9261824f663cea60ec6e0fa03bd596cec6d12316c8ed147d4cdd140857444c27c1946b1afcd4ec260694cb71e421744cf1f860840b0decf9be35aeb02d1bf6137b3189edb2d21557e6804ed52305e7deace8b97cd2b423cb79c541762097e29c386634a4bcc3ee91266d808706aadbc4650183d71bf5341edfe4c815d3a87c05d75da20b260d39cdd8559292000cb06faf9972683d379565dcd932fbc6bfb13f938a693252fc3af8088fcf8e06a"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000d03000000000000000000000203000000000000000000000b01"], 0x0, 0x3e}, 0x28) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0xfffffffffffffffc, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{0x1}, &(0x7f0000000000), &(0x7f0000000040)=r0}, 0x20) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, 0x0, 0x10}, 0x20040090) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r3) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x541b, &(0x7f00000000c0)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) recvmsg$unix(r5, &(0x7f0000001740)={&(0x7f0000000480)=@abs, 0x6e, &(0x7f0000001680)=[{&(0x7f0000000500)=""/205, 0xcd}, {&(0x7f0000000600)=""/59, 0x3b}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000001640)=""/48, 0x30}], 0x4, &(0x7f00000016c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80}, 0x21) socket$kcm(0x11, 0xa, 0x300) ioctl$TUNGETVNETLE(r4, 0x8955, &(0x7f0000000040)) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, r1, 0x4, 0x9, 0x3}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x6000002c, &(0x7f0000000100)="b9ff03316844268cb89e14f0080048e00500720e0000002f77fbac141516e0000001440c0510b18000890304000084508864325f003911050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffe}, 0x2c) 6.894983233s ago: executing program 1 (id=2544): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x18114, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x0, 0xc8, 0x4}, 0x0, 0x2, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x3e1, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081084e81f782db44b904021d080006067c09e8fe55a10a0015400800142603600e120800160000001001a8001600a400014003000000036004fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0x6000}, 0x0) (async) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="1100000011008b88040f80ec59acbc0413", 0x11}], 0x1}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x27, &(0x7f0000000040), 0x4) (async) close(r0) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xffffffffffffffef}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xb, 0x4, &(0x7f0000000300)=ANY=[], &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xeffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r7}, 0x4) (async) syz_clone(0x60000400, 0x0, 0x0, 0x0, 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000180), 0x4) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0xff, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r9 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x20040840) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) r10 = perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x9, 0x9, 0x5, 0x95, 0x0, 0x9, 0x240, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8, 0x6, @perf_bp={&(0x7f00000001c0), 0x1}, 0xa20, 0x45, 0x7f, 0x2, 0x1ff, 0x1, 0x9c7d, 0x0, 0x400, 0x0, 0x3}, 0xffffffffffffffff, 0x6, r5, 0x1) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r10, 0x2405, r6) 6.404614124s ago: executing program 3 (id=2546): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10}, 0x0, 0xca, 0x0, 0x3, 0x0, 0x10, 0x0, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) syz_clone(0x5080200, &(0x7f0000000000), 0x0, 0x0, 0x0, &(0x7f0000000240)="9e3d624d6a5165d84a9c832afac3a69eedcfcdc6d9266de9eefcbfcb277010b0bb22fbf563720b73b099b97332ce230b12e6a737071123a947bcd3f527123258161e6d4440f23abdf9fe0fdfabb0205816eadf7456e1d66ec99627") r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x2}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x4}, 0x22f, 0x10, 0x0, 0xff6a}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r6, 0x300f000, 0xe, 0x88a8, &(0x7f0000000080)="0069c2704ade28eddb0000200000", 0x0, 0x48b8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r7 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x114905, 0x8, 0x2000000, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) r9 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000033000b0fd25a806c8c6f94f91024fc60", 0x14}], 0x1}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0xc00000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000f0cd00000000000004000000850000000500000095"], 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[], 0x25) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85feff0fc9"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="00000011000000005506ed1700", @ANYRES32=0x0, @ANYRES32], 0x48) write$cgroup_subtree(r3, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r2], 0x12) 6.025633533s ago: executing program 4 (id=2547): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000ac0)="cdd91dc526641f", 0x7}], 0x1}, 0x40040) r2 = perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x10001, 0x3}, 0x114905, 0x4, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5424}, 0x0, 0x1, 0xffffffffffffffff, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) close(r1) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0}, 0x0) r4 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x5, 0x80, 0x2, 0x6f, 0x4f, 0x6, 0x0, 0x7f, 0x21d08, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffc01, 0x2, @perf_bp={&(0x7f0000000000), 0x2}, 0x20, 0xfffffffffffffe00, 0xff, 0x3, 0x1, 0x8, 0xfffa, 0x0, 0x80000001, 0x0, 0x8}, r4, 0x1, r2, 0xf) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x3, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000800000000000000ab0a000073110d000000000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.406517653s ago: executing program 4 (id=2550): sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fb, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x1, 0x2020007, 0xec49, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0xa, 0x2, 0x73) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x20, 0x0, 0x0, &(0x7f0000000740)='GPL\x00', 0x2, 0xee, &(0x7f0000000900)=""/238, 0x40f00, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000f00)=[{0x1, 0x1, 0xd, 0x3}, {0x2, 0x4, 0x2, 0xb}, {0x8000002, 0x1, 0x3, 0xa}], 0x10, 0xfffffffc}, 0x94) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0xfdef) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000002a80)=""/4096, 0xfdef}], 0x1}, 0x10021) 4.185585769s ago: executing program 4 (id=2551): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000f4688d8e5f000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r1 = perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000080)='((!)') r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001880)="5c00000012006b1e003de3d86e6c1dff05137e0300000000000000b68675f8001d000a00a0e69ee517d34442bc24eab556a7e60f1e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f408000300060100000800030011000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r5, 0x10d, 0xa, &(0x7f0000000040), 0x4) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000280)=@hci, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000400)=""/210, 0xd2}, {&(0x7f0000000180)=""/13, 0xd}], 0x2}, 0x40003f20) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x25, &(0x7f0000000100), 0x4) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x29, 0x2, 0x2, &(0x7f0000000000)) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x14, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x81ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x38) 4.068079081s ago: executing program 3 (id=2552): openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x2, 0x7, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) (async) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0x40010) (async) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(r1) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000140), 0x4) (async) r3 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(r3, &(0x7f0000000100)={&(0x7f0000001540)=@tipc=@name={0x1e, 0x2, 0x3, {{0x40, 0x1d}, 0x1}}, 0x80, 0x0}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x4, 0x1}, {0x2}], 0x10, 0xfffffffe}, 0x94) (async) sendmsg$inet(r0, &(0x7f00000029c0)={&(0x7f0000000100)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000002780)=[{&(0x7f00000001c0)='{', 0x1}], 0x1}, 0x4000040) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x7b, &(0x7f0000000000)=r6, 0x8) close(r0) (async) socket$kcm(0x10, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) (async) socket$kcm(0x29, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='net_prio.prioidx\x00', 0x0, 0x0) 3.847598566s ago: executing program 2 (id=2553): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002600)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_clone(0x21140200, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xfe33) 3.70284452s ago: executing program 3 (id=2554): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='io.stat\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x530, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x5}, 0x40, 0xffff, 0x9e4, 0x5, 0x8, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, r0, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd3c0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f00000000c0)='syzkaller\x00', 0x2000006, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1e, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe79}, 0x94) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, 0x0, 0x200000c0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000400)={r3, &(0x7f0000000340)}, 0x20) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYRES8], &(0x7f0000000680)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x29, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ffffff8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xb1, 0x0, &(0x7f0000000500)="75ff6ad96655059aa9c800000000000000006246e286eaa3cc1fb11691f52822b78aef4399bd4c9a885162b860e87aaa884fda625f8cff92e19355e2fc3c9aa9909920ca726ff8613d4f6a9c1aeb01b348edd2e519a327ac27cd5c7f0544cc728c8529b1c2599f8c566a0fa45958872b983307a155a2a6f57dfe5ee430444b95767abb6dc67670de2b3baf319c341b30694f343ed0f0ce1d52f9f45208dad97e1d55b862baf2ead52dda5fe2f0ed6ba532", 0x0, 0xfffffffd, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="140000002e000b12d25a80648c2594f90224fc60", 0x14}], 0x1}, 0x2000d084) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={0x1, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r7 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r7, 0x1, 0x7, &(0x7f0000000040), 0x4) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048300019000800004460bc06000000a701251e6182949a3651fbffffffd4d4938037e7c7a0a03400ac09c51c268811000096859fc57a00000000000000002571cd53b9851b30", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8000) recvmsg$kcm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000080)=""/60, 0x3c}, {&(0x7f0000002980)=""/4090, 0xffa}, {&(0x7f0000000300)=""/196, 0xc4}, {&(0x7f0000000400)=""/213, 0xd5}, {&(0x7f0000000240)=""/46, 0x2e}, {&(0x7f0000000280)=""/128, 0x80}], 0x6}, 0x0) recvmsg$kcm(r8, &(0x7f0000000900)={0x0, 0xffc3, 0x0}, 0x80) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240), 0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0300000004000000040000000a000000", @ANYRES32=r5, @ANYRES32=r6, @ANYRESHEX=r7, @ANYBLOB="00000000010000000300"/21], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x2000, 0x0, 0x0, 0x0, 0x0, '\x00', r6, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00'}) socketpair(0x1, 0x6, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x1, @perf_config_ext, 0x448, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdaf}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 3.605983652s ago: executing program 2 (id=2555): bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@cgroup, 0xffffffffffffffff, 0x12, 0x0, 0x0, @void, @value=0x0}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000e80)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x5, 0x9}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x80000001, 0x7, 0x6, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x20000000000001, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180200000400000000000000010000008500000041000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x3100, 0x0, &(0x7f0000000140), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r1 = socket$kcm(0x2, 0x5, 0x84) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0a00000004000000040000000e00000010000000", @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000c46d00"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xb, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000002080000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200000100"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2c00a800}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) sendmsg$unix(r5, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0xa, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fcffffff000000000900000085000000360000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007060000f8fffffeb702000008170000b703000003000000850000001700000095000000000000008b149c1257181bfcd47139e7c873c3dd0fccb419c7f7c998c93c0904e303c8ff2b2e91a3454845b5e264df68a2afc9eaa2"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x405}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xe, 0x0, &(0x7f00000001c0)="0100400871a7832e6b7303c3cd59", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50) 3.368284309s ago: executing program 1 (id=2556): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x2, 0x640a9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 32) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{}, 0x0, &(0x7f00000003c0)}, 0x20) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 64) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) close(r3) (async) r4 = socket$kcm(0x2, 0x2, 0x0) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) recvmsg(r4, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f00000002c0)=""/34, 0x56}], 0x1}, 0x0) (async) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000480)={r6, &(0x7f0000000440)}, 0x20) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000400)='{\x05T\x82\x89\x98Yi:') ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) (async, rerun: 64) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x4, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="180200000000000e00000000000000008500000053000000850000005000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) (rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.122981044s ago: executing program 4 (id=2557): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r0 = socket$kcm(0x25, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x19, 0x19, 0x7, [@typedef={0x9}, @datasec={0x400005, 0x0, 0x0, 0xf, 0x1, [], "84"}]}, {0x0, [0x2e, 0x2e, 0x5f, 0x5f, 0x61]}}, &(0x7f00000000c0)=""/3, 0x3b, 0x3, 0x1}, 0x28) (async) sendmsg$kcm(r0, &(0x7f0000000cc0)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x90300, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x3}, 0x2900, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) close(r1) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000100)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000080), 0x12) 3.077862255s ago: executing program 2 (id=2558): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x8210, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001b80)=ANY=[@ANYBLOB], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) socket$kcm(0x2c, 0x3, 0x0) socket$kcm(0x2c, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r1, &(0x7f0000002700)={&(0x7f0000000080)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000180)="90", 0x1}], 0x1}, 0x8040) setsockopt$sock_attach_bpf(r1, 0x84, 0xb, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0xfff, r2, 0x0, 0xa0028000}, 0x38) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000140)={0xffffffffffffffff}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002880)={0x0, 0x7, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x101}, [@map_idx={0x18, 0x3, 0x5, 0x0, 0xb}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @alu={0x7, 0x0, 0x9, 0x3, 0x3, 0xc, 0x10}]}, &(0x7f00000001c0)='syzkaller\x00', 0x32, 0x1000, &(0x7f00000017c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000027c0)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000002800)=[{0x0, 0x5, 0xc, 0x6}, {0x2, 0x4, 0x9, 0x9}, {0x3, 0x1, 0xa, 0xd}, {0x5, 0x2, 0x3, 0xa}, {0x3, 0x5, 0xe, 0x6}, {0x0, 0x5, 0x1, 0x8}, {0x1, 0x2, 0xa, 0x6}], 0x10, 0x7}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000002940)=r4, 0x4) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x28, 0x1, 0x0, 0x80, 0x0, 0x5, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0xa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x2, 0x1000000000000002, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x15, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0xa0}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x10}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x56010000}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {0x7, 0x0, 0x2}, {}, {}, {0x25}}], {{0x6}, {0x5}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) setsockopt$sock_attach_bpf(r5, 0x88, 0x67, &(0x7f00000002c0)=r6, 0x4) sendmsg$inet(r5, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0xffffffffffffffe1, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x10}, @dev={0xac, 0x14, 0x14, 0x3a}}}}], 0x20}, 0x8840) sendmsg$inet(r5, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, 0x20000840) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x1) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x15, 0x3, 0x0, &(0x7f00000005c0)='GPL\x00'}, 0x94) r9 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r9, 0x1, 0x34, &(0x7f0000000040)=r8, 0x4) perf_event_open(&(0x7f0000000780)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x26, 0x5, 0x1, &(0x7f0000000080)) 2.937569859s ago: executing program 4 (id=2559): perf_event_open(&(0x7f0000000940)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x640b9, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800010, 0x3fff8001}, 0x0, 0x32, 0x43e1bd73, 0x6, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000028000000280000000200000000000000000000030000000000000000000000000000000000000000000000010502"], 0x0, 0x42}, 0x20) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000104000000991805166700a6ba63ffd4c20f7e6e2041913031ebf6b28c5f907d22d1fb966970660b0057c8bd1b30272c88e7e401020ece230d9c0f069e672bfd032df7b396d1ec89849ff2f90444d217"], 0x50) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000920050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="06000000040000000400000002"], 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000580)={0x0, r2}, 0x8) bpf$PROG_LOAD(0x2, &(0x7f00000007c0)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd78, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000340), 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b00)={r2, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, &(0x7f0000000740)=[0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x4b, &(0x7f0000000880)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000008c0), &(0x7f0000000900), 0x8, 0xa0, 0x8, 0x8, &(0x7f00000009c0)}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="0000000000009500"/24], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x55, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x5, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="110000000000000009e2e4da00000000", @ANYRES64=0x0], 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x6, 0x15, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x80000001}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x400}}]}, &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r7, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000"], 0xfdef) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000dd6010740000000000950094289a024c7c"], 0x0, 0x5}, 0x94) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.88107837s ago: executing program 3 (id=2560): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10}, 0x0, 0xca, 0x0, 0x3, 0x0, 0x10, 0x0, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) syz_clone(0x5080200, &(0x7f0000000000), 0x0, 0x0, 0x0, &(0x7f0000000240)="9e3d624d6a5165d84a9c832afac3a69eedcfcdc6d9266de9eefcbfcb277010b0bb22fbf563720b73b099b97332ce230b12e6a737071123a947bcd3f527123258161e6d4440f23abdf9fe0fdfabb0205816eadf7456e1d66ec99627") r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x2}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8fff7ff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b70500000000e000720a23fe000000008500000012000000b70000000000000095000000000000004e6258941c823b7505608556ba4ababb42684e890d31ae450400373a0a5447a801b8c1c4f0c4bd97c6555e61345400f9bd32abeb9ade0105000000000000a21902ff07000094a2b51c21df74924f5436a6ed89b98f75e800230c49c90fe1336481f3b92a63336c36fcd745d61d7739c6554ca201000000bebbe8282f8b1e26407437a397bf8f50e87ed4d27adfd876bffc402887781979461c4363bc5c9b6202ea471428197ef88bc333fbcec0ea4334f1ddb9d679ae95a90fd41d528f58d305000000435883df6c10ce86188c92292b2d0226082960be682836bdff8b0971f2a5405e453228e7b1005bd73479358a90df3e481947de6453736aa572158af6ea63d6d418fbbd2bba050000001da000ef78df03000000d19913a5fb03c79dac2e489f68127892658115e7ffb588a71dffffff951b8535167ab8069a2c92a3aa18e22517000026637b4c34bf2d0aa304ed42bf70480e9e97203fd169411f37fddd1f7fbe16dbbc0f307bceb5064f388a0350c3dc928b0e638b1e2b2a9d25264233e5d45eb377f56b95241024dbe30f67191c2b56b70328d6d3215dfffe5d89af1d10599bd494d921d1fb2db99b6aba0fa978f41eb1d4c553e5a9326ed550c13f8dd36716a899a1e79234294707c5312b924d142c17b20bb80ee202222c03fa84ccc374e717f694018630366397266090a82343aedfbf7afe892390c2eb775b0d16073da2229958db05de7df6ab7600004000010000006d8081cb3bf251d906c00da0e23b50465f8394820be571e3592d0000c7ef10fdc462e7040e7074ec43aa461fc54401a76406db718d4efd6c1bd10ce1d087cf9bba461162555a95524c84df0952d32093082b7aa71304e0d2d9ec310d1b676b378a5879e47941de1a28c3a8f400000000000000000e032b7d2badd0bc6617a859b7ac273b6304555f664469cec152030f06cc0ca1765838eb5590264736fbccfc3a8f4e3b10daf6a275daf5db2dac7096fe8ac8876acaad043663b3b0fedb05e6d31408fa20140c9d2db1c59ac8a3ce28e489d67d87d3a107ccea3007f58f2c5017e8807107f79ac50cc1d4f546b4443d137eb706b71b1767a10cca7a7c82b76c96e874aff249f36329a6526b354b6e674b08f7ef492b804c4b08fb10de807d79fd782027318cd7632e22d2faa16209272b39b5ec8d239832ea02cc88e249a2e77753a58987547571fbc8de747faab724bebb6401412b496e078fcb6c78ab447e871b76a8b0506f49594aa1d610567e14d739a60ff3ce04d0d2e5681e787c7e1ad25467bb81f2f440128207fe07a83759ec30cf9e0a3fd3f2fcee97fe8d273f8e712a8a64eaf2d89a1fa44554357fcd7ab531ff7a41c27164fca430a62d015b477de61853f5ee2e25b00a63642ec32ece2ff3bb5883deb895f52a923b5c744d8dccdd6a09ded8b90f1eeda8e6e884a4f090edb6ab9fc8107846508d51f3735493d5860cf80200ce31b92eb3563d485b5a7d192092d7a9fd2bc67d305d1d4573aad5f6501d1cd27657ce17330402dacb78d72d776330711645eed7d4c292f4448733c0826c4eb950f3d40453f82d7f792d106518f6bde874aff9e2bea7d73f74bebeeacfc700000000000000000000d40d73be47803297db004264c8c70b7761b22a7114a078a87d63d63b0c9dcc263a5b773bfeba212abef4181ad9e4872e328c0f105d51e3d167a2b717051d7681ba04552eeba18a000000b22b50d76d85040c9000ea68a528049a60d5e26b20455194f4be3b8466fd66d0e6cefcff7891c485d61cb66f4076cd60a22733cb00cf7cc12ca7d9bb864c0e650236a79a5c85349a9b1e6bbc3bace197e72490c566431cd3a08e9d1b641c1ba1f661d01573b904c3fa1427370fa15cecd294ac21fefe3d161fdf58e8bc5957ef145839f4370176e1be88d2e3516a1998c1621a00b4438b85a4dfee6f61827a1e50e158038b037dfda3ffb35069e41fc740ae720800de53948f176c3c15f3a529c02434b920d87f12a6e3420a2fdcb3559e7a5b1ddbb06b7a5977f63bfac701e673bf626d126b213c92e7169a930beb8d76f9db34e8098bea301baa96916d6458c923866dc192928b320738d1b298fb55f2a64500000000000000000000000000509885a38d9d995a46817e7ff7acddcc5f9253c63f86baf33f92820c9ff497cf76b6482c3ab53fb6ecea6d220b91b99b2fb4279ab09ae0645ab92df309000000000000a4868411948f8e3e259f717d722a1eebd3f6860a17f1ae9e10a1178f6aef4951b192d13e9600c1f700ca7b1d127e451034469bf2a8f93dbae6ad8e932e431dc18323794156238625bb9c45c5a76a68a8646e701b29a71ffbd854f50f195833106a5625ff94221f1f04c72525b50aae69081de9626de9847bf53475d90642d9730101d80b1b0000000000000000822b0641698d60160d9157548302dd2636d12c431f96728ae4a45361e6d47a1c4a52d67c0f0a62585c09fcfd70d0f249f87c44b47283c1c6f2430d70c751e4ada9b646e6e7c1719faee476d88a2943c71a21da55b7497dd7ed385ac2e8cb916390a3a0ed52e7371e1a141e69afa07b46ac20f3521fb251b72c82ee1c7eb4f67c0deed5618d0db925ce7a7c50a99835544c540f5d528587d1a26e78df1bc9a8e4d90c57d0b8122eae7b23e4456624f5337c16c42648c7a3d0b799ad409befe0cbe2aa781ba826918df7aa80dff4f62258e54419629eb1d37de7f6a3512bd618781d1ad3a4d4b0da44df9f9a93f0487f79a9b16dfa6f68b06ce6a96ca344d194cded05702c2300d1a4f451b33830765f8131f6c28fada65701851bba089b8a8347900e72d68cea965feb6a06225dd3f0e135323a5bde3b43c9d242b73abf9e05336af040a4a6bb5918146393f1d50705c1d1e986bf2f690de51ee8727d37339df5fc1db535bb1e9bb3e5dadb6e5a2bb4faa2dcbc6ca9b40ac96e448b9dadeb08fc2cf3a960f22bf20b9e967b7a75687372b8e3edc543896c360674d901a7f56b07ba1479b46eea3d94026a9c7e670ab40bb2c1ca1a7c90299361239bef773140af974c7efc285a64633d21513481b3ac62dec9fa3e8ce6156d76b82baa145bc550b0ccbc0934ccfea45292caa2f0654fe18dc0669a4f2af9fa232a293ad94261f55675cc686db72783a6bacc0df6a1ea943ae266af112f35319980cd681811a369e0d03cf7d22bed7cbe1afe498b88942b1bf7edae441a0d0d88fce65cb4e848793a28cbd7373f6acd3b5a48c034e487750388929d37fa3165f205dab3be5f3e5781a84298687cbf02dcaf0e14a2b260293f349d076eb75a2ddc5382d106f0beea02aa45018fe36d1176cf7704383b6922d10dc9feca3982ae232d4bb47c722c83a7cf6ee8832f038b072eb803a47cd7f753e80c9f6eedb89ee1c95361debf58f671170cfa57fb0c9cbad5c70244a2b6de2062cbd1ba2c85f73689d3ffcd37022ab9fcabd17fd40bfd316088dffe92728016ec5c72e21da52d09f849ab4a4b2d9b4799bab3a6d7f2ba57e100e7ffec0bd4c0659ebaf7b225edaa0af3f5aa99d1551d34b2d2faf0971dbe852142088b1c9b052e1177c47365d950e22c2b04283f62fec31837b5068dab60c5c2c1547acd52ab5e5cde41d24563b05e223e2aafe2c55ba3001d12e4de86597487e99c3b2bf193d7d6d0821481c16fd7cece5df2567182ca1ad6028028bf9f72d503b3d70e1c3c4b5e73ac286abb2b3b069f2ccda4c6a7a3759302b02034e8217b4ecdb9f1118a4117fd49d5467a84b70fae675af118bd885ee7798782765438caaf69856e236bf4b37bff5f971df3fd5e03a9ea39d5397b4e5c5a0d7eacf2"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x4}, 0x22f, 0x10, 0x0, 0xff6a}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r6, 0x300f000, 0xe, 0x88a8, &(0x7f0000000080)="0069c2704ade28eddb0000200000", 0x0, 0x48b8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r7 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x114905, 0x8, 0x2000000, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) r9 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000033000b0fd25a806c8c6f94f91024fc60", 0x14}], 0x1}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0xc00000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000f0cd00000000000004000000850000000500000095"], 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[], 0x25) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85feff0fc9"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="00000011000000005506ed1700", @ANYRES32=0x0, @ANYRES32], 0x48) write$cgroup_subtree(r3, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r2], 0x12) 2.87440963s ago: executing program 1 (id=2561): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x40000000000009, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x4080) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000380)={0x5, 0x80, 0x7, 0x6, 0x61, 0x53, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x72}, 0x3010, 0x8e, 0x9, 0x7, 0x1, 0x8001, 0x81, 0x0, 0x7, 0x0, 0x8000000000000000}) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x0, 0xfc, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x1}, 0x0, 0x0, 0x0, 0x3, 0x63, 0x2, 0x401, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r0 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x23, &(0x7f0000000040), 0xcf) r1 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r1, &(0x7f0000003780)={0x0, 0xfffffeff, &(0x7f0000000000)=[{&(0x7f0000000040)="0212000902000000e4a17c45c85686605e85da4a", 0x10}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0103, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0x8}, 0x18944, 0x401, 0x25, 0x3, 0x1, 0x200, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f4, &(0x7f0000000080)) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) openat$cgroup_subtree(r3, &(0x7f0000000300), 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000180)={r1}) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f00000001c0), 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e086dd200000006006000aac14140ce0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 2.49122821s ago: executing program 2 (id=2562): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000080)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000140)='i-', 0xffe3}], 0x1, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xd}, @private=0xa010102}}}], 0x20}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES8=0x0, @ANYRES16=r0], &(0x7f0000000340)='GPL\x00', 0x81}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000005000000080000000f00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000af0000000000010000087f9afc9e76ad74daa88956"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000400000000000000", @ANYRES32=r2, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="030004230000060000000000025d07000000010000000030078e000000"], 0x50) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0xec, 0x4, 0x0, 0xb6, 0x0, 0x8, 0x235fd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000002c0), 0xc}, 0x121085, 0x7, 0x0, 0x4, 0x4000003, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7070000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r6}, &(0x7f0000000280), &(0x7f0000000540)=r5}, 0x20) close(r2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r1, 0xe0, &(0x7f0000002440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001dc0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000001e00), &(0x7f0000001e80)=[0x0, 0x0, 0x0], 0x0, 0xfd, &(0x7f0000001ec0)=[{}, {}], 0x10, 0x10, &(0x7f0000001f00), &(0x7f0000000440), 0x8, 0x44, 0x8, 0x8, &(0x7f0000001f80)}}, 0x10) r7 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r7, 0x84, 0x83, &(0x7f0000000000)=r9, 0x8) r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYRES64=r3], &(0x7f0000000140)='GPL\x00'}, 0x94) r11 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r10}, 0x8) close(r11) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002200)={{r2}, &(0x7f0000002180), &(0x7f00000021c0)}, 0x20) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000002240)={0xffffffffffffffff, 0x3, 0x10}, 0xc) r12 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r14) sendmsg$inet(r12, &(0x7f0000000780)={&(0x7f00000001c0)={0x2, 0x4e22, @private=0xa010100}, 0x10, &(0x7f00000008c0)=[{&(0x7f0000000480)="f4", 0x1}], 0x1}, 0x10) recvmsg$unix(r13, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="9cfd4f853890db1000000000000000018af4cf51497a516966d94bce86434c0172daabf0059a7a6d46d481b3871e46e219cb5aade7db77af8719057ecf94b6b8ef284775af479edb512df2b1aa903cf772d808b1c3df8d6990ca2ad1dad7c02c34a2c0768ffbe553902dc56c0b9b91db8da20d48589ff95ae78bb977bc7db0816e46709ae19d47b7298b2d7f195e44fd2717de42dbb48eb8c9d9239ff72f6c6374576a11933feacb1a8b1da7520c24a1128751c70f5b"], 0x10, 0x4040844}, 0x0) 941.012857ms ago: executing program 2 (id=2563): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002600)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_clone(0x21140200, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xfe33) 416.1473ms ago: executing program 1 (id=2564): perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = socket$kcm(0x1e, 0x4, 0x0) r3 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0x7ff, 0x10}, 0xc) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x3, &(0x7f0000000640)=@framed={{0x18, 0x2, 0x0, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x3b}}, &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r7, r6}, 0x94) r8 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x50) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4}, 0x50) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r10, 0x0, 0x0}, 0x20) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r9}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r11) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') r12 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)=@o_path={&(0x7f00000002c0)='./file0\x00', 0x0, 0x4014, r3}, 0x18) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0100000014000000fd0900008400000005010000", @ANYRES32=r4, @ANYBLOB="000007002752d975d727f3a0dedd6ab05590df7420713afa5d4ac18aaf7e1eedc4d569303a8d1d90857c527a0c4abcce0c1e8667ad69c105ecbd875d71e93fa3285970b2a36e7722d4cefd0a616c6418890d0b05f601d5d3eb75a89e70fe1efaaabbd07cd51d1bbd6d83da1a59755807f33a804c3d200f583358e354f1190a34993f4687b1d14c6bdffc51b9d52c66d025813e67f975e4dc6b7cfef5db6ed19fdca42265e0fe3dd86eacb534780f03de6f67e45f54a11084624a8c890216b72ea1f08a48e9dc593c15d5a8c9b49c2a91048ab74afed00128f1bbfbc6c13fe1c900"/238, @ANYRES8=r6, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) recvmsg$kcm(r2, &(0x7f0000000840)={&(0x7f0000000700)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000780)=""/7, 0x7}, {&(0x7f00000007c0)=""/59, 0x3b}], 0x2}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000100), 0x800, r13, 0x0, 0x84}, 0x38) r14 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x16, 0x9, &(0x7f0000000040)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x1}, @map_fd={0x18, 0x5, 0x1, 0x0, r4}, @exit, @btf_id={0x18, 0x7, 0x3, 0x0, 0x1}], &(0x7f00000000c0)='syzkaller\x00', 0xa, 0x7e, &(0x7f0000000100)=""/126, 0x41000, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0xe, 0x8, 0x4}, 0x10, r7, 0xffffffffffffffff, 0x9, &(0x7f0000000380)=[r12, r13, r14], &(0x7f0000000580)=[{0x3, 0x3, 0x7, 0x5}, {0x1, 0x3, 0x9, 0x2}, {0x4, 0x4, 0xa}, {0x2, 0x5, 0x3, 0xa}, {0x0, 0x4, 0xa, 0xc}, {0x5, 0x5, 0x4, 0x4}, {0x5, 0x5, 0x9, 0xb}, {0x1, 0x5, 0x8, 0x5}, {0x0, 0x3, 0x0, 0x7}], 0x10, 0xff}, 0x94) r15 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r15, 0x10f, 0x87, &(0x7f00000008c0), 0x43) 272.302663ms ago: executing program 2 (id=2565): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) (async) r1 = perf_event_open(&(0x7f0000000580)={0x5, 0x80, 0xea, 0x7, 0x40, 0xe5, 0x0, 0x0, 0xd000, 0x6, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x5, 0x2, @perf_bp={0x0, 0x2}, 0x9c7, 0xfc, 0x4, 0x0, 0x81, 0x9, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r2, &(0x7f00000031c0)={&(0x7f00000001c0)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000f00)="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", 0x13b}, {&(0x7f00000008c0)="b5640aae1e407af01eecff9e22e152a958b96c15ffd051d17c6c712f21a8abb26b561e7af56b164829c35642692c102092e1f43782559cb76acaa20f83d5e807ad43b8e153ccdf10b894d755e849d01bc937c19203d32e33610f090c9d9e0d5972ac64142f8f4b71f27cc89c43c9697697b53fee3e5f94497031ff2e460d2c011d0db5a289bde09ac884de124e62b5b6921c326a85bc8791473d2828d1e28b5f20e286b061c4dadef878b72e6095841189db4da6e671677ca72a3c1b69c2ec25d3ce00000000000000006494e8109c9ac6ab28db3c65c78c067856bdd51479d9a70cb70f61d174fb23c65e8b46b913796911739a545339ad546ffb3cc017cc0135c0ff04fd8b89a4c69a2abd4303faa480f4ec59a17bb07a8da9a7b7ce1a2bf5388aadce36071bff945c281d03e8d41338d5cbbd80ab84a726f5d1c395e67c74f8261cb83b9aac0fee3f9ac8bce811a4331264a8773fc1f7c9aa246295027d248754b80a2923d35e8016ea876a3b080cd7441d1b76cd566988ff0d4ada57f702d185383da6ce7b8ed44e7de64de907165af57a2e0a7fb803", 0x198}, {&(0x7f0000000800)="6b783b61028f911c037f84742d3d4b6cd3bc27cfd8cf59ee91737b552b62a5f87392076473bc389f705b45883745d6681ad6de82009143e3eec6e2e3f711b3f10aa3d802f054748459a40e68f331d90b30b62f014d01b57f1cf6d6e9b5cdb0f97bb825df405d118dc7e9ef7acd01733dd59ea1ec012bb657a24055106f36e7ddff98cfb4951e1dd166d062838bc49356383883778cbbaf9e010b4adb98889254740ac86a3c330836b8cc6764cf", 0xad}, {&(0x7f0000000600)="a484d15488fb016289fa4e2b0b25648e7abf5a74ab5e75516b79103a9b0711dd70d5a141ec032111d4866784da73cd0f18993149e7b185584053fb7b48d2b271af8a14858473eb1edd82f3f4cd1150bee83bf4f624ddf873ec45100000000000000026a58313e3d73bc5f0ed9c835c21635a695895699b6bf8413bc843ea99c24dced6bc2dbb8c1886", 0x89}], 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000002900000004"], 0x18}, 0x4c080) (async) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x2, @remote}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)='S\x00', 0x5a0}], 0x1, 0x0, 0x0, 0x900}, 0x0) (async) perf_event_open(0x0, 0xffffffffffffffff, 0x1, r1, 0xb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth0_vlan\x00', 0xc00}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r4) (async) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f0000000140)={0x0, 0xfffffffffffffedb, &(0x7f0000000400)=[{&(0x7f00000002c0)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010009080c00bdad20409bbc7a46e39a8285dcdf12176679df069163ce955f070009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1}, 0x40052) (async) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22fff6) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x1, 0x0, 0xfffff038}, {0x6}]}) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r7, 0x4004743d, 0x110e22fff6) write$cgroup_type(r7, &(0x7f0000000280), 0x9) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8922, &(0x7f0000000080)) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x863, 0x4, 0x4, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) (async) setsockopt$sock_attach_bpf(r0, 0x6, 0xd, 0x0, 0x0) 0s ago: executing program 4 (id=2566): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r0, 0x107, 0x2, 0x0, 0x300) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x11c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x805, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x8000, 0x5, 0x3, 0xaaf04684de878bda, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x34, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x49, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=[@rights={{0x10}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}], 0xb0}, 0x10140) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x200}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ced4fbd44e24eb0d34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3a06d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796efea77aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72e7ead0509d380578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece72f2090000f44a3210223fdae7ed04935c3c90941576aebc8619d73415cda2130f5011e4845505000001000000004f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c040035cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bf463261135e24d154114df1381b02a0dcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f884cc4806f40300966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e1700000000000000000000000000000000000000000000000000000520500002952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9a33c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a62415f78000000005f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c81c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b40824095135861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac00000b0000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e5dd921a5eadd4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293d5c833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e602c28ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f257aac5af18d8c6b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e29b10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe8e4cd14dc5c1eb98b63198f6f830745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b51c34a5384f2cf51180c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea"], 0x0}, 0x94) perf_event_open$cgroup(&(0x7f00000001c0)={0x1, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x4008240b, &(0x7f00000013c0)) socketpair(0x1, 0x6, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000400), 0x12}, 0x104101, 0x4, 0x0, 0x5, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800000000000000"], 0x0, 0xfffffffffffffe3d}, 0x28) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a0, &(0x7f0000000080)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89a2, &(0x7f0000000080)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000002400000024"], 0x0, 0x42, 0x0, 0x1, 0xe988}, 0x28) kernel console output (not intermixed with test programs): ocess `syz.2.1557'. [ 341.248289][T11144] netlink: 'syz.0.1562': attribute type 11 has an invalid length. [ 341.277950][T11144] netlink: 'syz.0.1562': attribute type 2 has an invalid length. [ 341.375875][T11144] netlink: 198100 bytes leftover after parsing attributes in process `syz.0.1562'. [ 341.584641][T11153] netlink: 'syz.1.1565': attribute type 21 has an invalid length. [ 341.593503][T11153] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1565'. [ 341.631233][T11155] sit0: left promiscuous mode [ 341.753961][T11157] sit0: entered promiscuous mode [ 341.857268][T11153] sit0: entered promiscuous mode [ 342.283110][T11165] netlink: 209820 bytes leftover after parsing attributes in process `syz.3.1568'. [ 342.724028][T11180] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1573'. [ 342.734452][T11180] A link change request failed with some changes committed already. Interface Q6`Ҙ may have been left with an inconsistent configuration, please check. [ 342.779177][T11180] netlink: 'syz.3.1573': attribute type 3 has an invalid length. [ 342.794215][T11180] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1573'. [ 342.915390][T11192] netlink: 'syz.1.1577': attribute type 21 has an invalid length. [ 343.437141][T11209] sit0: left promiscuous mode [ 343.805647][T11212] sit0: entered promiscuous mode [ 344.010849][T11216] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1585'. [ 344.064940][T11216] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1585'. [ 344.109557][T11216] netlink: 'syz.2.1585': attribute type 10 has an invalid length. [ 344.474830][T11226] netlink: 'syz.1.1587': attribute type 5 has an invalid length. [ 344.518687][T11221] netlink: 'syz.0.1586': attribute type 21 has an invalid length. [ 344.586127][T11221] netlink: 'syz.0.1586': attribute type 4 has an invalid length. [ 344.620679][T11221] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1586'. [ 344.725002][T11221] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1586'. [ 344.833683][T11221] bond0: (slave bond_slave_0): Releasing backup interface [ 344.901926][T11221] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 344.950632][T11244] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1591'. [ 345.002161][T11244] A link change request failed with some changes committed already. Interface Q6`Ҙ may have been left with an inconsistent configuration, please check. [ 345.255486][T11255] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 345.266142][T11255] syzkaller0: entered promiscuous mode [ 345.271669][T11255] syzkaller0: entered allmulticast mode [ 345.350574][T11258] netlink: 209820 bytes leftover after parsing attributes in process `syz.0.1594'. [ 345.784995][T11270] netlink: 'syz.2.1598': attribute type 1 has an invalid length. [ 345.808846][T11270] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.1598'. [ 346.243434][T11274] netlink: 'syz.2.1600': attribute type 21 has an invalid length. [ 346.720601][T11280] netlink: 'syz.0.1599': attribute type 3 has an invalid length. [ 346.757679][T11280] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1599'. [ 346.795623][T11279] syzkaller0: entered promiscuous mode [ 346.857794][T11279] syzkaller0: entered allmulticast mode [ 346.937060][T11284] netlink: 'syz.2.1602': attribute type 4 has an invalid length. [ 346.988341][T11279] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 346.995811][T11279] IPv6: NLM_F_CREATE should be set when creating new route [ 347.003975][T11279] IPv6: NLM_F_CREATE should be set when creating new route [ 347.013371][T11279] IPv6: NLM_F_CREATE should be set when creating new route [ 347.750518][T11319] FAULT_INJECTION: forcing a failure. [ 347.750518][T11319] name failslab, interval 1, probability 0, space 0, times 0 [ 347.768394][T11319] CPU: 0 PID: 11319 Comm: syz.3.1611 Not tainted syzkaller #0 [ 347.775906][T11319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 347.785976][T11319] Call Trace: [ 347.789252][T11319] [ 347.792184][T11319] dump_stack_lvl+0x18c/0x250 [ 347.796870][T11319] ? show_regs_print_info+0x20/0x20 [ 347.802065][T11319] ? load_image+0x420/0x420 [ 347.806572][T11319] ? __might_sleep+0xe0/0xe0 [ 347.811173][T11319] ? __lock_acquire+0x7d80/0x7d80 [ 347.816212][T11319] should_fail_ex+0x394/0x4c0 [ 347.820893][T11319] should_failslab+0x9/0x20 [ 347.825397][T11319] slab_pre_alloc_hook+0x59/0x300 [ 347.830427][T11319] ? lockdep_softirqs_off+0x440/0x440 [ 347.835806][T11319] kmem_cache_alloc+0x5a/0x2c0 [ 347.840975][T11319] ? security_inode_alloc+0x34/0x110 [ 347.846300][T11319] security_inode_alloc+0x34/0x110 [ 347.851446][T11319] inode_init_always+0x914/0xc90 [ 347.856408][T11319] new_inode_pseudo+0x95/0x1d0 [ 347.861189][T11319] new_inode+0x22/0x1d0 [ 347.865352][T11319] proc_pid_make_inode+0x24/0x190 [ 347.870381][T11319] proc_ns_dir_lookup+0x6a4/0x800 [ 347.875407][T11319] ? proc_ns_dir_readdir+0x470/0x470 [ 347.880697][T11319] path_openat+0x1110/0x3270 [ 347.885320][T11319] ? do_filp_open+0x430/0x430 [ 347.890014][T11319] do_filp_open+0x1f2/0x430 [ 347.894518][T11319] ? vfs_tmpfile+0x620/0x620 [ 347.899111][T11319] ? noop_direct_IO+0x20/0x20 [ 347.903796][T11319] ? _raw_spin_unlock+0x28/0x40 [ 347.908767][T11319] ? alloc_fd+0x590/0x640 [ 347.913110][T11319] do_sys_openat2+0x134/0x1d0 [ 347.917806][T11319] ? do_sys_open+0xe0/0xe0 [ 347.922221][T11319] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 347.928202][T11319] ? srcu_init_notifier_head+0x90/0x90 [ 347.933670][T11319] ? lock_chain_count+0x20/0x20 [ 347.938612][T11319] __x64_sys_openat+0x139/0x160 [ 347.943473][T11319] do_syscall_64+0x55/0xb0 [ 347.947889][T11319] ? clear_bhb_loop+0x40/0x90 [ 347.952571][T11319] ? clear_bhb_loop+0x40/0x90 [ 347.957244][T11319] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 347.963162][T11319] RIP: 0033:0x7fee0075e6ce [ 347.967580][T11319] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 347.987204][T11319] RSP: 002b:00007fee0159aec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 347.995622][T11319] RAX: ffffffffffffffda RBX: 00007fee0159b6c0 RCX: 00007fee0075e6ce [ 348.003611][T11319] RDX: 0000000000000002 RSI: 00007fee0159af90 RDI: ffffffffffffff9c [ 348.011581][T11319] RBP: 00007fee0159b090 R08: 0000000000000000 R09: 0000000000000000 [ 348.019558][T11319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 348.027527][T11319] R13: 00007fee00a26038 R14: 00007fee00a25fa0 R15: 00007fff9eb24288 [ 348.035514][T11319] [ 348.168500][T11325] __nla_validate_parse: 3 callbacks suppressed [ 348.168537][T11325] netlink: 668 bytes leftover after parsing attributes in process `syz.0.1613'. [ 348.185578][T11325] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 348.196625][T11325] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 349.418317][T11344] validate_nla: 3 callbacks suppressed [ 349.418335][T11344] netlink: 'syz.1.1628': attribute type 4 has an invalid length. [ 349.447811][T11344] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1628'. [ 349.567171][T11346] netlink: 'syz.2.1619': attribute type 21 has an invalid length. [ 349.579421][T11346] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1619'. [ 349.630674][T11348] FAULT_INJECTION: forcing a failure. [ 349.630674][T11348] name failslab, interval 1, probability 0, space 0, times 0 [ 349.646631][T11348] CPU: 0 PID: 11348 Comm: syz.3.1620 Not tainted syzkaller #0 [ 349.654146][T11348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 349.664224][T11348] Call Trace: [ 349.667523][T11348] [ 349.670473][T11348] dump_stack_lvl+0x18c/0x250 [ 349.675178][T11348] ? show_regs_print_info+0x20/0x20 [ 349.680418][T11348] ? load_image+0x420/0x420 [ 349.684992][T11348] ? __might_sleep+0xe0/0xe0 [ 349.689594][T11348] ? __lock_acquire+0x7d80/0x7d80 [ 349.694651][T11348] should_fail_ex+0x394/0x4c0 [ 349.699411][T11348] should_failslab+0x9/0x20 [ 349.703968][T11348] slab_pre_alloc_hook+0x59/0x300 [ 349.709464][T11348] ? __ns_get_path+0x2e/0x5f0 [ 349.714170][T11348] kmem_cache_alloc_lru+0x4d/0x2b0 [ 349.719316][T11348] ? new_inode_pseudo+0x82/0x1d0 [ 349.724280][T11348] new_inode_pseudo+0x82/0x1d0 [ 349.729073][T11348] __ns_get_path+0x249/0x5f0 [ 349.733707][T11348] ns_get_path+0x54/0x90 [ 349.737984][T11348] proc_ns_get_link+0x16c/0x2c0 [ 349.742877][T11348] ? proc_ns_instantiate+0xf0/0xf0 [ 349.748116][T11348] ? bpf_lsm_inode_follow_link+0x9/0x10 [ 349.753697][T11348] ? security_inode_follow_link+0xb7/0x100 [ 349.759607][T11348] ? proc_ns_instantiate+0xf0/0xf0 [ 349.764748][T11348] pick_link+0x666/0xdd0 [ 349.769041][T11348] step_into+0xc18/0xee0 [ 349.773400][T11348] ? rcu_read_lock_any_held+0xb4/0x140 [ 349.778977][T11348] ? rcu_read_lock_bh_held+0x100/0x100 [ 349.784552][T11348] ? set_root+0x3a0/0x3a0 [ 349.788892][T11348] ? d_splice_alias+0x114/0x330 [ 349.794155][T11348] path_openat+0x1656/0x3270 [ 349.798907][T11348] ? do_filp_open+0x430/0x430 [ 349.803649][T11348] do_filp_open+0x1f2/0x430 [ 349.808209][T11348] ? vfs_tmpfile+0x620/0x620 [ 349.812873][T11348] ? _raw_spin_unlock+0x28/0x40 [ 349.817766][T11348] ? alloc_fd+0x590/0x640 [ 349.822137][T11348] do_sys_openat2+0x134/0x1d0 [ 349.826845][T11348] ? atomic_notifier_call_chain+0x16e/0x180 [ 349.832863][T11348] ? do_sys_open+0xe0/0xe0 [ 349.837323][T11348] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 349.843383][T11348] ? srcu_init_notifier_head+0x90/0x90 [ 349.848964][T11348] ? lock_chain_count+0x20/0x20 [ 349.853850][T11348] __x64_sys_openat+0x139/0x160 [ 349.858740][T11348] do_syscall_64+0x55/0xb0 [ 349.863185][T11348] ? clear_bhb_loop+0x40/0x90 [ 349.867891][T11348] ? clear_bhb_loop+0x40/0x90 [ 349.872595][T11348] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 349.878513][T11348] RIP: 0033:0x7fee0075e6ce [ 349.882945][T11348] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 349.902630][T11348] RSP: 002b:00007fee0159aec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 349.911051][T11348] RAX: ffffffffffffffda RBX: 00007fee0159b6c0 RCX: 00007fee0075e6ce [ 349.919055][T11348] RDX: 0000000000000002 RSI: 00007fee0159af90 RDI: ffffffffffffff9c [ 349.927025][T11348] RBP: 00007fee0159b090 R08: 0000000000000000 R09: 0000000000000000 [ 349.934994][T11348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 349.942966][T11348] R13: 00007fee00a26038 R14: 00007fee00a25fa0 R15: 00007fff9eb24288 [ 349.951037][T11348] [ 349.961638][T11351] sit0: left promiscuous mode [ 350.060241][T11346] sit0: entered promiscuous mode [ 350.546849][T11374] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1627'. [ 350.868801][T11369] syzkaller0: entered promiscuous mode [ 350.892172][T11369] syzkaller0: entered allmulticast mode [ 350.935369][T11381] netlink: 'syz.0.1630': attribute type 10 has an invalid length. [ 350.952530][T11381] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1630'. [ 351.417499][T11397] FAULT_INJECTION: forcing a failure. [ 351.417499][T11397] name failslab, interval 1, probability 0, space 0, times 0 [ 351.433956][T11397] CPU: 1 PID: 11397 Comm: syz.3.1634 Not tainted syzkaller #0 [ 351.441497][T11397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 351.451604][T11397] Call Trace: [ 351.454931][T11397] [ 351.457878][T11397] dump_stack_lvl+0x18c/0x250 [ 351.462593][T11397] ? show_regs_print_info+0x20/0x20 [ 351.467814][T11397] ? load_image+0x420/0x420 [ 351.472346][T11397] ? __lock_acquire+0x7d80/0x7d80 [ 351.477438][T11397] ? __asan_memset+0x22/0x40 [ 351.482067][T11397] should_fail_ex+0x394/0x4c0 [ 351.486781][T11397] should_failslab+0x9/0x20 [ 351.491305][T11397] slab_pre_alloc_hook+0x59/0x300 [ 351.496364][T11397] kmem_cache_alloc+0x5a/0x2c0 [ 351.501146][T11397] ? security_inode_alloc+0x34/0x110 [ 351.506465][T11397] security_inode_alloc+0x34/0x110 [ 351.511603][T11397] inode_init_always+0x914/0xc90 [ 351.516571][T11397] new_inode_pseudo+0x95/0x1d0 [ 351.521359][T11397] __ns_get_path+0x249/0x5f0 [ 351.525985][T11397] ns_get_path+0x54/0x90 [ 351.530254][T11397] proc_ns_get_link+0x16c/0x2c0 [ 351.535148][T11397] ? proc_ns_instantiate+0xf0/0xf0 [ 351.540304][T11397] ? bpf_lsm_inode_follow_link+0x9/0x10 [ 351.545888][T11397] ? security_inode_follow_link+0xb7/0x100 [ 351.551731][T11397] ? proc_ns_instantiate+0xf0/0xf0 [ 351.556871][T11397] pick_link+0x666/0xdd0 [ 351.561164][T11397] step_into+0xc18/0xee0 [ 351.565436][T11397] ? rcu_read_lock_any_held+0xb4/0x140 [ 351.570917][T11397] ? rcu_read_lock_bh_held+0x100/0x100 [ 351.576398][T11397] ? set_root+0x3a0/0x3a0 [ 351.580743][T11397] ? d_splice_alias+0x114/0x330 [ 351.585631][T11397] path_openat+0x1656/0x3270 [ 351.590318][T11397] ? do_filp_open+0x430/0x430 [ 351.595059][T11397] do_filp_open+0x1f2/0x430 [ 351.599597][T11397] ? vfs_tmpfile+0x620/0x620 [ 351.604271][T11397] ? _raw_spin_unlock+0x28/0x40 [ 351.609148][T11397] ? alloc_fd+0x590/0x640 [ 351.613518][T11397] do_sys_openat2+0x134/0x1d0 [ 351.618235][T11397] ? do_sys_open+0xe0/0xe0 [ 351.622849][T11397] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 351.628848][T11397] ? srcu_init_notifier_head+0x90/0x90 [ 351.634330][T11397] ? lock_chain_count+0x20/0x20 [ 351.639216][T11397] __x64_sys_openat+0x139/0x160 [ 351.644110][T11397] do_syscall_64+0x55/0xb0 [ 351.648542][T11397] ? clear_bhb_loop+0x40/0x90 [ 351.653241][T11397] ? clear_bhb_loop+0x40/0x90 [ 351.657941][T11397] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 351.663856][T11397] RIP: 0033:0x7fee0075e6ce [ 351.668293][T11397] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 351.687914][T11397] RSP: 002b:00007fee0159aec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 351.696378][T11397] RAX: ffffffffffffffda RBX: 00007fee0159b6c0 RCX: 00007fee0075e6ce [ 351.704363][T11397] RDX: 0000000000000002 RSI: 00007fee0159af90 RDI: ffffffffffffff9c [ 351.712349][T11397] RBP: 00007fee0159b090 R08: 0000000000000000 R09: 0000000000000000 [ 351.720333][T11397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 351.728373][T11397] R13: 00007fee00a26038 R14: 00007fee00a25fa0 R15: 00007fff9eb24288 [ 351.736443][T11397] [ 353.660134][T11392] syzkaller0: entered promiscuous mode [ 353.665735][T11392] syzkaller0: entered allmulticast mode [ 353.672210][T11408] netlink: 'syz.0.1638': attribute type 21 has an invalid length. [ 353.681275][T11408] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1638'. [ 353.693147][T11412] sit0: entered allmulticast mode [ 353.715380][T11413] sit0: entered promiscuous mode [ 354.345445][T11436] FAULT_INJECTION: forcing a failure. [ 354.345445][T11436] name failslab, interval 1, probability 0, space 0, times 0 [ 354.361513][T11436] CPU: 1 PID: 11436 Comm: syz.3.1643 Not tainted syzkaller #0 [ 354.369025][T11436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 354.379097][T11436] Call Trace: [ 354.382379][T11436] [ 354.385315][T11436] dump_stack_lvl+0x18c/0x250 [ 354.390001][T11436] ? show_regs_print_info+0x20/0x20 [ 354.395200][T11436] ? load_image+0x420/0x420 [ 354.399708][T11436] ? __lock_acquire+0x7d80/0x7d80 [ 354.404733][T11436] should_fail_ex+0x394/0x4c0 [ 354.409413][T11436] should_failslab+0x9/0x20 [ 354.413916][T11436] slab_pre_alloc_hook+0x59/0x300 [ 354.418946][T11436] kmem_cache_alloc_lru+0x4d/0x2b0 [ 354.424059][T11436] ? __d_alloc+0x31/0x710 [ 354.428381][T11436] ? inode_update_timestamps+0x600/0x600 [ 354.434022][T11436] __d_alloc+0x31/0x710 [ 354.438178][T11436] __ns_get_path+0x3b7/0x5f0 [ 354.442772][T11436] ns_get_path+0x54/0x90 [ 354.447013][T11436] proc_ns_get_link+0x16c/0x2c0 [ 354.451959][T11436] ? proc_ns_instantiate+0xf0/0xf0 [ 354.457070][T11436] ? bpf_lsm_inode_follow_link+0x9/0x10 [ 354.462610][T11436] ? security_inode_follow_link+0xb7/0x100 [ 354.468440][T11436] ? proc_ns_instantiate+0xf0/0xf0 [ 354.473554][T11436] pick_link+0x666/0xdd0 [ 354.477804][T11436] step_into+0xc18/0xee0 [ 354.482049][T11436] ? rcu_read_lock_any_held+0xb4/0x140 [ 354.487505][T11436] ? rcu_read_lock_bh_held+0x100/0x100 [ 354.492963][T11436] ? set_root+0x3a0/0x3a0 [ 354.497286][T11436] ? d_splice_alias+0x114/0x330 [ 354.502136][T11436] path_openat+0x1656/0x3270 [ 354.506742][T11436] ? do_filp_open+0x430/0x430 [ 354.511427][T11436] do_filp_open+0x1f2/0x430 [ 354.515929][T11436] ? vfs_tmpfile+0x620/0x620 [ 354.520534][T11436] ? _raw_spin_unlock+0x28/0x40 [ 354.525387][T11436] ? alloc_fd+0x590/0x640 [ 354.529726][T11436] do_sys_openat2+0x134/0x1d0 [ 354.534400][T11436] ? atomic_notifier_call_chain+0x16e/0x180 [ 354.540298][T11436] ? do_sys_open+0xe0/0xe0 [ 354.544711][T11436] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 354.550688][T11436] ? srcu_init_notifier_head+0x90/0x90 [ 354.556152][T11436] ? lock_chain_count+0x20/0x20 [ 354.561021][T11436] __x64_sys_openat+0x139/0x160 [ 354.565879][T11436] do_syscall_64+0x55/0xb0 [ 354.570290][T11436] ? clear_bhb_loop+0x40/0x90 [ 354.574959][T11436] ? clear_bhb_loop+0x40/0x90 [ 354.579631][T11436] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 354.585523][T11436] RIP: 0033:0x7fee0075e6ce [ 354.589936][T11436] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 354.609539][T11436] RSP: 002b:00007fee0159aec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 354.617947][T11436] RAX: ffffffffffffffda RBX: 00007fee0159b6c0 RCX: 00007fee0075e6ce [ 354.625913][T11436] RDX: 0000000000000002 RSI: 00007fee0159af90 RDI: ffffffffffffff9c [ 354.633880][T11436] RBP: 00007fee0159b090 R08: 0000000000000000 R09: 0000000000000000 [ 354.641848][T11436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 354.649816][T11436] R13: 00007fee00a26038 R14: 00007fee00a25fa0 R15: 00007fff9eb24288 [ 354.657796][T11436] [ 356.264944][T11432] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1642'. [ 356.483352][T11451] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1646'. [ 356.539033][T11451] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1646'. [ 356.582552][T11455] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1646'. [ 356.600717][T11444] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1646'. [ 356.709934][T11463] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.1650'. [ 356.756401][T11465] mac80211_hwsim hwsim8 wlan1: entered promiscuous mode [ 356.766851][T11465] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode [ 356.768623][T11467] FAULT_INJECTION: forcing a failure. [ 356.768623][T11467] name failslab, interval 1, probability 0, space 0, times 0 [ 356.787247][T11467] CPU: 1 PID: 11467 Comm: syz.0.1652 Not tainted syzkaller #0 [ 356.794756][T11467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 356.804815][T11467] Call Trace: [ 356.808098][T11467] [ 356.811034][T11467] dump_stack_lvl+0x18c/0x250 [ 356.815714][T11467] ? show_regs_print_info+0x20/0x20 [ 356.820913][T11467] ? load_image+0x420/0x420 [ 356.825452][T11467] ? __might_sleep+0xe0/0xe0 [ 356.830042][T11467] ? __lock_acquire+0x7d80/0x7d80 [ 356.835067][T11467] should_fail_ex+0x394/0x4c0 [ 356.839750][T11467] should_failslab+0x9/0x20 [ 356.844254][T11467] slab_pre_alloc_hook+0x59/0x300 [ 356.849290][T11467] kmem_cache_alloc+0x5a/0x2c0 [ 356.854057][T11467] ? getname_flags+0xbb/0x500 [ 356.858745][T11467] getname_flags+0xbb/0x500 [ 356.863262][T11467] do_sys_openat2+0xda/0x1d0 [ 356.867855][T11467] ? do_sys_open+0xe0/0xe0 [ 356.872273][T11467] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 356.878337][T11467] ? srcu_init_notifier_head+0x90/0x90 [ 356.883804][T11467] ? lock_chain_count+0x20/0x20 [ 356.888657][T11467] __x64_sys_openat+0x139/0x160 [ 356.893518][T11467] do_syscall_64+0x55/0xb0 [ 356.897943][T11467] ? clear_bhb_loop+0x40/0x90 [ 356.902623][T11467] ? clear_bhb_loop+0x40/0x90 [ 356.907299][T11467] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 356.913191][T11467] RIP: 0033:0x7f2ae4f5e6ce [ 356.917612][T11467] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 356.937218][T11467] RSP: 002b:00007f2ae5e47ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 356.945643][T11467] RAX: ffffffffffffffda RBX: 00007f2ae5e486c0 RCX: 00007f2ae4f5e6ce [ 356.953639][T11467] RDX: 0000000000000000 RSI: 00007f2ae5e47f90 RDI: ffffffffffffff9c [ 356.961605][T11467] RBP: 00007f2ae5e48090 R08: 0000000000000000 R09: 0000000000000000 [ 356.969599][T11467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 356.977585][T11467] R13: 00007f2ae5226038 R14: 00007f2ae5225fa0 R15: 00007fff3d6bcf28 [ 356.985575][T11467] [ 357.065612][T11470] FAULT_INJECTION: forcing a failure. [ 357.065612][T11470] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 357.079087][T11470] CPU: 0 PID: 11470 Comm: syz.0.1661 Not tainted syzkaller #0 [ 357.086585][T11470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 357.096665][T11470] Call Trace: [ 357.099960][T11470] [ 357.102906][T11470] dump_stack_lvl+0x18c/0x250 [ 357.107595][T11470] ? show_regs_print_info+0x20/0x20 [ 357.112819][T11470] ? load_image+0x420/0x420 [ 357.117364][T11470] ? __might_fault+0xaa/0x120 [ 357.122077][T11470] ? __lock_acquire+0x7d80/0x7d80 [ 357.127138][T11470] should_fail_ex+0x394/0x4c0 [ 357.131850][T11470] strncpy_from_user+0x36/0x2f0 [ 357.136743][T11470] getname_flags+0xf6/0x500 [ 357.141285][T11470] do_sys_openat2+0xda/0x1d0 [ 357.145904][T11470] ? do_sys_open+0xe0/0xe0 [ 357.150343][T11470] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 357.156349][T11470] ? srcu_init_notifier_head+0x90/0x90 [ 357.161839][T11470] ? lock_chain_count+0x20/0x20 [ 357.166720][T11470] __x64_sys_openat+0x139/0x160 [ 357.171602][T11470] do_syscall_64+0x55/0xb0 [ 357.176045][T11470] ? clear_bhb_loop+0x40/0x90 [ 357.180749][T11470] ? clear_bhb_loop+0x40/0x90 [ 357.185434][T11470] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 357.191330][T11470] RIP: 0033:0x7f2ae4f5e6ce [ 357.195749][T11470] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 357.215355][T11470] RSP: 002b:00007f2ae5e47ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 357.223770][T11470] RAX: ffffffffffffffda RBX: 00007f2ae5e486c0 RCX: 00007f2ae4f5e6ce [ 357.231741][T11470] RDX: 0000000000000000 RSI: 00007f2ae5e47f90 RDI: ffffffffffffff9c [ 357.239712][T11470] RBP: 00007f2ae5e48090 R08: 0000000000000000 R09: 0000000000000000 [ 357.247681][T11470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 357.255646][T11470] R13: 00007f2ae5226038 R14: 00007f2ae5225fa0 R15: 00007fff3d6bcf28 [ 357.263627][T11470] [ 357.341089][T11473] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1653'. [ 357.855608][T11492] syzkaller0: entered promiscuous mode [ 357.861357][T11492] syzkaller0: entered allmulticast mode [ 358.279400][T11510] FAULT_INJECTION: forcing a failure. [ 358.279400][T11510] name failslab, interval 1, probability 0, space 0, times 0 [ 358.300982][T11510] CPU: 0 PID: 11510 Comm: syz.2.1664 Not tainted syzkaller #0 [ 358.308508][T11510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 358.318581][T11510] Call Trace: [ 358.321864][T11510] [ 358.324788][T11510] dump_stack_lvl+0x18c/0x250 [ 358.329499][T11510] ? show_regs_print_info+0x20/0x20 [ 358.334706][T11510] ? load_image+0x420/0x420 [ 358.339221][T11510] ? __lock_acquire+0x7d80/0x7d80 [ 358.344277][T11510] should_fail_ex+0x394/0x4c0 [ 358.348990][T11510] should_failslab+0x9/0x20 [ 358.353507][T11510] slab_pre_alloc_hook+0x59/0x300 [ 358.358535][T11510] ? mark_lock+0x94/0x320 [ 358.362868][T11510] kmem_cache_alloc+0x5a/0x2c0 [ 358.367639][T11510] ? alloc_empty_file+0x9e/0x1d0 [ 358.372597][T11510] alloc_empty_file+0x9e/0x1d0 [ 358.377377][T11510] path_openat+0x120/0x3270 [ 358.381908][T11510] ? verify_lock_unused+0x140/0x140 [ 358.387109][T11510] ? do_sys_openat2+0xda/0x1d0 [ 358.391878][T11510] ? __x64_sys_openat+0x139/0x160 [ 358.396900][T11510] ? do_syscall_64+0x55/0xb0 [ 358.401490][T11510] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 358.407560][T11510] ? verify_lock_unused+0x140/0x140 [ 358.412762][T11510] ? do_filp_open+0x430/0x430 [ 358.417448][T11510] do_filp_open+0x1f2/0x430 [ 358.422037][T11510] ? vfs_tmpfile+0x620/0x620 [ 358.426637][T11510] ? _raw_spin_unlock+0x28/0x40 [ 358.431489][T11510] ? alloc_fd+0x590/0x640 [ 358.435824][T11510] do_sys_openat2+0x134/0x1d0 [ 358.440514][T11510] ? do_sys_open+0xe0/0xe0 [ 358.444931][T11510] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 358.450912][T11510] ? srcu_init_notifier_head+0x90/0x90 [ 358.456399][T11510] ? lock_chain_count+0x20/0x20 [ 358.461251][T11510] __x64_sys_openat+0x139/0x160 [ 358.466107][T11510] do_syscall_64+0x55/0xb0 [ 358.470517][T11510] ? clear_bhb_loop+0x40/0x90 [ 358.475279][T11510] ? clear_bhb_loop+0x40/0x90 [ 358.479956][T11510] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 358.485842][T11510] RIP: 0033:0x7f1b9615e6ce [ 358.490260][T11510] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 358.509871][T11510] RSP: 002b:00007f1b97124ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 358.518304][T11510] RAX: ffffffffffffffda RBX: 00007f1b971256c0 RCX: 00007f1b9615e6ce [ 358.526285][T11510] RDX: 0000000000000000 RSI: 00007f1b97124f90 RDI: ffffffffffffff9c [ 358.534261][T11510] RBP: 00007f1b97125090 R08: 0000000000000000 R09: 0000000000000000 [ 358.542229][T11510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 358.550197][T11510] R13: 00007f1b96426038 R14: 00007f1b96425fa0 R15: 00007ffdbb329778 [ 358.558203][T11510] [ 358.659659][T11513] netlink: 'syz.2.1665': attribute type 1 has an invalid length. [ 358.670433][T11513] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.1665'. [ 359.913618][T11503] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.1659'. [ 359.924349][T11508] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 359.931942][T11508] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 360.177330][T11530] netlink: 'syz.1.1670': attribute type 10 has an invalid length. [ 360.223541][T11530] mac80211_hwsim hwsim9 wlan1: left promiscuous mode [ 360.230418][T11530] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 360.236288][T11534] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1669'. [ 360.486695][T11540] FAULT_INJECTION: forcing a failure. [ 360.486695][T11540] name failslab, interval 1, probability 0, space 0, times 0 [ 360.517537][T11540] CPU: 0 PID: 11540 Comm: syz.1.1673 Not tainted syzkaller #0 [ 360.525119][T11540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 360.535201][T11540] Call Trace: [ 360.538507][T11540] [ 360.541468][T11540] dump_stack_lvl+0x18c/0x250 [ 360.546179][T11540] ? show_regs_print_info+0x20/0x20 [ 360.551400][T11540] ? load_image+0x420/0x420 [ 360.556018][T11540] ? __might_sleep+0xe0/0xe0 [ 360.560643][T11540] ? __lock_acquire+0x7d80/0x7d80 [ 360.565705][T11540] should_fail_ex+0x394/0x4c0 [ 360.570424][T11540] should_failslab+0x9/0x20 [ 360.574960][T11540] slab_pre_alloc_hook+0x59/0x300 [ 360.580023][T11540] ? __lock_acquire+0x7d80/0x7d80 [ 360.585083][T11540] kmem_cache_alloc+0x5a/0x2c0 [ 360.589874][T11540] ? security_file_alloc+0x34/0x120 [ 360.595097][T11540] security_file_alloc+0x34/0x120 [ 360.600151][T11540] init_file+0x94/0x1f0 [ 360.604326][T11540] alloc_empty_file+0xb7/0x1d0 [ 360.609101][T11540] path_openat+0x120/0x3270 [ 360.613636][T11540] ? perf_trace_lock+0xfc/0x3b0 [ 360.618487][T11540] ? __x64_sys_openat+0x139/0x160 [ 360.623517][T11540] ? do_syscall_64+0x55/0xb0 [ 360.628117][T11540] ? verify_lock_unused+0x140/0x140 [ 360.633322][T11540] ? do_filp_open+0x430/0x430 [ 360.638002][T11540] ? perf_trace_lock+0xfc/0x3b0 [ 360.642862][T11540] do_filp_open+0x1f2/0x430 [ 360.647372][T11540] ? vfs_tmpfile+0x620/0x620 [ 360.651978][T11540] ? _raw_spin_unlock+0x28/0x40 [ 360.656835][T11540] ? alloc_fd+0x590/0x640 [ 360.661175][T11540] do_sys_openat2+0x134/0x1d0 [ 360.665858][T11540] ? do_sys_open+0xe0/0xe0 [ 360.670279][T11540] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 360.676261][T11540] ? lock_chain_count+0x20/0x20 [ 360.681120][T11540] __x64_sys_openat+0x139/0x160 [ 360.685979][T11540] do_syscall_64+0x55/0xb0 [ 360.690394][T11540] ? clear_bhb_loop+0x40/0x90 [ 360.695089][T11540] ? clear_bhb_loop+0x40/0x90 [ 360.699781][T11540] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 360.705686][T11540] RIP: 0033:0x7f1e0a15e6ce [ 360.710113][T11540] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 360.729729][T11540] RSP: 002b:00007f1e0b064ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 360.738147][T11540] RAX: ffffffffffffffda RBX: 00007f1e0b0656c0 RCX: 00007f1e0a15e6ce [ 360.746118][T11540] RDX: 0000000000000000 RSI: 00007f1e0b064f90 RDI: ffffffffffffff9c [ 360.754089][T11540] RBP: 00007f1e0b065090 R08: 0000000000000000 R09: 0000000000000000 [ 360.762060][T11540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 360.770029][T11540] R13: 00007f1e0a426038 R14: 00007f1e0a425fa0 R15: 00007fff89c22388 [ 360.778013][T11540] [ 360.809782][T11546] netlink: 'syz.2.1674': attribute type 21 has an invalid length. [ 361.207844][T11563] mac80211_hwsim hwsim13 wlan1: entered promiscuous mode [ 361.223415][T11563] mac80211_hwsim hwsim13 wlan1: entered allmulticast mode [ 361.452206][T11575] FAULT_INJECTION: forcing a failure. [ 361.452206][T11575] name failslab, interval 1, probability 0, space 0, times 0 [ 361.479312][T11575] CPU: 1 PID: 11575 Comm: syz.0.1684 Not tainted syzkaller #0 [ 361.486831][T11575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 361.496912][T11575] Call Trace: [ 361.500211][T11575] [ 361.503162][T11575] dump_stack_lvl+0x18c/0x250 [ 361.507864][T11575] ? show_regs_print_info+0x20/0x20 [ 361.513074][T11575] ? load_image+0x420/0x420 [ 361.517588][T11575] should_fail_ex+0x394/0x4c0 [ 361.522268][T11575] should_failslab+0x9/0x20 [ 361.526786][T11575] slab_pre_alloc_hook+0x59/0x300 [ 361.531829][T11575] ? proc_thread_self_get_link+0xfc/0x190 [ 361.537561][T11575] __kmem_cache_alloc_node+0x53/0x250 [ 361.542947][T11575] ? proc_thread_self_get_link+0xfc/0x190 [ 361.548682][T11575] kmalloc_trace+0x2a/0xe0 [ 361.553118][T11575] proc_thread_self_get_link+0xfc/0x190 [ 361.558680][T11575] ? proc_setup_thread_self+0x2c0/0x2c0 [ 361.564231][T11575] pick_link+0x6a8/0xdd0 [ 361.568481][T11575] step_into+0xc18/0xee0 [ 361.572725][T11575] ? set_root+0x3a0/0x3a0 [ 361.577058][T11575] ? lookup_fast+0x14a/0x4c0 [ 361.581648][T11575] ? security_inode_permission+0xb0/0xf0 [ 361.587282][T11575] link_path_walk+0x748/0xe40 [ 361.591967][T11575] ? handle_lookup_down+0x130/0x130 [ 361.597177][T11575] path_openat+0x291/0x3270 [ 361.601694][T11575] ? do_sys_openat2+0xda/0x1d0 [ 361.606455][T11575] ? __x64_sys_openat+0x139/0x160 [ 361.611479][T11575] ? verify_lock_unused+0x140/0x140 [ 361.616677][T11575] ? do_filp_open+0x430/0x430 [ 361.621369][T11575] do_filp_open+0x1f2/0x430 [ 361.625875][T11575] ? vfs_tmpfile+0x620/0x620 [ 361.630484][T11575] ? _raw_spin_unlock+0x28/0x40 [ 361.635333][T11575] ? alloc_fd+0x590/0x640 [ 361.639672][T11575] do_sys_openat2+0x134/0x1d0 [ 361.644349][T11575] ? do_sys_open+0xe0/0xe0 [ 361.648764][T11575] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 361.654741][T11575] ? srcu_init_notifier_head+0x90/0x90 [ 361.660223][T11575] ? lock_chain_count+0x20/0x20 [ 361.665106][T11575] __x64_sys_openat+0x139/0x160 [ 361.669987][T11575] do_syscall_64+0x55/0xb0 [ 361.674410][T11575] ? clear_bhb_loop+0x40/0x90 [ 361.679102][T11575] ? clear_bhb_loop+0x40/0x90 [ 361.683789][T11575] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 361.689682][T11575] RIP: 0033:0x7f2ae4f5e6ce [ 361.694098][T11575] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 361.713734][T11575] RSP: 002b:00007f2ae5e47ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 361.722149][T11575] RAX: ffffffffffffffda RBX: 00007f2ae5e486c0 RCX: 00007f2ae4f5e6ce [ 361.730118][T11575] RDX: 0000000000000000 RSI: 00007f2ae5e47f90 RDI: ffffffffffffff9c [ 361.738094][T11575] RBP: 00007f2ae5e48090 R08: 0000000000000000 R09: 0000000000000000 [ 361.746060][T11575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 361.754029][T11575] R13: 00007f2ae5226038 R14: 00007f2ae5225fa0 R15: 00007fff3d6bcf28 [ 361.762016][T11575] [ 362.199991][T11600] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1691'. [ 362.220138][T11600] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1691'. [ 362.523048][T11622] FAULT_INJECTION: forcing a failure. [ 362.523048][T11622] name failslab, interval 1, probability 0, space 0, times 0 [ 362.542914][T11622] CPU: 0 PID: 11622 Comm: syz.0.1697 Not tainted syzkaller #0 [ 362.550438][T11622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 362.560530][T11622] Call Trace: [ 362.563917][T11622] [ 362.566867][T11622] dump_stack_lvl+0x18c/0x250 [ 362.571558][T11622] ? show_regs_print_info+0x20/0x20 [ 362.576756][T11622] ? load_image+0x420/0x420 [ 362.581259][T11622] ? __might_sleep+0xe0/0xe0 [ 362.585855][T11622] ? __lock_acquire+0x7d80/0x7d80 [ 362.590875][T11622] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 362.596852][T11622] should_fail_ex+0x394/0x4c0 [ 362.601534][T11622] should_failslab+0x9/0x20 [ 362.606041][T11622] slab_pre_alloc_hook+0x59/0x300 [ 362.611064][T11622] ? __ns_get_path+0x2e/0x5f0 [ 362.615741][T11622] kmem_cache_alloc_lru+0x4d/0x2b0 [ 362.620860][T11622] ? new_inode_pseudo+0x82/0x1d0 [ 362.625799][T11622] new_inode_pseudo+0x82/0x1d0 [ 362.630563][T11622] __ns_get_path+0x249/0x5f0 [ 362.635154][T11622] ns_get_path+0x54/0x90 [ 362.639400][T11622] proc_ns_get_link+0x16c/0x2c0 [ 362.644253][T11622] ? proc_ns_instantiate+0xf0/0xf0 [ 362.649364][T11622] ? try_to_unlazy+0x33e/0x5c0 [ 362.654127][T11622] ? proc_ns_instantiate+0xf0/0xf0 [ 362.659238][T11622] pick_link+0x666/0xdd0 [ 362.663570][T11622] step_into+0xc18/0xee0 [ 362.667812][T11622] ? pid_revalidate+0x22/0x260 [ 362.672592][T11622] ? set_root+0x3a0/0x3a0 [ 362.676919][T11622] ? pid_revalidate+0x20d/0x260 [ 362.681768][T11622] ? lookup_fast+0x494/0x4c0 [ 362.686363][T11622] path_openat+0x1656/0x3270 [ 362.690964][T11622] ? do_sys_openat2+0xda/0x1d0 [ 362.695733][T11622] ? __x64_sys_openat+0x139/0x160 [ 362.700759][T11622] ? verify_lock_unused+0x140/0x140 [ 362.705975][T11622] ? do_filp_open+0x430/0x430 [ 362.710663][T11622] do_filp_open+0x1f2/0x430 [ 362.715166][T11622] ? vfs_tmpfile+0x620/0x620 [ 362.719773][T11622] ? _raw_spin_unlock+0x28/0x40 [ 362.724626][T11622] ? alloc_fd+0x590/0x640 [ 362.728967][T11622] do_sys_openat2+0x134/0x1d0 [ 362.733647][T11622] ? do_sys_open+0xe0/0xe0 [ 362.738067][T11622] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 362.744046][T11622] ? srcu_init_notifier_head+0x90/0x90 [ 362.749508][T11622] ? lock_chain_count+0x20/0x20 [ 362.754379][T11622] __x64_sys_openat+0x139/0x160 [ 362.759244][T11622] do_syscall_64+0x55/0xb0 [ 362.763658][T11622] ? clear_bhb_loop+0x40/0x90 [ 362.768330][T11622] ? clear_bhb_loop+0x40/0x90 [ 362.773001][T11622] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 362.778991][T11622] RIP: 0033:0x7f2ae4f5e6ce [ 362.783402][T11622] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 362.803018][T11622] RSP: 002b:00007f2ae5e47ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 362.811870][T11622] RAX: ffffffffffffffda RBX: 00007f2ae5e486c0 RCX: 00007f2ae4f5e6ce [ 362.819838][T11622] RDX: 0000000000000000 RSI: 00007f2ae5e47f90 RDI: ffffffffffffff9c [ 362.827809][T11622] RBP: 00007f2ae5e48090 R08: 0000000000000000 R09: 0000000000000000 [ 362.835779][T11622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 362.843754][T11622] R13: 00007f2ae5226038 R14: 00007f2ae5225fa0 R15: 00007fff3d6bcf28 [ 362.851735][T11622] [ 363.137311][T11640] netlink: 'syz.0.1699': attribute type 9 has an invalid length. [ 363.205464][T11640] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1699'. [ 364.113845][T11661] FAULT_INJECTION: forcing a failure. [ 364.113845][T11661] name failslab, interval 1, probability 0, space 0, times 0 [ 364.141295][T11661] CPU: 1 PID: 11661 Comm: syz.0.1708 Not tainted syzkaller #0 [ 364.148821][T11661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 364.158890][T11661] Call Trace: [ 364.162169][T11661] [ 364.165099][T11661] dump_stack_lvl+0x18c/0x250 [ 364.169785][T11661] ? show_regs_print_info+0x20/0x20 [ 364.174984][T11661] ? load_image+0x420/0x420 [ 364.179499][T11661] should_fail_ex+0x394/0x4c0 [ 364.184181][T11661] should_failslab+0x9/0x20 [ 364.188717][T11661] slab_pre_alloc_hook+0x59/0x300 [ 364.193750][T11661] ? proc_thread_self_get_link+0xfc/0x190 [ 364.199470][T11661] __kmem_cache_alloc_node+0x53/0x250 [ 364.204849][T11661] ? proc_thread_self_get_link+0xfc/0x190 [ 364.210568][T11661] kmalloc_trace+0x2a/0xe0 [ 364.214990][T11661] proc_thread_self_get_link+0xfc/0x190 [ 364.220543][T11661] ? proc_setup_thread_self+0x2c0/0x2c0 [ 364.226086][T11661] pick_link+0x6a8/0xdd0 [ 364.230333][T11661] step_into+0xc18/0xee0 [ 364.234581][T11661] ? set_root+0x3a0/0x3a0 [ 364.238915][T11661] ? lookup_fast+0x14a/0x4c0 [ 364.243501][T11661] ? security_inode_permission+0xb0/0xf0 [ 364.249144][T11661] link_path_walk+0x748/0xe40 [ 364.253832][T11661] ? handle_lookup_down+0x130/0x130 [ 364.259042][T11661] path_openat+0x291/0x3270 [ 364.263566][T11661] ? verify_lock_unused+0x140/0x140 [ 364.268765][T11661] ? do_filp_open+0x430/0x430 [ 364.273455][T11661] ? perf_trace_lock_acquire+0x105/0x400 [ 364.279114][T11661] ? trace_event_raw_event_lock_acquire+0x290/0x290 [ 364.285713][T11661] do_filp_open+0x1f2/0x430 [ 364.290246][T11661] ? vfs_tmpfile+0x620/0x620 [ 364.294853][T11661] ? _raw_spin_unlock+0x28/0x40 [ 364.299707][T11661] ? alloc_fd+0x590/0x640 [ 364.304045][T11661] do_sys_openat2+0x134/0x1d0 [ 364.308727][T11661] ? do_sys_open+0xe0/0xe0 [ 364.313290][T11661] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 364.320172][T11661] ? lock_chain_count+0x20/0x20 [ 364.325043][T11661] __x64_sys_openat+0x139/0x160 [ 364.329905][T11661] do_syscall_64+0x55/0xb0 [ 364.334322][T11661] ? clear_bhb_loop+0x40/0x90 [ 364.338998][T11661] ? clear_bhb_loop+0x40/0x90 [ 364.343674][T11661] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 364.349570][T11661] RIP: 0033:0x7f2ae4f5e6ce [ 364.353982][T11661] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 364.373583][T11661] RSP: 002b:00007f2ae5e47ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 364.381996][T11661] RAX: ffffffffffffffda RBX: 00007f2ae5e486c0 RCX: 00007f2ae4f5e6ce [ 364.389969][T11661] RDX: 0000000000000000 RSI: 00007f2ae5e47f90 RDI: ffffffffffffff9c [ 364.397937][T11661] RBP: 00007f2ae5e48090 R08: 0000000000000000 R09: 0000000000000000 [ 364.405903][T11661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 364.413871][T11661] R13: 00007f2ae5226038 R14: 00007f2ae5225fa0 R15: 00007fff3d6bcf28 [ 364.421854][T11661] [ 364.850250][T11670] netlink: 'syz.2.1711': attribute type 4 has an invalid length. [ 364.952388][T11682] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.1714'. [ 365.193792][T11694] syzkaller0: tun_chr_ioctl cmd 2147767506 [ 365.935513][T11703] FAULT_INJECTION: forcing a failure. [ 365.935513][T11703] name failslab, interval 1, probability 0, space 0, times 0 [ 365.949157][T11703] CPU: 0 PID: 11703 Comm: syz.2.1717 Not tainted syzkaller #0 [ 365.956664][T11703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 365.966740][T11703] Call Trace: [ 365.970033][T11703] [ 365.972981][T11703] dump_stack_lvl+0x18c/0x250 [ 365.977683][T11703] ? show_regs_print_info+0x20/0x20 [ 365.982901][T11703] ? load_image+0x420/0x420 [ 365.987434][T11703] ? __lock_acquire+0x7d80/0x7d80 [ 365.992488][T11703] should_fail_ex+0x394/0x4c0 [ 365.997191][T11703] should_failslab+0x9/0x20 [ 366.001716][T11703] slab_pre_alloc_hook+0x59/0x300 [ 366.006772][T11703] kmem_cache_alloc_lru+0x4d/0x2b0 [ 366.011907][T11703] ? __d_alloc+0x31/0x710 [ 366.016248][T11703] ? inode_update_timestamps+0x600/0x600 [ 366.021913][T11703] __d_alloc+0x31/0x710 [ 366.026101][T11703] __ns_get_path+0x3b7/0x5f0 [ 366.030719][T11703] ns_get_path+0x54/0x90 [ 366.034983][T11703] proc_ns_get_link+0x16c/0x2c0 [ 366.039854][T11703] ? proc_ns_instantiate+0xf0/0xf0 [ 366.044990][T11703] ? try_to_unlazy+0x33e/0x5c0 [ 366.049772][T11703] ? proc_ns_instantiate+0xf0/0xf0 [ 366.054902][T11703] pick_link+0x666/0xdd0 [ 366.059172][T11703] step_into+0xc18/0xee0 [ 366.063440][T11703] ? pid_revalidate+0x22/0x260 [ 366.068224][T11703] ? set_root+0x3a0/0x3a0 [ 366.072566][T11703] ? pid_revalidate+0x20d/0x260 [ 366.077437][T11703] ? lookup_fast+0x494/0x4c0 [ 366.082049][T11703] path_openat+0x1656/0x3270 [ 366.086695][T11703] ? perf_trace_lock+0xfc/0x3b0 [ 366.091559][T11703] ? __x64_sys_openat+0x139/0x160 [ 366.096601][T11703] ? verify_lock_unused+0x140/0x140 [ 366.101816][T11703] ? do_filp_open+0x430/0x430 [ 366.106514][T11703] ? perf_trace_lock+0xfc/0x3b0 [ 366.111398][T11703] do_filp_open+0x1f2/0x430 [ 366.115927][T11703] ? vfs_tmpfile+0x620/0x620 [ 366.120564][T11703] ? _raw_spin_unlock+0x28/0x40 [ 366.125438][T11703] ? alloc_fd+0x590/0x640 [ 366.129803][T11703] do_sys_openat2+0x134/0x1d0 [ 366.134508][T11703] ? do_sys_open+0xe0/0xe0 [ 366.138951][T11703] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 366.144950][T11703] ? srcu_init_notifier_head+0x90/0x90 [ 366.150430][T11703] ? lock_chain_count+0x20/0x20 [ 366.155309][T11703] __x64_sys_openat+0x139/0x160 [ 366.160185][T11703] do_syscall_64+0x55/0xb0 [ 366.164618][T11703] ? clear_bhb_loop+0x40/0x90 [ 366.169311][T11703] ? clear_bhb_loop+0x40/0x90 [ 366.174006][T11703] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 366.179916][T11703] RIP: 0033:0x7f1b9615e6ce [ 366.184347][T11703] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 366.203975][T11703] RSP: 002b:00007f1b97124ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 366.212440][T11703] RAX: ffffffffffffffda RBX: 00007f1b971256c0 RCX: 00007f1b9615e6ce [ 366.220425][T11703] RDX: 0000000000000000 RSI: 00007f1b97124f90 RDI: ffffffffffffff9c [ 366.228413][T11703] RBP: 00007f1b97125090 R08: 0000000000000000 R09: 0000000000000000 [ 366.236425][T11703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 366.244413][T11703] R13: 00007f1b96426038 R14: 00007f1b96425fa0 R15: 00007ffdbb329778 [ 366.252419][T11703] [ 367.980098][T11719] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1723'. [ 368.008633][T11719] openvswitch: netlink: Key type 29 is not supported [ 368.540498][T11725] netlink: 202920 bytes leftover after parsing attributes in process `syz.2.1724'. [ 369.067497][T11709] netlink: 'syz.3.1720': attribute type 1 has an invalid length. [ 369.485348][T11736] netlink: 'syz.2.1727': attribute type 10 has an invalid length. [ 369.542644][T11736] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1727'. [ 369.565987][T11736] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1727'. [ 369.604127][T11746] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1730'. [ 369.620311][T11747] netlink: 'syz.0.1729': attribute type 29 has an invalid length. [ 369.630772][T11747] netlink: 'syz.0.1729': attribute type 29 has an invalid length. [ 369.679414][T11745] netlink: 'syz.0.1729': attribute type 29 has an invalid length. [ 369.796114][T11755] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1731'. [ 369.805469][T11755] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1731'. [ 369.816018][T11755] netlink: 33 bytes leftover after parsing attributes in process `syz.3.1731'. [ 369.825420][T11755] bridge_slave_0: entered allmulticast mode [ 369.832838][T11755] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1731'. [ 369.925422][T11761] pim6reg1: entered promiscuous mode [ 369.963982][T11761] pim6reg1: entered allmulticast mode [ 370.389970][T11779] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.398114][T11779] bridge0: entered allmulticast mode [ 371.300458][T11808] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 371.312288][T11808] netlink: 'syz.3.1746': attribute type 9 has an invalid length. [ 371.320204][T11808] __nla_validate_parse: 1 callbacks suppressed [ 371.320216][T11808] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1746'. [ 371.559438][T11815] netlink: 'syz.0.1756': attribute type 25 has an invalid length. [ 371.578466][T11815] netlink: 'syz.0.1756': attribute type 9 has an invalid length. [ 371.593507][T11816] netlink: 'syz.0.1756': attribute type 25 has an invalid length. [ 371.616177][T11816] netlink: 'syz.0.1756': attribute type 9 has an invalid length. [ 371.944191][T11833] netlink: 'syz.0.1754': attribute type 1 has an invalid length. [ 371.954695][T11833] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.1754'. [ 372.115613][T11845] netlink: 'syz.1.1758': attribute type 10 has an invalid length. [ 372.124782][T11845] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.1758'. [ 372.798779][T11854] netlink: 64535 bytes leftover after parsing attributes in process `syz.2.1760'. [ 372.969193][T11858] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.1761'. [ 373.464147][T11867] netlink: 'syz.3.1763': attribute type 11 has an invalid length. [ 373.473478][T11867] netlink: 184116 bytes leftover after parsing attributes in process `syz.3.1763'. [ 373.492021][T11867] debugfs: Directory '!!' with parent 'ieee80211' already present! [ 373.665669][T11869] netlink: 'syz.3.1763': attribute type 10 has an invalid length. [ 375.110397][T11869] .`: (slave netdevsim0): Enslaving as an active interface with an up link [ 375.446000][T11875] netlink: 'syz.1.1765': attribute type 10 has an invalid length. [ 375.647414][T11892] netlink: 'syz.3.1770': attribute type 5 has an invalid length. [ 376.292528][T11910] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1774'. [ 376.381595][T11912] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.1775'. [ 376.460224][T11917] netlink: 'syz.0.1776': attribute type 153 has an invalid length. [ 376.482920][T11917] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.1776'. [ 376.630743][T11924] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1779'. [ 376.973440][T11934] netlink: 209820 bytes leftover after parsing attributes in process `syz.1.1782'. [ 377.130076][T11941] netlink: 14719 bytes leftover after parsing attributes in process `syz.2.1783'. [ 377.350570][T11953] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1788'. [ 377.788497][T11964] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.1791'. [ 377.804483][T11964] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.1791'. [ 377.838114][T11969] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.1791'. [ 377.864249][T11964] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.1791'. [ 378.320155][T11980] netlink: 'syz.0.1796': attribute type 1 has an invalid length. [ 378.345970][T11980] netlink: 'syz.0.1796': attribute type 1 has an invalid length. [ 378.771677][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.778617][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.819814][T12004] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 378.827490][T12004] syzkaller1: linktype set to 6 [ 378.859387][T12000] netlink: 'syz.1.1804': attribute type 10 has an invalid length. [ 379.152624][T12016] netlink: 'syz.1.1809': attribute type 3 has an invalid length. [ 380.681458][T12063] netlink: 'syz.3.1821': attribute type 39 has an invalid length. [ 383.293040][T12119] __nla_validate_parse: 6 callbacks suppressed [ 383.293080][T12119] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.1837'. [ 383.358257][T12119] netlink: zone id is out of range [ 383.378655][T12119] netlink: zone id is out of range [ 383.405985][T12119] netlink: zone id is out of range [ 383.411741][T12119] netlink: zone id is out of range [ 383.454073][T12119] netlink: zone id is out of range [ 383.476613][T12119] netlink: zone id is out of range [ 383.492424][T12119] netlink: zone id is out of range [ 383.512032][T12119] netlink: zone id is out of range [ 383.530258][T12119] netlink: zone id is out of range [ 383.567296][T12119] netlink: zone id is out of range [ 383.874455][T12139] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 384.184144][T12163] netlink: 'syz.3.1848': attribute type 10 has an invalid length. [ 384.192428][T12163] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1848'. [ 384.231061][T12163] netlink: 'syz.3.1848': attribute type 6 has an invalid length. [ 384.239658][T12163] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1848'. [ 387.210565][T12172] netlink: 'syz.3.1851': attribute type 2 has an invalid length. [ 387.374552][T12172] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 387.382816][T12172] dvmrp1: linktype set to 823 [ 387.893565][T12186] netlink: 'syz.3.1858': attribute type 9 has an invalid length. [ 387.902765][T12186] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1858'. [ 389.077371][ T5781] Bluetooth: hci1: ISO packet for unknown connection handle 21 [ 389.112016][T12213] netlink: 'syz.0.1866': attribute type 15 has an invalid length. [ 389.123126][T12213] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.1866'. [ 389.515654][T12221] netlink: 'syz.1.1869': attribute type 29 has an invalid length. [ 389.545995][T12221] netlink: 'syz.1.1869': attribute type 29 has an invalid length. [ 389.665861][T12229] netlink: 'syz.0.1872': attribute type 1 has an invalid length. [ 389.685943][T12229] netlink: 'syz.0.1872': attribute type 2 has an invalid length. [ 389.694198][T12229] netlink: 'syz.0.1872': attribute type 2 has an invalid length. [ 389.702981][T12229] netlink: 'syz.0.1872': attribute type 3 has an invalid length. [ 389.724632][T12229] netlink: 'syz.0.1872': attribute type 4 has an invalid length. [ 389.765951][T12229] netlink: 'syz.0.1872': attribute type 5 has an invalid length. [ 389.805978][T12229] netlink: 'syz.0.1872': attribute type 6 has an invalid length. [ 389.825975][T12229] netlink: 'syz.0.1872': attribute type 7 has an invalid length. [ 389.844976][T12229] netlink: 126304 bytes leftover after parsing attributes in process `syz.0.1872'. [ 393.157131][T12271] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.1883'. [ 393.910316][T12300] syzkaller0: entered promiscuous mode [ 393.916250][T12300] syzkaller0: entered allmulticast mode [ 394.055205][T12306] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1892'. [ 394.097493][T12306] net_ratelimit: 1 callbacks suppressed [ 394.097527][T12306] A link change request failed with some changes committed already. Interface 26 may have been left with an inconsistent configuration, please check. [ 395.701983][T12318] Q6`Ҙ: renamed from lo (while UP) [ 395.741912][T12320] A link change request failed with some changes committed already. Interface Q6`Ҙ may have been left with an inconsistent configuration, please check. [ 395.979534][T12333] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1901'. [ 396.853015][T12357] validate_nla: 8 callbacks suppressed [ 396.853031][T12357] netlink: 'syz.3.1906': attribute type 1 has an invalid length. [ 396.874227][T12357] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.1906'. [ 397.378065][T12379] netlink: 'syz.2.1910': attribute type 10 has an invalid length. [ 397.876558][T12392] netlink: set zone limit has 8 unknown bytes [ 398.005622][T12392] netlink: 'syz.3.1915': attribute type 10 has an invalid length. [ 398.076522][T12392] hsr_slave_0: left promiscuous mode [ 398.175918][T12392] hsr_slave_1: left promiscuous mode [ 398.313414][T12397] netlink: 'syz.0.1916': attribute type 3 has an invalid length. [ 398.332691][T12397] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.1916'. [ 399.000193][T12410] netlink: 'syz.2.1919': attribute type 21 has an invalid length. [ 399.029067][T12410] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1919'. [ 399.185119][T12410] sit0: left promiscuous mode [ 399.713968][T12421] sit0: entered promiscuous mode [ 399.952715][T12425] netlink: 'syz.3.1922': attribute type 10 has an invalid length. [ 400.196001][T12432] can: request_module (can-proto-0) failed. [ 402.373747][T12443] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1927'. [ 404.073386][T12485] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1939'. [ 404.407728][T12487] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.1940'. [ 404.471422][T12489] netlink: 'syz.3.1940': attribute type 10 has an invalid length. [ 404.734670][T12487] netlink: 'syz.3.1940': attribute type 10 has an invalid length. [ 405.319451][T12515] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1947'. [ 405.355864][T12515] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1947'. [ 405.364778][T12515] netlink: 33 bytes leftover after parsing attributes in process `syz.1.1947'. [ 405.398219][T12515] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1947'. [ 405.434586][T12515] netlink: 33 bytes leftover after parsing attributes in process `syz.1.1947'. [ 405.857850][T12534] netlink: 'syz.2.1951': attribute type 10 has an invalid length. [ 407.211306][T12570] syzkaller0: entered promiscuous mode [ 407.217007][T12570] syzkaller0: entered allmulticast mode [ 410.493779][T12580] netlink: 'syz.1.1964': attribute type 10 has an invalid length. [ 410.930713][T12611] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1971'. [ 410.996395][T12615] syz.1.1973: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 411.033775][T12615] CPU: 1 PID: 12615 Comm: syz.1.1973 Not tainted syzkaller #0 [ 411.041311][T12615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 411.051571][T12615] Call Trace: [ 411.054869][T12615] [ 411.057831][T12615] dump_stack_lvl+0x18c/0x250 [ 411.062545][T12615] ? show_regs_print_info+0x20/0x20 [ 411.067778][T12615] ? load_image+0x420/0x420 [ 411.072319][T12615] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 411.078773][T12615] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 411.085310][T12615] warn_alloc+0x246/0x340 [ 411.089672][T12615] ? stack_trace_save+0xaa/0x100 [ 411.094656][T12615] ? zone_watermark_ok_safe+0x230/0x230 [ 411.100254][T12615] ? kasan_set_track+0x5f/0x70 [ 411.105049][T12615] ? kasan_set_track+0x4e/0x70 [ 411.109844][T12615] ? __kasan_kmalloc+0x8f/0xa0 [ 411.114646][T12615] ? xsk_init_queue+0xad/0x100 [ 411.119449][T12615] ? xsk_setsockopt+0x4c9/0x750 [ 411.124327][T12615] ? do_sock_setsockopt+0x175/0x1a0 [ 411.129552][T12615] ? __x64_sys_setsockopt+0x182/0x200 [ 411.134954][T12615] __vmalloc_node_range+0x129/0x1320 [ 411.140298][T12615] ? free_vm_area+0x50/0x50 [ 411.144847][T12615] vmalloc_user+0x74/0x80 [ 411.149215][T12615] ? xskq_create+0xbf/0x170 [ 411.153762][T12615] xskq_create+0xbf/0x170 [ 411.158131][T12615] xsk_init_queue+0xad/0x100 [ 411.162769][T12615] xsk_setsockopt+0x4c9/0x750 [ 411.167497][T12615] ? xsk_poll+0x670/0x670 [ 411.171861][T12615] ? __fget_files+0x28/0x460 [ 411.176491][T12615] ? aa_sock_opt_perm+0x74/0x100 [ 411.181464][T12615] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 411.187065][T12615] ? security_socket_setsockopt+0x7e/0xa0 [ 411.193082][T12615] ? xsk_poll+0x670/0x670 [ 411.197446][T12615] do_sock_setsockopt+0x175/0x1a0 [ 411.202499][T12615] ? __fdget+0x180/0x210 [ 411.206776][T12615] __x64_sys_setsockopt+0x182/0x200 [ 411.212010][T12615] do_syscall_64+0x55/0xb0 [ 411.216457][T12615] ? clear_bhb_loop+0x40/0x90 [ 411.221172][T12615] ? clear_bhb_loop+0x40/0x90 [ 411.225880][T12615] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 411.231801][T12615] RIP: 0033:0x7f1e0a19de99 [ 411.236240][T12615] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 411.255874][T12615] RSP: 002b:00007f1e0b044028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 411.264408][T12615] RAX: ffffffffffffffda RBX: 00007f1e0a426090 RCX: 00007f1e0a19de99 [ 411.272425][T12615] RDX: 0000000000000002 RSI: 000000000000011b RDI: 000000000000000d [ 411.280439][T12615] RBP: 00007f1e0a233eaf R08: 0000000000000004 R09: 0000000000000000 [ 411.287490][T12621] netlink: 'syz.3.1972': attribute type 39 has an invalid length. [ 411.288416][T12615] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 411.304256][T12615] R13: 00007f1e0a426128 R14: 00007f1e0a426090 R15: 00007fff89c22388 [ 411.312270][T12615] [ 411.378190][T12615] Mem-Info: [ 411.407267][T12615] active_anon:21914 inactive_anon:0 isolated_anon:0 [ 411.407267][T12615] active_file:18276 inactive_file:40083 isolated_file:0 [ 411.407267][T12615] unevictable:768 dirty:27 writeback:0 [ 411.407267][T12615] slab_reclaimable:10639 slab_unreclaimable:97139 [ 411.407267][T12615] mapped:25322 shmem:12538 pagetables:556 [ 411.407267][T12615] sec_pagetables:0 bounce:0 [ 411.407267][T12615] kernel_misc_reclaimable:0 [ 411.407267][T12615] free:1326372 free_pcp:8263 free_cma:0 [ 411.515990][T12615] Node 0 active_anon:84656kB inactive_anon:0kB active_file:73104kB inactive_file:160128kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:101288kB dirty:108kB writeback:0kB shmem:45616kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11536kB pagetables:2024kB sec_pagetables:0kB all_unreclaimable? no [ 411.599045][T12629] netlink: 192188 bytes leftover after parsing attributes in process `syz.2.1975'. [ 411.625847][T12629] openvswitch: netlink: Key 9 has unexpected len 3064 expected 4 [ 411.645972][T12615] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 411.795949][T12615] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 411.841494][T12615] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 411.851832][T12615] Node 0 DMA32 free:1384296kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:72320kB inactive_anon:0kB active_file:73104kB inactive_file:159296kB unevictable:1536kB writepending:108kB present:3129332kB managed:2586840kB mlocked:0kB bounce:0kB free_pcp:35540kB local_pcp:14184kB free_cma:0kB [ 411.890135][T12615] lowmem_reserve[]: 0 0 [ 411.903883][T12634] delete_channel: no stack [ 411.946451][T12615] 0 0 0 [ 411.949503][T12615] Node 0 Normal free:4kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:832kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 411.986080][T12615] lowmem_reserve[]: 0 0 0 0 0 [ 411.996034][T12615] Node 1 Normal free:3905576kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:13248kB local_pcp:7552kB free_cma:0kB [ 412.063678][T12615] lowmem_reserve[]: 0 0 0 0 0 [ 412.074422][T12615] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 412.100361][T12615] Node 0 DMA32: 2061*4kB (UME) 1114*8kB (UME) 1610*16kB (UME) 1456*32kB (UME) 478*64kB (UME) 314*128kB (UME) 88*256kB (UM) 21*512kB (UME) 3*1024kB (UME) 8*2048kB (ME) 293*4096kB (UM) = 1413156kB [ 412.146132][T12615] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 412.149976][T12644] netlink: 'syz.2.1980': attribute type 10 has an invalid length. [ 412.166778][T12615] Node 1 Normal: 200*4kB (UME) 53*8kB (UME) 44*16kB (UME) 149*32kB (UME) 48*64kB (UME) 8*128kB (UME) 4*256kB (UME) 1*512kB (E) 2*1024kB (UE) 2*2048kB (UE) 949*4096kB (M) = 3905576kB [ 412.189109][T12644] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1980'. [ 412.204921][T12615] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 412.223422][T12644] batman_adv: batadv0: Adding interface: virt_wifi0 [ 412.226078][T12615] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 412.249026][T12615] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 412.249147][T12644] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 412.264631][T12615] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 412.312324][T12615] 61140 total pagecache pages [ 412.323293][T12615] 0 pages in swap cache [ 412.333151][T12615] Free swap = 124996kB [ 412.341130][T12615] Total swap = 124996kB [ 412.342041][T12644] batman_adv: batadv0: Interface activated: virt_wifi0 [ 412.347601][T12615] 2097051 pages RAM [ 412.372039][T12615] 0 pages HighMem/MovableOnly [ 412.380211][T12615] 416955 pages reserved [ 412.388999][T12615] 0 pages cma reserved [ 412.554937][T12652] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1984'. [ 412.874360][T12658] netlink: 65023 bytes leftover after parsing attributes in process `syz.3.1986'. [ 413.036319][T12662] netlink: 'syz.0.1996': attribute type 11 has an invalid length. [ 413.369308][T12673] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1988'. [ 414.139925][T12690] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1997'. [ 414.509481][T12712] netlink: 'syz.0.2003': attribute type 2 has an invalid length. [ 414.541207][T12712] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2003'. [ 414.936732][T12735] bridge0: port 1(bridge_slave_0) entered forwarding state [ 415.291425][T12748] netlink: 'syz.2.2013': attribute type 21 has an invalid length. [ 415.299868][T12748] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2013'. [ 415.587879][T12756] netlink: 'syz.2.2015': attribute type 1 has an invalid length. [ 415.859569][T12758] syzkaller0: entered promiscuous mode [ 415.865368][T12758] syzkaller0: entered allmulticast mode [ 415.894116][T12766] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2019'. [ 420.550325][T12785] netlink: 'syz.0.2024': attribute type 4 has an invalid length. [ 420.559699][T12785] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2024'. [ 420.994630][T12790] netlink: 'syz.2.2025': attribute type 1 has an invalid length. [ 421.006231][T12790] netlink: 112865 bytes leftover after parsing attributes in process `syz.2.2025'. [ 421.159371][T12796] bridge0: entered promiscuous mode [ 421.467356][T12810] netlink: 'syz.3.2032': attribute type 21 has an invalid length. [ 421.514258][T12810] netlink: 'syz.3.2032': attribute type 4 has an invalid length. [ 421.533418][T12810] netlink: 120 bytes leftover after parsing attributes in process `syz.3.2032'. [ 421.786799][T12823] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 423.363024][T12832] netlink: 'syz.3.2038': attribute type 3 has an invalid length. [ 423.399769][T12833] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.2037'. [ 426.503950][T12837] netlink: zone id is out of range [ 426.511481][T12837] netlink: set zone limit has 8 unknown bytes [ 427.100383][T12852] : port 1(ip6gretap0) entered blocking state [ 427.107533][T12852] : port 1(ip6gretap0) entered disabled state [ 427.114015][T12852] ip6gretap0: entered allmulticast mode [ 427.123433][T12852] ip6gretap0: entered promiscuous mode [ 427.132068][T12851] netlink: 'syz.0.2044': attribute type 10 has an invalid length. [ 427.205960][T12851] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2044'. [ 427.277432][T12856] netlink: 'syz.1.2043': attribute type 8 has an invalid length. [ 427.296977][T12856] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2043'. [ 427.406814][T12852] netlink: 'syz.1.2043': attribute type 10 has an invalid length. [ 427.554325][T12861] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2046'. [ 427.565241][T12861] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2046'. [ 427.580075][T12861] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2046'. [ 427.590401][T12861] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2046'. [ 427.935478][T12869] netlink: 'syz.0.2050': attribute type 3 has an invalid length. [ 427.979518][T12869] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.2050'. [ 428.414897][T12887] netlink: 'syz.1.2056': attribute type 21 has an invalid length. [ 428.445854][T12887] netlink: 'syz.1.2056': attribute type 4 has an invalid length. [ 428.453638][T12887] netlink: 120 bytes leftover after parsing attributes in process `syz.1.2056'. [ 429.237231][T12898] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2059'. [ 429.568974][T12908] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2060'. [ 429.581142][T12910] netlink: zone id is out of range [ 429.588461][T12910] netlink: zone id is out of range [ 429.593631][T12910] netlink: zone id is out of range [ 429.599542][T12910] netlink: zone id is out of range [ 429.602012][T12908] A link change request failed with some changes committed already. Interface 26 may have been left with an inconsistent configuration, please check. [ 429.604661][T12910] netlink: zone id is out of range [ 429.604671][T12910] netlink: zone id is out of range [ 429.604682][T12910] netlink: zone id is out of range [ 429.688835][T12913] bridge0: port 3(team0) entered disabled state [ 429.696832][T12913] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.704511][T12913] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.718433][T12913] bridge0: entered allmulticast mode [ 430.217577][T12932] netlink: 'syz.0.2069': attribute type 10 has an invalid length. [ 430.230201][T12932] dummy0: entered promiscuous mode [ 430.235553][T12932] dummy0: entered allmulticast mode [ 430.257034][T12932] bridge0: port 4(dummy0) entered blocking state [ 430.277692][T12932] bridge0: port 4(dummy0) entered disabled state [ 430.324186][T12936] bridge0: port 4(dummy0) entered disabled state [ 430.385509][T12936] bridge0: port 3(team0) entered disabled state [ 430.425100][T12936] bridge_slave_1: left allmulticast mode [ 430.433720][T12936] bridge_slave_1: left promiscuous mode [ 430.439903][T12936] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.452697][T12936] bridge_slave_0: left promiscuous mode [ 430.459449][T12936] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.988978][T12960] netlink: 'syz.0.2075': attribute type 20 has an invalid length. [ 431.000517][T12960] netlink: 'syz.0.2075': attribute type 21 has an invalid length. [ 431.009508][T12960] netlink: 'syz.0.2075': attribute type 23 has an invalid length. [ 433.528661][T13021] validate_nla: 8 callbacks suppressed [ 433.528698][T13021] netlink: 'syz.1.2092': attribute type 3 has an invalid length. [ 433.589721][T13017] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 433.600205][T13021] __nla_validate_parse: 9 callbacks suppressed [ 433.600238][T13021] netlink: 201372 bytes leftover after parsing attributes in process `syz.1.2092'. [ 433.630262][T13017] syzkaller0: entered promiscuous mode [ 433.666180][T13017] syzkaller0: entered allmulticast mode [ 434.659616][T13048] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.2100'. [ 434.729565][T13048] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.2100'. [ 434.816821][T13049] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2099'. [ 434.911787][T13052] netlink: 'syz.3.2099': attribute type 10 has an invalid length. [ 434.936472][T13052] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2099'. [ 435.505577][T13063] netlink: 'syz.2.2104': attribute type 21 has an invalid length. [ 435.527457][T13063] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2104'. [ 435.545100][ T5781] Bluetooth: hci0: unexpected event 0x10 length: 15 > 1 [ 435.547030][ T5781] Bluetooth: hci0: hardware error 0x00 [ 435.775506][T13075] netlink: 'syz.2.2107': attribute type 21 has an invalid length. [ 435.817277][T13075] netlink: 'syz.2.2107': attribute type 1 has an invalid length. [ 435.922514][T13075] netlink: 'syz.2.2107': attribute type 1 has an invalid length. [ 435.942154][T13075] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.2107'. [ 437.646594][ T5781] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 437.889370][T13114] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.2118'. [ 437.935943][T13114] netlink: 6320 bytes leftover after parsing attributes in process `syz.3.2118'. [ 438.186555][T13129] netlink: 6 bytes leftover after parsing attributes in process `syz.2.2120'. [ 438.195532][T13129] net_ratelimit: 12 callbacks suppressed [ 438.195548][T13129] openvswitch: netlink: Flow actions attr not present in new flow. [ 439.099917][T13142] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.2126'. [ 440.212005][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.218863][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.253440][T13201] netlink: 15179 bytes leftover after parsing attributes in process `syz.2.2140'. [ 441.956254][T13219] netlink: 'syz.1.2146': attribute type 29 has an invalid length. [ 441.977724][T13219] netlink: 'syz.1.2146': attribute type 29 has an invalid length. [ 441.990618][T13220] netlink: 'syz.2.2145': attribute type 13 has an invalid length. [ 442.008765][T13220] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2145'. [ 442.019902][T13222] netlink: 'syz.1.2146': attribute type 29 has an invalid length. [ 442.035286][T13219] netlink: 'syz.1.2146': attribute type 29 has an invalid length. [ 442.062305][T13219] netlink: 'syz.1.2146': attribute type 29 has an invalid length. [ 442.258645][T13224] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2148'. [ 442.432557][T13224] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 442.650964][T13224] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 442.933177][T13224] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 443.017562][T13224] bond0 (unregistering): Released all slaves [ 443.151809][T13235] netlink: 'syz.3.2149': attribute type 1 has an invalid length. [ 443.297208][T13242] netlink: 'syz.3.2151': attribute type 3 has an invalid length. [ 443.315356][T13242] netlink: 'syz.3.2151': attribute type 1 has an invalid length. [ 443.325858][T13242] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.2151'. [ 443.661070][T13252] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 443.675525][T13249] netlink: 'syz.3.2152': attribute type 9 has an invalid length. [ 443.683524][T13249] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2152'. [ 443.706147][T13252] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 443.749131][T13252] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 443.772437][T13252] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 443.830799][T13252] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 443.843266][T13252] batman_adv: batadv0: Removing interface: virt_wifi0 [ 444.277144][T13250] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2152'. [ 444.472984][T13264] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2156'. [ 444.498905][T13264] A link change request failed with some changes committed already. Interface Q6`Ҙ may have been left with an inconsistent configuration, please check. [ 444.625889][T13267] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2155'. [ 444.984720][T13279] netlink: 166900 bytes leftover after parsing attributes in process `syz.1.2157'. [ 445.301844][T13286] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2162'. [ 445.610205][T13286] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 445.791908][T13286] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 445.818946][T13286] veth1_vlan: left allmulticast mode [ 445.938941][T13286] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 446.093912][T13286] bond0 (unregistering): Released all slaves [ 447.292915][T13323] validate_nla: 2 callbacks suppressed [ 447.292932][T13323] netlink: 'syz.3.2168': attribute type 13 has an invalid length. [ 447.307454][T13323] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2168'. [ 447.683404][T13332] netlink: 'syz.2.2171': attribute type 9 has an invalid length. [ 447.702521][T13332] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2171'. [ 448.454694][T13333] netlink: 'syz.2.2171': attribute type 9 has an invalid length. [ 448.466433][T13333] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2171'. [ 448.675692][T13343] delete_channel: no stack [ 448.684601][T13343] delete_channel: no stack [ 448.700681][T13345] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2175'. [ 448.867274][T13349] netlink: 'syz.1.2177': attribute type 3 has an invalid length. [ 448.890986][T13345] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 448.911182][T13349] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2177'. [ 449.134994][T13345] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 449.484794][T13345] .` (unregistering): (slave bridge_slave_1): Releasing backup interface [ 449.561815][T13345] .` (unregistering): (slave netdevsim0): Releasing backup interface [ 449.610939][T13345] .` (unregistering): Released all slaves [ 449.679334][T13361] netlink: 'syz.2.2178': attribute type 13 has an invalid length. [ 449.687429][T13361] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2178'. [ 449.826894][T13363] netlink: 'syz.2.2179': attribute type 10 has an invalid length. [ 449.892834][T13363] mac80211_hwsim hwsim8 wlan1: left promiscuous mode [ 449.907885][T13363] mac80211_hwsim hwsim8 wlan1: left allmulticast mode [ 450.434153][T13390] syzkaller0: entered promiscuous mode [ 450.439825][T13390] syzkaller0: entered allmulticast mode [ 450.453634][T13391] netlink: 'syz.2.2187': attribute type 13 has an invalid length. [ 450.468599][T13391] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2187'. [ 450.478779][T13393] C: renamed from team_slave_0 [ 450.496335][T13393] netlink: 'syz.3.2188': attribute type 1 has an invalid length. [ 450.515938][T13393] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2188'. [ 450.555803][T13393] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 450.604462][T13393] sock: sock_set_timeout: `syz.3.2188' (pid 13393) tries to set negative timeout [ 450.629827][T13390] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.2186'. [ 452.461897][ T5086] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 452.483738][ T5086] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 452.498952][ T5086] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 452.512843][ T5086] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 452.520739][ T5086] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 452.533098][ T5086] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 452.841937][T13420] IPv6: pim6reg1: Disabled Multicast RS [ 452.929558][T13410] chnl_net:caif_netlink_parms(): no params data found [ 453.063578][T13426] netlink: 'syz.1.2197': attribute type 13 has an invalid length. [ 453.075922][T13426] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2197'. [ 453.256729][T13410] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.276130][T13410] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.283419][T13410] bridge_slave_0: entered allmulticast mode [ 453.347494][T13410] bridge_slave_0: entered promiscuous mode [ 453.378096][T13410] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.385285][T13410] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.413539][T13410] bridge_slave_1: entered allmulticast mode [ 453.426769][T13410] bridge_slave_1: entered promiscuous mode [ 453.464691][T13441] netlink: 'syz.3.2199': attribute type 10 has an invalid length. [ 453.504155][T13441] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2199'. [ 453.601764][T13410] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 453.644474][T13410] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 454.605890][ T5086] Bluetooth: hci4: command tx timeout [ 456.283909][T13451] netlink: 'syz.2.2203': attribute type 10 has an invalid length. [ 456.321347][T13410] team0: Port device team_slave_0 added [ 456.343832][T13410] team0: Port device team_slave_1 added [ 456.418822][T13410] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 456.438364][T13410] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 456.492645][T13410] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 456.505276][T13456] netlink: 'syz.3.2205': attribute type 13 has an invalid length. [ 456.519760][T13456] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2205'. [ 456.529834][T13410] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 456.545911][T13410] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 456.603236][T13410] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 456.705841][ T5086] Bluetooth: hci4: command tx timeout [ 457.131628][ T5086] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4 [ 457.598796][T13410] hsr_slave_0: entered promiscuous mode [ 457.696743][T13410] hsr_slave_1: entered promiscuous mode [ 457.714521][T13467] A link change request failed with some changes committed already. Interface 26 may have been left with an inconsistent configuration, please check. [ 457.897700][T13474] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2211'. [ 458.163642][T13410] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 458.185087][T13410] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 458.215146][T13410] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 458.258330][T13480] netlink: 'syz.3.2214': attribute type 5 has an invalid length. [ 458.302419][T13410] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 458.370878][T13483] netlink: 'syz.1.2215': attribute type 13 has an invalid length. [ 458.387449][T13483] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2215'. [ 458.561572][T13410] 8021q: adding VLAN 0 to HW filter on device bond0 [ 458.596629][T13490] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2218'. [ 458.614039][T13410] 8021q: adding VLAN 0 to HW filter on device team0 [ 458.643482][T13490] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2218'. [ 458.664381][T13492] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2218'. [ 458.699842][ T8233] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.707089][ T8233] bridge0: port 1(bridge_slave_0) entered forwarding state [ 458.752510][ T8221] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.759744][ T8221] bridge0: port 2(bridge_slave_1) entered forwarding state [ 458.765938][ T5086] Bluetooth: hci4: command tx timeout [ 458.857854][T13500] netlink: 'syz.3.2220': attribute type 10 has an invalid length. [ 459.226658][T13410] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 460.718860][T13523] netlink: 'syz.2.2224': attribute type 13 has an invalid length. [ 460.737284][T13523] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2224'. [ 460.805621][T13410] veth0_vlan: entered promiscuous mode [ 460.833110][T13410] veth1_vlan: entered promiscuous mode [ 460.845876][ T5086] Bluetooth: hci4: command tx timeout [ 460.907923][T13410] veth0_macvtap: entered promiscuous mode [ 460.918822][T13410] veth1_macvtap: entered promiscuous mode [ 460.940195][T13410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 460.950937][T13410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.961755][T13410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 460.973576][T13410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.028196][T13410] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 461.059647][T13410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 461.097137][T13410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.107288][T13410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 461.129932][T13410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.282916][T13410] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 461.324646][T13533] netlink: 'syz.3.2228': attribute type 6 has an invalid length. [ 461.402114][T13410] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.421787][T13410] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.441241][T13410] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.459260][T13410] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.671932][ T8213] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 461.710980][ T8213] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 461.773432][ T8213] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 461.784577][ T8213] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 462.212026][T13552] netlink: 'syz.2.2232': attribute type 10 has an invalid length. [ 463.206937][ T5781] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 463.218943][ T5781] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 463.227888][ T5781] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 463.266312][ T5781] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 463.276307][ T5781] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 463.284209][ T5781] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 463.812724][ T5086] Bluetooth: hci4: unexpected event 0x05 length: 15 > 4 [ 464.938489][ T8152] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.117298][T13572] chnl_net:caif_netlink_parms(): no params data found [ 465.329203][ T8152] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.407660][T13572] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.411098][ T5086] Bluetooth: hci5: command tx timeout [ 465.425900][T13572] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.433177][T13572] bridge_slave_0: entered allmulticast mode [ 465.468053][T13572] bridge_slave_0: entered promiscuous mode [ 465.518435][T13572] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.525619][T13572] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.566657][T13572] bridge_slave_1: entered allmulticast mode [ 465.588500][T13572] bridge_slave_1: entered promiscuous mode [ 465.720367][ T8152] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.840547][T13572] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 465.913189][ T8152] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.982922][T13572] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 466.094875][T13572] team0: Port device team_slave_0 added [ 466.125539][T13572] team0: Port device team_slave_1 added [ 466.270809][T13572] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 466.290823][T13572] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 466.356426][T13572] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 466.435363][T13572] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 466.461667][T13572] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 466.468113][T13618] netlink: 'syz.3.2249': attribute type 16 has an invalid length. [ 466.551078][T13572] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 466.835358][T13618] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2249'. [ 466.931609][ T8152] ip6gretap0 (unregistering): left allmulticast mode [ 466.948514][ T8152] ip6gretap0 (unregistering): left promiscuous mode [ 466.976194][ T8152] : port 1(ip6gretap0) entered disabled state [ 467.422438][T13572] hsr_slave_0: entered promiscuous mode [ 467.444473][T13572] hsr_slave_1: entered promiscuous mode [ 467.463689][T13572] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 467.487069][T13572] Cannot create hsr debugfs directory [ 467.490999][ T5086] Bluetooth: hci5: command tx timeout [ 467.812340][T13648] netlink: 'syz.3.2253': attribute type 13 has an invalid length. [ 467.830592][T13648] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2253'. [ 467.936475][T13656] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.944131][T13656] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.966333][T13656] bridge0: entered allmulticast mode [ 468.123032][T13660] netlink: 'syz.2.2263': attribute type 13 has an invalid length. [ 468.150411][T13660] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2263'. [ 468.327336][T13666] netlink: 'syz.4.2257': attribute type 4 has an invalid length. [ 468.350452][T13666] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2257'. [ 468.733924][T13669] netlink: 'syz.2.2258': attribute type 1 has an invalid length. [ 468.766341][T13669] netlink: 'syz.2.2258': attribute type 3 has an invalid length. [ 468.774140][T13669] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2258'. [ 469.571696][ T5086] Bluetooth: hci5: command tx timeout [ 470.293046][T13709] netlink: 'syz.3.2266': attribute type 13 has an invalid length. [ 470.302195][T13709] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2266'. [ 470.833991][ T8152] veth0_to_team: left allmulticast mode [ 470.860723][ T8152] veth0_to_team: left promiscuous mode [ 470.881355][ T8152] : port 1(veth0_to_team) entered disabled state [ 470.945326][ T8152] bridge_slave_0: left promiscuous mode [ 470.969879][ T8152] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.003531][ T8152] veth0_macvtap: left promiscuous mode [ 471.014236][ T8152] veth1_vlan: left allmulticast mode [ 471.023801][ T8152] veth1_vlan: left promiscuous mode [ 471.645881][ T5086] Bluetooth: hci5: command tx timeout [ 472.233635][T13572] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 472.273949][T13572] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 472.285077][T13572] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 472.322729][T13572] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 472.549295][T13726] netlink: 61211 bytes leftover after parsing attributes in process `syz.4.2269'. [ 472.591630][T13730] netlink: 2759 bytes leftover after parsing attributes in process `syz.4.2269'. [ 472.640098][T13725] netlink: 35840 bytes leftover after parsing attributes in process `syz.3.2270'. [ 472.805650][T13572] 8021q: adding VLAN 0 to HW filter on device bond0 [ 472.872282][T13572] 8021q: adding VLAN 0 to HW filter on device team0 [ 472.925800][ T8231] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.933862][ T8231] bridge0: port 1(bridge_slave_0) entered forwarding state [ 472.972343][ T8231] bridge0: port 2(bridge_slave_1) entered blocking state [ 472.979574][ T8231] bridge0: port 2(bridge_slave_1) entered forwarding state [ 473.018308][T13739] netlink: 'syz.2.2272': attribute type 25 has an invalid length. [ 473.026822][T13739] netlink: 'syz.2.2272': attribute type 25 has an invalid length. [ 473.043184][T13744] netlink: 'syz.2.2272': attribute type 2 has an invalid length. [ 473.062357][T13744] netlink: 1045 bytes leftover after parsing attributes in process `syz.2.2272'. [ 473.258670][T13751] netlink: 'syz.4.2274': attribute type 13 has an invalid length. [ 473.271629][T13751] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2274'. [ 473.360707][T13756] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2275'. [ 473.858689][T13572] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 474.044690][T13572] veth0_vlan: entered promiscuous mode [ 474.158258][T13572] veth1_vlan: entered promiscuous mode [ 474.249766][T13572] veth0_macvtap: entered promiscuous mode [ 474.307381][T13572] veth1_macvtap: entered promiscuous mode [ 474.375476][T13572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 474.405967][T13572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.440683][T13790] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.2280'. [ 474.443907][T13572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 474.495872][T13572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.526070][T13572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 474.555827][T13572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.577815][T13572] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 474.603440][T13790] netlink: 22808 bytes leftover after parsing attributes in process `syz.3.2280'. [ 474.674641][T13572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 474.715837][T13572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.745929][T13572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 474.768182][T13572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.789672][T13572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 474.811777][T13572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.834860][T13572] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 474.853588][T13801] netlink: 'syz.2.2284': attribute type 13 has an invalid length. [ 474.885987][T13801] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2284'. [ 474.947576][T13572] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.976160][T13572] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.996595][T13572] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.005354][T13572] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.378388][ T8159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 475.404457][ T8159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 475.532643][ T8233] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 475.554112][T13817] syzkaller0: entered promiscuous mode [ 475.554794][ T8233] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 475.584017][T13817] syzkaller0: entered allmulticast mode [ 475.944261][T13832] netlink: 'syz.1.2234': attribute type 13 has an invalid length. [ 475.953715][T13832] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2234'. [ 476.267307][T13844] netlink: 'syz.1.2292': attribute type 13 has an invalid length. [ 476.680240][T13856] netlink: 'syz.1.2295': attribute type 22 has an invalid length. [ 477.101121][T13875] netlink: 'syz.1.2299': attribute type 1 has an invalid length. [ 477.150618][T13874] netlink: 'syz.4.2301': attribute type 13 has an invalid length. [ 477.704458][T13894] __nla_validate_parse: 4 callbacks suppressed [ 477.704504][T13894] netlink: 13695 bytes leftover after parsing attributes in process `syz.3.2305'. [ 478.285639][T13908] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 478.786608][T13919] netlink: 'syz.2.2312': attribute type 13 has an invalid length. [ 478.794851][T13919] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2312'. [ 479.397870][T13933] netlink: 'syz.1.2317': attribute type 10 has an invalid length. [ 479.426595][T13933] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2317'. [ 479.622031][T13944] netlink: 'syz.4.2321': attribute type 13 has an invalid length. [ 479.637695][T13944] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2321'. [ 480.327355][T13948] netlink: 64771 bytes leftover after parsing attributes in process `syz.2.2323'. [ 480.620798][T13972] tap0: tun_chr_ioctl cmd 1074025677 [ 480.656350][T13972] tap0: linktype set to 0 [ 480.776437][T13980] netlink: 'syz.3.2332': attribute type 13 has an invalid length. [ 480.793297][T13980] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2332'. [ 480.894089][T13982] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2334'. [ 481.218355][T13995] netlink: 14560 bytes leftover after parsing attributes in process `syz.1.2339'. [ 481.329162][T13998] netlink: 'syz.4.2341': attribute type 10 has an invalid length. [ 481.360388][T13998] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2341'. [ 481.408543][T13998] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 481.485226][T14001] netlink: 'syz.1.2342': attribute type 12 has an invalid length. [ 481.533287][T14001] netlink: 112 bytes leftover after parsing attributes in process `syz.1.2342'. [ 481.580082][T13998] netlink: 'syz.4.2341': attribute type 4 has an invalid length. [ 481.761587][T14008] openvswitch: netlink: IP tunnel dst address not specified [ 482.025504][ T5781] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 482.034428][ T5781] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 482.043527][ T5781] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 482.046839][T14011] netlink: 'syz.4.2345': attribute type 13 has an invalid length. [ 482.104736][ T5781] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 482.112731][ T5781] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 482.122654][ T5781] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 482.203541][T14021] netlink: 'syz.2.2347': attribute type 2 has an invalid length. [ 482.238251][T14021] netlink: 'syz.2.2347': attribute type 1 has an invalid length. [ 482.276764][ T8213] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.298409][T14022] IPv6: NLM_F_CREATE should be specified when creating new route [ 482.421330][ T8213] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.572042][ T8213] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.738933][ T8213] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.769137][T14035] __nla_validate_parse: 7 callbacks suppressed [ 482.769157][T14035] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2350'. [ 483.025915][T14016] chnl_net:caif_netlink_parms(): no params data found [ 483.404892][T14048] netlink: 144316 bytes leftover after parsing attributes in process `syz.4.2353'. [ 483.933734][T14016] bridge0: port 1(bridge_slave_0) entered blocking state [ 483.950740][T14016] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.961711][T14016] bridge_slave_0: entered allmulticast mode [ 483.973775][T14016] bridge_slave_0: entered promiscuous mode [ 483.981941][T14069] validate_nla: 1 callbacks suppressed [ 483.981957][T14069] netlink: 'syz.4.2355': attribute type 13 has an invalid length. [ 483.996838][T14069] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2355'. [ 484.112782][T14016] bridge0: port 2(bridge_slave_1) entered blocking state [ 484.130718][T14016] bridge0: port 2(bridge_slave_1) entered disabled state [ 484.143986][T14016] bridge_slave_1: entered allmulticast mode [ 484.153215][T14016] bridge_slave_1: entered promiscuous mode [ 484.206199][ T5781] Bluetooth: hci0: command tx timeout [ 484.390328][T14016] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 484.424906][T14016] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 484.505311][T14082] netlink: 'syz.1.2359': attribute type 10 has an invalid length. [ 484.552226][T14082] 8021q: adding VLAN 0 to HW filter on device team0 [ 484.570778][T14082] bond0: (slave team0): Enslaving as an active interface with an up link [ 484.719998][T14016] team0: Port device team_slave_0 added [ 486.287681][ T5781] Bluetooth: hci0: command tx timeout [ 487.502170][T14016] team0: Port device team_slave_1 added [ 487.622743][T14016] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 487.725870][T14016] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 487.772417][T14016] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 487.785684][T14016] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 487.792840][T14016] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 487.819207][T14016] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 487.909577][T14099] netlink: 'syz.2.2364': attribute type 13 has an invalid length. [ 487.924244][T14099] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2364'. [ 488.099974][T14105] netlink: 'syz.2.2365': attribute type 3 has an invalid length. [ 488.109700][T14105] netlink: 201336 bytes leftover after parsing attributes in process `syz.2.2365'. [ 488.149164][T14016] hsr_slave_0: entered promiscuous mode [ 488.188557][T14016] hsr_slave_1: entered promiscuous mode [ 488.222019][T14016] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 488.252380][T14016] Cannot create hsr debugfs directory [ 488.365907][ T5781] Bluetooth: hci0: command tx timeout [ 489.446540][T14130] netlink: 'syz.2.2371': attribute type 10 has an invalid length. [ 489.471399][T14130] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2371'. [ 489.586984][T14139] netlink: 'syz.4.2372': attribute type 13 has an invalid length. [ 489.605159][T14139] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2372'. [ 490.445841][ T5781] Bluetooth: hci0: command tx timeout [ 491.346290][T14157] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 493.108764][T14153] tun0: tun_chr_ioctl cmd 1074025680 [ 493.138420][T14156] netlink: 'syz.2.2376': attribute type 6 has an invalid length. [ 493.156092][T14156] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2376'. [ 493.232557][T14163] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2376'. [ 493.564137][T14188] netlink: 'syz.4.2382': attribute type 13 has an invalid length. [ 493.580601][T14188] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2382'. [ 494.732448][T14016] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 494.862110][T14016] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 495.239777][T14016] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 495.328064][T14211] IPv6: Can't replace route, no match found [ 495.428339][T14220] netlink: 'syz.4.2389': attribute type 33 has an invalid length. [ 495.446046][T14220] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2389'. [ 495.628523][ T8213] veth1_macvtap: left promiscuous mode [ 495.649200][ T8213] veth0_macvtap: left promiscuous mode [ 496.564767][T14241] netlink: 'syz.1.2392': attribute type 29 has an invalid length. [ 496.578442][T14241] netlink: 'syz.1.2392': attribute type 3 has an invalid length. [ 496.594768][T14241] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2392'. [ 497.025110][T14016] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 497.039610][T14233] netlink: 'syz.2.2391': attribute type 13 has an invalid length. [ 497.049619][T14233] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2391'. [ 497.401070][T14016] 8021q: adding VLAN 0 to HW filter on device bond0 [ 497.513083][T14016] 8021q: adding VLAN 0 to HW filter on device team0 [ 497.569604][ T8231] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.576903][ T8231] bridge0: port 1(bridge_slave_0) entered forwarding state [ 497.684504][ T8231] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.691844][ T8231] bridge0: port 2(bridge_slave_1) entered forwarding state [ 497.999371][T14016] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 498.116830][T14265] : renamed from bond_slave_0 [ 498.944851][T14016] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 499.002505][ T5781] Bluetooth: hci4: unexpected event 0x05 length: 15 > 4 [ 499.236404][T14289] netlink: 'syz.1.2400': attribute type 17 has an invalid length. [ 499.412413][T14289] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2400'. [ 499.778870][T14293] netlink: 'syz.2.2401': attribute type 13 has an invalid length. [ 499.820730][T14293] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2401'. [ 500.064246][T14016] veth0_vlan: entered promiscuous mode [ 500.132762][T14016] veth1_vlan: entered promiscuous mode [ 500.205452][T14016] veth0_macvtap: entered promiscuous mode [ 500.233274][T14016] veth1_macvtap: entered promiscuous mode [ 500.273729][T14301] netlink: 'syz.2.2403': attribute type 13 has an invalid length. [ 500.297907][T14301] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2403'. [ 500.342378][T14016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 500.351231][T14305] netlink: 153020 bytes leftover after parsing attributes in process `syz.1.2402'. [ 500.375384][T14016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.398344][T14016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 500.436371][T14016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.476206][T14016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 500.523129][T14016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.550763][T14016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 500.580619][T14016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.618576][T14016] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 500.658116][T14016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 500.695792][T14016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.715905][T14016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 500.746402][T14016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.764581][T14016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 500.784958][T14016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.787965][T14316] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.2404'. [ 500.818478][T14016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 500.855853][T14016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.888598][T14016] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 500.962054][T14016] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.962564][T14316] openvswitch: netlink: Geneve opt len 5 is not a multiple of 4. [ 500.984040][T14016] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.017491][T14016] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.047736][T14016] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.096195][T14317] syzkaller0: entered promiscuous mode [ 501.117965][T14317] syzkaller0: entered allmulticast mode [ 501.652318][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.661832][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.781896][T14345] netlink: 'syz.4.2407': attribute type 9 has an invalid length. [ 502.800686][ T8231] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 502.842990][ T8231] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 502.865796][T14345] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.2407'. [ 503.035408][ T8213] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 503.052361][ T8213] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 503.857136][T14367] netlink: 'syz.2.2410': attribute type 13 has an invalid length. [ 503.878885][T14367] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2410'. [ 504.098878][T14371] netlink: 'syz.1.2412': attribute type 13 has an invalid length. [ 504.144397][T14371] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2412'. [ 504.326694][T14382] netlink: 'syz.1.2415': attribute type 10 has an invalid length. [ 504.374245][T14382] team0: Device ipvlan1 failed to register rx_handler [ 505.016934][ T5086] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 505.026753][ T5086] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 505.035884][ T5086] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 505.044803][ T5086] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 505.054682][ T5086] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 505.062213][ T5086] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 505.191091][T14387] syzkaller0: entered promiscuous mode [ 505.216202][T14387] syzkaller0: entered allmulticast mode [ 507.089596][ T5086] Bluetooth: hci3: command tx timeout [ 507.211413][T14407] netlink: 'syz.1.2421': attribute type 13 has an invalid length. [ 507.219549][T14407] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2421'. [ 507.291033][ T8221] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.325844][T14410] netlink: 'syz.3.2422': attribute type 13 has an invalid length. [ 507.333721][T14410] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2422'. [ 507.444405][T14415] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.2424'. [ 507.461966][ T8221] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.605131][ T8221] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.745451][ T8221] netdevsim netdevsim2 netdevsim0 (unregistering): left promiscuous mode [ 507.768745][ T8221] bridge0: port 5(netdevsim0) entered disabled state [ 507.788182][ T8221] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.044696][T14437] netlink: 13695 bytes leftover after parsing attributes in process `syz.3.2429'. [ 508.144971][T14441] netlink: 'syz.4.2430': attribute type 13 has an invalid length. [ 508.192030][T14441] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2430'. [ 508.258129][T14394] chnl_net:caif_netlink_parms(): no params data found [ 508.382181][T14448] netlink: 'syz.3.2432': attribute type 13 has an invalid length. [ 508.397509][T14448] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2432'. [ 508.813512][T14462] netlink: 'syz.3.2436': attribute type 12 has an invalid length. [ 508.825945][T14452] netlink: 'syz.4.2434': attribute type 10 has an invalid length. [ 508.831452][T14462] netlink: 197276 bytes leftover after parsing attributes in process `syz.3.2436'. [ 508.843910][T14452] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2434'. [ 508.943721][T14464] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.2436'. [ 509.160108][T14469] netlink: 14560 bytes leftover after parsing attributes in process `syz.1.2437'. [ 509.176034][ T5086] Bluetooth: hci3: command tx timeout [ 509.441680][T14470] team0: Port device team_slave_0 removed [ 509.742661][T14490] netlink: 'syz.3.2440': attribute type 10 has an invalid length. [ 509.985243][T14494] netlink: 'syz.1.2441': attribute type 13 has an invalid length. [ 510.011436][T14394] bridge0: port 1(bridge_slave_0) entered blocking state [ 510.023504][T14394] bridge0: port 1(bridge_slave_0) entered disabled state [ 510.053512][T14394] bridge_slave_0: entered allmulticast mode [ 510.069974][T14394] bridge_slave_0: entered promiscuous mode [ 510.255248][T14394] bridge0: port 2(bridge_slave_1) entered blocking state [ 510.273107][T14394] bridge0: port 2(bridge_slave_1) entered disabled state [ 510.285442][T14394] bridge_slave_1: entered allmulticast mode [ 510.307947][T14394] bridge_slave_1: entered promiscuous mode [ 510.329613][T14508] netlink: 'syz.1.2444': attribute type 10 has an invalid length. [ 510.345361][T14508] hsr0: entered promiscuous mode [ 510.353465][T14508] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 510.404964][T14500] netlink: 'syz.4.2443': attribute type 13 has an invalid length. [ 510.639862][T14394] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 510.681497][T14394] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 510.982089][T14394] team0: Port device team_slave_0 added [ 511.121611][T14394] team0: Port device team_slave_1 added [ 511.247711][ T5086] Bluetooth: hci3: command tx timeout [ 511.525203][T14394] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 511.544724][T14394] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 511.616768][T14394] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 511.657308][T14394] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 511.674528][T14394] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 511.729722][T14394] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 511.855076][T14544] netlink: 'syz.4.2452': attribute type 13 has an invalid length. [ 512.083109][T14394] hsr_slave_0: entered promiscuous mode [ 512.109945][T14394] hsr_slave_1: entered promiscuous mode [ 512.136133][T14394] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 512.155746][T14394] Cannot create hsr debugfs directory [ 512.236559][T14560] netlink: 'syz.4.2455': attribute type 2 has an invalid length. [ 513.333996][ T5086] Bluetooth: hci3: command tx timeout [ 513.641470][T14594] netlink: 'syz.3.2462': attribute type 13 has an invalid length. [ 513.706117][T14594] __nla_validate_parse: 5 callbacks suppressed [ 513.706135][T14594] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2462'. [ 513.972135][ T8221] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 513.985859][ T8221] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 514.020369][ T8221] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 514.055848][ T8221] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 514.092131][ T8221] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 514.114374][ T8221] batman_adv: batadv0: Removing interface: virt_wifi0 [ 514.156656][ T8221] bridge_slave_0: left allmulticast mode [ 514.172637][ T8221] bridge_slave_0: left promiscuous mode [ 514.193583][ T8221] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.326474][ T8221] veth1_macvtap: left promiscuous mode [ 514.332131][ T8221] veth0_macvtap: left promiscuous mode [ 514.342908][ T8221] veth1_vlan: left promiscuous mode [ 514.348775][ T8221] veth0_vlan: left promiscuous mode [ 516.620233][T14612] netlink: 'syz.3.2467': attribute type 11 has an invalid length. [ 516.646837][T14612] netlink: 140 bytes leftover after parsing attributes in process `syz.3.2467'. [ 516.936012][T14629] netlink: 'syz.1.2473': attribute type 13 has an invalid length. [ 516.945367][T14629] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2473'. [ 517.059155][T14631] netlink: 14560 bytes leftover after parsing attributes in process `syz.4.2474'. [ 517.166564][T14633] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2474'. [ 517.444705][T14633] team0: Port device team_slave_0 removed [ 517.818612][T14643] netlink: 'syz.1.2475': attribute type 10 has an invalid length. [ 517.847832][T14643] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2475'. [ 518.096312][T14644] netlink: 'syz.1.2475': attribute type 10 has an invalid length. [ 518.350318][T14394] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 518.404218][T14394] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 518.477994][T14394] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 518.563721][T14394] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 518.686412][T14656] netlink: 'syz.4.2480': attribute type 3 has an invalid length. [ 518.725024][T14656] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.2480'. [ 518.977564][T14394] 8021q: adding VLAN 0 to HW filter on device bond0 [ 519.017425][T14664] netlink: 'syz.4.2481': attribute type 10 has an invalid length. [ 519.056230][T14664] hsr0: entered promiscuous mode [ 519.061903][T14664] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 519.341963][ T5086] Bluetooth: hci5: unexpected event 0x05 length: 15 > 4 [ 519.346999][T14394] 8021q: adding VLAN 0 to HW filter on device team0 [ 519.461976][ T8231] bridge0: port 1(bridge_slave_0) entered blocking state [ 519.469297][ T8231] bridge0: port 1(bridge_slave_0) entered forwarding state [ 519.590184][ T8152] bridge0: port 2(bridge_slave_1) entered blocking state [ 519.597480][ T8152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 519.658503][T14668] netlink: 'syz.3.2482': attribute type 13 has an invalid length. [ 519.689799][T14668] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2482'. [ 520.408644][T14394] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 520.430478][T14697] netlink: 65051 bytes leftover after parsing attributes in process `syz.3.2486'. [ 520.579172][T14394] veth0_vlan: entered promiscuous mode [ 520.622869][T14394] veth1_vlan: entered promiscuous mode [ 520.713554][T14394] veth0_macvtap: entered promiscuous mode [ 520.774146][T14394] veth1_macvtap: entered promiscuous mode [ 520.872413][T14394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 520.903440][T14394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 520.936078][T14394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 520.955141][T14394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 520.965966][T14394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 520.984179][T14394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.022624][T14394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 521.053032][T14394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.117818][T14394] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 521.189112][T14394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 521.254629][T14394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.315017][T14394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 521.372405][T14394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.424930][T14394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 521.482191][T14394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.492640][T14394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 521.503163][T14394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.515265][T14394] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 521.542502][T14710] netlink: 11254 bytes leftover after parsing attributes in process `syz.1.2489'. [ 521.629584][T14714] netlink: 'syz.1.2489': attribute type 7 has an invalid length. [ 521.656174][T14714] netlink: 11254 bytes leftover after parsing attributes in process `syz.1.2489'. [ 521.696180][T14394] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.725507][T14394] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.756579][T14394] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.765363][T14394] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.864757][T14724] netlink: 'syz.4.2490': attribute type 21 has an invalid length. [ 521.898173][T14726] netlink: 'syz.4.2490': attribute type 10 has an invalid length. [ 521.927122][T14726] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2490'. [ 521.967218][T14726] bridge0: port 3(hsr0) entered blocking state [ 521.986322][T14726] bridge0: port 3(hsr0) entered disabled state [ 522.006105][T14726] hsr0: entered allmulticast mode [ 522.035843][T14726] hsr_slave_0: entered allmulticast mode [ 522.041829][T14726] hsr_slave_1: entered allmulticast mode [ 522.700842][ T8221] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 522.751533][ T8221] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 522.802396][T14739] wlan1: mtu less than device minimum [ 522.901339][ T8233] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 522.955787][ T8233] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 523.611709][ T5086] Bluetooth: hci4: unexpected event 0x05 length: 15 > 4 [ 524.906799][T14780] netlink: 'syz.1.2498': attribute type 7 has an invalid length. [ 525.143046][T14793] netlink: 212912 bytes leftover after parsing attributes in process `syz.1.2498'. [ 525.252320][T14793] openvswitch: netlink: IP tunnel dst address not specified [ 525.626972][ T5086] Bluetooth: hci3: unexpected event 0x05 length: 15 > 4 [ 527.212120][T14814] netlink: zone id is out of range [ 527.358853][T14814] netlink: set zone limit has 8 unknown bytes [ 527.642962][T14820] netlink: 'syz.4.2502': attribute type 1 has an invalid length. [ 527.698383][T14820] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.2502'. [ 528.886903][T14844] netlink: 'syz.1.2506': attribute type 29 has an invalid length. [ 531.269139][T14844] netlink: 'syz.1.2506': attribute type 29 has an invalid length. [ 532.528291][ T5086] Bluetooth: hci5: unexpected event 0x05 length: 15 > 4 [ 533.116427][ T5086] Bluetooth: hci0: unexpected event 0x05 length: 15 > 4 [ 533.952214][T14902] : renamed from lo (while UP) [ 534.066946][T14902] netlink: 'syz.1.2518': attribute type 4 has an invalid length. [ 534.137809][T14902] netlink: 'syz.1.2518': attribute type 1 has an invalid length. [ 534.145612][T14902] netlink: 63743 bytes leftover after parsing attributes in process `syz.1.2518'. [ 534.673822][T14918] syzkaller0: entered promiscuous mode [ 534.691166][T14918] syzkaller0: entered allmulticast mode [ 536.163936][T14946] netlink: 'syz.3.2531': attribute type 23 has an invalid length. [ 536.176485][T14946] netlink: 156008 bytes leftover after parsing attributes in process `syz.3.2531'. [ 537.098215][ T5086] Bluetooth: hci3: unexpected event 0x05 length: 15 > 4 [ 539.081374][T14979] netlink: 'syz.1.2540': attribute type 2 has an invalid length. [ 540.447176][ T5086] Bluetooth: hci0: unexpected event 0x05 length: 15 > 4 [ 542.107987][T15015] netlink: 'syz.2.2549': attribute type 21 has an invalid length. [ 542.142230][T15015] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2549'. [ 542.185961][T15015] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2549'. [ 542.722060][T15030] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2554'. [ 542.767018][T15030] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2554'. [ 542.878420][T15033] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2554'. [ 542.963496][T15030] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2554'. [ 543.402626][T15050] netlink: 'syz.4.2559': attribute type 23 has an invalid length. [ 543.437448][T15050] netlink: 156008 bytes leftover after parsing attributes in process `syz.4.2559'. [ 545.474276][ T5086] Bluetooth: hci0: unexpected event 0x05 length: 15 > 4 [ 546.145460][ C0] [ 546.145469][ C0] ================================ [ 546.145474][ C0] WARNING: inconsistent lock state [ 546.145492][ C0] syzkaller #0 Not tainted [ 546.145501][ C0] -------------------------------- [ 546.145505][ C0] inconsistent {INITIAL USE} -> {IN-NMI} usage. [ 546.145513][ C0] syz.1.2564/15072 [HC1[1]:SC0[0]:HE0:SE1] takes: [ 546.145532][ C0] ffff888030409238 (&trie->lock){....}-{2:2}, at: trie_delete_elem+0x94/0x630 [ 546.145664][ C0] {INITIAL USE} state was registered at: [ 546.145670][ C0] lock_acquire+0x19e/0x420 [ 546.145695][ C0] _raw_spin_lock_irqsave+0xb4/0x100 [ 546.145800][ C0] trie_update_elem+0xc4/0xd60 [ 546.145818][ C0] bpf_map_update_value+0x64b/0x710 [ 546.145832][ C0] map_update_elem+0x586/0x710 [ 546.145845][ C0] __sys_bpf+0x6b5/0x890 [ 546.145859][ C0] __x64_sys_bpf+0x7c/0x90 [ 546.145873][ C0] do_syscall_64+0x55/0xb0 [ 546.145911][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 546.145989][ C0] irq event stamp: 6724 [ 546.145996][ C0] hardirqs last enabled at (6723): [] syscall_enter_from_user_mode+0x25/0x80 [ 546.146021][ C0] hardirqs last disabled at (6724): [] exc_debug+0x73/0x140 [ 546.146042][ C0] softirqs last enabled at (5508): [] bpf_prog_load+0x1204/0x1610 [ 546.146062][ C0] softirqs last disabled at (5504): [] bpf_ksym_add+0x2c/0x330 [ 546.146083][ C0] [ 546.146083][ C0] other info that might help us debug this: [ 546.146088][ C0] Possible unsafe locking scenario: [ 546.146088][ C0] [ 546.146091][ C0] CPU0 [ 546.146095][ C0] ---- [ 546.146097][ C0] lock(&trie->lock); [ 546.146108][ C0] [ 546.146111][ C0] lock(&trie->lock); [ 546.146120][ C0] [ 546.146120][ C0] *** DEADLOCK *** [ 546.146120][ C0] [ 546.146123][ C0] no locks held by syz.1.2564/15072. [ 546.146130][ C0] [ 546.146130][ C0] stack backtrace: [ 546.146135][ C0] CPU: 0 PID: 15072 Comm: syz.1.2564 Not tainted syzkaller #0 [ 546.146151][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 546.146161][ C0] Call Trace: [ 546.146167][ C0] <#DB> [ 546.146174][ C0] dump_stack_lvl+0x18c/0x250 [ 546.146193][ C0] ? show_regs_print_info+0x20/0x20 [ 546.146214][ C0] ? print_usage_bug+0x43d/0x6a0 [ 546.146233][ C0] ? verify_lock_unused+0x15/0x140 [ 546.146253][ C0] lock_acquire+0x2c2/0x420 [ 546.146273][ C0] ? trie_delete_elem+0x94/0x630 [ 546.146295][ C0] ? read_lock_is_recursive+0x20/0x20 [ 546.146315][ C0] ? look_up_lock_class+0x75/0x140 [ 546.146343][ C0] ? verify_lock_unused+0x15/0x140 [ 546.146363][ C0] _raw_spin_lock_irqsave+0xb4/0x100 [ 546.146384][ C0] ? trie_delete_elem+0x94/0x630 [ 546.146404][ C0] ? _raw_spin_lock+0x40/0x40 [ 546.146423][ C0] ? perf_prepare_sample+0x1558/0x1db0 [ 546.146446][ C0] trie_delete_elem+0x94/0x630 [ 546.146473][ C0] bpf_prog_2c29ac5cdc6b1842+0x42/0x46 [ 546.146491][ C0] bpf_overflow_handler+0x1fc/0x510 [ 546.146513][ C0] ? perf_prepare_header+0x1e0/0x1e0 [ 546.146531][ C0] ? bpf_overflow_handler+0xde/0x510 [ 546.146553][ C0] ? tp_perf_event_destroy+0x20/0x20 [ 546.146578][ C0] ? __perf_event_account_interrupt+0x187/0x280 [ 546.146600][ C0] __perf_event_overflow+0x461/0x660 [ 546.146623][ C0] perf_swevent_event+0x319/0x570 [ 546.146643][ C0] ? perf_tp_event+0x1550/0x1550 [ 546.146662][ C0] ? perf_trace_lock+0xfc/0x3b0 [ 546.146682][ C0] perf_bp_event+0x319/0x430 [ 546.146699][ C0] ? look_up_lock_class+0x75/0x140 [ 546.146722][ C0] ? perf_event_free_bpf_prog+0x120/0x120 [ 546.146739][ C0] ? rcu_is_watching+0x15/0xb0 [ 546.146759][ C0] ? trace_call_bpf+0xc3/0x6c0 [ 546.146781][ C0] ? lock_release+0xb5/0x8c0 [ 546.146813][ C0] ? lock_acquire+0x2c2/0x420 [ 546.146836][ C0] hw_breakpoint_exceptions_notify+0x23e/0x670 [ 546.146879][ C0] notifier_call_chain+0x18f/0x380 [ 546.146907][ C0] ? atomic_notifier_call_chain+0x26/0x180 [ 546.146927][ C0] atomic_notifier_call_chain+0xda/0x180 [ 546.146949][ C0] notify_die+0x145/0x1a0 [ 546.146969][ C0] ? srcu_init_notifier_head+0x90/0x90 [ 546.146993][ C0] ? rcu_is_watching+0x15/0xb0 [ 546.147011][ C0] notify_debug+0x2e/0x50 [ 546.147036][ C0] exc_debug+0xde/0x140 [ 546.147052][ C0] asm_exc_debug+0x1e/0x40 [ 546.147067][ C0] RIP: 0010:rep_movs_alternative+0x33/0x90 [ 546.147096][ C0] Code: 40 83 f9 08 73 21 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb [ 546.147110][ C0] RSP: 0018:ffffc9000548fd50 EFLAGS: 00040202 [ 546.147124][ C0] RAX: 00002000000002c0 RBX: 0000000000000018 RCX: 0000000000000018 [ 546.147134][ C0] RDX: 0000000000000001 RSI: 0000200000000300 RDI: ffffc9000548fdc0 [ 546.147145][ C0] RBP: ffffc9000548fee8 R08: ffffc9000548fdd7 R09: 1ffff92000a91fba [ 546.147157][ C0] R10: dffffc0000000000 R11: fffff52000a91fbb R12: 0000200000000318 [ 546.147168][ C0] R13: 0000000000000018 R14: ffffc9000548fdc0 R15: 0000200000000300 [ 546.147189][ C0] [ 546.147194][ C0] [ 546.147199][ C0] _copy_from_user+0x8b/0xe0 [ 546.147244][ C0] __sys_bpf+0x23e/0x890 [ 546.147263][ C0] ? bpf_link_show_fdinfo+0x390/0x390 [ 546.147289][ C0] ? lock_chain_count+0x20/0x20 [ 546.147313][ C0] __x64_sys_bpf+0x7c/0x90 [ 546.147330][ C0] do_syscall_64+0x55/0xb0 [ 546.147352][ C0] ? clear_bhb_loop+0x40/0x90 [ 546.147368][ C0] ? clear_bhb_loop+0x40/0x90 [ 546.147386][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 546.147403][ C0] RIP: 0033:0x7f6207b9de99 [ 546.147417][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 546.147429][ C0] RSP: 002b:00007f6208a96028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 546.147444][ C0] RAX: ffffffffffffffda RBX: 00007f6207e26090 RCX: 00007f6207b9de99 [ 546.147456][ C0] RDX: 0000000000000018 RSI: 0000200000000300 RDI: 0000000000000007 [ 546.147466][ C0] RBP: 00007f6207c33eaf R08: 0000000000000000 R09: 0000000000000000 [ 546.147476][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 546.147486][ C0] R13: 00007f6207e26128 R14: 00007f6207e26090 R15: 00007ffc5c1e9038 [ 546.147506][ C0]